last executing test programs: 52.436048383s ago: executing program 3 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/141, 0x8d}], 0x1) fsmount(r1, 0x0, 0x0) tkill(r2, 0xb) 52.285175466s ago: executing program 3 (id=101): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/if_inet6\x00') preadv(r0, 0x0, 0x0, 0x0, 0x0) 51.586412859s ago: executing program 3 (id=102): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa02, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @remote}, 0xffffffffffffffff, 0xfffffffc}}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b8703410000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 51.395764936s ago: executing program 3 (id=104): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000007240)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)='\v', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="fe0f09"], 0x1a) 50.445190362s ago: executing program 3 (id=105): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0xfe, 0x0, 0x5, 0xfc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004c9], 0x0, 0x2c0710}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 50.146825578s ago: executing program 3 (id=107): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 41.991353629s ago: executing program 1 (id=129): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_sctp(0x2, 0x3, 0x84) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x50, 0x0, &(0x7f0000000000)=0xd073c8354de4a04d) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x2, 0x10}, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\t', 0xf4c, 0x0, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000000280)="c5", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) syz_emit_vhci(&(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x7) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYRES16=r0], 0xd8) accept4(r2, 0x0, 0x0, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast1}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f00000000c0)='GPL\x00'}, 0x90) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$UI_SET_PHYS(r4, 0x40045567, &(0x7f0000000000)='syz0\x00') connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x0, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) r5 = socket$inet(0x2, 0x4000000805, 0x0) listen(r5, 0x7) pipe2$9p(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x100) write$P9_RWALK(r6, &(0x7f0000000240)={0x23, 0x6f, 0x1, {0x2, [{0x0, 0x0, 0x8}, {0x80, 0x2, 0x5}]}}, 0x23) sendmmsg(r5, &(0x7f0000000e40)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @loopback}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x81, 0x0, 0x0, &(0x7f0000000080)=[{0x10, 0x84, 0x8000}], 0x10}}], 0x2, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000), 0x4) 39.082792989s ago: executing program 1 (id=140): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 35.018533993s ago: executing program 4 (id=146): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/141, 0x8d}], 0x1) tkill(r2, 0xb) 35.018290463s ago: executing program 1 (id=147): socket$alg(0x26, 0x5, 0x0) ioperm(0x0, 0x5, 0x6) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) syz_emit_vhci(&(0x7f0000000200)=ANY=[@ANYBLOB="040e0c00031000", @ANYRESHEX], 0xf) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r1, 0x0, &(0x7f00000005c0)) syz_open_dev$char_usb(0xc, 0xb4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 34.867898857s ago: executing program 4 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff05"]) 34.370784871s ago: executing program 4 (id=153): prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000540)={0x20, 0x0, 0x72, {0x72, 0x30, "b96ce01d73c075d25062c7e9399e64cf0fe4c2d69f953a1cfe8b86bd66b6c0bc8e2783ce95a6d425e1252e888211e305a3271f69caf955237ba2cdaadb07b74dacd76e4ed6b96971b4d675fd5d1c08aeea185fa21c5c5e3ac7fc9260ae533cc3c252e27b6c32085167c94404423e65c5"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000700)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x9, '$'}, @local=@item_4={0x3, 0x2, 0x8, "ccdf9b48"}, @global=@item_4={0x3, 0x1, 0x0, "50cc3497"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x239}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000007c0)={0x20, 0x30, 0x71, "760be0413add1d21c1cdd5d86f5ef3ca24e92b6cdf862e17fb0fd9b99a3f521ef3f759f05286a3384ca2d2404d1682befc7e5e9f2d7bdcdd1c48bf50fff3181c7db3981ab1042bb0e41e7e19088643831c3f3438a3cd3fa7356748215d56b70c6f6c17b9f83ae43748a76afe1239eee247"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x75}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f0000000980), &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x7, 0x7e, {0x7e, 0x22, "2e7ff23226aa50f63d65dbc99b96dd4867009cbc0666abb96e7941288f136c7f86f2eb2863dc996deaa3776203d5608b244e8474ee5beaa9f82a36a96af6d582ec2576e77b6ee8c570bd2c54590d55bb7c776661043fae54a1c84cf6ff07063d56041c34f66cb29a307559c9cf7bb623a7aa9c80fff5fad1fe3fc854"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xd6}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000340)={0x20, 0x82, 0x3, "1ca2be"}, &(0x7f0000000380)={0x20, 0x83, 0x2, '42'}, &(0x7f00000003c0)={0x20, 0x84, 0x3, "b0bd7c"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "146b2f"}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87030d0000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x6}}], 0x30}, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x241}}], 0x20}], 0x4924924924924d0, 0x0) socket(0xf, 0x80000, 0x5) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1b59, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x24) 31.876708385s ago: executing program 2 (id=157): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x2}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r5 = socket$unix(0x1, 0x5, 0x0) r6 = dup2(r5, r4) close_range(r6, 0xffffffffffffffff, 0x0) 30.686267291s ago: executing program 1 (id=158): ioperm(0x0, 0x3, 0x0) eventfd2(0x0, 0xc0801) bind$xdp(0xffffffffffffffff, 0x0, 0x0) setresuid(0x0, 0x0, 0x0) lchown(0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000), 0x10) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$binfmt_misc(r1, 0x0, 0x4) readv(r0, &(0x7f0000000c40)=[{&(0x7f0000000440)=""/194, 0xc2}], 0x1) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000100)="eb", 0x20000101}], 0x1, 0x0) fcntl$setpipe(r1, 0x407, 0x10005) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) pipe2$watch_queue(0x0, 0x80) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000000c0), 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000d06000)=0x1, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0) connect(0xffffffffffffffff, &(0x7f0000000200)=@nl=@unspec, 0x80) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) keyctl$KEYCTL_MOVE(0x1d, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x2a, 0xaf, 0xee, 0x8, 0xaf0, 0x6751, 0x758b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff, 0xff, 0xff}}]}}]}}, 0x0) keyctl$restrict_keyring(0x1d, 0x0, &(0x7f0000000180)='blacklist\x00', &(0x7f00000002c0)='-^\x00') setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600), 0x4) 29.936225168s ago: executing program 2 (id=159): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) r0 = socket$kcm(0x2, 0x0, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xff, 0xfffffffffffffffc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000000c0)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) pipe(0x0) socket$kcm(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000025c0)="866b3d570029a5e6", 0x8) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000580)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="c5", 0x1}, {0x0}, {&(0x7f0000000200)='p&x', 0x3}], 0x3}], 0x1, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r6 = dup2(0xffffffffffffffff, r5) setsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) ioctl$LOOP_CHANGE_FD(r6, 0x4c06, r0) chdir(&(0x7f0000000100)='./file1\x00') setxattr$security_ima(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000380)=@sha1={0x1, "11e4c08b69ad7a48699bd8f9b310da3cc2348f04"}, 0x15, 0x0) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000180)={0x0, 0x1, [@multicast]}) r7 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) quotactl_fd$Q_SETINFO(r7, 0xffffffff80000600, 0x0, &(0x7f0000000040)) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 29.795538531s ago: executing program 4 (id=160): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0) 28.69088324s ago: executing program 4 (id=161): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, &(0x7f00000000c0)={0x1}) chdir(&(0x7f0000000340)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r0, 0x8030942b, &(0x7f0000000040)={0x0, {0x2b}}) r1 = open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) r2 = open(&(0x7f0000007f80)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x1000000201005) 28.380899308s ago: executing program 2 (id=163): r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r1, 0xc0884113, &(0x7f0000000700)) 28.175007916s ago: executing program 2 (id=164): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/141, 0x8d}], 0x1) tkill(r2, 0xb) 27.491054337s ago: executing program 1 (id=165): syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$KDGKBMODE(0xffffffffffffffff, 0x5410, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040), 0x10) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r2, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 27.076867055s ago: executing program 0 (id=166): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000280)) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = dup2(r3, r2) close_range(r4, 0xffffffffffffffff, 0x0) 26.926163168s ago: executing program 0 (id=167): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) signalfd(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) open$dir(&(0x7f0000001640)='./file0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="e40000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988060000009000128009000100766c616e00000000800002800600010002000000100004800c000100040000005d3a00000c0002000d00000000000000580004800c000100fbffffff030000000c00010001000000060000000c00010002000000090000000c00010006000000060000000c", @ANYRES32=r3, @ANYBLOB="08001f008e00000008000d00050000000a000200bbbb"], 0xe4}}, 0x0) 26.466742939s ago: executing program 1 (id=168): syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) mkdir(&(0x7f0000000140)='./control\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x2000003}) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 25.7904213s ago: executing program 2 (id=169): prctl$PR_SET_THP_DISABLE(0x29, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x32, 0xf4, 0x49, 0x10, 0x9c0, 0x201, 0xaa4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe5, 0xa5, 0xc8}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000780)={0x24, &(0x7f0000000540)={0x20, 0x0, 0x72, {0x72, 0x30, "b96ce01d73c075d25062c7e9399e64cf0fe4c2d69f953a1cfe8b86bd66b6c0bc8e2783ce95a6d425e1252e888211e305a3271f69caf955237ba2cdaadb07b74dacd76e4ed6b96971b4d675fd5d1c08aeea185fa21c5c5e3ac7fc9260ae533cc3c252e27b6c32085167c94404423e65c5"}}, &(0x7f0000000680)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x405}}, &(0x7f0000000700)={0x0, 0x22, 0xc, {[@main=@item_012={0x1, 0x0, 0x9, '$'}, @local=@item_4={0x3, 0x2, 0x8, "ccdf9b48"}, @global=@item_4={0x3, 0x1, 0x0, "50cc3497"}]}}, &(0x7f0000000740)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x3, 0x1, {0x22, 0x239}}}}, &(0x7f0000000900)={0x2c, &(0x7f00000007c0)={0x20, 0x30, 0x71, "760be0413add1d21c1cdd5d86f5ef3ca24e92b6cdf862e17fb0fd9b99a3f521ef3f759f05286a3384ca2d2404d1682befc7e5e9f2d7bdcdd1c48bf50fff3181c7db3981ab1042bb0e41e7e19088643831c3f3438a3cd3fa7356748215d56b70c6f6c17b9f83ae43748a76afe1239eee247"}, &(0x7f0000000840)={0x0, 0xa, 0x1, 0x75}, &(0x7f0000000880)={0x0, 0x8, 0x1}, &(0x7f0000000980), &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x4}}) syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x40, 0x7, 0x7e, {0x7e, 0x22, "2e7ff23226aa50f63d65dbc99b96dd4867009cbc0666abb96e7941288f136c7f86f2eb2863dc996deaa3776203d5608b244e8474ee5beaa9f82a36a96af6d582ec2576e77b6ee8c570bd2c54590d55bb7c776661043fae54a1c84cf6ff07063d56041c34f66cb29a307559c9cf7bb623a7aa9c80fff5fad1fe3fc854"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44d}}}, &(0x7f0000000440)={0x44, &(0x7f00000001c0)={0x0, 0x9}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xd6}, &(0x7f00000002c0)={0x0, 0x8, 0x1}, 0x0, &(0x7f0000000340)={0x20, 0x82, 0x3, "1ca2be"}, &(0x7f0000000380)={0x20, 0x83, 0x2, '42'}, &(0x7f00000003c0)={0x20, 0x84, 0x3, "b0bd7c"}, &(0x7f0000000400)={0x20, 0x85, 0x3, "146b2f"}}) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000180)="5c00000013006bcd9e3fe3dc4e48aa31086b87030d0000004000000000000000040014000d000a00100000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r2, &(0x7f0000000040)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x1b59, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, 0x24) 23.012663638s ago: executing program 4 (id=170): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, 0x0, 0x0) 20.974828201s ago: executing program 2 (id=171): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000480)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0x0, r2, {0x7}}, 0x18) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f0000000380)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x7, 0x13, r4, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000000c0)={[0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x8340}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0xc01, 0x3, 0x2a8, 0x210, 0x5002004a, 0xa, 0x0, 0x0, 0x210, 0x3c8, 0x3c8, 0x210, 0x3c8, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0x0, 'veth0_to_team\x00', 'macvtap0\x00'}, 0x60, 0xd8, 0x118, 0x0, {}, [@common=@unspec=@physdev={{0x68}, {'bridge0\x00', {}, 'batadv0\x00', {}, 0x0, 0x4}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "c7a6bc1f54b88fa2267673e9bdbd68ed89f86114fe5e4c4969e359fcb117"}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'pim6reg1\x00', 'veth1_to_bridge\x00'}, 0x0, 0xd8, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x34d) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$pppl2tp(0x18, 0x1, 0x1) connect$rds(0xffffffffffffffff, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 19.008798247s ago: executing program 0 (id=172): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x204410, &(0x7f0000000580)={[{@resuid}]}, 0xfe, 0x4a1, &(0x7f0000000940)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000240)='.\x00', 0x0, 0x0) renameat(r0, &(0x7f0000000400)='./file0\x00', r0, &(0x7f0000000440)='./file1\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r1, &(0x7f0000001600)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000240)='./file0\x00', 0x0) open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) rename(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./file1\x00') statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0) 13.003660735s ago: executing program 0 (id=174): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_TYPE={0x5}, @NFTA_EXTHDR_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x80}}, 0x0) 5.016652541s ago: executing program 0 (id=177): syz_open_procfs(0x0, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) ioctl$KDGKBMODE(0xffffffffffffffff, 0x5410, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bind$llc(0xffffffffffffffff, &(0x7f0000000040), 0x10) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r3, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) 0s ago: executing program 0 (id=178): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000240)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) r2 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000100)=[{&(0x7f00000012c0)=""/141, 0x8d}], 0x1) tkill(r2, 0xb) kernel console output (not intermixed with test programs): netdevsim0 netdevsim2: renamed from eth2 [ 57.435406][ T3554] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.486389][ T3550] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.496099][ T3550] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.511302][ T3550] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.521111][ T3550] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.623399][ T3551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.635253][ T3545] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.655491][ T3545] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.665482][ T3545] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.678162][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 57.694037][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 57.703965][ T3551] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.712229][ T3545] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.729621][ T3544] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.750094][ T3544] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.760904][ T3544] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.771606][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 57.780793][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 57.789809][ T937] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.797222][ T937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.805666][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 57.814669][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 57.823230][ T937] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.830323][ T937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.856512][ T3544] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.867624][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 57.876147][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 57.885608][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 57.913743][ T3554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.924598][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 57.933377][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 57.959788][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 57.967603][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 57.977083][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.013948][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.023392][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.032037][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.040763][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.049191][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.057275][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.071870][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.083996][ T3554] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.109617][ T3550] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.145973][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.161416][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.171325][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.178497][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.217408][ T3550] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.251437][ T3545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.268018][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.277323][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.286238][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.294909][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.301997][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.309911][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.319333][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.328618][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.337503][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.346135][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.353721][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.361450][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.370332][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.378721][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.387136][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.407290][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.416496][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.425149][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.442774][ T3545] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.455537][ T3544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.467435][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.476184][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.485167][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.492250][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.500322][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.508642][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.516962][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.525839][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.534176][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.541227][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.550585][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.558637][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.571832][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.613284][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 58.622831][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 58.632762][ T3595] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.639915][ T3595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.648066][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 58.656796][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 58.665215][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.672291][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.680266][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 58.689202][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.698033][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 58.705636][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 58.712980][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 58.720950][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 58.728607][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 58.737611][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.746232][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.754706][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.763076][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.772216][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 58.780203][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.791154][ T3551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.802672][ T3544] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.814401][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.822826][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.844269][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 58.853049][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 58.869288][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 58.880657][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 58.896371][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 58.908219][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 58.919506][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 58.931358][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 58.943672][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 58.961883][ T3550] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.973989][ T3550] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 58.985449][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 59.002196][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.012173][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.021491][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.030733][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.038908][ T47] Bluetooth: hci2: command tx timeout [ 59.044389][ T47] Bluetooth: hci3: command tx timeout [ 59.048034][ T3559] Bluetooth: hci4: command tx timeout [ 59.049771][ T3553] Bluetooth: hci1: command tx timeout [ 59.061687][ T3598] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.068900][ T3598] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.076694][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.085708][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.094362][ T3598] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.101450][ T3598] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.112227][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.120074][ T3553] Bluetooth: hci0: command tx timeout [ 59.170224][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 59.219012][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.234761][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.242222][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 59.292245][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 59.303966][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 59.319348][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 59.330098][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 59.341334][ T3554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.350979][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 59.372905][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.382722][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.442065][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.466629][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.488284][ T3544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.519111][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.527841][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.537175][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.545624][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.575591][ T3551] device veth0_vlan entered promiscuous mode [ 59.584832][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.592736][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.601302][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.610253][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.618952][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.626834][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.634752][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.642781][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.651026][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 59.658575][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 59.670756][ T3550] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.687785][ T3554] device veth0_vlan entered promiscuous mode [ 59.701516][ T3551] device veth1_vlan entered promiscuous mode [ 59.710220][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.722846][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.732666][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.758811][ T3554] device veth1_vlan entered promiscuous mode [ 59.770477][ T3545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.804514][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.817803][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 59.835185][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 59.843242][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.853654][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.872835][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.887902][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.900662][ T3551] device veth0_macvtap entered promiscuous mode [ 59.923117][ T3550] device veth0_vlan entered promiscuous mode [ 59.934800][ T3551] device veth1_macvtap entered promiscuous mode [ 59.946946][ T3554] device veth0_macvtap entered promiscuous mode [ 59.967755][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 59.976543][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.984497][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.992806][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.002821][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.011034][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.019286][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.028251][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.036966][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.045094][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.052843][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.071060][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.081197][ T3554] device veth1_macvtap entered promiscuous mode [ 60.096018][ T3545] device veth0_vlan entered promiscuous mode [ 60.102546][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.111464][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.120424][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.129114][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.137334][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.146222][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.153597][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.161952][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.170096][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.182116][ T3551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.189651][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.199019][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.214028][ T3544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.226144][ T3550] device veth1_vlan entered promiscuous mode [ 60.242922][ T3545] device veth1_vlan entered promiscuous mode [ 60.258009][ T3551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.268513][ T3551] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.277634][ T3551] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.286592][ T3551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.302212][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.315789][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.326729][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.360679][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.368668][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.377696][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.386031][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.393835][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.402554][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.411455][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.420152][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.430128][ T3554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.440921][ T3554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.453702][ T3554] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.464799][ T3554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.473492][ T3554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.483071][ T3554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.492060][ T3554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.520254][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.529081][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.540596][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.549635][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.568719][ T3545] device veth0_macvtap entered promiscuous mode [ 60.585017][ T3550] device veth0_macvtap entered promiscuous mode [ 60.596531][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.605475][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.613779][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.627615][ T3545] device veth1_macvtap entered promiscuous mode [ 60.638227][ T3550] device veth1_macvtap entered promiscuous mode [ 60.663853][ T3544] device veth0_vlan entered promiscuous mode [ 60.682275][ T3544] device veth1_vlan entered promiscuous mode [ 60.702179][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.710271][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.719438][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.728563][ T3593] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.748499][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.756555][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.773758][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.789364][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.800371][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.810877][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.823171][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.832720][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.843585][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.853835][ T3550] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.864690][ T3550] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.876657][ T3550] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.889212][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.898916][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.899786][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.917963][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.928025][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.938780][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.948843][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.959503][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.970557][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.985598][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.993660][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.001744][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.010384][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.019584][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.028304][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.037394][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.046427][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.059753][ T3550] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.071176][ T3550] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.079992][ T3550] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.089184][ T3550] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.114302][ T3553] Bluetooth: hci3: command tx timeout [ 61.119724][ T3553] Bluetooth: hci4: command tx timeout [ 61.123873][ T47] Bluetooth: hci1: command tx timeout [ 61.125170][ T3553] Bluetooth: hci2: command tx timeout [ 61.137084][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.148233][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.158165][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.170233][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.180794][ T3545] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.191851][ T3545] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.201852][ T3559] Bluetooth: hci0: command tx timeout [ 61.208988][ T3545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.235777][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.244643][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.258875][ T3544] device veth0_macvtap entered promiscuous mode [ 61.269348][ T3545] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.278699][ T3545] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.289503][ T3545] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.298268][ T3545] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.317312][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 61.327364][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 61.341406][ T3544] device veth1_macvtap entered promiscuous mode [ 61.353380][ T33] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.361839][ T33] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.380045][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 61.390736][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 61.399755][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 61.422686][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.441343][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.457679][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.460095][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.475455][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.486121][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.495975][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.509011][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.520582][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.531126][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.543834][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.567786][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.579529][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 61.588538][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 61.604283][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.619591][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.629693][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.640725][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.650887][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.661577][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.671492][ T3544] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.684209][ T3544] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.695534][ T3544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.721404][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 61.733679][ T3604] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 61.764630][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.772711][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.797659][ T3544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.810969][ T3544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.819839][ T3544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.828729][ T3544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.867135][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.876032][ T3628] netlink: 'syz.4.5': attribute type 10 has an invalid length. [ 61.883851][ T3628] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5'. [ 61.903086][ T3628] team0: Port device geneve0 added [ 61.945098][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.953146][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.960152][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.993974][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.042859][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.055672][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.089796][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.098538][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.128466][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.141940][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.171429][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.179737][ T3598] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.214454][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.222443][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.294230][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 62.353433][ T3631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.376423][ T3631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.405417][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 62.662758][ T3647] loop3: detected capacity change from 0 to 512 [ 62.824334][ T3598] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 62.873379][ T3647] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.9: casefold flag without casefold feature [ 62.892041][ T3647] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.9: missing EA_INODE flag [ 62.904615][ T3647] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.9: error while reading EA inode 2 err=-117 [ 62.932589][ T3647] EXT4-fs (loop3): 1 orphan inode deleted [ 62.952660][ T3647] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 63.014283][ T3592] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 63.197567][ T47] Bluetooth: hci1: command tx timeout [ 63.203041][ T47] Bluetooth: hci2: command tx timeout [ 63.210141][ T3559] Bluetooth: hci3: command tx timeout [ 63.245798][ T3598] usb 1-1: config 0 interface 0 has no altsetting 0 [ 63.261489][ T3598] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 63.274714][ T47] Bluetooth: hci0: command tx timeout [ 63.280685][ T3592] usb 2-1: Using ep0 maxpacket: 16 [ 63.286390][ T3598] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.303322][ T3598] usb 1-1: config 0 descriptor?? [ 63.415194][ T3592] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 63.576679][ T3545] EXT4-fs (loop3): unmounting filesystem. [ 63.611837][ T3592] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 63.629259][ T3592] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.669335][ T3592] usb 2-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 63.672964][ T3660] netlink: 'syz.3.12': attribute type 10 has an invalid length. [ 63.731906][ T3592] usb 2-1: Manufacturer: ࠄ [ 63.746509][ T3592] usb 2-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 63.762225][ T3660] netlink: 40 bytes leftover after parsing attributes in process `syz.3.12'. [ 63.823852][ T3660] team0: Port device geneve0 added [ 63.899863][ T3657] loop4: detected capacity change from 0 to 32768 [ 63.911075][ T3657] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.11 (3657) [ 63.953943][ T3657] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 63.970292][ T3657] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 63.976953][ T3662] netlink: 'syz.3.13': attribute type 10 has an invalid length. [ 63.979222][ T3657] BTRFS info (device loop4): using free space tree [ 64.004198][ T3662] netlink: 40 bytes leftover after parsing attributes in process `syz.3.13'. [ 64.138845][ T3676] loop1: detected capacity change from 0 to 512 [ 64.248453][ T3676] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 64.284329][ T3676] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff) [ 64.306560][ T3657] BTRFS info (device loop4): enabling ssd optimizations [ 64.952027][ T3598] video4linux radio32: keene_cmd_main failed (-110) [ 65.008351][ T3598] radio-keene 1-1:0.0: V4L2 device registered as radio32 [ 65.473654][ T26] audit: type=1804 audit(1720347745.005:2): pid=3657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.11" name="/newroot/2/file0/bus" dev="loop4" ino=263 res=1 errno=0 [ 65.493819][ T11] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 65.511973][ T3595] usb 1-1: USB disconnect, device number 2 [ 65.713630][ T3551] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.200650][ T3721] netlink: 'syz.0.24': attribute type 10 has an invalid length. [ 66.209006][ T3721] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 66.245165][ T3721] team0: Port device geneve0 added [ 66.251001][ T3723] netlink: 'syz.3.25': attribute type 10 has an invalid length. [ 66.258947][ T3723] netlink: 40 bytes leftover after parsing attributes in process `syz.3.25'. [ 66.354420][ T937] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 66.404190][ T3591] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 66.429169][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 66.555463][ T3553] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 66.564106][ T3553] Bluetooth: hci4: Injecting HCI hardware error event [ 66.571785][ T3559] Bluetooth: hci4: hardware error 0x00 [ 66.572381][ T3592] usb 2-1: USB disconnect, device number 2 [ 66.594298][ T937] usb 3-1: Using ep0 maxpacket: 32 [ 66.724354][ T937] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.735508][ T937] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 66.749667][ T937] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 66.759369][ T937] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 66.774230][ T3591] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 66.783695][ T3591] usb 5-1: config 1 has no interface number 0 [ 66.790378][ T3591] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 66.793940][ T3733] loop1: detected capacity change from 0 to 32768 [ 66.802014][ T3591] usb 5-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 66.817988][ T937] hub 3-1:4.0: USB hub found [ 66.821895][ T3733] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.29 (3733) [ 66.822953][ T3591] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 66.841709][ T3565] udevd[3565]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 66.883002][ T3733] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 66.898909][ T3733] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 66.907750][ T3733] BTRFS info (device loop1): using free space tree [ 66.942067][ T3733] BTRFS info (device loop1): enabling ssd optimizations [ 67.014242][ T3591] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 67.018938][ T11] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 67.034668][ T3591] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.046298][ T3591] usb 5-1: Product: syz [ 67.053017][ T3591] usb 5-1: Manufacturer: syz [ 67.060658][ T3591] usb 5-1: SerialNumber: syz [ 67.061778][ T26] audit: type=1804 audit(1720347746.605:3): pid=3733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.29" name="/newroot/4/file0/bus" dev="loop1" ino=263 res=1 errno=0 [ 67.074218][ T937] hub 3-1:4.0: config failed, can't read hub descriptor (err -22) [ 67.145309][ T937] usb 3-1: USB disconnect, device number 2 [ 67.237405][ T3550] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 68.211212][ T3775] loop0: detected capacity change from 0 to 512 [ 68.394161][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 68.394290][ T3553] Bluetooth: hci5: command 0x1003 tx timeout [ 68.454232][ T937] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 68.532895][ T3719] netlink: 224 bytes leftover after parsing attributes in process `syz.4.23'. [ 68.585633][ T3591] cdc_ncm 5-1:1.1: bind() failure [ 68.639795][ T3559] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 68.704144][ T937] usb 2-1: Using ep0 maxpacket: 16 [ 68.824537][ T937] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 68.848455][ T3591] usb 5-1: USB disconnect, device number 2 [ 68.994320][ T937] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 69.013592][ T937] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.023693][ T937] usb 2-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 69.074220][ T937] usb 2-1: Manufacturer: ࠄ [ 69.078995][ T3783] netlink: 'syz.2.37': attribute type 10 has an invalid length. [ 69.095626][ T3783] netlink: 40 bytes leftover after parsing attributes in process `syz.2.37'. [ 69.098061][ T937] usb 2-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 69.163017][ T3783] team0: Port device geneve0 added [ 69.249662][ T3785] loop2: detected capacity change from 0 to 512 [ 69.322101][ T3785] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.38: casefold flag without casefold feature [ 69.366168][ T3785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.38: missing EA_INODE flag [ 69.428858][ T3785] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.38: error while reading EA inode 2 err=-117 [ 69.456727][ T3773] loop1: detected capacity change from 0 to 512 [ 69.500110][ T3785] EXT4-fs (loop2): 1 orphan inode deleted [ 69.507012][ T3785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.561544][ T3773] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 69.606286][ T3773] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038 (0x7fffffff) [ 70.590827][ T3805] loop4: detected capacity change from 0 to 2048 [ 70.658837][ T3805] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 70.839844][ T3544] EXT4-fs (loop2): unmounting filesystem. [ 70.854488][ T3710] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.173332][ T3551] EXT4-fs (loop4): unmounting filesystem. [ 71.179355][ T3710] usb 4-1: Using ep0 maxpacket: 16 [ 71.198566][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.205233][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.454240][ T3710] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 71.655668][ T3710] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 71.717668][ T3710] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.793277][ T3710] usb 4-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 72.160957][ T3710] usb 4-1: Manufacturer: ࠄ [ 72.172789][ T3710] usb 4-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 72.954444][ T3559] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 73.074374][ T937] usb 2-1: USB disconnect, device number 3 [ 73.197561][ T3834] loop0: detected capacity change from 0 to 2048 [ 73.337062][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 73.346975][ T3834] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 73.883772][ T3844] loop2: detected capacity change from 0 to 512 [ 74.002723][ T3844] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.52: casefold flag without casefold feature [ 74.021308][ T3844] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.52: missing EA_INODE flag [ 74.138774][ T3844] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.52: error while reading EA inode 2 err=-117 [ 74.190702][ T3844] EXT4-fs (loop2): 1 orphan inode deleted [ 74.198213][ T3844] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 74.227960][ T3710] usb 4-1: USB disconnect, device number 2 [ 74.368354][ T3734] udevd[3734]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.454178][ T3759] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 74.490707][ T3554] EXT4-fs (loop0): unmounting filesystem. [ 74.752398][ T3858] loop3: detected capacity change from 0 to 512 [ 74.793564][ T3544] EXT4-fs (loop2): unmounting filesystem. [ 74.807630][ T3858] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.57: casefold flag without casefold feature [ 74.822428][ T3858] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.57: missing EA_INODE flag [ 74.858161][ T3759] usb 2-1: config 0 interface 0 has no altsetting 0 [ 74.868179][ T3759] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 74.886425][ T3858] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.57: error while reading EA inode 2 err=-117 [ 74.929478][ T3759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.941467][ T3858] EXT4-fs (loop3): 1 orphan inode deleted [ 74.974786][ T3759] usb 2-1: config 0 descriptor?? [ 74.979947][ T3858] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 75.807468][ T3545] EXT4-fs (loop3): unmounting filesystem. [ 75.994191][ T3759] video4linux radio32: keene_cmd_main failed (-71) [ 76.000746][ T3759] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 76.148998][ T937] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.159950][ T3596] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.547115][ T3759] usb 2-1: USB disconnect, device number 4 [ 76.837799][ T22] cfg80211: failed to load regulatory.db [ 76.954641][ T937] usb 1-1: Using ep0 maxpacket: 16 [ 77.006575][ T47] Bluetooth: hci5: sending frame failed (-49) [ 77.013425][ T3559] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 77.079231][ T937] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.153025][ T3894] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.171024][ T3596] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.195799][ T3596] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 77.214236][ T22] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 77.274673][ T937] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 77.285952][ T3596] usb 3-1: config 1 has no interface number 0 [ 77.312691][ T937] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.340862][ T3596] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.371862][ T937] usb 1-1: Product: 琜垴유蘽笏꾞门䳰缣ﱨ쓎쳼ꐚ⚗틔坿䤍釱嚊蓁⮊㭋獆垝쏾軡꺟⯾ꂮ쿱㦐拏岎䧐ﰳ럳慮껖꣱踎뽚㽴炧⻍節欛叓髊﷏㲥螇筘擱㾾㊄⇋⊝을䨽⾕ᐄ磄⣣⹯Ք䖧涑晆璐༽悾ᱺ뀗ာ惆ꄃ䄮ᥜ搗忇ཎ̓䑼ু伒閶緊ἶ쮼㶖現឵ﶂ䨡붻ᣊ猏㌾Ҩ꾑ᢚ炩ꝭ蛠謊 [ 77.432418][ T3596] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 77.464784][ T3596] usb 3-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.555394][ T937] usb 1-1: Manufacturer: ࠄ [ 77.578632][ T937] usb 1-1: SerialNumber: 傧塵μ驨⎍能꾐閛઩畚丫⣲뜫✖⢋渒鳢ᑹ伷ദ剂䬯֑瑿踵ᾠ㙄墵͘婽ꀡ靸蟨᫶杨䋜䩐䈃튚摎軧₅Ꝛ抸籓ᥬӗ靉ႝꫮ훖弦瀫츇ꂄ [ 77.614854][ T22] usb 5-1: config 0 interface 0 has no altsetting 0 [ 77.625615][ T22] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 77.663873][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.694488][ T3596] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.726209][ T3596] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.738745][ T22] usb 5-1: config 0 descriptor?? [ 77.744992][ T3596] usb 3-1: Product: syz [ 77.749507][ T3596] usb 3-1: Manufacturer: syz [ 77.755014][ T3596] usb 3-1: SerialNumber: syz [ 77.862501][ T3289] libceph: connect (1)[c::]:6789 error -101 [ 77.870969][ T3289] libceph: mon0 (1)[c::]:6789 connect error [ 77.956883][ T3901] ceph: No mds server is up or the cluster is laggy [ 78.140977][ T3914] loop1: detected capacity change from 0 to 2048 [ 78.154251][ T3559] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 78.157416][ T937] usb 1-1: USB disconnect, device number 3 [ 78.162821][ T3559] Bluetooth: hci2: Injecting HCI hardware error event [ 78.179728][ T47] Bluetooth: hci2: hardware error 0x00 [ 78.223926][ T3917] loop0: detected capacity change from 0 to 512 [ 78.263717][ T3914] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 78.273800][ T3917] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.73: casefold flag without casefold feature [ 78.303581][ T3917] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.73: missing EA_INODE flag [ 78.315579][ T3917] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.73: error while reading EA inode 2 err=-117 [ 78.337203][ T3917] EXT4-fs (loop0): 1 orphan inode deleted [ 78.342959][ T3917] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 78.564212][ T41] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 78.694336][ T3596] cdc_ncm 3-1:1.1: bind() failure [ 78.715384][ T3596] usb 3-1: USB disconnect, device number 3 [ 78.724601][ T22] video4linux radio32: keene_cmd_main failed (-71) [ 78.737421][ T22] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 78.753451][ T22] usb 5-1: USB disconnect, device number 3 [ 78.874127][ T3554] EXT4-fs (loop0): unmounting filesystem. [ 78.884393][ T41] usb 4-1: Using ep0 maxpacket: 16 [ 78.948303][ T11] Bluetooth: hci5: Frame reassembly failed (-84) [ 78.977323][ T3550] EXT4-fs (loop1): unmounting filesystem. [ 80.003991][ T41] usb 4-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 80.024126][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.044247][ T41] usb 4-1: Product: syz [ 80.048443][ T41] usb 4-1: Manufacturer: syz [ 80.063281][ T41] usb 4-1: SerialNumber: syz [ 80.148705][ T152] libceph: connect (1)[c::]:6789 error -101 [ 80.155977][ T152] libceph: mon0 (1)[c::]:6789 connect error [ 80.165733][ T152] libceph: connect (1)[c::]:6789 error -101 [ 80.174964][ T3951] ceph: No mds server is up or the cluster is laggy [ 80.182299][ T152] libceph: mon0 (1)[c::]:6789 connect error [ 80.204297][ T3758] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 80.594537][ T3758] usb 5-1: config 0 interface 0 has no altsetting 0 [ 80.608847][ T3758] usb 5-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 80.684546][ T3758] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.709737][ T47] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 80.726421][ T41] usb 4-1: config 0 descriptor?? [ 80.735083][ T3758] usb 5-1: config 0 descriptor?? [ 80.768284][ T41] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 80.954847][ T3559] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 80.954888][ T3553] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 80.972087][ T47] Bluetooth: hci5: command 0x1003 tx timeout [ 80.983591][ T3553] Bluetooth: hci3: Injecting HCI hardware error event [ 81.000106][ T47] Bluetooth: hci3: hardware error 0x00 [ 81.411044][ T41] gp8psk: usb in 128 operation failed. [ 81.454406][ T41] gp8psk: usb in 137 operation failed. [ 81.460424][ T41] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 81.494892][ T41] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 82.054792][ T3758] video4linux radio32: keene_cmd_main failed (-71) [ 82.068337][ T3758] radio-keene 5-1:0.0: V4L2 device registered as radio32 [ 82.079611][ T3970] loop2: detected capacity change from 0 to 512 [ 82.148730][ T3974] netlink: 'syz.3.75': attribute type 10 has an invalid length. [ 82.235421][ T41] usb 4-1: media controller created [ 82.253413][ T3758] usb 5-1: USB disconnect, device number 4 [ 82.253577][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.272817][ T3974] netlink: 40 bytes leftover after parsing attributes in process `syz.3.75'. [ 82.293080][ T3970] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz.2.87: casefold flag without casefold feature [ 82.320882][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.329547][ T3974] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.338942][ T41] gp8psk_fe: Frontend revision 1 attached [ 82.345037][ T41] usb 4-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 82.353696][ T41] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 82.364915][ T3970] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz.2.87: missing EA_INODE flag [ 82.392807][ T3974] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.400669][ T3974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.409254][ T3974] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.416405][ T3974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.439907][ T3970] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.87: error while reading EA inode 2 err=-117 [ 82.473533][ T3970] EXT4-fs (loop2): 1 orphan inode deleted [ 82.482329][ T3970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 82.493939][ T3974] team0: Port device bridge0 added [ 82.500318][ T3973] netlink: 'syz.0.86': attribute type 10 has an invalid length. [ 82.508929][ T3973] netlink: 40 bytes leftover after parsing attributes in process `syz.0.86'. [ 82.584292][ T41] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 82.635526][ T41] gp8psk: found Genpix USB device pID = 201 (hex) [ 82.733352][ T3985] loop0: detected capacity change from 0 to 512 [ 82.806977][ T3925] Bluetooth: MGMT ver 1.22 [ 83.028603][ T41] usb 4-1: USB disconnect, device number 3 [ 83.060471][ T3759] libceph: connect (1)[c::]:6789 error -101 [ 83.080246][ T3994] ceph: No mds server is up or the cluster is laggy [ 83.096316][ T3759] libceph: mon0 (1)[c::]:6789 connect error [ 83.097330][ T41] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 83.118327][ T47] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 83.202195][ T3544] EXT4-fs (loop2): unmounting filesystem. [ 85.135097][ T4025] netlink: 'syz.3.102': attribute type 10 has an invalid length. [ 85.207152][ T4025] netlink: 40 bytes leftover after parsing attributes in process `syz.3.102'. [ 86.292019][ T3596] libceph: connect (1)[c::]:6789 error -101 [ 86.304253][ T3596] libceph: mon0 (1)[c::]:6789 connect error [ 86.322233][ T4010] loop2: detected capacity change from 0 to 32768 [ 86.330988][ T4010] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.94 (4010) [ 86.350132][ T4010] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 86.363202][ T4037] ceph: No mds server is up or the cluster is laggy [ 86.371715][ T4010] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 86.380502][ T4010] BTRFS info (device loop2): using free space tree [ 86.735135][ T4010] BTRFS info (device loop2): enabling ssd optimizations [ 86.865159][ T26] audit: type=1804 audit(1720347766.405:4): pid=4010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.94" name="/newroot/21/file0/bus" dev="loop2" ino=263 res=1 errno=0 [ 86.910530][ T3885] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared) [ 86.934268][ T3759] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 87.041027][ T4070] netlink: 'syz.0.109': attribute type 10 has an invalid length. [ 87.063247][ T3544] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 87.074295][ T4070] netlink: 40 bytes leftover after parsing attributes in process `syz.0.109'. [ 87.214184][ T3759] usb 5-1: Using ep0 maxpacket: 16 [ 87.620238][ T4054] loop3: detected capacity change from 0 to 40427 [ 87.634570][ T4054] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 87.654385][ T3759] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 87.663457][ T3759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.672005][ T4054] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 88.081322][ T3759] usb 5-1: Product: syz [ 88.100111][ T3759] usb 5-1: Manufacturer: syz [ 88.154514][ T3759] usb 5-1: SerialNumber: syz [ 88.497871][ T4054] F2FS-fs (loop3): Found nat_bits in checkpoint [ 88.532971][ T3759] usb 5-1: config 0 descriptor?? [ 88.590098][ T4092] loop0: detected capacity change from 0 to 512 [ 88.610177][ T3759] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 88.630901][ T4092] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.116: casefold flag without casefold feature [ 88.647469][ T4092] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.116: missing EA_INODE flag [ 88.679477][ T4092] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.116: error while reading EA inode 2 err=-117 [ 88.691754][ T4054] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 88.699262][ T4054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 88.708362][ T4092] EXT4-fs (loop0): 1 orphan inode deleted [ 88.714192][ T4092] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 88.814312][ T3759] gp8psk: usb in 128 operation failed. [ 88.840594][ T47] Bluetooth: hci0: ISO packet for unknown connection handle 0 [ 88.864262][ T3759] gp8psk: usb in 137 operation failed. [ 88.869887][ T3759] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.900249][ T3759] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 88.914252][ T3759] usb 5-1: media controller created [ 88.931645][ T3759] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 88.950286][ T3759] gp8psk_fe: Frontend revision 1 attached [ 88.956443][ T3759] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 89.126602][ T3759] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 90.481254][ T4119] netlink: 'syz.4.108': attribute type 10 has an invalid length. [ 90.489061][ T4119] netlink: 40 bytes leftover after parsing attributes in process `syz.4.108'. [ 90.664080][ C0] sched: RT throttling activated [ 91.670092][ T4119] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.677552][ T4119] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.723044][ T3554] EXT4-fs (loop0): unmounting filesystem. [ 91.826045][ T4119] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.833462][ T4119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.841970][ T4119] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.849122][ T4119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.934348][ T937] libceph: connect (1)[c::]:6789 error -101 [ 91.940385][ T937] libceph: mon0 (1)[c::]:6789 connect error [ 91.997821][ T4119] team0: Port device bridge0 added [ 92.024945][ T4128] ceph: No mds server is up or the cluster is laggy [ 92.241974][ T4134] netlink: 'syz.4.122': attribute type 10 has an invalid length. [ 92.286395][ T4134] netlink: 40 bytes leftover after parsing attributes in process `syz.4.122'. [ 92.654455][ T3759] gp8psk: usb in 138 operation failed. [ 92.659961][ T3759] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 92.682131][ T3759] gp8psk: found Genpix USB device pID = 201 (hex) [ 93.553505][ T3553] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 93.562224][ T3553] Bluetooth: hci0: Injecting HCI hardware error event [ 93.570199][ T3553] Bluetooth: hci0: hardware error 0x00 [ 93.668818][ T3759] usb 5-1: USB disconnect, device number 5 [ 94.038121][ T4054] F2FS-fs (loop3): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 94.068851][ T4054] syz.3.107: attempt to access beyond end of device [ 94.068851][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 94.089872][ T4054] syz.3.107: attempt to access beyond end of device [ 94.089872][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 94.116433][ T4054] syz.3.107: attempt to access beyond end of device [ 94.116433][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 94.135468][ T4054] syz.3.107: attempt to access beyond end of device [ 94.135468][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 94.161617][ T4054] syz.3.107: attempt to access beyond end of device [ 94.161617][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 94.179696][ T4054] syz.3.107: attempt to access beyond end of device [ 94.179696][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 94.204492][ T4054] syz.3.107: attempt to access beyond end of device [ 94.204492][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 94.221721][ T4054] syz.3.107: attempt to access beyond end of device [ 94.221721][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 94.246947][ T4054] syz.3.107: attempt to access beyond end of device [ 94.246947][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 94.263903][ T4054] syz.3.107: attempt to access beyond end of device [ 94.263903][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 94.544526][ T3549] Bluetooth: hci6: sending frame failed (-49) [ 94.655327][ T3559] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 94.744247][ T47] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 95.981591][ T3553] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 96.327788][ T4071] libceph: connect (1)[c::]:6789 error -101 [ 96.333869][ T4071] libceph: mon0 (1)[c::]:6789 connect error [ 96.477947][ T4169] ceph: No mds server is up or the cluster is laggy [ 96.635267][ T4071] libceph: connect (1)[c::]:6789 error -101 [ 96.641320][ T4071] libceph: mon0 (1)[c::]:6789 connect error [ 96.647709][ T3759] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 97.667735][ T3563] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 97.681308][ T47] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 97.774345][ T3563] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 97.785427][ T47] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 97.793092][ T3563] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 97.810695][ T47] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.426505][ T3563] Bluetooth: hci6: sending frame failed (-49) [ 98.433322][ T3553] Bluetooth: hci6: Opcode 0x1003 failed: -49 [ 98.513091][ T4192] chnl_net:caif_netlink_parms(): no params data found [ 98.898881][ T4192] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.946770][ T4192] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.997299][ T4192] device bridge_slave_0 entered promiscuous mode [ 99.045680][ T4192] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.074845][ T4054] bio_check_eod: 2490 callbacks suppressed [ 99.074860][ T4054] syz.3.107: attempt to access beyond end of device [ 99.074860][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 99.093371][ T4192] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.095211][ T4054] syz.3.107: attempt to access beyond end of device [ 99.095211][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 99.118409][ T4054] syz.3.107: attempt to access beyond end of device [ 99.118409][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 99.125540][ T4192] device bridge_slave_1 entered promiscuous mode [ 99.132853][ T4054] syz.3.107: attempt to access beyond end of device [ 99.132853][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 99.154704][ T4054] syz.3.107: attempt to access beyond end of device [ 99.154704][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 99.169230][ T4054] syz.3.107: attempt to access beyond end of device [ 99.169230][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 99.185259][ T4054] syz.3.107: attempt to access beyond end of device [ 99.185259][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 99.199833][ T4054] syz.3.107: attempt to access beyond end of device [ 99.199833][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 99.216713][ T4054] syz.3.107: attempt to access beyond end of device [ 99.216713][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 99.232305][ T4054] syz.3.107: attempt to access beyond end of device [ 99.232305][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 99.237848][ T4194] loop1: detected capacity change from 0 to 40427 [ 99.327727][ T4192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.345805][ T4194] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 99.384003][ T4194] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 99.415132][ T4192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.489364][ T4194] F2FS-fs (loop1): Found nat_bits in checkpoint [ 99.669589][ T4192] team0: Port device team_slave_0 added [ 99.706200][ T4192] team0: Port device team_slave_1 added [ 99.944213][ T3553] Bluetooth: hci5: command tx timeout [ 100.941087][ T3759] libceph: connect (1)[c::]:6789 error -101 [ 100.949855][ T3759] libceph: mon0 (1)[c::]:6789 connect error [ 101.005192][ T4206] loop2: detected capacity change from 0 to 32768 [ 101.072089][ T4206] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.143 (4206) [ 101.094415][ T4218] ceph: No mds server is up or the cluster is laggy [ 101.246958][ T3759] libceph: connect (1)[c::]:6789 error -101 [ 101.258615][ T3759] libceph: mon0 (1)[c::]:6789 connect error [ 101.657750][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.674703][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.765487][ T4206] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.795960][ T4206] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 101.856377][ T4206] BTRFS info (device loop2): using free space tree [ 101.996903][ T4192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.024422][ T3553] Bluetooth: hci5: command tx timeout [ 102.060036][ T4206] BTRFS error (device loop2): open_ctree failed [ 102.127667][ T4192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.169006][ T4192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.465179][ T4192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.758523][ T4192] device hsr_slave_0 entered promiscuous mode [ 102.814193][ T3758] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 102.840410][ T4192] device hsr_slave_1 entered promiscuous mode [ 102.867205][ T4192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.902497][ T4192] Cannot create hsr debugfs directory [ 102.908322][ T3594] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 103.224129][ T3758] usb 5-1: Using ep0 maxpacket: 16 [ 104.054670][ T3594] usb 2-1: config 0 interface 0 has no altsetting 0 [ 104.068271][ T3594] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75 [ 104.078096][ T3563] Bluetooth: hci5: command tx timeout [ 104.084749][ T4054] bio_check_eod: 2440 callbacks suppressed [ 104.084763][ T4054] syz.3.107: attempt to access beyond end of device [ 104.084763][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 104.105125][ T4054] syz.3.107: attempt to access beyond end of device [ 104.105125][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 104.112462][ T3594] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.120907][ T4054] syz.3.107: attempt to access beyond end of device [ 104.120907][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 104.141310][ T4054] syz.3.107: attempt to access beyond end of device [ 104.141310][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 104.145177][ T3594] usb 2-1: config 0 descriptor?? [ 104.157087][ T4054] syz.3.107: attempt to access beyond end of device [ 104.157087][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 104.174480][ T3758] usb 5-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4 [ 104.174535][ T4054] syz.3.107: attempt to access beyond end of device [ 104.174535][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 104.193997][ T3758] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.199262][ T4054] syz.3.107: attempt to access beyond end of device [ 104.199262][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 104.219524][ T4054] syz.3.107: attempt to access beyond end of device [ 104.219524][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 104.222606][ T3758] usb 5-1: Product: syz [ 104.235367][ T4054] syz.3.107: attempt to access beyond end of device [ 104.235367][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 104.252516][ T4054] syz.3.107: attempt to access beyond end of device [ 104.252516][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 104.285855][ T3758] usb 5-1: Manufacturer: syz [ 104.313222][ T3758] usb 5-1: SerialNumber: syz [ 104.346258][ T3758] usb 5-1: config 0 descriptor?? [ 104.395452][ T3758] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state. [ 104.647627][ T3758] gp8psk: usb in 128 operation failed. [ 104.784547][ T3758] gp8psk: usb in 137 operation failed. [ 104.790050][ T3758] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 104.854542][ T3758] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver) [ 104.897575][ T3758] usb 5-1: media controller created [ 104.972865][ T3758] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 105.063990][ T3758] gp8psk_fe: Frontend revision 1 attached [ 105.090655][ T3758] usb 5-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 105.119331][ T3758] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 105.294395][ T3594] video4linux radio32: keene_cmd_main failed (-71) [ 105.300944][ T3594] radio-keene 2-1:0.0: V4L2 device registered as radio32 [ 105.320316][ T4192] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.371922][ T3594] usb 2-1: USB disconnect, device number 5 [ 105.466577][ T4275] netlink: 'syz.4.153': attribute type 10 has an invalid length. [ 105.501790][ T4275] netlink: 40 bytes leftover after parsing attributes in process `syz.4.153'. [ 105.600537][ T4275] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.607779][ T4275] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.675228][ T3758] gp8psk: usb in 137 operation failed. [ 105.683711][ T3758] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected. [ 105.750082][ T3758] gp8psk: found Genpix USB device pID = 201 (hex) [ 105.822696][ T3758] usb 5-1: USB disconnect, device number 6 [ 107.057968][ T3563] Bluetooth: hci5: command tx timeout [ 107.075110][ T3596] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 107.864318][ T3596] usb 2-1: Using ep0 maxpacket: 8 [ 107.984350][ T3596] usb 2-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 108.042003][ T3596] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.135375][ T3596] usb 2-1: config 0 descriptor?? [ 108.175098][ T3596] hso 2-1:0.0: Can't find BULK IN endpoint [ 108.520688][ T3596] usb 2-1: USB disconnect, device number 6 [ 108.593187][ T22] libceph: connect (1)[c::]:6789 error -101 [ 108.600513][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 108.677480][ T4302] ceph: No mds server is up or the cluster is laggy [ 108.879488][ T937] libceph: connect (1)[c::]:6789 error -101 [ 108.893472][ T937] libceph: mon0 (1)[c::]:6789 connect error [ 108.999401][ T4294] loop4: detected capacity change from 0 to 32768 [ 109.030617][ T4294] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.161 (4294) [ 109.094681][ T4054] bio_check_eod: 2588 callbacks suppressed [ 109.094699][ T4054] syz.3.107: attempt to access beyond end of device [ 109.094699][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 109.115024][ T4054] syz.3.107: attempt to access beyond end of device [ 109.115024][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 109.131020][ T4054] syz.3.107: attempt to access beyond end of device [ 109.131020][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 109.145621][ T4054] syz.3.107: attempt to access beyond end of device [ 109.145621][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 109.162457][ T4054] syz.3.107: attempt to access beyond end of device [ 109.162457][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 109.176975][ T4054] syz.3.107: attempt to access beyond end of device [ 109.176975][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 109.193043][ T4054] syz.3.107: attempt to access beyond end of device [ 109.193043][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 109.207619][ T4054] syz.3.107: attempt to access beyond end of device [ 109.207619][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 109.223609][ T4054] syz.3.107: attempt to access beyond end of device [ 109.223609][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 109.238379][ T4054] syz.3.107: attempt to access beyond end of device [ 109.238379][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 109.424710][ T937] libceph: connect (1)[c::]:6789 error -101 [ 109.437204][ T937] libceph: mon0 (1)[c::]:6789 connect error [ 109.481329][ T3758] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected. [ 110.648413][ T22] libceph: connect (1)[c::]:6789 error -101 [ 110.652802][ T4294] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 110.655373][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 110.668024][ T4192] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.706487][ T4294] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 110.732951][ T4294] BTRFS info (device loop4): using free space tree [ 110.832814][ T4318] loop1: detected capacity change from 0 to 40427 [ 110.855570][ T4192] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.932646][ T4318] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 110.990191][ T4318] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 111.139785][ T4318] F2FS-fs (loop1): Found nat_bits in checkpoint [ 111.156760][ T4192] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.273937][ T4318] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 111.303849][ T4318] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 111.320921][ T3759] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.462361][ T4192] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 111.480488][ T4192] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 111.639989][ T4192] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 111.648537][ T4294] BTRFS error (device loop4): open_ctree failed [ 111.666700][ T4315] netlink: 52 bytes leftover after parsing attributes in process `syz.0.167'. [ 112.656156][ T4315] netlink: 36 bytes leftover after parsing attributes in process `syz.0.167'. [ 112.674770][ T4192] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.634219][ T3759] usb 3-1: Using ep0 maxpacket: 16 [ 114.104801][ T4054] bio_check_eod: 2874 callbacks suppressed [ 114.104821][ T4054] syz.3.107: attempt to access beyond end of device [ 114.104821][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 114.125260][ T4054] syz.3.107: attempt to access beyond end of device [ 114.125260][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 114.141332][ T4054] syz.3.107: attempt to access beyond end of device [ 114.141332][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 114.156069][ T4054] syz.3.107: attempt to access beyond end of device [ 114.156069][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 114.172543][ T4054] syz.3.107: attempt to access beyond end of device [ 114.172543][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 114.187132][ T4054] syz.3.107: attempt to access beyond end of device [ 114.187132][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 114.203216][ T4054] syz.3.107: attempt to access beyond end of device [ 114.203216][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 114.217780][ T4054] syz.3.107: attempt to access beyond end of device [ 114.217780][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 114.233843][ T4054] syz.3.107: attempt to access beyond end of device [ 114.233843][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 114.248473][ T4054] syz.3.107: attempt to access beyond end of device [ 114.248473][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 115.739758][ T4318] F2FS-fs (loop1): f2fs_pin_file_control: Enable GC = ino a after 801 GC trials [ 117.664205][ T3759] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 117.671849][ T3759] usb 3-1: can't read configurations, error -71 [ 118.662192][ T4350] loop0: detected capacity change from 0 to 512 [ 119.114570][ T4318] bio_check_eod: 4698 callbacks suppressed [ 119.114591][ T4318] syz.1.168: attempt to access beyond end of device [ 119.114591][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 119.115145][ T4054] syz.3.107: attempt to access beyond end of device [ 119.115145][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 119.122740][ T4318] syz.1.168: attempt to access beyond end of device [ 119.122740][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 119.134533][ T4054] syz.3.107: attempt to access beyond end of device [ 119.134533][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 119.148225][ T4318] syz.1.168: attempt to access beyond end of device [ 119.148225][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 119.163913][ T4054] syz.3.107: attempt to access beyond end of device [ 119.163913][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 119.177263][ T4318] syz.1.168: attempt to access beyond end of device [ 119.177263][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 119.189358][ T4054] syz.3.107: attempt to access beyond end of device [ 119.189358][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 119.204835][ T4318] syz.1.168: attempt to access beyond end of device [ 119.204835][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 119.220594][ T4054] syz.3.107: attempt to access beyond end of device [ 119.220594][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 119.662967][ T4192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.664698][ T4350] EXT4-fs: error -4 creating inode table initialization thread [ 120.672936][ T4350] EXT4-fs (loop0): mount failed [ 124.124129][ T4054] bio_check_eod: 5564 callbacks suppressed [ 124.124147][ T4054] syz.3.107: attempt to access beyond end of device [ 124.124147][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 124.125183][ T4318] syz.1.168: attempt to access beyond end of device [ 124.125183][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 124.132279][ T4054] syz.3.107: attempt to access beyond end of device [ 124.132279][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 124.143940][ T4318] syz.1.168: attempt to access beyond end of device [ 124.143940][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 124.157853][ T4054] syz.3.107: attempt to access beyond end of device [ 124.157853][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 124.173340][ T4318] syz.1.168: attempt to access beyond end of device [ 124.173340][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 124.186703][ T4054] syz.3.107: attempt to access beyond end of device [ 124.186703][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 124.198367][ T4318] syz.1.168: attempt to access beyond end of device [ 124.198367][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 124.212606][ T4054] syz.3.107: attempt to access beyond end of device [ 124.212606][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 124.228490][ T4318] syz.1.168: attempt to access beyond end of device [ 124.228490][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 124.664750][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.675754][ T937] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 125.667003][ T4192] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.648789][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 128.658918][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 128.667854][ T3594] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.674995][ T3594] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.134105][ T4054] bio_check_eod: 5565 callbacks suppressed [ 129.134123][ T4054] syz.3.107: attempt to access beyond end of device [ 129.134123][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 129.134577][ T4318] syz.1.168: attempt to access beyond end of device [ 129.134577][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 129.140547][ T4054] syz.3.107: attempt to access beyond end of device [ 129.140547][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 129.154372][ T4318] syz.1.168: attempt to access beyond end of device [ 129.154372][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 129.169919][ T4054] syz.3.107: attempt to access beyond end of device [ 129.169919][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 129.183292][ T4318] syz.1.168: attempt to access beyond end of device [ 129.183292][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 129.194960][ T4054] syz.3.107: attempt to access beyond end of device [ 129.194960][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 129.208801][ T4318] syz.1.168: attempt to access beyond end of device [ 129.208801][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 129.224791][ T4054] syz.3.107: attempt to access beyond end of device [ 129.224791][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 129.238544][ T4318] syz.1.168: attempt to access beyond end of device [ 129.238544][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 132.654747][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.661068][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.676271][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 133.645519][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 133.664424][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 133.672990][ T4343] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.680139][ T4343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.144464][ T4318] bio_check_eod: 5559 callbacks suppressed [ 134.144483][ T4318] syz.1.168: attempt to access beyond end of device [ 134.144483][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 134.145213][ T4054] syz.3.107: attempt to access beyond end of device [ 134.145213][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 134.150908][ T4318] syz.1.168: attempt to access beyond end of device [ 134.150908][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 134.164849][ T4054] syz.3.107: attempt to access beyond end of device [ 134.164849][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 134.180326][ T4318] syz.1.168: attempt to access beyond end of device [ 134.180326][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 134.193807][ T4054] syz.3.107: attempt to access beyond end of device [ 134.193807][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 134.205361][ T4318] syz.1.168: attempt to access beyond end of device [ 134.205361][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 134.219214][ T4054] syz.3.107: attempt to access beyond end of device [ 134.219214][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 134.234748][ T4318] syz.1.168: attempt to access beyond end of device [ 134.234748][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 134.248507][ T4054] syz.3.107: attempt to access beyond end of device [ 134.248507][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 137.674448][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 138.675780][ T3596] libceph: connect (1)[c::]:6789 error -101 [ 139.155208][ T4318] bio_check_eod: 5184 callbacks suppressed [ 139.155227][ T4318] syz.1.168: attempt to access beyond end of device [ 139.155227][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 139.155786][ T4054] syz.3.107: attempt to access beyond end of device [ 139.155786][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 139.161647][ T4318] syz.1.168: attempt to access beyond end of device [ 139.161647][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 139.175496][ T4054] syz.3.107: attempt to access beyond end of device [ 139.175496][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 139.190973][ T4318] syz.1.168: attempt to access beyond end of device [ 139.190973][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 139.204467][ T4054] syz.3.107: attempt to access beyond end of device [ 139.204467][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 139.216029][ T4318] syz.1.168: attempt to access beyond end of device [ 139.216029][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 139.229844][ T4054] syz.3.107: attempt to access beyond end of device [ 139.229844][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 139.245380][ T4318] syz.1.168: attempt to access beyond end of device [ 139.245380][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 139.259161][ T4054] syz.3.107: attempt to access beyond end of device [ 139.259161][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 139.635044][ T3596] libceph: mon0 (1)[c::]:6789 connect error [ 139.643095][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 139.671380][ T4368] ceph: No mds server is up or the cluster is laggy [ 140.638689][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 140.651816][ T3596] libceph: connect (1)[c::]:6789 error -101 [ 141.637087][ T3596] libceph: mon0 (1)[c::]:6789 connect error [ 141.642855][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 141.670297][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 143.645303][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 143.654039][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 143.660523][ T22] libceph: connect (1)[c::]:6789 error -101 [ 143.663918][ T4343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 144.164314][ T4318] bio_check_eod: 5550 callbacks suppressed [ 144.164332][ T4318] syz.1.168: attempt to access beyond end of device [ 144.164332][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 144.164700][ T4054] syz.3.107: attempt to access beyond end of device [ 144.164700][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 144.172488][ T4318] syz.1.168: attempt to access beyond end of device [ 144.172488][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 144.186341][ T4054] syz.3.107: attempt to access beyond end of device [ 144.186341][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 144.197904][ T4318] syz.1.168: attempt to access beyond end of device [ 144.197904][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 144.211731][ T4054] syz.3.107: attempt to access beyond end of device [ 144.211731][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 144.227222][ T4318] syz.1.168: attempt to access beyond end of device [ 144.227222][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 144.240605][ T4054] syz.3.107: attempt to access beyond end of device [ 144.240605][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 144.252243][ T4318] syz.1.168: attempt to access beyond end of device [ 144.252243][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 144.266060][ T4054] syz.3.107: attempt to access beyond end of device [ 144.266060][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 144.628588][ T4192] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 144.645847][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 145.656582][ T3596] libceph: connect (1)[c::]:6789 error -101 [ 145.662695][ T3596] libceph: mon0 (1)[c::]:6789 connect error [ 146.675034][ T4192] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 149.176060][ T4318] bio_check_eod: 5571 callbacks suppressed [ 149.176080][ T4318] syz.1.168: attempt to access beyond end of device [ 149.176080][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 149.176298][ T4054] syz.3.107: attempt to access beyond end of device [ 149.176298][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 149.182503][ T4318] syz.1.168: attempt to access beyond end of device [ 149.182503][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 149.196740][ T4054] syz.3.107: attempt to access beyond end of device [ 149.196740][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 149.211875][ T4318] syz.1.168: attempt to access beyond end of device [ 149.211875][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 149.225321][ T4054] syz.3.107: attempt to access beyond end of device [ 149.225321][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 149.236897][ T4318] syz.1.168: attempt to access beyond end of device [ 149.236897][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 149.250716][ T4054] syz.3.107: attempt to access beyond end of device [ 149.250716][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 149.266223][ T4318] syz.1.168: attempt to access beyond end of device [ 149.266223][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 149.279666][ T4054] syz.3.107: attempt to access beyond end of device [ 149.279666][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 152.675615][ T3553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.647878][ T3553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.656243][ T3553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 154.184677][ T4318] bio_check_eod: 5579 callbacks suppressed [ 154.184697][ T4318] syz.1.168: attempt to access beyond end of device [ 154.184697][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 154.185461][ T4054] syz.3.107: attempt to access beyond end of device [ 154.185461][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 154.191143][ T4318] syz.1.168: attempt to access beyond end of device [ 154.191143][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 154.204955][ T4054] syz.3.107: attempt to access beyond end of device [ 154.204955][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 154.220478][ T4318] syz.1.168: attempt to access beyond end of device [ 154.220478][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 154.233832][ T4054] syz.3.107: attempt to access beyond end of device [ 154.233832][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 154.245477][ T4318] syz.1.168: attempt to access beyond end of device [ 154.245477][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 154.259270][ T4054] syz.3.107: attempt to access beyond end of device [ 154.259270][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 154.274818][ T4318] syz.1.168: attempt to access beyond end of device [ 154.274818][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 154.288130][ T4054] syz.3.107: attempt to access beyond end of device [ 154.288130][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 154.635390][ T3553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 154.642898][ T3553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.650247][ T3553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.667562][ T3563] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.653775][ T3563] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.662756][ T3563] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.633918][ T3563] Bluetooth: hci0: command tx timeout [ 157.652593][ T3563] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.660944][ T3559] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.668579][ T3563] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.194519][ T4054] bio_check_eod: 5574 callbacks suppressed [ 159.194537][ T4054] syz.3.107: attempt to access beyond end of device [ 159.194537][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 159.194577][ T4318] syz.1.168: attempt to access beyond end of device [ 159.194577][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 159.200959][ T4054] syz.3.107: attempt to access beyond end of device [ 159.200959][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 159.216483][ T4318] syz.1.168: attempt to access beyond end of device [ 159.216483][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 159.229865][ T4054] syz.3.107: attempt to access beyond end of device [ 159.229865][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 159.241514][ T4318] syz.1.168: attempt to access beyond end of device [ 159.241514][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 159.255322][ T4054] syz.3.107: attempt to access beyond end of device [ 159.255322][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 159.270870][ T4318] syz.1.168: attempt to access beyond end of device [ 159.270870][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 159.284260][ T4054] syz.3.107: attempt to access beyond end of device [ 159.284260][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 159.295872][ T4318] syz.1.168: attempt to access beyond end of device [ 159.295872][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 159.674199][ T3559] Bluetooth: hci0: command tx timeout [ 161.635389][ T3559] Bluetooth: hci3: command tx timeout [ 161.660755][ T3559] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 161.669754][ T3559] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 162.637560][ T3559] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 162.646340][ T3563] Bluetooth: hci0: command tx timeout [ 162.652827][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 162.661067][ T3559] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 162.669295][ T3559] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 162.676665][ T3559] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.674463][ T3559] Bluetooth: hci3: command tx timeout [ 164.206391][ T4318] bio_check_eod: 5573 callbacks suppressed [ 164.206410][ T4318] syz.1.168: attempt to access beyond end of device [ 164.206410][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 164.206423][ T4054] syz.3.107: attempt to access beyond end of device [ 164.206423][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 164.207025][ T4054] syz.3.107: attempt to access beyond end of device [ 164.207025][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 164.212832][ T4318] syz.1.168: attempt to access beyond end of device [ 164.212832][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 164.228387][ T4054] syz.3.107: attempt to access beyond end of device [ 164.228387][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 164.242190][ T4318] syz.1.168: attempt to access beyond end of device [ 164.242190][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 164.253865][ T4054] syz.3.107: attempt to access beyond end of device [ 164.253865][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 164.267204][ T4318] syz.1.168: attempt to access beyond end of device [ 164.267204][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 164.282724][ T4054] syz.3.107: attempt to access beyond end of device [ 164.282724][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 164.296509][ T4318] syz.1.168: attempt to access beyond end of device [ 164.296509][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 164.636351][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 164.655272][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.646857][ T3559] Bluetooth: hci0: command tx timeout [ 165.674743][ T3559] Bluetooth: hci4: command tx timeout [ 166.634354][ T3559] Bluetooth: hci3: command tx timeout [ 166.653182][ T47] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 166.662197][ T47] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 166.670365][ T47] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 167.650300][ T47] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 167.658485][ T47] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 167.666152][ T47] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 168.636960][ T3559] Bluetooth: hci4: command tx timeout [ 169.215270][ T4054] bio_check_eod: 5579 callbacks suppressed [ 169.215288][ T4054] syz.3.107: attempt to access beyond end of device [ 169.215288][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 169.215542][ T4318] syz.1.168: attempt to access beyond end of device [ 169.215542][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 169.221715][ T4054] syz.3.107: attempt to access beyond end of device [ 169.221715][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 169.235521][ T4318] syz.1.168: attempt to access beyond end of device [ 169.235521][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 169.251061][ T4054] syz.3.107: attempt to access beyond end of device [ 169.251061][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 169.264437][ T4318] syz.1.168: attempt to access beyond end of device [ 169.264437][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 169.276085][ T4054] syz.3.107: attempt to access beyond end of device [ 169.276085][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 169.289864][ T4318] syz.1.168: attempt to access beyond end of device [ 169.289864][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 169.305399][ T4054] syz.3.107: attempt to access beyond end of device [ 169.305399][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 169.318717][ T4318] syz.1.168: attempt to access beyond end of device [ 169.318717][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 169.636536][ T3559] Bluetooth: hci3: command tx timeout [ 171.644536][ T3559] Bluetooth: hci4: command tx timeout [ 171.675000][ T3559] Bluetooth: hci6: command tx timeout [ 173.675200][ T47] Bluetooth: hci4: command tx timeout [ 174.224565][ T4318] bio_check_eod: 5552 callbacks suppressed [ 174.224586][ T4318] syz.1.168: attempt to access beyond end of device [ 174.224586][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 174.225078][ T4054] syz.3.107: attempt to access beyond end of device [ 174.225078][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 174.232714][ T4318] syz.1.168: attempt to access beyond end of device [ 174.232714][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 174.244435][ T4054] syz.3.107: attempt to access beyond end of device [ 174.244435][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 174.258232][ T4318] syz.1.168: attempt to access beyond end of device [ 174.258232][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 174.273754][ T4054] syz.3.107: attempt to access beyond end of device [ 174.273754][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 174.287091][ T4318] syz.1.168: attempt to access beyond end of device [ 174.287091][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 174.298744][ T4054] syz.3.107: attempt to access beyond end of device [ 174.298744][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 174.312529][ T4318] syz.1.168: attempt to access beyond end of device [ 174.312529][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 174.328045][ T4054] syz.3.107: attempt to access beyond end of device [ 174.328045][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 174.643590][ T47] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 174.653328][ T47] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 174.662464][ T47] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 174.663077][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.626899][ T47] Bluetooth: hci6: command tx timeout [ 175.634661][ T47] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 175.642639][ T47] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 175.650004][ T47] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 177.674814][ T3559] Bluetooth: hci7: command tx timeout [ 178.635557][ T3559] Bluetooth: hci6: command tx timeout [ 179.235257][ T4054] bio_check_eod: 5578 callbacks suppressed [ 179.235285][ T4054] syz.3.107: attempt to access beyond end of device [ 179.235285][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 179.235387][ T4318] syz.1.168: attempt to access beyond end of device [ 179.235387][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 179.241720][ T4054] syz.3.107: attempt to access beyond end of device [ 179.241720][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 179.255535][ T4318] syz.1.168: attempt to access beyond end of device [ 179.255535][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 179.271074][ T4054] syz.3.107: attempt to access beyond end of device [ 179.271074][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 179.284455][ T4318] syz.1.168: attempt to access beyond end of device [ 179.284455][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 179.296090][ T4054] syz.3.107: attempt to access beyond end of device [ 179.296090][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 179.309868][ T4318] syz.1.168: attempt to access beyond end of device [ 179.309868][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 179.325449][ T4054] syz.3.107: attempt to access beyond end of device [ 179.325449][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 179.338770][ T4318] syz.1.168: attempt to access beyond end of device [ 179.338770][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 179.645896][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.636455][ T3559] Bluetooth: hci6: command tx timeout [ 181.641939][ T3559] Bluetooth: hci7: command tx timeout [ 181.676957][ T3563] Bluetooth: hci1: command 0x0406 tx timeout [ 182.657756][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.674610][ T3563] Bluetooth: hci7: command tx timeout [ 184.244178][ T4054] bio_check_eod: 5550 callbacks suppressed [ 184.244197][ T4054] syz.3.107: attempt to access beyond end of device [ 184.244197][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 184.245401][ T4318] syz.1.168: attempt to access beyond end of device [ 184.245401][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 184.250619][ T4054] syz.3.107: attempt to access beyond end of device [ 184.250619][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 184.264474][ T4318] syz.1.168: attempt to access beyond end of device [ 184.264474][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 184.280073][ T4054] syz.3.107: attempt to access beyond end of device [ 184.280073][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 184.293520][ T4318] syz.1.168: attempt to access beyond end of device [ 184.293520][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 184.305206][ T4054] syz.3.107: attempt to access beyond end of device [ 184.305206][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 184.319798][ T4318] syz.1.168: attempt to access beyond end of device [ 184.319798][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 184.335000][ T4054] syz.3.107: attempt to access beyond end of device [ 184.335000][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 184.348327][ T4318] syz.1.168: attempt to access beyond end of device [ 184.348327][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 186.655005][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.634219][ T3563] Bluetooth: hci7: command tx timeout [ 189.254328][ T4318] bio_check_eod: 5553 callbacks suppressed [ 189.254346][ T4318] syz.1.168: attempt to access beyond end of device [ 189.254346][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 189.256051][ T4054] syz.3.107: attempt to access beyond end of device [ 189.256051][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 189.260782][ T4318] syz.1.168: attempt to access beyond end of device [ 189.260782][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 189.274652][ T4054] syz.3.107: attempt to access beyond end of device [ 189.274652][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 189.290117][ T4318] syz.1.168: attempt to access beyond end of device [ 189.290117][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 189.303507][ T4054] syz.3.107: attempt to access beyond end of device [ 189.303507][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 189.315158][ T4318] syz.1.168: attempt to access beyond end of device [ 189.315158][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 189.329422][ T4054] syz.3.107: attempt to access beyond end of device [ 189.329422][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 189.345324][ T4318] syz.1.168: attempt to access beyond end of device [ 189.345324][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 189.358760][ T4054] syz.3.107: attempt to access beyond end of device [ 189.358760][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 194.264465][ T4054] bio_check_eod: 5577 callbacks suppressed [ 194.264484][ T4054] syz.3.107: attempt to access beyond end of device [ 194.264484][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 194.264693][ T4318] syz.1.168: attempt to access beyond end of device [ 194.264693][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 194.270923][ T4054] syz.3.107: attempt to access beyond end of device [ 194.270923][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 194.284731][ T4318] syz.1.168: attempt to access beyond end of device [ 194.284731][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 194.300372][ T4054] syz.3.107: attempt to access beyond end of device [ 194.300372][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 194.313719][ T4318] syz.1.168: attempt to access beyond end of device [ 194.313719][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 194.325422][ T4054] syz.3.107: attempt to access beyond end of device [ 194.325422][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 194.339210][ T4318] syz.1.168: attempt to access beyond end of device [ 194.339210][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 194.355256][ T4054] syz.3.107: attempt to access beyond end of device [ 194.355256][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 194.368967][ T4318] syz.1.168: attempt to access beyond end of device [ 194.368967][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 194.644475][ T1255] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.650848][ T1255] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.274729][ T4054] bio_check_eod: 5550 callbacks suppressed [ 199.274749][ T4054] syz.3.107: attempt to access beyond end of device [ 199.274749][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.275538][ T4318] syz.1.168: attempt to access beyond end of device [ 199.275538][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 199.282886][ T4054] syz.3.107: attempt to access beyond end of device [ 199.282886][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 199.294569][ T4318] syz.1.168: attempt to access beyond end of device [ 199.294569][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.308393][ T4054] syz.3.107: attempt to access beyond end of device [ 199.308393][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.323916][ T4318] syz.1.168: attempt to access beyond end of device [ 199.323916][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 199.337401][ T4054] syz.3.107: attempt to access beyond end of device [ 199.337401][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 199.349014][ T4318] syz.1.168: attempt to access beyond end of device [ 199.349014][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.363297][ T4054] syz.3.107: attempt to access beyond end of device [ 199.363297][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 199.379227][ T4318] syz.1.168: attempt to access beyond end of device [ 199.379227][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.284214][ T4054] bio_check_eod: 5580 callbacks suppressed [ 204.284235][ T4054] syz.3.107: attempt to access beyond end of device [ 204.284235][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.286236][ T4318] syz.1.168: attempt to access beyond end of device [ 204.286236][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.292370][ T4054] syz.3.107: attempt to access beyond end of device [ 204.292370][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.304050][ T4318] syz.1.168: attempt to access beyond end of device [ 204.304050][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.319878][ T4054] syz.3.107: attempt to access beyond end of device [ 204.319878][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.336063][ T4318] syz.1.168: attempt to access beyond end of device [ 204.336063][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.349374][ T4054] syz.3.107: attempt to access beyond end of device [ 204.349374][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 204.361000][ T4318] syz.1.168: attempt to access beyond end of device [ 204.361000][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.374849][ T4054] syz.3.107: attempt to access beyond end of device [ 204.374849][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 204.391122][ T4318] syz.1.168: attempt to access beyond end of device [ 204.391122][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 206.651039][ T3559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 206.665335][ T3559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 206.673158][ T3559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 207.655332][ T3559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 207.664029][ T3559] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 207.671650][ T3559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 209.295537][ T4318] bio_check_eod: 5576 callbacks suppressed [ 209.295556][ T4318] syz.1.168: attempt to access beyond end of device [ 209.295556][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 209.295733][ T4054] syz.3.107: attempt to access beyond end of device [ 209.295733][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 209.302000][ T4318] syz.1.168: attempt to access beyond end of device [ 209.302000][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 209.315844][ T4054] syz.3.107: attempt to access beyond end of device [ 209.315844][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 209.331403][ T4318] syz.1.168: attempt to access beyond end of device [ 209.331403][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 209.344816][ T4054] syz.3.107: attempt to access beyond end of device [ 209.344816][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 209.356386][ T4318] syz.1.168: attempt to access beyond end of device [ 209.356386][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 209.370206][ T4054] syz.3.107: attempt to access beyond end of device [ 209.370206][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 209.385769][ T4318] syz.1.168: attempt to access beyond end of device [ 209.385769][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 209.399516][ T4054] syz.3.107: attempt to access beyond end of device [ 209.399516][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 211.647359][ T3559] Bluetooth: hci5: command tx timeout [ 212.655651][ T3563] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 212.664987][ T3563] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 212.672629][ T3563] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 213.653056][ T3563] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 213.661737][ T3563] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 213.669603][ T3563] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 214.305070][ T4318] bio_check_eod: 5568 callbacks suppressed [ 214.305090][ T4318] syz.1.168: attempt to access beyond end of device [ 214.305090][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 214.306284][ T4054] syz.3.107: attempt to access beyond end of device [ 214.306284][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 214.311516][ T4318] syz.1.168: attempt to access beyond end of device [ 214.311516][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 214.325781][ T4054] syz.3.107: attempt to access beyond end of device [ 214.325781][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 214.341780][ T4318] syz.1.168: attempt to access beyond end of device [ 214.341780][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 214.355185][ T4054] syz.3.107: attempt to access beyond end of device [ 214.355185][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 214.366795][ T4318] syz.1.168: attempt to access beyond end of device [ 214.366795][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 214.380598][ T4054] syz.3.107: attempt to access beyond end of device [ 214.380598][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 214.396135][ T4318] syz.1.168: attempt to access beyond end of device [ 214.396135][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 214.409519][ T4054] syz.3.107: attempt to access beyond end of device [ 214.409519][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 214.634194][ T47] Bluetooth: hci5: command tx timeout [ 217.644334][ T3563] Bluetooth: hci5: command tx timeout [ 217.644351][ T3559] Bluetooth: hci4: command tx timeout [ 218.643841][ T47] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 218.652677][ T47] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 218.662993][ T47] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 218.672522][ T47] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 219.314138][ T4054] bio_check_eod: 5553 callbacks suppressed [ 219.314157][ T4054] syz.3.107: attempt to access beyond end of device [ 219.314157][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.314452][ T4318] syz.1.168: attempt to access beyond end of device [ 219.314452][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.322294][ T4054] syz.3.107: attempt to access beyond end of device [ 219.322294][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 219.336519][ T4318] syz.1.168: attempt to access beyond end of device [ 219.336519][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 219.347824][ T4054] syz.3.107: attempt to access beyond end of device [ 219.347824][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.361588][ T4318] syz.1.168: attempt to access beyond end of device [ 219.361588][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.377145][ T4054] syz.3.107: attempt to access beyond end of device [ 219.377145][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 219.390477][ T4318] syz.1.168: attempt to access beyond end of device [ 219.390477][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 219.402193][ T4054] syz.3.107: attempt to access beyond end of device [ 219.402193][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.416049][ T4318] syz.1.168: attempt to access beyond end of device [ 219.416049][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 219.671324][ T47] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 220.634138][ T3563] Bluetooth: hci4: command tx timeout [ 220.634145][ T3553] Bluetooth: hci5: command tx timeout [ 220.648057][ T47] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 223.633395][ T47] Bluetooth: hci3: command tx timeout [ 223.639349][ T47] Bluetooth: hci4: command tx timeout [ 224.324570][ T4318] bio_check_eod: 5582 callbacks suppressed [ 224.324588][ T4318] syz.1.168: attempt to access beyond end of device [ 224.324588][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 224.325487][ T4054] syz.3.107: attempt to access beyond end of device [ 224.325487][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 224.332716][ T4318] syz.1.168: attempt to access beyond end of device [ 224.332716][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 224.344442][ T4054] syz.3.107: attempt to access beyond end of device [ 224.344442][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 224.359030][ T4318] syz.1.168: attempt to access beyond end of device [ 224.359030][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 224.374167][ T4054] syz.3.107: attempt to access beyond end of device [ 224.374167][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 224.387454][ T4318] syz.1.168: attempt to access beyond end of device [ 224.387454][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 224.399161][ T4054] syz.3.107: attempt to access beyond end of device [ 224.399161][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 224.412926][ T4318] syz.1.168: attempt to access beyond end of device [ 224.412926][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 224.428507][ T4054] syz.3.107: attempt to access beyond end of device [ 224.428507][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 225.674771][ T47] Bluetooth: hci3: command tx timeout [ 225.674776][ T3559] Bluetooth: hci4: command tx timeout [ 227.661698][ T3553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.670793][ T3553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 228.644851][ T3553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 228.653786][ T3553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 228.664469][ T3553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 228.671861][ T3553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 229.335045][ T4318] bio_check_eod: 5585 callbacks suppressed [ 229.335064][ T4318] syz.1.168: attempt to access beyond end of device [ 229.335064][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.335425][ T4054] syz.3.107: attempt to access beyond end of device [ 229.335425][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.341532][ T4318] syz.1.168: attempt to access beyond end of device [ 229.341532][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 229.355397][ T4054] syz.3.107: attempt to access beyond end of device [ 229.355397][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 229.370865][ T4318] syz.1.168: attempt to access beyond end of device [ 229.370865][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.384629][ T4054] syz.3.107: attempt to access beyond end of device [ 229.384629][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.396232][ T4318] syz.1.168: attempt to access beyond end of device [ 229.396232][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 229.410066][ T4054] syz.3.107: attempt to access beyond end of device [ 229.410066][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 229.425577][ T4318] syz.1.168: attempt to access beyond end of device [ 229.425577][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.438973][ T4054] syz.3.107: attempt to access beyond end of device [ 229.438973][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 229.634243][ T3559] Bluetooth: hci3: command tx timeout [ 231.674354][ T3559] Bluetooth: hci0: command tx timeout [ 232.634557][ T3559] Bluetooth: hci3: command tx timeout [ 234.345124][ T4054] bio_check_eod: 5554 callbacks suppressed [ 234.345143][ T4054] syz.3.107: attempt to access beyond end of device [ 234.345143][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.345277][ T4318] syz.1.168: attempt to access beyond end of device [ 234.345277][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.351654][ T4054] syz.3.107: attempt to access beyond end of device [ 234.351654][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.365520][ T4318] syz.1.168: attempt to access beyond end of device [ 234.365520][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.381052][ T4054] syz.3.107: attempt to access beyond end of device [ 234.381052][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.395262][ T4318] syz.1.168: attempt to access beyond end of device [ 234.395262][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.406551][ T4054] syz.3.107: attempt to access beyond end of device [ 234.406551][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.420323][ T4318] syz.1.168: attempt to access beyond end of device [ 234.420323][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 234.435896][ T4054] syz.3.107: attempt to access beyond end of device [ 234.435896][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 234.449209][ T4318] syz.1.168: attempt to access beyond end of device [ 234.449209][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 235.635588][ T47] Bluetooth: hci0: command tx timeout [ 237.670318][ T3559] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 238.635633][ T3553] Bluetooth: hci0: command tx timeout [ 238.675161][ T3559] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.354183][ T4054] bio_check_eod: 5583 callbacks suppressed [ 239.354202][ T4054] syz.3.107: attempt to access beyond end of device [ 239.354202][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.354391][ T4318] syz.1.168: attempt to access beyond end of device [ 239.354391][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.360635][ T4054] syz.3.107: attempt to access beyond end of device [ 239.360635][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.376190][ T4318] syz.1.168: attempt to access beyond end of device [ 239.376190][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.389611][ T4054] syz.3.107: attempt to access beyond end of device [ 239.389611][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.401331][ T4318] syz.1.168: attempt to access beyond end of device [ 239.401331][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.415536][ T4054] syz.3.107: attempt to access beyond end of device [ 239.415536][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.430997][ T4318] syz.1.168: attempt to access beyond end of device [ 239.430997][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.444411][ T4054] syz.3.107: attempt to access beyond end of device [ 239.444411][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 239.456003][ T4318] syz.1.168: attempt to access beyond end of device [ 239.456003][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 239.633629][ T27] INFO: task syz.3.107:4111 blocked for more than 146 seconds. [ 239.645199][ T3559] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.661790][ T3559] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.669581][ T3559] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 239.674572][ T27] Not tainted 6.1.97-syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 240.654474][ T3559] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 241.645732][ T47] Bluetooth: hci0: command tx timeout [ 242.635626][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 242.664111][ T27] task:syz.3.107 state:D stack:26384 pid:4111 ppid:3545 flags:0x00004004 [ 242.673384][ T27] Call Trace: [ 243.635284][ T3563] Bluetooth: hci6: command tx timeout [ 243.647455][ T27] [ 243.650425][ T27] __schedule+0x142d/0x4550 [ 243.656064][ T27] ? __sched_text_start+0x8/0x8 [ 243.663890][ T27] ? print_irqtrace_events+0x210/0x210 [ 244.364657][ T4318] bio_check_eod: 5571 callbacks suppressed [ 244.364675][ T4318] syz.1.168: attempt to access beyond end of device [ 244.364675][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.364706][ T4054] syz.3.107: attempt to access beyond end of device [ 244.364706][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.371100][ T4318] syz.1.168: attempt to access beyond end of device [ 244.371100][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 244.384937][ T4054] syz.3.107: attempt to access beyond end of device [ 244.384937][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 244.400580][ T4318] syz.1.168: attempt to access beyond end of device [ 244.400580][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.413924][ T4054] syz.3.107: attempt to access beyond end of device [ 244.413924][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.425571][ T4318] syz.1.168: attempt to access beyond end of device [ 244.425571][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 244.439869][ T4054] syz.3.107: attempt to access beyond end of device [ 244.439869][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 244.455407][ T4318] syz.1.168: attempt to access beyond end of device [ 244.455407][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.468748][ T4054] syz.3.107: attempt to access beyond end of device [ 244.468748][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 244.644145][ T27] ? _raw_spin_lock_irq+0xdb/0x110 [ 244.649341][ T27] ? rwsem_spin_on_owner+0x157/0x2e0 [ 244.657400][ T27] schedule+0xbf/0x180 [ 244.661529][ T27] rwsem_down_write_slowpath+0xea1/0x14b0 [ 244.673853][ T27] ? rwsem_down_write_slowpath+0x9e3/0x14b0 [ 245.644131][ T27] ? down_write_killable_nested+0x90/0x90 [ 245.651392][ T27] ? read_lock_is_recursive+0x10/0x10 [ 245.668631][ T27] ? ima_lsm_policy_change+0x620/0x620 [ 245.674402][ T3563] Bluetooth: hci6: command tx timeout [ 245.674648][ T27] ? rwsem_write_trylock+0x166/0x210 [ 246.647483][ T27] ? clear_nonspinnable+0x60/0x60 [ 246.652576][ T27] process_measurement+0x446/0x21b0 [ 246.658184][ T27] ? mark_lock+0x9a/0x340 [ 246.662566][ T27] ? ima_file_mmap+0x1c0/0x1c0 [ 246.667724][ T27] ? dquot_initialize+0x20/0x20 [ 247.645461][ T27] ? aa_get_current_label+0x111/0x1d0 [ 247.650907][ T27] ? apparmor_current_getsecid_subj+0xac/0x110 [ 247.660631][ T27] ima_file_check+0xed/0x170 [ 247.665508][ T27] ? do_dentry_open+0xce4/0x10f0 [ 247.670474][ T27] ? ima_bprm_check+0x2b0/0x2b0 [ 247.675883][ T27] path_openat+0x2687/0x2e60 [ 248.654156][ T27] ? mark_lock+0x9a/0x340 [ 248.658569][ T27] ? do_filp_open+0x480/0x480 [ 248.663292][ T27] do_filp_open+0x230/0x480 [ 248.667858][ T27] ? vfs_tmpfile+0x4a0/0x4a0 [ 248.672484][ T27] ? _raw_spin_unlock+0x24/0x40 [ 249.376318][ T4054] bio_check_eod: 5540 callbacks suppressed [ 249.376338][ T4054] syz.3.107: attempt to access beyond end of device [ 249.376338][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.376366][ T4318] syz.1.168: attempt to access beyond end of device [ 249.376366][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.382763][ T4054] syz.3.107: attempt to access beyond end of device [ 249.382763][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 249.396562][ T4318] syz.1.168: attempt to access beyond end of device [ 249.396562][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 249.412113][ T4054] syz.3.107: attempt to access beyond end of device [ 249.412113][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.425483][ T4318] syz.1.168: attempt to access beyond end of device [ 249.425483][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.437537][ T4054] syz.3.107: attempt to access beyond end of device [ 249.437537][ T4054] loop3: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 249.450922][ T4318] syz.1.168: attempt to access beyond end of device [ 249.450922][ T4318] loop1: rw=0, sector=57344, nr_sectors = 8 limit=40427 [ 249.466525][ T4054] syz.3.107: attempt to access beyond end of device [ 249.466525][ T4054] loop3: rw=524288, sector=57344, nr_sectors = 8 limit=40427 [ 249.479866][ T4318] syz.1.168: attempt to access beyond end of device [ 249.479866][ T4318] loop1: rw=524288, sector=57344, nr_sectors = 8 limit=40427