last executing test programs: 4m28.841368704s ago: executing program 1 (id=304): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, 0x0, 0x14) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, 0x0, 0x20040) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, 0x0, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r0, 0x7d243a6ea807936d, 0x12, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x84) 4m26.895698167s ago: executing program 1 (id=306): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, '\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0x5, 0xfffffffffffffff9, 0x9, 0xb, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x405, 0x4, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x4, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xfff, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x4000000000001, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x8000000080000000, 0x8000, 0x100000100080, 0x7f, 0x9, 0x1, 0x5, 0xffff, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0x6, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x8, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0x7, 0x108000001, 0x11, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, 0x0) preadv(r0, &(0x7f0000002280)=[{0x0}, {&(0x7f00000002c0)=""/231, 0xe7}], 0x2, 0x10005, 0x7) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @dev, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x6, 0x2, 0xb, {0xf6, 0x0, 0x3b, 0x8}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x20004}, 0x8) close(r0) 4m25.847979958s ago: executing program 1 (id=310): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x44, &(0x7f0000009000), 0x4) bpf$ENABLE_STATS(0x20, &(0x7f0000000300), 0x4) r4 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$search(0xa, r4, &(0x7f0000000380)='keyring\x00', &(0x7f00000003c0)={'syz', 0x3}, 0x0) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r5 = bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={r5, 0x2000, 0x0}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="30000000100001000200"/20, @ANYRES32=0x0, @ANYBLOB="0000004080140400080004000006000008001b0000000000c350822105db841e224c8671690724c5a524421b5dbec598f26c5f24492b57061790946ea234c363752c12b9d0baa5248ad423c46950a8589f1558ed048260ed1cba8355ca6f5fb0e9c0dd4a"], 0x30}, 0x1, 0x0, 0x0, 0x5}, 0x0) 4m24.697087616s ago: executing program 1 (id=313): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000004c0)={'#! ', './file0/file0/file0', [{0x20, 'G\x94T\xe2:\xdfe\xa9\xda\xed\xbbD\xf1\xe6\x06\x14;M\x9d-\xf2\xba\xaf\x91\x7f0\x1d\xd8\t\xdd\xed\xdf\xd8\xfc\x963\xd0\x83\xfe'}]}, 0x3f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000040)=0x47, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2100020, &(0x7f0000000340)=ANY=[]) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0/file0/file0\x00', 0x1a) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000080)=0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0/file0\x00', 0x0, 0x4000) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8}) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3]}) 4m24.523019157s ago: executing program 1 (id=316): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, 0x0, 0x14) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, 0x0, 0x20040) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, 0x0, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r0, 0x7d243a6ea807936d, 0x12, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x84) 4m21.288235335s ago: executing program 1 (id=319): socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 4m4.766235113s ago: executing program 32 (id=319): socket$alg(0x26, 0x5, 0x0) syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m58.857281461s ago: executing program 3 (id=479): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, '\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x81, 0x80, 0x5, 0xfffffffffffffff9, 0x9, 0xb, 0x9, 0x1, 0x8, 0x1, 0x4, 0x0, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x405, 0x4, 0x8, 0x1ff, 0x10000, 0x2, 0xb7, 0x4, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000003, 0xd3d, 0xfff, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x4000000000001, 0xec7, 0x646, 0xc58e, 0x5, 0x11ad, 0x5, 0x8000000080000000, 0x8000, 0x100000100080, 0x7f, 0x9, 0x1, 0x5, 0xffff, 0x2, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x3, 0x6, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x8, 0x6, 0x4, 0x100, 0x1000000004, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0x7, 0x108000001, 0x11, 0x8, 0x0, 0x6, 0x800000000006, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r0, &(0x7f0000002280)=[{&(0x7f00000002c0)=""/231, 0xe7}], 0x1, 0x10005, 0x7) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0x2f) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x4e20, 0x6, @dev, 0x4}, 0x1c) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000000080)={0x6, 0x2, 0xb, {0xf6, 0x0, 0x3b, 0x8}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000100)={0x20004}, 0x8) close(r0) 2m57.978320022s ago: executing program 3 (id=482): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000ffd26f10cb060600eb9a0102030109022400010000000009040001020a16d100090507000000000000090589730e"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) openat$mice(0xffffff9c, &(0x7f0000000140), 0x1ad100) 2m53.979544916s ago: executing program 3 (id=493): r0 = fsopen(&(0x7f0000000000)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000180)='res\xffz\x82\t\x97\xa6\x16\xac\xae\xf0\xcd\x83t8\x8d\xa0\x90\x1ag\r\xc7\x97\xa1\xd8\xc1\x14_x\x00\b\f\xd3\xb9\xf8\x8e!r>\x8b\xa0$\x02\xc7\xbd\xc7\x1b\xb5W\xbc3\xd3\xbe\x98~ow\xa7\xf5T\xc0\xfe\x96K\xef\xed\xe4\n7y}\xc7\xda3\xa0^\xfa\x97\xb5\x8e\xf7Mwm\x9a\x959\x15\x02\xa2\xdf\xfa\xb0\x15\xb7\xea\x8d,\x85etE\x84K2C\x13\x14x9}\x86w\x05\xb8\xeeCh\xf2!\xd5\xba\xb9\xe4\xf4\xa3I\xbdOi\x01\xf8\x9b\x82\xa0\x1ei\xe9\xc0\x11\xa2c\x1d\xbf\xd7\vV\x8b\x97\xce\x00j\x00\x00\x00\x00\x00\x00\x00\x00]5\xae\x10\x1c8\x140p\x98\xaers)\xf7LXo\xa6\x85N&n\xa6\xa1\xed8k\xa5_\xd5\xda\xc9\x10\x80C\x12\xb6\x97^d\x9aI\x9djz~\xf0;\x8b\x10\xdcf\xed\xa5A)\xf6\xb4|8\x9f\xed\xa9\xa6', 0x0, r0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x15}}, 0x80002}}, 0x2e) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x16, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c252500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1ad8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000080000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r2, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x4c) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x1, r3, 0x2) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x2, 0x0) write$proc_mixer(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="564f4c554d452027d21976"], 0x2a) close(r5) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r4, 0x7b1, &(0x7f0000000140)={0x0, 0x6, 0x0, 0x8}) 2m53.770010189s ago: executing program 3 (id=494): unshare(0x20000400) fcntl$setownex(0xffffffffffffffff, 0xf, 0x0) 2m53.555632591s ago: executing program 3 (id=496): syz_open_dev$tty1(0xc, 0x4, 0x3) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) pipe(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'lo\x00'}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r5, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r5, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x8001}]}, 0x10) recvfrom$inet(r5, 0x0, 0x0, 0x720, 0x0, 0x0) r6 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r6, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x1}, 0x8) syz_usb_connect$cdc_ecm(0x0, 0x61, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0xa) 2m52.096867207s ago: executing program 3 (id=498): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200400c4}}], 0x1, 0xc000) 2m36.620059143s ago: executing program 33 (id=498): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x45) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) readv(r1, &(0x7f0000000140)=[{&(0x7f0000000600)=""/152, 0x98}], 0x1) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000001040)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200400c4}}], 0x1, 0xc000) 10.027685493s ago: executing program 0 (id=1150): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000500)='./file0\x00', 0x2008000, &(0x7f00000010c0)=ANY=[], 0x1, 0x490, &(0x7f00000014c0)="$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") ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x8096000) 9.346305453s ago: executing program 6 (id=1154): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x428}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20040045, &(0x7f0000000140)={0xa, 0x2, 0xd4, @rand_addr=' \x01\x00', 0x3}, 0x1c) r2 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x40000f, 0x8041) ioctl$USBDEVFS_BULK(r3, 0xc0185502, &(0x7f00000001c0)={{{0x1, 0x1}}, 0x0, 0x101, 0x0}) r4 = syz_io_uring_setup(0x44cd, &(0x7f00000004c0)={0x0, 0x5331, 0x10100, 0x1000006, 0xfffefffe}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE={0x7, 0x29, 0x0, 0x0, 0x0, 0x12345, 0x0, 0x0, 0x1}) io_uring_enter(r4, 0x2d3e, 0xec84, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x550b, &(0x7f0000002080)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 9.175608683s ago: executing program 0 (id=1155): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 8.54588587s ago: executing program 5 (id=1158): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x34, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0xc, 0x1, [0xeffffffe, 0x3]}]}]}, 0x34}}, 0x0) 8.411628227s ago: executing program 5 (id=1159): syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000000)=ANY=[], 0x1, 0x6eb, &(0x7f0000001240)="$eJzs3c1vHGcdB/DvrNeON1Sp0yY0QkGYRCpIEYkTK4VwwSCEcqhQVQ49W4nTWNkkVeKitELgAoITEof+AQXJNw4IiXtQuHApt159rITEJeIQ9bJoZmft3fX6LfFLAp9PNJ5n5nnmmd/+5pkZ7zqrCfB/6+q5NB+myNVzbz4ol1dXZturK7NH6up2krLcSJrdWYo7SfEomSvri74pffMNPl688vZnj1c/7y4166lqP7bVdiOMaLtcT5mu+5seueX4TnexXIeXl5Jcq+eDJnba10DDMmln6zkcus6gRjrLu9l8N+ct8Jzp3Z2K7n1zg6nkaJLJ+veA1FeHxsFFuKe+3ivs6ioHAAAAL6hP7x52BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDiqZ7/31pbbHRXJdMpes//n+itq8vPobkdt3y4r3EAAAAAAAAAwMH42pM8yYMcK8vjSTpF9Tf/M1XliXzRSb6U93M/C7mX83mQ+SxlKfdyMclUX0cTD+aXlu5dXNuyNHrLSyO3vHSQrxoAAAAAAAAA/uf8Mq3u3/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB5USRj3Vk1najnmUqjmfW6LCf/TDJx2PHuQjFq5cODjwMAAACeyeRTbPPykzzJgxzrLXeK6j3/l6v3y5N5P3eylMUspZ2FXK/fQ5fv+hurK7Pt1ZXZ2+VULg/2+/1/7yqMibqHsWpp1J5PVS1auZHFas35XKuCuZ5Gd99nk1O9ePri6vNRGVPxvdoOI2vWaS139vvNPkXYE4MfRTS2aNlaDy5Zy8hMHVu55fFuBorqg5pkOBPDR2fDzpoDS1NVk/G1PV1MY+2TnxP7kPOj9bx8Pb/Z15zvRH8u1jLRSJWJS73RV54zW2ci+cZf//TOzfadWzdv3D93uC9pF8Y2WT88Jmb7MvHaC52J5i7bz1SZOLm2fDU/yk9yLtN5K/eymJ9mPktZSKeun6/Hc/lzautMzQ0svbVdJBP1cekes53ENJ0fVqX5nKm2PZbFFLmb61nIG9W/S7mYb+dyLudK3xE+uWnc1WurzvrG8FnfO9J/Gxn82W/WhfLq9tv1q9zcVq94s9G5V7rX/jKvx/vy2h31j9daHe87D2b6svRKLzvjIzt/mmtj8yt1odzHr7a5TxysqToT5QnUu0v0onu1m4lmdS/aOM7/0Cm3S/tOp3Nz/r1N+l8eWn69npfDauWr27XuGX0o9lY5Xl7JZH0lGRwdZd2ra1eZvrrO+lju1g3eccvtTlZ1RdE7U3+cu9UA2HimTtS/w23s6VJV99pQ3en6Gl7WneqrG/h9K3fTzvUDyB8AT+Mf76wVp3J0ovWv1qetT1q/bt1svTn5gyPfOXJ6IuN/H/9uc2bs9cbp4i/5JD9ff/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8vfsffHhrvt1euDe60Ni8aqDQyvCa7XoeKhT1A31GtblVP6VgVx0ecmEyycCa6jlHBx5GaziMDYXOL5IDz0/vIYKj2/yuLDR3dLjnBtb8eWOHH20fz1iGxuEOzot9LDSyLz13Xt5kJIxl9AA4rCsScFAuLN1+78L9Dz781uLt+XcX3l24M3758pWZK5ffmL1wY7G9MNP9edhRAvth/aZ/2JEAAAAAAAAAAAAAOzXqqwJnXtruSyMbCo0kw9/x8D8LAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgD1x9VyaD1Pk4sz5mXJ5dWW2XU698nrLZpJGIyl+lhSPkrl0p0z1dVfkj4/SGbGfjxevvP3Z49XP1/tqdtsnjXq+ua1rkyzXU6aTjNXzZzDQ37Vn7q/4T+81lAn7otPpzD1bfLA3/hsAAP//ShfsxA==") open(&(0x7f0000000000)='./bus\x00', 0x1a1043, 0xc5) mkdir(&(0x7f0000000200)='./file0\x00', 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x32600) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000380)=ANY=[], 0x29) 8.19752285s ago: executing program 5 (id=1160): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x6e6bbc}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) 7.708043759s ago: executing program 6 (id=1161): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x3, 0x8069}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x8, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x8}}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) 7.497870741s ago: executing program 6 (id=1162): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0xb8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 7.023666779s ago: executing program 6 (id=1167): mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_usb_connect$cdc_ecm(0x0, 0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a1a440000000010109025411900001010000000904000012020600040524ad000005240000000d24060100"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000440)="ea", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800) recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0) 6.940192064s ago: executing program 4 (id=1168): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 5.791659911s ago: executing program 4 (id=1170): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 5.738111404s ago: executing program 0 (id=1171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x164}}, 0x20040044) 4.675361047s ago: executing program 0 (id=1173): socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) r2 = memfd_secret(0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r3, r2, 0x2e, 0x4608, @void}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) 4.143994167s ago: executing program 2 (id=1174): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x24008044) syz_usb_connect(0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 4.143159527s ago: executing program 4 (id=1175): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0, 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x4, 0x0, &(0x7f0000000c40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r3, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r5, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.998687426s ago: executing program 4 (id=1176): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) 3.76721836s ago: executing program 4 (id=1177): socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo\x00') fsmount(0xffffffffffffffff, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x38, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_BUCKETS={0x6, 0x1, 0x3fd4}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) 3.609297989s ago: executing program 5 (id=1178): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000280), &(0x7f0000000300)=0x8) 3.125970187s ago: executing program 2 (id=1179): r0 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r4, 0x0, 0x20040) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, 0x0, 0x0) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NL802154_CMD_GET_WPAN_PHY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x1c, r0, 0x7d243a6ea807936d, 0x12, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044891}, 0x84) 1.855040361s ago: executing program 2 (id=1180): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56441, 0x70b928, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0x2, 0xb}, {0x9, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x28, 0x2, {{0x5, 0x80000000, 0x46f, 0xfff, 0x5, 0x200}, [@TCA_NETEM_LATENCY64={0xc}]}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x2000c061}, 0x8000) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x300, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) 1.527860871s ago: executing program 4 (id=1181): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf8"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, &(0x7f0000000200)={0x2, 0x2, 0x6}) 1.431774007s ago: executing program 5 (id=1182): r0 = inotify_init() syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = userfaultfd(0x1) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, 0x0) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) socket$packet(0x11, 0xa, 0x300) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r4, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) 1.414771337s ago: executing program 0 (id=1183): socket$key(0xf, 0x3, 0x2) r0 = socket(0x8, 0x5, 0x3) sendmmsg(r0, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}, 0xf401}], 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000002480), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(r1, 0x40044146, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000240)="000000000000004099b8f276dc75584a8d87d907005858367d61f49e1639a48f614a54a8192c2876b7f843cd3a3c07288fa0f1e28983b5cdc2e29b6e", 0x3c, 0xffffffffffffffff) 1.310789414s ago: executing program 0 (id=1184): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$ocfs2(&(0x7f0000000600), &(0x7f0000000640)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4717, &(0x7f0000001600)="$eJzs222IHGcBB/Bn9k5zlybXe0mbpOnLJhE8tByXfqrWD/Gs2mjavGhbTZVz73K9nO7dnne7WjBIDYIoCEoQVHyhKpR+qQUx0C+1CAVfkFahVBStX0QKVfCDQRvoye7O5HZm9zqb26Sl7e8H7d48M88zs/vfeWaeeTaFWPXUwmpxYbVYWipWZu9fvaX4uUq5tjgXCq+S13r/dOdK5CT7186R933gI/fcEsIfjn3tQ2tra2uhbjh0dKDl7/P/Pj3b+pooZOrU2+3cWtMfa4+89PO3vNIWeU6EEHa0HVddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvRxCi7P3vvDcsTOH952ZevyxZy7MH91wwyiE75Z33zy/+OL+vtuef8dl2j0AALyiDx4/cvfRyQPhySgMnetvv1/fGb8m98d3vu1Tdz3cv75+je70vYqhAgAAQMb6+H84ernDfF0ys5ZMCT7xwIm7n4rW1xvYvr4duuvI7e+fPBDP/0Zt62+Ni/753r7GHGp23jc7/zuSqd95/nd9Pw9/9dlfLr1188efHF+y3+EQFSZSy4XCxEQIx6aay7uirYVyZbX6zvsrtaWTm9/vG0U6/+zs/fqEfrf5j2aq583/7/7E53822N/LOxgL2W9tfbnY/lWmg3T+G/flP/lS1FX+Y5l6efnf8fT287/a0ss7yO6RS5HOv3ki7mvdoNjsAOr5f7M/P/8dmfbz8v/+1LlHT2zi9z/1fmY4qh/rQKoHeDku3+AnTGSk828Gkeo64w9yo/P/f5n8r8m0n5f/nZV//O5vPVz/N+r/x6d6afPNI51/M4hiaov183+kkH/+X5tpPy//357687Of7Ola3Z5//fjHXf+7ks4/vhCnO8/GJ9lt/78z035e/rvG7ntoYRPH/eHB+DiHojDW8qvTc/VL2ND6fHVjSFNfvbyJnbwJpPNvfmqpU2eo+dI4/4fz+/9dmfbz8n9oz9ffc7qn3/927v8n9f9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mfv/+vJB+Xclnf/WtvXrz38KXY3/rsvUz3v+s2/0qUf+2sP4Pzm+ZL/J85/kOcR41Hz+Q2fp/K/acLtur/97MvXyzv9v/ef5p/f30v9HA54A9CCd/7ZmYYcBYLf5X59pPy//L9zz5Y//aRPjv8Yd30CSf8v4f0uz/Kj+vyvp/Lc3C1P/GOrBxv8b1/+oPff/ZvK/IdN+Xv4XDk30f+UyX//rxz/e4VE27dL5D224XT3/33dx/b8xUy8v/y/u/emLN/d0/x/CpLH+pqXzv3rD7Rrn/0B+/jdl6uXl/51v/PqJB9uLu0707d1uSEfp/JvX+tSHH9+bdzv+L2baz8v/R+Pnz+6/AuO/W3Ou/7qMpnT+zVnzS8k/O/7fm2k/L//vHfnBSv8VeP5zh/s/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACATRmNX4dDVJhILRcKExMhjMXLu8LWaKZ0cnqmXJn9zGoIO+LyYhiN5suVmVJ5emGpcnJuulQuV2ZDuCZevyMMRKvlSnV6sbR87cW2BqNTc6WV6sxcqRpC2BmXXx+2J23NLFQXS8uNbZM6V0Wlz9Yq1dJEbXVuJey+WL4tKZ9fqdSWr7vY1tWFysryqdLS9MmFlXdPTk5Ohj0Xj3kkmnugOrdUbR5tc229TlJ3OGp5M43VN7Ts79OV2spSqdwov7GlTrkyWyq31LmpZX/VldrSbKk6N12uzCf7K7bUbXlvjdV743XjYST1/pK6WQfj19sPHf/o8cMH2tYXo3TeS7XFucntnb8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALxxPXnbu74dQuhrLhVCCAeTP6L4v5Sz977w3LEzh/edmXr8sWcuzB/ttA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8nx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs3M9LFV0cB+Az43tfC6SUNkIuA0NEdCdhQb+IpPIa2bJN66BWCRkUBYYRLQuCIKhdVBC0Cir/gqiFy1bVphYtDEKoGJ3Jyx3l3hQavfM8MJwZZjzzhcGZO+czHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDjOL9rviNpr+zZurh09obQnu77P4QwHC2tf93fFrpCCN+/TZ0NK7SZrrr+343PjObPGv1ZOzj6+OZwtPb6s7/NztsZonigZnt3FMcDA2vvv1Xd638x2R+FEBddCIWYG3l2rhJCaCu6EArx6/Ps5eT+/l/RhVCI3k/3O5LrX2ni2HU8ntmgtu/90lNJf+NRPherl/prn/2N/sfdA1rL+9PXPsQuaum9Tt//o3TxPlgO06eOfXxZdBEUZnpm4njRNQAAAP/WhQb5f9i2tP7wahS6OvO5/4+6/L+7rv+V8/9lD3beGplqJoRY1Y7c2GSyPXhgPX1uZs0N6p3pu373bcV4T1nJ/8tN/l9uf5P/03qy/J9ykv+XwMLqu+T/JN7I/0vp6e1986+KLoLCyP8BAKB8jpwcm6gODiUv/1t+tufz+p60raZ5+qM7k31PasaN5Ieb29ETY4cODw6l1z0/ILg8/0O8uHch/d6jvs2M13130Wj+h+7nc7M32vNHVJv8fiOrLzuv+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA3u3NPwyAYhWH0u62I2mhVNGHhJ8EHGhgRgBRmNKCDCQMwEAIKGMg5y73Js7wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADP96/yuvj+0hjptUakqeyya/8cT7OfuW+H5X32uHErAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABs7cCADAAAAIMzfOo/2AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAUwEAAP//2KfMMw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {0x1, 0x6}, [], {0x4, 0x5}, [{0x8, 0x6, 0xee01}], {}, {0x20, 0x3}}, 0x2c, 0x3) 1.289082115s ago: executing program 2 (id=1185): r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) fchdir(r1) fchown(0xffffffffffffffff, 0x0, 0xee01) fchmodat(0xffffffffffffff9c, 0x0, 0xfffffffb) setresuid(0x0, 0xee00, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x14e174135c0b87af) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x5, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xb, '\x00', 0x0, @sched_cls=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) gettid() openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0) 1.190733361s ago: executing program 6 (id=1186): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8400, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$vim2m(0x0, 0x7, 0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$kcm(0x2, 0x3, 0x2) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000ac0)="4c000000140097f87059ae08060c040002ff0f020000000000001a350182fa73a69d35a21429b17cd02941601d60ffc0cca84708f7abca1b4e7d06a60300000072f750375ed08a5604000000", 0x4c}], 0x1}, 0x0) 1.088253856s ago: executing program 2 (id=1187): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x3, &(0x7f0000000bc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x0, 0xe3f3, 0x11, &(0x7f0000002d40)="b3070d5b19aa16a7489474168245f80bbfa179c79d3bffb79761ab0d8e009e9b42b881f247de05b072442debf7bc0ed4b393a763a2bf3d12b851fd541f7a7169bf1fbd1640409fb8f29f118ac55c111bb188b49c7bdb0b55d9b03ef63529493d44c4617aa69a7fe28b6438a324f15e3eb21a0f5a233ee9e9071b7d746b5ee5ec93c8f26de857054995b60874a9d27726d9c069ab61a1623c8951aeaabe0e5d7538f7dbd8bd0628798f4622ee0f72d66106093500348e147e9dcee5dae63af07a6fb007e4cf9d6d6359a252aa81ec8a9caefdcb28f79094b5cab4e154a22c44bf971c039f2d566c4aec66cebca90bfe16ada4b03ffc7e90b023eec64cce3c0351597828adc485980b2aaddd930e4e424e2d0314f7fe17c3092ec5f5e54b39844e714661ac9edf447a2e3dc89f110e54528a4e22d8a86585b4601028b2bbbb4f70b7ac3b6c7129d4d0c8ce0b02c3c1f5e4128a6d315002443ac28bdb0c9d7abe3e4286ec1055688ec813b9979121e900aea3693b9c8b427bb69576362dfb258f8df59e0dbefd7034c1e887a06731e1cc25113331eab4b0d022a63107f774b4a631fa71e16e290881c25fe6af9775fd65359e2af043ec9caad726b0ce923e3c6ef9d081f967e8ef34ef0329b1c84b7bf024bda4cfda93debe4ba05de3e1728c8e22cb844c74f8d769929e6295a16bea0c50727fa33b3c10d2e53e66b20761d9fc6ef5f24b311ff8a4239f81fba4a808a08785c8cb22ac1c4a06f7b3ce232806dfb41c5aa694cf55b9872aa2c53175a76a3427dbb5c00c15ed62686a048edba6bff31ef1a84d711eddc76a4db44c880f26a79da84b9f9cfaaf909267b67a9c853ea9eb1fe586db67a98dcf37a15d5295857ee0bb4e8a4b551f2629bfc72592c0854266245b837a91f3eefbc2612ee909fa43209d02af7d3b83ec13e5dbbfe1a34a8b45ce49722a5369c3c1b8bccd5386cf57baae0d5c4a355d5a729ddce5c0be3aaafaffa497dd6b7f363b5e53f3849c7a2013e0db1ca5d2d93b0a809d1c27306883edaf11b73199275301a9d28cb3e9b267e3342fad165a13f3e44d0d53afc95f44474d5761416489612b6054c17a383a03782bf380bf347742f2845be2df988310378dad9bbf1980a4a84a5e4f10b3a28db2e7829e25640b833b0cf6675eba6601502a7ae3177860dac93726ad9adabc6d98ce30a4cb01ce01b6309982898b617f20c55510253405d93e70fbc4c9ded36bacff16e49d9f70d852c41cec96d6e4f6c44167ed6990d04e63f15fd934e6120f9189fd04e8ff4554fe23751dea387ab1ef5b0973d9510c4cbb1fe89f80d7875c16b2ff9a746f8e2b4e9dc5594712c511dea6bf63c4d9fd7114092ffdcfc16dde14359b2fda592214ad728b4e19132970be209ed98dda93c1c3abe8cffef35679b61e9ac56802bbce8509a047415a1badd9c4a359b6971d73d994e5825115fffd6f389144fdec3bb012f9f392fee8310a847192dc6ff4247a6ba44ca75ed0bc40b50767407a7d6420018b2bd1dc9ed66e11fe5c7b768ff7aae6d1ae62516a0ad980f366b6f3ea5d9e407b3e88869749b15fe400509d70256d82b2d5428b2912e648ebe7022d6f3bfc8d0c9423cba893efc65394e63a56269b7a17f69294000b0bd27902730356f238b868803b7ff4da31013ad66e22c5c7afa1b370fd2d10e0175a3bfba66d88e29fb371998424be80737bfb38db011efc5d63f0fa17efcd90a5cd2d310ab8e4ff2631dc2fc2be5404d4026fb916c1cd481dd70ea1755813574a0ec1d01b1411c7a7a69f6ac972487f9b470090c419d1c57d8641d6f4cd10b1d55ce621ed8e14f28f11b579a6408bbff9fc13cf6fb07c22770e65ed772e790844ea608e38ae48302efb09c173d8c653aaf0c6be98d9a2d166c9d318dfbb8f06b9a241ac72d68a82dbf7f3255e2cb0af5227d854a71b7d4c89fe943db9c0c19ac1dd5264bf8515b217f1de94b5da0f3a4a73f587a71bad13e447eb5ca4d76d3645d749f2ba4b46da62a7717e544cfb025b364c5d19ec6330bc6fdf161a153c61720031dfa170f0c77de03b36fa898e8f00dcb04c21db7362200fae366363f82a2d7292e0d67b72f64e227fdd91edd3c455e7341a9a9b8832631891b563a8d064955d0074a216062147414c2c8badd2c547a51734a96c215d82c68f3eeba0f9a4954e479a0534a8fd131a4b9b1d069322907c1b49e5c68b86079841b34867ae69d42f9843a9c9d290d0ea9ab4068a58e9c76588391b12420af3d9e3d8bf672f3f0ac88a8c269a9570576f6a1a5a39d63cdf7e459a620af3fe5b6fdc7576732bae1f8ab81d5294562d5e82f1273ba1f2cc1f336f2ed3b4a9901dbb3e86f3859750ef51db3601247fcd157072bc3843aedb474433c4694942f1c13356d4cfbf56d5834f9c0250044a017137ae689db25feec05600827c11955e492fb67dc2239b75d7ecc3b279901670ef2ca4d2010cf7e8f08107781b2da20d716619117191f8df96cfe9a81ef18ec0ebcc99cc3558830265d0346f9767ddb6c2fbb2495a9b8ee91f82a1bea2324ec011f45f1462aa216c209186229c233006600414628beb9738efbdad2601cac6b2b7e4c803719d6b826c44e9ae057711f067de8b0f0d1ae2a2f78936a44e2dd9e9b19244ad4b07e6cb870b594fa6f86012f699455ee86aebab98c69f332876fd820f11e982b6023325ab335a28cdceb7ce3bc4706856b4aa37b67fc1a7dc1ce4d88b277db25ebad94140b6107310a4f6e597e8895277c749687e89f0a69bf3cb1de8b459b400806fa8fc5ba4441dce50d3ff057467285e4c21cb12bac00791c3ad4f27c46c58d15de6e9cd746acd26a4fbb7da8849aa6f423dbf3974c1c4610804b5e3e46d5d6d945415e22c039481224a30cbe2b3e271b9f50297afd5df882e5b96fe31acd3e92b8fc5d0cec29915946fd0c02bc2775ad54edfb2715c9e0e197e28e0e1a6505fafec1f24d848c18afc2acb48992cab420200e06db88bc50b985932b40b16bddfdf29480fbddf106f8a5caf40d0304e45ab7c19cea65e834ef6742c413563657b8d7c27b30f85fab4fc041b50c532ea646b0755437603f1a05f87b8d67976f3ae9e729c3fb8ddb91f26d7b26f003c1a8efae40acb42360ea5144d550203e38c4e0329e6c42353b08ef1278dc529cf272b2f8e32b578f6d874fbae55f12db0081a2a6b543a418e74b121e1698eadb8f1ef214d38c403768f4df4b96b2a97c18c584b8a81f3fedd0b0653c9380bb7b42db34217a4b2e57c07de829381de337f65415f794c02192ce775e6788b4d7bf3d06f5e027b89824853b086839c75932dcf6f43c5cfe72b8d89401c8ae441f15337483e46bb09cdf6394f4be8f66415cf842f4567d114dc50f3a2c15b54e4fe65b24bc9ffabe9ce60115f309b510f5433da6fb2cc0d9ff04282b355567841a4c04ffcb47d39d5da114fc167b4e8e35437cf55e7d84b3ef27c7a0390c76643e58691d55196fbd2e3070a9308d76af61c4b43005981ef641be82f6eb80ae69a60ec4e78f99cef86f84bc9ad1101397648dfd15b51dac18cdd46c58f433772c6598364b351e1ea15e21eaa5889ad09e6400c72cb3162034838141a86338ca2f47d0f88d6c0ca13729999d0d7233c7d91bfb8359c5b3e7248f6034a57b28299f6465cddb2622a8c07c221beaa2236a04fb9d3c52e5548d0f0f4506ff8ab3d5e24be3d9d11ac02ff44a8efef9145d16ec9af4fc0cb9d5428e70c62785c9a7bb3d818f7403d2547ff80e9bcd922fe58598590d14eddda8fd07aac6776a6ce015c7dd2cc8eafbd927f7ffc8f519b327e3759e7f41ffee8d4a2121d9b9b4ceb32fd820fff7ad156c74604cab787135cc27b715aa26671fe99a5b9b2f47694f0b8183a266a90ef7c724f95c39e3725e2e54c1bfec568dbf42150ff0cf200c6b22d52ffa932443d62a61e3890cee62516fb0dec3c4d310225ee20a3f29b3dd12f3b1d09225a9a6caf3c2e467f47b92ed3888ea6d7095d8c00a78f36c64a28c2feb102a661e7e4642b8ef4eb3fce7846060873c6a64f76081eb765cd9537d2e08c8bc44d07abc3e77b8e0dd366849d63b11667f5e64b96e89b2ef5fe21b4f5425a7ddc257ddd0202e241060e641341faf01b5ae6577e399fb7714a19add131bf9a89a5d5796140ade0561952c3ff17fc2a6a76efaaa13bd1758d79aa0c85cf6d2617c028ac1f3d5e45a4dd6f0957ebe735e1971251942ebf3927db2254bd5a496eb0a77ad70ced2f70aa837319c454a73041c76c6e01da43bb891140d845528c7c5a26f0dc4dc21d592ef72a105cb3677b9a11a63678882b16aee511b40bd177ec7d3ef272ce23839920c104aafc2f46a99a313a54655bf3ed9fa1492fafb57239ba23ef9325825728ef2d878290f83ac338284b863342353eec1bd132055ebb7d79cecd490b02c8e909cc47ec408f5b8d9571055a7976f54a7ed746e7800ad1f0540ae4046e2256b3afa18f98f28b197ed80f9cdeb2795e41558afd12ae6af37c8911a14235319bca43790c3b6b7b53f63ad85fa83f8f96f5b0460da232f7c239888f352d47b2e8d475d1229afb17143e95e06f786cebdab36d8ce9d281b48562e8b9b00991d1530639a8c5df2ddf58a2c836384b25eac8bf41252fdb8f6a22a88cbe9939fdb098d53a090ecf29e1840bb3b40ee5fc4cabf1fb4014c6aca89f9a781d21a5b14adef25cb2afc83c1f2e3a68ee9994d93f211d3eda73f921911ffec1d558a5e555d8663d3464e866d4985785d621b5fb01767978ee3a7a8356ab681537d17eca71a5dc5d25ab9f182a75b68b650b1a7b0e27b70aacbfe32912bf97ab9e9360f4e6263178c4568da1aede597ffae2ee62fa22fd42e667dac1b48acb807e7083c216a5ec3541cacb8af570fbf050b8f0b93d4f532f110f430d4b08dfbb88e00a6c260a240384ac924096a9d9a17e7580c3304e16ca73f3d6903d72921bba5e4c7a6fce1cb97cf0fc137ba4a1bdcf112e423188c55152559610ed7ae1479db0998bd3cb1ed893e82ff38c958d1e7c693a74ce26254ee515939f96089ccbdc602e225b914fce6b4a6cb193de80328b6eb5d4708405cd7f076d23858ddee1e2c5a68209b0cca0b2f3384dc9c161c62d43597f291162787d0caa3af350f37e76b26e77185aa570a3ff962debd2467abc6e4a06f58753c26edab7718f17f2f57ed7d93dfea748780f57bb1270bb59c9e5f3f9bce8d3c5d2c2f3054313e7987c6e8d0771b923122bc969f7d3fc78c2f3cb04a4c6f75592070773cf2a4573e9c9bd9ac3f28226581f76fd4fd369d99e50c0e35a81617089fb496b2c9c1186fde48682e4a319e4feb7590ce561a9bc4aa1b89910c6d9b124a7b68e9f6706f82eb35e12465fdefccc3e5d8dc11264e3b5baa746ef2822c97b65e6361b26b6c51d1d54a9b1ed5da29bf7717f11abb3d59d7c3b54cd1afd0effdbb73dcb2037f6c73ae29400862877bdae935e354c7b275615192eeb904ac8f1f2d08e83a370714e205f66400a17fe4b6b864d358cbffe04a78d5baeba230956e68569ac3fcd854b639b612095e4e7e405713616d69fca80e18f13b1185f1be523ec08794d326e7c2e218ad94e954e10fa37aa5adadc6a6d6e9e238909e7329b016543ec4e7e648efac549cf156bd4b2b7b3a78cfa9ffcfe4fd5d715d11a3a3105df5a27619200843de421d840a893e94e52d70ddb7a6b06f8c675e4dec51726e41e34cd9aeb753cc8123b5b276cc6e76671821994d802e87e6b4ecc84af312bdd4d7d310e89989a0fe976fba8a48bb71655197adceb140de613d1652e9d61d54bea56573c75ace8403cc5c05e637e225327323bd9e0ac1f8bf933625f07ccd7769235a005c0c738e84225c07651220711e991534cd58c2b1f5a5cecdbfc5feed7f5feb119a064a8bc93b6e680e742c0ba33f27059ca62c192983bcb075211db531d7c4cf85ca7a4f833c01ec1bddca9e4072dc854a7db6788bac2f03a86951621c75b0b5827d3f92f9ffd20633a7d2cd55441fe9fcd1658b4f4799caf995a4cd7aa829dd2e24f40", &(0x7f00000007c0)=""/10, 0x11, 0x0, 0x33, 0x6f, &(0x7f0000000100)="46cc00117877b1d08f679b92d46ce23b736d0feb470f4e1d46f158db88cf3de81ac77bccb45147c5d8b3964b10d7310feec810", &(0x7f0000000240)="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", 0x2, 0x0, 0x7ffc}, 0x21) 951.997775ms ago: executing program 2 (id=1188): sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@polexpire={0xc8, 0x1b, 0x1, 0x0, 0x0, {{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x6e6bbc}}, [@XFRMA_IF_ID={0x8}]}, 0xc8}}, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) write$USERIO_CMD_REGISTER(0xffffffffffffffff, 0x0, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480), 0x101, 0x0) 84.586565ms ago: executing program 6 (id=1189): r0 = socket$inet6(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mtu(r1, 0x0, 0xa, 0x0, &(0x7f0000000100)) r2 = accept4$x25(r1, &(0x7f00000000c0), &(0x7f0000000140)=0x12, 0x0) ioctl$SIOCX25SENDCALLACCPT(r2, 0x89e9) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$kcm(0x29, 0x3, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) r4 = socket(0x10, 0x803, 0x0) r5 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x288}]}, &(0x7f0000000140)=0x10) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={0x0}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000000)=r8, 0x4) ioctl$VIDIOC_S_INPUT(r5, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x3, 0xd59f83, 0x7, 0x42, 0x19ef, 0x2800, 0x3, 0x2840, 0x2800, 0x4, 0xba3, 0x9, 0x0, {0x8, 0x7}, 0xd0, 0x9}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_open_dev$usbfs(&(0x7f0000000100), 0x7f, 0x420800) r10 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r10, 0x852ac000) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000780)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x1009, &(0x7f0000002500)=""/4105, 0x0, 0x68}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000680)='8', 0x3, 0x0, 0x7}, 0x50) sendto(r4, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0}, 0x40}], 0x1, 0x0, 0x0) 0s ago: executing program 5 (id=1190): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000ff000000bfa30000000000000703000000feffff720af0fff8ffffff71"], 0x0}, 0x94) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil}) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x1, 0xa, 0xb, '\x00', 0x7}) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): 972474][ T26] audit: type=1800 audit(1770193219.919:10): pid=5616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.347" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 250.704890][ T5637] loop3: detected capacity change from 0 to 47 [ 252.166054][ T4243] Bluetooth: hci5: command 0x0409 tx timeout [ 252.676383][ T23] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 252.938966][ T4369] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.206152][ T23] usb 5-1: config index 0 descriptor too short (expected 4436, got 84) [ 253.224385][ T23] usb 5-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 253.236312][ T23] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 253.248588][ T23] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 253.346414][ T23] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 253.365771][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 253.400162][ T23] usb 5-1: SerialNumber: syz [ 253.433323][ T23] usb 5-1: config 0 descriptor?? [ 253.696401][ T23] usb 5-1: USB disconnect, device number 3 [ 253.897268][ T5622] chnl_net:caif_netlink_parms(): no params data found [ 254.004481][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.019130][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.045968][ T5622] device bridge_slave_0 entered promiscuous mode [ 254.073086][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.093841][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.107389][ T5622] device bridge_slave_1 entered promiscuous mode [ 254.169862][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.182403][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.206305][ T23] Bluetooth: hci5: command 0x041b tx timeout [ 254.221194][ T5622] team0: Port device team_slave_0 added [ 254.236533][ T5622] team0: Port device team_slave_1 added [ 254.437479][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.463860][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.644534][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.362488][ T4369] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.377604][ T5676] netlink: 16 bytes leftover after parsing attributes in process `syz.2.360'. [ 255.436585][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.443595][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.526490][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.608399][ T4369] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.690171][ T5622] device hsr_slave_0 entered promiscuous mode [ 256.282065][ T4235] Bluetooth: hci5: command 0x040f tx timeout [ 256.729002][ T5622] device hsr_slave_1 entered promiscuous mode [ 256.765321][ T5622] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 256.807624][ T5622] Cannot create hsr debugfs directory [ 257.019237][ T4369] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.315829][ T4173] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 257.716005][ T4173] usb 3-1: config index 0 descriptor too short (expected 4436, got 84) [ 257.745861][ T4173] usb 3-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 257.828700][ T4173] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 257.847628][ T5692] loop0: detected capacity change from 0 to 4096 [ 257.858161][ T5678] loop4: detected capacity change from 0 to 32768 [ 257.870275][ T4173] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 257.911336][ T5678] (syz.4.361,5678,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 258.005963][ T4173] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 258.039464][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 258.052751][ T5678] (syz.4.361,5678,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 258.067968][ T4173] usb 3-1: SerialNumber: syz [ 258.239932][ T4173] usb 3-1: config 0 descriptor?? [ 258.436360][ T4294] Bluetooth: hci5: command 0x0419 tx timeout [ 258.686497][ T5678] (syz.4.361,5678,0):ocfs2_initialize_super:2313 ERROR: status = -12 [ 258.743103][ T5678] (syz.4.361,5678,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 258.774292][ T5622] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 258.816960][ T5622] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 258.880676][ T5692] EXT4-fs (loop0): Test dummy encryption mode enabled [ 258.889395][ T5692] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 258.897994][ T5692] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled [ 259.027763][ T5692] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0023] [ 259.071138][ T5622] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 259.104056][ T5692] System zones: 0-5 [ 259.141573][ T5692] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,delalloc,dax=never,test_dummy_encryption,nodiscard,nomblk_io_submit,grpjquota=./file0,nodiscard,,errors=continue. Quota mode: writeback. [ 259.704734][ T5622] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 260.008039][ T4173] usb 3-1: USB disconnect, device number 6 [ 260.114191][ T5736] netlink: 16 bytes leftover after parsing attributes in process `syz.3.371'. [ 260.886800][ T5743] loop4: detected capacity change from 0 to 512 [ 261.558486][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.565922][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.739628][ T5743] EXT4-fs (loop4): inline encryption not supported [ 261.911476][ T5743] EXT4-fs (loop4): 1 orphan inode deleted [ 261.933582][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.943485][ T5743] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 261.962066][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 261.975409][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 262.059570][ T5743] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 263.305899][ T26] audit: type=1800 audit(1770193234.199:11): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.374" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 263.430108][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.236141][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 264.283857][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 264.306441][ T4382] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.313567][ T4382] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.328831][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 264.338208][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 264.357092][ T4382] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.364206][ T4382] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.375722][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 264.536157][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 264.577031][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 264.713299][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 264.738706][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 264.741474][ T4382] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 265.379314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 265.416588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 265.446746][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 265.455483][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 265.502338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 265.536624][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 265.583785][ T5622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 266.226100][ T4173] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 266.494441][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 266.532510][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 266.606014][ T4173] usb 4-1: config index 0 descriptor too short (expected 4436, got 84) [ 267.381488][ T4173] usb 4-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 267.390993][ T4173] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 267.401489][ T4173] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 267.486056][ T4173] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 267.495851][ T4173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 267.505880][ T4173] usb 4-1: SerialNumber: syz [ 267.513144][ T4173] usb 4-1: config 0 descriptor?? [ 267.523582][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.783082][ T5801] loop4: detected capacity change from 0 to 512 [ 267.853763][ T4369] device hsr_slave_0 left promiscuous mode [ 267.885165][ T4369] device hsr_slave_1 left promiscuous mode [ 267.926039][ T5801] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 267.941728][ T5801] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 267.968368][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 267.993266][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.137525][ T4369] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.159151][ T4369] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.219329][ T4369] device bridge_slave_1 left promiscuous mode [ 268.253983][ T4369] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.319794][ T4369] device bridge_slave_0 left promiscuous mode [ 268.338227][ T4369] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.418900][ T4369] device veth1_macvtap left promiscuous mode [ 268.429940][ T4369] device veth0_macvtap left promiscuous mode [ 268.442158][ T4369] device veth1_vlan left promiscuous mode [ 268.455146][ T4369] device veth0_vlan left promiscuous mode [ 268.937944][ T4173] usb 4-1: USB disconnect, device number 5 [ 269.050720][ T5822] loop3: detected capacity change from 0 to 512 [ 269.486952][ T5822] EXT4-fs (loop3): inline encryption not supported [ 270.052811][ T5822] EXT4-fs (loop3): 1 orphan inode deleted [ 270.066109][ T5822] EXT4-fs (loop3): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 270.140066][ T5822] ext4 filesystem being mounted at /78/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 270.343818][ T26] audit: type=1800 audit(1770193241.289:12): pid=5822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.388" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 270.567119][ T5837] loop4: detected capacity change from 0 to 512 [ 271.054939][ T5837] EXT4-fs (loop4): orphan cleanup on readonly fs [ 271.063500][ T5837] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.390: EA inode hash validation failed [ 271.076569][ T5837] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.390: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 271.107157][ T5837] EXT4-fs (loop4): Remounting filesystem read-only [ 271.113763][ T5837] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.4.390: ea_inode dec ref err=-117 [ 271.126721][ T5837] EXT4-fs (loop4): 1 orphan inode deleted [ 271.132500][ T5837] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 272.334583][ T5848] syz.4.392 uses obsolete (PF_INET,SOCK_PACKET) [ 272.470107][ T4369] team0 (unregistering): Port device team_slave_1 removed [ 272.538515][ T4369] team0 (unregistering): Port device team_slave_0 removed [ 272.618905][ T4369] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.684375][ T4369] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.035248][ T4369] bond0 (unregistering): Released all slaves [ 273.142564][ T5820] netlink: 16 bytes leftover after parsing attributes in process `syz.0.383'. [ 273.166066][ T5830] netlink: 'syz.2.389': attribute type 1 has an invalid length. [ 273.331159][ T5834] device veth3 entered promiscuous mode [ 275.514951][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 275.528311][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 275.657994][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 275.709048][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 275.736383][ T4235] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 275.903860][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 276.033769][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 276.131794][ T5622] device veth0_vlan entered promiscuous mode [ 276.156471][ T4235] usb 5-1: config index 0 descriptor too short (expected 4436, got 84) [ 276.189902][ T4235] usb 5-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 276.331102][ T4235] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 276.977391][ T5622] device veth1_vlan entered promiscuous mode [ 276.986761][ T4235] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 277.058012][ T5881] loop2: detected capacity change from 0 to 512 [ 277.096670][ T4235] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 277.121156][ T5622] device veth0_macvtap entered promiscuous mode [ 277.138558][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 277.162606][ T4235] usb 5-1: SerialNumber: syz [ 277.172176][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 277.183142][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 277.203488][ T5881] EXT4-fs (loop2): inline encryption not supported [ 277.209173][ T4235] usb 5-1: config 0 descriptor?? [ 277.228958][ T5622] device veth1_macvtap entered promiscuous mode [ 277.246900][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 277.266807][ T4407] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 277.427172][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.254328][ T5881] EXT4-fs (loop2): 1 orphan inode deleted [ 278.275553][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.286142][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.297111][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.301355][ T5881] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 278.307489][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.330540][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.340708][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.354744][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.366613][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.381306][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 278.445914][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 278.475014][ T5881] ext4 filesystem being mounted at /91/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 278.677694][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.703348][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.991100][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.028189][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.058164][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.091064][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.123018][ T5622] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.152686][ T5622] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.191691][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.227299][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.293845][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.306995][ T4235] usb 5-1: USB disconnect, device number 4 [ 279.390111][ T5622] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.436163][ T5622] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.445286][ T5622] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.470057][ T5622] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.712396][ T26] audit: type=1326 audit(1770193251.659:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0099d5e2d9 code=0x7ffc0000 [ 280.745627][ T26] audit: type=1326 audit(1770193251.679:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0099d5e2d9 code=0x7ffc0000 [ 281.027295][ T26] audit: type=1326 audit(1770193251.679:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0099dbceb9 code=0x7ffc0000 [ 281.074435][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.146737][ T26] audit: type=1326 audit(1770193251.679:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0099dbceb9 code=0x7ffc0000 [ 281.172497][ T26] audit: type=1326 audit(1770193251.679:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0099dbceb9 code=0x7ffc0000 [ 281.196725][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.214064][ T26] audit: type=1326 audit(1770193251.679:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0099dbceb9 code=0x7ffc0000 [ 281.239332][ T5452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.255890][ T5452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.272487][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.276671][ T26] audit: type=1326 audit(1770193251.689:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0099dbceb9 code=0x7ffc0000 [ 281.303474][ T26] audit: type=1326 audit(1770193251.689:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0099dbceb9 code=0x7ffc0000 [ 281.326626][ T26] audit: type=1326 audit(1770193251.689:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0099d5e2d9 code=0x7ffc0000 [ 281.365339][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.371132][ T26] audit: type=1326 audit(1770193251.689:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5910 comm="syz.2.405" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0099dbceb9 code=0x7ffc0000 [ 283.044371][ T5949] ODEBUG: Out of memory. ODEBUG disabled [ 283.485762][ T21] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 283.801024][ T5952] loop0: detected capacity change from 0 to 512 [ 283.912360][ T5952] EXT4-fs (loop0): inline encryption not supported [ 283.946063][ T21] usb 4-1: config index 0 descriptor too short (expected 4436, got 84) [ 283.964745][ T21] usb 4-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 284.009216][ T21] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 284.045028][ T5952] EXT4-fs (loop0): 1 orphan inode deleted [ 284.055824][ T5952] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 284.163036][ T21] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 284.210873][ T5952] ext4 filesystem being mounted at /88/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.516350][ T21] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 284.540438][ T21] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 284.599038][ T21] usb 4-1: SerialNumber: syz [ 284.890490][ T21] usb 4-1: config 0 descriptor?? [ 286.292655][ T21] usb 4-1: USB disconnect, device number 6 [ 286.374868][ T5956] netlink: 16 bytes leftover after parsing attributes in process `syz.2.414'. [ 286.501465][ T5956] device lo entered promiscuous mode [ 286.529635][ T5956] device tunl0 entered promiscuous mode [ 286.569792][ T5956] device gre0 entered promiscuous mode [ 286.635795][ T5956] device gretap0 entered promiscuous mode [ 286.650519][ T5956] device erspan0 entered promiscuous mode [ 286.701422][ T5956] device ip_vti0 entered promiscuous mode [ 286.744060][ T5956] device ip6_vti0 entered promiscuous mode [ 286.764130][ T5956] device sit0 entered promiscuous mode [ 286.808339][ T5956] device ip6tnl0 entered promiscuous mode [ 286.959798][ T5956] device ip6gre0 entered promiscuous mode [ 287.925961][ T5956] device syz_tun entered promiscuous mode [ 288.035216][ T5956] device ip6gretap0 entered promiscuous mode [ 288.114167][ T5956] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.123122][ T5956] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.136791][ T5956] device bridge0 entered promiscuous mode [ 288.240548][ T5956] device vcan0 entered promiscuous mode [ 288.288105][ T5956] device bond0 entered promiscuous mode [ 288.325073][ T5956] device bond_slave_0 entered promiscuous mode [ 288.355781][ T5956] device bond_slave_1 entered promiscuous mode [ 288.501076][ T5956] device team0 entered promiscuous mode [ 288.517168][ T5956] device team_slave_0 entered promiscuous mode [ 288.532982][ T5956] device team_slave_1 entered promiscuous mode [ 288.582870][ T5956] device dummy0 entered promiscuous mode [ 288.649593][ T5956] device nlmon0 entered promiscuous mode [ 288.678872][ T5956] device caif0 entered promiscuous mode [ 288.710434][ T5956] device batadv0 entered promiscuous mode [ 288.791775][ T5956] device vxcan0 entered promiscuous mode [ 288.817594][ T5956] device vxcan1 entered promiscuous mode [ 288.844056][ T5956] device veth0 entered promiscuous mode [ 288.905154][ T5956] device veth1 entered promiscuous mode [ 288.989550][ T5956] device wg0 entered promiscuous mode [ 289.058705][ T5956] device wg1 entered promiscuous mode [ 289.105918][ T5956] device wg2 entered promiscuous mode [ 289.145921][ T5956] device veth0_to_bridge entered promiscuous mode [ 289.274779][ T5956] device veth1_to_bridge entered promiscuous mode [ 289.449552][ T5956] device veth0_to_bond entered promiscuous mode [ 289.545834][ T5956] device veth1_to_bond entered promiscuous mode [ 289.671939][ T5956] device veth0_to_team entered promiscuous mode [ 289.790994][ T5956] device veth1_to_team entered promiscuous mode [ 289.922471][ T5956] device veth0_to_batadv entered promiscuous mode [ 289.943148][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.982276][ T5956] device batadv_slave_0 entered promiscuous mode [ 290.075126][ T5956] device veth1_to_batadv entered promiscuous mode [ 290.096562][ T5956] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 290.132101][ T5956] device batadv_slave_1 entered promiscuous mode [ 290.177800][ T5956] device xfrm0 entered promiscuous mode [ 290.211487][ T5956] device veth0_to_hsr entered promiscuous mode [ 290.263632][ T5956] device veth1_to_hsr entered promiscuous mode [ 290.315408][ T5956] device hsr0 entered promiscuous mode [ 290.348802][ T5956] device veth1_virt_wifi entered promiscuous mode [ 290.382495][ T5956] device veth0_virt_wifi entered promiscuous mode [ 290.392337][ T5956] device virt_wifi0 entered promiscuous mode [ 290.470667][ T5943] net_ratelimit: 10 callbacks suppressed [ 290.470690][ T5943] Set syz1 is full, maxelem 65536 reached [ 290.490064][ T5956] device vlan0 entered promiscuous mode [ 290.506220][ T5956] device vlan1 entered promiscuous mode [ 290.568979][ T5956] device macvlan0 entered promiscuous mode [ 290.617528][ T5956] device macvlan1 entered promiscuous mode [ 290.634346][ T5956] device ipvlan0 entered promiscuous mode [ 290.654075][ T5956] device ipvlan1 entered promiscuous mode [ 290.758256][ T5956] device macvtap0 entered promiscuous mode [ 290.772493][ T5956] device macsec0 entered promiscuous mode [ 290.789029][ T5956] device geneve0 entered promiscuous mode [ 290.872646][ T6029] loop5: detected capacity change from 0 to 512 [ 291.066826][ T6029] EXT4-fs (loop5): orphan cleanup on readonly fs [ 291.078938][ T6029] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.425: EA inode hash validation failed [ 291.092549][ T6029] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.425: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 291.114691][ T6029] EXT4-fs (loop5): Remounting filesystem read-only [ 291.122180][ T6029] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.425: ea_inode dec ref err=-117 [ 291.136644][ T6029] EXT4-fs (loop5): 1 orphan inode deleted [ 291.142470][ T6029] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 291.260193][ T5956] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.308396][ T5956] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.415877][ T5956] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.450927][ T5956] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 291.475966][ T5956] device geneve1 entered promiscuous mode [ 291.511433][ T5956] device netdevsim0 entered promiscuous mode [ 291.521595][ T5956] device netdevsim1 entered promiscuous mode [ 291.537554][ T5956] device netdevsim2 entered promiscuous mode [ 291.553388][ T5956] device netdevsim3 entered promiscuous mode [ 291.561375][ T5956] device wlan0 entered promiscuous mode [ 291.592546][ T5956] device wlan1 entered promiscuous mode [ 291.673537][ T6014] netlink: 'syz.3.424': attribute type 1 has an invalid length. [ 291.731894][ T6016] netlink: 28 bytes leftover after parsing attributes in process `syz.3.424'. [ 291.844360][ T6048] loop5: detected capacity change from 0 to 512 [ 291.942608][ T6048] EXT4-fs (loop5): inline encryption not supported [ 292.064278][ T5956] syz.2.414 (5956) used greatest stack depth: 20112 bytes left [ 292.150157][ T6048] EXT4-fs (loop5): 1 orphan inode deleted [ 292.195757][ T6048] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 292.245988][ T6048] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.923923][ T6062] loop3: detected capacity change from 0 to 512 [ 294.218235][ T6062] EXT4-fs (loop3): Ignoring removed nobh option [ 294.257748][ T6062] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e118, mo2=0002] [ 294.265958][ T6062] System zones: 1-12 [ 294.270911][ T6062] EXT4-fs (loop3): orphan cleanup on readonly fs [ 294.279569][ T6062] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.429: corrupted inode contents [ 294.294443][ T6062] EXT4-fs error (device loop3): ext4_dirty_inode:6058: inode #15: comm syz.3.429: mark_inode_dirty error [ 294.306415][ T6062] EXT4-fs error (device loop3): ext4_do_update_inode:5222: inode #15: comm syz.3.429: corrupted inode contents [ 294.319046][ T6062] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2951: inode #15: comm syz.3.429: mark_inode_dirty error [ 294.331574][ T6062] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2954: inode #15: comm syz.3.429: mark inode dirty (error -117) [ 294.344939][ T6062] EXT4-fs warning (device loop3): ext4_evict_inode:302: xattr delete (err -117) [ 294.354242][ T6062] EXT4-fs (loop3): 1 orphan inode deleted [ 294.360073][ T6062] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,resuid=0x0000000000000000,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,debug,norecovery,,errors=continue. Quota mode: none. [ 294.804462][ T6071] loop5: detected capacity change from 0 to 512 [ 294.922665][ T6071] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 295.015499][ T6071] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 295.386904][ T6087] netlink: 8 bytes leftover after parsing attributes in process `syz.5.435'. [ 296.099888][ T6103] loop5: detected capacity change from 0 to 512 [ 296.255784][ T4234] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 297.864049][ T6103] EXT4-fs (loop5): orphan cleanup on readonly fs [ 297.871669][ T6103] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.437: EA inode hash validation failed [ 297.884599][ T6103] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.437: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 298.000861][ T6103] EXT4-fs (loop5): Remounting filesystem read-only [ 298.007450][ T6103] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.437: ea_inode dec ref err=-117 [ 298.020340][ T6103] EXT4-fs (loop5): 1 orphan inode deleted [ 298.026129][ T6103] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 298.049538][ T4234] usb 3-1: config index 0 descriptor too short (expected 4436, got 84) [ 298.058100][ T4234] usb 3-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 298.073441][ T4234] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 298.112161][ T4234] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 298.326642][ T4234] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 298.343465][ T4234] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 298.374026][ T4234] usb 3-1: SerialNumber: syz [ 298.489026][ T6120] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 299.042800][ T4234] usb 3-1: config 0 descriptor?? [ 299.062159][ T6122] loop2: detected capacity change from 0 to 512 [ 299.109851][ T6122] EXT4-fs (loop2): inline encryption not supported [ 299.125975][ T4234] usb 3-1: can't set config #0, error -71 [ 299.182526][ T4234] usb 3-1: USB disconnect, device number 7 [ 299.221493][ T6122] EXT4-fs (loop2): 1 orphan inode deleted [ 299.346053][ T6122] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 299.451788][ T6122] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.576100][ T26] kauditd_printk_skb: 126 callbacks suppressed [ 299.576116][ T26] audit: type=1800 audit(1770193270.529:149): pid=6122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.442" name="bus" dev="loop2" ino=16 res=0 errno=0 [ 300.500411][ T6162] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 301.266970][ T6172] loop0: detected capacity change from 0 to 512 [ 302.099759][ T6172] EXT4-fs (loop0): Unrecognized mount option "fsuuid=037ed;3-1081-4fûH-27b9-ab3c™3a3" or missing value [ 305.523998][ T6197] loop5: detected capacity change from 0 to 4096 [ 305.617659][ T6197] EXT4-fs (loop5): Test dummy encryption mode enabled [ 305.624525][ T6197] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 305.673446][ T6197] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled [ 305.703069][ T6197] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0023] [ 305.725865][ T6197] System zones: 0-5 [ 305.735254][ T6197] EXT4-fs (loop5): mounted filesystem without journal. Opts: debug,delalloc,dax=never,test_dummy_encryption,nodiscard,nomblk_io_submit,grpjquota=./file0,nodiscard,,errors=continue. Quota mode: writeback. [ 306.425752][ T4721] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 306.746925][ T6218] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 306.816007][ T4721] usb 1-1: config index 0 descriptor too short (expected 4436, got 84) [ 306.834631][ T4721] usb 1-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 306.856464][ T4721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.885498][ T4721] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 306.955045][ T6220] netlink: 'syz.5.459': attribute type 1 has an invalid length. [ 307.010546][ T6220] netlink: 28 bytes leftover after parsing attributes in process `syz.5.459'. [ 307.038596][ T4721] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.060933][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 307.075932][ T4721] usb 1-1: SerialNumber: syz [ 307.104549][ T4721] usb 1-1: config 0 descriptor?? [ 308.903666][ T6258] loop2: detected capacity change from 0 to 4096 [ 309.516511][ T6258] EXT4-fs (loop2): Test dummy encryption mode enabled [ 309.974541][ T4721] usb 1-1: USB disconnect, device number 5 [ 309.989632][ T6258] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 309.998437][ T6258] System zones: 0-5 [ 310.063463][ T6258] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,stripe=0x0000000000000061,grpid,test_dummy_encryption=v1,nodiscard,data_err=ignore,acl,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 310.360378][ T6272] loop4: detected capacity change from 0 to 512 [ 311.105564][ T6260] loop5: detected capacity change from 0 to 4096 [ 311.177497][ T6272] EXT4-fs (loop4): orphan cleanup on readonly fs [ 311.184910][ T6272] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.467: EA inode hash validation failed [ 311.198403][ T6272] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.467: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 311.216262][ T6272] EXT4-fs (loop4): Remounting filesystem read-only [ 311.222920][ T6272] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.4.467: ea_inode dec ref err=-117 [ 311.236136][ T6272] EXT4-fs (loop4): 1 orphan inode deleted [ 311.241902][ T6272] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 311.635006][ T6278] loop0: detected capacity change from 0 to 4096 [ 311.691203][ T6257] fscrypt (loop2): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))") [ 311.881376][ T6278] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 311.888424][ T6300] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 312.007954][ T5622] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 312.025567][ T6278] fs-verity: sha256 using implementation "sha256-avx2" [ 312.048165][ T5622] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 312.239195][ T6278] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.469: bg 0: block 363: padding at end of block bitmap is not set [ 313.287003][ T6278] fs-verity (loop0, inode 15): ext4_end_enable_verity() failed with err -117 [ 314.406797][ T6343] loop4: detected capacity change from 0 to 2048 [ 314.415613][ T6347] netlink: 8 bytes leftover after parsing attributes in process `syz.5.484'. [ 314.426907][ T13] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 314.532419][ T6343] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 314.566455][ T6038] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 314.596160][ T6345] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 314.816493][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.845864][ T6038] usb 4-1: Using ep0 maxpacket: 16 [ 314.863226][ T6343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 314.976779][ T6038] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 315.407756][ T6038] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 315.419752][ T6038] usb 4-1: config 0 interface 0 has no altsetting 0 [ 315.728212][ T6355] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 315.741266][ T6355] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 315.753582][ T6355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 315.783970][ T6355] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.051653][ T13] usb 3-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 316.105908][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.114006][ T13] usb 3-1: Product: syz [ 316.165450][ T6359] loop5: detected capacity change from 0 to 2048 [ 316.166397][ T13] usb 3-1: Manufacturer: syz [ 316.208864][ T13] usb 3-1: SerialNumber: syz [ 316.240312][ T6038] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 316.262741][ T13] usb 3-1: config 0 descriptor?? [ 316.267902][ T6038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.291866][ T6038] usb 4-1: Product: syz [ 316.302736][ T6038] usb 4-1: Manufacturer: syz [ 316.325858][ T6038] usb 4-1: SerialNumber: syz [ 316.345937][ T13] usb 3-1: can't set config #0, error -71 [ 316.367277][ T6038] usb 4-1: config 0 descriptor?? [ 316.372839][ T13] usb 3-1: USB disconnect, device number 8 [ 316.455623][ T6367] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 317.401331][ T6038] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 317.601447][ T21] usb 4-1: USB disconnect, device number 7 [ 317.784500][ T6384] netlink: 'syz.5.491': attribute type 4 has an invalid length. [ 318.606458][ T6409] netlink: 20 bytes leftover after parsing attributes in process `syz.2.495'. [ 318.659822][ T6409] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.736308][ T6409] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.815905][ T6409] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.824673][ T6409] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 320.116371][ T6409] device geneve2 entered promiscuous mode [ 320.290822][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.4.500'. [ 321.328784][ T6440] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4 [ 321.338581][ T6440] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4 [ 321.346147][ T26] audit: type=1800 audit(1770193292.279:150): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.502" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 321.348330][ T6440] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 321.409259][ T6440] syz.2.502 (6440) used greatest stack depth: 18552 bytes left [ 322.359408][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.366037][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.608219][ T6461] loop2: detected capacity change from 0 to 32768 [ 322.804442][ T6461] XFS (loop2): Mounting V5 Filesystem [ 323.074755][ T6461] XFS (loop2): Ending clean mount [ 324.319951][ T6517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.516'. [ 324.651935][ T4194] XFS (loop2): Unmounting Filesystem [ 325.795896][ T4294] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 326.064064][ T6557] loop5: detected capacity change from 0 to 4096 [ 326.154367][ T6557] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.192068][ T6557] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.523: bg 0: block 363: padding at end of block bitmap is not set [ 326.226104][ T4294] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 326.249708][ T4294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.383834][ T6557] fs-verity (loop5, inode 15): ext4_end_enable_verity() failed with err -117 [ 326.440650][ T4294] usb 1-1: config 0 descriptor?? [ 326.564274][ T6569] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.571615][ T6569] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.591641][ T6569] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.623308][ T6569] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 326.662907][ T6569] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 326.798713][ T6569] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.811360][ T6569] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.823603][ T6569] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.836211][ T6569] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.848323][ T6569] virt_wifi0 speed is unknown, defaulting to 1000 [ 327.478119][ T4294] usb 1-1: Cannot set autoneg [ 327.484559][ T4294] MOSCHIP usb-ethernet driver: probe of 1-1:0.0 failed with error -71 [ 327.689312][ T4294] usb 1-1: USB disconnect, device number 6 [ 332.678900][ T6622] netlink: 'syz.2.537': attribute type 4 has an invalid length. [ 332.739064][ T6620] loop4: detected capacity change from 0 to 4096 [ 332.852254][ T6620] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 332.964886][ T6627] netlink: 8 bytes leftover after parsing attributes in process `syz.0.532'. [ 333.033143][ T6620] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.536: bg 0: block 363: padding at end of block bitmap is not set [ 333.087242][ T6620] fs-verity (loop4, inode 15): ext4_end_enable_verity() failed with err -117 [ 335.945997][ T4721] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 336.195723][ T4721] usb 1-1: Using ep0 maxpacket: 8 [ 336.315857][ T4721] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 336.495853][ T4721] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 336.505007][ T4721] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.554011][ T4721] usb 1-1: Product: syz [ 336.570960][ T4721] usb 1-1: Manufacturer: syz [ 336.586120][ T4721] usb 1-1: SerialNumber: syz [ 336.612025][ T4721] usb 1-1: config 0 descriptor?? [ 336.669837][ T4721] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 336.699737][ T4721] usb 1-1: setting power ON [ 336.704940][ T4721] dvb-usb: bulk message failed: -22 (2/0) [ 336.869161][ T6685] dvb-usb: bulk message failed: -22 (3/0) [ 336.875213][ T6685] dvb-usb: bulk message failed: -22 (4/0) [ 336.887810][ T4721] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 336.908152][ T6685] cxusb: i2c read failed [ 336.956272][ T4721] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 336.967020][ T6685] cxusb: i2c rd: len=81 is too big! [ 336.967020][ T6685] [ 336.979242][ T4721] usb 1-1: media controller created [ 337.002714][ T6703] virt_wifi0 speed is unknown, defaulting to 1000 [ 337.100330][ T4721] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 337.276518][ T4721] usb 1-1: selecting invalid altsetting 6 [ 337.282751][ T4721] usb 1-1: digital interface selection failed (-22) [ 337.325798][ T4721] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 337.426160][ T4721] usb 1-1: setting power OFF [ 337.431337][ T4721] dvb-usb: bulk message failed: -22 (2/0) [ 337.464261][ T4721] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 337.525896][ T4721] (NULL device *): no alternate interface [ 337.571140][ T4721] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 337.639320][ T4721] usb 1-1: USB disconnect, device number 7 [ 337.744614][ T6703] chnl_net:caif_netlink_parms(): no params data found [ 337.802053][ T6724] loop5: detected capacity change from 0 to 512 [ 337.857823][ T6724] EXT4-fs (loop5): inline encryption not supported [ 337.969632][ T6724] EXT4-fs (loop5): 1 orphan inode deleted [ 337.975524][ T6724] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 338.016001][ T6724] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 338.057120][ T26] audit: type=1800 audit(1770193309.009:151): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.555" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 338.845787][ T4721] Bluetooth: hci1: command 0x0409 tx timeout [ 338.886554][ T6703] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.945775][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.954102][ T6703] device bridge_slave_0 entered promiscuous mode [ 339.005938][ T6703] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.015585][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.025934][ T6703] device bridge_slave_1 entered promiscuous mode [ 339.308262][ T6703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.364958][ T6703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.033092][ T4234] Bluetooth: hci1: command 0x041b tx timeout [ 341.950908][ T6754] loop0: detected capacity change from 0 to 512 [ 341.967397][ T6703] team0: Port device team_slave_0 added [ 342.027577][ T6703] team0: Port device team_slave_1 added [ 342.077027][ T6757] netlink: 20 bytes leftover after parsing attributes in process `syz.2.562'. [ 342.147446][ T6754] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.561: inode has both inline data and extents flags [ 342.179881][ T6754] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.561: couldn't read orphan inode 15 (err -117) [ 342.193359][ T6754] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 342.235822][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 342.242831][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.488609][ T6703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 342.664040][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.730263][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.968594][ T6703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.085840][ T4294] Bluetooth: hci1: command 0x040f tx timeout [ 343.113541][ T6703] device hsr_slave_0 entered promiscuous mode [ 343.191267][ T6703] device hsr_slave_1 entered promiscuous mode [ 343.215946][ T4721] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 343.493976][ T6764] loop2: detected capacity change from 0 to 32768 [ 343.626193][ T4721] usb 6-1: config index 0 descriptor too short (expected 4436, got 84) [ 343.642438][ T4721] usb 6-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 343.652018][ T4721] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 343.662671][ T4721] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 343.697795][ T6764] XFS (loop2): Mounting V5 Filesystem [ 343.746148][ T4721] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 343.755530][ T4721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 343.779387][ T6801] netlink: 'syz.0.569': attribute type 2 has an invalid length. [ 343.789648][ T4721] usb 6-1: SerialNumber: syz [ 343.846507][ T4721] usb 6-1: config 0 descriptor?? [ 343.923172][ T5005] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.959245][ T6764] XFS (loop2): Ending clean mount [ 343.972678][ T5005] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.062355][ T6764] XFS (loop2): Quotacheck needed: Please wait. [ 344.073151][ T5005] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.517656][ T6764] XFS (loop2): Quotacheck: Done. [ 344.528394][ T5005] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.790784][ T4194] XFS (loop2): Unmounting Filesystem [ 345.654345][ T4234] Bluetooth: hci1: command 0x0419 tx timeout [ 345.978991][ T4721] usb 6-1: USB disconnect, device number 2 [ 346.878168][ T6703] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 346.926268][ T6703] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 348.404874][ T6834] loop4: detected capacity change from 0 to 512 [ 348.676164][ T6834] EXT4-fs (loop4): orphan cleanup on readonly fs [ 348.683861][ T6834] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.575: EA inode hash validation failed [ 348.696612][ T6834] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.575: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 348.715952][ T6834] EXT4-fs (loop4): Remounting filesystem read-only [ 348.722565][ T6834] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.4.575: ea_inode dec ref err=-117 [ 348.735567][ T6834] EXT4-fs (loop4): 1 orphan inode deleted [ 348.741490][ T6834] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 348.866745][ T6703] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 348.927204][ T6835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.574'. [ 349.040312][ T6703] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 351.852328][ T6870] netlink: 'syz.2.582': attribute type 12 has an invalid length. [ 351.896029][ T6870] netlink: 'syz.2.582': attribute type 29 has an invalid length. [ 351.934530][ T6870] netlink: 148 bytes leftover after parsing attributes in process `syz.2.582'. [ 352.004554][ T6870] netlink: 'syz.2.582': attribute type 2 has an invalid length. [ 352.065324][ T6870] netlink: 23 bytes leftover after parsing attributes in process `syz.2.582'. [ 352.071188][ T6861] loop0: detected capacity change from 0 to 131072 [ 352.157329][ T6861] F2FS-fs (loop0): Test dummy encryption mode enabled [ 352.169801][ T6861] F2FS-fs (loop0): invalid crc value [ 352.208962][ T6861] F2FS-fs (loop0): Found nat_bits in checkpoint [ 352.273971][ T6861] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 352.365827][ T21] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 352.458076][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.506527][ T6861] fscrypt (loop0, inode 10): Error allocating 'cts(cbc(aes))' transform: -4 [ 352.520126][ T6894] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 352.567147][ T6703] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.599237][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 352.630937][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 352.677863][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 352.706899][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 352.736387][ T4384] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.743549][ T4384] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.746584][ T21] usb 6-1: config index 0 descriptor too short (expected 4436, got 84) [ 352.771618][ T21] usb 6-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 352.805806][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.846967][ T21] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 352.982926][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 353.001942][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 353.067393][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 353.112380][ T4384] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.120065][ T4384] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.129033][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 353.147638][ T21] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 353.157492][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 353.165544][ T21] usb 6-1: SerialNumber: syz [ 353.192741][ T21] usb 6-1: config 0 descriptor?? [ 354.034775][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 354.060377][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 354.077387][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 354.094395][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 354.116555][ T6906] netlink: 12 bytes leftover after parsing attributes in process `syz.2.587'. [ 354.167024][ T6703] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 354.230615][ T6703] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 354.264079][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 354.283801][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 354.334280][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 354.451807][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 354.580520][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 355.269254][ T21] usb 6-1: USB disconnect, device number 3 [ 355.393539][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 355.736480][ T4384] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 357.389821][ T5005] device hsr_slave_0 left promiscuous mode [ 357.399352][ T5005] device hsr_slave_1 left promiscuous mode [ 357.409179][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.422156][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.445294][ T5005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.478752][ T5005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.512060][ T5005] device bridge_slave_1 left promiscuous mode [ 357.530042][ T5005] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.564351][ T5005] device bridge_slave_0 left promiscuous mode [ 357.578542][ T5005] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.649221][ T5005] device veth1_macvtap left promiscuous mode [ 357.675755][ T5005] device veth0_macvtap left promiscuous mode [ 357.702565][ T5005] device veth1_vlan left promiscuous mode [ 357.730744][ T5005] device veth0_vlan left promiscuous mode [ 358.881271][ T6964] loop0: detected capacity change from 0 to 512 [ 359.110077][ T6964] EXT4-fs (loop0): orphan cleanup on readonly fs [ 359.123035][ T5005] team0 (unregistering): Port device team_slave_1 removed [ 359.148585][ T6964] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.586: EA inode hash validation failed [ 359.162582][ T6964] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.586: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 359.187648][ T6964] EXT4-fs (loop0): Remounting filesystem read-only [ 359.194363][ T6964] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.0.586: ea_inode dec ref err=-117 [ 359.208391][ T6964] EXT4-fs (loop0): 1 orphan inode deleted [ 359.214220][ T6964] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 359.458723][ T5005] team0 (unregistering): Port device team_slave_0 removed [ 359.506474][ T5005] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.542098][ T5005] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.664866][ T5005] bond0 (unregistering): Released all slaves [ 359.757212][ T6703] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.785757][ T6948] netlink: 4 bytes leftover after parsing attributes in process `syz.4.596'. [ 359.842515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 359.873632][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.885164][ T6957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.597'. [ 360.055763][ T4721] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 360.086799][ T6978] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 361.166365][ T4721] usb 1-1: config index 0 descriptor too short (expected 4436, got 84) [ 361.174707][ T4721] usb 1-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 361.205722][ T4721] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 361.241808][ T4721] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 361.252413][ T6993] device syzkaller0 entered promiscuous mode [ 361.331226][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 361.346080][ T4721] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 361.350891][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 361.363877][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 361.382579][ T4721] usb 1-1: SerialNumber: syz [ 361.396993][ T4721] usb 1-1: config 0 descriptor?? [ 361.482448][ T6995] tipc: Started in network mode [ 361.499317][ T6995] tipc: Node identity b6d6b755154f, cluster identity 4711 [ 361.511297][ T6995] tipc: Enabled bearer , priority 0 [ 361.559138][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 361.573755][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 361.629990][ T6998] device syzkaller0 entered promiscuous mode [ 361.743397][ T6703] device veth0_vlan entered promiscuous mode [ 361.762288][ T4721] usb 1-1: USB disconnect, device number 8 [ 361.775059][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 361.792123][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 361.830626][ T7007] tipc: Resetting bearer [ 361.861109][ T6994] tipc: Resetting bearer [ 361.930793][ T6994] tipc: Disabling bearer [ 362.127978][ T6703] device veth1_vlan entered promiscuous mode [ 362.263787][ T7016] loop2: detected capacity change from 0 to 512 [ 362.389535][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 362.556413][ T7016] EXT4-fs (loop2): orphan cleanup on readonly fs [ 362.573663][ T7016] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.608: EA inode hash validation failed [ 362.587421][ T7016] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.608: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 362.607604][ T7016] EXT4-fs (loop2): Remounting filesystem read-only [ 362.614419][ T7016] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.608: ea_inode dec ref err=-117 [ 362.628479][ T7016] EXT4-fs (loop2): 1 orphan inode deleted [ 362.634417][ T7016] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 362.711013][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 362.902188][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 362.953748][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 362.966762][ T6703] device veth0_macvtap entered promiscuous mode [ 363.074193][ T6703] device veth1_macvtap entered promiscuous mode [ 363.146946][ T7005] device erspan0 entered promiscuous mode [ 363.298428][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.369041][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.555147][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.753883][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.785856][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.808153][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.834441][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.872409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 363.894384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 363.934216][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 363.962115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 363.996008][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.044278][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.131258][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.183331][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.209807][ T6703] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 364.223528][ T7046] loop5: detected capacity change from 0 to 512 [ 364.248758][ T6703] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 364.297142][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.324277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 364.348357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 364.384810][ T7046] EXT4-fs (loop5): inline encryption not supported [ 364.405463][ T6703] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.456579][ T6703] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.476033][ T7046] EXT4-fs (loop5): 1 orphan inode deleted [ 364.512356][ T7046] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 364.545847][ T6703] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.555012][ T6703] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.590615][ T7046] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 364.699932][ T26] audit: type=1800 audit(1770193335.649:152): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.615" name="bus" dev="loop5" ino=16 res=0 errno=0 [ 365.044882][ T5452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.053384][ T21] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 365.302366][ T5452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.377693][ T5452] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 365.660185][ T4405] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.696238][ T21] usb 5-1: config index 0 descriptor too short (expected 4436, got 84) [ 365.717940][ T21] usb 5-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 365.764306][ T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 365.766527][ T4405] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.882211][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 365.965552][ T21] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 366.076152][ T21] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 366.113700][ T7092] loop2: detected capacity change from 0 to 512 [ 366.158196][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 366.373461][ T7092] EXT4-fs (loop2): orphan cleanup on readonly fs [ 366.387893][ T7092] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.621: EA inode hash validation failed [ 366.401743][ T7092] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.621: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 366.424792][ T7092] EXT4-fs (loop2): Remounting filesystem read-only [ 366.431508][ T7092] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.621: ea_inode dec ref err=-117 [ 366.446040][ T7092] EXT4-fs (loop2): 1 orphan inode deleted [ 366.452624][ T7092] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 366.626654][ T21] usb 5-1: SerialNumber: syz [ 366.677957][ T21] usb 5-1: config 0 descriptor?? [ 366.920316][ T7097] binder_alloc: 7096: pid 7096 spamming oneway? 2 buffers allocated for a total size of 5120 [ 367.373595][ T21] usb 5-1: USB disconnect, device number 5 [ 367.498724][ T4748] udevd[4748]: setting owner of /dev/bus/usb/005/005 to uid=0, gid=0 failed: No such file or directory [ 370.166102][ T7150] loop5: detected capacity change from 0 to 512 [ 371.027282][ T7150] EXT4-fs (loop5): orphan cleanup on readonly fs [ 371.034955][ T7150] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.635: EA inode hash validation failed [ 371.047919][ T7150] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.635: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 371.065584][ T7150] EXT4-fs (loop5): Remounting filesystem read-only [ 371.072209][ T7150] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.635: ea_inode dec ref err=-117 [ 371.085389][ T7150] EXT4-fs (loop5): 1 orphan inode deleted [ 371.091300][ T7150] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 373.648916][ T21] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 374.001150][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'. [ 374.692472][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 374.832875][ T7197] netlink: 8 bytes leftover after parsing attributes in process `syz.4.648'. [ 374.858487][ T7201] device syzkaller0 entered promiscuous mode [ 374.901229][ T7201] tipc: Enabled bearer , priority 0 [ 375.011965][ T7198] tipc: Resetting bearer [ 375.160966][ T7198] tipc: Disabling bearer [ 375.910691][ T23] Bluetooth: hci5: command 0x0406 tx timeout [ 375.995978][ T21] usb 7-1: config index 0 descriptor too short (expected 4436, got 84) [ 376.015541][ T21] usb 7-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 376.074349][ T21] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.098527][ T21] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 376.296712][ T21] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 376.370328][ T7225] loop4: detected capacity change from 0 to 512 [ 377.066759][ T6032] Bluetooth: hci0: command 0x0401 tx timeout [ 377.110336][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 377.124972][ T21] usb 7-1: SerialNumber: syz [ 377.151541][ T7228] netlink: 32 bytes leftover after parsing attributes in process `syz.6.655'. [ 377.186309][ T7225] EXT4-fs (loop4): orphan cleanup on readonly fs [ 377.193594][ T7225] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.652: EA inode hash validation failed [ 377.206458][ T7225] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.652: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 377.227666][ T7225] EXT4-fs (loop4): Remounting filesystem read-only [ 377.234348][ T7225] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.4.652: ea_inode dec ref err=-117 [ 377.247558][ T7225] EXT4-fs (loop4): 1 orphan inode deleted [ 377.253299][ T7225] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 377.286349][ T21] usb 7-1: config 0 descriptor?? [ 377.335767][ T21] usb 7-1: can't set config #0, error -71 [ 377.344001][ T21] usb 7-1: USB disconnect, device number 2 [ 380.965926][ T7261] netlink: 'syz.4.663': attribute type 25 has an invalid length. [ 380.973818][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 381.049958][ T7261] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.059422][ T7261] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.068480][ T7261] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.077297][ T7261] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.203810][ T7261] netlink: 'syz.4.663': attribute type 25 has an invalid length. [ 381.247518][ T7261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.663'. [ 381.590436][ T7273] loop5: detected capacity change from 0 to 512 [ 381.820196][ T7273] EXT4-fs (loop5): orphan cleanup on readonly fs [ 381.842546][ T7273] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.667: EA inode hash validation failed [ 381.856344][ T7273] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.667: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 381.880979][ T7273] EXT4-fs (loop5): Remounting filesystem read-only [ 381.887763][ T7273] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.667: ea_inode dec ref err=-117 [ 381.901564][ T7273] EXT4-fs (loop5): 1 orphan inode deleted [ 381.907431][ T7273] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 382.807898][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.5.673'. [ 382.956414][ T7298] team0: Port device team_slave_0 removed [ 383.048264][ T7308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.674'. [ 384.132412][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.245681][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 385.314465][ T7351] netlink: 184 bytes leftover after parsing attributes in process `syz.0.683'. [ 385.428279][ T7358] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.687'. [ 390.748651][ T7379] device syzkaller0 entered promiscuous mode [ 390.808875][ T7379] 0: reclassify loop, rule prio 0, protocol 800 [ 390.834878][ T7383] device syzkaller0 entered promiscuous mode [ 390.891355][ T7388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.698'. [ 390.949996][ T7393] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:20001 [ 391.315765][ T7402] device syzkaller1 entered promiscuous mode [ 392.109391][ T21] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 392.124095][ T7432] device syzkaller0 entered promiscuous mode [ 393.045995][ T21] usb 6-1: config index 0 descriptor too short (expected 4436, got 84) [ 393.067976][ T21] usb 6-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 393.116263][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.130168][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.0.708'. [ 393.145932][ T21] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 393.159003][ T7444] netlink: 12 bytes leftover after parsing attributes in process `syz.6.710'. [ 393.232999][ T4190] block nbd0: Receive control failed (result -32) [ 393.265869][ T21] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 393.285397][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 393.345908][ T21] usb 6-1: SerialNumber: syz [ 393.381963][ T21] usb 6-1: config 0 descriptor?? [ 394.036189][ T7476] loop2: detected capacity change from 0 to 512 [ 394.599697][ T7476] EXT4-fs (loop2): orphan cleanup on readonly fs [ 394.609411][ T7476] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.718: EA inode hash validation failed [ 394.622365][ T7476] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.718: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 394.646267][ T7476] EXT4-fs (loop2): Remounting filesystem read-only [ 394.653075][ T7476] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.718: ea_inode dec ref err=-117 [ 394.666340][ T7476] EXT4-fs (loop2): 1 orphan inode deleted [ 394.672207][ T7476] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 394.919131][ T7488] device syzkaller0 entered promiscuous mode [ 395.004169][ T7490] netlink: 12 bytes leftover after parsing attributes in process `syz.4.723'. [ 395.421461][ T7509] loop6: detected capacity change from 0 to 512 [ 395.759483][ T7509] EXT4-fs (loop6): inline encryption not supported [ 396.418449][ T7509] EXT4-fs (loop6): 1 orphan inode deleted [ 396.487481][ T7509] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 396.556109][ T7509] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 396.616022][ T26] audit: type=1800 audit(1770193367.569:153): pid=7509 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.731" name="bus" dev="loop6" ino=16 res=0 errno=0 [ 396.838056][ T7527] netlink: 40 bytes leftover after parsing attributes in process `syz.4.736'. [ 397.755268][ T7540] device syzkaller0 entered promiscuous mode [ 398.601184][ T7558] virt_wifi0 speed is unknown, defaulting to 1000 [ 398.783305][ T6035] usb 6-1: USB disconnect, device number 4 [ 398.833404][ T7565] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 399.092163][ T7574] device syzkaller0 entered promiscuous mode [ 399.633617][ T7589] netlink: 20 bytes leftover after parsing attributes in process `syz.6.752'. [ 399.916498][ T7594] loop4: detected capacity change from 0 to 512 [ 400.035329][ T7594] EXT4-fs (loop4): inline encryption not supported [ 400.238082][ T7594] EXT4-fs (loop4): 1 orphan inode deleted [ 400.270081][ T7594] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 400.403001][ T7594] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 400.509410][ T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 400.563743][ T26] audit: type=1800 audit(1770193371.509:154): pid=7594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.754" name="bus" dev="loop4" ino=16 res=0 errno=0 [ 401.025922][ T21] usb 7-1: config index 0 descriptor too short (expected 4436, got 84) [ 401.086056][ T21] usb 7-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 401.105218][ T7620] device veth0 entered promiscuous mode [ 401.120283][ T21] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.247413][ T7620] netlink: 4 bytes leftover after parsing attributes in process `syz.5.762'. [ 401.280301][ T21] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 401.441439][ T21] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 401.458543][ T21] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 401.480648][ T21] usb 7-1: SerialNumber: syz [ 401.524707][ T21] usb 7-1: config 0 descriptor?? [ 401.599342][ T7624] netlink: 'syz.0.763': attribute type 4 has an invalid length. [ 401.657843][ T7627] netlink: 'syz.0.763': attribute type 4 has an invalid length. [ 401.845035][ T7640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.769'. [ 409.499134][ T7711] xt_hashlimit: size too large, truncated to 1048576 [ 409.621632][ T6035] usb 7-1: USB disconnect, device number 3 [ 411.467199][ T7749] device geneve2 entered promiscuous mode [ 411.510966][ T7752] netlink: 'syz.6.794': attribute type 3 has an invalid length. [ 411.543743][ T7752] netlink: 'syz.6.794': attribute type 3 has an invalid length. [ 411.800300][ T7766] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 412.904135][ T7803] netlink: 'syz.6.801': attribute type 119 has an invalid length. [ 413.401885][ T7817] loop6: detected capacity change from 0 to 512 [ 413.618172][ T7817] EXT4-fs (loop6): orphan cleanup on readonly fs [ 413.631524][ T7817] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.803: EA inode hash validation failed [ 413.645461][ T7817] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:984: inode #11: comm syz.6.803: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 413.666247][ T7817] EXT4-fs (loop6): Remounting filesystem read-only [ 413.672941][ T7817] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.6.803: ea_inode dec ref err=-117 [ 413.687178][ T7817] EXT4-fs (loop6): 1 orphan inode deleted [ 413.692991][ T7817] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 415.849057][ T7850] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 416.843689][ T7883] device syzkaller0 entered promiscuous mode [ 417.272470][ T7897] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 417.471639][ T7901] loop6: detected capacity change from 0 to 512 [ 417.529761][ T7901] EXT4-fs (loop6): inline encryption not supported [ 417.602313][ T7901] EXT4-fs (loop6): 1 orphan inode deleted [ 417.608539][ T7901] EXT4-fs (loop6): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 417.621167][ T7901] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 417.641225][ T26] audit: type=1800 audit(1770193388.589:155): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.826" name="bus" dev="loop6" ino=16 res=0 errno=0 [ 417.939128][ T7915] device syzkaller0 entered promiscuous mode [ 418.382614][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.832'. [ 419.273190][ T7939] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 419.444773][ T7943] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.721828][ T7951] device syzkaller0 entered promiscuous mode [ 419.803067][ T7955] loop2: detected capacity change from 0 to 512 [ 419.987729][ T7955] EXT4-fs (loop2): orphan cleanup on readonly fs [ 420.000603][ T7955] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.841: EA inode hash validation failed [ 420.014297][ T7955] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.841: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 420.035213][ T7955] EXT4-fs (loop2): Remounting filesystem read-only [ 420.042023][ T7955] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.841: ea_inode dec ref err=-117 [ 420.056097][ T7955] EXT4-fs (loop2): 1 orphan inode deleted [ 420.061919][ T7955] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 420.618144][ T7958] netlink: 'syz.4.844': attribute type 13 has an invalid length. [ 420.713879][ T7958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 420.777689][ T7975] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 420.797542][ T7958] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 422.399390][ T8009] loop5: detected capacity change from 0 to 512 [ 422.466328][ T8009] EXT4-fs (loop5): inline encryption not supported [ 422.508362][ T8009] EXT4-fs (loop5): 1 orphan inode deleted [ 422.514169][ T8009] EXT4-fs (loop5): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 422.584036][ T8009] ext4 filesystem being mounted at /94/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 422.602365][ T26] audit: type=1800 audit(1770193393.549:156): pid=8009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.860" name="bus" dev="loop5" ino=16 res=0 errno=0 [ 424.010798][ T8053] netlink: 12 bytes leftover after parsing attributes in process `syz.5.871'. [ 425.901073][ T8094] loop2: detected capacity change from 0 to 128 [ 425.907763][ T8092] loop5: detected capacity change from 0 to 64 [ 426.578468][ T8111] loop6: detected capacity change from 0 to 2048 [ 426.691366][ T8115] loop4: detected capacity change from 0 to 40427 [ 426.828116][ T8115] F2FS-fs (loop4): Found nat_bits in checkpoint [ 426.852742][ T8111] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 426.894659][ T26] audit: type=1800 audit(1770193397.839:157): pid=8111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.888" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 426.933660][ T8115] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 427.861466][ T8136] netlink: 12 bytes leftover after parsing attributes in process `syz.0.895'. [ 429.218672][ T8163] loop4: detected capacity change from 0 to 22 [ 429.276497][ T8163] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 429.576272][ T8163] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 430.002222][ T8178] loop0: detected capacity change from 0 to 512 [ 430.095771][ T6037] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 431.418543][ T8204] Bluetooth: hci0: unsupported parameter 255 [ 431.448331][ T8204] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 432.089464][ T8178] EXT4-fs (loop0): inline encryption not supported [ 432.272420][ T8178] EXT4-fs (loop0): 1 orphan inode deleted [ 432.305341][ T8178] EXT4-fs (loop0): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 432.394675][ T8178] ext4 filesystem being mounted at /188/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 432.475691][ T6037] usb 3-1: Using ep0 maxpacket: 32 [ 432.491101][ T26] audit: type=1800 audit(1770193403.439:158): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.904" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 432.606681][ T6037] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 432.625703][ T6037] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 432.646295][ T6037] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 432.665337][ T6037] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.701711][ T6037] usb 3-1: config 0 descriptor?? [ 432.955962][ T6037] usbhid 3-1:0.0: can't add hid device: -71 [ 432.962255][ T6037] usbhid: probe of 3-1:0.0 failed with error -71 [ 433.003769][ T6037] usb 3-1: USB disconnect, device number 9 [ 433.174642][ T8231] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 433.716093][ T21] Bluetooth: hci1: command 0x0411 tx timeout [ 433.753872][ T8242] netlink: 8 bytes leftover after parsing attributes in process `syz.0.920'. [ 433.763046][ T23] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 434.126131][ T23] usb 6-1: config index 0 descriptor too short (expected 4436, got 84) [ 434.146804][ T23] usb 6-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 434.228144][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 434.303419][ T23] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 434.437945][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 434.455934][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 434.492716][ T23] usb 6-1: SerialNumber: syz [ 434.543890][ T23] usb 6-1: config 0 descriptor?? [ 434.665679][ T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 435.186041][ T21] usb 3-1: config index 0 descriptor too short (expected 39, got 27) [ 435.227539][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 435.365217][ T21] usb 3-1: config 0 interface 0 has no altsetting 0 [ 435.815876][ T21] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 435.837670][ T21] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 435.889358][ T21] usb 3-1: Product: syz [ 435.943100][ T21] usb 3-1: Manufacturer: syz [ 435.976942][ T21] usb 3-1: SerialNumber: syz [ 436.021517][ T21] usb 3-1: config 0 descriptor?? [ 436.039037][ T8269] loop0: detected capacity change from 0 to 1024 [ 436.099384][ T21] hub 3-1:0.0: bad descriptor, ignoring hub [ 436.109520][ T21] hub: probe of 3-1:0.0 failed with error -5 [ 436.133675][ T8269] EXT4-fs (loop0): inline encryption not supported [ 436.202542][ T8269] EXT4-fs (loop0): Ignoring removed bh option [ 436.258616][ T8269] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 436.351872][ T8271] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 436.368714][ T21] snd-usb-audio: probe of 3-1:0.0 failed with error -22 [ 436.445783][ T5296] udevd[5296]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 436.493700][ T21] usb 3-1: USB disconnect, device number 10 [ 436.504198][ T8269] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,data_err=abort,inlinecrypt,journal_dev=0x0000000000000d5c,data_err=ignore,bh,nojournal_checksum,grpquota,init_itable,user_xattr,mb_optimize_scan=0x0000000000000001,errors=remount-ro,lazytime,. Quota mode: writeback. [ 436.532753][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.702602][ T8278] loop6: detected capacity change from 0 to 512 [ 436.845687][ T26] audit: type=1800 audit(1770193407.749:159): pid=8269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.926" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 436.937978][ T8278] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.928: bg 0: block 5: invalid block bitmap [ 437.019087][ T8278] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6194: Corrupt filesystem [ 437.077711][ T8278] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.928: invalid indirect mapped block 3 (level 2) [ 437.123193][ T8278] EXT4-fs (loop6): 1 orphan inode deleted [ 437.135692][ T8278] EXT4-fs (loop6): 1 truncate cleaned up [ 437.141391][ T8278] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 437.535060][ T8286] MPTCP: kernel_bind error, err=-99 [ 437.660016][ T8284] loop6: detected capacity change from 0 to 32768 [ 438.271637][ T8284] XFS (loop6): Mounting V5 Filesystem [ 438.411122][ T8284] XFS (loop6): Ending clean mount [ 438.424254][ T8284] XFS (loop6): Quotacheck needed: Please wait. [ 438.491598][ T8284] XFS (loop6): Quotacheck: Done. [ 438.563418][ T6703] XFS (loop6): Unmounting Filesystem [ 438.630503][ T23] usb 6-1: USB disconnect, device number 5 [ 440.704817][ T8331] loop0: detected capacity change from 0 to 512 [ 440.896311][ T8331] EXT4-fs (loop0): orphan cleanup on readonly fs [ 440.920223][ T8331] EXT4-fs warning (device loop0): ext4_xattr_inode_get:506: inode #11: comm syz.0.943: EA inode hash validation failed [ 440.935394][ T8331] EXT4-fs error (device loop0): ext4_xattr_inode_update_ref:984: inode #11: comm syz.0.943: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 440.960275][ T8331] EXT4-fs (loop0): Remounting filesystem read-only [ 440.967150][ T8331] EXT4-fs warning (device loop0): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.0.943: ea_inode dec ref err=-117 [ 440.982929][ T8331] EXT4-fs (loop0): 1 orphan inode deleted [ 440.988931][ T8331] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 442.145850][ T4721] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 442.566456][ T4721] usb 6-1: config index 0 descriptor too short (expected 4436, got 84) [ 442.593684][ T4721] usb 6-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 442.611261][ T4721] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 442.635113][ T4721] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 442.735905][ T4721] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 442.749602][ T4721] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 442.766844][ T4721] usb 6-1: SerialNumber: syz [ 442.790067][ T4721] usb 6-1: config 0 descriptor?? [ 444.165212][ T8368] loop0: detected capacity change from 0 to 128 [ 444.266049][ T8368] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 444.313766][ T8368] ext4 filesystem being mounted at /202/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 444.845694][ T6035] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 445.038217][ T4721] usb 6-1: USB disconnect, device number 6 [ 445.065838][ T6037] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 445.167874][ T6035] usb 5-1: unable to get BOS descriptor or descriptor too short [ 445.250794][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.262927][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.396918][ T6035] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 445.433856][ T6035] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 445.471261][ T6035] usb 5-1: config 1 interface 0 has no altsetting 1 [ 445.486699][ T6037] usb 7-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08 [ 446.093425][ T6037] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.114313][ T6037] usb 7-1: config 0 descriptor?? [ 446.152187][ T8397] loop0: detected capacity change from 0 to 128 [ 446.169479][ T6037] gspca_main: cpia1-2.14.0 probing 0813:0001 [ 446.205935][ T6035] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 446.240016][ T8397] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 446.252309][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.267194][ T8397] ext4 filesystem being mounted at /205/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 446.306002][ T6035] usb 5-1: Product: syz [ 446.328662][ T6035] usb 5-1: Manufacturer: syz [ 446.357083][ T6035] usb 5-1: SerialNumber: syz [ 446.427796][ T6035] smsusb:smsusb_probe: board id=8, interface number 0 [ 446.615844][ T6037] cpia1 7-1:0.0: unexpected state after lo power cmd: 00 [ 446.781022][ T8375] loop4: detected capacity change from 0 to 32768 [ 447.055769][ T6037] gspca_cpia1: usb_control_msg 02, error -71 [ 447.062015][ T6037] cpia1 7-1:0.0: only firmware version 1 is supported (got: 0) [ 447.098981][ T6037] usb 7-1: USB disconnect, device number 4 [ 447.326747][ T6035] smsusb:smsusb_probe: usb_set_interface failed, rc -71 [ 447.333816][ T6035] smsusb: probe of 5-1:1.0 failed with error -71 [ 447.438667][ T6035] usb 5-1: USB disconnect, device number 6 [ 447.745823][ T6037] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 448.602767][ T8426] loop4: detected capacity change from 0 to 512 [ 448.707808][ T6037] usb 1-1: config index 0 descriptor too short (expected 4436, got 84) [ 448.807545][ T8426] EXT4-fs (loop4): orphan cleanup on readonly fs [ 448.819573][ T8426] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.972: EA inode hash validation failed [ 448.833312][ T8426] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.972: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 448.856083][ T8426] EXT4-fs (loop4): Remounting filesystem read-only [ 448.862808][ T8426] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.4.972: ea_inode dec ref err=-117 [ 448.876940][ T8426] EXT4-fs (loop4): 1 orphan inode deleted [ 448.882821][ T8426] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 448.937778][ T6037] usb 1-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 449.133958][ T6037] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.235832][ T6037] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 449.246142][ T8431] loop2: detected capacity change from 0 to 64 [ 449.425902][ T6037] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 449.551404][ T6037] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 449.771076][ T6037] usb 1-1: SerialNumber: syz [ 449.953136][ T6037] usb 1-1: config 0 descriptor?? [ 450.296094][ T8439] netlink: 44 bytes leftover after parsing attributes in process `syz.4.976'. [ 450.509832][ T26] audit: type=1804 audit(1770193421.459:160): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.981" name="file0" dev="ramfs" ino=46280 res=1 errno=0 [ 450.837035][ T26] audit: type=1804 audit(1770193421.779:161): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.981" name="file0" dev="ramfs" ino=46280 res=1 errno=0 [ 450.865888][ T6037] usb 1-1: USB disconnect, device number 9 [ 451.456164][ T8471] loop4: detected capacity change from 0 to 512 [ 451.945895][ T8452] crypto_alloc_aead failed rc=-4 [ 452.146986][ T8471] EXT4-fs (loop4): orphan cleanup on readonly fs [ 452.200810][ T8471] EXT4-fs warning (device loop4): ext4_xattr_inode_get:506: inode #11: comm syz.4.986: EA inode hash validation failed [ 452.214273][ T8471] EXT4-fs error (device loop4): ext4_xattr_inode_update_ref:984: inode #11: comm syz.4.986: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 452.237646][ T8471] EXT4-fs (loop4): Remounting filesystem read-only [ 452.244236][ T8471] EXT4-fs warning (device loop4): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.4.986: ea_inode dec ref err=-117 [ 452.257411][ T8471] EXT4-fs (loop4): 1 orphan inode deleted [ 452.263188][ T8471] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 453.053591][ T8479] team0: Port device team_slave_0 removed [ 453.173093][ T8480] device erspan0 entered promiscuous mode [ 453.595007][ T8506] netlink: 12 bytes leftover after parsing attributes in process `syz.5.995'. [ 453.630120][ T6037] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 454.005912][ T6037] usb 5-1: config index 0 descriptor too short (expected 4436, got 84) [ 454.016512][ T6037] usb 5-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 454.031257][ T6037] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 454.041538][ T6037] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 454.125983][ T6037] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 454.155335][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 454.179110][ T6037] usb 5-1: SerialNumber: syz [ 454.192161][ T6037] usb 5-1: config 0 descriptor?? [ 456.519181][ T8552] device syzkaller0 entered promiscuous mode [ 456.606908][ T6037] usb 5-1: USB disconnect, device number 7 [ 457.826670][ T8582] loop2: detected capacity change from 0 to 512 [ 458.619202][ T8582] EXT4-fs (loop2): orphan cleanup on readonly fs [ 458.626392][ T8582] EXT4-fs warning (device loop2): ext4_xattr_inode_get:506: inode #11: comm syz.2.1017: EA inode hash validation failed [ 458.639231][ T8582] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:984: inode #11: comm syz.2.1017: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 458.655711][ T8582] EXT4-fs (loop2): Remounting filesystem read-only [ 458.662265][ T8582] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.2.1017: ea_inode dec ref err=-117 [ 458.675533][ T8582] EXT4-fs (loop2): 1 orphan inode deleted [ 458.681477][ T8582] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 458.723596][ T8586] loop5: detected capacity change from 0 to 512 [ 458.799862][ T8590] device syzkaller0 entered promiscuous mode [ 458.949720][ T8586] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.1018: inode has both inline data and extents flags [ 459.036119][ T8586] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.1018: couldn't read orphan inode 15 (err -117) [ 459.081485][ T8586] EXT4-fs (loop5): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 459.498570][ T21] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 460.506716][ T8605] process 'syz.5.1023' launched './file2' with NULL argv: empty string added [ 460.555969][ T21] usb 3-1: config index 0 descriptor too short (expected 4436, got 84) [ 460.573608][ T21] usb 3-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 460.604175][ T21] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 460.630304][ T21] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 460.735929][ T21] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 460.765359][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 460.774012][ T21] usb 3-1: SerialNumber: syz [ 460.798878][ T21] usb 3-1: config 0 descriptor?? [ 461.098001][ T8616] loop0: detected capacity change from 0 to 256 [ 462.219460][ T8616] FAT-fs (loop0): Directory bread(block 64) failed [ 462.255867][ T8616] FAT-fs (loop0): Directory bread(block 65) failed [ 462.262556][ T8616] FAT-fs (loop0): Directory bread(block 66) failed [ 462.284181][ T8616] FAT-fs (loop0): Directory bread(block 67) failed [ 462.302091][ T8616] FAT-fs (loop0): Directory bread(block 68) failed [ 462.321049][ T8616] FAT-fs (loop0): Directory bread(block 69) failed [ 462.342501][ T8616] FAT-fs (loop0): Directory bread(block 70) failed [ 462.362859][ T8616] FAT-fs (loop0): Directory bread(block 71) failed [ 462.385964][ T8616] FAT-fs (loop0): Directory bread(block 72) failed [ 462.409719][ T8616] FAT-fs (loop0): Directory bread(block 73) failed [ 462.754273][ T8635] loop0: detected capacity change from 0 to 256 [ 462.767827][ T8635] exfat: Unknown parameter 'keep_last_dots' [ 462.887458][ T8638] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 462.959011][ T8641] loop0: detected capacity change from 0 to 512 [ 463.010034][ T8645] loop4: detected capacity change from 0 to 512 [ 463.059936][ T8645] EXT4-fs (loop4): inline encryption not supported [ 463.081885][ T8641] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.1036: inode has both inline data and extents flags [ 463.097160][ T8641] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.1036: couldn't read orphan inode 15 (err -117) [ 463.110799][ T8641] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsdgroups,acl,noload,journal_dev=0x0000000000000003,nodiscard,,errors=continue. Quota mode: none. [ 463.148729][ T8645] EXT4-fs (loop4): 1 orphan inode deleted [ 463.321941][ T21] usb 3-1: USB disconnect, device number 11 [ 463.333552][ T8645] EXT4-fs (loop4): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 463.355928][ T8645] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 464.404805][ T26] audit: type=1800 audit(1770193435.349:162): pid=8645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1037" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 465.075892][ T4721] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 465.245885][ T6037] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 465.335916][ T4721] usb 1-1: Using ep0 maxpacket: 32 [ 465.455930][ T4721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 465.484077][ T4721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.510153][ T4721] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 465.520214][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.535752][ T6037] usb 5-1: Using ep0 maxpacket: 16 [ 465.550030][ T4721] usb 1-1: config 0 descriptor?? [ 465.654819][ T8686] loop5: detected capacity change from 0 to 512 [ 465.695933][ T6037] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 465.736494][ T6037] usb 5-1: config 0 interface 0 has no altsetting 0 [ 465.830365][ T8689] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 465.864081][ T8693] udc-core: couldn't find an available UDC or it's busy [ 465.880836][ T8693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 465.984445][ T6037] usb 5-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20 [ 466.000817][ T6037] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.025503][ T6037] usb 5-1: Product: syz [ 466.065773][ T6037] usb 5-1: Manufacturer: syz [ 466.070447][ T6037] usb 5-1: SerialNumber: syz [ 466.143365][ T6037] usb 5-1: config 0 descriptor?? [ 466.166685][ T8703] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1050'. [ 466.235977][ T4721] usbhid 1-1:0.0: can't add hid device: -71 [ 466.248901][ T4721] usbhid: probe of 1-1:0.0 failed with error -71 [ 466.269865][ T4721] usb 1-1: USB disconnect, device number 10 [ 466.350660][ T8708] netlink: 'syz.2.1052': attribute type 1 has an invalid length. [ 466.360260][ T8708] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1052'. [ 466.414220][ T8710] device syzkaller0 entered promiscuous mode [ 466.466684][ T6037] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 466.479140][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 466.525080][ T6037] imon:send_packet: packet tx failed (-71) [ 466.540820][ T8712] loop2: detected capacity change from 0 to 512 [ 466.558207][ T8712] EXT4-fs (loop2): inline encryption not supported [ 466.568486][ T6037] imon 5-1:0.0: panel buttons/knobs setup failed [ 466.618992][ T8712] EXT4-fs (loop2): 1 orphan inode deleted [ 466.625733][ T8712] EXT4-fs (loop2): mounted filesystem without journal. Opts: inlinecrypt,,errors=continue. Quota mode: writeback. [ 466.645429][ T8712] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.674429][ T26] audit: type=1800 audit(1770193437.619:163): pid=8712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1054" name="bus" dev="loop2" ino=16 res=0 errno=0 [ 466.695916][ T6037] rc_core: IR keymap rc-imon-pad not found [ 466.706831][ T6037] Registered IR keymap rc-empty [ 466.840926][ T6037] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 466.864737][ T6037] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 466.905879][ T6037] imon:send_packet: packet tx failed (-71) [ 466.925962][ T6037] imon 5-1:0.0: remote input dev register failed [ 466.942494][ T6037] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 467.037307][ T6037] imon 5-1:0.0: unable to initialize intf0, err 0 [ 467.053406][ T6037] imon:imon_probe: failed to initialize context! [ 467.063234][ T6037] imon 5-1:0.0: unable to register, err -19 [ 467.094604][ T6037] usb 5-1: USB disconnect, device number 8 [ 467.145650][ T4721] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 467.192526][ T8728] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 467.481638][ T8737] device syzkaller0 entered promiscuous mode [ 467.545877][ T4721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 467.567588][ T4721] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 467.605807][ T4721] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.640082][ T4721] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.659832][ T4721] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.703444][ T4721] usb 1-1: config 0 descriptor?? [ 467.865750][ T21] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 468.115773][ T21] usb 5-1: Using ep0 maxpacket: 8 [ 468.201342][ T4721] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving [ 468.282444][ T4721] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 468.415911][ T21] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 468.450504][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.502425][ T21] usb 5-1: Product: syz [ 468.512014][ T21] usb 5-1: Manufacturer: syz [ 468.525667][ T21] usb 5-1: SerialNumber: syz [ 468.551782][ T21] usb 5-1: config 0 descriptor?? [ 468.593259][ T8751] loop6: detected capacity change from 0 to 512 [ 468.707084][ T8751] EXT4-fs (loop6): orphan cleanup on readonly fs [ 468.731280][ T8751] EXT4-fs warning (device loop6): ext4_xattr_inode_get:506: inode #11: comm syz.6.1067: EA inode hash validation failed [ 468.750398][ T8751] EXT4-fs error (device loop6): ext4_xattr_inode_update_ref:984: inode #11: comm syz.6.1067: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 468.825973][ T21] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 468.879390][ T8751] EXT4-fs (loop6): Remounting filesystem read-only [ 468.911973][ T8751] EXT4-fs warning (device loop6): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.6.1067: ea_inode dec ref err=-117 [ 468.976686][ C1] plantronics 0003:047F:FFFF.0001: hid_field_extract() called with n (132) > 32! (swapper/1) [ 469.011938][ T8751] EXT4-fs (loop6): 1 orphan inode deleted [ 469.050947][ T8751] EXT4-fs (loop6): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 469.179575][ T4721] usb 1-1: USB disconnect, device number 11 [ 469.446275][ T8762] loop2: detected capacity change from 0 to 256 [ 469.508960][ T8762] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 469.805070][ T8767] device syzkaller0 entered promiscuous mode [ 470.005862][ T21] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 470.043960][ T21] usb 5-1: USB disconnect, device number 9 [ 470.193953][ T8780] device syzkaller0 entered promiscuous mode [ 470.719004][ T8795] overlayfs: upper fs does not support file handles, falling back to index=off. [ 470.824399][ T8797] device syzkaller0 entered promiscuous mode [ 471.871389][ T8804] loop4: detected capacity change from 0 to 164 [ 471.964659][ T8807] device syzkaller0 entered promiscuous mode [ 472.071699][ T8804] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 472.438253][ T8816] loop5: detected capacity change from 0 to 256 [ 472.565298][ T8816] FAT-fs (loop5): Directory bread(block 64) failed [ 472.594732][ T8816] FAT-fs (loop5): Directory bread(block 65) failed [ 472.647048][ T8816] FAT-fs (loop5): Directory bread(block 66) failed [ 472.669707][ T8816] FAT-fs (loop5): Directory bread(block 67) failed [ 472.697111][ T8816] FAT-fs (loop5): Directory bread(block 68) failed [ 472.714598][ T8816] FAT-fs (loop5): Directory bread(block 69) failed [ 472.755953][ T8816] FAT-fs (loop5): Directory bread(block 70) failed [ 472.783131][ T8816] FAT-fs (loop5): Directory bread(block 71) failed [ 472.820844][ T8816] FAT-fs (loop5): Directory bread(block 72) failed [ 472.850224][ T8816] FAT-fs (loop5): Directory bread(block 73) failed [ 473.389218][ T8829] loop5: detected capacity change from 0 to 128 [ 473.531480][ T8828] loop2: detected capacity change from 0 to 8192 [ 473.758339][ T8828] FAT-fs (loop2): bogus logical sector size 0 [ 473.952804][ T8828] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 474.149927][ T8828] FAT-fs (loop2): Can't find a valid FAT filesystem [ 474.534529][ T8835] device syzkaller0 entered promiscuous mode [ 474.829177][ T8837] device syzkaller0 entered promiscuous mode [ 475.180286][ T6037] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 475.314191][ T8864] loop6: detected capacity change from 0 to 1024 [ 475.426325][ T6037] usb 5-1: Using ep0 maxpacket: 32 [ 475.522025][ T8868] input: syz0 as /devices/virtual/input/input12 [ 475.545831][ T6037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 475.575719][ T6037] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 475.588582][ T8870] loop5: detected capacity change from 0 to 512 [ 475.609945][ T6037] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 475.623945][ T6037] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.636753][ T6037] usb 5-1: config 0 descriptor?? [ 475.737509][ T8870] EXT4-fs (loop5): orphan cleanup on readonly fs [ 475.765145][ T8870] EXT4-fs warning (device loop5): ext4_xattr_inode_get:506: inode #11: comm syz.5.1105: EA inode hash validation failed [ 475.807835][ T8870] EXT4-fs error (device loop5): ext4_xattr_inode_update_ref:984: inode #11: comm syz.5.1105: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 475.954437][ T8870] EXT4-fs (loop5): Remounting filesystem read-only [ 475.970683][ T8878] loop0: detected capacity change from 0 to 8192 [ 476.011149][ T8870] EXT4-fs warning (device loop5): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.5.1105: ea_inode dec ref err=-117 [ 476.013512][ T8884] udc-core: couldn't find an available UDC or it's busy [ 476.028868][ T8870] EXT4-fs (loop5): 1 orphan inode deleted [ 476.037206][ T8870] EXT4-fs (loop5): mounted filesystem without journal. Opts: i_version,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,errors=remount-ro,acl,init_itable=0x0000000000008d55,. Quota mode: none. [ 476.229685][ T8884] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 476.439632][ T4313] hfsplus: b-tree write err: -5, ino 3 [ 476.785895][ T8878] FAT-fs (loop0): bogus logical sector size 0 [ 476.792041][ T8878] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 476.804082][ T8878] FAT-fs (loop0): Can't find a valid FAT filesystem [ 476.850075][ T8887] device syzkaller0 entered promiscuous mode [ 476.878204][ T6037] usbhid 5-1:0.0: can't add hid device: -71 [ 476.894502][ T6037] usbhid: probe of 5-1:0.0 failed with error -71 [ 476.939610][ T6037] usb 5-1: USB disconnect, device number 10 [ 477.263131][ T8896] device syzkaller0 entered promiscuous mode [ 478.042724][ T8911] kvm: vcpu 0: requested 242 ns lapic timer period limited to 200000 ns [ 478.052268][ T8911] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 478.196775][ T8914] input: syz0 as /devices/virtual/input/input13 [ 478.409043][ T8919] loop5: detected capacity change from 0 to 1024 [ 478.422934][ T8917] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 478.814478][ T5452] hfsplus: b-tree write err: -5, ino 3 [ 478.886132][ T8925] device syzkaller0 entered promiscuous mode [ 479.005451][ T8927] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1126'. [ 479.757131][ T8949] loop2: detected capacity change from 0 to 1024 [ 479.945681][ T21] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 480.081784][ T4382] hfsplus: b-tree write err: -5, ino 3 [ 480.278398][ T8959] device syzkaller0 entered promiscuous mode [ 480.355870][ T21] usb 6-1: config index 0 descriptor too short (expected 4436, got 84) [ 480.372377][ T21] usb 6-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 480.405620][ T21] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 480.425674][ T21] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 480.449980][ T8962] overlayfs: failed to clone upperpath [ 480.501787][ T8963] overlayfs: failed to clone upperpath [ 480.536383][ T21] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 480.545730][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 480.554128][ T21] usb 6-1: SerialNumber: syz [ 480.561817][ T21] usb 6-1: config 0 descriptor?? [ 480.936097][ T8966] loop2: detected capacity change from 0 to 40427 [ 482.205286][ T8990] loop0: detected capacity change from 0 to 128 [ 482.290108][ T8990] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.325128][ T8990] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 93: 0xba != 0xd7 [ 482.384701][ T8990] UDF-fs: error (device loop0): udf_read_inode: (ino 93) failed !bh [ 482.414151][ T8990] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.432751][ T8990] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 482.471873][ T8990] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.538842][ T8990] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 482.580040][ T8990] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 482.618684][ T8990] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 482.661523][ T8990] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 482.805723][ T4721] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 483.205881][ T4721] usb 5-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 483.225375][ T4721] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 483.268158][ T4721] usb 5-1: config 0 descriptor?? [ 483.300385][ T9001] usb usb9: usbfs: process 9001 (syz.6.1154) did not claim interface 0 before use [ 483.328333][ T4721] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 483.335132][ T4235] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 483.356948][ T21] usb 6-1: USB disconnect, device number 7 [ 483.605885][ T4235] usb 1-1: Using ep0 maxpacket: 8 [ 483.762968][ T9014] loop5: detected capacity change from 0 to 1024 [ 483.948447][ T4405] hfsplus: b-tree write err: -5, ino 3 [ 483.968487][ T4235] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 483.985861][ T4235] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.995810][ T4235] usb 1-1: Product: syz [ 484.000023][ T4235] usb 1-1: Manufacturer: syz [ 484.014982][ T4235] usb 1-1: SerialNumber: syz [ 484.024562][ T9001] loop6: detected capacity change from 0 to 40427 [ 484.051400][ T4235] usb 1-1: config 0 descriptor?? [ 484.345806][ T4235] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 484.541340][ T4721] usb 5-1: USB disconnect, device number 11 [ 485.087299][ T9031] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 485.566227][ T4235] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 485.681698][ T4235] usb 1-1: USB disconnect, device number 12 [ 486.032011][ T5300] udevd[5300]: setting owner of /dev/bus/usb/001/012 to uid=0, gid=0 failed: No such file or directory [ 486.255019][ T9047] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1169'. [ 486.645805][ T4235] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 487.025900][ T4235] usb 7-1: config index 0 descriptor too short (expected 4436, got 84) [ 487.063287][ T4235] usb 7-1: config 0 has too many interfaces: 144, using maximum allowed: 32 [ 487.199299][ T4235] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 487.278368][ T4235] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 144 [ 487.415920][ T4235] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.439904][ T4235] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 487.468616][ T4235] usb 7-1: SerialNumber: syz [ 487.521334][ T4235] usb 7-1: config 0 descriptor?? [ 488.252688][ T26] audit: type=1326 audit(1770193459.199:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865c2f4eb9 code=0x7ffc0000 [ 488.325722][ T26] audit: type=1326 audit(1770193459.229:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865c2f4eb9 code=0x7ffc0000 [ 488.411706][ T26] audit: type=1326 audit(1770193459.229:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f865c2f4eb9 code=0x7ffc0000 [ 488.471452][ T26] audit: type=1326 audit(1770193459.229:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865c2f4eb9 code=0x7ffc0000 [ 488.555804][ T26] audit: type=1326 audit(1770193459.229:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865c2f4eb9 code=0x7ffc0000 [ 488.622745][ T26] audit: type=1326 audit(1770193459.229:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=31 compat=0 ip=0x7f865c2f4eb9 code=0x7ffc0000 [ 488.709683][ T26] audit: type=1326 audit(1770193459.229:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865c2f4eb9 code=0x7ffc0000 [ 488.738945][ T26] audit: type=1326 audit(1770193459.229:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9069 comm="syz.4.1176" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865c2f4eb9 code=0x7ffc0000 [ 490.965780][ T4235] usb 7-1: USB disconnect, device number 5 [ 491.079278][ T9093] loop0: detected capacity change from 0 to 32768 [ 491.086166][ T6038] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 491.204909][ T9093] (syz.0.1184,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 491.232581][ T9093] (syz.0.1184,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 491.300446][ T9093] (syz.0.1184,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 491.350701][ T9093] (syz.0.1184,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 491.397483][ T9093] JBD2: Ignoring recovery information on journal [ 491.517504][ T6038] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 491.655250][ T6038] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 491.845386][ T6038] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 491.925681][ T6038] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.016990][ T6038] usb 5-1: config 0 descriptor?? [ 492.066379][ T9093] (syz.0.1184,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xbec99099, computed 0x3881d996. Applying ECC. [ 492.080955][ T9093] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 492.092643][ T9093] (syz.0.1184,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x93f628a2, computed 0x2aee8be5. Applying ECC. [ 492.109589][ T9093] (syz.0.1184,9093,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC. [ 492.127501][ T6038] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 492.244142][ T9093] [ 492.246543][ T9093] ====================================================== [ 492.253628][ T9093] WARNING: possible circular locking dependency detected [ 492.260708][ T9093] syzkaller #0 Not tainted [ 492.265148][ T9093] ------------------------------------------------------ [ 492.272197][ T9093] syz.0.1184/9093 is trying to acquire lock: [ 492.278211][ T9093] ffff888063625f48 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 492.291592][ T9093] [ 492.291592][ T9093] but task is already holding lock: [ 492.299005][ T9093] ffff88805ff531b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 492.308545][ T9093] [ 492.308545][ T9093] which lock already depends on the new lock. [ 492.308545][ T9093] [ 492.319446][ T9093] [ 492.319446][ T9093] the existing dependency chain (in reverse order) is: [ 492.328619][ T9093] [ 492.328619][ T9093] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 492.336493][ T9093] down_read+0x44/0x2e0 [ 492.341219][ T9093] ocfs2_init_acl+0x307/0x770 [ 492.346465][ T9093] ocfs2_mknod+0x15cb/0x2510 [ 492.351612][ T9093] ocfs2_create+0x192/0x420 [ 492.357150][ T9093] path_openat+0x11db/0x2fa0 [ 492.362309][ T9093] do_filp_open+0x1e2/0x410 [ 492.367377][ T9093] do_sys_openat2+0x150/0x4b0 [ 492.372706][ T9093] __x64_sys_openat+0x135/0x160 [ 492.378107][ T9093] do_syscall_64+0x4c/0xa0 [ 492.383182][ T9093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 492.390014][ T9093] [ 492.390014][ T9093] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 492.398675][ T9093] down_read+0x44/0x2e0 [ 492.403759][ T9093] ocfs2_start_trans+0x3a6/0x6f0 [ 492.409252][ T9093] ocfs2_modify_bh+0xe0/0x4c0 [ 492.414454][ T9093] ocfs2_local_read_info+0x13c8/0x1750 [ 492.420634][ T9093] dquot_load_quota_sb+0x756/0xac0 [ 492.426277][ T9093] dquot_load_quota_inode+0x2d8/0x5d0 [ 492.432263][ T9093] ocfs2_enable_quotas+0x1c5/0x490 [ 492.437905][ T9093] ocfs2_fill_super+0x3cd2/0x50f0 [ 492.443462][ T9093] mount_bdev+0x287/0x3c0 [ 492.448322][ T9093] legacy_get_tree+0xe6/0x180 [ 492.453552][ T9093] vfs_get_tree+0x88/0x270 [ 492.458696][ T9093] do_new_mount+0x24a/0xa40 [ 492.463751][ T9093] __se_sys_mount+0x2e3/0x3d0 [ 492.469020][ T9093] do_syscall_64+0x4c/0xa0 [ 492.474025][ T9093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 492.480472][ T9093] [ 492.480472][ T9093] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 492.488038][ T9093] ocfs2_start_trans+0x2a7/0x6f0 [ 492.493536][ T9093] ocfs2_mknod+0xf5a/0x2510 [ 492.498624][ T9093] ocfs2_create+0x192/0x420 [ 492.503677][ T9093] path_openat+0x11db/0x2fa0 [ 492.508815][ T9093] do_filp_open+0x1e2/0x410 [ 492.513879][ T9093] do_sys_openat2+0x150/0x4b0 [ 492.519118][ T9093] __x64_sys_openat+0x135/0x160 [ 492.524524][ T9093] do_syscall_64+0x4c/0xa0 [ 492.529493][ T9093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 492.536034][ T9093] [ 492.536034][ T9093] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 492.546772][ T9093] down_write+0x38/0x60 [ 492.551489][ T9093] ocfs2_reserve_local_alloc_bits+0x11c/0x25f0 [ 492.558194][ T9093] ocfs2_reserve_clusters_with_limit+0x1b6/0xc10 [ 492.565091][ T9093] ocfs2_mknod+0xef8/0x2510 [ 492.570349][ T9093] ocfs2_create+0x192/0x420 [ 492.575544][ T9093] path_openat+0x11db/0x2fa0 [ 492.580704][ T9093] do_filp_open+0x1e2/0x410 [ 492.586292][ T9093] do_sys_openat2+0x150/0x4b0 [ 492.591533][ T9093] __x64_sys_openat+0x135/0x160 [ 492.596938][ T9093] do_syscall_64+0x4c/0xa0 [ 492.601911][ T9093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 492.608380][ T9093] [ 492.608380][ T9093] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 492.618940][ T9093] __lock_acquire+0x2c42/0x7d10 [ 492.624459][ T9093] lock_acquire+0x19e/0x400 [ 492.629533][ T9093] down_write+0x38/0x60 [ 492.634249][ T9093] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 492.640706][ T9093] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 492.647599][ T9093] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 492.653786][ T9093] ocfs2_xattr_set+0xc38/0x13e0 [ 492.659199][ T9093] ocfs2_set_acl+0x4e1/0x590 [ 492.664348][ T9093] ocfs2_iop_set_acl+0x190/0x2b0 [ 492.669840][ T9093] posix_acl_xattr_set+0x36f/0x3e0 [ 492.675506][ T9093] __vfs_setxattr+0x3e0/0x420 [ 492.680735][ T9093] __vfs_setxattr_noperm+0x129/0x5e0 [ 492.686578][ T9093] vfs_setxattr+0x167/0x2e0 [ 492.691632][ T9093] setxattr+0x36c/0x390 [ 492.696585][ T9093] __se_sys_fsetxattr+0x15e/0x1d0 [ 492.702622][ T9093] do_syscall_64+0x4c/0xa0 [ 492.707595][ T9093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 492.714041][ T9093] [ 492.714041][ T9093] other info that might help us debug this: [ 492.714041][ T9093] [ 492.724730][ T9093] Chain exists of: [ 492.724730][ T9093] &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem [ 492.724730][ T9093] [ 492.742289][ T9093] Possible unsafe locking scenario: [ 492.742289][ T9093] [ 492.749775][ T9093] CPU0 CPU1 [ 492.755173][ T9093] ---- ---- [ 492.760566][ T9093] lock(&oi->ip_xattr_sem); [ 492.765191][ T9093] lock(&journal->j_trans_barrier); [ 492.773296][ T9093] lock(&oi->ip_xattr_sem); [ 492.780434][ T9093] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 492.787753][ T9093] [ 492.787753][ T9093] *** DEADLOCK *** [ 492.787753][ T9093] [ 492.795914][ T9093] 3 locks held by syz.0.1184/9093: [ 492.801046][ T9093] #0: ffff888051160460 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write_file+0x5c/0x200 [ 492.810853][ T9093] #1: ffff88805ff53488 (&type->i_mutex_dir_key#9){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0 [ 492.821107][ T9093] #2: ffff88805ff531b8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x464/0x13e0 [ 492.831075][ T9093] [ 492.831075][ T9093] stack backtrace: [ 492.837009][ T9093] CPU: 0 PID: 9093 Comm: syz.0.1184 Not tainted syzkaller #0 [ 492.844491][ T9093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 492.854591][ T9093] Call Trace: [ 492.857899][ T9093] [ 492.860851][ T9093] dump_stack_lvl+0x188/0x250 [ 492.865559][ T9093] ? load_image+0x400/0x400 [ 492.870094][ T9093] ? show_regs_print_info+0x20/0x20 [ 492.875424][ T9093] ? print_circular_bug+0x12b/0x1a0 [ 492.880684][ T9093] check_noncircular+0x296/0x330 [ 492.885655][ T9093] ? look_up_lock_class+0x71/0x110 [ 492.890797][ T9093] ? add_chain_block+0x940/0x940 [ 492.895766][ T9093] ? lockdep_lock+0xf1/0x1f0 [ 492.900386][ T9093] ? mark_lock+0x94/0x320 [ 492.904746][ T9093] __lock_acquire+0x2c42/0x7d10 [ 492.909650][ T9093] ? verify_lock_unused+0x140/0x140 [ 492.914879][ T9093] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 492.920543][ T9093] ? do_raw_spin_lock+0x128/0x2f0 [ 492.925598][ T9093] ? mutex_unlock+0x10/0x10 [ 492.930195][ T9093] ? __rwlock_init+0x140/0x140 [ 492.935001][ T9093] ? do_raw_spin_unlock+0x11d/0x230 [ 492.940232][ T9093] lock_acquire+0x19e/0x400 [ 492.944760][ T9093] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 492.950861][ T9093] ? __bfs+0x2a3/0x5c0 [ 492.955043][ T9093] ? __might_sleep+0xf0/0xf0 [ 492.959699][ T9093] ? read_lock_is_recursive+0x10/0x10 [ 492.965116][ T9093] ? verify_lock_unused+0x140/0x140 [ 492.970350][ T9093] down_write+0x38/0x60 [ 492.974534][ T9093] ? ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 492.980636][ T9093] ocfs2_reserve_suballoc_bits+0x16a/0x44d0 [ 492.986574][ T9093] ? mark_lock+0x94/0x320 [ 492.990931][ T9093] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 492.996946][ T9093] ? lock_chain_count+0x20/0x20 [ 493.001824][ T9093] ? __rwlock_init+0x140/0x140 [ 493.006634][ T9093] ? ocfs2_block_group_search+0x470/0x470 [ 493.012382][ T9093] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 493.018305][ T9093] ? lockdep_hardirqs_on+0x94/0x140 [ 493.023533][ T9093] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 493.029485][ T9093] ? _raw_spin_unlock+0x40/0x40 [ 493.034362][ T9093] ? stack_trace_save+0xa6/0xf0 [ 493.039236][ T9093] ? stack_trace_snprint+0xf0/0xf0 [ 493.044375][ T9093] ? stack_depot_save+0x404/0x440 [ 493.049518][ T9093] ? __kasan_kmalloc+0xcc/0xf0 [ 493.054317][ T9093] ? __kasan_kmalloc+0xb5/0xf0 [ 493.059112][ T9093] ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0 [ 493.065656][ T9093] ? ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 493.071493][ T9093] ? ocfs2_xattr_set+0xc38/0x13e0 [ 493.076549][ T9093] ? ocfs2_set_acl+0x4e1/0x590 [ 493.081342][ T9093] ? ocfs2_iop_set_acl+0x190/0x2b0 [ 493.086476][ T9093] ? posix_acl_xattr_set+0x36f/0x3e0 [ 493.091787][ T9093] ? __vfs_setxattr+0x3e0/0x420 [ 493.096671][ T9093] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 493.102270][ T9093] ? vfs_setxattr+0x167/0x2e0 [ 493.106974][ T9093] ? setxattr+0x36c/0x390 [ 493.111325][ T9093] ? __se_sys_fsetxattr+0x15e/0x1d0 [ 493.116550][ T9093] ? do_syscall_64+0x4c/0xa0 [ 493.121166][ T9093] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 493.127457][ T9093] ocfs2_reserve_new_metadata_blocks+0x412/0x9a0 [ 493.133907][ T9093] ? ocfs2_init_steal_slots+0x150/0x150 [ 493.139481][ T9093] ? ocfs2_xattr_block_set+0x2e10/0x2e10 [ 493.145146][ T9093] ? do_raw_spin_lock+0x128/0x2f0 [ 493.150207][ T9093] ocfs2_init_xattr_set_ctxt+0x2f4/0x6f0 [ 493.155873][ T9093] ? ocfs2_prepare_refcount_xattr+0xff0/0xff0 [ 493.162007][ T9093] ? ocfs2_truncate_log_needs_flush+0x12c/0x300 [ 493.168293][ T9093] ? ocfs2_remove_btree_range+0x15e0/0x15e0 [ 493.174239][ T9093] ? up_write+0x1bb/0x420 [ 493.178607][ T9093] ocfs2_xattr_set+0xc38/0x13e0 [ 493.183500][ T9093] ? __ocfs2_xattr_set_handle+0xf30/0xf30 [ 493.189244][ T9093] ? stack_depot_save+0x404/0x440 [ 493.194298][ T9093] ? ocfs2_iop_set_acl+0x190/0x2b0 [ 493.199446][ T9093] ? posix_acl_xattr_set+0x36f/0x3e0 [ 493.204856][ T9093] ? __vfs_setxattr+0x3e0/0x420 [ 493.209772][ T9093] ? __vfs_setxattr_noperm+0x129/0x5e0 [ 493.215277][ T9093] ? setxattr+0x36c/0x390 [ 493.219638][ T9093] ? __se_sys_fsetxattr+0x15e/0x1d0 [ 493.224866][ T9093] ? do_syscall_64+0x4c/0xa0 [ 493.229594][ T9093] ? from_kgid+0x169/0x690 [ 493.234044][ T9093] ? make_kgid+0x660/0x660 [ 493.238516][ T9093] ocfs2_set_acl+0x4e1/0x590 [ 493.243271][ T9093] ocfs2_iop_set_acl+0x190/0x2b0 [ 493.248579][ T9093] ? ocfs2_xattr_get+0x260/0x260 [ 493.253550][ T9093] ? from_kgid+0x169/0x690 [ 493.258107][ T9093] ? from_kuid_munged+0x6b0/0x6b0 [ 493.263336][ T9093] ? make_kgid+0x660/0x660 [ 493.269554][ T9093] ? posix_acl_valid+0x320/0x3a0 [ 493.276644][ T9093] posix_acl_xattr_set+0x36f/0x3e0 [ 493.281797][ T9093] ? posix_acl_xattr_get+0x550/0x550 [ 493.287141][ T9093] __vfs_setxattr+0x3e0/0x420 [ 493.291864][ T9093] __vfs_setxattr_noperm+0x129/0x5e0 [ 493.297189][ T9093] vfs_setxattr+0x167/0x2e0 [ 493.301728][ T9093] ? xattr_permission+0x500/0x500 [ 493.306912][ T9093] ? _copy_from_user+0x111/0x170 [ 493.311967][ T9093] ? posix_acl_fix_xattr_from_user+0xcf/0x110 [ 493.318207][ T9093] setxattr+0x36c/0x390 [ 493.322407][ T9093] ? path_setxattr+0x290/0x290 [ 493.327216][ T9093] ? __mnt_want_write+0x1e2/0x260 [ 493.332281][ T9093] ? mnt_want_write_file+0x174/0x200 [ 493.337918][ T9093] __se_sys_fsetxattr+0x15e/0x1d0 [ 493.342993][ T9093] do_syscall_64+0x4c/0xa0 [ 493.347446][ T9093] ? clear_bhb_loop+0x30/0x80 [ 493.352159][ T9093] ? clear_bhb_loop+0x30/0x80 [ 493.356971][ T9093] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 493.363368][ T9093] RIP: 0033:0x7fc350b9deb9 [ 493.367824][ T9093] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 493.387838][ T9093] RSP: 002b:00007fc34edf9028 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 493.396300][ T9093] RAX: ffffffffffffffda RBX: 00007fc350e18fa0 RCX: 00007fc350b9deb9 [ 493.404309][ T9093] RDX: 0000200000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 493.412383][ T9093] RBP: 00007fc350c0bc1f R08: 0000000000000003 R09: 0000000000000000 [ 493.421001][ T9093] R10: 000000000000002c R11: 0000000000000246 R12: 0000000000000000 [ 493.429017][ T9093] R13: 00007fc350e19038 R14: 00007fc350e18fa0 R15: 00007ffc37b70e78 [ 493.437043][ T9093] [ 493.477115][ T4184] ocfs2: Unmounting device (7,0) on (node local) [ 495.167189][ T21] usb 5-1: USB disconnect, device number 12