last executing test programs: 7.575534906s ago: executing program 1 (id=223): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000001e00)=[{{&(0x7f0000001280)={0x2, 0x4e22, @multicast2}, 0x10, 0x0}}, {{&(0x7f00000013c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000001440)=[{&(0x7f0000001400)="4598", 0x2}], 0x1, &(0x7f0000001f40)=ANY=[], 0xc0}}], 0x2, 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0}, 0x0) (async) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f0000000780), 0xfe, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") (async, rerun: 32) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) (rerun: 32) fdatasync(r2) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000008c0), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000140)) (async) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000380)={0x2, &(0x7f0000000100)=[{0x50, 0x1, 0x10, 0x7}, {0x6, 0x93}]}) (async) write$ppp(r3, &(0x7f00000002c0)="4fa1", 0x2) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async, rerun: 32) syz_usb_control_io(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0xd, 0x2, 0x20, 0x48, 0x3, 0x8}, {0x9, 0x5, 0xc, 0x2, 0x200, 0x6}, {0x9, 0x5, 0xa, 0x3, 0x400, 0xf, 0x9e, 0x7}}}}}}]}}, 0x0) syz_usb_control_io$sierra_net(r4, &(0x7f0000000300)={0x14, &(0x7f00000000c0)={0x20, 0x1, 0x52, {0x52, 0x24, "751672ebcff41d35d8dcf96f8cef7adb61e3d868124f131c75c93d4c08978a07a770f00f266c67b2d44cf11dc8d9be0a81a3c8c459a94585d7e22d1fc6e9d06a432b049707d5626c7ecd50dbd6b26fd0"}}, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xc07}}}, &(0x7f0000000840)={0x1c, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f00000003c0)={0xa1, 0x1, 0x400, "db222cf1822219fe18be10aaef5b0fe903598b7df8662361db889419e74ec7b4fe60a845a5e86e6748caddfbd77a115f6fc5676e03b964959a6945c3454e2ec74418450421aab220290b20efcc08ffd46cb6eef3d4855c95d705f5074743ca31720db5b0a96e45df5dc0b0102d419c172c1965d148ad2664e18dbaac5ad03d696dd3495e9dbbe56a92fc50c0b46821a6ca2aab08ea104168721437e57390451fa72fce9f0382726e0f20d91827cfa7cdf38c4ef93b46fc165c7341225b6d084b0b51edfe3256415a8f7afb82ab411eeb84785f58709ab87a9de8482882a5fcba318958354a79a71f342096eb13b5e0ee1b2f6135680b3bb33b05f1ac1b775c39d9e84b94a8a8665738fbfe291345907066a7141b8217f225c5de5677d7e8268780ef09b2e81d9be8222a9d8dc2e289824a63d4acfa6f8af55abc88b7179fffb976a3e7c994085e70a058e92f38827092e8a1b0710900cf57ab9a7ad4d8dd36492783049a321300047c5e81e7464f2e2cfe5ae8f94f56f279393cd7b564050478639c08bc848f3e062957a42c9829c55b9f45af42ce29aa6046f4df2928c7b835c23ff4e955f2a8cc701a8427f499fdacd17b7bc0bdcc5b317990c3a1dd8079ec52cb6f7b19012fcd809f9f45b962426bb7891e3ed90809b02bb56604508c795265f2578df9301dd1b079b859470e221d08b8a2d38e1edd4eb22cd63fa2c88f941b63ba9dcac553d5f84a5063d999adf723200e19730f103e24043f4cbb8cc37091c9919e490e7da636080602a396c25e6d87b552260c09d4c0ebb5c6427e657d79180e922ec8ea38c79e35c850548d26f833f901415c293f60843a846f7f634bb41593339323fee715bb446a2fe8c739a3b200fc005574dc8d107768350e032d8da79f8de1bebd3b431737ae2f7664733dca0b0c75e825d86f6e1bea7bc6f10973e54ad0ed804ad36c66e3ac31279c25ecb133c86eb18880d26521cb6bbfcb6fba872b242e02acb9f129a0f1e37997a506b89cb7294066115b3b4cf916f7ccb03e01e8bbf9bf739cac7b761b6d7133447d11fa429d3b988fe5e85e2bea8c2dca4dd757a656018dec6f8c45fd0e49958221695df5e3c7dbaf483a6dabd0e1e5b948111f4170b5699fb81f86eb8eda7747e9f021023901881b8e7e3088a79f51f4e7c5bdffcccd2c3ef556d6c87c226c81acdb4d769d6a7b253eb84a503fac8d670e44c8a1a9a8b3613a5fae4dcaffefc9f3c830154b8649c4c66c321c52566f4728ac65e91a9b3e97062b9e394bbe914d9161549afd6bb318f7ccce4f4e2f2fdb1725949f14d459c631599e546ceb58daab235653d1bdd8f56ee73bbb896871c3a8f04b65dc6eb504de534c681a99ecc9caa2807b7b217ce5f5c8df05f7e7f1fa420f74214767478f69ff67e423db526bf5ee43b6e5a41fb9908ca59ee226a6f6"}, &(0x7f0000000800)}) syz_usb_control_io$hid(r0, 0x0, 0x0) write$binfmt_register(r2, &(0x7f0000000340)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x200, 0x3a, 'reiserfs\x00', 0x3a, 'reiserfs\x00', 0x3a, './file1', 0x3a, [0x43, 0x50, 0x43, 0x46, 0x50, 0x50]}, 0x3f) 6.543848924s ago: executing program 1 (id=230): r0 = gettid() prlimit64(0x0, 0x5, &(0x7f00000001c0)={0x9, 0x4000000000002}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x8, &(0x7f0000000640)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x1000000}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x1}, 0x10, 0xffffffffffffffff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) ptrace$ARCH_SHSTK_DISABLE(0x1e, r0, 0x2, 0x5002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0x7ffff000}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={0x0, 0x108}, 0x1, 0x7}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x28) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x7, 0x8000000, 0x0, 0x4000000000, 0x7, 0x0, 0x5, 0x1, 0x2, 0xffffffffffffffff], 0x2, 0x200}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x7, 0x8006, 0x4004, 0x2, 0x4, 0x80, 0xb, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x6], 0xffff1000, 0x41901}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x7, 0x204, 0x5, 0x3, 0x1, 0x976e, 0xd, 0x0}, &(0x7f00000000c0)=0x20) setsockopt$inet_sctp6_SCTP_RTOINFO(r8, 0x84, 0x0, &(0x7f0000000100)={r9, 0x2, 0x5fe9}, 0x10) 5.874972138s ago: executing program 3 (id=232): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000040)=0x1c, 0x0) getsockopt$IP_SET_OP_VERSION(r0, 0x1, 0x53, &(0x7f0000000080), &(0x7f00000000c0)=0x8) syz_usb_connect$uac1(0x0, 0xa9, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x0, 0x0, 0x2, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0x3}, [@feature_unit={0x13, 0x24, 0x6, 0x0, 0x0, 0x6, [0x0, 0x0, 0x0, 0x0, 0xa, 0x0]}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x0, 0x0, 0x3}, @selector_unit={0x9, 0x24, 0x5, 0x0, 0x7, '\x00\x00\x00\x00'}, @output_terminal={0x9, 0x24, 0x3, 0x0, 0x1ff, 0x4, 0x4}, @selector_unit={0xa, 0x24, 0x5, 0x4, 0x2, "00008b85ac"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x3, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x0, 0x0, 0x80, {0x7, 0x25, 0x1, 0x0, 0x0, 0xff1d}}}}}}}]}}, 0x0) 5.488393165s ago: executing program 1 (id=233): syz_open_dev$video4linux(&(0x7f0000000540), 0x0, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @broadcast}, 0x4, 0x3, 0x5, 0x1}}, 0x2e) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) syz_usb_control_io$cdc_ecm(r1, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) 4.447429375s ago: executing program 3 (id=237): personality(0x87bf5ac905ea0f7f) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) (async) io_setup(0x2, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) listen(r2, 0x3) (async) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) (async) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, r3, 0x0) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x7c, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) pselect6(0x40, &(0x7f0000000040)={0x1, 0xfffffffffffffffe, 0x80000001, 0x8, 0x0, 0x81, 0x2cb7863, 0x7}, &(0x7f00000000c0)={0x7, 0x1ff, 0x54f9dc63, 0x80, 0x8000, 0x1, 0x7, 0xa}, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={[0xff]}, 0x8}) 3.579754308s ago: executing program 1 (id=239): r0 = memfd_create(&(0x7f00000008c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x0) lseek(r0, 0x1, 0x1) (async) r1 = openat$damon_kdamond_pid(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x8) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x5, 0x448, 0x1d0, 0x1d0, 0xffffffff, 0x0, 0x100, 0x3b0, 0x3b0, 0xffffffff, 0x3b0, 0x3b0, 0x5, &(0x7f00000001c0), {[{{@uncond, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x9]}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv6=@loopback, [0xffffff00, 0xffffff00, 0xff000000, 0xff000000], 0x4e20, 0x4e22, 0x4e22, 0x4e23, 0x200, 0xff, 0x3, 0x8001, 0x10}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, 0x0, 0xff000000, 'bridge_slave_0\x00', 'erspan0\x00', {}, {}, 0x89, 0x3, 0x41}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x12, "33bd"}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x10, @dev={0xac, 0x14, 0x14, 0x13}, @multicast1, @icmp_id=0x64, @gre_key=0xa1}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0xf}, @dev={0xac, 0x14, 0x14, 0x20}, 0xff000000, 0xff, 'veth0_to_hsr\x00', 'veth0\x00', {}, {0xff}, 0x73, 0x2, 0x11}, 0x0, 0xd8, 0x138, 0x0, {}, [@common=@ttl={{0x28}, {0x1, 0x1}}, @common=@set={{0x40}, {{0x3, [0x5, 0x4, 0x5, 0x4, 0xa], 0x0, 0x6}}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="1815ee1cff88", 0x8, 0xa, [0x3, 0x3f, 0x1f, 0x12, 0x27, 0x1c, 0x12, 0x0, 0x2d, 0xf, 0x36, 0x38, 0x1d, 0xb, 0x18, 0x35], 0x1, 0xc7, 0x71db}}}, {{@uncond, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x14, @empty, @empty, @gre_key=0x6, @gre_key=0x7}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4a8) (async, rerun: 32) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) (rerun: 32) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x0, 0x22, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0xdf}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="b400000000000000791028000000000069002600000000009500740000000000", @ANYRESDEC], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xa4, &(0x7f000000cf3d)=""/164, 0x0, 0x25, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) (rerun: 32) ioctl$VIDIOC_S_AUDIO(r1, 0x40345622, &(0x7f0000000bc0)={0x1, "cf8cc325ed8897f269a79ba6215b3e63b9a57fa16ea1295dac592cef153130bf", 0x2, 0x1}) (async) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x458, 0x138, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfc, 0x3, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000100), 0x2, 0x181) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) r4 = fanotify_init(0x200, 0x0) fanotify_mark(r4, 0x180, 0x8000063, 0xffffffffffffff9c, 0x0) (async, rerun: 32) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') (async, rerun: 32) close(0x3) (async, rerun: 64) syz_usb_control_io(r3, &(0x7f0000000040)={0x2c, &(0x7f0000000100)={0x2fe2619e3185a097, 0xa, 0xa9, {0xa9, 0x21, "5bed65f7be50b118b289f79355b4dcadaed4963a5a04ead9ec4cb7ff01ce6655902c445d94699ac08432decb303d33e052a41a1d8e447243e0f2e80cb60fc11ec864fe7323b42467ad5398c116c5d8378e0565210845ee96ac7b48bc936676bcf60eea56b4e40c04ea327c2f8998c99a4a715eca1698de7c7cd6e4051af929f3056375e4b49c505873c5eee256972797a9ad3f6d6962d40220d360c5c9687b8c34612d470468a8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) (async, rerun: 64) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r6) sendmsg$NL80211_CMD_SET_BEACON(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000140)={0x48, r7, 0x1, 0x70bd27, 0x1, {{}, {@void, @val={0xc, 0x99, {0x6, 0x2d}}}}, [@NL80211_ATTR_IE_ASSOC_RESP={0x28, 0xe, [@random_vendor={0xdd, 0x22, "9bcd6683295de87c0657abd2387af0984d7a90f93ff54bfc7b19ad976e75eaf1d457"}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)={0x30, r10, 0x1, 0x70bd2f, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HOLDING_TIMEOUT={0x6, 0x3, 0x18}, @NL80211_MESHCONF_CONFIRM_TIMEOUT={0x6, 0x2, 0xc8}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x4) (async) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000b80)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000880)={&(0x7f0000000c00)={0x110, r7, 0x300, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x2c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "581bc72ef02e5df836f963e2506c33e1743aa9de1c383fd3"}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x18, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f47cd54c833db76d196efd43346345b1d3fdfc89e7f2bbce"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2badcf9f1cfa30e7f603a898d9088a22862abe1813dd4bd6"}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x110}, 0x1, 0x0, 0x0, 0x10}, 0x40040080) 3.352147599s ago: executing program 3 (id=240): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) (async) r1 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r1, 0xc0287c02, &(0x7f0000000180)={0x80000000, 0x0, &(0x7f00000006c0)=[{{0x80000000}}, {{}, {0x80000000}}]}) ioctl$MEDIA_IOC_SETUP_LINK(r1, 0xc0347c03, &(0x7f0000000400)={{r2, 0x0, 0x3, [0x0, 0x200]}, {r3, 0x0, 0x4}, 0x2}) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r4, &(0x7f0000000100)=[{&(0x7f00000001c0)=""/186, 0xba}], 0x1, 0x2, 0xce) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000130000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa58a}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r5}, 0x10) syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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") 3.319812942s ago: executing program 1 (id=241): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000140)=0xffffbfa4, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) r2 = dup(r1) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x8, 0xfffffffd, 0x15f}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x4004, @fd_index=0x5, 0x0, 0x0}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) write$6lowpan_enable(r2, 0x0, 0x0) listen(r0, 0x9) 2.743640828s ago: executing program 2 (id=243): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0xe) (async) r1 = getpid() (async, rerun: 64) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xaca03, 0x0) (rerun: 64) setrlimit(0xf, 0x0) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000000a00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) getresuid(&(0x7f0000002a40)=0x0, &(0x7f0000002a80), &(0x7f0000002ac0)) pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) read$FUSE(r8, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r9, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r10, 0x5, 0x2}}}, 0x90) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000002b00)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000004b40)={{0x1, 0x1, 0x18, r2, {0xee01, 0xee00}}, './file0\x00'}) (async) newfstatat(0xffffffffffffff9c, &(0x7f0000004b80)='./file0\x00', &(0x7f0000004bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r20, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, 0x0, r23) (async) sendmmsg$unix(r21, &(0x7f0000002780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002700)=[@cred={{0x1c, 0x1, 0x2, {0x0, r23, r24}}}], 0x20}}], 0x2, 0x4000010) (async) statx(0xffffffffffffff9c, &(0x7f0000004c40)='./file0\x00', 0x100, 0x400, &(0x7f0000004c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r4, &(0x7f000000c600)=[{{&(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x0, &(0x7f0000000940)=[{&(0x7f0000000380)="8878cc08a4185e4deb9bf02cb987b5930290474a8093b33285ea63a6d0611b849a4465103b3a1e9f424b9abb20de3c86905c6936b505622e3c842bcd3ad63208e77844d27037cb1ae85e5263f557497143b2dde4ebfc7e2409499dbdd616ee6392b04a393b54bbc298e7709157a180c90fc3a509f9ba484cc50314b2f97e3e6504c12d2b56242982aeca6bef36344e2954459b8e5a5795b0ed2bc2d3100dd2cf6fde51c40b23ea89549e6c9eda6d2916715991b33411f0dc9dc4c150e237f589d46d4eabaa74cb1b5545a02350a75b268980520fbc37de7eb68e39"}, {&(0x7f0000000480)="02f17017e1a476b026ff5c74708641a0566efc0703a4811461e2bde6e4b4f61f6ca1d7df1e77d717b486bf953c60749cf148d3e6e24475db8740d5cf71bb7de9d3fe15a8c25c545a2be7aa827b1fcd0cecf75f5e76fdd1fe5aa0932a7e3e5b499e152f726c918d710bb150af04f4a7e5a4f869656f2b9ec2"}, {&(0x7f0000000500)="b6da65346cac67b80208b4b434f8d483029f42eea76b624eb37bbd84ff55e7fe14cc56aada7c25cd007b72f8ba08896570e359ee0420c34f6fb54f557a675de20e0c7177c62bdf3cb2c05f7f7a2a650c25ee50a61be7ef7fc604a8d39cb60fc0dd70588e2da39c646b4cc2035e46fe8cea2f92639f23f1840e2fd84328a7483653a648da148430cab9413c19f7d98801e06d6566f378d8bdcab34832a7a6afac2658b8261c58c58fee8bb69cf0d40c0c8d0a5548ac4b448686ed8bf142ac41afae23"}, {&(0x7f0000000600)="6452f1cacc83cd363b30144ee5ec5c42a4d27d779d63cf6e654553b1c5c84b354b5909f28978c917408bb77a3cb4700a09e36d764461041bb9a9ea7147ebb2f5c02d70356d1344fd109c59b2e294ede9ffaff7ff4d894767667ebfe7a870a40a2c06a7b4c4b6f8a29f983299d0ed35e7610c82363631775ae9440d903d1d30210d083b9341268721954fbb357201c8c0376f911a97ab5cfe9f34aea9e2c467947e79a0ca003ffd8f5f4ff6316ec7fa0ff6b3600974467c4b"}, {&(0x7f0000000300)="a1"}, {&(0x7f0000000700)="a20527b2b13a85fc6cab5513a142dc7d29"}, {&(0x7f0000000780)="66479c94aea7c6b4c3b37e7338c3e7b60e8ebe6c1c31fb4e19c433265032ca1f20a1c0c78ccd71d0cdddec8c3e351fb1d5329800bd5d018650d273a26fdfedd244da89bbabb5f1bf4dc143655e3314ea5f1c1314f56dc1bac4370769a1a448600c970a8d2bfafe719c2e33d4ddabe0c38cee1b78b9"}, {&(0x7f0000000840)="26d1bb88a43d9414527ae2eecb3ee56ccb6e607dc0e81557ba5ba1e3734e11003a06767d90018c651eb195b5524332c3b1d72b36d3fc917eefc8c4a2830c39"}, {&(0x7f0000000880)="e402d419776eabbee0e838e05705969aa66e7528f0719ace4be054d322364eecd16cd2f7cc2d1b87843f53765e64c38719a27634c3b3db7c6c0184d40f7ce4fa8b2d326654966801900063ca8e641f12baa3a8087a8b36c6c717bf14b3eca2135a995a2843aebbb7625a222cf2d8be715360c9ed97356ce2a51e0d8b5a5bff60418cb030ba"}], 0x0, &(0x7f0000004e00)=[@cred={{0x0, 0x1, 0x2, {r6, r7, r10}}}, @cred={{0x0, 0x1, 0x2, {r14, r16, r19}}}, @cred={{0x0, 0x1, 0x2, {r1, r23, r25}}}, @cred={{0x0, 0x1, 0x2, {r1}}}, @cred, @cred={{0x0, 0x1, 0x2, {r1}}}], 0x0, 0x11}}, {{&(0x7f0000006200)=@file={0x1, './file0\x00'}, 0x0, &(0x7f00000067c0)=[{&(0x7f0000006280)="098f5e0a3ddc74f198e2267c0b31c1f0c320051429bca072d6d1c191cd139da13f72043a7cf82022f0ae576d4dd27e05c0d128370b9440e8281cd9b2207eac37ffb950f6e56a6db1d32dd5af45155c74284f3172044c52966bcc33fd3c2648c9ff3b1e7534c0eecae28ad6af132a6e5dbd9b2c5fb24793ba6b126786ce4cd40e9b0d0520db5d9a2874635cb14b237a467477f4996e2f808048456e870a115c62f4ffea2897392bf5deb44f663f4f85f50c40f5bd85bf7a3a796a425111a5ff55ee128f5367abfecb58dbf61cb43bfc5f8e71ba7b9f4fcb2c22000037df652fb9b08a6a94efa36b"}, {&(0x7f0000006380)="4140f4826561d34a2d8382a8674dccb01801a2f2df911247d746adb01204ec3afa10bc5a3eb174f47cae9cc38beabd3ab32b63c869"}, {&(0x7f00000063c0)="85c50c6ff04d5ff26fcabc62f32be03fc682b8646bc3f9a848debea8fef74c69598d5d241477bdc078b67dde4db23e6a2e9a46b99161338a1b75f5a448f353d58357a1eff4a320fd22ed29e933df6f544a8fc9a9b713cbe8f8efbd7eda7b9c8984a93ebe1cee91b1d5446fef342bc9515bd5a53f1cf08c00912f5aaa88c952da78"}, {&(0x7f0000006480)="03e4a7665a0c043959a9e4fe1eb3bed06bf4f29ffb3dcdb776fce9e7bf5963575e57af73c1ed974766cb85ddacd5aaf1afa56b3cd9f067c3b5a8a9744114179a0cacde32b0a5042007c3567cbcf7b72b5da5a3eec25cac24adcbbec918283e63a0ad6eb8a2f502aa127b6088177d5e42033d420cc7e26247dd367819569524cf0d481db9dd5f9886400567db0c202deaeba7acd5d85e3dd5b1b9885de3122124cee4e2a6aa2096ac13fd1b561951183c4d98f8a715acd4cf"}, {&(0x7f0000006540)="9d756b76bbab2a44590626a7b6950b1458eaad144262cb74e28fef00c78a7352738ec688eacca7c1235546c13b849a4cc4c0903d7ea6440a6b63f5c31b2733e51a"}, {&(0x7f00000065c0)="12f1ef1d61afd744b61fb019844d7ca97a4e6eb1da6496334c0258e502735374ad9b4d7ec94e0f683c143497154772a1f711c96a17fa8f3a6b5601d98bfd87"}, {&(0x7f0000006600)="2409c7ed2414e109291f9d0daf43971b54f24dbabab66082fb"}, {&(0x7f0000006640)="5331e2213c5af35401ac321ab90cb3869ee7b89d1a18b10ab49a0100018eefdc7f285c0e5b1839287c1d5ea76ba73295f5e5f0fc30491df0bdc4c83ff08fd270fcc39879b4ddee15cde1a2378503b5e066ba89719b94fba74d12753e2644f29dc6012b4139d3f2b7d20612813b4bbe4b122f02a56864f78569ef10656b8c991ef71c0590c2bde3ac4b52f4f26bb218f5462bf3adc5500a0214eec033d003a5511db452f6"}, {&(0x7f0000006700)="21e1d310ce659e13b48ffad173257939d7a57b8daa72869ddbef6c9e1e6f6cd3c88d80662c71ac2f923dfd2bc0663577b80c8d42b7b0bd1cbf8530bde5a37a3f5c697f6e9720533461a2c74f35a6249af747cf9cab5c0498fa3568477cc2ba4c59bef3100a66f9e1f463249dd614db553122b9222e03a1cb0deaf646104d8dd99fa1fc"}], 0x0, &(0x7f0000004f80)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYRES32, @ANYRES32=r20, @ANYRES32, @ANYRES32=r2, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r9, @ANYRES32=r2, @ANYRES32=r15, @ANYRES32, @ANYBLOB="0000000000000000000000000100000001000000", @ANYRES32=r20, @ANYRES32=r21, @ANYRES32=r15, @ANYRES32, @ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r21, @ANYRES32, @ANYBLOB="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", @ANYRES32, @ANYRES32=r21, @ANYRES32=r4, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x0, 0x1}}, {{0x0, 0x0, &(0x7f0000007c00)=[{&(0x7f00000069c0)="c7563d15bd22205da1de873fe2a2c8133889ca5f076f09e53cc5e675df0b72565c3ea8f67a24787df17dc737f55f93d2f033d20647ddf4e777d14030043f6afe92b9d09def2711f5c735a601012341e95ad0b1"}, {&(0x7f0000006a40)="2445c1ecb4ec8665d6b0883e556a8def5cf875acc330f666a4cca09392659a55caa0705dcc840edc66bdb91921e9526e39c2afeb48faa077c379eaaf5357e7"}, {&(0x7f0000006a80)="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"}, {&(0x7f0000007a80)="ea70ae8dc02e334d099c321c2714efc11d3a63d44441dd18317ada94b91adce55f8dfdab7a6e6ef376a28ef007ed46417006c0ca6996e1b317d7ff6d5950e17abe400a2578"}, {&(0x7f0000007b00)="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"}], 0x0, &(0x7f0000004ec0)=ANY=[@ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r4, @ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000072f8a4cc199b7d9000"/29, @ANYRES32=r3, @ANYRES32, @ANYBLOB="00000000000000000100000001000000", @ANYRES32, @ANYRES32=r21, @ANYRES32=r3, @ANYRES32=r2], 0x0, 0x4}}, {{&(0x7f0000009dc0)=@file={0x0, './file0/file0\x00'}, 0x0, &(0x7f000000a100)=[{&(0x7f0000009e40)="822a9eaa60eb1ccd03dd1f4d65f7dc568fca9515467fa3b09833d7e8753a2bbbd4de87a6e0190f99e83033424b905f40e9597e6c1f2178ba0b201fa4c83bee053d37ae0411abb415a734496fdf1440c366fe06dd34f6a6aa8534388b9248431ca226d8f4f689cede6d34af28441ebf1d73c1d4edb5671b811c7c645e697dbb9d1280e4e575fe45f1e2ac3dcc4597c53126f81b4c33b772674a9b25d8f65ebb720a92db873158305b3887d4a5e298a3f8cdceed94aaad3a2e91db4c1d3d39109083467a"}, {&(0x7f0000009f40)="916a241e3c373fa9a5939b16cf0a63eb96d115f07a062b28eb81aa221519316dc8c8a0"}, {&(0x7f0000009f80)="4685438cf7d06c89f128a2eae09e7b6f822ba1158406dec793fd780c32381ac65844e4e72af33ba466a2d4a27a1dbca01ada5c1cc2d6e808136c9b7ca166243c63af439ff38d7c733b6eaedddf6db68f513e7c9b216720349121092386769499486d79684bcc43c36312dea2e7a3899089a186f157decc877123989b81a199f49d42fa351d944a9b97076d00d811ca8ec10f07f3cfedeb4ba82ea1f2e1cc88232783ff771f93ecd5d8e433f210a7c8892fb881788a3b8060eeae78ff15f6a3cdcba9903ed71a3619531c584873b02c5009b28d40a932d808530b6725dc91881fa00236a1161ca2108ce171e37f799c9c3b7b1c8a127d9407cf"}, {&(0x7f000000a080)="3feb87ede5d975c5823f0810a1734bdbef467f04d3b5b617872e81d9ec00d34a72640a5702401aa23d474dbb3ab7e0cfdce03fba32549407b68eecfa3a477071501bf2c483105cc39c97cca11a35974ff283428b079e228099bbbc6389ec3b2d96ebea5e63af698aa057"}], 0x0, &(0x7f000000a180)=[@cred={{0x0, 0x1, 0x2, {r22, r18}}}, @rights={{0x0, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x0, 0x1, 0x2, {0x0, r7, r13}}}], 0x0, 0x4000004}}, {{&(0x7f000000c200)=@abs={0x1, 0x0, 0x4e23}, 0x0, &(0x7f000000c500)=[{&(0x7f000000c280)="2f6526be81489012d09de9b76f73decc2204ee19187f64d8e8301e85984fe5d1188562cb221e"}, {&(0x7f000000c2c0)="06e6b1b0fd0fe2fe3788ec7c89104a2b1a500645ad8b2cd61ccc115a6c8905c4ee917f1f2352585e86aa36bba3b489f25beecf8edc46832259fe3ca80bc9e582bbeca4f50780a2917597f295edbf7268f15c90187699638380c2e79ba6539abc72586d83eb2c76436f22a79ababed87ed409f291fc105f2fe17eb0eaa04a2461d2c644188bd9ee30d9a0ce421f780f44e3"}, {&(0x7f000000c380)="a5341023d3d747b19a8076bc9feeedc8c8bb10606d502a6517759cd2bfdc0ecfdbfc42c5e3fa5946759ab57a377e038db8763841bab2a8338e27dcdf239a8e771a55c01b43348f13f5142a"}, {&(0x7f000000c400)="bd7d1636ed4c0cf6aede224ac6b4e6ba8bc8fc5550b0a17d8bb553fb8063faaeb28d678e563b5870eab808f862341446eec252715abeed7e07f14f3fc761b249d2df31ae5f764880d6695daca3a80136df3a5adb32283b66eaf1eef74991a8eadac9c923b7f57375f1012b1c25a91f52b9460f3d17f184f8da7e9c8ce1f301ac18f4a162d5911a6cac46ff55bd255dcae8c2643d80e85f646e183fc4efd412be8096407cef40afe86f9f7306433b1ebfba581ea0ad20"}, {&(0x7f000000c4c0)="dd71e875de588802da004cd56654e02b5dcfbbd1670aee49f835e8a4bd736ec17bc52dfdd9828d750c50"}], 0x0, &(0x7f000000c580)=[@cred, @cred={{0x0, 0x1, 0x2, {r11, r5, r17}}}, @cred={{0x0, 0x1, 0x2, {0x0, r12}}}], 0x0, 0xc0}}], 0x16c, 0x40000000) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r26 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r27 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r26, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0xfffffffffffffcdb, r27, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @void}}}, 0x20}}, 0x40000) 2.604526801s ago: executing program 3 (id=244): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) (async) gettid() connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) (async) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000000c0)={r0, r0, 0x8, 0x0, 0x0, 0x4, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001840)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="01002dbd7000fbdbdf258300000020001180170005801800008014000380100001800c0001800500060089000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) (async) r5 = fcntl$dupfd(r2, 0x0, r2) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) (async) r6 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r6, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r6, 0x0, 0x0, 0x20004808, &(0x7f00000001c0)={0xa, 0x4e20, 0xf, @empty, 0x8000004}, 0x1c) (async) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000200)=0x3fd0, 0x4) (async) sendmmsg$inet6(r6, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="79151d6e3ac6662732fff66eaa0926792b9930f6", 0x14}], 0x1}}], 0x1, 0x10) (async) r7 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r7, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async) sendmsg$IPVS_CMD_GET_CONFIG(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) (async) sendmsg$inet6(r2, &(0x7f0000001500)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="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", 0xfb}, {&(0x7f0000000400)="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", 0x2d6}], 0x2}, 0x40001080) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, &(0x7f0000000700)=@ccm_128={{0x303}, "4086090000009c0c", "1929a6029d49e4cc504f4eecd2a2dfdb", "e83c5954", "129728494b4b6674"}, 0x28) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) 2.519913469s ago: executing program 1 (id=245): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x3) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x8012, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x2404c010}, 0x800) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000140), 0x0, 0xc0041) r2 = syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000005c0)={[{@jqfmt_vfsold}, {@orlov}, {@user_xattr}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@nodiscard}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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") r3 = openat(r2, &(0x7f0000000000)='.\x00', 0x0, 0x8c) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000100)={0x53, 0x5, 0x4, 0x1000f}) syz_usb_connect(0x0, 0x24, &(0x7f0000000f00)={{0x12, 0x1, 0x0, 0x34, 0x22, 0x3e, 0x10, 0x5ac, 0x274, 0xf9c2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x45, 0x0, 0x0, 0x3, 0x63, 0x2}}]}}]}}, 0x0) ioctl$MON_IOCG_STATS(r1, 0x80089203, &(0x7f00000000c0)) 2.495407811s ago: executing program 0 (id=246): syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000f19500000000a0000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x102) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000200)={0xcbc6, 0x6a9, 0xd, 0x10000, 0xf, 'J\x00'}) 2.359449284s ago: executing program 0 (id=247): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0x800000001f7, 0x82) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6_vti0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x4, 0xfd, 0x3, 0xc7, 0x14, @empty, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x40, 0x20, 0x800, 0x9}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2}, 0xfffffffffffffddf) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) iopl(0x3) bpf$BPF_GET_MAP_INFO(0x1d, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) socketpair$unix(0x1, 0x1, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(r6, 0x6, &(0x7f0000000140)=0x2) r7 = userfaultfd(0x80001) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r7, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, 0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = fcntl$dupfd(r8, 0x0, r8) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0xc08, 0x3, 0x468, 0x0, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@multicast2, @private=0xa010101, 0xff, 0xffffffff, 'bridge0\x00', 'vcan0\x00', {}, {0xff}, 0x5c, 0x2, 0x2}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}, {}, {}, {}, {0x0, 0x0, 0x5e}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {0x0, 0x8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x40}]}}, @common=@inet=@socket3={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4c8) 2.19974683s ago: executing program 3 (id=248): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f0000000d00)='sched_switch\x00', r1}, 0x10) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000100)) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) (async) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000bc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x1100, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000004a40)={0x44, 0x0, &(0x7f0000000880)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x120, 0x6c, 0x0, 0x0, 0x0, 0x1e8, 0x258, 0x258, 0x1e8, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x120, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x5}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@local, @empty, [0xffffffff, 0xff, 0xffffffff, 0xff000000], [0xffffffff, 0xff, 0xffffffff, 0xffffffff], 'bond_slave_1\x00', 'geneve0\x00', {}, {}, 0x0, 0x0, 0x7, 0x62}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x318) 2.048734104s ago: executing program 3 (id=249): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) (async) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000500)={0x1c, &(0x7f00000002c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) (async) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r1, 0x10d, 0xa, &(0x7f0000000040), 0x4) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 1.895203839s ago: executing program 2 (id=250): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9rVNceAPBzb/KeiU998cfCBw/ewBPeoy0hcdU2QjVGY6KpxVYp3YyTZNS0k4wkk9KFi3QndFXoQrqQFrrLSrLo1v4J3XRp10K76KZQkKbMzJ0492aGTCXXVPl8wJzc8zvznXvmzOJ64kTt1sJKYWGlUFoqVOdurJwsfFytrC6WQ/yc7PX49CaPOIn93rl89vy7106G8N38D483Nzc3Q11/6Gi07fdff7kz1562xJk29X4797ZbPgghHNs2r7q+EML734YQhRDOJHnjSToYQjgUmmXX7nx2vbBLs3nwqHyq+GTm7sbYien1+xvd//YohC8r/3rt5uJP/+0b+/GVXRoeAAAAAAAAAAAAAAAAAIAX3OSVy1ffGRkND6PQvx5tf153Mkm7PR+7uWv+k/8fCwAAAAAAAAAAAAAAAAAAAH9RT5//L0RHOjz/P5Gkp7u033wr/zmSn6m3L0+cGxlNzn+PtpW/nmT9fKYvHO5w7nv2/Pczmfadz3/fPs6zas2vNe5QiOLh1HUcDw+H8HVy8PvxaH9cqa7UXr1RXV2a37VpvLDS8W+e3p+KTnKgf6/xH8/0n//5/0e3vZvq19d37y32UkvHv69rvW8+jXqK/9l0s3s5TbvN0fyHeIml49/fyBtsr7CvmdTj/3n/zvGfyPSf1/1/KIRQiOpzLaRWgPoepp7fbb9CWjr+f2vkpZbO5IXsdv//lon/uUz/e7X+r2U/iOgoHf+/N/IGUjWaG4BG/OOd7//zmf73Iv71+a/5/O9JOv7JYt+fqtJ4JXtd/ycz/ecV/6txMs9DUeodsB4187v9f3WkpeM/sK386fe/uKf934VM++f1/a81buv7X2v5/3/U/P5HZ+n4D3at1+v9P5Vpl/f6f7qx/+NZpeO/v5GX3jsPNX72Gv/pTP95xb+xKxloxf/pevL7vmb+V/Z/PUnH/x/NzLi9xlrjZ2P/F+28/7+Y6X8v9n/1+a/F+Y76skjH/0DXevX4f9/D5/+lTLv84x/CiL3+M0vH/2DXeo37f2Dn+M9k2uUd///l2TkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAC2A8SYdCFA+nruN4eDiEs8n18bA/mi3NF2cr1bmPVkKYSPIL4Uh0s1KdLVWKC0vV+XKxVKlU50I4l5QfCwPRSqVaKy6Wbp/f6mswulUuLddmy6VaCGEyyf93ONjqa3ahtli6HUK4sFX2z7i6fPtWaak4v7D85sjIyEiY2prD4aj8Sa28VGuO3iwNYXqr7VDUNrlG8cWtuRyIPqyuLi+VKo38S21tKtW5UqWtzUxS9kU4HNWWV5fmSrVysVK92RpvL51O0ompK+9duTS6rfx61EzHn++0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiTHo69cS+E0N+8ikMIhSj5JUr+pTx4VD5VfDJzd2PsxPT6/Y3HneoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAH+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhl/5RIgaiOAC/GQUtPYZVSDrbiCJaGBE8gR7Dw+hRvIR3sLCwtVgWdiew5A+EwHbf1zyYH2/ewDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgubvn7uWpbiJSnG/OIr7evn8O84dSP66n+09WzDxd0cNx3D92N7d1U/49jfKrcvTb5l36//f+GhO19znYk+E+7Y3nDM3t29z7+rkXkXIVEW3JL1POVbXsLgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDLDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgWAAAAABAmL91FH0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//4w3HM8=") r0 = open(&(0x7f0000000100)='./file0\x00', 0x60142, 0x64) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r1, 0x0, 0x0, 0x1001f0) r2 = open(&(0x7f00000001c0)='./file1\x00', 0x101000, 0x4) copy_file_range(r2, 0x0, r0, 0x0, 0x20000000008, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb) write$P9_RUNLINKAT(r3, &(0x7f0000000140)={0x7, 0x4d, 0x3}, 0x7) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) pidfd_getfd(r5, r5, 0x0) unshare(0x6020400) syz_mount_image$fuse(0x0, &(0x7f0000001080)='./file0\x00', 0x2080031, 0x0, 0x1, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r6, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) dup(r6) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x1e, 0x1, 0x0) r10 = socket$netlink(0x10, 0x3, 0x4) writev(r10, &(0x7f0000000300)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c561e117436c379000000000000000058000b4824ca945f6400d40f6a0325010ebc000000000000008000f0fffeffd809005300fff5dd00000010000100070c060000000000224e0000", 0x58}], 0x1) connect$unix(r8, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r11}, 0x4) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x21f502ed, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1.096000725s ago: executing program 0 (id=251): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x687, &(0x7f0000000fc0)="$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") (async) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x130) (async) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03000000b500000001000000feefffff"], 0xc8) (async) getdents(r0, &(0x7f0000000140)=""/174, 0xae) 1.05241439s ago: executing program 0 (id=252): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x1800714, &(0x7f0000000180), 0x7f, 0x485, &(0x7f0000000b80)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x2001, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x86, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xffffffff, 0x9657, 0x0, 0x7fffffff, 0x0, 0x0, 0xb, 0x80000000000000, 0xcc3, 0x1, 0x1, 0x94d6, 0x0, 0xfffffffd, 0x8, 0x8, 0xfffffffffffffffa, 0x3, 0x6}) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000002240)=[{&(0x7f0000002280)=""/4080, 0xff0}, {&(0x7f00000000c0)=""/118, 0x76}, {&(0x7f0000000140)=""/70, 0x46}], 0x3}, 0x0) symlink(&(0x7f0000000a80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000800)='./file0\x00') 972.063677ms ago: executing program 2 (id=253): r0 = syz_open_dev$video(&(0x7f0000000000), 0x4, 0x12080) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000040)={0x0, {0x9, 0x5}}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c01000017000100fefffffb000000000a0100ff0000000000000000000000000000000000000000ffffffff00000000000000000000000020010000000000000000000000000001ff02000000000000000000000000000100000000000000000200008084000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="e0000001fdffffffffffffff00000000000000000000000000000000000028c923b14c844f215f000000000000001000040200002000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000040000000000000000000008000000000900000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000a0000000000000009"], 0x16c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 820.020221ms ago: executing program 2 (id=254): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="7a0a00ff00000000711063000000000095", @ANYRESDEC=0x0], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = semget(0x3, 0x1, 0xe318f6222b42328c) semctl$IPC_RMID(r0, 0x0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) semctl$SETVAL(r0, 0x3, 0x10, &(0x7f00000001c0)=0xffff44f9) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r2, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r5 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r5, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x8081, &(0x7f0000002180)=ANY=[], 0x3d, 0x6f6, &(0x7f00000009c0)="$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") 809.646002ms ago: executing program 2 (id=255): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x442, &(0x7f0000001180)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x189) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x8, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast2, {[], {0x4e22, 0xe22, 0x8}}}}}}, 0x0) recvmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x2, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="18020000fbffffff000000000300000085000000bc000000a50000001100000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0xe, 0x0, &(0x7f00000003c0)="6f11ba816056a1827a33ae059cf3", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x58) copy_file_range(r3, 0x0, r3, &(0x7f00000004c0)=0xae8, 0x863, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r4, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r4, 0xc04064aa, &(0x7f00000003c0)={0x0, 0x0, r5}) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000580)='kvm_fpu\x00', r6}, 0x18) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) ioctl$KVM_RUN(r9, 0xae80, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x16, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xda, 0x0, 0x0, 0x0, 0xccff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1d9f}, @map_idx={0x18, 0xa}, @generic={0x10, 0xe, 0x2, 0x5516, 0x80}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0xa0f, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000140)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000200)={0x4, 0xe, 0x9, 0x4724ed73}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r3, r0, r0], 0x0, 0x10, 0x3}, 0x94) 726.73679ms ago: executing program 2 (id=256): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = syz_open_dev$sndctrl(&(0x7f0000004e80), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r4, 0xc0505510, &(0x7f0000000140)={0x2, 0x40000000000009a, 0x0, 0x6, &(0x7f0000001600)}) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x8a) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = creat(&(0x7f0000000200)='./file0\x00', 0x80) splice(r5, 0x0, r6, 0x0, 0x8000, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000001c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, &(0x7f0000000240)=[0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x56, &(0x7f0000000300)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) getsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000540)={@multicast1, @loopback, 0x0}, &(0x7f0000000580)=0xc) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r10, &(0x7f0000000640)={0x2020}, 0x2020) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="540000006a00100026bd7000ffdbdf25000000000000000000000b00f3fd0500", @ANYRES32=r8, @ANYBLOB="04000b0008000500", @ANYRES32=r9, @ANYBLOB="00000500", @ANYRES32=r8, @ANYBLOB="04000b0000e90a000400090004000b000000010002000000"], 0xb5}}, 0x0) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000178000/0x2000)=nil, 0x2000}, 0x6}) 166.451414ms ago: executing program 0 (id=257): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x7, &(0x7f0000000080)=ANY=[@ANYBLOB="070000000300000000007389679bcfcad2b20000", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = syz_open_dev$radio(&(0x7f0000000580), 0x0, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@updpolicy={0x108, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in6=@empty, 0x8000, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0xfffffffffffffffc}}, [@policy_type={0xa, 0x10, {0x1}}, @tmpl={0x44, 0x5, [{{@in6=@loopback, 0x4d3, 0x3c}, 0xa, @in6=@local, 0x3500, 0x3, 0x3, 0x3, 0x5, 0x8, 0x9}]}]}, 0x108}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0xc00000, 0xffffffffffffffff, 0x0, &(0x7f0000000000)={0x980919, 0x8000, '\x00', @p_u8=&(0x7f0000000080)}}) 0s ago: executing program 0 (id=258): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) (async) r1 = accept$alg(r0, 0x0, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x3c, r3, 0x1, 0xffffffff, 0x80000003, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_WME={0x14, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000044}, 0x0) sendmmsg$alg(r1, &(0x7f000000a500)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003800)=[@op={0x18, 0x117, 0x3, 0xdaeabe8039207fa0}, @assoc={0x18, 0x117, 0x4, 0x240}], 0x30, 0x20000085}], 0xfffffffffffffdb0, 0x400c044) (async) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x10001, &(0x7f0000000040), 0xdd, 0x57c, &(0x7f0000000180)="$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") r6 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="e000000010000b0500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f1b3d6da2f1acfac0ee50d2b184b27db1f302de337c0004060000000000bf852c89867f6691b01b2d"], 0xe0}], 0x1}, 0x0) (async, rerun: 32) r7 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@rdmsr={0x66, 0x18, {0x9e2}}, @wrmsr={0x65, 0x20, {0xa2d, 0xffffffffffffffe2}}, @enable_nested={0x12c, 0x18}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x3, @host32=0x4c00, 0x114c, 0x401, 0x800}}, @code={0xa, 0x7e, {"b903040000b8f1af70fcba000000000f30f3470fc732b805000000b9000001000f01c1b9d9020000b8a5060000ba000000000f30b9800000c00f3235004000000f30f3432185dc25e1d8b908080000b8f5ffffffbaffffffff0f303667360f01c8c421fc2b3bb9810a00000f32"}}, @cpuid={0x64, 0x18, {0x7, 0x200}}, @cpuid={0x64, 0x18, {0x6, 0x3}}, @uexit={0x0, 0x18, 0x7}], 0x14e}) (rerun: 32) ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.27' (ED25519) to the list of known hosts. [ 56.981422][ T5751] cgroup: Unknown subsys name 'net' [ 57.140780][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.524430][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.147094][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.155797][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.163819][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.172906][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.180642][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.188767][ T5771] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.189481][ T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.197061][ T5771] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.203935][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.212430][ T5771] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.217853][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.225270][ T5771] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.231605][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.238595][ T5771] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.249034][ T5764] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.252284][ T5769] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.259308][ T5764] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.273460][ T5764] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.284813][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.292831][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.309742][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.318396][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.326240][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.333555][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.676537][ T5760] chnl_net:caif_netlink_parms(): no params data found [ 60.776964][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 60.858215][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 60.939648][ T5760] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.948955][ T5760] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.956442][ T5760] bridge_slave_0: entered allmulticast mode [ 60.963151][ T5760] bridge_slave_0: entered promiscuous mode [ 60.970915][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.978235][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.985402][ T5768] bridge_slave_0: entered allmulticast mode [ 60.991979][ T5768] bridge_slave_0: entered promiscuous mode [ 61.012304][ T5760] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.019702][ T5760] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.026990][ T5760] bridge_slave_1: entered allmulticast mode [ 61.033602][ T5760] bridge_slave_1: entered promiscuous mode [ 61.040935][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.048190][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.055875][ T5768] bridge_slave_1: entered allmulticast mode [ 61.062590][ T5768] bridge_slave_1: entered promiscuous mode [ 61.099942][ T5761] chnl_net:caif_netlink_parms(): no params data found [ 61.145225][ T5760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.157526][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.169394][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.194715][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.201906][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.209454][ T5767] bridge_slave_0: entered allmulticast mode [ 61.216646][ T5767] bridge_slave_0: entered promiscuous mode [ 61.226725][ T5760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.275648][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.282779][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.290871][ T5767] bridge_slave_1: entered allmulticast mode [ 61.297878][ T5767] bridge_slave_1: entered promiscuous mode [ 61.329106][ T5768] team0: Port device team_slave_0 added [ 61.351876][ T5760] team0: Port device team_slave_0 added [ 61.359834][ T5768] team0: Port device team_slave_1 added [ 61.411291][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.422069][ T5760] team0: Port device team_slave_1 added [ 61.439174][ T5761] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.446623][ T5761] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.453751][ T5761] bridge_slave_0: entered allmulticast mode [ 61.460669][ T5761] bridge_slave_0: entered promiscuous mode [ 61.470100][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.499952][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.507210][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.534123][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.546837][ T5761] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.553984][ T5761] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.561318][ T5761] bridge_slave_1: entered allmulticast mode [ 61.568710][ T5761] bridge_slave_1: entered promiscuous mode [ 61.588649][ T5767] team0: Port device team_slave_0 added [ 61.606332][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.613386][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.639597][ T5760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.653612][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.660630][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.686568][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.712909][ T5767] team0: Port device team_slave_1 added [ 61.719626][ T5760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.727068][ T5760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.753187][ T5760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.810669][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.817745][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.844747][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.860983][ T5761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.873383][ T5761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.902369][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.909528][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.935433][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.994609][ T5761] team0: Port device team_slave_0 added [ 62.004711][ T5768] hsr_slave_0: entered promiscuous mode [ 62.010975][ T5768] hsr_slave_1: entered promiscuous mode [ 62.031703][ T5760] hsr_slave_0: entered promiscuous mode [ 62.038287][ T5760] hsr_slave_1: entered promiscuous mode [ 62.044640][ T5760] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.052435][ T5760] Cannot create hsr debugfs directory [ 62.060045][ T5761] team0: Port device team_slave_1 added [ 62.103812][ T5767] hsr_slave_0: entered promiscuous mode [ 62.110516][ T5767] hsr_slave_1: entered promiscuous mode [ 62.117610][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.127095][ T5767] Cannot create hsr debugfs directory [ 62.160881][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.168160][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.194235][ T5761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.246836][ T5761] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.253794][ T5761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.281009][ T5761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.304892][ T5769] Bluetooth: hci0: command tx timeout [ 62.305090][ T5764] Bluetooth: hci2: command tx timeout [ 62.316789][ T5084] Bluetooth: hci1: command tx timeout [ 62.394155][ T5084] Bluetooth: hci3: command tx timeout [ 62.408963][ T5761] hsr_slave_0: entered promiscuous mode [ 62.415311][ T5761] hsr_slave_1: entered promiscuous mode [ 62.421289][ T5761] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.430086][ T5761] Cannot create hsr debugfs directory [ 62.624454][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 62.642592][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 62.652221][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 62.673798][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 62.718695][ T5760] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 62.732926][ T5760] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 62.742821][ T5760] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 62.753802][ T5760] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 62.852676][ T5767] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 62.876536][ T5767] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 62.892558][ T5767] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 62.918249][ T5767] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 62.962049][ T5761] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 62.971930][ T5761] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 62.993296][ T5761] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.005384][ T5761] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.053258][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.115275][ T5760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.147280][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.160773][ T3517] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.168085][ T3517] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.199176][ T5760] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.217902][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.225123][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.237713][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.244906][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.261681][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.282310][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.289431][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.323582][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.339167][ T5761] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.360484][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.367621][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.398783][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.405942][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.441180][ T5761] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.468502][ T3468] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.475615][ T3468] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.517885][ T3447] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.525080][ T3447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.889867][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.973437][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.016746][ T5760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.045613][ T5768] veth0_vlan: entered promiscuous mode [ 64.059474][ T5768] veth1_vlan: entered promiscuous mode [ 64.129851][ T5768] veth0_macvtap: entered promiscuous mode [ 64.140095][ T5768] veth1_macvtap: entered promiscuous mode [ 64.149983][ T5761] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.159287][ T5767] veth0_vlan: entered promiscuous mode [ 64.200295][ T5767] veth1_vlan: entered promiscuous mode [ 64.217718][ T5760] veth0_vlan: entered promiscuous mode [ 64.225721][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.256498][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.283827][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.293028][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.303141][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.316466][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.336773][ T5760] veth1_vlan: entered promiscuous mode [ 64.345322][ T5761] veth0_vlan: entered promiscuous mode [ 64.360953][ T5767] veth0_macvtap: entered promiscuous mode [ 64.382396][ T5767] veth1_macvtap: entered promiscuous mode [ 64.391684][ T5764] Bluetooth: hci2: command tx timeout [ 64.397127][ T5769] Bluetooth: hci0: command tx timeout [ 64.403054][ T5084] Bluetooth: hci1: command tx timeout [ 64.429064][ T5761] veth1_vlan: entered promiscuous mode [ 64.459506][ T5760] veth0_macvtap: entered promiscuous mode [ 64.465759][ T5764] Bluetooth: hci3: command tx timeout [ 64.475599][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.486854][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.498843][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.510564][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.521217][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.532082][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.552282][ T5760] veth1_macvtap: entered promiscuous mode [ 64.565563][ T5767] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.576637][ T5767] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.585854][ T5767] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.594777][ T5767] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.638299][ T1136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.663343][ T1136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.670318][ T5761] veth0_macvtap: entered promiscuous mode [ 64.701457][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.712975][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.723133][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.733743][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.746018][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.753900][ T5761] veth1_macvtap: entered promiscuous mode [ 64.792855][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.805768][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.816144][ T5760] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.827150][ T5760] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.838297][ T5760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.849370][ T5760] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.858181][ T5760] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.867863][ T5760] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.876825][ T5760] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.909522][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.910754][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.919253][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.939485][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.939934][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.958917][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.969072][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.979593][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.990626][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.006360][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.017203][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.029270][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.040206][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.050111][ T5761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.060638][ T5761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.071628][ T5761] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.105237][ T3447] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.110175][ T5761] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.113062][ T3447] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.140388][ T5761] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.150598][ T5761] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.160485][ T5761] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.222693][ T3468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.243026][ T3468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.302508][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.333395][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.442765][ T3517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.474404][ T3517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.483856][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.492914][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.681695][ T3447] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.690260][ T3447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.738943][ T5842] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 65.854627][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.863412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.964359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 65.985083][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 66.019761][ T5855] ubi31: attaching mtd0 [ 66.038484][ T5855] ubi31: scanning is finished [ 66.043292][ T5855] ubi31: empty MTD device detected [ 66.054564][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 66.215013][ T5842] usb 4-1: config 0 has an invalid interface number: 56 but max is 0 [ 66.265959][ T5842] usb 4-1: config 0 has no interface number 0 [ 66.274965][ T5855] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 66.296908][ T5842] usb 4-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 66.313840][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.414310][ T5857] syz.2.3[5857]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 66.465051][ T5764] Bluetooth: hci2: command tx timeout [ 66.470551][ T5084] Bluetooth: hci1: command tx timeout [ 66.476070][ T5764] Bluetooth: hci0: command tx timeout [ 66.492007][ T5842] usb 4-1: Product: syz [ 66.503003][ T5855] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 66.513091][ T5842] usb 4-1: Manufacturer: syz [ 66.544875][ T5769] Bluetooth: hci3: command tx timeout [ 66.561665][ T5842] usb 4-1: SerialNumber: syz [ 66.590166][ T5842] usb 4-1: config 0 descriptor?? [ 66.621242][ T5842] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 66.651196][ T5855] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 66.720210][ T5855] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 66.728137][ T5855] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 66.735239][ T5855] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 66.743470][ T5855] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2802589540 [ 66.753795][ T5855] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 66.794200][ T5842] pctv452e: pctv452e_power_ctrl: 1 [ 66.794200][ T5842] [ 66.809101][ T5860] ubi31: background thread "ubi_bgt31d" started, PID 5860 [ 66.841975][ T5857] loop2: detected capacity change from 0 to 1764 [ 66.849436][ T5842] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 66.849436][ T5842] [ 66.860707][ T5861] ubi: mtd0 is already attached to ubi31 [ 66.926946][ T5842] dvb-usb: bulk message failed: -22 (5/0) [ 66.943587][ T5842] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 66.965663][ T5846] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 66.980347][ T5844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 67.045713][ T5842] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 67.119874][ T5769] block nbd0: Receive control failed (result -32) [ 67.190460][ T5842] usb 4-1: media controller created [ 67.295964][ T5842] dvb-usb: bulk message failed: -22 (8/0) [ 67.301986][ T5842] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 67.314175][ T5825] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 67.393547][ T5842] dvb-usb: MAC address reading failed. [ 67.494289][ T5825] usb 3-1: device descriptor read/64, error -71 [ 67.560717][ T5842] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 67.685005][ T5842] DVB: Unable to find symbol stb0899_attach() [ 67.691779][ T5842] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 67.704380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 67.784177][ T5825] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 67.945828][ T5873] loop3: detected capacity change from 0 to 4096 [ 67.954352][ T5825] usb 3-1: device descriptor read/64, error -71 [ 67.966336][ T5873] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 67.974539][ T5842] rc_core: IR keymap rc-tt-1500 not found [ 68.029300][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 68.041001][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 68.044288][ T5842] Registered IR keymap rc-empty [ 68.055307][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 68.086325][ T5842] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 68.090288][ T5825] usb usb3-port1: attempt power cycle [ 68.139377][ T5842] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input5 [ 68.199115][ T5873] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode. [ 68.203589][ T5842] dvb-usb: schedule remote query interval to 100 msecs. [ 68.261221][ T5873] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 68.277070][ T5842] pctv452e: pctv452e_power_ctrl: 0 [ 68.277070][ T5842] [ 68.299329][ T5842] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 68.308645][ T5873] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 68.312606][ T5873] ntfs: volume version 3.1. [ 68.326161][ T0] NOHZ tick-stop error: local softirq work is pending, handler #41!!! [ 68.334704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #241!!! [ 68.385733][ T5812] dvb-usb: bulk message failed: -22 (4/0) [ 68.391648][ T5812] dvb-usb: error -22 while querying for an remote control event. [ 68.395942][ T5769] Bluetooth: hci3: ACL packet for unknown connection handle 0 [ 68.500674][ T5842] usb 4-1: USB disconnect, device number 2 [ 68.552008][ T5769] Bluetooth: hci0: command tx timeout [ 68.557696][ T5764] Bluetooth: hci1: command tx timeout [ 68.563295][ T5084] Bluetooth: hci2: command tx timeout [ 68.624472][ T5769] Bluetooth: hci3: command tx timeout [ 68.634192][ T5825] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 68.664910][ T5825] usb 3-1: device descriptor read/8, error -71 [ 68.722636][ T5768] ntfs: (device loop3): ntfs_put_super(): Volume has errors. Leaving volume marked dirty. Run chkdsk. [ 68.878083][ T5842] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 68.954430][ T5825] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 69.195049][ T5825] usb 3-1: device not accepting address 5, error -71 [ 69.217606][ T5825] usb usb3-port1: unable to enumerate USB device [ 69.358700][ T5907] loop3: detected capacity change from 0 to 2048 [ 69.378486][ T5907] EXT4-fs: Invalid want_extra_isize 0 [ 69.744215][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 69.769396][ T5901] loop2: detected capacity change from 0 to 32768 [ 69.786695][ T5901] xfs: Unknown parameter 'nobarrier' [ 70.014134][ T5825] usb 2-1: device descriptor read/64, error -71 [ 70.712714][ T5825] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 70.731331][ T5924] ubi: mtd0 is already attached to ubi31 [ 70.865603][ T5825] usb 2-1: device descriptor read/64, error -71 [ 70.955446][ T5915] loop0: detected capacity change from 0 to 32768 [ 70.984378][ T5825] usb usb2-port1: attempt power cycle [ 71.209739][ T5933] loop2: detected capacity change from 0 to 256 [ 71.229596][ T5915] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 71.361795][ T5933] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 71.434150][ T5825] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 71.510053][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.550675][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.565862][ T5825] usb 2-1: device descriptor read/8, error -71 [ 71.595322][ T5915] XFS (loop0): Ending clean mount [ 71.803807][ T5915] XFS (loop0): Quotacheck needed: Please wait. [ 71.833380][ T23] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x188/0x240, xfs_agfl block 0x3 [ 71.834750][ T5825] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 71.870822][ T23] XFS (loop0): Unmount and run xfs_repair [ 71.884474][ T23] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 71.894604][ T5825] usb 2-1: device descriptor read/8, error -71 [ 71.908732][ T23] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed XAF.......G...N. [ 71.944143][ T23] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00 .b..1........... [ 71.964099][ T23] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08 .;.............. [ 72.078600][ T5825] usb usb2-port1: unable to enumerate USB device [ 72.114143][ T23] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c ................ [ 72.133288][ T23] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 72.143394][ T23] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 72.164115][ T23] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 72.183873][ T23] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 72.202779][ T3517] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1eb/0x3a0" at daddr 0x3 len 1 error 74 [ 72.219741][ T5915] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas. [ 72.634587][ T5948] loop1: detected capacity change from 0 to 8 [ 72.650970][ T5948] ======================================================= [ 72.650970][ T5948] WARNING: The mand mount option has been deprecated and [ 72.650970][ T5948] and is ignored by this kernel. Remove the mand [ 72.650970][ T5948] option from the mount to silence this warning. [ 72.650970][ T5948] ======================================================= [ 72.806423][ T5761] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 72.996911][ T5948] syz.1.19: attempt to access beyond end of device [ 72.996911][ T5948] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 73.014294][ T5948] SQUASHFS error: Failed to read block 0x0: -5 [ 73.021272][ T5948] unable to read squashfs_super_block [ 73.091803][ T5950] loop3: detected capacity change from 0 to 4096 [ 73.111811][ T5948] loop1: detected capacity change from 0 to 2048 [ 73.125274][ T5950] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512). [ 73.210530][ T5948] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 73.234755][ T5948] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found [ 73.263639][ T5948] UDF-fs: Scanning with blocksize 512 failed [ 73.374646][ T5950] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 73.410983][ T5950] ntfs3: loop3: Failed to initialize $Extend/$ObjId. [ 73.416153][ T5948] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 74.649276][ T5964] binder: 5961:5964 ioctl 40182103 200000000300 returned -22 [ 75.384869][ T5968] loop3: detected capacity change from 0 to 4096 [ 75.397901][ T5968] ntfs: (device loop3): parse_options(): Unrecognized mount option mft_jone_multiplier. [ 75.470206][ T5869] I/O error, dev loop3, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 75.643093][ T5968] loop3: detected capacity change from 0 to 4096 [ 75.923633][ T5980] loop1: detected capacity change from 0 to 2039 [ 75.959967][ T5980] EXT4-fs (loop1): bad geometry: block count 512 exceeds size of device (509 blocks) [ 76.475823][ T5985] loop3: detected capacity change from 0 to 32768 [ 76.514970][ T5985] (syz.3.31,5985,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.564421][ T5985] (syz.3.31,5985,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 76.784693][ T5985] JBD2: Ignoring recovery information on journal [ 76.898778][ T5985] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 77.327095][ T5768] ocfs2: Unmounting device (7,3) on (node local) [ 77.739988][ T6005] ubi: mtd0 is already attached to ubi31 [ 79.950937][ T6048] loop0: detected capacity change from 0 to 1024 [ 79.954224][ T5842] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 80.076286][ T6048] hfsplus: invalid extended attribute record [ 80.085662][ T6050] loop3: detected capacity change from 0 to 4096 [ 80.144869][ T5842] usb 2-1: device descriptor read/64, error -71 [ 80.328280][ T2950] hfsplus: b-tree write err: -5, ino 4 [ 80.610810][ T5842] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 81.024312][ T5842] usb 2-1: device descriptor read/64, error -71 [ 81.169446][ T5842] usb usb2-port1: attempt power cycle [ 81.619581][ T5842] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 81.654922][ T5842] usb 2-1: device descriptor read/8, error -71 [ 81.748438][ T787] cfg80211: failed to load regulatory.db [ 81.794602][ T28] audit: type=1326 audit(1766603283.924:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6062 comm="syz.2.51" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a4738f749 code=0x0 [ 81.931835][ T6067] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 81.949235][ T5842] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 81.995004][ T5842] usb 2-1: device descriptor read/8, error -71 [ 82.123701][ T5842] usb usb2-port1: unable to enumerate USB device [ 83.063306][ T6085] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 83.070692][ T6085] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 83.078582][ T6085] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 83.085998][ T6085] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 83.092559][ T6085] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 83.100010][ T6085] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 83.107015][ T6085] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 83.114803][ T6085] comedi comedi3: 8255: I/O port conflict (0x802,4) [ 83.121939][ T6085] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 83.130182][ T6085] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 83.137970][ T6085] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 83.144882][ T6085] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 83.151394][ T6085] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 83.158598][ T6085] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 83.165503][ T6085] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 83.175353][ T6085] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 83.233905][ T6089] loop1: detected capacity change from 0 to 4096 [ 83.243359][ T6089] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512). [ 83.596155][ T6096] loop3: detected capacity change from 0 to 256 [ 83.754909][ T6096] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 84.690609][ T6098] loop1: detected capacity change from 0 to 131072 [ 84.707774][ T6104] loop0: detected capacity change from 0 to 16 [ 84.720671][ T6098] F2FS-fs (loop1): Invalid log sectorsize (67108873) [ 84.727790][ T6098] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 84.738541][ T6104] erofs: (device loop0): mounted with root inode @ nid 36. [ 84.802070][ T6098] F2FS-fs (loop1): invalid crc value [ 84.916047][ T6098] F2FS-fs (loop1): Found nat_bits in checkpoint [ 85.215346][ T6098] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 85.222625][ T6098] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 85.286178][ T6098] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.514135][ T5825] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 85.952174][ T23] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.961012][ T5825] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 85.976739][ T5825] usb 4-1: config 0 has no interfaces? [ 85.984092][ T5825] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 85.993760][ T5825] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.007252][ T5825] usb 4-1: config 0 descriptor?? [ 86.147044][ T23] usb 1-1: config index 0 descriptor too short (expected 65316, got 36) [ 86.155736][ T23] usb 1-1: config 0 has too many interfaces: 255, using maximum allowed: 32 [ 86.164908][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 86.175054][ T23] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 255 [ 86.184354][ T23] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 86.193435][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.206483][ T23] usb 1-1: config 0 descriptor?? [ 86.282278][ T6123] F2FS-fs (loop1): Unrecognized mount option "" or missing value [ 86.400132][ T6135] fuse: Bad value for 'fd' [ 86.405844][ T6134] fuse: Bad value for 'fd' [ 86.782486][ T6140] netlink: 'syz.0.65': attribute type 10 has an invalid length. [ 86.825530][ T6140] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 86.859602][ T6142] overlayfs: failed to clone lowerpath [ 86.876127][ T6140] 8021q: adding VLAN 0 to HW filter on device bond1 [ 86.901156][ T6140] bond_slave_0: entered promiscuous mode [ 86.907158][ T6140] bond_slave_1: entered promiscuous mode [ 86.912808][ T6140] syz_tun: entered promiscuous mode [ 86.920088][ T6140] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 86.927661][ T6140] bond1: (slave macvlan2): unknown ethtool speed (30000) for port 1 (set it to 0) [ 86.937270][ T6140] bond1: (slave macvlan2): speed changed to 0 on port 1 [ 86.948336][ T6140] bond1: (slave macvlan2): Enslaving as a backup interface with an up link [ 86.957169][ T6145] Zero length message leads to an empty skb [ 86.981676][ T6145] bond0: entered allmulticast mode [ 86.989705][ T6145] bond_slave_0: entered allmulticast mode [ 87.003991][ T6145] bond_slave_1: entered allmulticast mode [ 87.414126][ T5847] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 87.607505][ T5847] usb 2-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.619967][ T5847] usb 2-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 87.634998][ T5847] usb 2-1: config 0 interface 0 has no altsetting 0 [ 87.641884][ T5847] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 87.651453][ T5847] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.666063][ T5847] usb 2-1: config 0 descriptor?? [ 87.889294][ T5847] ortek 0003:1223:3F07.0001: unknown main item tag 0x0 [ 87.897540][ T5847] ortek 0003:1223:3F07.0001: unknown main item tag 0x0 [ 87.904872][ T5847] ortek 0003:1223:3F07.0001: unknown main item tag 0x0 [ 87.911759][ T5847] ortek 0003:1223:3F07.0001: unknown main item tag 0x0 [ 87.919105][ T5847] ortek 0003:1223:3F07.0001: unknown main item tag 0x0 [ 87.936983][ T5847] ortek 0003:1223:3F07.0001: hidraw0: USB HID v0.03 Device [HID 1223:3f07] on usb-dummy_hcd.1-1/input0 [ 88.125592][ T5825] usb 2-1: USB disconnect, device number 10 [ 88.360257][ T787] usb 4-1: USB disconnect, device number 3 [ 88.458995][ T5847] usb 1-1: USB disconnect, device number 2 [ 88.557443][ T6160] fido_id[6160]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 88.581795][ T6167] loop3: detected capacity change from 0 to 512 [ 88.591436][ T6167] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock [ 88.616518][ T6167] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 1)! [ 88.650678][ T6167] EXT4-fs (loop3): group descriptors corrupted! [ 88.743378][ T6167] loop3: detected capacity change from 0 to 1024 [ 88.770937][ T6167] hfsplus: failed to load extents file [ 88.856275][ T6178] netlink: 44 bytes leftover after parsing attributes in process `syz.3.75'. [ 88.994113][ T5847] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 89.119525][ T6190] loop3: detected capacity change from 0 to 4096 [ 89.286159][ T786] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 89.313402][ T6195] syz.3.83 uses obsolete (PF_INET,SOCK_PACKET) [ 89.329435][ T6195] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 89.406432][ T5847] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.417774][ T5847] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 89.431558][ T5847] usb 1-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 89.440661][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.455215][ T5847] usb 1-1: config 0 descriptor?? [ 89.474326][ T786] usb 2-1: Using ep0 maxpacket: 8 [ 89.487513][ T786] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.515916][ T786] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 89.535770][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.551474][ T786] usb 2-1: config 0 descriptor?? [ 89.683280][ T6169] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 89.754538][ T5847] usb 1-1: string descriptor 0 read error: -71 [ 89.761317][ T5847] qmi_wwan: probe of 1-1:0.0 failed with error -22 [ 89.784805][ T5847] usb 1-1: USB disconnect, device number 3 [ 89.790375][ T786] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 89.869084][ T786] usb 2-1: USB disconnect, device number 11 [ 90.441340][ T6231] overlay: Unknown parameter 'dont_appraise' [ 90.789562][ T6233] loop3: detected capacity change from 0 to 32768 [ 90.973470][ T6238] loop0: detected capacity change from 0 to 2048 [ 91.035365][ T6242] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 91.255492][ T6244] loop3: detected capacity change from 0 to 512 [ 91.443117][ T6244] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.518331][ T6244] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.675864][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.874593][ T28] audit: type=1326 audit(1766603294.004:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0718f749 code=0x7ffc0000 [ 91.897335][ T787] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 91.909724][ T28] audit: type=1326 audit(1766603294.014:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b0718f749 code=0x7ffc0000 [ 91.939063][ T28] audit: type=1326 audit(1766603294.014:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0718f749 code=0x7ffc0000 [ 91.999502][ T28] audit: type=1326 audit(1766603294.014:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b0718f749 code=0x7ffc0000 [ 92.021412][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.093060][ T6268] loop0: detected capacity change from 0 to 128 [ 92.118221][ T28] audit: type=1326 audit(1766603294.014:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0718f749 code=0x7ffc0000 [ 92.186153][ T787] usb 2-1: device descriptor read/64, error -71 [ 92.208698][ T28] audit: type=1326 audit(1766603294.014:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f9b0718f749 code=0x7ffc0000 [ 92.246579][ T6271] netlink: 'syz.2.100': attribute type 1 has an invalid length. [ 92.255087][ T6271] netlink: 161700 bytes leftover after parsing attributes in process `syz.2.100'. [ 92.267457][ T28] audit: type=1326 audit(1766603294.014:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0718f749 code=0x7ffc0000 [ 92.324219][ T28] audit: type=1326 audit(1766603294.014:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0718f749 code=0x7ffc0000 [ 92.346556][ T6261] loop3: detected capacity change from 0 to 32768 [ 92.364284][ T28] audit: type=1326 audit(1766603294.014:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9b07146c47 code=0x7ffc0000 [ 92.393024][ T6261] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 scanned by syz.3.97 (6261) [ 92.435305][ T6273] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 92.444176][ T28] audit: type=1326 audit(1766603294.014:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6262 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9b0718f749 code=0x7ffc0000 [ 92.495280][ T787] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 92.503401][ T6261] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 92.522446][ T6261] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 92.537631][ T6261] BTRFS error (device loop3): superblock checksum mismatch [ 92.567377][ T6261] BTRFS error (device loop3): open_ctree failed: -22 [ 92.580713][ T5846] udevd[5846]: incorrect btrfs checksum on /dev/loop3 [ 92.664121][ T787] usb 2-1: device descriptor read/64, error -71 [ 92.799014][ T787] usb usb2-port1: attempt power cycle [ 92.977574][ T6294] loop0: detected capacity change from 0 to 256 [ 93.017405][ T6294] FAT-fs (loop0): Directory bread(block 1285) failed [ 93.036197][ T6293] FAT-fs (loop0): Directory bread(block 1285) failed [ 93.073279][ T6293] FAT-fs (loop0): Directory bread(block 1285) failed [ 93.125330][ T6293] FAT-fs (loop0): Directory bread(block 1285) failed [ 93.234806][ T787] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 93.297563][ T787] usb 2-1: device descriptor read/8, error -71 [ 93.594562][ T787] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 93.658291][ T787] usb 2-1: device descriptor read/8, error -71 [ 93.785271][ T787] usb usb2-port1: unable to enumerate USB device [ 94.322621][ T6314] loop3: detected capacity change from 0 to 32768 [ 94.339921][ T6314] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.109 (6314) [ 94.365338][ T6314] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 94.381737][ T6314] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 94.410161][ T6314] BTRFS info (device loop3): using free space tree [ 94.519073][ T6314] BTRFS info (device loop3): enabling ssd optimizations [ 94.539075][ T6314] BTRFS info (device loop3): auto enabling async discard [ 95.677972][ T6351] loop1: detected capacity change from 0 to 32768 [ 96.986616][ T6351] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 97.151807][ T5768] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 97.194406][ T787] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 97.229203][ T6366] overlayfs: failed to resolve './file0': -2 [ 97.251362][ T5767] ocfs2: Unmounting device (7,1) on (node local) [ 97.384204][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 97.406323][ T787] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 97.424182][ T787] usb 1-1: config 0 has no interface number 0 [ 97.450640][ T787] usb 1-1: config 0 interface 184 has no altsetting 0 [ 97.473483][ T787] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 97.503208][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.533578][ T787] usb 1-1: Product: syz [ 97.538268][ T787] usb 1-1: Manufacturer: syz [ 97.542880][ T787] usb 1-1: SerialNumber: syz [ 97.574836][ T787] usb 1-1: config 0 descriptor?? [ 97.597967][ T787] smsc75xx v1.0.0 [ 98.229929][ T6368] loop1: detected capacity change from 0 to 32768 [ 98.296381][ T6368] [ 98.296381][ T6368] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.296381][ T6368] [ 98.686923][ T6371] syz.1.120 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 98.723981][ T6371] read_mapping_page failed! [ 98.729107][ T6371] ERROR: (device loop1): txCommit: [ 98.729107][ T6371] [ 98.760279][ T6371] ERROR: (device loop1): remounting filesystem as read-only [ 98.887703][ T6370] loop3: detected capacity change from 0 to 131072 [ 98.905096][ T6370] F2FS-fs (loop3): invalid crc value [ 98.941471][ T6370] F2FS-fs (loop3): Found nat_bits in checkpoint [ 98.996048][ T6370] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 99.694238][ T787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 99.713147][ T6359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.743368][ T6359] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.947987][ T787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 99.979877][ T787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 100.004090][ T787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 100.031739][ T787] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 100.073122][ T787] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 100.108662][ T787] usb 1-1: USB disconnect, device number 4 [ 100.362431][ T6399] vlan0: entered promiscuous mode [ 100.474844][ T6404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.125'. [ 100.538702][ T6405] loop0: detected capacity change from 0 to 8 [ 100.546318][ T6405] squashfs: Unknown parameter '2~:1uD{2_YODGV덂a Nc#-' [ 101.009296][ T6399] team0: Port device vlan0 added [ 101.016950][ T6406] bridge0: entered allmulticast mode [ 101.205439][ T6399] loop1: detected capacity change from 0 to 8 [ 101.225125][ T6399] squashfs: Unknown parameter 'c' [ 101.259971][ T5869] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 101.644756][ T6422] loop1: detected capacity change from 0 to 4096 [ 101.692200][ T6425] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 101.789511][ T6422] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12) [ 101.829266][ T6422] Remounting filesystem read-only [ 101.910547][ T6415] loop0: detected capacity change from 0 to 32768 [ 101.933797][ T6415] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.129 (6415) [ 101.999354][ T6415] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 102.044347][ T6415] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 102.053052][ T6415] BTRFS info (device loop0): using free space tree [ 102.447182][ T6415] BTRFS info (device loop0): enabling ssd optimizations [ 102.510219][ T6436] loop3: detected capacity change from 0 to 4096 [ 102.524298][ T6415] BTRFS info (device loop0): auto enabling async discard [ 102.748666][ T6436] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 102.836856][ T6436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.170830][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.232372][ T6468] loop1: detected capacity change from 0 to 512 [ 103.372802][ T6468] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 103.386413][ T5761] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 103.421317][ T6468] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.982827][ T6468] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 104.033364][ T6467] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.275918][ T6483] loop3: detected capacity change from 0 to 32768 [ 104.304537][ T6483] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 104.371867][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 104.371880][ T28] audit: type=1326 audit(1766603306.504:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4738f749 code=0x7ffc0000 [ 104.400621][ T28] audit: type=1326 audit(1766603306.504:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4738f749 code=0x7ffc0000 [ 104.409642][ T6483] XFS (loop3): Ending clean mount [ 104.423116][ T28] audit: type=1326 audit(1766603306.504:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6a4738f749 code=0x7ffc0000 [ 104.423156][ T28] audit: type=1326 audit(1766603306.504:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4738f749 code=0x7ffc0000 [ 104.423189][ T28] audit: type=1326 audit(1766603306.504:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4738f749 code=0x7ffc0000 [ 104.489732][ T6483] XFS (loop3): Quotacheck needed: Please wait. [ 104.506366][ T28] audit: type=1326 audit(1766603306.504:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f6a47346357 code=0x7ffc0000 [ 104.543975][ T28] audit: type=1326 audit(1766603306.504:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6a473463b6 code=0x7ffc0000 [ 104.572480][ T28] audit: type=1326 audit(1766603306.504:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6a4738f749 code=0x7ffc0000 [ 104.597879][ T6483] XFS (loop3): Quotacheck: Done. [ 104.632997][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.669008][ T28] audit: type=1326 audit(1766603306.504:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4738f749 code=0x7ffc0000 [ 104.692996][ T28] audit: type=1326 audit(1766603306.504:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6495 comm="syz.2.140" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6a4738f749 code=0x7ffc0000 [ 105.044947][ T786] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 105.047353][ T5768] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.224603][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 105.239770][ T786] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 105.251010][ T786] usb 2-1: config 0 has no interface number 0 [ 105.257522][ T786] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 105.268118][ T786] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 105.278511][ T786] usb 2-1: config 0 interface 41 has no altsetting 0 [ 105.309658][ T786] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 105.319062][ T786] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.342272][ T786] usb 2-1: Product: syz [ 105.431219][ T786] usb 2-1: Manufacturer: syz [ 105.453244][ T786] usb 2-1: SerialNumber: syz [ 105.496541][ T786] usb 2-1: config 0 descriptor?? [ 105.565196][ T6502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.574239][ T6502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.838874][ T6502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 105.848456][ T6502] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 106.162576][ T6528] loop3: detected capacity change from 0 to 512 [ 106.182882][ T6528] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 106.199260][ T6528] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 106.235086][ T6528] EXT4-fs (loop3): orphan file too big: 4294967295 [ 106.263702][ T786] CoreChips: probe of 2-1:0.41 failed with error -22 [ 106.273646][ T6528] EXT4-fs (loop3): mount failed [ 106.458378][ T6528] loop3: detected capacity change from 0 to 8192 [ 106.510404][ T6528] loop3: p1 < > p2 < p5 > p4 [ 106.541211][ T6528] loop3: p4 size 16776960 extends beyond EOD, truncated [ 106.567249][ T6528] loop3: p5 size 16776960 extends beyond EOD, truncated [ 107.073771][ T6550] IPVS: Scheduler module ip_vs_ not found [ 107.118379][ T5755] udevd[5755]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 107.138246][ T5774] udevd[5774]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory [ 107.151584][ T5753] udevd[5753]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory [ 108.341216][ T5869] udevd[5869]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory [ 108.360033][ T786] usb 2-1: USB disconnect, device number 16 [ 108.406760][ T6538] loop3: detected capacity change from 0 to 256 [ 108.414655][ T6538] exfat: Unknown parameter '' [ 108.450096][ T5869] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 108.931064][ T6561] ubi: mtd0 is already attached to ubi31 [ 110.032332][ T6583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.162'. [ 110.193878][ T6596] loop1: detected capacity change from 0 to 1024 [ 110.230713][ T6596] ext4: Unknown parameter 'obj_user' [ 110.531963][ T6580] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 111.302218][ T6611] loop0: detected capacity change from 0 to 4096 [ 111.384661][ T6613] (null): rxe_set_mtu: Set mtu to 1024 [ 111.397178][ T6613] ip6gretap0 speed is unknown, defaulting to 1000 [ 111.420847][ T6613] ip6gretap0 speed is unknown, defaulting to 1000 [ 111.443097][ T6613] ip6gretap0 speed is unknown, defaulting to 1000 [ 112.009371][ T6613] infiniband syz2: set active [ 112.014498][ T6613] infiniband syz2: added ip6gretap0 [ 112.029358][ T5842] ip6gretap0 speed is unknown, defaulting to 1000 [ 112.079712][ T6611] __ntfs_error: 68 callbacks suppressed [ 112.079727][ T6611] ntfs: (device loop0): ntfs_read_inode_mount(): $MFT must be uncompressed, non-sparse, and unencrypted but a compressed/sparse/encrypted extent was found. $MFT is corrupt. Run chkdsk. [ 112.118052][ T6611] ntfs: (device loop0): ntfs_read_inode_mount(): Failed. Marking inode as bad. [ 112.130710][ T6611] ntfs: (device loop0): ntfs_fill_super(): Failed to load essential metadata. [ 112.135153][ T6613] RDS/IB: syz2: added [ 112.144745][ T6613] smc: adding ib device syz2 with port count 1 [ 112.151116][ T6613] smc: ib device syz2 port 1 has pnetid [ 112.160824][ T6613] ip6gretap0 speed is unknown, defaulting to 1000 [ 112.295290][ T5825] ip6gretap0 speed is unknown, defaulting to 1000 [ 112.395817][ T6613] ip6gretap0 speed is unknown, defaulting to 1000 [ 112.540406][ T6613] ip6gretap0 speed is unknown, defaulting to 1000 [ 112.626540][ T6613] ip6gretap0 speed is unknown, defaulting to 1000 [ 112.799397][ T6621] ubi: mtd0 is already attached to ubi31 [ 113.077340][ T6624] block nbd0: Cannot use ioctl interface on a netlink controlled device. [ 113.350951][ T6632] loop3: detected capacity change from 0 to 1024 [ 113.363990][ T6632] hfsplus: unable to parse mount options [ 113.405334][ T5869] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 113.434385][ T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 113.545065][ T6636] loop3: detected capacity change from 0 to 512 [ 113.552255][ T6636] EXT4-fs: Ignoring removed oldalloc option [ 113.563244][ T6636] EXT4-fs: Ignoring removed mblk_io_submit option [ 113.573771][ T6636] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 113.588980][ T6636] EXT4-fs (loop3): orphan cleanup on readonly fs [ 113.599739][ T6636] Quota error (device loop3): do_check_range: Getting block 196613 out of range 1-5 [ 113.610881][ T6636] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 113.620626][ T6636] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.174: Failed to acquire dquot type 1 [ 113.624317][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 113.640242][ T8] usb 1-1: config 4 has an invalid interface number: 128 but max is 0 [ 113.645468][ T6636] EXT4-fs (loop3): 1 truncate cleaned up [ 113.655247][ T8] usb 1-1: config 4 has no interface number 0 [ 113.659072][ T6636] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 113.661541][ T8] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.700607][ T8] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 113.720047][ T8] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 113.731508][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.751523][ T6636] ext4: Unknown parameter ';fFۭ1t ' [ 113.768516][ T8] hub 1-1:4.128: USB hub found [ 113.787604][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.965903][ T8] hub 1-1:4.128: 2 ports detected [ 113.981810][ T8] hub 1-1:4.128: Using single TT (err -22) [ 114.410506][ T8] usb 1-1: USB disconnect, device number 5 [ 114.655522][ T6655] ip6gretap0 speed is unknown, defaulting to 1000 [ 115.229672][ T6668] loop1: detected capacity change from 0 to 1024 [ 115.595128][ T6668] netlink: 12 bytes leftover after parsing attributes in process `syz.1.183'. [ 115.752674][ T6668] hfsplus: b-tree write err: -5, ino 3 [ 116.094999][ T1125] hfsplus: bad catalog file entry [ 116.100368][ T1125] hfsplus: b-tree write err: -5, ino 3 [ 116.260751][ T6673] loop0: detected capacity change from 0 to 16 [ 116.574123][ T23] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 116.764144][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 116.764153][ T8] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 116.779913][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 116.789331][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 116.796948][ T23] usb 2-1: can't read configurations, error -61 [ 116.924245][ T8] usb 4-1: device descriptor read/64, error -71 [ 116.972163][ T23] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 117.164306][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 117.174539][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.188765][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 117.197812][ T23] usb 2-1: can't read configurations, error -61 [ 117.204785][ T23] usb usb2-port1: attempt power cycle [ 117.546798][ T5825] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 117.555261][ T8] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 117.634214][ T23] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 117.674829][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 117.682132][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.694912][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 117.702536][ T23] usb 2-1: can't read configurations, error -61 [ 117.744322][ T8] usb 4-1: device descriptor read/64, error -71 [ 117.774284][ T5825] usb 1-1: Using ep0 maxpacket: 8 [ 117.781368][ T5825] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.792448][ T5825] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 117.805944][ T5825] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 117.816487][ T5825] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.827946][ T5825] usb 1-1: config 0 descriptor?? [ 117.864401][ T8] usb usb4-port1: attempt power cycle [ 117.884562][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 117.915874][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 117.923442][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 117.933412][ T23] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 117.941173][ T23] usb 2-1: can't read configurations, error -61 [ 117.948148][ T23] usb usb2-port1: unable to enumerate USB device [ 118.260326][ T5825] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 118.267542][ T5825] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 118.274782][ T5825] hid-rmi 0003:06CB:81A7.0002: unknown main item tag 0x0 [ 118.283282][ T8] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 118.292764][ T5825] hid-rmi 0003:06CB:81A7.0002: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0 [ 118.316274][ T8] usb 4-1: device descriptor read/8, error -71 [ 118.590081][ T5825] usb 1-1: USB disconnect, device number 6 [ 118.614308][ T8] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 118.647415][ T8] usb 4-1: device descriptor read/8, error -71 [ 118.765392][ T8] usb usb4-port1: unable to enumerate USB device [ 119.594771][ T6707] loop1: detected capacity change from 0 to 4096 [ 119.721560][ T6707] ntfs: (device loop1): parse_options(): NLS character set maccentHuro not found. Using previous one cp857. [ 119.749085][ T6707] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 119.767199][ T28] audit: type=1326 audit(1766603321.904:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.2.198" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6a4738f749 code=0x0 [ 119.829691][ T6707] ntfs: volume version 3.1. [ 119.854494][ T6707] ntfs: (device loop1): ntfs_index_lookup(): Corrupt index. Aborting lookup. [ 119.867370][ T6707] ntfs: (device loop1): ntfs_mark_quotas_out_of_date(): Lookup of quota defaults entry failed. [ 119.891278][ T6707] ntfs: (device loop1): load_system_files(): Failed to mark quotas out of date. Mounting read-only. Run chkdsk. [ 119.903808][ T6707] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Corrupt directory. Aborting lookup. [ 119.917082][ T6707] ntfs: (device loop1): load_and_init_usnjrnl(): Failed to find inode number for $UsnJrnl. [ 119.928061][ T6707] ntfs: (device loop1): load_system_files(): Failed to load $UsnJrnl. Will not be able to remount read-write. Run chkdsk. [ 120.174270][ T5842] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 120.235975][ T6723] ntfs: (device loop1): ntfs_remount(): Volume has errors and is read-only. Cannot remount read-write. [ 120.415362][ T5842] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 120.518690][ T5842] usb 4-1: config 1 has no interface number 0 [ 120.586827][ T5842] usb 4-1: config 1 interface 105 has no altsetting 0 [ 120.686492][ T5842] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=31.6d [ 120.720390][ T8] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.735469][ T5847] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 120.743274][ T5842] usb 4-1: New USB device strings: Mfr=107, Product=102, SerialNumber=146 [ 120.753580][ T5842] usb 4-1: Product: syz [ 120.759632][ T5842] usb 4-1: Manufacturer: syz [ 120.764566][ T5842] usb 4-1: SerialNumber: syz [ 120.904175][ T8] usb 1-1: Using ep0 maxpacket: 32 [ 120.911144][ T8] usb 1-1: config 0 has an invalid interface number: 225 but max is 0 [ 120.919405][ T8] usb 1-1: config 0 has no interface number 0 [ 120.928129][ T8] usb 1-1: New USB device found, idVendor=0856, idProduct=ac30, bcdDevice=7e.79 [ 120.937284][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.945741][ T8] usb 1-1: Product: syz [ 120.946457][ T5847] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.949901][ T8] usb 1-1: Manufacturer: syz [ 120.949916][ T8] usb 1-1: SerialNumber: syz [ 120.952177][ T8] usb 1-1: config 0 descriptor?? [ 120.973731][ T5847] usb 2-1: config 1 has no interface number 1 [ 120.980179][ T5847] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 120.998327][ T5847] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.007536][ T5847] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.015824][ T5847] usb 2-1: Product: syz [ 121.020083][ T5847] usb 2-1: Manufacturer: syz [ 121.024876][ T5847] usb 2-1: SerialNumber: syz [ 121.217004][ T5842] aqc111: probe of 4-1:1.105 failed with error -71 [ 121.229858][ T5842] usb 4-1: USB disconnect, device number 8 [ 121.597740][ T8] mos7840 1-1:0.225: required endpoints missing [ 121.621862][ T8] usb 1-1: USB disconnect, device number 7 [ 121.726884][ T6732] loop3: detected capacity change from 0 to 40427 [ 121.744159][ T6732] F2FS-fs (loop3): Wrong segment_count / block_count (31 > 0) [ 121.751711][ T6732] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 121.774421][ T6732] F2FS-fs (loop3): invalid crc value [ 121.783816][ T6732] F2FS-fs (loop3): Found nat_bits in checkpoint [ 121.838026][ T6732] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 121.846290][ T6732] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 121.885747][ T6732] RDS: rds_bind could not find a transport for 0:0:200::1, load rds_tcp or rds_rdma? [ 121.924231][ T5768] syz-executor: attempt to access beyond end of device [ 121.924231][ T5768] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 121.944679][ T5768] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 122.029644][ T5769] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 122.039982][ T5769] CPU: 0 PID: 5769 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 122.047670][ T5769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 122.057757][ T5769] Workqueue: hci0 hci_rx_work [ 122.062506][ T5769] Call Trace: [ 122.065806][ T5769] [ 122.068760][ T5769] dump_stack_lvl+0x16c/0x230 [ 122.073464][ T5769] ? show_regs_print_info+0x20/0x20 [ 122.078691][ T5769] ? load_image+0x3b0/0x3b0 [ 122.083226][ T5769] sysfs_create_dir_ns+0x256/0x280 [ 122.088360][ T5769] ? hci_rx_work+0x43a/0xd80 [ 122.092971][ T5769] ? sysfs_warn_dup+0xa0/0xa0 [ 122.097680][ T5769] ? do_raw_spin_unlock+0x121/0x230 [ 122.102894][ T5769] kobject_add_internal+0x6b8/0xc70 [ 122.108100][ T5769] kobject_add+0x156/0x220 [ 122.112515][ T5769] ? __rwlock_init+0x150/0x150 [ 122.117289][ T5769] ? kobject_init+0x1e0/0x1e0 [ 122.121966][ T5769] ? _raw_spin_unlock+0x28/0x40 [ 122.126814][ T5769] ? get_device_parent+0x366/0x390 [ 122.131937][ T5769] device_add+0x408/0xc20 [ 122.136280][ T5769] hci_conn_add_sysfs+0xd5/0x1e0 [ 122.141234][ T5769] le_conn_complete_evt+0xf36/0x1500 [ 122.146516][ T5769] ? hci_event_packet+0x4a7/0x1210 [ 122.151627][ T5769] ? hci_le_big_info_adv_report_evt+0x8e0/0x8e0 [ 122.157857][ T5769] ? __copy_skb_header+0xa7/0x550 [ 122.162970][ T5769] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 122.168597][ T5769] ? skb_pull_data+0xfb/0x200 [ 122.173278][ T5769] hci_le_conn_complete_evt+0x187/0x440 [ 122.178856][ T5769] ? hci_remote_host_features_evt+0x160/0x160 [ 122.184930][ T5769] hci_event_packet+0x795/0x1210 [ 122.189893][ T5769] ? bis_list+0x290/0x290 [ 122.194228][ T5769] ? lockdep_hardirqs_on+0x98/0x150 [ 122.199428][ T5769] ? hci_send_to_monitor+0xd7/0x4f0 [ 122.204631][ T5769] hci_rx_work+0x43a/0xd80 [ 122.209056][ T5769] ? process_scheduled_works+0x957/0x15b0 [ 122.214773][ T5769] process_scheduled_works+0xa45/0x15b0 [ 122.220347][ T5769] ? assign_work+0x400/0x400 [ 122.224956][ T5769] ? assign_work+0x39e/0x400 [ 122.229558][ T5769] worker_thread+0xa55/0xfc0 [ 122.234173][ T5769] kthread+0x2fa/0x390 [ 122.238242][ T5769] ? pr_cont_work+0x560/0x560 [ 122.242920][ T5769] ? kthread_blkcg+0xd0/0xd0 [ 122.247509][ T5769] ret_from_fork+0x48/0x80 [ 122.251923][ T5769] ? kthread_blkcg+0xd0/0xd0 [ 122.256506][ T5769] ret_from_fork_asm+0x11/0x20 [ 122.261277][ T5769] [ 122.264384][ C0] vkms_vblank_simulate: vblank timer overrun [ 122.292953][ T5769] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 122.307784][ T5769] Bluetooth: hci0: failed to register connection device [ 122.526204][ T5847] usb 2-1: 2:1 : no UAC_FORMAT_TYPE desc [ 122.608789][ T5847] usb 2-1: USB disconnect, device number 21 [ 122.773972][ T5846] udevd[5846]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.858848][ T6748] loop4: detected capacity change from 0 to 7 [ 122.891229][ T6748] Dev loop4: unable to read RDB block 7 [ 122.905330][ T6748] loop4: unable to read partition table [ 122.911223][ T6748] loop4: partition table beyond EOD, truncated [ 122.932826][ T6748] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5) [ 123.094321][ T6695] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 123.184336][ T6744] loop0: detected capacity change from 0 to 32768 [ 123.248131][ T6744] XFS (loop0): DAX unsupported by block device. Turning off DAX. [ 123.250220][ T6755] syz_tun: entered allmulticast mode [ 123.265969][ T6744] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.273598][ T6764] loop1: detected capacity change from 0 to 512 [ 123.284314][ T6695] usb 4-1: Using ep0 maxpacket: 8 [ 123.301277][ T6695] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.347102][ T6754] syz_tun: left allmulticast mode [ 123.349662][ T6695] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 123.393793][ T6695] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00 [ 123.406567][ T6764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 123.408402][ T6695] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.446844][ T6695] usb 4-1: config 0 descriptor?? [ 123.460923][ T6764] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 123.490667][ T6744] XFS (loop0): Ending clean mount [ 123.534838][ T6744] XFS (loop0): Quotacheck needed: Please wait. [ 123.627525][ T6744] XFS (loop0): Quotacheck: Done. [ 123.764736][ T5761] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 123.786562][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.917848][ T6695] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 123.933269][ T6695] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 123.952405][ T6695] hid-rmi 0003:06CB:81A7.0003: unknown main item tag 0x0 [ 123.981383][ T6695] hid-rmi 0003:06CB:81A7.0003: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.3-1/input0 [ 124.210440][ T787] usb 4-1: USB disconnect, device number 9 [ 124.329436][ T6789] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 124.488507][ T6792] loop1: detected capacity change from 0 to 512 [ 124.496989][ T6789] team0: Port device team_slave_0 removed [ 124.540025][ T6792] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.582099][ T6792] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.118180][ T6803] loop3: detected capacity change from 0 to 8 [ 125.142885][ T6803] process 'syz.3.220' launched './file1' with NULL argv: empty string added [ 125.153661][ T6803] SQUASHFS error: zstd decompression error: 10 [ 125.154268][ T8] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 125.160457][ T6803] SQUASHFS error: zstd decompression failed, data probably corrupt [ 125.176231][ T6803] SQUASHFS error: Failed to read block 0x60: -5 [ 125.183186][ T6803] SQUASHFS error: zstd decompression error: 10 [ 125.189412][ T6803] SQUASHFS error: zstd decompression failed, data probably corrupt [ 125.197386][ T6803] SQUASHFS error: Failed to read block 0x60: -5 [ 125.235928][ T6797] loop0: detected capacity change from 0 to 32768 [ 125.267787][ T6797] (syz.0.218,6797,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.284736][ T6797] (syz.0.218,6797,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 125.338011][ T6797] JBD2: Ignoring recovery information on journal [ 125.398005][ T8] usb 2-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 125.416712][ T8] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 148, using maximum allowed: 30 [ 125.421418][ T6797] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 125.434098][ T8] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 148 [ 125.459729][ T8] usb 2-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 125.480459][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.497195][ T8] usb 2-1: config 0 descriptor?? [ 125.734135][ T5847] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 125.784132][ T787] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 125.919037][ T5847] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 125.958588][ T5847] usb 4-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice= 0.40 [ 125.975369][ T5847] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.994008][ T5847] usb 4-1: Product: syz [ 125.999404][ T787] usb 1-1: not running at top speed; connect to a high speed hub [ 126.014108][ T5847] usb 4-1: Manufacturer: syz [ 126.019000][ T5847] usb 4-1: SerialNumber: syz [ 126.026013][ T787] usb 1-1: config 30 has an invalid interface number: 170 but max is 1 [ 126.043492][ T787] usb 1-1: config 30 has an invalid interface number: 56 but max is 1 [ 126.056185][ T5847] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 126.070938][ T787] usb 1-1: config 30 has no interface number 0 [ 126.083671][ T787] usb 1-1: config 30 has no interface number 1 [ 126.104297][ T787] usb 1-1: config 30 interface 170 has no altsetting 0 [ 126.121706][ T787] usb 1-1: config 30 interface 56 has no altsetting 0 [ 126.139229][ T787] usb 1-1: New USB device found, idVendor=046d, idProduct=093f, bcdDevice=a9.17 [ 126.149772][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.162493][ T787] usb 1-1: Product: syz [ 126.168130][ T787] usb 1-1: Manufacturer: syz [ 126.172975][ T787] usb 1-1: SerialNumber: syz [ 126.342207][ T6792] EXT4-fs error (device loop1): ext4_lookup:1858: inode #12: comm syz.1.217: iget: bad i_size value: 2533274857506816 [ 126.360227][ T8] usb 2-1: string descriptor 0 read error: -71 [ 126.379850][ T8] usb 2-1: USB disconnect, device number 22 [ 126.419866][ T787] usb 1-1: USB disconnect, device number 8 [ 126.918320][ T5767] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 127.039656][ T5761] ocfs2: Unmounting device (7,0) on (node local) [ 127.112713][ T6829] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'. [ 127.129079][ T6829] team0: entered promiscuous mode [ 127.134422][ T6829] team_slave_1: entered promiscuous mode [ 127.270224][ T6833] netlink: 16 bytes leftover after parsing attributes in process `syz.0.224'. [ 127.279248][ T6833] netlink: 48 bytes leftover after parsing attributes in process `syz.0.224'. [ 127.293800][ T6833] macvlan0: entered allmulticast mode [ 127.299268][ T6833] veth1_vlan: entered allmulticast mode [ 127.324122][ T8] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 127.514130][ T8] usb 2-1: Using ep0 maxpacket: 32 [ 127.521565][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 127.533048][ T8] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 127.544695][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 127.556739][ T8] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.567749][ T8] usb 2-1: config 0 descriptor?? [ 127.580183][ T8] hub 2-1:0.0: USB hub found [ 127.644174][ T5847] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 127.844288][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 127.888650][ T8] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 127.904802][ T6695] usb 4-1: USB disconnect, device number 10 [ 127.923582][ T5847] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 127.949271][ T8] usbhid 2-1:0.0: can't add hid device: -71 [ 127.965081][ T8] usbhid: probe of 2-1:0.0 failed with error -71 [ 127.995968][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.017396][ T5847] usb 1-1: Product: syz [ 128.021757][ T5847] usb 1-1: Manufacturer: syz [ 128.027437][ T5847] usb 1-1: SerialNumber: syz [ 128.040277][ T5847] usb 1-1: config 0 descriptor?? [ 128.073546][ T5847] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 128.077664][ T8] usb 2-1: USB disconnect, device number 23 [ 128.904169][ T5842] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 129.073429][ T5847] gspca_stk1135: reg_w 0x7 err -71 [ 129.084354][ T5847] gspca_stk1135: serial bus timeout: status=0x00 [ 129.090859][ T5847] gspca_stk1135: Sensor write failed [ 129.096394][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 129.101658][ T5847] gspca_stk1135: serial bus timeout: status=0x00 [ 129.111053][ T5847] gspca_stk1135: Sensor write failed [ 129.116881][ T5847] gspca_stk1135: serial bus timeout: status=0x00 [ 129.117254][ T5842] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 129.135261][ T5847] gspca_stk1135: Sensor read failed [ 129.140535][ T5847] gspca_stk1135: serial bus timeout: status=0x00 [ 129.147075][ T5842] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 129.158169][ T5847] gspca_stk1135: Sensor read failed [ 129.163420][ T5847] gspca_stk1135: Detected sensor type unknown (0x0) [ 129.170751][ T5847] gspca_stk1135: serial bus timeout: status=0x00 [ 129.177466][ T5847] gspca_stk1135: Sensor read failed [ 129.182972][ T5847] gspca_stk1135: serial bus timeout: status=0x00 [ 129.189570][ T5847] gspca_stk1135: Sensor read failed [ 129.195106][ T5847] gspca_stk1135: serial bus timeout: status=0x00 [ 129.201493][ T5847] gspca_stk1135: Sensor write failed [ 129.207098][ T5847] gspca_stk1135: serial bus timeout: status=0x00 [ 129.213507][ T5847] gspca_stk1135: Sensor write failed [ 129.219013][ T5842] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 129.228075][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.236874][ T5847] stk1135: probe of 1-1:0.0 failed with error -71 [ 129.243310][ T5842] usb 4-1: Product: syz [ 129.249185][ T5842] usb 4-1: Manufacturer: syz [ 129.255090][ T5847] usb 1-1: USB disconnect, device number 9 [ 129.260937][ T5842] usb 4-1: SerialNumber: syz [ 129.304636][ T6695] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 129.484364][ T5842] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 129.506451][ T6695] usb 2-1: Using ep0 maxpacket: 8 [ 129.511717][ T5842] usb 4-1: USB disconnect, device number 11 [ 129.543706][ T6695] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 129.577396][ T6695] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.586268][ T6695] usb 2-1: Product: syz [ 129.590490][ T6695] usb 2-1: Manufacturer: syz [ 129.605914][ T6695] usb 2-1: SerialNumber: syz [ 129.617352][ T6695] usb 2-1: config 0 descriptor?? [ 129.627570][ T6695] gspca_main: se401-2.14.0 probing 047d:5003 [ 130.091250][ T6863] loop0: detected capacity change from 0 to 32768 [ 130.111111][ T6695] gspca_se401: Frame size: 0x2 bayer [ 130.118291][ T6695] gspca_se401: Frame size: 0x65535 bayer [ 130.145398][ T6695] gspca_se401: Frame size: 65535x0 bayer [ 130.153476][ T6863] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 130.165537][ T6695] gspca_se401: Frame size: 0x0 1/16th janggu [ 130.245386][ T6863] XFS (loop0): Ending clean mount [ 130.327931][ T6695] input: se401 as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 130.374504][ T9] XFS (loop0): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair. [ 130.432967][ T6695] usb 2-1: USB disconnect, device number 24 [ 130.487051][ T5761] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 131.001271][ T6883] damon-dbgfs: DAMON debugfs interface is deprecated, so users should move to DAMON_SYSFS. If you cannot, please report your usecase to damon@lists.linux.dev and linux-mm@kvack.org. [ 131.065570][ T6885] loop0: detected capacity change from 0 to 128 [ 131.433145][ T6885] syz.0.238: attempt to access beyond end of device [ 131.433145][ T6885] loop0: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 131.484525][ T6890] loop3: detected capacity change from 0 to 1024 [ 131.512036][ T6890] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 131.557848][ T6890] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 131.605713][ T6890] EXT4-fs (loop3): orphan cleanup on readonly fs [ 131.647357][ T6890] EXT4-fs error (device loop3): ext4_free_blocks:6676: comm syz.3.240: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.741879][ T6890] EXT4-fs (loop3): 1 orphan inode deleted [ 131.765930][ T6890] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 131.879597][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.058402][ T6908] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 132.348669][ T6921] xt_l2tp: missing protocol rule (udp|l2tpip) [ 132.355014][ T6695] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 132.383371][ T6919] binder: 6918:6919 ioctl c0306201 2000000001c0 returned -14 [ 132.514203][ T6695] usb 2-1: device descriptor read/64, error -71 [ 132.675900][ T6926] xt_CT: No such helper "pptp" [ 132.754327][ T5842] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 132.794101][ T6695] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 132.934102][ T5842] usb 4-1: Using ep0 maxpacket: 32 [ 132.951655][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.951756][ T5842] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 132.958185][ T6695] usb 2-1: device descriptor read/64, error -71 [ 132.972718][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.980510][ T5842] usb 4-1: config 0 has no interface number 0 [ 132.997506][ T5842] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 133.029373][ T5842] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 133.048176][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.072855][ T5842] usb 4-1: Product: syz [ 133.084230][ T5842] usb 4-1: Manufacturer: syz [ 133.094102][ T5842] usb 4-1: SerialNumber: syz [ 133.107441][ T5842] usb 4-1: config 0 descriptor?? [ 133.114650][ T6695] usb usb2-port1: attempt power cycle [ 133.127362][ T5842] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 133.144084][ T5842] em28xx 4-1:0.132: Video interface 132 found: [ 133.378159][ T6933] loop0: detected capacity change from 0 to 1024 [ 133.473847][ T6937] loop0: detected capacity change from 0 to 512 [ 133.493277][ T6937] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.252: inode has both inline data and extents flags [ 133.528225][ T6937] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.252: couldn't read orphan inode 15 (err -117) [ 133.543242][ T6695] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 133.555062][ T5842] em28xx 4-1:0.132: unknown em28xx chip ID (39) [ 133.566387][ T6937] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.574733][ T6941] netlink: 68 bytes leftover after parsing attributes in process `syz.2.253'. [ 133.601079][ T6695] usb 2-1: device descriptor read/8, error -71 [ 133.877307][ T6695] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 133.916047][ T6695] usb 2-1: device descriptor read/8, error -71 [ 133.967052][ T5842] em28xx 4-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 133.980494][ T5842] em28xx 4-1:0.132: board has no eeprom [ 134.044510][ T6695] usb usb2-port1: unable to enumerate USB device [ 134.087753][ T5842] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 134.095700][ T5842] em28xx 4-1:0.132: analog set to bulk mode. [ 134.102971][ T5847] em28xx 4-1:0.132: Registering V4L2 extension [ 134.315316][ T5761] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 134.369235][ T6695] usb 4-1: USB disconnect, device number 12 [ 134.373382][ T5847] em28xx 4-1:0.132: reading from i2c device at 0x4a failed: couldn't get the received message from the bridge (error=-5) [ 134.386537][ T6695] em28xx 4-1:0.132: Disconnecting em28xx [ 134.486427][ T5847] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 134.495139][ T6959] loop0: detected capacity change from 0 to 512 [ 134.498124][ T5847] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 134.513482][ T6959] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 134.513531][ T5847] em28xx 4-1:0.132: No AC97 audio processor [ 134.533658][ T6959] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 134.552315][ T5847] usb 4-1: Decoder not found [ 134.553256][ T6959] EXT4-fs (loop0): orphan cleanup on readonly fs [ 134.566684][ T6959] EXT4-fs error (device loop0): ext4_orphan_get:1425: comm syz.0.258: bad orphan inode 15 [ 134.570088][ T5847] em28xx 4-1:0.132: failed to create media graph [ 134.594470][ T6959] ext4_test_bit(bit=14, block=18) = 1 [ 134.594763][ T5847] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 134.607265][ T6959] is_bad_inode(inode)=0 [ 134.617241][ T6959] NEXT_ORPHAN(inode)=1023 [ 134.640514][ T6959] max_ino=32 [ 134.651147][ T6959] i_nlink=0 [ 134.666511][ T6959] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2988: inode #15: comm syz.0.258: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled [ 134.671695][ T6961] ================================================================== [ 134.685298][ T6959] EXT4-fs warning (device loop0): ext4_evict_inode:272: xattr delete (err -117) [ 134.691901][ T6961] BUG: KASAN: slab-use-after-free in v4l2_fh_open+0xca/0x430 [ 134.702892][ T6959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 134.708236][ T6961] Read of size 8 at addr ffff88807bbc8738 by task v4l_id/6961 [ 134.708250][ T6961] [ 134.708256][ T6961] CPU: 1 PID: 6961 Comm: v4l_id Not tainted syzkaller #0 [ 134.708270][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 134.708279][ T6961] Call Trace: [ 134.750238][ T6961] [ 134.753171][ T6961] dump_stack_lvl+0x16c/0x230 [ 134.757864][ T6961] ? __lock_acquire+0x7c80/0x7c80 [ 134.762878][ T6961] ? show_regs_print_info+0x20/0x20 [ 134.768069][ T6961] ? load_image+0x3b0/0x3b0 [ 134.772560][ T6961] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 134.777918][ T6961] ? __virt_addr_valid+0x18c/0x540 [ 134.783020][ T6961] ? __virt_addr_valid+0x469/0x540 [ 134.788115][ T6961] print_report+0xac/0x220 [ 134.792519][ T6961] ? v4l2_fh_open+0xca/0x430 [ 134.797107][ T6961] kasan_report+0x117/0x150 [ 134.801607][ T6961] ? v4l2_fh_open+0xca/0x430 [ 134.806187][ T6961] v4l2_fh_open+0xca/0x430 [ 134.810602][ T6961] em28xx_v4l2_open+0x157/0x980 [ 134.815448][ T6961] v4l2_open+0x212/0x360 [ 134.819694][ T6961] chrdev_open+0x59e/0x670 [ 134.824107][ T6961] ? cd_forget+0x160/0x160 [ 134.828511][ T6961] ? fsnotify_perm+0x3ed/0x5e0 [ 134.833267][ T6961] ? cd_forget+0x160/0x160 [ 134.837670][ T6961] do_dentry_open+0x8c6/0x1500 [ 134.842423][ T6961] path_openat+0x274b/0x3190 [ 134.847009][ T6961] ? __kasan_slab_alloc+0x6c/0x80 [ 134.852019][ T6961] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.858070][ T6961] ? verify_lock_unused+0x140/0x140 [ 134.863254][ T6961] ? do_filp_open+0x3d0/0x3d0 [ 134.867924][ T6961] ? __virt_addr_valid+0x18c/0x540 [ 134.873034][ T6961] do_filp_open+0x1c5/0x3d0 [ 134.877533][ T6961] ? vfs_tmpfile+0x490/0x490 [ 134.882123][ T6961] ? _raw_spin_unlock+0x28/0x40 [ 134.886963][ T6961] ? alloc_fd+0x58f/0x630 [ 134.891281][ T6961] do_sys_openat2+0x12c/0x1c0 [ 134.895955][ T6961] ? do_sys_open+0xe0/0xe0 [ 134.900367][ T6961] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 134.906336][ T6961] ? lock_chain_count+0x20/0x20 [ 134.911177][ T6961] ? lock_chain_count+0x20/0x20 [ 134.916028][ T6961] __x64_sys_openat+0x139/0x160 [ 134.920871][ T6961] do_syscall_64+0x55/0xb0 [ 134.925275][ T6961] ? clear_bhb_loop+0x40/0x90 [ 134.929938][ T6961] ? clear_bhb_loop+0x40/0x90 [ 134.934602][ T6961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 134.940498][ T6961] RIP: 0033:0x7f2d010a7407 [ 134.944918][ T6961] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 134.964521][ T6961] RSP: 002b:00007ffe560dcfa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 134.972934][ T6961] RAX: ffffffffffffffda RBX: 00007f2d018a5880 RCX: 00007f2d010a7407 [ 134.980905][ T6961] RDX: 0000000000000000 RSI: 00007ffe560def1b RDI: ffffffffffffff9c [ 134.988877][ T6961] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 134.996846][ T6961] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 135.004807][ T6961] R13: 00007ffe560dd1f0 R14: 00007f2d01a04000 R15: 00005579bf8f44d8 [ 135.012774][ T6961] [ 135.015779][ T6961] [ 135.018107][ T6961] Allocated by task 5847: [ 135.022423][ T6961] kasan_set_track+0x4e/0x70 [ 135.027003][ T6961] __kasan_kmalloc+0x8f/0xa0 [ 135.031579][ T6961] em28xx_v4l2_init+0x10b/0x2e70 [ 135.036518][ T6961] em28xx_init_extension+0x11c/0x1b0 [ 135.041804][ T6961] process_scheduled_works+0xa45/0x15b0 [ 135.047351][ T6961] worker_thread+0xa55/0xfc0 [ 135.051931][ T6961] kthread+0x2fa/0x390 [ 135.056000][ T6961] ret_from_fork+0x48/0x80 [ 135.060401][ T6961] ret_from_fork_asm+0x11/0x20 [ 135.065158][ T6961] [ 135.067466][ T6961] Freed by task 5847: [ 135.071427][ T6961] kasan_set_track+0x4e/0x70 [ 135.076004][ T6961] kasan_save_free_info+0x2e/0x50 [ 135.081017][ T6961] ____kasan_slab_free+0x126/0x1e0 [ 135.086108][ T6961] slab_free_freelist_hook+0x130/0x1b0 [ 135.091552][ T6961] __kmem_cache_free+0xba/0x1f0 [ 135.096387][ T6961] em28xx_v4l2_init+0x1670/0x2e70 [ 135.101400][ T6961] em28xx_init_extension+0x11c/0x1b0 [ 135.106669][ T6961] process_scheduled_works+0xa45/0x15b0 [ 135.112199][ T6961] worker_thread+0xa55/0xfc0 [ 135.116772][ T6961] kthread+0x2fa/0x390 [ 135.120822][ T6961] ret_from_fork+0x48/0x80 [ 135.125224][ T6961] ret_from_fork_asm+0x11/0x20 [ 135.129974][ T6961] [ 135.132279][ T6961] The buggy address belongs to the object at ffff88807bbc8000 [ 135.132279][ T6961] which belongs to the cache kmalloc-8k of size 8192 [ 135.146311][ T6961] The buggy address is located 1848 bytes inside of [ 135.146311][ T6961] freed 8192-byte region [ffff88807bbc8000, ffff88807bbca000) [ 135.160265][ T6961] [ 135.162571][ T6961] The buggy address belongs to the physical page: [ 135.168979][ T6961] page:ffffea0001eef200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bbc8 [ 135.179120][ T6961] head:ffffea0001eef200 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 135.188036][ T6961] ksm flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 135.196353][ T6961] page_type: 0xffffffff() [ 135.200663][ T6961] raw: 00fff00000000840 ffff888017842280 ffffea0001fd6000 dead000000000003 [ 135.209246][ T6961] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 135.217812][ T6961] page dumped because: kasan: bad access detected [ 135.224219][ T6961] page_owner tracks the page as allocated [ 135.229953][ T6961] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6169, tgid 6168 (syz.0.76), ts 89727420614, free_ts 89134587280 [ 135.252343][ T6961] post_alloc_hook+0x1cd/0x210 [ 135.257101][ T6961] get_page_from_freelist+0x195c/0x19f0 [ 135.262636][ T6961] __alloc_pages+0x1e3/0x460 [ 135.267217][ T6961] alloc_slab_page+0x5d/0x170 [ 135.271895][ T6961] new_slab+0x87/0x2e0 [ 135.275986][ T6961] ___slab_alloc+0xc6d/0x1300 [ 135.280656][ T6961] __kmem_cache_alloc_node+0x1a2/0x260 [ 135.286111][ T6961] __kmalloc_node_track_caller+0xa2/0x230 [ 135.291840][ T6961] krealloc+0x86/0x120 [ 135.295907][ T6961] copy_array+0x64/0xf0 [ 135.300059][ T6961] copy_verifier_state+0x7f3/0xd20 [ 135.305158][ T6961] do_check+0x3b00/0xdbe0 [ 135.309475][ T6961] do_check_common+0xadb/0x13e0 [ 135.314316][ T6961] bpf_check+0x649f/0xe970 [ 135.318715][ T6961] bpf_prog_load+0x11cb/0x16d0 [ 135.323461][ T6961] __sys_bpf+0x55a/0x800 [ 135.327684][ T6961] page last free stack trace: [ 135.332333][ T6961] free_unref_page_prepare+0x7ce/0x8e0 [ 135.337778][ T6961] free_unref_page+0x32/0x2e0 [ 135.342440][ T6961] __unfreeze_partials+0x1cf/0x210 [ 135.347539][ T6961] put_cpu_partial+0x17c/0x250 [ 135.352286][ T6961] __slab_free+0x31d/0x410 [ 135.356703][ T6961] qlist_free_all+0x75/0xe0 [ 135.361201][ T6961] kasan_quarantine_reduce+0x143/0x160 [ 135.366654][ T6961] __kasan_slab_alloc+0x22/0x80 [ 135.371496][ T6961] slab_post_alloc_hook+0x6e/0x4d0 [ 135.376608][ T6961] __kmem_cache_alloc_node+0x13e/0x260 [ 135.382072][ T6961] kmalloc_trace+0x2a/0xe0 [ 135.386494][ T6961] usb_control_msg+0x74/0x3e0 [ 135.391168][ T6961] hub_ext_port_status+0x103/0x6d0 [ 135.396263][ T6961] hub_event+0x77a/0x49c0 [ 135.400591][ T6961] process_scheduled_works+0xa45/0x15b0 [ 135.406140][ T6961] worker_thread+0xa55/0xfc0 [ 135.410734][ T6961] [ 135.413045][ T6961] Memory state around the buggy address: [ 135.418666][ T6961] ffff88807bbc8600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.426727][ T6961] ffff88807bbc8680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.434778][ T6961] >ffff88807bbc8700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.442819][ T6961] ^ [ 135.448693][ T6961] ffff88807bbc8780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.456739][ T6961] ffff88807bbc8800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 135.464785][ T6961] ================================================================== [ 135.475725][ T5847] em28xx 4-1:0.132: Remote control support is not available for this card. [ 135.485813][ T6695] em28xx 4-1:0.132: Closing input extension SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 135.717528][ T6961] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 135.724756][ T6961] CPU: 1 PID: 6961 Comm: v4l_id Not tainted syzkaller #0 [ 135.731776][ T6961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 135.741834][ T6961] Call Trace: [ 135.745119][ T6961] [ 135.748051][ T6961] dump_stack_lvl+0x16c/0x230 [ 135.752746][ T6961] ? show_regs_print_info+0x20/0x20 [ 135.757956][ T6961] ? load_image+0x3b0/0x3b0 [ 135.762471][ T6961] panic+0x2c0/0x710 [ 135.766632][ T6961] ? bpf_jit_dump+0xd0/0xd0 [ 135.771141][ T6961] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 135.777038][ T6961] ? _raw_spin_unlock+0x40/0x40 [ 135.781876][ T6961] ? print_memory_metadata+0x314/0x400 [ 135.787327][ T6961] ? v4l2_fh_open+0xca/0x430 [ 135.791907][ T6961] check_panic_on_warn+0x84/0xa0 [ 135.796831][ T6961] ? v4l2_fh_open+0xca/0x430 [ 135.801406][ T6961] end_report+0x6f/0x140 [ 135.805633][ T6961] kasan_report+0x128/0x150 [ 135.810121][ T6961] ? v4l2_fh_open+0xca/0x430 [ 135.814705][ T6961] v4l2_fh_open+0xca/0x430 [ 135.819115][ T6961] em28xx_v4l2_open+0x157/0x980 [ 135.823957][ T6961] v4l2_open+0x212/0x360 [ 135.828187][ T6961] chrdev_open+0x59e/0x670 [ 135.832594][ T6961] ? cd_forget+0x160/0x160 [ 135.837001][ T6961] ? fsnotify_perm+0x3ed/0x5e0 [ 135.841754][ T6961] ? cd_forget+0x160/0x160 [ 135.846162][ T6961] do_dentry_open+0x8c6/0x1500 [ 135.850921][ T6961] path_openat+0x274b/0x3190 [ 135.855501][ T6961] ? __kasan_slab_alloc+0x6c/0x80 [ 135.860511][ T6961] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.866574][ T6961] ? verify_lock_unused+0x140/0x140 [ 135.871775][ T6961] ? do_filp_open+0x3d0/0x3d0 [ 135.876450][ T6961] ? __virt_addr_valid+0x18c/0x540 [ 135.881552][ T6961] do_filp_open+0x1c5/0x3d0 [ 135.886050][ T6961] ? vfs_tmpfile+0x490/0x490 [ 135.890639][ T6961] ? _raw_spin_unlock+0x28/0x40 [ 135.895477][ T6961] ? alloc_fd+0x58f/0x630 [ 135.899819][ T6961] do_sys_openat2+0x12c/0x1c0 [ 135.904487][ T6961] ? do_sys_open+0xe0/0xe0 [ 135.908898][ T6961] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 135.914864][ T6961] ? lock_chain_count+0x20/0x20 [ 135.919701][ T6961] ? lock_chain_count+0x20/0x20 [ 135.924541][ T6961] __x64_sys_openat+0x139/0x160 [ 135.929381][ T6961] do_syscall_64+0x55/0xb0 [ 135.933778][ T6961] ? clear_bhb_loop+0x40/0x90 [ 135.938447][ T6961] ? clear_bhb_loop+0x40/0x90 [ 135.943111][ T6961] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 135.948995][ T6961] RIP: 0033:0x7f2d010a7407 [ 135.953394][ T6961] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 135.972983][ T6961] RSP: 002b:00007ffe560dcfa0 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 135.981380][ T6961] RAX: ffffffffffffffda RBX: 00007f2d018a5880 RCX: 00007f2d010a7407 [ 135.989335][ T6961] RDX: 0000000000000000 RSI: 00007ffe560def1b RDI: ffffffffffffff9c [ 135.997302][ T6961] RBP: 0000000000000002 R08: 0000000000000000 R09: 0000000000000000 [ 136.005258][ T6961] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 136.013207][ T6961] R13: 00007ffe560dd1f0 R14: 00007f2d01a04000 R15: 00005579bf8f44d8 [ 136.021166][ T6961] [ 136.024516][ T6961] Kernel Offset: disabled [ 136.028823][ T6961] Rebooting in 86400 seconds..