last executing test programs: 11m36.364765374s ago: executing program 2 (id=25): syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0), 0x1, 0xa10, &(0x7f0000001540)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000080)={{0x4, 0x6, 0x8, 0xa, 'syz0\x00', 0x75f}, 0x1, [0x0, 0x5, 0x7, 0x8000, 0x9, 0x8, 0x7fb, 0xfe, 0x5, 0x47f1, 0x2, 0x8, 0x5, 0x7, 0x1, 0x8, 0x0, 0x8000000000000001, 0x81, 0x1, 0x8000000000000000, 0xfff, 0x8, 0x1, 0xbddb, 0xb74, 0xe, 0x14, 0x567, 0x9, 0x0, 0x5, 0xcc, 0x81, 0xea, 0x80000000, 0x8687, 0x0, 0x3, 0x2e, 0x1, 0xab91, 0x2d5, 0xacc5f34, 0x8e, 0x6, 0x800, 0x0, 0x5, 0x2, 0x5, 0x3, 0x3, 0x100000000, 0x9a, 0x9, 0x0, 0x8, 0x2, 0x7, 0x1, 0x8, 0xfffffffffffffff2, 0x5, 0x1, 0x0, 0x7fffffff, 0xc, 0x7, 0xb, 0xfffffffffffffffd, 0x2, 0xcb5c, 0x2, 0x2, 0x8, 0x1, 0x80, 0xb1, 0x5, 0x26, 0x3, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x8, 0xffffffff, 0x9, 0x1, 0x2, 0xa9, 0x1, 0xffffffffffffffff, 0x9, 0x5, 0x4, 0x0, 0x8, 0x12b, 0x10001, 0x1, 0x6, 0x9, 0x9, 0x9, 0x80000000, 0x2, 0x3, 0xfffffffffffffffb, 0x271a, 0x0, 0x5, 0xff, 0x7, 0x4000000000000008, 0xa, 0x33, 0x2, 0x1bde, 0xfff, 0x3, 0x38000000000, 0xfffffffffffffe2d, 0x1, 0x5, 0x66fd]}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)={[], [], 0x2c}) 11m34.491426374s ago: executing program 2 (id=30): r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x121003, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x8, 0xfffffffd}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)) ioctl$SIOCSIFHWADDR(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @link_local}) ioctl$SIOCSIFHWADDR(r4, 0x8b19, &(0x7f0000000080)={'wlan1\x00', @random="02000000000a"}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000008c0), &(0x7f0000000b80), 0x2000005, r5}, 0x38) futex(&(0x7f0000000140)=0x1, 0xb, 0x1, &(0x7f0000000240), &(0x7f00000002c0), 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, 0x0) 11m24.076638178s ago: executing program 2 (id=48): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) getdents64(r2, 0x0, 0x0) 11m23.038230712s ago: executing program 2 (id=51): socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xf, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_clone(0x30288000, 0x0, 0x0, 0x0, 0x0, 0x0) 11m16.890270464s ago: executing program 2 (id=57): openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f0000000540)={'mpc624\x00', [0x6, 0x8000000, 0x3, 0x5, 0x2f, 0x4, 0x7, 0x5, 0x1000, 0x1, 0x3, 0x9, 0x200009, 0x4, 0x79, 0x8001, 0xffffffa8, 0x7ffffffa, 0x2e67, 0x3, 0xa2e, 0x0, 0xa, 0xe2df, 0x746f, 0x3, 0x1, 0x3, 0x0, 0xffff, 0x200]}) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x61709000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x0) prctl$PR_MCE_KILL(0x23, 0x1, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) shmget$private(0x0, 0x1000, 0x10, &(0x7f0000a2a000/0x1000)=nil) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x1, 0xfffffffc, @remote, 0xe79}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 11m15.951701604s ago: executing program 2 (id=61): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) getdents64(r3, 0x0, 0x0) 11m14.443353518s ago: executing program 32 (id=61): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x41) getdents64(r3, 0x0, 0x0) 9m18.784867979s ago: executing program 4 (id=234): socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4) ioprio_set$uid(0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioprio_get$pid(0x2, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r3, 0x0, 0xb) splice(r4, 0x0, r6, 0x0, 0xf3a, 0x0) splice(r2, 0x0, r6, 0x0, 0x80, 0x4) timer_settime(r1, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) read$FUSE(r5, &(0x7f0000001e80)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000140)={0x50, 0x0, r7, {0x7, 0x2b, 0x7d4, 0x48000, 0x6, 0xf, 0x1, 0x16d1, 0x0, 0x0, 0x2a, 0x3}}, 0x50) 9m16.440351719s ago: executing program 4 (id=239): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x1, 0x0, 0x3}, 0xe) shutdown(r1, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x41dc, 0x4) recvmmsg(r1, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) syz_io_uring_setup(0xc97, &(0x7f0000000700)={0x0, 0x6015, 0x800, 0xff7fffff, 0x11c}, &(0x7f00000003c0), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/585], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xc92) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x4dd11876d04ce31a}, 0x20040800) socket$nl_rdma(0x10, 0x3, 0x14) openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) 9m15.131249924s ago: executing program 4 (id=242): r0 = syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x4446, &(0x7f00000088c0)="$eJzs3b9vHFkdAPDvjH3ENslhH1ccEhIrcRIIkGVfBfgkHMeJz76YoMCdEM1mbW8Sw9ob2WtEkcJ0kaiQKBBFBBKdq8gFbfgTaChDHQkKGiSkCKPdnXV2xrt4E3kdkvt8Co/n/ba/M2/fFLMvzTTubu6WNndLle1Sff327geln9dre1vVSM9Jz/7fOr/+GcwwrpNXfe19lt24cu2Hn34Q8eeNvz49Ojo6iqbR6Gm26/d//fP+evexIy3Uabbbu7Wz8pOIePfEuJpGIuLHf4pIIuJylraQHccj4lK08z69/6tbpTMazaMn1Q/Lz1YfHM69v3Lw8LD/355E/K72pW/d2fr7V0fm/vaNM+oeAAAAAAAAAAAAAAAAAIDX3NLNG5/8YGY2HicxepCcfF93KTv2fT/26Kx8JWJy6H8uAAAAAAAAAAAAAAAAAAAA/F96/v5/KXmnx/v/i9lxvk/9o+8Nf4wMz/L3byxenZnN9n9PTuR/O0v6x+WRmOqx73tx//fLhfq9938/2c/L6oyv0+9kJOl07jxNp6cj/pBt/P5eMpHW6ruNb96u721vnNkwXlv5+Ld3789FJ9vQf9D4LxTaH/7+/188cTU1z2+d3SX2RsvHf6RvuT/+Mhko/lcK9c4j/ry8fPxHW2nj3QXm2xNAM/6/Hj09/ouF9ocV/7cjopQ0x1rKzQDNNUwzvd96hbx8/N9qpeWmzuwf2e/+/3ch/lcL7b+q+X+/+EFET/n4f66VNpYr8fz+n0pPv/+vFdp/FfFvjn/f5/9A8vG/0E4czRVp/ScHnf+XCu0PK/6fpNk4305yV8BB0k7v+3115OTjP3Yi//nzXzrQ+u+jQv3zev7r9Nt5/utM/19P2s9/9JaP/3jfcoPe/8uFesOe/+ejFElc7Jya9V9QPv4TrbT82rn9pZzd8b/wP+K/Umh/WPFvrUrG2vHvnv//c6Gd/nvrv4Hk4//5dmLaXWK/9bO1/ktOX/9/XGi/Hf9h3pYn13/N8e+nQ+zyDZKP/8W+5Zrx/8sAn//XC/WGv/6PmDHrv7R8/C/1Lde6/8dOj/9qod6w4/+1YTYOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8BpYyI6TkaTTufM0nZ6OuJKdvxcTyVplo7xWq6//bDdiMUsvxTvJnVp9rVIrb27XN6rlSq1WX4+4muW/G2PJbq3eKG9V7l07bms8uVut7DTWqpVGRCxl6V+OS5221jYbW5V7EfHRcd4X0vrOvbuV7fLG5s53Z2ZmZmL5eAxTSfUXjep2o917Ozdi5bjuZNI1uFb2x8djuZj8tL63s12ptdKvd9Wp1dcrta46q1neb2Iqaezsba9XGtVyrX6n099pkv0XDM4LmG/+SCMWl2/+6Ob12Yli/q2kfVwY3hAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAOP577z24gYbZ+lETHf+SXpVf7Rk+qH5WerDw7n3l85eHj4tF85AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sgMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYVdOkZpIIjCAPxmLNTOY1gtu53tiiJauCJ4Aj2Gh9GjeAnvkCJF2hQhkMxC2OzCNkn1fc2D+Zl5D+YBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADDP03v38VY3ESmuNpcRf1//i8P8pdSf+/H7F2eYkdN5fu0eHuum/Hs6yu/K0bLNu3S9+v6Mkdr7HezJcJ/2+j7Xk3NN7dvUfH3fm0i5ioi25Lcp56qa9xYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzZgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCwAAAAAI87eOom8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+BQAA///8NR6x") openat(r0, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[], 0x2, 0x1509, &(0x7f0000001c40)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x40000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r2, 0x1) shutdown(r2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x200}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$setstatus(r5, 0x4, 0x52000) personality(0xfe47fef9f5ff7379) syz_open_dev$vim2m(&(0x7f0000000080), 0x1, 0x2) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) pwritev2(r5, &(0x7f0000000500)=[{0x0}], 0x1, 0x3000, 0x0, 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28012, r6, 0x0) 9m10.750919061s ago: executing program 4 (id=251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r0 = syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f0000000340)={[{@prjquota}]}, 0x0, 0x241, &(0x7f0000000540)="$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") unlinkat(r0, &(0x7f0000000480)='./file1\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0xc000, 0x0) 9m7.531039929s ago: executing program 4 (id=259): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000b28000)=0x3) fcntl$setsig(r4, 0xa, 0x12) poll(&(0x7f0000b2c000)=[{r5}], 0x2c, 0xffffffffffbffff8) dup2(r4, r5) fcntl$setown(r4, 0x8, r3) tkill(r3, 0x13) 9m4.501443328s ago: executing program 4 (id=263): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) read(r0, &(0x7f0000000300)=""/250, 0xfa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc000000000000800100000020000000040000000000000078581acb6cc5dcfa094eb3a410545b99935500ffffffff00000053", 0x48}], 0x1) socket(0x2a, 0x2, 0x0) socket(0x848000000015, 0x805, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) 8m48.617489485s ago: executing program 33 (id=263): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x400000000000004) read(r0, &(0x7f0000000300)=""/250, 0xfa) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000c40)=ANY=[], 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc000000000000800100000020000000040000000000000078581acb6cc5dcfa094eb3a410545b99935500ffffffff00000053", 0x48}], 0x1) socket(0x2a, 0x2, 0x0) socket(0x848000000015, 0x805, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000100)) 10.77084446s ago: executing program 1 (id=1844): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x2, 0x336, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r0, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) listen(0xffffffffffffffff, 0x7) tee(r5, r6, 0x8f5, 0x0) 10.364871838s ago: executing program 5 (id=1847): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000220a0500"], 0xd4}, 0x1, 0x0, 0x0, 0x8800}, 0x0) 9.866246379s ago: executing program 5 (id=1852): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x38, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='n'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_KEYS={0x8, 0x51, 0x0, 0x1, [{0x4}]}]}, 0x38}}, 0x4800) 9.758872634s ago: executing program 1 (id=1854): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) preadv(r0, &(0x7f00000004c0)=[{0x0}, {0x0, 0x3b}], 0x1000000000000077, 0x12, 0xd) 9.589060271s ago: executing program 1 (id=1855): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) preadv(r0, &(0x7f00000010c0)=[{&(0x7f0000000480)=""/242, 0xf2}], 0x1, 0x40000004, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[], 0x118) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x12, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x4, 0x0, 0x2, 0x0, 0x7fffffff], 0x80a0000}) ioctl$KVM_RUN(r6, 0xae80, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r7 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) ioctl$MON_IOCX_GET(r7, 0x40189206, &(0x7f0000000100)={&(0x7f0000000300), 0x0}) socket$netlink(0x10, 0x3, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x102800) write(0xffffffffffffffff, &(0x7f0000000000)="d5", 0xfffffedf) 9.529984954s ago: executing program 5 (id=1857): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x80, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12}, 0x8, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x60, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x3}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)={'#! ', './file0'}, 0xb) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xa}}}, 0x24}}, 0x0) 9.171542349s ago: executing program 6 (id=1859): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240)="23591363adf94c4a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x38, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}, @in6={0xa, 0x4e24, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0x7269ca8d}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x0, 0x80000003, 0x0, 0xe2d8f2eb1d010935, 0x5, 0x7}, 0x9c) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) fsopen(&(0x7f0000000080)='hpfs\x00', 0x1) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0xfd, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffc}]}) fstat(r5, &(0x7f0000000000)) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x80000001, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0x1000000a1d, 0xffffffff, 0x5, 0x0, 0x2000000000000003, 0x2, 0x5], 0x10000, 0x202}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r2, 0xc0c89425, &(0x7f0000000280)={"d181df3a5953c15fa87c627541960934", 0x0, 0x0, {0x8, 0x8}, {0xffffffffffffffff, 0x2}, 0xa, [0x1ff, 0x166, 0xc, 0x6, 0xe272, 0x37c4, 0x6a4b, 0xf6, 0x0, 0x69, 0x9, 0x2, 0x1, 0x9e, 0x1, 0xd4f]}) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000002700)={0x2, 0x0, [{0xb, 0x7ae, 0x0, 0x2, 0xfffffffb, 0xee0, 0x5}, {0xc0000001, 0xd2, 0x4, 0x8001, 0xe1, 0x0, 0x9}]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r4, 0xc0c89425, &(0x7f0000002500)={"42692bcb1804f71e52caeb3e8a6691f2", 0x0, 0x0, {0x1ff, 0x200}, {0x1, 0x100}, 0xb1, [0x80, 0x100000001, 0x4c, 0xf11, 0x2, 0x9, 0x5, 0x5, 0xfffffffffffffdc4, 0x200, 0xbd, 0x9, 0x7ff, 0x4, 0x7, 0xfa6c]}) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000002600)={"f5ab7896cf87d09172a00ccfa16aa662", r9, r10, {0x145, 0x6}, {0x1, 0x3}, 0x90, [0x4000000000000000, 0xab, 0x43, 0x3fe, 0x4, 0x9d1a, 0x80, 0x1ff, 0xfff, 0x9, 0x3, 0x16, 0x3, 0x2, 0x3, 0xfffffffffffffff8]}) r11 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r11, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x16) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c1949562abd7000fe9bdf251e000040", @ANYRES32=0x0, @ANYBLOB="0200040714000100ff010000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x40801}, 0x4040084) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x7, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0xff}, {0xdddd1000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x8, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xa000, 0x10, 0x9, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4, 0xfe}, {0x80a0000, 0xeeee8000, 0xe, 0x0, 0x0, 0x4, 0x0, 0x1, 0x0, 0x3c}, {0x100000, 0x0, 0x0, 0x78, 0x5, 0x1, 0x2, 0x0, 0x0, 0xff, 0x1}, {0x0, 0x8080000, 0x3, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xe, 0x0, 0x0, 0x7, 0xde, 0x40, 0x26, 0x0, 0x8, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000, 0x2}, 0x9df87fd2, 0x0, 0x0, 0x110, 0x0, 0x5801, 0x0, [0x80000001, 0x0, 0x0, 0x1]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 8.078219936s ago: executing program 6 (id=1861): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x20) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = socket$inet(0x2, 0x5, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e22, @loopback}, 0x10) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0xfffffffe, 0x4) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x6, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) 7.442101163s ago: executing program 1 (id=1865): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat2(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x420000, 0x82, 0x8}, 0x18) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x2000000, 0x50, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40080}, 0x4800) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x2, 0xfffffe0000000001, 0xfa11, 0xfffffffb}, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) r3 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0xc}, &(0x7f0000000480)=0x8) ioctl$EXT4_IOC_GET_ES_CACHE(r4, 0x40086602, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000580)={0x1, 0x0, 0x7, &(0x7f0000000540)={0x1c, "584fc4dfae9a34fb1ffbb539b436cc843759a57bf235d2f60200"}}) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 0000096'], 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r5 = syz_open_dev$video(&(0x7f0000000000), 0x8, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r5, 0xc0205648, &(0x7f0000000100)={0x980000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90b, 0x9, '\x00', @p_u16=&(0x7f0000000040)}}) socket$nl_netfilter(0x10, 0x3, 0xc) 7.297636889s ago: executing program 3 (id=1867): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xe8, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0xffffffd}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_ATM={0x8, 0x4, 0x2}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x55}, 0x4000) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback, 0x800000}, 0x1c) 6.542289201s ago: executing program 6 (id=1869): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x800}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 6.254144813s ago: executing program 3 (id=1870): socket$inet6_udp(0xa, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e28, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}}, 0x40) getsockopt(r1, 0xb, 0x2713, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, 0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x78, 0xd, 0x66, 0x0, 0x3}, 0x0) r2 = socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond0\x00'}) write(r2, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) recvmmsg(r2, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r4, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick=0x1f4, {}, {}, @raw32={[0x2600]}}], 0xffc8) 5.933293667s ago: executing program 5 (id=1871): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) fcntl$getownex(r1, 0x10, &(0x7f0000000300)) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, &(0x7f0000000480)=0x1d, 0x4) r4 = socket$netlink(0x10, 0x3, 0x10) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) ioctl$KVM_GET_VCPU_EVENTS(r7, 0x8040ae9f, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000a40)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r4, 0x0, 0x40) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x58}}, 0x0) 5.589643482s ago: executing program 6 (id=1872): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000040), 0x0, 0x0) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000001500)={0x28, 0x4000, 0x0, @my=0x1}, 0x10) r3 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x4000) connect$tipc(r3, &(0x7f0000000040)=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) sendmmsg$unix(r3, &(0x7f0000004400), 0x400000000000203, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000029008188e6b62aa73772cc9f1ba1f848430000005e140602000006020e002800100007000280000012", 0x2d}], 0x1}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) 5.550601754s ago: executing program 1 (id=1873): socket$inet6_udplite(0xa, 0x2, 0x88) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0xc208ae62, &(0x7f0000000600)={0x0, 0x0, @pic={0x7, 0x8, 0x5, 0x1, 0x1, 0xa, 0x4, 0x7f, 0x0, 0x2, 0x3, 0x3, 0xfb, 0xb1, 0xf9, 0x10}}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_procfs(0x0, 0x0) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x9, 0x6, 0x0, 0x3}, 0x0) r2 = inotify_init() chdir(&(0x7f0000000340)='./file2\x00') write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001180)={0xa, {"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", 0x1000}}, 0x1006) r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) mkdir(&(0x7f00000002c0)='./file2\x00', 0x0) inotify_add_watch(r2, &(0x7f00000000c0)='.\x00', 0x5000009) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140), 0x106, 0xc}}, 0x20) r4 = memfd_create(&(0x7f0000000840)='\xfb\"a&\x8fe\x11\x8c\xd64\xf9 \x00\x00\x00\x00\x00\x12\x1a\'<\xf5\xbeV\x12\xaal\xfa\xf0o\xd8\xb1,\xbd>M\xe3\x98?\xd9\x96\xab\xc7\x06\xfd\x9b\xab\xc8\x1e\x89]\x13bZ\x8d /#k\x95\x9eLV(\x8a\x0e\x93\x93Vc]mP\xbativ\xce\xa4K\xfb\xf2\xe0\xbf\x9d\xa1\xa2\xcd\xb39\xb4\x17a9\x1c\x82\x1aLT\xd0\xb9\x1a\xafB\x95\xb4\xcf\x91X\x8c\x87\xc2\xa1\x1b\xfe\xe7\xbc\xf7\xeb\xdeL\x1d\x98Zq\xcc%\x98\xb0Yc\xec\xb7\xb5m(9\xde\xd3\xefB\xd4\xee\xb5\xee\xe0\xaa\xdd\x00\xb1jOB\xdas\xe3\xb47}%)\xb9\xbf{\xce\x94^\xec\xdf\xbcW\xe0I\x0e\xa4\x1e}\x06\vK\xed\x11\x880\x0e\x9c\xaeVU\x88\xb0\x842.\x17c`\x1e\x88\xecif\xee]\x8b\xc6\"\xcej\x84\x06\x8a\x99\x80\xd7\xcf\x96\xed\x89\x1e6\x93+\xec#\x1d2\xb8\x80Z\xf7\x06\xbe\xc9[L\xc5\xc9\xb5\xd6{\xee\xce\x17\x89\xa6r\xc5j\xec\x1b\xaa\x996\x14e\xcf\x8axQ\x8fXeT\'0.\x85\xa2\xc8\xb3c\t\xe8\x1a\x89\xecL\xcf\xd8\xb5\xfb\xbc\tX\x88\xbe\xf4@[\xb2\xd5\x8c\xb9\x0e\x17\x8b\xce\xd09\xd2\xfb\x9e\xef\xabR\x88\x17\x9et\xf7\x9c\x01\x91\xacH\xdb\xf9\xcb\x7fh\x83>\x8e\xe1=\xedR\xc9\xe68h\x19\xafLY\x94\x93\xebT\x15\x817\x9d#\xea\xd2\xa8\xfb^\x8c\x87#\x10d\x89J\xb3zz\x83\x81\x0f\xbd\xdf\xff9**\xb7\xfa\xa9h;<\xe8\x85\v\x9e\x02\x03\xad\xa4\x11R\x14\xbc\xc8\xb5\x89\xffx\x98%O\xf8n~1G\x89\x96\x1d\xecz\xe8\x04\x86G%\xa0\xd5[\xda\xc9', 0x4) fallocate(r4, 0x0, 0x0, 0x100000000) 5.250172616s ago: executing program 0 (id=1874): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 4.975040848s ago: executing program 0 (id=1875): symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file2\x00', 0x10, 0x0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x13b) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x2000, r1}, 0x0) landlock_restrict_self(r0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) 4.734016908s ago: executing program 0 (id=1876): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',root\vode=00000000000000000140000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other,\x00']) read$FUSE(r2, 0x0, 0x0) syz_fuse_handle_req(r2, 0x0, 0x0, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) mkdirat(0xffffffffffffffff, &(0x7f0000002040)='./file1\x00', 0x102) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f4070009040081000000fe000000000000000800040001", 0x21) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r5, &(0x7f0000000800)=[{&(0x7f0000000700)="ebfa0e81ceb3dc4c43c215dc4dade38ff8c84ace9d15af003afa41ae5fbebe5b175c12cf29c48c2d4b61ce76443645c1dc73113beeb9b5a73cd0415b0437839aa6c68111a4582c3a6a3bb8f9e0c37b9b3f38", 0x52}], 0x1) ioctl$TIOCSRS485(r5, 0x542f, &(0x7f00000000c0)={0x4, 0x4, 0x200}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="2800000009000000000000000000000001"], 0x28) ioctl$TCGETA(r3, 0x5405, &(0x7f0000000000)) r6 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, [], [], [0x0, 0x0, 0x800], [0x1]}) mkdir(0x0, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r6, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) 4.306373356s ago: executing program 3 (id=1877): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r0, &(0x7f0000001780)=[{{&(0x7f0000000000)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f00000001c0)=[@ip_retopts={{0x18, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x4, [@dev={0xac, 0x14, 0x14, 0x19}]}]}}}], 0x18}}], 0x1, 0x44880) 4.135524344s ago: executing program 3 (id=1878): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x802) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x10000, 0x39) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={0x0, 0x10}}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="201006000000065f01", @ANYRES16], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000280)={0x14, 0x0, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000400)={0x1c, &(0x7f00000004c0)={0x0, 0x1, 0x59, "78290b16d8ee92d1bf31796949e3b471707b12f56d05ca1e304f598330b1a50b42f24f31b71bfe6a5aee7f45221c0be7902648596bbfdc3cb66aee174e3339189ce36eb361108f6ee843c413c13e75f21cf948dcd0172d01b5"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x2}}) r2 = socket$unix(0x1, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4c, 0x6, 0x92}, 0x0) syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000006, 0x2) ioprio_set$uid(0x3, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newtfilter={0x43c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x40c, 0x2, [@TCA_BASIC_POLICE={0x408, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x8, 0x62, 0x2, 0x0, 0xc, 0x80000001, 0x7fff, 0x0, 0xffffff70, 0x19, 0xffffffa9, 0x2, 0x7, 0x80000001, 0x7, 0x3, 0x36, 0xc, 0x6, 0x6, 0x5d0bef1f, 0x400, 0x1, 0x837, 0xffffffff, 0x9fec, 0x401, 0x68, 0x9, 0xdd64, 0x1, 0x4, 0x8001, 0xfffffffe, 0x2, 0x0, 0x2, 0xfff, 0xfffffff1, 0x7, 0x4, 0xf, 0x7, 0x7469, 0xb, 0x2, 0x200, 0x5, 0x6, 0xca, 0x4ec1, 0x1, 0x9, 0x80, 0x0, 0x10000, 0x0, 0xb4, 0x7, 0x6, 0x0, 0x0, 0x7, 0x2, 0xd5c, 0x4, 0xa0, 0x2, 0x7, 0x4, 0x0, 0x81, 0xff, 0x2, 0xe6b, 0x9, 0xa, 0xc8c, 0x1, 0xd2a, 0x6, 0xf4e, 0x9, 0x3a0, 0x3, 0x10000, 0x7ff, 0x47, 0x4, 0x2, 0x800, 0x3, 0x8, 0x0, 0x6, 0x922e, 0x0, 0x8, 0x3, 0xf, 0x4, 0x2, 0x2c000, 0x80, 0x3, 0x7, 0x2, 0x5, 0x0, 0x9, 0x6, 0x0, 0x3365, 0x1, 0x5, 0xffffffff, 0x1000, 0x0, 0x4, 0x0, 0x1, 0x1, 0x81, 0x111, 0x2, 0x5c20, 0x7f, 0x0, 0xe, 0xfffffffb, 0x6, 0x391, 0x0, 0x0, 0x3, 0x98, 0x1225, 0x500000, 0x2, 0x7, 0x7fffffff, 0xc7, 0x4, 0x6, 0x0, 0x1, 0xffffffff, 0x9, 0x400001, 0x4, 0x3, 0x7, 0xfffffff9, 0x10, 0x2, 0xfff, 0x2, 0x6, 0x8b4, 0x600000, 0x1, 0x6, 0x0, 0x10000, 0x7d, 0x3, 0x5, 0x0, 0x1000, 0x6, 0x9, 0x3, 0x1, 0x81, 0x43, 0xffff6c4b, 0x800, 0x7, 0x5, 0x7fff, 0x8, 0xffffffff, 0x9, 0x4, 0x0, 0x40, 0x2067e1, 0x80000000, 0x2, 0x603c, 0x4, 0x1, 0x0, 0xfffffff8, 0x7, 0x3, 0x10, 0x400, 0xfffffe00, 0x1, 0x3, 0x0, 0xffff, 0x4, 0x6, 0x8, 0x0, 0x400, 0x1, 0x87, 0x10, 0x2, 0x0, 0xfffffffd, 0x3, 0x7, 0x616, 0x2, 0x2, 0xd1, 0x2, 0xfffffffc, 0x8, 0xe, 0x800, 0x1, 0x4, 0xd87, 0x80000001, 0x48e0, 0x8, 0x9, 0x40, 0x400, 0x5, 0x1020, 0x4e1b, 0x1, 0x1000, 0x8, 0x4, 0x3, 0x0, 0x2, 0x9, 0x2, 0x3, 0x10001, 0xffff, 0x4d, 0x10000d, 0x8, 0x2, 0x2, 0x8]}]}]}}]}, 0x43c}}, 0x4000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x200c8004, &(0x7f0000000280)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) sendto$inet6(r4, &(0x7f00000009c0)="c7cfca", 0x3, 0xc001, 0x0, 0x0) bind$unix(r2, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) socket$unix(0x1, 0x2, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) connect$unix(r5, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/185) 3.568321468s ago: executing program 1 (id=1879): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x10, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x7}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x20, 0x80, 0x1c, {0x994d, 0x4, 0x800, 0x6, 0xff, 0x0, 0x9, 0xa7b, 0x0, 0x3, 0x4, 0x3}}, 0x0, &(0x7f0000000700)={0x20, 0x83, 0x2, 0x1}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0xd06d000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) lchown(0x0, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002ac0), 0x2, 0x0) write$RDMA_USER_CM_CMD_BIND(r4, &(0x7f0000000380)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0x90) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x0) sendto$inet6(r3, &(0x7f00000002c0)="e8", 0x1, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup3(r3, r5, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r5, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000001f00)=""/4106, 0xfffffffffffffccb, 0x0, 0x0}, &(0x7f0000000080)=0x40) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r6, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000001400)=""/200, 0xfffffffffffffecd, 0x0, 0x0}, &(0x7f0000001380)=0x40) 3.215986803s ago: executing program 5 (id=1880): openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffe0000000002, 0xfa0f, 0xffffffff}, 0x0) syz_open_dev$dri(0x0, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet(r2, &(0x7f0000005f40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003400)=ANY=[@ANYRES8=r1], 0x80}}], 0x1, 0x4000004) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001500010300000000000000"], 0x14}}, 0x0) read(r3, &(0x7f0000000640)=""/187, 0xbb) r4 = socket(0x10, 0x80003, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x19a1dc757009216e) close_range(r4, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r7, {0x2, 0x0, @local}, 0x2}}, 0x26) socket$nl_generic(0x10, 0x3, 0x10) 2.922304655s ago: executing program 0 (id=1881): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'lo\x00', 0x0}) writev(0xffffffffffffffff, &(0x7f0000000100)=[{0x0}, {&(0x7f0000000580)="051a00000e80006558f2878f02000000", 0x10}], 0x2) sendmsg$can_raw(r0, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r2}, 0x10, &(0x7f0000000100)={0x0}, 0x2, 0x0, 0x0, 0x44904}, 0x8005) 2.759947512s ago: executing program 0 (id=1882): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x5008, 0x0) ppoll(&(0x7f0000000100)=[{r0, 0x800}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f00000000c0)) 1.725021617s ago: executing program 3 (id=1883): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) shutdown(r1, 0x1) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{&(0x7f0000000340)={0x2, 0x4e23, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @dev={0xac, 0x14, 0x14, 0xe}}}}], 0x20}}], 0x1, 0x40080c0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_usb_connect(0x5, 0x1bb, &(0x7f0000000880)=ANY=[@ANYBLOB="12010000a677c120229062d60eb3000000010902a90101000000000904"], 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r2, 0x720, &(0x7f0000000580)={0x0, 0xa, 0x5, &(0x7f0000000040)={0x2, "ba33b4f76c1147713bbb79931987e92352124c3f58f98e3897d9030000002c833a"}}) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x2, 0x3ff, 0x4, 0x0, 0x6, 0x8000000000000001]}, &(0x7f0000000140)=0x78) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x0, 0x6}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0) 1.670946829s ago: executing program 0 (id=1884): openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000004) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x0) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={0x0, 0x10}, 0x1f, 0x7}, 0x44) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000780)="1f4e6086"}) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000340)={[{0x122e, 0x3, 0x0, 0x0, 0x0, 0x4, 0x8c, 0x0, 0x5, 0xff, 0x1f, 0x0, 0x10000}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23, 0x0, 0x9}, {0x0, 0x0, 0x3c, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3}]}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) sendto$inet6(r3, &(0x7f00000001c0), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000000c0)={0x8, 0x0, 0xfe, 0x2, 0x0, 0x9, 0x5, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x818}, 0x20000004) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, r8, 0x1, 0xffffffff, 0x400000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x10000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @ipv4={'\x00', '\xff\xff', @empty}}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e20}]}, 0x64}, 0x1, 0x620b}, 0x0) shutdown(r3, 0x1) 1.333999133s ago: executing program 5 (id=1885): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) pwritev(r1, 0x0, 0x0, 0x5, 0xfffffff9) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) remap_file_pages(&(0x7f0000299000/0x2000)=nil, 0x2000, 0x0, 0x5, 0x0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x24}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x3f, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}}], 0x4000000000003b9, 0x26022, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000440)={r4, 0x2, 0x0, 0x0, 0x0, [0x0], [], [0x0, 0x0, 0x0, 0x4]}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r3, 0xc00c642d, &(0x7f0000000080)={r5}) 1.250306147s ago: executing program 6 (id=1886): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_FLAGS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40044}, 0x4804) 981.847978ms ago: executing program 6 (id=1887): syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x8000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) fchdir(r3) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0xc8a02, 0x0) creat(&(0x7f0000000300)='./bus\x00', 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0xe0}}, 0x0) 0s ago: executing program 3 (id=1888): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x20008000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x5c, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x30, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x334d}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x5c}}, 0x0) kernel console output (not intermixed with test programs): ation available [ 326.516230][ T6479] IPVS: fo: FWM 3 0x00000003 - no destination available [ 332.334776][ T6535] loop3: detected capacity change from 0 to 128 [ 332.360457][ T6535] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 333.926738][ T6554] netlink: 20 bytes leftover after parsing attributes in process `syz.1.413'. [ 334.525203][ C1] IPVS: fo: FWM 3 0x00000003 - no destination available [ 336.866453][ T6573] capability: warning: `syz.1.419' uses deprecated v2 capabilities in a way that may be insecure [ 338.448512][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz.6.417'. [ 339.087951][ T6595] loop5: detected capacity change from 0 to 32768 [ 339.946759][ T6595] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 342.703350][ T5141] ocfs2: Unmounting device (7,5) on (node local) [ 343.980760][ T6650] binder: 6638:6650 ioctl c0306201 0 returned -14 [ 349.847452][ T6708] loop5: detected capacity change from 0 to 1024 [ 349.903832][ T6708] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 350.674400][ T6708] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 350.790638][ T6708] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.442: missing EA_INODE flag [ 350.820324][ T6708] EXT4-fs (loop5): Remounting filesystem read-only [ 351.684826][ T6708] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.442: error while reading EA inode 11 err=-117 [ 351.930663][ T6708] EXT4-fs (loop5): Remounting filesystem read-only [ 352.720470][ T6708] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 352.761927][ T6708] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.442: missing EA_INODE flag [ 352.797954][ T6708] EXT4-fs (loop5): Remounting filesystem read-only [ 352.818036][ T6708] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.442: error while reading EA inode 11 err=-117 [ 352.864455][ T6708] EXT4-fs (loop5): Remounting filesystem read-only [ 354.235908][ T5141] EXT4-fs (loop5): unmounting filesystem. [ 355.416162][ T4326] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 355.647962][ T4326] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 356.470397][ T4326] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 356.551490][ T4326] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 356.569983][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.736391][ T6773] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 359.813370][ T4326] usb 4-1: USB disconnect, device number 2 [ 360.691233][ T6848] loop1: detected capacity change from 0 to 1024 [ 360.698553][ T6848] EXT4-fs: Ignoring removed oldalloc option [ 360.704820][ T6848] EXT4-fs: Ignoring removed bh option [ 360.731577][ T6848] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 360.932145][ T6848] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 361.822076][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 362.979714][ T6884] loop3: detected capacity change from 0 to 1024 [ 362.987313][ T6884] EXT4-fs: Ignoring removed oldalloc option [ 362.994220][ T6884] EXT4-fs: Ignoring removed bh option [ 363.094513][ T6882] loop6: detected capacity change from 0 to 1024 [ 363.103714][ T6882] EXT4-fs: Ignoring removed oldalloc option [ 363.109953][ T6882] EXT4-fs: Ignoring removed bh option [ 363.122485][ T6884] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 363.124595][ T6882] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 363.412419][ T6884] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 363.832349][ T6882] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 364.191129][ T5898] EXT4-fs (loop6): unmounting filesystem. [ 364.198108][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 365.015963][ T6908] loop1: detected capacity change from 0 to 1024 [ 365.026708][ T6908] EXT4-fs: Ignoring removed oldalloc option [ 365.032879][ T6908] EXT4-fs: Ignoring removed bh option [ 365.080282][ T6908] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 365.292179][ T6908] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 365.803861][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 369.195751][ T6956] loop3: detected capacity change from 0 to 1024 [ 369.203036][ T6956] EXT4-fs: Ignoring removed oldalloc option [ 369.209074][ T6956] EXT4-fs: Ignoring removed bh option [ 369.483361][ T6956] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 369.777074][ T6963] loop1: detected capacity change from 0 to 1024 [ 370.044484][ T6963] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 370.300441][ T6956] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 370.314746][ T6963] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 370.951872][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 371.550038][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 374.172876][ T7021] loop1: detected capacity change from 0 to 1024 [ 374.180397][ T7021] EXT4-fs: Ignoring removed oldalloc option [ 374.186426][ T7021] EXT4-fs: Ignoring removed bh option [ 374.204025][ T7021] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 374.568857][ T7021] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 374.759525][ T7033] loop3: detected capacity change from 0 to 1024 [ 374.770290][ T7033] EXT4-fs: Ignoring removed oldalloc option [ 374.776491][ T7033] EXT4-fs: Ignoring removed bh option [ 375.572587][ T7033] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 375.592244][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 375.641195][ T7033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 375.867187][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 375.869816][ T7025] loop0: detected capacity change from 0 to 1024 [ 375.886354][ T7025] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 375.959861][ T7025] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 376.532948][ T7048] loop3: detected capacity change from 0 to 1024 [ 376.547833][ T7048] EXT4-fs: Ignoring removed oldalloc option [ 376.554376][ T7048] EXT4-fs: Ignoring removed bh option [ 376.589823][ T7048] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 377.260304][ T7048] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 377.492113][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 377.499223][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 377.564581][ T7035] loop5: detected capacity change from 0 to 1024 [ 377.624458][ T7035] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 378.039990][ T7069] bridge0: port 3(gretap0) entered blocking state [ 378.046907][ T7069] bridge0: port 3(gretap0) entered disabled state [ 378.056497][ T7069] device gretap0 entered promiscuous mode [ 378.063660][ T7069] bridge0: port 3(gretap0) entered blocking state [ 378.070517][ T7069] bridge0: port 3(gretap0) entered forwarding state [ 379.673994][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.694456][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.837467][ T7035] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 380.212366][ T7035] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.507: missing EA_INODE flag [ 381.267176][ T7035] EXT4-fs (loop5): Remounting filesystem read-only [ 381.302403][ T7035] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.507: error while reading EA inode 11 err=-117 [ 381.419054][ T7035] EXT4-fs (loop5): Remounting filesystem read-only [ 381.580441][ T7035] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #11: comm syz.5.507: missing EA_INODE flag [ 382.372046][ T7035] EXT4-fs (loop5): Remounting filesystem read-only [ 382.378789][ T7035] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.507: error while reading EA inode 11 err=-117 [ 382.512036][ T7035] EXT4-fs (loop5): Remounting filesystem read-only [ 382.922165][ T7104] loop0: detected capacity change from 0 to 1024 [ 382.932571][ T7104] EXT4-fs: Ignoring removed oldalloc option [ 382.938671][ T7104] EXT4-fs: Ignoring removed bh option [ 383.070226][ T7104] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 383.691212][ T7104] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 384.645905][ T5141] EXT4-fs (loop5): unmounting filesystem. [ 384.746422][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 385.730269][ T4280] Bluetooth: hci5: command 0x0406 tx timeout [ 386.904532][ T7150] loop3: detected capacity change from 0 to 1024 [ 386.970577][ T7150] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 387.360412][ T7157] bridge0: port 3(gretap0) entered blocking state [ 387.367341][ T7157] bridge0: port 3(gretap0) entered disabled state [ 387.383054][ T7157] device gretap0 entered promiscuous mode [ 387.390467][ T7157] bridge0: port 3(gretap0) entered blocking state [ 387.396993][ T7157] bridge0: port 3(gretap0) entered forwarding state [ 387.991717][ T7150] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 388.256754][ T7143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.528: missing EA_INODE flag [ 388.390529][ T7143] EXT4-fs (loop3): Remounting filesystem read-only [ 388.437376][ T7143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.528: error while reading EA inode 11 err=-117 [ 388.964031][ T7143] EXT4-fs (loop3): Remounting filesystem read-only [ 389.250455][ T7143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #11: comm syz.3.528: missing EA_INODE flag [ 389.320906][ T7143] EXT4-fs (loop3): Remounting filesystem read-only [ 389.328057][ T7143] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.528: error while reading EA inode 11 err=-117 [ 389.375967][ T7178] loop1: detected capacity change from 0 to 1024 [ 389.397874][ T7143] EXT4-fs (loop3): Remounting filesystem read-only [ 389.421802][ T7178] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 389.564846][ T7178] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 390.627545][ T7178] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.533: missing EA_INODE flag [ 390.633763][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 390.697926][ T7178] EXT4-fs (loop1): Remounting filesystem read-only [ 390.849918][ T7178] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.533: error while reading EA inode 11 err=-117 [ 390.973798][ T7192] loop0: detected capacity change from 0 to 1024 [ 390.983859][ T7192] EXT4-fs: Ignoring removed oldalloc option [ 390.990000][ T7192] EXT4-fs: Ignoring removed bh option [ 391.510100][ T7192] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 391.816366][ T7192] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 391.863384][ T7178] EXT4-fs (loop1): Remounting filesystem read-only [ 391.870683][ T7178] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #11: comm syz.1.533: missing EA_INODE flag [ 391.884593][ T7178] EXT4-fs (loop1): Remounting filesystem read-only [ 391.894096][ T7178] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.533: error while reading EA inode 11 err=-117 [ 391.912332][ T7178] EXT4-fs (loop1): Remounting filesystem read-only [ 393.022592][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 393.072958][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 393.613911][ T7210] loop3: detected capacity change from 0 to 1024 [ 393.621302][ T7210] EXT4-fs: Ignoring removed oldalloc option [ 393.627503][ T7210] EXT4-fs: Ignoring removed bh option [ 394.132066][ T7210] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 394.321123][ T7210] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 395.355857][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 395.715137][ T7225] IPVS: fo: FWM 3 0x00000003 - no destination available [ 398.673211][ T7264] binder: 7263:7264 ioctl 4018620d 0 returned -22 [ 399.980340][ T7274] binder: 7263:7274 ioctl c0306201 0 returned -14 [ 403.531886][ T7277] loop3: detected capacity change from 0 to 32768 [ 403.712380][ T7277] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 404.033396][ T7304] bridge0: port 3(gretap0) entered blocking state [ 404.039976][ T7304] bridge0: port 3(gretap0) entered disabled state [ 404.047819][ T7304] device gretap0 entered promiscuous mode [ 404.054261][ T7304] bridge0: port 3(gretap0) entered blocking state [ 404.061972][ T7304] bridge0: port 3(gretap0) entered forwarding state [ 405.770389][ T7306] netlink: 64 bytes leftover after parsing attributes in process `syz.6.556'. [ 405.804345][ T7306] loop6: detected capacity change from 0 to 256 [ 405.969479][ T7306] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 406.361859][ T4265] ocfs2: Unmounting device (7,3) on (node local) [ 406.857817][ T7327] netlink: 64 bytes leftover after parsing attributes in process `syz.3.558'. [ 406.890046][ T7327] loop3: detected capacity change from 0 to 256 [ 407.491238][ T7327] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 410.350400][ T7358] binder: 7357:7358 ioctl 4018620d 0 returned -22 [ 410.995321][ T7366] bridge0: port 3(gretap0) entered blocking state [ 411.002311][ T7366] bridge0: port 3(gretap0) entered disabled state [ 411.011535][ T7366] device gretap0 entered promiscuous mode [ 411.018393][ T7366] bridge0: port 3(gretap0) entered blocking state [ 411.025150][ T7366] bridge0: port 3(gretap0) entered forwarding state [ 412.233686][ T7373] binder: 7357:7373 ioctl c0306201 0 returned -14 [ 413.179113][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.6.577'. [ 414.471329][ T7409] netlink: 20 bytes leftover after parsing attributes in process `syz.0.580'. [ 415.568717][ T7387] loop1: detected capacity change from 0 to 32768 [ 415.605037][ T7415] binder: 7414:7415 ioctl 4018620d 0 returned -22 [ 415.782266][ T7387] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 416.777053][ T7422] binder: 7414:7422 ioctl c0306201 0 returned -14 [ 418.133582][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 419.727902][ T7430] loop6: detected capacity change from 0 to 32768 [ 420.022948][ T7430] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 420.280312][ T7469] netlink: 64 bytes leftover after parsing attributes in process `syz.1.589'. [ 420.308824][ T7469] loop1: detected capacity change from 0 to 256 [ 420.338796][ T7469] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 421.622741][ T5898] ocfs2: Unmounting device (7,6) on (node local) [ 421.682203][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.592'. [ 423.540422][ T7495] netlink: 64 bytes leftover after parsing attributes in process `syz.6.593'. [ 423.573922][ T7495] loop6: detected capacity change from 0 to 256 [ 423.903059][ T7495] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 424.525362][ T7502] loop0: detected capacity change from 0 to 1024 [ 424.939836][ T7507] netlink: 64 bytes leftover after parsing attributes in process `syz.6.599'. [ 424.973536][ T7507] loop6: detected capacity change from 0 to 256 [ 425.005108][ T7507] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 425.459035][ T7502] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 425.520841][ T7502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 427.836096][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.3.603'. [ 427.942168][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 427.950355][ T7527] loop6: detected capacity change from 0 to 1024 [ 427.978563][ T7527] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 428.053337][ T7527] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 430.664078][ T5898] EXT4-fs (loop6): unmounting filesystem. [ 432.596415][ T7577] netlink: 16 bytes leftover after parsing attributes in process `syz.1.607'. [ 432.723554][ T7561] loop6: detected capacity change from 0 to 32768 [ 432.879593][ T7561] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 434.732899][ T5898] ocfs2: Unmounting device (7,6) on (node local) [ 438.482749][ T7625] loop1: detected capacity change from 0 to 256 [ 439.587485][ T7625] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 439.604086][ T7624] netlink: 64 bytes leftover after parsing attributes in process `syz.1.621'. [ 439.977690][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.984399][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.067239][ T7636] netlink: 12 bytes leftover after parsing attributes in process `syz.5.623'. [ 441.624368][ T7649] loop6: detected capacity change from 0 to 256 [ 441.670577][ T7649] exFAT-fs (loop6): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 442.430283][ T7653] netlink: 28 bytes leftover after parsing attributes in process `syz.0.638'. [ 442.439491][ T7653] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 446.609219][ T7683] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 447.988205][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.5.639'. [ 454.325258][ T7739] netlink: 64 bytes leftover after parsing attributes in process `syz.1.650'. [ 454.407855][ T7739] loop1: detected capacity change from 0 to 256 [ 454.509108][ T7739] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 455.635673][ T7743] netlink: 64 bytes leftover after parsing attributes in process `syz.0.651'. [ 455.648129][ T7743] loop0: detected capacity change from 0 to 256 [ 455.658651][ T7743] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 455.916453][ T7746] loop5: detected capacity change from 0 to 1024 [ 455.995044][ T7746] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 456.733989][ T7746] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 458.223122][ T5141] EXT4-fs (loop5): unmounting filesystem. [ 461.781412][ T7794] netlink: 20 bytes leftover after parsing attributes in process `syz.1.663'. [ 463.698400][ T7800] netlink: 20 bytes leftover after parsing attributes in process `syz.1.666'. [ 465.612758][ T7814] netlink: 64 bytes leftover after parsing attributes in process `syz.1.678'. [ 465.643349][ T7814] loop1: detected capacity change from 0 to 256 [ 465.778173][ T7814] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 466.086741][ T7813] loop3: detected capacity change from 0 to 1024 [ 466.170302][ T7813] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 466.518159][ T7813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 468.998712][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 471.296542][ T7856] netlink: 28 bytes leftover after parsing attributes in process `syz.3.680'. [ 471.328313][ T7850] loop0: detected capacity change from 0 to 32768 [ 471.335869][ T7847] loop1: detected capacity change from 0 to 32768 [ 471.465587][ T7850] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode. [ 471.504563][ T7847] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 472.951402][ T7847] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 473.079766][ T4272] ocfs2: Unmounting device (7,0) on (node local) [ 473.351415][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 473.608264][ T7878] netlink: 64 bytes leftover after parsing attributes in process `syz.5.682'. [ 473.844686][ T7878] loop5: detected capacity change from 0 to 256 [ 473.927391][ T7878] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 479.883534][ T7934] netlink: 64 bytes leftover after parsing attributes in process `syz.5.698'. [ 479.915410][ T7934] loop5: detected capacity change from 0 to 256 [ 480.422786][ T7934] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 486.764510][ T7988] netlink: 64 bytes leftover after parsing attributes in process `syz.0.711'. [ 486.869763][ T7988] loop0: detected capacity change from 0 to 256 [ 487.264936][ T7988] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 488.047961][ T7999] IPVS: fo: FWM 3 0x00000003 - no destination available [ 501.421964][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.422168][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.546011][ T8114] netlink: 64 bytes leftover after parsing attributes in process `syz.3.742'. [ 501.567922][ T8114] loop3: detected capacity change from 0 to 256 [ 501.605170][ T8114] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 512.512367][ T8206] loop6: detected capacity change from 0 to 1024 [ 512.724204][ T8206] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 513.821797][ T5898] EXT4-fs (loop6): unmounting filesystem. [ 516.183887][ T8234] loop6: detected capacity change from 0 to 1024 [ 516.410836][ T8234] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 516.454366][ T8243] netlink: 20 bytes leftover after parsing attributes in process `syz.0.772'. [ 516.515591][ T8245] netlink: 20 bytes leftover after parsing attributes in process `syz.0.772'. [ 517.018681][ T8240] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 517.115001][ T8245] Can't find ip_set type hash:ip,p [ 517.120617][ T8243] Can't find ip_set type hash:ip,p [ 517.381248][ T8251] loop5: detected capacity change from 0 to 1024 [ 517.474613][ T8251] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 517.576069][ T5898] EXT4-fs (loop6): unmounting filesystem. [ 519.199609][ T8273] netlink: 64 bytes leftover after parsing attributes in process `syz.3.777'. [ 520.612322][ T8280] loop3: detected capacity change from 0 to 1024 [ 520.881488][ T8280] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 520.909762][ T5141] EXT4-fs (loop5): unmounting filesystem. [ 521.081653][ T8286] loop0: detected capacity change from 0 to 1024 [ 521.188236][ T8286] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 521.494282][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 521.835635][ T8303] loop6: detected capacity change from 0 to 16 [ 521.862764][ T8303] erofs: (device loop6): mounted with root inode @ nid 36. [ 522.059609][ T8305] loop1: detected capacity change from 0 to 1024 [ 522.109005][ T8305] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 522.343860][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 522.605274][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 525.226712][ T8350] loop0: detected capacity change from 0 to 1024 [ 525.302556][ T8356] loop6: detected capacity change from 0 to 16 [ 525.387152][ T8356] erofs: (device loop6): mounted with root inode @ nid 36. [ 525.401088][ T8350] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 525.511623][ T8352] kvm [8351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0xfffffc18 [ 525.538630][ T8352] kvm [8351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0xfffffc18 [ 525.587713][ T8352] kvm [8351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xfffffc18 [ 525.645928][ T8352] kvm [8351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0xfffffc18 [ 525.683038][ T8352] kvm [8351]: vcpu2, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0xfffffc18 [ 525.690202][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 525.696356][ T8363] loop1: detected capacity change from 0 to 1024 [ 525.775741][ T8363] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 526.073816][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 526.243112][ T8375] loop6: detected capacity change from 0 to 1024 [ 526.975870][ T8375] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 528.574151][ T8402] loop0: detected capacity change from 0 to 16 [ 529.319120][ T8402] erofs: (device loop0): mounted with root inode @ nid 36. [ 529.706888][ T5898] EXT4-fs (loop6): unmounting filesystem. [ 530.423471][ T8431] kvm: pic: non byte write [ 530.441858][ T8431] kvm: pic: non byte write [ 530.461662][ T8431] kvm: pic: non byte write [ 532.181571][ T8449] kvm: pic: non byte write [ 532.291421][ T8457] loop6: detected capacity change from 0 to 16 [ 532.309891][ T8457] erofs: (device loop6): mounted with root inode @ nid 36. [ 532.462518][ T8459] loop3: detected capacity change from 0 to 1024 [ 532.520636][ T8459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 532.651694][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 534.086439][ T8506] loop0: detected capacity change from 0 to 1024 [ 534.221742][ T8506] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 534.368125][ T4272] EXT4-fs (loop0): unmounting filesystem. [ 534.498282][ T8520] kvm: pic: single mode not supported [ 534.501867][ T8520] kvm: pic: non byte write [ 534.529003][ T8520] kvm: pic: single mode not supported [ 534.529173][ T8520] kvm: pic: single mode not supported [ 537.877956][ T8553] loop5: detected capacity change from 0 to 1024 [ 537.904765][ T8548] kvm: pic: non byte write [ 537.912019][ T8548] kvm: pic: non byte write [ 537.931461][ T8553] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 537.964145][ T8548] kvm: pic: non byte write [ 537.969487][ T8548] kvm: pic: non byte write [ 537.975383][ T8548] kvm: pic: non byte write [ 538.119466][ T5141] EXT4-fs (loop5): unmounting filesystem. [ 540.562329][ T8603] loop3: detected capacity change from 0 to 1024 [ 541.056384][ T8603] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 541.292551][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 541.459241][ T8594] loop1: detected capacity change from 0 to 32768 [ 541.561303][ T8594] XFS (loop1): Mounting V5 Filesystem [ 541.719733][ T8594] XFS (loop1): Ending clean mount [ 541.792430][ T8594] XFS (loop1): Quotacheck needed: Please wait. [ 541.915509][ T8594] XFS (loop1): Quotacheck: Done. [ 542.326330][ T8614] loop5: detected capacity change from 0 to 32768 [ 542.373528][ T8614] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.869 (8614) [ 542.463233][ T8609] loop6: detected capacity change from 0 to 32768 [ 542.487163][ T8614] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 542.550510][ T8614] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 542.559785][ T8614] BTRFS info (device loop5): force clearing of disk cache [ 542.657288][ T4266] XFS (loop1): Unmounting Filesystem [ 542.667605][ T8614] BTRFS info (device loop5): enabling auto defrag [ 542.683240][ T8609] XFS (loop6): Mounting V5 Filesystem [ 542.772841][ T8614] BTRFS info (device loop5): enabling ssd optimizations [ 542.857025][ T8609] XFS (loop6): Ending clean mount [ 542.872889][ T8614] BTRFS info (device loop5): max_inline at 0 [ 542.914942][ T8609] XFS (loop6): Quotacheck needed: Please wait. [ 542.940635][ T8614] BTRFS info (device loop5): enabling disk space caching [ 543.017540][ T8614] BTRFS info (device loop5): disk space caching is enabled [ 543.106794][ T8629] loop0: detected capacity change from 0 to 32768 [ 543.242244][ T8609] XFS (loop6): Quotacheck: Done. [ 543.273684][ T8629] XFS (loop0): Mounting V5 Filesystem [ 543.496886][ T8629] XFS (loop0): Ending clean mount [ 543.526681][ T8629] XFS (loop0): Quotacheck needed: Please wait. [ 543.673330][ T5898] XFS (loop6): Unmounting Filesystem [ 543.746048][ T8614] BTRFS info (device loop5): rebuilding free space tree [ 543.762163][ T8629] XFS (loop0): Quotacheck: Done. [ 543.958949][ T8614] BTRFS info (device loop5): disabling free space tree [ 544.003589][ T8614] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 544.051090][ T8614] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 544.206958][ T4272] XFS (loop0): Unmounting Filesystem [ 545.050261][ T8681] loop1: detected capacity change from 0 to 32768 [ 545.050499][ T8695] kvm: pic: level sensitive irq not supported [ 545.056919][ T8695] kvm: pic: level sensitive irq not supported [ 545.088495][ T8695] kvm: pic: level sensitive irq not supported [ 545.118946][ T8695] kvm: pic: level sensitive irq not supported [ 545.130547][ T8695] kvm: pic: level sensitive irq not supported [ 545.141367][ T8695] kvm: pic: level sensitive irq not supported [ 545.148449][ T8695] kvm: pic: level sensitive irq not supported [ 545.190434][ T8695] kvm: pic: level sensitive irq not supported [ 545.197469][ T8695] kvm: pic: level sensitive irq not supported [ 545.210622][ T8681] ocfs2: Slot 0 on device (7,1) was already allocated to this node! [ 545.215008][ T8695] kvm: pic: non byte write [ 545.280548][ T5141] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 545.298890][ T8681] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 545.324990][ T8695] kvm: pic: level sensitive irq not supported [ 545.327355][ T8693] loop3: detected capacity change from 0 to 32768 [ 545.380426][ T46] (kworker/u4:3,46,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214 [ 545.382356][ T8693] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.879 (8693) [ 545.611106][ T27] audit: type=1800 audit(1764370955.410:2): pid=8681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.873" name="file1" dev="loop1" ino=17058 res=0 errno=0 [ 545.842171][ T5518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5518) [ 545.888888][ T4266] ocfs2: Unmounting device (7,1) on (node local) [ 545.899093][ T8697] loop6: detected capacity change from 0 to 32768 [ 546.025786][ T8697] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 546.072487][ T8697] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 546.113673][ T8697] BTRFS info (device loop6): force clearing of disk cache [ 546.143513][ T8697] BTRFS info (device loop6): enabling auto defrag [ 546.175135][ T8697] BTRFS info (device loop6): enabling ssd optimizations [ 546.194766][ T8697] BTRFS info (device loop6): max_inline at 0 [ 546.214369][ T8697] BTRFS info (device loop6): enabling disk space caching [ 546.256134][ T8697] BTRFS info (device loop6): disk space caching is enabled [ 546.656706][ T8697] BTRFS info (device loop6): rebuilding free space tree [ 546.718722][ T8697] BTRFS info (device loop6): disabling free space tree [ 546.738658][ T8697] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 546.767576][ T8697] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 547.588765][ T8738] loop3: detected capacity change from 0 to 32768 [ 547.643688][ T8738] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.884 (8738) [ 547.947901][ T5898] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 548.079809][ T5518] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by udevd (5518) [ 548.829806][ T8758] loop0: detected capacity change from 0 to 32768 [ 548.887105][ T8758] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 548.919892][ T8758] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 548.941567][ T8756] loop5: detected capacity change from 0 to 32768 [ 548.948605][ T8758] BTRFS info (device loop0): force clearing of disk cache [ 548.980216][ T8758] BTRFS info (device loop0): enabling auto defrag [ 548.987743][ T8758] BTRFS info (device loop0): enabling ssd optimizations [ 549.031286][ T8758] BTRFS info (device loop0): max_inline at 0 [ 549.037975][ T8758] BTRFS info (device loop0): enabling disk space caching [ 549.043439][ T8756] XFS (loop5): Mounting V5 Filesystem [ 549.080174][ T8758] BTRFS info (device loop0): disk space caching is enabled [ 549.182386][ T8756] XFS (loop5): Ending clean mount [ 549.229874][ T8756] XFS (loop5): Quotacheck needed: Please wait. [ 549.330940][ T8756] XFS (loop5): Quotacheck: Done. [ 549.414695][ T8758] BTRFS info (device loop0): rebuilding free space tree [ 549.476492][ T8758] BTRFS info (device loop0): disabling free space tree [ 549.504572][ T8758] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 549.556344][ T8758] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 549.597801][ T8767] loop6: detected capacity change from 0 to 32768 [ 549.617764][ T5141] XFS (loop5): Unmounting Filesystem [ 549.648578][ T8767] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by syz.6.890 (8767) [ 549.660140][ T8769] loop3: detected capacity change from 0 to 32768 [ 549.807305][ T8769] XFS (loop3): DAX unsupported by block device. Turning off DAX. [ 549.824038][ T8769] XFS (loop3): Mounting V5 Filesystem [ 550.026352][ T8769] XFS (loop3): Ending clean mount [ 550.054442][ T8769] XFS (loop3): Quotacheck needed: Please wait. [ 550.086928][ T5518] BTRFS warning: duplicate device /dev/loop6 devid 1 generation 8 scanned by udevd (5518) [ 550.186749][ T8769] XFS (loop3): Quotacheck: Done. [ 550.356120][ T4272] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 550.407542][ T4265] XFS (loop3): Unmounting Filesystem [ 550.416894][ T8806] loop6: detected capacity change from 0 to 1024 [ 550.532845][ T8806] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 550.887211][ T5898] EXT4-fs (loop6): unmounting filesystem. [ 551.519814][ T8811] loop5: detected capacity change from 0 to 32768 [ 551.745763][ T8811] XFS (loop5): Mounting V5 Filesystem [ 551.977971][ T8811] XFS (loop5): Ending clean mount [ 552.024992][ T8811] XFS (loop5): Quotacheck needed: Please wait. [ 552.112367][ T8811] XFS (loop5): Quotacheck: Done. [ 552.316898][ T5141] XFS (loop5): Unmounting Filesystem [ 552.806524][ T8826] loop3: detected capacity change from 0 to 32768 [ 552.823280][ T8830] loop0: detected capacity change from 0 to 32768 [ 553.126756][ T8826] XFS (loop3): Mounting V5 Filesystem [ 553.150562][ T8830] XFS (loop0): Mounting V5 Filesystem [ 553.760539][ T8830] XFS (loop0): Ending clean mount [ 553.786601][ T8830] XFS (loop0): Quotacheck needed: Please wait. [ 553.861152][ T8826] XFS (loop3): Ending clean mount [ 553.905948][ T8826] XFS (loop3): Quotacheck needed: Please wait. [ 553.938011][ T8830] XFS (loop0): Quotacheck: Done. [ 554.445702][ T8870] loop1: detected capacity change from 0 to 128 [ 554.492571][ T8870] EXT4-fs: Ignoring removed nomblk_io_submit option [ 554.559663][ T8870] EXT4-fs (loop1): Test dummy encryption mode enabled [ 554.567713][ T8870] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 554.722577][ T8872] loop5: detected capacity change from 0 to 128 [ 554.749343][ T8826] XFS (loop3): Quotacheck: Done. [ 554.760480][ T8872] EXT4-fs: Ignoring removed nomblk_io_submit option [ 554.794832][ T8872] EXT4-fs (loop5): Test dummy encryption mode enabled [ 554.806193][ T4272] XFS (loop0): Unmounting Filesystem [ 554.824587][ T8872] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 554.864936][ T4265] XFS (loop3): Unmounting Filesystem [ 556.870375][ T8707] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 557.129147][ T8707] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.212281][ T8707] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 557.349396][ T8707] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.535240][ T8707] usb 2-1: config 0 descriptor?? [ 557.772110][ T8895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.803246][ T8895] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.866501][ T8889] loop6: detected capacity change from 0 to 32768 [ 557.939278][ T8889] XFS (loop6): DAX unsupported by block device. Turning off DAX. [ 557.962744][ T8889] XFS (loop6): Mounting V5 Filesystem [ 558.033074][ T8707] usbhid 2-1:0.0: can't add hid device: -71 [ 558.047923][ T8707] usbhid: probe of 2-1:0.0 failed with error -71 [ 558.105949][ T8707] usb 2-1: USB disconnect, device number 2 [ 558.136021][ T8889] XFS (loop6): Ending clean mount [ 558.161180][ T8889] XFS (loop6): Quotacheck needed: Please wait. [ 558.267631][ T8889] XFS (loop6): Quotacheck: Done. [ 558.293927][ T8905] loop5: detected capacity change from 0 to 32768 [ 558.352236][ T8905] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.916 (8905) [ 558.369600][ T5898] XFS (loop6): Unmounting Filesystem [ 558.434837][ T8905] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 558.460237][ T8905] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm [ 558.489493][ T8905] BTRFS info (device loop5): force clearing of disk cache [ 558.506572][ T8905] BTRFS info (device loop5): enabling auto defrag [ 558.523912][ T8905] BTRFS info (device loop5): enabling ssd optimizations [ 558.553019][ T8905] BTRFS info (device loop5): max_inline at 0 [ 558.579734][ T8905] BTRFS info (device loop5): enabling disk space caching [ 558.610686][ T8905] BTRFS info (device loop5): disk space caching is enabled [ 558.744650][ T8907] loop3: detected capacity change from 0 to 32768 [ 558.820844][ T8905] BTRFS info (device loop5): rebuilding free space tree [ 558.850975][ T8905] BTRFS info (device loop5): disabling free space tree [ 558.858090][ T8905] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 558.871033][ T8907] XFS (loop3): Mounting V5 Filesystem [ 558.988785][ T8907] XFS (loop3): Ending clean mount [ 558.995252][ T8905] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 559.027480][ T8907] XFS (loop3): Quotacheck needed: Please wait. [ 559.157243][ T8907] XFS (loop3): Quotacheck: Done. [ 559.412068][ T4265] XFS (loop3): Unmounting Filesystem [ 560.521752][ T5141] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 561.054745][ T8954] loop6: detected capacity change from 0 to 32768 [ 561.191620][ T8954] XFS (loop6): Mounting V5 Filesystem [ 561.294381][ T8954] XFS (loop6): Ending clean mount [ 561.318297][ T8954] XFS (loop6): Quotacheck needed: Please wait. [ 561.402833][ T8954] XFS (loop6): Quotacheck: Done. [ 562.522117][ T5898] XFS (loop6): Unmounting Filesystem [ 562.668497][ T9008] loop1: detected capacity change from 0 to 128 [ 562.707318][ T9008] EXT4-fs: Ignoring removed nomblk_io_submit option [ 562.763643][ T9008] EXT4-fs (loop1): Test dummy encryption mode enabled [ 562.772070][ T9008] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 562.856073][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.863069][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.910476][ T9036] loop1: detected capacity change from 0 to 128 [ 564.923114][ T9036] EXT4-fs: Ignoring removed nomblk_io_submit option [ 565.089738][ T9036] EXT4-fs (loop1): Test dummy encryption mode enabled [ 565.097435][ T9036] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 565.829466][ T9027] loop3: detected capacity change from 0 to 32768 [ 565.986330][ T9027] XFS (loop3): Mounting V5 Filesystem [ 566.049030][ T9027] XFS (loop3): Ending clean mount [ 566.073986][ T9027] XFS (loop3): Quotacheck needed: Please wait. [ 566.142118][ T9027] XFS (loop3): Quotacheck: Done. [ 566.288963][ T4265] XFS (loop3): Unmounting Filesystem [ 566.874511][ T9066] loop6: detected capacity change from 0 to 4096 [ 566.985080][ T9066] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 567.266870][ T9067] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 567.594732][ T9066] syz.6.943 (9066) used greatest stack depth: 19792 bytes left [ 567.765951][ T5898] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 568.713530][ T5898] ntfs3: loop6: ntfs_evict_inode r=9 failed, -22. [ 569.011806][ T9077] loop3: detected capacity change from 0 to 128 [ 569.048943][ T9077] EXT4-fs: Ignoring removed nomblk_io_submit option [ 569.079507][ T9077] EXT4-fs (loop3): Test dummy encryption mode enabled [ 569.087008][ T9077] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 569.989060][ T9069] loop1: detected capacity change from 0 to 32768 [ 570.116389][ T9069] JBD2: Ignoring recovery information on journal [ 571.043956][ T9069] JBD2: recovery failed [ 571.048277][ T9069] (syz.1.944,9069,0):ocfs2_journal_load:1134 ERROR: Failed to load journal! [ 571.085173][ T9069] (syz.1.944,9069,0):ocfs2_check_volume:2433 ERROR: ocfs2 journal load failed! -5 [ 571.129477][ T9069] (syz.1.944,9069,0):ocfs2_check_volume:2489 ERROR: status = -5 [ 571.156189][ T9069] (syz.1.944,9069,0):ocfs2_mount_volume:1821 ERROR: status = -5 [ 571.204567][ T9069] (syz.1.944,9069,0):ocfs2_fill_super:1176 ERROR: status = -5 [ 571.707395][ T9082] loop6: detected capacity change from 0 to 32768 [ 571.837188][ T9108] loop1: detected capacity change from 0 to 128 [ 571.848706][ T9108] EXT4-fs: Ignoring removed nomblk_io_submit option [ 572.124962][ T9108] EXT4-fs (loop1): Test dummy encryption mode enabled [ 572.133141][ T9108] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 572.189235][ T9082] XFS (loop6): Mounting V5 Filesystem [ 572.393591][ T9082] XFS (loop6): Ending clean mount [ 572.508251][ T9082] XFS (loop6): Quotacheck needed: Please wait. [ 573.556602][ T9131] loop3: detected capacity change from 0 to 128 [ 573.569690][ T9131] EXT4-fs: Ignoring removed nomblk_io_submit option [ 573.592130][ T9131] EXT4-fs (loop3): Test dummy encryption mode enabled [ 573.599851][ T9131] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 574.112167][ T9082] XFS (loop6): Quotacheck: Done. [ 574.244965][ T9134] loop1: detected capacity change from 0 to 128 [ 574.280376][ T9134] EXT4-fs: Ignoring removed nomblk_io_submit option [ 574.391764][ T9134] EXT4-fs (loop1): Test dummy encryption mode enabled [ 574.399099][ T9134] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 574.782403][ T5898] XFS (loop6): Unmounting Filesystem [ 576.453744][ T9153] loop5: detected capacity change from 0 to 128 [ 577.202626][ T9153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 577.329478][ T9153] EXT4-fs (loop5): Test dummy encryption mode enabled [ 577.357181][ T9153] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 577.883870][ T9172] loop1: detected capacity change from 0 to 4096 [ 579.470419][ T9172] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 579.541444][ T9172] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 582.350481][ T4266] ntfs3: loop1: ntfs_sync_fs r=9 failed, -22. [ 582.362508][ T4266] ntfs3: loop1: ntfs_evict_inode r=9 failed, -22. [ 587.621175][ T9244] Sensor B: ================= START STATUS ================= [ 587.631849][ T9244] Sensor B: Test Pattern: 75% Colorbar [ 587.646143][ T9244] Sensor B: Show Information: All [ 587.648708][ T9241] loop5: detected capacity change from 0 to 128 [ 587.651725][ T9244] Sensor B: Vertical Flip: false [ 587.692696][ T9244] Sensor B: Horizontal Flip: false [ 587.710193][ T9244] Sensor B: Brightness: 128 [ 587.814562][ T9244] Sensor B: Contrast: [ 587.828631][ T9241] EXT4-fs: Ignoring removed nomblk_io_submit option [ 587.859602][ T9244] 128 [ 587.870561][ T9244] Sensor B: Hue: 0 [ 587.897533][ T9244] Sensor B: Saturation: 128 [ 587.990184][ T9244] Sensor B: ================== END STATUS ================== [ 588.106595][ T9241] EXT4-fs (loop5): Test dummy encryption mode enabled [ 588.141658][ T9248] Sensor B: ================= START STATUS ================= [ 588.149549][ T9248] Sensor B: Test Pattern: 75% Colorbar [ 588.156092][ T9248] Sensor B: Show Information: All [ 588.162578][ T9248] Sensor B: Vertical Flip: false [ 588.225367][ T9248] Sensor B: Horizontal Flip: false [ 588.232202][ T9248] Sensor B: Brightness: 128 [ 588.237675][ T9248] Sensor B: Contrast: 128 [ 588.242880][ T9248] Sensor B: Hue: 0 [ 588.246990][ T9248] Sensor B: Saturation: 128 [ 588.252499][ T9248] Sensor B: ================== END STATUS ================== [ 588.610307][ T9241] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities [ 589.477026][ T9237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.512890][ T9242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.734680][ T9262] loop1: detected capacity change from 0 to 128 [ 589.764886][ T9262] EXT4-fs: Ignoring removed nomblk_io_submit option [ 589.789695][ T9262] EXT4-fs (loop1): Test dummy encryption mode enabled [ 589.797438][ T9262] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 591.961594][ T9277] Sensor B: ================= START STATUS ================= [ 591.969342][ T9277] Sensor B: Test Pattern: 75% Colorbar [ 591.975196][ T9277] Sensor B: Show Information: All [ 591.980538][ T9277] Sensor B: Vertical Flip: false [ 591.985953][ T9277] Sensor B: Horizontal Flip: false [ 591.991590][ T9277] Sensor B: Brightness: 128 [ 591.997356][ T9277] Sensor B: Contrast: 128 [ 592.002042][ T9277] Sensor B: Hue: 0 [ 592.006252][ T9277] Sensor B: Saturation: 128 [ 592.011554][ T9277] Sensor B: ================== END STATUS ================== [ 592.685514][ T9273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 592.947304][ T9285] loop0: detected capacity change from 0 to 128 [ 593.013489][ T9285] EXT4-fs: Ignoring removed nomblk_io_submit option [ 593.025935][ T9285] EXT4-fs (loop0): Test dummy encryption mode enabled [ 593.033304][ T9285] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 593.565863][ T9294] binder: 9293:9294 ioctl c00c620f 200000000140 returned -22 [ 594.596640][ T9301] Sensor B: ================= START STATUS ================= [ 594.605841][ T9301] Sensor B: Test Pattern: 75% Colorbar [ 594.684091][ T9301] Sensor B: Show Information: All [ 594.707999][ T9301] Sensor B: Vertical Flip: false [ 595.141457][ T9301] Sensor B: Horizontal Flip: false [ 595.182459][ T9301] Sensor B: Brightness: 128 [ 595.225214][ T9301] Sensor B: Contrast: 128 [ 595.724586][ T9301] Sensor B: Hue: 0 [ 595.728486][ T9301] Sensor B: Saturation: 128 [ 595.848492][ T9298] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 595.850184][ T9301] Sensor B: ================== END STATUS ================== [ 600.996801][ T9364] Sensor B: ================= START STATUS ================= [ 601.127659][ T9364] Sensor B: Test Pattern: 75% Colorbar [ 601.173716][ T9364] Sensor B: Show Information: All [ 601.274263][ T9364] Sensor B: Vertical Flip: false [ 602.053994][ T9364] Sensor B: Horizontal Flip: false [ 602.059396][ T9364] Sensor B: Brightness: 128 [ 602.064377][ T9364] Sensor B: Contrast: 128 [ 602.069141][ T9364] Sensor B: Hue: 0 [ 602.073327][ T9364] Sensor B: Saturation: 128 [ 602.078161][ T9364] Sensor B: ================== END STATUS ================== [ 602.695333][ T9359] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.905571][ T9379] Sensor B: ================= START STATUS ================= [ 602.913320][ T9379] Sensor B: Test Pattern: 75% Colorbar [ 602.919669][ T9379] Sensor B: Show Information: All [ 602.925359][ T9379] Sensor B: Vertical Flip: false [ 602.931355][ T9379] Sensor B: Horizontal Flip: false [ 602.937312][ T9379] Sensor B: Brightness: 128 [ 602.942342][ T9379] Sensor B: Contrast: 128 [ 602.947334][ T9379] Sensor B: Hue: 0 [ 602.954181][ T9379] Sensor B: Saturation: 128 [ 602.964608][ T9379] Sensor B: ================== END STATUS ================== [ 603.751350][ T9375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.995915][ T9381] loop6: detected capacity change from 0 to 32768 [ 604.064774][ T9381] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 604.076354][ T9386] loop5: detected capacity change from 0 to 32768 [ 604.139084][ T9386] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 604.177088][ T9386] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode. [ 604.223137][ T5898] ocfs2: Unmounting device (7,6) on (node local) [ 604.528234][ T5141] ocfs2: Unmounting device (7,5) on (node local) [ 607.190573][ T9430] 9pnet_fd: Insufficient options for proto=fd [ 607.471115][ T9431] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 608.862362][ T9438] Sensor B: ================= START STATUS ================= [ 608.870239][ T9438] Sensor B: Test Pattern: 75% Colorbar [ 608.876123][ T9438] Sensor B: Show Information: All [ 608.881498][ T9438] Sensor B: Vertical Flip: false [ 608.886771][ T9438] Sensor B: Horizontal Flip: false [ 608.892248][ T9438] Sensor B: Brightness: 128 [ 608.897032][ T9438] Sensor B: Contrast: 128 [ 608.901595][ T9438] Sensor B: Hue: 0 [ 608.905663][ T9438] Sensor B: Saturation: 128 [ 608.910393][ T9438] Sensor B: ================== END STATUS ================== [ 609.477706][ T9431] 9pnet_fd: Insufficient options for proto=fd [ 613.336504][ T9490] loop6: detected capacity change from 0 to 1024 [ 613.407154][ T9490] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 614.282139][ T5898] EXT4-fs (loop6): unmounting filesystem. [ 618.688493][ T9550] loop3: detected capacity change from 0 to 1024 [ 618.789315][ T9550] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 619.066848][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 619.767778][ T9571] loop0: detected capacity change from 0 to 4096 [ 624.293141][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.299518][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.620757][ T9664] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 628.996776][ T9665] 9pnet_fd: Insufficient options for proto=fd [ 629.202006][ T9669] snd_dummy snd_dummy.0: control 0:0:8:syz0:0 is already present [ 629.374478][ T9670] 9pnet_fd: Insufficient options for proto=fd [ 635.130197][ T8978] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 635.308799][ T9741] netlink: 'syz.3.1135': attribute type 3 has an invalid length. [ 635.325856][ T8978] usb 2-1: Using ep0 maxpacket: 16 [ 635.349347][ T8978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 635.421608][ T8978] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 635.442433][ T9747] hub 9-0:1.0: USB hub found [ 635.449187][ T9747] hub 9-0:1.0: 1 port detected [ 635.493661][ T8978] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 635.523995][ T9743] netdevsim netdevsim0: Direct firmware load for / [ 635.523995][ T9743] failed with error -2 [ 635.535238][ T9743] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 635.535238][ T9743] [ 635.556308][ T8978] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 635.569590][ T9748] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1137'. [ 635.589156][ T9748] device erspan0 entered promiscuous mode [ 635.595038][ T8978] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 635.610796][ T8978] usb 2-1: config 0 descriptor?? [ 635.912004][ T9756] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1140'. [ 636.087572][ T8978] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input5 [ 636.219359][ T8978] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 636.393089][ T8978] usb 2-1: USB disconnect, device number 3 [ 636.678991][ T9766] fido_id[9766]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 637.983375][ T9806] netlink: 'syz.1.1158': attribute type 1 has an invalid length. [ 638.010797][ T9806] netlink: 'syz.1.1158': attribute type 2 has an invalid length. [ 638.390965][ T9816] program syz.5.1160 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 638.499943][ T27] audit: type=1326 audit(1764371048.350:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fd8f749 code=0x7ffc0000 [ 638.568732][ T27] audit: type=1326 audit(1764371048.400:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a9fd8df90 code=0x7ffc0000 [ 638.664453][ T27] audit: type=1326 audit(1764371048.410:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fd8f749 code=0x7ffc0000 [ 638.750552][ T27] audit: type=1326 audit(1764371048.410:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a9fd8f749 code=0x7ffc0000 [ 638.820181][ T27] audit: type=1326 audit(1764371048.420:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fd8f749 code=0x7ffc0000 [ 638.923209][ T27] audit: type=1326 audit(1764371048.420:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f8a9fd8f749 code=0x7ffc0000 [ 639.053205][ T27] audit: type=1326 audit(1764371048.420:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fd8f749 code=0x7ffc0000 [ 639.208048][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1167'. [ 639.222475][ T27] audit: type=1326 audit(1764371048.420:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f8a9fd8f749 code=0x7ffc0000 [ 639.359923][ T27] audit: type=1326 audit(1764371048.460:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a9fd8f749 code=0x7ffc0000 [ 639.494690][ T27] audit: type=1326 audit(1764371048.470:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.1.1161" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a9fd8df90 code=0x7ffc0000 [ 639.920130][ T4340] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 640.160220][ T4340] usb 4-1: Using ep0 maxpacket: 8 [ 640.176982][ T4340] usb 4-1: config 0 has an invalid interface number: 122 but max is 0 [ 640.221070][ T4340] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 640.264194][ T4340] usb 4-1: config 0 has no interface number 0 [ 640.291307][ T4340] usb 4-1: config 0 interface 122 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 640.355357][ T4340] usb 4-1: config 0 interface 122 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 640.460240][ T4340] usb 4-1: config 0 interface 122 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 8 [ 640.498662][ T4340] usb 4-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 5.b7 [ 640.573640][ T4340] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.617636][ T4340] usb 4-1: Product: syz [ 640.629935][ T4340] usb 4-1: Manufacturer: syz [ 640.656056][ T4340] usb 4-1: SerialNumber: syz [ 640.689623][ T4340] usb 4-1: config 0 descriptor?? [ 640.716564][ T9843] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 641.219178][ T4340] usb 4-1: NFC: intf ffff888027abd000 id ffffffff8d3fc6e0 [ 641.256150][ T4340] usb 4-1: USB disconnect, device number 3 [ 641.657544][ T9872] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1180'. [ 642.590233][ T8978] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 642.801838][ T8978] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 642.828901][ T8978] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 642.895541][ T8978] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 642.952538][ T8978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 643.047605][ T8978] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 643.117970][ T8978] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 643.174242][ T8978] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 643.229048][ T8978] usb 1-1: Product: syz [ 643.247619][ T8978] usb 1-1: Manufacturer: syz [ 643.278848][ T9915] syz.6.1194 uses obsolete (PF_INET,SOCK_PACKET) [ 643.297810][ T8978] cdc_wdm 1-1:1.0: skipping garbage [ 643.336084][ T8978] cdc_wdm 1-1:1.0: skipping garbage [ 643.476809][ T8978] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 643.540529][ T8978] cdc_wdm 1-1:1.0: Unknown control protocol [ 643.767620][ T9893] mmap: syz.0.1186 (9893) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 643.871212][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 643.877958][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 643.889588][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 643.896342][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 643.905637][ C0] cdc_wdm 1-1:1.0: nonzero urb status received: -71 [ 643.912470][ C0] cdc_wdm 1-1:1.0: wdm_int_callback - 0 bytes [ 643.919864][ T8978] usb 1-1: USB disconnect, device number 2 [ 645.549039][ T9955] syz.5.1202 sent an empty control message without MSG_MORE. [ 645.968246][ T9964] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1205'. [ 646.370904][ T9974] vcan0: Master is either lo or non-ether device [ 646.524883][ T9976] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1211'. [ 646.868441][ T9986] device syzkaller0 entered promiscuous mode [ 647.068298][ T9992] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1216'. [ 648.041571][ T9997] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1217'. [ 648.057497][ T9997] device gretap0 left promiscuous mode [ 648.079445][ T9997] bridge0: port 3(gretap0) entered disabled state [ 648.121871][ T9997] device bridge_slave_1 left promiscuous mode [ 648.128661][ T9997] bridge0: port 2(bridge_slave_1) entered disabled state [ 648.147978][ T9997] device bridge_slave_0 left promiscuous mode [ 648.156169][ T9997] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.236384][T10002] syz.5.1219 (10002): drop_caches: 2 [ 650.494204][T10048] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 650.936939][T10057] device lo entered promiscuous mode [ 650.957343][T10057] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 651.449985][T10068] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1238'. [ 651.559803][T10068] netlink: 'syz.6.1238': attribute type 30 has an invalid length. [ 651.611174][T10068] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.620363][T10068] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.629543][T10068] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 651.638781][T10068] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 652.246437][ T4673] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.426337][ T4673] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.586333][ T4673] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.719677][ T4673] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 653.253036][T10107] netlink: 'syz.1.1253': attribute type 12 has an invalid length. [ 653.277388][T10107] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1253'. [ 653.323945][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 653.335344][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 653.343997][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 653.359791][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 653.369357][T10110] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 653.386517][T10110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 654.707767][T10106] chnl_net:caif_netlink_parms(): no params data found [ 654.931535][ T4673] bridge0: port 3(gretap0) entered disabled state [ 655.052484][ T4673] device gretap0 left promiscuous mode [ 655.063320][ T4673] bridge0: port 3(gretap0) entered disabled state [ 655.399738][T10106] bridge0: port 1(bridge_slave_0) entered blocking state [ 655.410254][T10110] Bluetooth: hci3: command 0x0409 tx timeout [ 655.431449][T10145] netlink: 'syz.0.1258': attribute type 1 has an invalid length. [ 655.437525][T10106] bridge0: port 1(bridge_slave_0) entered disabled state [ 655.469484][T10106] device bridge_slave_0 entered promiscuous mode [ 655.686524][T10106] bridge0: port 2(bridge_slave_1) entered blocking state [ 655.710928][T10106] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.764683][T10106] device bridge_slave_1 entered promiscuous mode [ 656.410703][T10106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.126575][T10106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 657.285054][ T4673] device hsr_slave_0 left promiscuous mode [ 657.303548][ T4673] device hsr_slave_1 left promiscuous mode [ 657.323789][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 657.366712][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 657.419944][ T4673] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 657.490295][T10110] Bluetooth: hci3: command 0x041b tx timeout [ 657.497978][ T4673] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 657.566824][ T4673] device bridge_slave_1 left promiscuous mode [ 657.608737][ T4673] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.661831][ T4673] device bridge_slave_0 left promiscuous mode [ 657.704034][ T4673] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.837372][ T4673] device veth1_macvtap left promiscuous mode [ 657.873014][ T4673] device veth0_macvtap left promiscuous mode [ 657.902446][ T4673] device veth1_vlan left promiscuous mode [ 657.940555][ T4673] device veth0_vlan left promiscuous mode [ 659.221985][ T8973] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 659.422049][ T8973] usb 2-1: Using ep0 maxpacket: 32 [ 659.443991][ T8973] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 659.490229][ T8973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 659.525211][ T8973] usb 2-1: config 0 descriptor?? [ 659.570184][T10110] Bluetooth: hci3: command 0x040f tx timeout [ 659.785914][ T8973] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 659.856307][ T8973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 659.879699][ T8973] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 659.887379][ T8973] usb 2-1: media controller created [ 659.908107][ T8973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 659.993404][ T8973] az6027: usb out operation failed. (-71) [ 660.023160][ T8973] az6027: usb out operation failed. (-71) [ 660.029097][ T8973] stb0899_attach: Driver disabled by Kconfig [ 660.036762][ T8973] az6027: no front-end attached [ 660.036762][ T8973] [ 660.058729][ T8973] az6027: usb out operation failed. (-71) [ 660.068629][ T8973] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 660.090259][ T8973] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 660.119205][ T8973] dvb-usb: schedule remote query interval to 400 msecs. [ 660.144558][ T8973] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 660.163545][ T8973] usb 2-1: USB disconnect, device number 4 [ 660.281249][ T8973] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 660.319109][ T4673] team0 (unregistering): Port device team_slave_1 removed [ 660.378401][ T4673] team0 (unregistering): Port device team_slave_0 removed [ 660.430868][ T4673] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.483264][ T4673] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 661.114745][ T4673] bond0 (unregistering): Released all slaves [ 661.292596][T10106] team0: Port device team_slave_0 added [ 661.343875][T10106] team0: Port device team_slave_1 added [ 661.547834][T10106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 661.580935][T10240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1280'. [ 661.620106][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.650140][T10110] Bluetooth: hci3: command 0x0419 tx timeout [ 661.657389][T10240] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1280'. [ 661.736276][T10246] program syz.3.1284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 661.764774][T10106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.815012][T10106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.871059][T10106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 661.961295][T10253] af_packet: tpacket_rcv: packet too big, clamped from 39 to 4294967272. macoff=96 [ 661.990377][T10106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.203641][T10106] device hsr_slave_0 entered promiscuous mode [ 662.230251][T10106] device hsr_slave_1 entered promiscuous mode [ 662.700205][ T4340] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 662.717354][T10274] process 'syz.1.1291' launched './file0' with NULL argv: empty string added [ 662.893544][ T4340] usb 1-1: Using ep0 maxpacket: 16 [ 662.905516][ T4340] usb 1-1: config index 0 descriptor too short (expected 4495, got 71) [ 662.932494][ T4340] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 662.963059][ T4340] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 663.005174][ T4340] usb 1-1: config 0 has no interface number 0 [ 663.057965][ T4340] usb 1-1: New USB device found, idVendor=046c, idProduct=14e0, bcdDevice= 0.01 [ 663.108490][ T4340] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 663.125250][ T4340] usb 1-1: Product: syz [ 663.129820][ T4340] usb 1-1: Manufacturer: syz [ 663.136783][ T4340] usb 1-1: SerialNumber: syz [ 663.190918][ T4340] usb 1-1: config 0 descriptor?? [ 663.889700][ T8979] usb 1-1: USB disconnect, device number 3 [ 664.045375][T10106] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 664.098861][T10106] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 664.114328][T10106] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 664.149570][T10106] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 664.551458][T10106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.604387][T10307] program syz.0.1296 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 664.624561][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 664.643499][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 664.680323][T10106] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.723781][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 664.740919][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 664.772799][ T4651] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.779980][ T4651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.819384][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 664.866384][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 664.908900][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 664.934013][ T4651] bridge0: port 2(bridge_slave_1) entered blocking state [ 664.941670][ T4651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 664.992251][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 665.012517][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 665.038906][T10317] tipc: Started in network mode [ 665.045201][T10317] tipc: Node identity ac1414aa, cluster identity 4711 [ 665.072383][T10317] tipc: Enabled bearer , priority 10 [ 665.102300][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 665.153838][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 665.212718][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 665.240767][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 665.281844][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 665.346278][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 665.362098][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 665.387471][T10326] netlink: 'syz.6.1300': attribute type 33 has an invalid length. [ 665.404299][T10326] netlink: 152 bytes leftover after parsing attributes in process `syz.6.1300'. [ 665.453720][T10106] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 665.464795][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 665.464819][ T27] audit: type=1326 audit(1764371075.310:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10327 comm="syz.0.1301" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab18f749 code=0x0 [ 665.537208][T10106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 665.576172][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 665.587538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 665.700201][ T128] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 665.892832][ T128] usb 7-1: config 36 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 665.924494][ T128] usb 7-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 665.983320][ T128] usb 7-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 666.023575][ T128] usb 7-1: Manufacturer: syz [ 666.044406][ T128] usb 7-1: SerialNumber: syz [ 666.091719][ T8979] tipc: Node number set to 2886997162 [ 666.135726][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 666.154381][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 666.184048][T10106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 666.322478][ T128] usbhid 7-1:36.0: couldn't find an input interrupt endpoint [ 666.371667][ T128] usb 7-1: USB disconnect, device number 2 [ 666.935141][ T8979] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 667.144785][ T8979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 667.170238][ T8979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 667.214331][ T8979] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 667.245529][ T8979] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 667.288132][ T8979] usb 4-1: config 0 descriptor?? [ 667.419674][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 667.447142][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 667.529234][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 667.546398][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 667.578274][T10106] device veth0_vlan entered promiscuous mode [ 667.588068][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 667.604291][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 667.638879][T10106] device veth1_vlan entered promiscuous mode [ 667.706773][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 667.720636][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 667.739950][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 667.761341][T10393] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x6 [ 667.808467][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 667.824232][T10106] device veth0_macvtap entered promiscuous mode [ 667.878268][T10106] device veth1_macvtap entered promiscuous mode [ 667.958074][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 667.958316][ T8979] usbhid 4-1:0.0: can't add hid device: -71 [ 667.995757][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.016194][ T8979] usbhid: probe of 4-1:0.0 failed with error -71 [ 668.050944][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.082341][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.093940][ T8979] usb 4-1: USB disconnect, device number 4 [ 668.105792][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.117098][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.130338][ T128] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 668.140101][ T4340] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 668.155412][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 668.167826][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.183442][T10106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 668.195938][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 668.231338][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 668.256983][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 668.330431][ T128] usb 7-1: Using ep0 maxpacket: 8 [ 668.343465][ T128] usb 7-1: unable to get BOS descriptor or descriptor too short [ 668.368684][ T4651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 668.382808][ T128] usb 7-1: config 9 has an invalid interface number: 5 but max is 1 [ 668.416010][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.430182][ T128] usb 7-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 668.483917][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.495110][ T128] usb 7-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 668.515211][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.536895][ T128] usb 7-1: config 9 has no interface number 0 [ 668.567112][ T128] usb 7-1: config 9 interface 5 altsetting 9 has an ignored endpoint with address 0x1, skipping [ 668.588669][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.629310][ T128] usb 7-1: config 9 interface 5 has no altsetting 0 [ 668.650761][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.674012][ T128] usb 7-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=5d.a8 [ 668.720669][ T128] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.733310][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.763799][ T128] usb 7-1: Product: syz [ 668.768315][ T128] usb 7-1: Manufacturer: syz [ 668.773903][T10106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 668.819558][ T128] usb 7-1: SerialNumber: syz [ 668.827275][T10106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 668.900281][T10106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 668.912075][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 668.938933][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 668.970313][ T4340] usb 2-1: Using ep0 maxpacket: 32 [ 669.002796][T10106] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.026095][T10106] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.056777][T10106] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.087652][T10106] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 669.199251][T10399] SET target dimension over the limit! [ 669.369001][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.421783][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.568841][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 669.604310][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 669.625697][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 669.687994][ T4396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 670.435327][T10399] QAT: Device 128 not found [ 672.004327][ T128] usb 7-1: USB disconnect, device number 3 [ 673.827953][ T4340] usb 2-1: unable to get BOS descriptor or descriptor too short [ 673.845251][ T4340] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 673.867317][ T4340] usb 2-1: can't read configurations, error -71 [ 673.931807][T10475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1326'. [ 673.980328][T10475] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1326'. [ 675.330682][ T128] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 675.478083][T10522] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1340'. [ 675.521720][ T128] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.557927][ T128] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 675.580176][ T128] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 675.589402][ T128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.641728][ T128] usb 2-1: config 0 descriptor?? [ 675.686522][T10524] netlink: 'syz.5.1341': attribute type 11 has an invalid length. [ 676.071995][ T128] kovaplus 0003:1E7D:2D50.0002: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 676.669324][ T128] kovaplus 0003:1E7D:2D50.0002: couldn't init struct kovaplus_device [ 676.685714][ T128] kovaplus 0003:1E7D:2D50.0002: couldn't install mouse [ 676.706677][ T128] kovaplus: probe of 0003:1E7D:2D50.0002 failed with error -71 [ 676.741525][ T128] usb 2-1: USB disconnect, device number 7 [ 677.264677][T10549] fido_id[10549]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 678.336188][T10578] team0: Device ipip0 is of different type [ 682.572812][T10651] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1380'. [ 682.585727][T10651] device gretap0 left promiscuous mode [ 682.741145][T10651] bridge0: port 3(gretap0) entered disabled state [ 682.767188][T10651] device bridge_slave_1 left promiscuous mode [ 682.789903][T10651] bridge0: port 2(bridge_slave_1) entered disabled state [ 682.802936][T10651] device bridge_slave_0 left promiscuous mode [ 682.819517][T10651] bridge0: port 1(bridge_slave_0) entered disabled state [ 682.947820][T10618] syz.6.1372 (10618): drop_caches: 2 [ 684.680106][ T8978] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 684.881706][ T8978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 684.924000][ T8978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 684.978591][ T8978] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 685.008562][ T8978] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.106887][ T8978] usb 6-1: config 0 descriptor?? [ 685.117311][T10695] vcan0: tx address claim with different name [ 685.345716][T10699] device ip6tnl1 entered promiscuous mode [ 685.733783][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.740519][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.783369][ T8978] usbhid 6-1:0.0: can't add hid device: -71 [ 685.797611][ T8978] usbhid: probe of 6-1:0.0 failed with error -71 [ 685.874117][ T8978] usb 6-1: USB disconnect, device number 2 [ 685.875602][T10705] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1398'. [ 686.987305][T10716] kvm [10714]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000008 [ 688.143762][T10748] loop0: detected capacity change from 0 to 4096 [ 688.662362][T10748] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 689.042416][T10749] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 690.081603][T10753] loop1: detected capacity change from 0 to 128 [ 690.093110][T10753] EXT4-fs: Ignoring removed nomblk_io_submit option [ 690.204169][T10753] EXT4-fs (loop1): Test dummy encryption mode enabled [ 690.212611][T10753] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 690.480147][ T4272] ntfs3: loop0: ntfs_sync_fs r=9 failed, -22. [ 690.488782][ T4272] ntfs3: loop0: ntfs_evict_inode r=9 failed, -22. [ 691.294912][T10772] loop3: detected capacity change from 0 to 128 [ 691.343299][T10772] EXT4-fs: Ignoring removed nomblk_io_submit option [ 691.372322][T10772] EXT4-fs (loop3): Test dummy encryption mode enabled [ 691.379676][T10772] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities [ 691.956517][T10756] loop0: detected capacity change from 0 to 32768 [ 691.982909][T10756] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1414 (10756) [ 692.072936][T10756] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 692.146613][T10756] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 692.212194][T10756] BTRFS info (device loop0): force clearing of disk cache [ 692.253022][T10756] BTRFS info (device loop0): enabling auto defrag [ 692.290198][T10756] BTRFS info (device loop0): enabling ssd optimizations [ 692.297427][T10756] BTRFS info (device loop0): max_inline at 0 [ 692.377578][T10756] BTRFS info (device loop0): enabling disk space caching [ 692.416762][T10756] BTRFS info (device loop0): disk space caching is enabled [ 692.626337][T10756] BTRFS info (device loop0): rebuilding free space tree [ 692.705846][T10756] BTRFS info (device loop0): disabling free space tree [ 692.730524][T10756] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 692.850218][T10756] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 693.017482][T10783] loop3: detected capacity change from 0 to 32768 [ 693.044844][T10783] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by syz.3.1424 (10783) [ 693.577007][ T5518] BTRFS warning: duplicate device /dev/loop3 devid 1 generation 8 scanned by udevd (5518) [ 693.804029][ T4272] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 695.156294][T10853] loop0: detected capacity change from 0 to 128 [ 695.168536][T10853] EXT4-fs: Ignoring removed nomblk_io_submit option [ 695.776020][T10851] loop6: detected capacity change from 0 to 128 [ 695.788829][T10851] EXT4-fs: Ignoring removed nomblk_io_submit option [ 695.840156][T10851] EXT4-fs (loop6): Test dummy encryption mode enabled [ 695.847514][T10851] EXT4-fs (loop6): couldn't mount as ext3 due to feature incompatibilities [ 696.120690][T10853] EXT4-fs (loop0): Test dummy encryption mode enabled [ 696.128616][ T5518] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 696.184802][T10853] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities [ 697.916085][T10866] loop6: detected capacity change from 0 to 4096 [ 698.677395][T10866] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 699.241139][T10866] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 699.376200][ T5898] ntfs3: loop6: ntfs_sync_fs r=9 failed, -22. [ 699.393715][ T5898] ntfs3: loop6: ntfs_evict_inode r=9 failed, -22. [ 700.409732][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1459'. [ 701.010339][T10926] ipt_ECN: cannot use operation on non-tcp rule [ 701.430141][ T8978] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 701.631770][ T8978] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 701.650159][ T8978] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 701.680865][ T8978] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 701.746044][ T8978] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.806150][ T8978] usb 1-1: config 0 descriptor?? [ 702.244811][ T8978] kovaplus 0003:1E7D:2D50.0003: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.0-1/input0 [ 702.429287][T10940] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1473'. [ 703.047708][ T8978] kovaplus 0003:1E7D:2D50.0003: couldn't init struct kovaplus_device [ 703.059075][ T8978] kovaplus 0003:1E7D:2D50.0003: couldn't install mouse [ 703.081175][ T8978] kovaplus: probe of 0003:1E7D:2D50.0003 failed with error -71 [ 703.136592][ T8978] usb 1-1: USB disconnect, device number 4 [ 703.632974][T10966] fido_id[10966]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 703.793101][T10977] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1486'. [ 707.540200][ T5078] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 707.761973][ T5078] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 707.775858][ T5078] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 707.777165][T11073] tipc: Started in network mode [ 707.820128][T11073] tipc: Node identity aaaaaaaaaa38, cluster identity 4711 [ 707.827523][ T5078] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 707.854905][T11073] tipc: Enabled bearer , priority 0 [ 707.872755][ T5078] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 707.907962][ T5078] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 707.975923][ T5078] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 708.075923][ T5078] usb 7-1: Product: syz [ 708.085969][ T5078] usb 7-1: Manufacturer: syz [ 708.113142][ T5078] cdc_wdm 7-1:1.0: skipping garbage [ 708.149388][ T5078] cdc_wdm 7-1:1.0: skipping garbage [ 708.194419][ T5078] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 708.211496][ T5078] cdc_wdm 7-1:1.0: Unknown control protocol [ 708.324810][ T5078] usb 7-1: USB disconnect, device number 4 [ 708.971479][ T8702] tipc: Node number set to 9611946 [ 709.176825][T11108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 709.210468][T11108] device gretap0 left promiscuous mode [ 709.219041][T11108] bridge0: port 3(gretap0) entered disabled state [ 709.231930][T11108] device bridge_slave_1 left promiscuous mode [ 709.238735][T11108] bridge0: port 2(bridge_slave_1) entered disabled state [ 709.273893][T11108] device bridge_slave_0 left promiscuous mode [ 709.288362][T11108] bridge0: port 1(bridge_slave_0) entered disabled state [ 709.390162][ T8702] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 709.455343][T11113] netlink: 'syz.1.1540': attribute type 4 has an invalid length. [ 709.584354][ T8702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 709.618658][ T8702] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 709.640523][ T92] block nbd0: Attempted send on invalid socket [ 709.647331][ T92] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2 [ 709.687856][ T8702] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 709.713066][ T8702] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.802850][ T8702] usb 6-1: config 0 descriptor?? [ 710.453081][ T8702] usbhid 6-1:0.0: can't add hid device: -71 [ 710.471069][ T8702] usbhid: probe of 6-1:0.0 failed with error -71 [ 710.508929][ T8702] usb 6-1: USB disconnect, device number 3 [ 712.789643][T11168] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1555'. [ 713.611868][ T8979] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 713.832111][ T8979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 713.853633][ T8979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 713.875298][ T8979] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 713.897507][ T8979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.931801][ T8979] usb 7-1: config 0 descriptor?? [ 714.341754][T11207] netlink: 'syz.1.1569': attribute type 8 has an invalid length. [ 714.593728][T11182] IPVS: sh: FWM 3 0x00000003 - no destination available [ 714.616285][ T8979] usbhid 7-1:0.0: can't add hid device: -71 [ 714.625218][ T8979] usbhid: probe of 7-1:0.0 failed with error -71 [ 714.656495][ T8979] usb 7-1: USB disconnect, device number 5 [ 715.565171][T11225] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1572'. [ 716.520228][T10837] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 716.725719][T10837] usb 6-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 716.753118][T10837] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 716.780921][T10837] usb 6-1: Product: syz [ 716.787043][T10837] usb 6-1: Manufacturer: syz [ 716.792434][T10837] usb 6-1: SerialNumber: syz [ 716.822246][T10837] usb 6-1: config 0 descriptor?? [ 717.053968][T11236] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.063418][T11236] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.072294][T11236] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.081432][T11236] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 717.217505][T11236] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 717.252414][T10837] usb-storage 6-1:0.0: USB Mass Storage device detected [ 717.361841][T10837] usb 6-1: USB disconnect, device number 4 [ 717.580252][ T8979] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 717.773790][ T8979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 717.835756][ T8979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 717.865017][ T8979] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 717.875090][ T8979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 717.910906][ T8979] usb 1-1: config 0 descriptor?? [ 718.526402][T11253] IPVS: fo: FWM 3 0x00000003 - no destination available [ 718.588823][ T8979] usbhid 1-1:0.0: can't add hid device: -71 [ 718.597595][ T8979] usbhid: probe of 1-1:0.0 failed with error -71 [ 718.660267][ T8979] usb 1-1: USB disconnect, device number 5 [ 719.771331][ T8978] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 719.990746][ T8978] usb 1-1: Using ep0 maxpacket: 32 [ 720.077570][T11287] SET target dimension over the limit! [ 720.113862][T11296] device geneve3 entered promiscuous mode [ 720.131970][T11287] QAT: Device 128 not found [ 720.900055][T11319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1596'. [ 722.090187][ T5078] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 722.281776][ T5078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.330128][ T5078] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 722.432505][ T5078] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 722.504348][ T5078] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.569575][ T5078] usb 6-1: config 0 descriptor?? [ 723.224619][ T5078] usbhid 6-1:0.0: can't add hid device: -71 [ 723.243333][ T5078] usbhid: probe of 6-1:0.0 failed with error -71 [ 723.315147][ T5078] usb 6-1: USB disconnect, device number 5 [ 723.476431][ T8978] usb 1-1: unable to get BOS descriptor or descriptor too short [ 723.499934][ T8978] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 723.508530][ T8978] usb 1-1: can't read configurations, error -71 [ 724.068130][T11345] capability: warning: `syz.1.1607' uses 32-bit capabilities (legacy support in use) [ 726.490127][T10837] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 726.600221][ T5078] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 726.690354][T10837] usb 6-1: Using ep0 maxpacket: 32 [ 726.836594][ T5078] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 726.903434][ T5078] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.923360][T11381] SET target dimension over the limit! [ 726.972655][T11381] QAT: Device 128 not found [ 727.011084][ T5078] usb 2-1: config 0 descriptor?? [ 727.060647][ T5078] cp210x 2-1:0.0: cp210x converter detected [ 727.442360][ T5078] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 727.544869][ T5078] usb 2-1: cp210x converter now attached to ttyUSB0 [ 727.752938][T11400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1621'. [ 728.769515][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 728.807131][T11412] device bridge_slave_1 left promiscuous mode [ 728.833467][T11412] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.869458][T11412] device bridge_slave_0 left promiscuous mode [ 728.877805][T11412] bridge0: port 1(bridge_slave_0) entered disabled state [ 729.634619][T11419] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1627'. [ 729.718191][T11419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1627'. [ 730.312901][T10837] usb 6-1: unable to get BOS descriptor or descriptor too short [ 730.338972][T10837] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 730.372864][ T8979] usb 2-1: USB disconnect, device number 8 [ 730.407776][T10837] usb 6-1: can't read configurations, error -71 [ 730.475933][ T8979] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 730.609413][ T8979] cp210x 2-1:0.0: device disconnected [ 731.560133][T10837] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 731.843317][T10837] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 731.877634][T10837] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.940760][T10837] usb 6-1: config 0 descriptor?? [ 732.160315][ T8981] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 732.354595][T11445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.365551][ T8981] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.392759][ T8981] usb 1-1: config 0 has no interfaces? [ 732.408310][ T8981] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 732.430127][ T8981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 732.448685][T11445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.483256][ T8981] usb 1-1: config 0 descriptor?? [ 732.525809][T11445] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 732.536313][T11445] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 732.705449][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1634'. [ 732.729892][ T8979] usb 1-1: USB disconnect, device number 8 [ 732.900108][ T8981] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 733.093690][ T8981] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 733.115414][ T8981] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 733.202219][ T8981] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 733.252689][ T8981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.274967][ T8981] usb 4-1: config 0 descriptor?? [ 733.745667][ T8981] kovaplus 0003:1E7D:2D50.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.3-1/input0 [ 733.944292][T11474] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 734.524264][T11490] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1645'. [ 734.537906][ T5078] usb 6-1: USB disconnect, device number 7 [ 734.745596][ T8981] kovaplus 0003:1E7D:2D50.0004: couldn't init struct kovaplus_device [ 734.756555][ T8981] kovaplus 0003:1E7D:2D50.0004: couldn't install mouse [ 734.811281][ T8981] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -71 [ 734.869786][ T8981] usb 4-1: USB disconnect, device number 5 [ 735.000089][ T5078] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 735.095252][T11499] fido_id[11499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 735.197787][ T5078] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 735.214707][ T5078] usb 6-1: config 0 interface 0 has no altsetting 0 [ 735.239435][ T5078] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 735.259011][ T5078] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 735.272766][ T5078] usb 6-1: Product: syz [ 735.277320][ T5078] usb 6-1: Manufacturer: syz [ 735.282707][ T5078] usb 6-1: SerialNumber: syz [ 735.292786][ T5078] usb 6-1: config 0 descriptor?? [ 735.303576][ T5078] usb 6-1: selecting invalid altsetting 0 [ 735.430159][T10837] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 735.621814][T10837] usb 2-1: config 0 has no interfaces? [ 735.628700][T10837] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 735.670152][T10837] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 735.694559][T10837] usb 2-1: SerialNumber: syz [ 735.745832][T10837] usb 2-1: config 0 descriptor?? [ 735.764429][ T5078] usb 6-1: USB disconnect, device number 8 [ 735.966354][ T8981] usb 2-1: USB disconnect, device number 9 [ 736.920250][T11517] pit: kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 738.416330][T11553] netlink: 'syz.6.1668': attribute type 1 has an invalid length. [ 738.424547][T11553] netlink: 'syz.6.1668': attribute type 2 has an invalid length. [ 739.838426][ T27] audit: type=1326 audit(1764371149.690:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11585 comm="syz.3.1681" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb62078f749 code=0x0 [ 740.653561][T11604] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (13) [ 741.460152][ T8979] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 741.682068][ T8979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.708575][ T8979] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.720073][ T8979] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 741.729678][ T8979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.764186][ T8979] usb 7-1: config 0 descriptor?? [ 742.388959][ T8979] usbhid 7-1:0.0: can't add hid device: -71 [ 742.397441][ T8979] usbhid: probe of 7-1:0.0 failed with error -71 [ 742.435306][ T8979] usb 7-1: USB disconnect, device number 6 [ 743.236679][T11652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1704'. [ 743.659106][ T27] audit: type=1326 audit(1764371153.510:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62078f749 code=0x7ffc0000 [ 743.786385][ T27] audit: type=1326 audit(1764371153.540:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62078f749 code=0x7ffc0000 [ 743.855552][ T27] audit: type=1326 audit(1764371153.620:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fb62078f749 code=0x7ffc0000 [ 743.951872][ T27] audit: type=1326 audit(1764371153.620:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62078f749 code=0x7ffc0000 [ 744.072583][ T27] audit: type=1326 audit(1764371153.620:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fb62078f749 code=0x7ffc0000 [ 744.155660][ T27] audit: type=1326 audit(1764371153.620:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62078f749 code=0x7ffc0000 [ 744.266735][ T27] audit: type=1326 audit(1764371153.620:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fb62078f749 code=0x7ffc0000 [ 744.348837][ T27] audit: type=1326 audit(1764371153.620:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb62078f749 code=0x7ffc0000 [ 744.527268][ T27] audit: type=1326 audit(1764371153.620:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11661 comm="syz.3.1706" exe="/root/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7fb62078f749 code=0x7ffc0000 [ 745.182868][ T8979] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 745.371587][ T8979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.409133][ T8979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.449831][ T8979] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 745.480135][ T8979] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.506934][ T8979] usb 1-1: config 0 descriptor?? [ 746.150537][ T8979] usbhid 1-1:0.0: can't add hid device: -71 [ 746.161940][ T8979] usbhid: probe of 1-1:0.0 failed with error -71 [ 746.249211][ T8979] usb 1-1: USB disconnect, device number 9 [ 746.411374][T11702] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1718'. [ 747.175757][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.182444][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 749.760175][ T8702] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 749.972273][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 749.983825][ T8702] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 749.994333][ T8702] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 750.004377][ T8702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.021859][ T8702] usb 1-1: config 0 descriptor?? [ 750.652009][T11746] IPVS: fo: FWM 3 0x00000003 - no destination available [ 750.673554][ T8702] usbhid 1-1:0.0: can't add hid device: -71 [ 750.685324][ T8702] usbhid: probe of 1-1:0.0 failed with error -71 [ 750.719023][ T8702] usb 1-1: USB disconnect, device number 10 [ 751.646999][T11733] Set syz1 is full, maxelem 65536 reached [ 752.096716][T11794] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1745'. [ 753.680064][ T8979] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 753.876982][ T8979] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 753.909068][ T8979] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.968800][ T8979] usb 1-1: Product: syz [ 754.012747][ T8979] usb 1-1: Manufacturer: syz [ 754.037692][ T8979] usb 1-1: SerialNumber: syz [ 754.356023][ T8979] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 756.443385][ T8979] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -71 [ 756.460400][ T8979] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 756.472403][ T8979] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 756.484624][ T8979] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 756.516903][ T8979] lan78xx: probe of 1-1:1.0 failed with error -71 [ 756.539630][ T8979] usb 1-1: USB disconnect, device number 11 [ 758.276828][T11881] IPVS: set_ctl: invalid protocol: 59 172.30.0.2:20000 [ 758.624223][T11891] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1772'. [ 760.070311][ T5078] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 760.260348][ T5078] usb 1-1: Using ep0 maxpacket: 16 [ 760.285535][ T5078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.337103][ T5078] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.383333][ T5078] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.460265][ T5078] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 760.492563][ T5078] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.509934][ T5078] usb 1-1: config 0 descriptor?? [ 760.949510][ T5078] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0005/input/input7 [ 761.105582][ T5078] microsoft 0003:045E:07DA.0005: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 761.131344][T11899] fuse: Bad value for 'fd' [ 761.188953][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1774'. [ 761.482568][T11912] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1774'. [ 762.210185][ T5078] usb 1-1: reset high-speed USB device number 12 using dummy_hcd [ 762.426512][T11912] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 762.478149][T11912] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 762.518316][T11912] bond0 (unregistering): Released all slaves [ 764.056615][ T27] kauditd_printk_skb: 34 callbacks suppressed [ 764.056633][ T27] audit: type=1326 audit(1764371173.910:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.139528][T11941] device syzkaller0 entered promiscuous mode [ 764.146415][ T27] audit: type=1326 audit(1764371173.960:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.195636][ T27] audit: type=1326 audit(1764371173.970:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.230505][ T27] audit: type=1326 audit(1764371173.980:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.253542][ T8702] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 764.263863][ T27] audit: type=1326 audit(1764371173.980:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.302439][ T27] audit: type=1326 audit(1764371173.990:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.330091][ T27] audit: type=1326 audit(1764371173.990:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.362919][ T27] audit: type=1326 audit(1764371173.990:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.433758][ T27] audit: type=1326 audit(1764371173.990:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.480210][ T8702] usb 6-1: Using ep0 maxpacket: 16 [ 764.488498][ T8702] usb 6-1: config 6 has an invalid interface number: 223 but max is 0 [ 764.507863][ T8702] usb 6-1: config 6 has no interface number 0 [ 764.519676][ T27] audit: type=1326 audit(1764371174.030:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11934 comm="syz.0.1784" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb4ab18f749 code=0x7ffc0000 [ 764.544680][ T8702] usb 6-1: config 6 interface 223 has no altsetting 0 [ 764.556210][T11939] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 764.566951][ T8702] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=ba.fb [ 764.580993][T10837] usb 1-1: USB disconnect, device number 12 [ 764.601820][ T8702] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.634875][ T8702] usb 6-1: Product: syz [ 764.645098][ T8702] usb 6-1: Manufacturer: syz [ 764.678112][ T8702] usb 6-1: SerialNumber: syz [ 764.927797][T11936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 764.969853][T11936] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 765.039051][ T8702] hdpvr 6-1:6.223: Could not find bulk-in endpoint [ 765.056010][ T8702] hdpvr: probe of 6-1:6.223 failed with error -12 [ 765.100266][ T8702] usb 6-1: USB disconnect, device number 9 [ 766.223924][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1794'. [ 766.308325][T11978] program syz.3.1794 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 766.576754][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1795'. [ 767.158217][T11998] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 767.870569][T12015] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1800'. [ 768.270182][ T8979] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 768.472325][ T8979] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 768.500688][ T8979] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 768.547255][ T8979] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.612325][ T8979] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 768.643859][T12033] device lo entered promiscuous mode [ 769.650816][ T8979] stv0680 2-1:4.0: STV(e): camera ping failed!! [ 769.670738][ T8979] stv0680 2-1:4.0: last error: 63, command = 0x6d [ 769.875795][ T8979] usb 2-1: USB disconnect, device number 10 [ 770.863756][T12109] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1813'. [ 770.989499][T12107] netlink: 'syz.3.1812': attribute type 1 has an invalid length. [ 771.018594][T12107] netlink: 'syz.3.1812': attribute type 2 has an invalid length. [ 771.048941][T12109] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1813'. [ 772.582867][T12145] netlink: 'syz.0.1827': attribute type 5 has an invalid length. [ 772.620147][T12145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1827'. [ 772.688543][T12145] device ip6erspan0 entered promiscuous mode [ 772.982791][T12151] device macvlan3 entered promiscuous mode [ 773.302805][T12156] netlink: 'syz.0.1830': attribute type 10 has an invalid length. [ 773.980378][T10837] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 774.174048][T10837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.194049][T10837] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.232047][T10837] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 774.256857][T10837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.288178][T10837] usb 4-1: config 0 descriptor?? [ 774.945632][T10837] usbhid 4-1:0.0: can't add hid device: -71 [ 774.956344][T10837] usbhid: probe of 4-1:0.0 failed with error -71 [ 774.993271][T10837] usb 4-1: USB disconnect, device number 6 [ 775.046701][T12172] kvm [12171]: vcpu1, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010000) = 0xbf [ 775.197556][T12183] hub 9-0:1.0: USB hub found [ 775.209562][T12183] hub 9-0:1.0: 1 port detected [ 775.368993][ T27] kauditd_printk_skb: 13 callbacks suppressed [ 775.369010][ T27] audit: type=1326 audit(1764371185.210:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 775.417623][T12187] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1840'. [ 775.443958][T12187] device erspan0 entered promiscuous mode [ 775.529434][ T27] audit: type=1326 audit(1764371185.230:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 775.599660][ T27] audit: type=1326 audit(1764371185.230:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 775.648454][ T27] audit: type=1326 audit(1764371185.260:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 775.709754][ T27] audit: type=1326 audit(1764371185.290:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 775.752608][ T27] audit: type=1326 audit(1764371185.300:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 775.775078][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.817164][ T27] audit: type=1326 audit(1764371185.300:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 775.885222][ T27] audit: type=1326 audit(1764371185.300:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 775.908417][ C0] vkms_vblank_simulate: vblank timer overrun [ 775.963325][ T27] audit: type=1326 audit(1764371185.300:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 776.046639][ T27] audit: type=1326 audit(1764371185.450:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12179 comm="syz.5.1839" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ec9f8f749 code=0x7ffc0000 [ 777.777692][T12223] device lo left promiscuous mode [ 777.819450][T12223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 777.865113][T12223] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 777.923532][T12223] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 778.246512][T12246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1857'. [ 778.293117][T12246] device bridge_slave_1 left promiscuous mode [ 778.309100][T12246] bridge0: port 2(bridge_slave_1) entered disabled state [ 778.385314][T12246] device bridge_slave_0 left promiscuous mode [ 778.408763][T12246] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.935880][T12266] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1862'. [ 779.970093][ T4283] Bluetooth: hci3: command 0x0406 tx timeout [ 780.399457][T12276] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 780.466838][T12278] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 781.011288][ T8706] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 781.200198][ T8706] usb 1-1: Using ep0 maxpacket: 32 [ 781.207041][ T8706] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 781.240183][ T8706] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 781.276629][ T8706] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 781.329015][ T8706] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 781.381674][ T8706] usb 1-1: config 0 interface 0 has no altsetting 0 [ 781.408650][ T8706] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 781.435150][ T8706] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 781.456954][ T8706] usb 1-1: Product: syz [ 781.470170][ T8706] usb 1-1: Manufacturer: syz [ 781.482600][ T8706] usb 1-1: SerialNumber: syz [ 781.514271][ T8706] usb 1-1: config 0 descriptor?? [ 781.537081][ T8706] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 781.574507][ T8706] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 781.796348][ T8706] usb 1-1: USB disconnect, device number 13 [ 781.814209][ T8706] ldusb 1-1:0.0: LD USB Device #0 now disconnected [ 782.521615][T12306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1874'. [ 783.822267][ T8979] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 784.033862][ T8979] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 784.073396][ T8979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.139868][ T8979] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 784.169683][ T8979] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 784.193274][ T8979] usb 4-1: Manufacturer: syz [ 784.242296][ T8979] usb 4-1: config 0 descriptor?? [ 784.360117][ T8979] rc_core: IR keymap rc-hauppauge not found [ 784.368330][ T8979] Registered IR keymap rc-empty [ 784.400084][ T8981] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 784.428904][ T8979] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 784.636345][ T8979] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input8 [ 784.703514][ T8981] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.762571][ T8981] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 784.809904][ T8981] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.828384][ T8981] usb 2-1: Product: syz [ 784.842150][ T8981] usb 2-1: Manufacturer: syz [ 784.857096][ T8981] usb 2-1: SerialNumber: syz [ 784.938739][T10837] usb 4-1: USB disconnect, device number 7 [ 786.350148][T10837] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 786.464570][T12348] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1886'. [ 786.550067][T10837] usb 4-1: Using ep0 maxpacket: 32 [ 786.566006][T10837] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 786.615891][T10837] usb 4-1: New USB device found, idVendor=9022, idProduct=d662, bcdDevice=b3.0e [ 786.684384][T10837] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.738635][T10837] usb 4-1: config 0 descriptor?? [ 786.786387][T10837] dw2102: su3000_identify_state [ 786.802452][T10837] dvb-usb: found a 'TeVii S662' in warm state. [ 786.829637][T10837] dw2102: su3000_power_ctrl: 1, initialized 0 [ 786.836908][T10837] dvb-usb: bulk message failed: -22 (2/0) [ 786.869364][T10837] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 786.923253][T10837] dvbdev: DVB: registering new adapter (TeVii S662) [ 786.966182][T10837] usb 4-1: media controller created [ 786.978999][T12339] dvb-usb: bulk message failed: -22 (7/0) [ 786.993634][T12339] dw2102: i2c transfer failed. [ 787.021270][T10837] dvb-usb: bulk message failed: -22 (6/0) [ 787.041294][T10837] dw2102: i2c transfer failed. [ 787.075692][T10837] dvb-usb: bulk message failed: -22 (6/0) [ 787.106976][T10837] dw2102: i2c transfer failed. [ 787.128454][T10837] dvb-usb: bulk message failed: -22 (6/0) [ 787.145813][T10837] dw2102: i2c transfer failed. [ 787.163309][T10837] dvb-usb: bulk message failed: -22 (6/0) [ 787.198962][T10837] dw2102: i2c transfer failed. [ 787.218532][ T27] kauditd_printk_skb: 1 callbacks suppressed [ 787.218543][ T27] audit: type=1800 audit(1764371197.070:114): pid=12353 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1887" name="bus" dev="ramfs" ino=66216 res=0 errno=0 [ 787.249150][T10837] dvb-usb: bulk message failed: -22 (6/0) [ 787.272994][T10837] dw2102: i2c transfer failed. [ 787.295450][T10837] dvb-usb: bulk message failed: -22 (6/0) [ 787.314411][T10837] dw2102: i2c transfer failed. [ 787.329218][T10837] dvb-usb: MAC address: 02:02:02:02:02:02 [ 787.414256][T10837] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 787.495552][T10837] dvb-usb: bulk message failed: -22 (3/0) [ 787.517220][T10837] dw2102: command 0x0e transfer failed. [ 787.538527][T10837] dvb-usb: bulk message failed: -22 (3/0) [ 787.579671][T10837] dw2102: command 0x0e transfer failed. [ 787.739318][T12358] [ 787.741750][T12358] ====================================================== [ 787.748984][T12358] WARNING: possible circular locking dependency detected [ 787.756109][T12358] syzkaller #0 Not tainted [ 787.760703][T12358] ------------------------------------------------------ [ 787.767817][T12358] syz.5.1885/12358 is trying to acquire lock: [ 787.773902][T12358] ffff88801ef05af0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: process_measurement+0x33c/0x1a10 [ 787.785001][T12358] [ 787.785001][T12358] but task is already holding lock: [ 787.792480][T12358] ffff88807d1fae58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 787.802533][T12358] [ 787.802533][T12358] which lock already depends on the new lock. [ 787.802533][T12358] [ 787.812956][T12358] [ 787.812956][T12358] the existing dependency chain (in reverse order) is: [ 787.822233][T12358] [ 787.822233][T12358] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 787.829982][T12358] down_read_killable+0x4c/0x340 [ 787.835474][T12358] mmap_read_lock_killable+0x1d/0x60 [ 787.841314][T12358] lock_mm_and_find_vma+0x2b1/0x2f0 [ 787.847132][T12358] do_user_addr_fault+0x2db/0xb10 [ 787.852770][T12358] exc_page_fault+0x60/0x100 [ 787.857996][T12358] asm_exc_page_fault+0x22/0x30 [ 787.863566][T12358] fault_in_readable+0xf3/0x1f0 [ 787.869138][T12358] fault_in_iov_iter_readable+0xbb/0x2e0 [ 787.875463][T12358] generic_perform_write+0x3da/0x560 [ 787.881261][T12358] __generic_file_write_iter+0x172/0x430 [ 787.887505][T12358] generic_file_write_iter+0xab/0x2e0 [ 787.893689][T12358] vfs_write+0x44c/0x960 [ 787.898580][T12358] ksys_write+0x143/0x240 [ 787.903688][T12358] do_syscall_64+0x4c/0xa0 [ 787.908761][T12358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.915272][T12358] [ 787.915272][T12358] -> #0 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}: [ 787.924181][T12358] __lock_acquire+0x2cf8/0x7c50 [ 787.929946][T12358] lock_acquire+0x1b4/0x490 [ 787.935101][T12358] down_write+0x36/0x60 [ 787.939816][T12358] process_measurement+0x33c/0x1a10 [ 787.945917][T12358] ima_file_mmap+0x104/0x150 [ 787.951140][T12358] __se_sys_remap_file_pages+0x53e/0x770 [ 787.957579][T12358] do_syscall_64+0x4c/0xa0 [ 787.962721][T12358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 787.969347][T12358] [ 787.969347][T12358] other info that might help us debug this: [ 787.969347][T12358] [ 787.979768][T12358] Possible unsafe locking scenario: [ 787.979768][T12358] [ 787.987320][T12358] CPU0 CPU1 [ 787.992706][T12358] ---- ---- [ 787.998097][T12358] lock(&mm->mmap_lock); [ 788.002523][T12358] lock(&sb->s_type->i_mutex_key#12); [ 788.010625][T12358] lock(&mm->mmap_lock); [ 788.017572][T12358] lock(&sb->s_type->i_mutex_key#12); [ 788.023122][T12358] [ 788.023122][T12358] *** DEADLOCK *** [ 788.023122][T12358] [ 788.031554][T12358] 1 lock held by syz.5.1885/12358: [ 788.036661][T12358] #0: ffff88807d1fae58 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x17d/0x770 [ 788.047465][T12358] [ 788.047465][T12358] stack backtrace: [ 788.053476][T12358] CPU: 1 PID: 12358 Comm: syz.5.1885 Not tainted syzkaller #0 [ 788.061157][T12358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 788.071486][T12358] Call Trace: [ 788.074785][T12358] [ 788.077851][T12358] dump_stack_lvl+0x168/0x22e [ 788.082741][T12358] ? load_image+0x3b0/0x3b0 [ 788.087319][T12358] ? show_regs_print_info+0x12/0x12 [ 788.092553][T12358] ? print_circular_bug+0x12b/0x1a0 [ 788.097778][T12358] check_noncircular+0x274/0x310 [ 788.102992][T12358] ? add_chain_block+0x940/0x940 [ 788.107949][T12358] ? lockdep_lock+0xdc/0x1e0 [ 788.112562][T12358] ? _find_first_zero_bit+0xcf/0x100 [ 788.118135][T12358] __lock_acquire+0x2cf8/0x7c50 [ 788.123276][T12358] ? verify_lock_unused+0x140/0x140 [ 788.128543][T12358] ? ima_match_policy+0x104/0x2100 [ 788.133674][T12358] ? verify_lock_unused+0x140/0x140 [ 788.139067][T12358] ? ima_match_policy+0x207a/0x2100 [ 788.144451][T12358] lock_acquire+0x1b4/0x490 [ 788.149248][T12358] ? process_measurement+0x33c/0x1a10 [ 788.154659][T12358] ? __might_sleep+0xd0/0xd0 [ 788.159297][T12358] ? read_lock_is_recursive+0x10/0x10 [ 788.164718][T12358] ? ima_get_action+0x71/0xa0 [ 788.169671][T12358] down_write+0x36/0x60 [ 788.173865][T12358] ? process_measurement+0x33c/0x1a10 [ 788.179620][T12358] process_measurement+0x33c/0x1a10 [ 788.184935][T12358] ? ima_file_mmap+0x150/0x150 [ 788.189825][T12358] ? aa_file_perm+0x117/0xec0 [ 788.194540][T12358] ? mtree_load+0xeb/0xa40 [ 788.199071][T12358] ? mtree_load+0x90a/0xa40 [ 788.203596][T12358] ? aa_get_current_label+0x110/0x1d0 [ 788.208984][T12358] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 788.215424][T12358] ima_file_mmap+0x104/0x150 [ 788.220294][T12358] ? ima_file_free+0x3e0/0x3e0 [ 788.225135][T12358] ? common_file_perm+0x171/0x1c0 [ 788.230428][T12358] ? bpf_lsm_mmap_file+0x5/0x10 [ 788.235388][T12358] ? security_mmap_file+0x11b/0x180 [ 788.240909][T12358] __se_sys_remap_file_pages+0x53e/0x770 [ 788.246739][T12358] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 788.252835][T12358] ? lock_chain_count+0x20/0x20 [ 788.257713][T12358] ? lockdep_hardirqs_on+0x94/0x140 [ 788.263537][T12358] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 788.269383][T12358] do_syscall_64+0x4c/0xa0 [ 788.273816][T12358] ? clear_bhb_loop+0x60/0xb0 [ 788.278519][T12358] ? clear_bhb_loop+0x60/0xb0 [ 788.283309][T12358] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 788.289215][T12358] RIP: 0033:0x7f6ec9f8f749 [ 788.293648][T12358] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 788.314235][T12358] RSP: 002b:00007f6ecad83038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 788.322690][T12358] RAX: ffffffffffffffda RBX: 00007f6eca1e6180 RCX: 00007f6ec9f8f749 [ 788.330977][T12358] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000299000 [ 788.339338][T12358] RBP: 00007f6eca013f91 R08: 0000000000000000 R09: 0000000000000000 [ 788.347582][T12358] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 788.355567][T12358] R13: 00007f6eca1e6218 R14: 00007f6eca1e6180 R15: 00007fff6e1971c8 [ 788.363656][T12358] [ 788.368603][T10837] dvb-usb: bulk message failed: -22 (3/0) [ 788.378681][T10837] dw2102: command 0x0e transfer failed. [ 788.411786][T10837] dvb-usb: bulk message failed: -22 (3/0) [ 788.436209][T10837] dw2102: command 0x0e transfer failed. [ 788.459003][T10837] dvb-usb: bulk message failed: -22 (1/0) [ 788.507996][T10837] dw2102: command 0x51 transfer failed. [ 788.535207][T10837] dvb-usb: bulk message failed: -22 (5/0) [ 788.572713][T10837] dw2102: i2c probe for address 0x68 failed. [ 788.609115][T10837] dvb-usb: bulk message failed: -22 (5/0) [ 788.634486][T10837] dw2102: i2c probe for address 0x69 failed. [ 788.660867][T10837] dvb-usb: bulk message failed: -22 (5/0) [ 788.685986][T10837] dw2102: i2c probe for address 0x6a failed. [ 788.737173][T10837] dw2102: probing for demodulator failed. Is the external power switched on? [ 788.768789][T10837] dvb-usb: no frontend was attached by 'TeVii S662' [ 788.864090][ T8981] cdc_ncm 2-1:1.0: failed to get mac address [ 788.876029][ T8981] cdc_ncm 2-1:1.0: bind() failure [ 788.894930][ T8981] cdc_ncm: probe of 2-1:1.1 failed with error -71 [ 788.930911][ T8981] cdc_mbim: probe of 2-1:1.1 failed with error -71 [ 788.947860][ T8981] usbtest: probe of 2-1:1.1 failed with error -71 [ 788.964302][ T8981] usb 2-1: USB disconnect, device number 11 [ 788.990070][T10837] rc_core: IR keymap rc-tt-1500 not found [ 788.996009][T10837] Registered IR keymap rc-empty [ 789.002278][T10837] rc rc0: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 789.016448][T10837] input: TeVii S662 as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input9 [ 789.027759][T10837] dvb-usb: schedule remote query interval to 250 msecs. [ 789.034918][T10837] dw2102: su3000_power_ctrl: 0, initialized 1 [ 789.041421][T10837] dvb-usb: TeVii S662 successfully initialized and connected. [ 789.054531][T10837] usb 4-1: USB disconnect, device number 8 [ 789.072864][T10837] dvb-usb: TeVii S662 successfully deinitialized and disconnected.