last executing test programs: 1m26.564547092s ago: executing program 4 (id=142): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {}, {@noblock_validity}], [{@dont_hash}, {@smackfsroot={'smackfsroot', 0x3d, 'queue0\x00'}}, {@dont_hash}, {@mask={'mask', 0x3d, 'MAY_READ'}}]}, 0x10, 0x4d2, &(0x7f0000000880)="$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") syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x10e, &(0x7f0000000300)={[{@nobarrier}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsold}, {@quota}, {@inlinecrypt}]}, 0x3, 0x464, &(0x7f0000001280)="$eJzs3M9vFFUcAPDvTFuQX7Yi/uCHWkVj44+WFlQOHtRo4kETEy94s7aFIAs1tCZCiIIxeDQk3olHE/8CT3ox6snEq94NCTFcRE9rZneG/cHusq3bXWQ/n2ThvZk3+95337zdN/MYAhhak9kfScT2iPgtIsar2cYCk9W/rl87t/D3tXMLSZTLb/+ZVMr9de3cQlG0OG5bnplKI9LPktjbot6VM2dPzJdKS6fz/MzqyQ9mVs6cffb4yfljS8eWTs0dPnzo4OwLz88915M478nauufj5X27X3/n0psLRy6999M3SRF/Uxw9Mtlp5xPlco+rG6wddelkdIANYU1GIiLrrrHK+B+Pkah13ni89mmnYzf1o4HAhinn2uw+XwbuYEkMugXAYBQ/9Nn1b/Hq3+xj8K6+XL0AyuK+nr+qe0YjjeqF0VjT9W0vTUbEkfP/XM5esTH3IQAAGnyXzX+eaTX/S+P+unJ352tDE/lays6IuDcidkXEfRGVsg9ExINrrL95keTm+U96ZV2BdSmb/72Yr201zv/SosjESJ7bUcmMJUePl5YO5J/JVIxtzvKzHer4/tVfv2i3r37+l72y+ou5YN6OK6ObG49ZnF+d/y8x17t6IWLPaKv4kxsrAUlE7I6IPeus4/hTX+9rt685/nLS6Z1easz2YJ2p/FXEk9X+Px9N8ReSzuuTM3dFaenATHFW3OznXy6+1a7+W/f/xsr6f2vL8/9G/BNJ/XrtytrruPj7522vaaY7xH/5bLQ5/2sbijWoj+ZXV0/PRmxK3qg2un77XO3YIl+Uz+Kf2t96/O+M2iexNyKyk/ihiHg4Ih7J++7RiHgsIvZ3iP/HVx5/v92+26H/F5v6f6KxSFP/1xKbonlL68TIiR++bXzHWrK7779DldRUvqWb779u2rW+sxkAAAD+f9KI2B5JOn0jnabT09V/w78rtqal5ZXVp48uf3hqsfqMwESMpcWdrur94Or90Nn8sr7IzzXlD+b3jb8c2VLJTy8slxYHHTwMuW1txn/mj5FBtw7YcJ7XguFl/MPw6jT+L/SxHUD/+f2H4dVi/G8ZRDuA/mv1+/9JLVke72djgL5qGv+W/WCIuP6H4WX8w/CqH/8dn78H7iQrW+LWD8lLDEui+I81uigcaRdv+O5tEtetEskGj4Ltgw5w7YkBfzEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0yL8BAAD//+Le47U=") bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x18, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000003c0)={0x1, 0x0, 0x0, 'queue0\x00', 0xfffffffe}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) open(0x0, 0x0, 0x0) r5 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) bind$packet(0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r5, 0x800c6613, &(0x7f0000001240)=@v1={0x0, @aes128, 0x0, @desc1}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{}, 0x0, &(0x7f0000000580)='%-010d \x00'}, 0x20) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) 1m21.058962966s ago: executing program 4 (id=151): connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getpid() socket$inet6(0xa, 0x3, 0x20) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') preadv(r3, &(0x7f00000001c0)=[{&(0x7f0000000240)=""/198, 0xc6}], 0x1, 0x14a, 0x0) 1m19.027425711s ago: executing program 4 (id=154): open(&(0x7f0000000300)='./bus\x00', 0x169042, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) r1 = dup(r0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000080)={0x23, 0x3, 0x12, 0x0, 0x0, 0x0, 0x0}) r2 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB], 0x1, 0xa1d, &(0x7f0000001540)="$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") ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x1, {0x0, @usage, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @usage, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x10000, @struct, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x8000000000000001]}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0) listxattr(0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1008002, &(0x7f0000000e00)={[{@nomblk_io_submit}, {@delalloc}, {@nobh}, {@debug}, {@inode_readahead_blks}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@data_err_abort}]}, 0x1, 0x5f4, &(0x7f0000001f80)="$eJzs3c9vVNUeAPDvmf6gpbzXQl7ee7zFo8nLCyTv0dIChhgXsDWkwR9x48ZKCyIFGlqjRRNKghsT48YYE1cuxP9CiWxZ6cqFG1eGhKhhaeKYmd5bOu2d/m4vcj+fZOi998zt+Q7T75wzZ865E0BlDTb+qUUcjIjpFNGf5hfLOiMrHFy436Nf3zvfuKWo11/6OUXKjuX3T9nPvuzknoj49psUBzpW1jszd+Py+NTU5PVsf3j2yvTwzNyNo5eujF+cvDh5dfSZ0VMnT5w8NXJsU4/rZsGxs7fffLv/g7FXv/jstzTy5Q9jKU7H89kdlz6O7TIYg83/k7SyqO/UdldWko7s72TpU5w6SwyIDcmfv66I+Ef0R0c8fvL64/0XSg0O2FH1FFEHKirJf6iovB+Qv7df/j64VkqvBNgND88sDACszP/OhbHB6GmODex9lGLpsE6KiM2NzLXaFxH3743dvnBv7Hbs0DgcUGz+VkT8syj/UzP/B6InBpr5X2vJ/0a/4Fz2s3H8xU3Wv3yoWP7D7lnI/55V8z/a5P9rS/L/9U3WP/h4843elvzvXf3Egs8UAQAAAAAAoOrunomI/xd9/l9bnP8TBfN/+iLi9DbUP7hsf+Xn/7UH21ANUODhmYjnCuf/1vLZvwMd2dZfmvMButKFS1OTxyLirxFxJLr2NPZHVqnj6IcHPm1XNpjN/8tvjfrvZ3MBszgedO5pPWdifHZ8q48biHh4K+JfhfN/02L7nwra/8brwfQ66zjw3zvn2pWtnf/ATql/HnG4sP1/fNWKtPr1OYab/YHhvFew0r/f/eirdvVvNv9dYgK2rtH+7109/wfS0uv1zGy8juNznfV2ZZvt/3enl5szgLuzY++Mz85eH4noTmc7Gkdbjo9uPGZ4GuX5kOdLI/+P/Ge18b96vaj/3xsR88t+d/qldU1x7u+/9/3YLh79fyhPI/8nNtT+b3xj9M7A1+3qX1/7f6LZ1h/Jjhj/gwWf5Gna3Xq8IB07i4p2O14AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBrUImJfpNrQ4natNjQU0RcRf4u9talrM7P/u3DtrasTjbLm9//X8m/67V/YT/n3/w8s2R9dtn88IvZHxMcdvc39ofPXpibKfvAAAAAAAAAAAAAAAAAAAADwhOhrs/6/4aeOsqMDdlxn2QEApSnI/+/KiAPYfdp/qC75D9Ul/6G65D9Ul/yH6pL/UF3yH6pro/nfs0NxAAAAAAAA22L/obvfp4iYf7a3eWvozsq6So0M2Gm1sgMASrPWJX7qrgEETy1T/6C6vMcH0hrlhVN+03rOXM30+S2cDAAAAAAAAAAAAACVc/ig9f9QVdb/Q3VZ3g/Vla//P1RyHMDu8x4fiDVW8rf/yq+trP8HAAAAAAAAAAAAADZiZu7G5fGpqcnrNl4pKqo9AYHt3Ea9Xr/Z+Ct4UuL5k2/kU+G38zeniPltijBf67e+s8p7TQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr9EQAA//+krCYm") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) write$binfmt_script(r3, &(0x7f0000000280), 0xfea7) r7 = dup(r2) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r8}, 0x10) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x0, 0x3, @loopback}}, 0x0, 0x0, 0x4e, 0x0, "49df4ffe5d9c533da378c3ec111d08000000000000009d73660f5d9459f47415f6e029b01d99291517d8a400ed5a20356ce10b0602fe218f3dea0baeaa030000008adda2ddfc936ea8b049d100"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20040008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 1m17.107099222s ago: executing program 4 (id=157): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f0000000200)={[{@resuid}, {@init_itable}, {@stripe}, {@stripe={'stripe', 0x3d, 0x200}}]}, 0x3, 0x453, &(0x7f0000001f80)="$eJzs3M9vFFUcAPDvzHaLCNiKqPxS8Vck/mgpoHLwoEYTD5iY6EGPTVsIslBDayKEKBiDJ2NMvBuP/gt60Ysxnoxe9W5IiOECeFozuzN0d7u7tNsti93PJxl4b+ZN3/v2zdt9M2+3AQytfdk/ScTWiPgzIsbq2eYC++r/Xb96fubG1fMzSVSrb/+T1Mpdu3p+pihanLclz+xPI9LPktjTpt6Fs+dOTlcqc2fy/OTiqQ8mF86ee+7Eqenjc8fnTh88cuTwoakXXzj4fF/izNp0bffH83t3vfHeV28e/aIp/pY41mznpsYf3daT1WrfqrsTbGtIJyMDbAirUoqIrLvKtfE/FqVY6ryxeP3TgTYOWFfVarW6pfPhC1VgA0uiOW/Iw7Ao3uiz+99ia50EvLx+04+Bu/JK/QYoi/t6vtWPjESalym33N/2076IePfCv99kW/T7OQQAQBs/ZvOfZ9vN/9J4oKHcPfna0HhE3BsR2yPivojYERH3R9TKPhgRO1dZf+siyfL5T3q5p8BWKJv/vZSvbTXP/4rZX4yX8ty2Wvzl5NiJytyB/HeyP8qbsvxUlzp+eu2PLzsda5z/ZVtWfzEXzNtxeWRT8zmz04vTa4m50ZWLEbtH2sWf3FwJSCJiV0Ts7rGOE09/t7fTsVvH30Uf1pmq30Y8Ve//C9ESfyHpvj45eVdU5g5MFlfFcr/+dumtTvWvKf4+yPr/7rbX/834x5PG9dqF1ddx6a/PO97T9Hr9jybv1NKj+b6PphcXz0xFjCZH641u3H9w6dwiX5T/4ff6/nbjf3ss/Sb2RER2ET8UEQ9HxCN52x+NiMci4vEu8f/y6hPv9x7/+sr6f3ZV/b+UGI3WPe0TpZM/f99U6fiy+G907//DtdT+fM9KXv9W0q7ermYAAAD4/0kjYmsk6cTNdJpOTNQ/L78jIq3MLyw+c2z+w9Oz9e8IjEc5LZ50jTU8D53Kb+vr+YsRUf9oQXH8UP7c+OvS5lp+Yma+Mjvo4GHIbekw/jN/lwbdOmDd+b4WDC/jH4aX8Q/Dy/iH4dVm/G8eRDuA26/d+/8nA2gHcPu1jH/LfjBE3P/D8Oo4/jfyX/4Barz/w1Ba2By3/pJ810Txk3o8fcMmonxHNGPtiWrStnMjHXTDJNYzMdjXJQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH75LwAA//8HW+BC") syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) syz_open_procfs(r0, &(0x7f00000003c0)='pagemap\x00') bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x1ae) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)=@v2, 0x14, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000240)={[{@errors_remount}, {@jqfmt_vfsold}, {@noquota}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@data_err_ignore}, {@init_itable}, {@errors_continue}]}, 0x1, 0x4e2, &(0x7f0000000d80)="$eJzs3d9rW28ZAPDnnDbf/erXZurFHLgNnXRDl7Sr24oXc4K4q4Fz3s/apqU0bUqTbmsZ0uG9gogKXnnljeAfIMj+BBEGei9TFNFNL7xQI0lO5lqTtrA0Z7afD5yd97xvkud5N3J+vOddTgDH1qWIuBMRIxFxNSLGs/o0W+622u93Xvf61dO51pJEs/ngL0kkWV3EyR2feSYitqNT+7W7Ed9M/jdufXNrebZaraxn2+XGylq5vrl1bWlldrGyWFmdnp66OXNr5sbM5ED6WYyI21/+ww+++9Ov3P7l5x7/7uGfrnyrldZY1t7px+B1ul7Y8Tc0GhHrhxEsByPZutCn/TsjQ0wGAIB9tc7xPxoRn2qf/4/HSPvsFAAAADhKml8ci38mEU0AAADgyErbc2CTtJTNBRiLNC2VOnN4Px6n02qt3vjsQm1jdb4zV7YYhXRhqVqZzOYKF6OQtLansjm23e3ru7anI+JsRHx//FR7uzRXq87nPfgBAAAAx8SZXdf/fx9vX/+fyDsvAAAAYMCKeScAAAAAHLq9rv8/MsQ8AAAAgMPj/j8AAAAcaV+9d6+1NLvPv55/tLmxXHt0bb5SXy6tbMyV5mrra6XFWm2x/Zt9K/t9XrVWW/t8rG48KTcq9Ua5vrn1cKW2sdp4uLTrIeEAAADA0Jy9+Py3SURsf+FUe2n54OBv//DwMgMOW7JPe/shIS+zjd8PISFgaEbyTgDIzWjeCQC5KeSdAJC7/cYB+k7e+dXgcwEAAA7HxCf63/83NgBHW9q3pTnUPACA4XH/H46vws4ZgDfyywTIy36P+XiX+/+dkYSmAQUAAMjZWHtJ0lJ2L3As0rRU6vzH/mIUkoWlamUyuz74zXjhRGt7qv3OZN85wwAAAAAAAAAAAAAAAAAAAAAAAABAR7OZRBMAAAA40iLSPybtX/OPmBi/PLZ7fOCD5B/j7XVEPP7xgx8+mW001qda9X99U9/4UVZ/PY8RDAAAAGC37nV69zoeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbp9aunc91lmHH//KWIKPaMf/Fke3UyChFx+m9JjL71viQiRgYQf/tZRJzrFT9ppRXF6GTRK/6pHOOnEXFmAPHhOHve2v/c6fX9S+NSe937+zeaLe+q//4vje7+b6TP/ufDA8Y4/+Ln5b7xn0WcH+29/+nGT/rE//QB43/j61tb/dqaP4mY6Hn8SXbEKjdW1sr1za1rSyuzi5XFyur09NTNmVszN2YmywtL1Ur2Z88Y3/vkL/69V/9P94lf3Kf/lw/Y/3+9ePLqY51iYXdbt6LX8fdcn/hpduz7TFZutU90y9ud8tsu/OzXF/bq/3yf/r/59+9xoG3FvHLA/l+9/+2XB3wpADAE9c2t5dlqtbL+/1hI471IQ2EghRPvRxp7FArxXqQxnELeeyYAAGDQ/nvSn3cmAAAAAAAAAAAAAAAAAAAAcHwN4+fEdsfczqerAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB7+k8AAAD//y5x2R8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000000000000000030000850000007b00000095"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r5}, 0x10) quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0x0, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) 1m12.913427495s ago: executing program 4 (id=166): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x44004}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r0) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010900000000000000001c0000000a0004007770636e3300000008000300"], 0x30}}, 0x0) 1m11.323957888s ago: executing program 4 (id=171): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f0000000300)=0x4) socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0) 1m10.392190366s ago: executing program 32 (id=171): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000280), &(0x7f0000000300)=0x4) socket(0x1e, 0x4, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x0, 0x0) 55.944568191s ago: executing program 1 (id=196): r0 = socket$inet6(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x432800, 0x11) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r5 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) r6 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r7 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r6, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, r7, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbf, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFBR(r0, 0x8940, 0x0) 54.633555662s ago: executing program 1 (id=197): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6}]}) ioctl$PPPIOCSACTIVE(r2, 0x40107446, &(0x7f0000000200)={0x0, 0x0}) unshare(0x22020600) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x6, 0x756, &(0x7f00000002c0)="$eJzs3M1rXOUaAPDnnGaafuTeyYUL9+pChBZaKD1Jmk27aty4KxQKbmtITkLISSZkJrUTC7auhdpsFARR1y7dCqX+Ae6koOBeEK1xIW5GzuSjNGam0ybpSPr7wcl53vP1vE/m8GYO5D0BvLReL38kEUMRcTUiqpvb04g42o6ORdzeOG790a2pckmi1br2S1KeFuut6va1ks31yWifEv+PiAeViHPv/z1vvbk6P1kU+fJme6SxsDRSb66en1uYnM1n88Wx8UujF8fHL46OP7WG//VY6+m3Lh2/9+2ba2vffdW4+9rA+SQm2nXHZm09XuaZbPxOKjGxY/viQSTro6TfHQAAoCfl9/wjETHQ/pZajSPtCAAAADhMWoMtAAAA4NBLot89AAAAAA7W1v8BbM3tPah5sJ38/EZEDO+Wf6A9hzjiWFQi4sR68sTMhGTjNNiT23ci4v7Ezvvvi/IOu73Ha4/uaD85R/roHq/Ofrhfjj8Tu40/6fb4E7uMPwNb707Yo87j3+P8RzqMf1d7zPH1p69UOua/E/HqwG75k+38SYf8b/eY/+7aB/c67Wt9HnFm178/yRO5urwfYmJmruj6+oEHf5592K3+E53yJ93rX+qx/nfXf5vvNJaU+c+e6v7575a/vCc+3OxHGhH3Ntdle21HjlML33/Trf7piNbzfP6f9Vj/j18O3uzxUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGhLI2IokjTbjtM0yyJORsR/40Ra1OqNczO1lcXpcl/EcFTSmbkiH42I6kY7Kdtj7fhx+8KO9nhE/OeH4xtJ54o8m6oV0/0uHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgG0nI2IokjSLiDQifq+maZZFDPRw7uAL6B8AAACwT4b73QEAAADgwHn+BwAAgMPveZ//k33uBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHCoXb1ypVxa649uTZXt6RvNlfnajfPTeX0+W1iZyqZqy0vZbK02W+TZVG3hadcrarWlsUuxcnOkkdcbI/Xm6vWF2spi4/rcwuRsfj2vvJCqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFZD7SVJs4hI23GaZlnEvyJiOCrJzFyRj0bEvyPiYbUyWLbH+t1pAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9l29uTo/WRT5skAgeGHBexHxD+hGl6DfIxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP1Qb67OTxZFvlzvd08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SnJCLK5Uz19NDOvUeTP6rtdUS888m1j25ONhrLY+X2X7e3Nz7e3H6hH/0HAACAl8LlZzl46zl96zkeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgV/Xm6vxkUeTLewsuR3O1lXQ4pt81AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz+evAAAA//8KQsc4") r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x0, 0x2) ppoll(&(0x7f0000000080)=[{r4, 0x4260}], 0x1, 0x0, 0x0, 0x0) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000040)={0x0, 0x4}) chdir(&(0x7f0000000dc0)='./file0\x00') open(&(0x7f0000000140)='./bus\x00', 0x1c1042, 0x0) r5 = open(&(0x7f0000000a80)='./bus\x00', 0x40002, 0x0) fallocate(r5, 0x0, 0x0, 0xffeffeff000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xc, &(0x7f0000000440), 0x3, 0x44b, &(0x7f0000001a40)="$eJzs3MtvG8UfAPDv2kn7Sx+/hKo8mhYaKIiIR9KkpfTABQQSB5CQ4FCOIUmrULdBTZBoFUFAqBxRJe6IIxJ/ASe4IOCExBUkjqhShXJp4WS09m5iO44b5+UUfz7SJjO7Y898vTv2zE6cALrWUPojiTgQEb9FRH81W19gqPrrztLC5N9LC5NJlMtv/pVUyt1eWpjMi+aP259neiIKnyZxtEm9c1evXZwolaavZPnR+Uvvjc5dvfbszKWJC9MXpi+Pnz17+tTY82fGn9uSONO4bg9+OHvsyKtv33h98tyNd376Jsnjb4ijhT/aqHKo1cEnyuU2nmr3O1iTTno62BDaUqx20+it9P/+KMbKyeuPVz7paOOAbVUul8sPrH14sQz8hyXR6RYAnZF/0Kfz33zboaHHrnDrxeoEKI37TrZVj/REISvT2zC/3UpDEXFu8Z8v0y3Wfx8CAGDDvkvHP880G/8Vova+0P+zNZSBiLgvIg5FxJmIOBwR90dUyj4YEQ+1WX/jIsnq8U/hZl32jTYruIt0/PdCtrZVP/7LR38xUMxyByvx9ybnZ0rTJ7PXZDh696b5sRZ1fP/yr5+vdax2/Jduaf35WDBrx82evfWPmZqYn9hMzLVufRwx2NMs/mR5JSCJiCMRMbjeJ204qTNPfX2sVdHW8bewBetM5a8inqye/8VoiD+XtF6fHP1flKZPjuZXxWo//3J9zat2U/FvgfT872t6/S/HP5DUrtfOtV/H9d8/W3NOs9Hrf0/yVt2+Dybm56+MRexJXqs2unb/eEO58ZXyafzDJ5r3/0Ox8kocjYj0In44Ih6JiONZ2x+NiMci4kSL+H986fF3Nx7/9krjn2rr/K8k9kTjnuaJ4sUfvq2rdKCd+NPzf7qSGs72rOf9bz3t2tjVDAAAAPeeQkQciKQwspwuFEZGqn/Dfzj2FUqzc/NPn599//JU9TsCA9FbyO909dfcDx3LpvV5frwhfyq7b/xFsa+SH5mcLU11OnjocvvX6P+pP4udbh2w7XxfC7qX/g/dS/+H7qX/Q/dq0v/7OtEOYOc1+/z/aF2PTBr/XRhwj2no/02W/RZ3rC3AzjL/h+6l/0P30v+hK831xd2/JC8hsSoRhV3RjN2WOL47mrH5RKffmQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALbGvwEAAP//dtjoWw==") madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2) r6 = add_key$keyring(&(0x7f0000000000), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000540)="0706675823b8a37f19b37e0f9f120663b78a6a322f28cb301825eddc42c667fc68923d7df9f4c1843c5f11b63d2684fff43955079736fa4c80100487c31c09706b6bf145eb1baf416d2681491bd6a3098fe1a6741d65b085b4075db8419d9e6d17b1eec4dfb860a71d61af753459bcc5ea1f20d6c1c74afda3b0c08bf98886eaac01b08aa753b8727f25773c98cd6a78c06b758992b03b81e2e09cf103dc16a5658a3b58626b457ee4773d41b3548f2258a2e11cc22555da4ef9035cbf", 0xbd, r6) r8 = add_key$user(&(0x7f0000000180), &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000140)="04", 0x1, 0xfffffffffffffffe) keyctl$setperm(0x5, 0x0, 0x4032220) keyctl$dh_compute(0x17, &(0x7f00000001c0)={r8, r7, r8}, 0x0, 0x0, 0x0) setns(r3, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) 53.602129471s ago: executing program 1 (id=201): socket$inet_smc(0x2b, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)={0x2c, 0x13, 0x821, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r3}, @typed={0x6, 0x0, 0x0, 0x0, @str='!\xa5'}, @typed={0xc, 0x1, 0x0, 0x0, @u64}]}, 0x2c}], 0x1}, 0x0) 51.635185088s ago: executing program 1 (id=205): getegid() syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000000), 0x1, 0x513, &(0x7f00000010c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7800, 0x176fc797823bf93b, 0x7fff, 0x5f5a, {{0xb, 0x4, 0x1, 0x2b, 0x2c, 0x65, 0x0, 0x2, 0x6, 0x0, @multicast1, @multicast1, {[@cipso={0x86, 0x18, 0x7ffffffffffffffd, [{0x5, 0x12, "22020000000c64ff8500000000000800"}]}]}}}}}) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)=0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000240)={'ip_vti0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x80d0, 0x1e94c6b1dfaa0d3d, 0x3, 0x2, {{0x11, 0x4, 0x3, 0x8, 0x44, 0x66, 0x0, 0x1, 0x2f, 0x0, @broadcast, @broadcast, {[@timestamp_addr={0x44, 0xc, 0x7c, 0x1, 0xb, [{@multicast1, 0xfff}]}, @timestamp={0x44, 0x24, 0xb2, 0x0, 0x4, [0x6, 0x2, 0x5, 0x8001, 0x7fff, 0x7, 0x100, 0x101]}]}}}}}) r5 = socket$rxrpc(0x21, 0x2, 0xa) sendto$rxrpc(r5, 0x0, 0x0, 0x10, &(0x7f00000002c0)=@in4={0x21, 0x0, 0x2, 0x10, {0x3, 0x0, @private=0xfffffffd}}, 0x24) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = gettid() r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x9000018}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)=@bridge_dellink={0x5c, 0x11, 0x1, 0x70bd2a, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x3009, 0x8004}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x40}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}, @IFLA_IFALIAS={0x14, 0x14, 'bridge_slave_1\x00'}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x1}, @IFLA_TXQLEN={0x8, 0xd, 0x567}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4010004}, 0xa0) sendmsg$DEVLINK_CMD_RELOAD(r7, 0x0, 0x0) r9 = socket(0x0, 0x5, 0x0) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000200)={r6, r10, r11}, 0xc) openat$damon_monitor_on(0xffffffffffffff9c, &(0x7f0000003640), 0x0, 0x110) sendmsg$nl_route(r1, &(0x7f0000001340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001300)={&(0x7f00000042c0)=ANY=[@ANYBLOB="681000001900200025bd7000fcdbdf2580141002fe02000e000a000008000700e000000108000300", @ANYRES32=r2, @ANYBLOB="06001c004e200000080006000800000008000300", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="08000400", @ANYRES32=r4, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB], 0x1068}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x10000, 0xffffffffffffffff, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000000)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x2800060, &(0x7f0000000300)=ANY=[@ANYBLOB='mode=00000000000000000000002,nr_inodes=16k-,nr_inodes=e']) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x200000, {0x2, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) getdents64(r0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000001600)={0x2020}, 0x2020) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_queued\x00', 0x275a, 0x0) 49.227604645s ago: executing program 1 (id=210): recvfrom$inet_nvme(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) r3 = creat(&(0x7f0000000340)='./file0\x00', 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2}}, @func_proto]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @broadcast}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000100)=0xe5, 0x4) bind$inet(r5, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000080)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@RTM_NEWMDB={0x38, 0x55, 0x25, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x0, 0xfffc, {@ip4=@multicast1=0xe0000300, 0x800}}}]}, 0x38}, 0x1, 0xf00}, 0x0) mknod(&(0x7f0000000500)='./file0\x00', 0x0, 0x0) mount$pvfs2(0x0, &(0x7f0000000740)='./file0\x00', &(0x7f0000000780), 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5c0000001000030426bd70000000000000000300", @ANYRES32=r2, @ANYBLOB="0100000000000000340012800b00010067656e65766500002400028005000d0000000000060005"], 0x5c}}, 0x0) r10 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r10, 0xc0d05605, &(0x7f0000000040)={0x0, @sdr}) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000740)={0x130, 0x0, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x7}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x5}, @CTA_NAT_SRC={0x3c, 0x6, 0x0, 0x1, [@CTA_NAT_PROTO={0x24, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e23}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e24}]}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @empty}]}, @CTA_TUPLE_MASTER={0x94, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}, @CTA_LABELS_MASK={0x20, 0x17, [0x9, 0x0, 0x0, 0xfffffffe, 0x7, 0x3, 0x3]}, @CTA_LABELS_MASK={0x1c, 0x17, [0xffff8000, 0x7fff, 0x8000, 0x28, 0x1, 0x9]}]}, 0x130}, 0x1, 0x0, 0x0, 0x80}, 0x20008000) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x20, 0x6, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x60, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 48.58022581s ago: executing program 1 (id=213): madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0xb) 48.384658272s ago: executing program 33 (id=213): madvise(&(0x7f0000000000/0x600000)=nil, 0xffffffffffffffff, 0xb) 5.620912142s ago: executing program 3 (id=340): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r0}, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r1, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xf00, 0x1, 0x0, 0x0, 0x0}) 4.699264198s ago: executing program 3 (id=350): bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff038}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0x2, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4800) 4.59506966s ago: executing program 2 (id=352): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000006ec0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000b00000008000300", @ANYRES32=r1, @ANYBLOB="24005080050002000000000004000500090001"], 0x40}}, 0x0) 4.51071637s ago: executing program 3 (id=353): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./bus\x00', 0x0, &(0x7f0000000200), 0xfe, 0x254, &(0x7f0000000840)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = open(&(0x7f0000000000)='./bus\x00', 0x24142, 0x0) pwrite64(r0, &(0x7f0000000300)='_', 0x1, 0x10000000005) 4.500835301s ago: executing program 0 (id=354): socket(0xb, 0x80000, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000003d80), 0x1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) readv(r4, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000080)=""/61, 0x3d}], 0x2) syz_usb_disconnect(r3) syz_io_uring_setup(0x9, &(0x7f0000000780)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, 0x0) ioctl$I2C_RETRIES(r2, 0x701, 0x1ff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x10, 0x1, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r8, r7) io_uring_enter(0xffffffffffffffff, 0x567, 0xd16d, 0x15, 0x0, 0x0) r9 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[], 0x0) getgroups(0x0, 0x0) 4.444110797s ago: executing program 2 (id=355): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r0}, &(0x7f0000000200), &(0x7f0000000440)}, 0x20) 4.443697198s ago: executing program 6 (id=356): socket(0xb, 0x80000, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000003d80), 0x1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) readv(r4, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000080)=""/61, 0x3d}], 0x2) syz_usb_disconnect(r3) syz_io_uring_setup(0x9, &(0x7f0000000780)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, 0x0) ioctl$I2C_RETRIES(r2, 0x701, 0x1ff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x10, 0x1, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r8, r7) io_uring_enter(0xffffffffffffffff, 0x567, 0xd16d, 0x15, 0x0, 0x0) r9 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[], 0x0) getgroups(0x0, 0x0) 4.329791321s ago: executing program 2 (id=357): syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f0000000140)={[{@journal_async_commit}, {@heartbeat_none}, {@localflocks}, {@inode64}, {@localalloc={'localalloc', 0x3d, 0xfffffffffffffffa}}, {@noacl}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, r1, 0x0) 4.201418585s ago: executing program 3 (id=358): socket(0xb, 0x80000, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000003d80), 0x1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) readv(r4, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000080)=""/61, 0x3d}], 0x2) syz_usb_disconnect(r3) syz_io_uring_setup(0x9, &(0x7f0000000780)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, 0x0) ioctl$I2C_RETRIES(r2, 0x701, 0x1ff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x10, 0x1, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) dup2(r8, r7) 2.761908722s ago: executing program 5 (id=359): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYRES8=0x0], 0x1, 0x217, &(0x7f00000004c0)="$eJzs3TFrE2EYB/CnttVSkGQQiiJ44uIUmop7ilQQA4qSQSeLTVGaWDAQ0KF180voV9DRVXAQV7+ACFIFF7t1ECL1YmNrYiM1OTG/35KH3Pu/e95LyEuGvLl1sr6ytNpY3tzciKmpsZgoRSm2xiIfh2I8Uo8CAPifbLVa8aWVyroXAGA4rP8AMHr6XP+vDrElAGDAfP8HgNFz/cbNy/Pl8sK1JJmKqD9uVpqV9DE9Pr8cd6MW1ZiNXHyNaO1I64uXyguzybaP+ajU19v59WZlfHe+GLnId88Xk9Tu/GRMt/PvpqMac5GLY93zc13zh+PsmZ+uX4hcvL0dq1GLpdjOdvJrxSS5cKW8J3/k+zgAAAAAAAAAAAAAAAAAAAAAABiEQrKj6/49hUKv42m+//2B9u7PMxEnJrKdOwAAAAAAAAAAAAAAAAAAAPwrGg8erizWatX7vyvuvXn2ar8xfRZj7ese9DwHL46e/vCk15jxP7s/f7d4eSrL29Jn8XrjzvFzjZnzmbUxGRG/PtPzrfU5FzGgfp5n+lr8mPW+g2eelhZfrL3/1O+Zh/5RBAAAAAAAAAAAAAAAAAAAI6/zo9+sOwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7HT+/39wRdZzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbwEAAP//uSidyw==") bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipv4_getrule={0x1c}, 0x1c}}, 0x800) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0x40000022) write$binfmt_elf32(r3, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c4600f60f000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r3) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x21081e, &(0x7f0000000200), 0x1, 0x4fa, &(0x7f00000005c0)="$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") 2.759795542s ago: executing program 2 (id=369): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="6e6f626172726965722c6e6f657874656e745f63616368652c6673796e635f6d6f64653d7374726963742c696e6c696e655f78617474720000693a653d3078303030303030303030303030303766662c736d61636b6673726f6f080000006673f52b00e58abba2d0cc27be339f6f4fe5ad35a724e1531a622f050000008586eb5ba3614d2c24abf5a2614c0f111e057112dafd66336a5e3b6512b81cda80be6e9a34ccc2b88c0100008000000000e3f5def862b95c20ee847008000b0c22653d2ff39b36732e46b56357afe57094f42ba61c5e8b4e184d7dd50000000000000000c0469264c247cd3c7fcb39043dda97538456bc294ae31e525d3b664cf8e83b52b1885b866b58698b3f132aced62a4fc7c8c400b805173d7488a35708d2523190c0014689f57be6ee3f5d28935a0000000000000000000000000000000000000059c1403d010001008ab61fa90695a8b268c277645c1e357ec9316354f659d4244fe126a8364eaa0de6bf4ba21c767782a04bdbb8c86d0cc7e3f03f8ef15c0ee311768cccb8affb0ae5d7cd0000000097676c046a6c754c98dd5f400ad99a588d983ae6e07b4e0e0907266aca53b30a815a84295fb5eab2f263613d36994dc15562892c33ed149270907e9c2e4d0cac7dd9735621a0c6768d4f70c664699157854bb1b85ce3f6ea44456e4f1ae1575315d77f2b995ce4d6ce21b17ca891c155ddd9916e997c32e78231e8d54675e4edf480980023b9736180ff98cf93f888eb70abb728b7e91a5d75b7e43e54f92b6e679249576f12533bef1c93aa993977f15c0a7b595423444db6e87480c46c408f6d48afa1ba"], 0x1, 0x5541, &(0x7f000000b2c0)="$eJzs3E1vG1UXAODjpOn32zdCLNh1pAopkWqrTj8EuwKt+BCtogILVuDYjuXW9kSx44asWLBELFjzJxBIrFjyG1iwZodYgNghgTx3Ag0FiVInbtLnkcZn5vr6zLlWZOvMRA7gqbWY/fJTJc7FqYiYj4izEcV+pdwK11N4LiLOR8TcA1ulHP9j4HhEnI6Ic5PkKWelfOrTi+MLV3984+evvz1x7MznX303u1UDs/Z8RPQ30v79fop5J8W75Xhj3C1i/8q4jOmJ/r3yOB+Xny5lnsbuvEYRL3fS/HxjaziJ671GcxI73fVifGOQTjgcp3i/vVa84G5jszhutdeK2B3mRezspPNs76TPtp3hKOVplfk+KNLHaLQb03h7u53Ws3GviM3BqBxPefNWe3sSx2UsTxfNvNcq6lj7z2/zE+/N7mBrOxu3N4fdfJBdrdVfqNWvVeubeas9al+pNvqta1eypU5vMq06ajf61zt53um1a828v5wtdZrNar2eLd1or3Ubg6xer12uXapeXS73Lmav3n4n67WypUl8uTvYGnV7w2w938zSK5azldrlF5ezC/XsrVur2eqdmzdvrb793o13b7906/VXykkPlZUtrVxaWanWL1VX6stP0fo/Koue4vrhsVQebfqJ/aoD4BDR/wOzML3+v+jbiwyp/9+8E7H//X/o/6fiof538m3xpPa/+9b/fzal/n/ydXu41g+P5RH7fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjo7vF754rdhZTMdnyvH/lUPPlMeViJiLiN/+xnwc35Nzvsyz8A/zF/5SwzeVKDJMznGi3E5HxPVy+/X/+/0uAAAAwNH15YfnP0ndenpYnHVBHKR00Wbu7PtTyleJiIXFH6aUbW7y8OyUkhV/38die0rZigtYJ6eULF1yOzatbP/K/J5w8oFQSWHuQMsBAAAOxN5O4GC7EAAAAA7Sx7MugNmoxO6tzN17wcV/3v95Q/DUniMAAADgEKrMugAAAABg3xX9v9//AwAAgKMt/f4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwO/s3E9u2kAUB+Bngwv9p6Kq+/Yo3cExeoQuu6w4QC/BEegVcgHOQHY5QgQRHgeFKImieGwr5PskM4wFPz8jvJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJltV78//v9X9uc3b6dF172R9u6AQAA4C3YVutF/WaW+h+b85+bU1+bfhERZUQ8NHYfxbuTzFGTUz3y+epeDRcRdcLhGpPm+BARP5vj+kvXvwIAAACcr81yNU+j9fQyG7og+pQmbcpPvzLlFRFRza4ypZWHvG+Zwur/9zj+ZEqrJ7CmmcLSlNs4V9qz1I/7cdZueqcpUlM+/f1s9w4AAPRodNL0OwoBAACgT7+HLoBhFHG7lHlcCpykplnee3/SAwAAAF6hYugCAAAAgM7V43/7/wEAAMB5S/v/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KVttV5slqt525zdvp08dwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcMP+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw5nd/+T8xNc4kc6+NpeeRZO3U2Do19s6Noz+Mr18DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/tzmwIgCIRhcCv7+hfe/7Dxgp4hghkQHnZREAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB+5Zyzj1DpjSzxV1TJN7Bn3qjqySpxZJa5c6OPB1j/8EQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCycz+vcVRxAMDfzOxs0mpxjZJDRKx40ItNt7W1N/GgBA/+CUJItzV26482B1uKkIs3ybkX0aOIoMRb/4eeW+il3nrIoYLnyPxKJj/AtWRnttnPB9687yzDvO+bDSHffW8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAeWx/uxkl26BVxXL724Omdlax/uK/P3Nt4tJC1LI6aTPr58Hr9JJqvncw2nwwAAADTIanq+xDC43RzKevjXl7/p9U1Wc3/06kirur5/XV/1Ve1f9b+/OPJqzsD9YpxspteWR0Ozh5MpTO+WU6w7ZdGuKiTP/n8s5ckf0PiT9Zf2Urz5xn9cP/+R908nBl/ugDAszlT9WVQ/T2U9f02EwNganRqhXdV/ye9dnMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaMLWenihiqMQwkJnN848fHpnZbff3jm/t/FooWoX797dqN8zu0UaQriyOhycDbNNTmei3bx1+9rycDi4cVTBmyNf/EYI4ahHHzX4oJz+tc9GuDiEMaVxupW5T10Ql2/2Ed/5VPbzMxETHEvQ4i8lAACOpbRsWV3/ON1cyl6L5kLY/nlv/f92LQ4H6v9waP3/5POLD+pj1ev//iG5zIxtlpNtce3614s3b91+d/X68tXB1cGX753rv98/f+nChUuL+WclxbHtNAEAAHiOdctWr//juYPr/ydrcRix/v/mx/539bGS/6j/p9Xuol/bmQAAAEy3l0//83d0yOtRtxu+XV5bu9Evjjvn54pjC6n+bzNlq9f/yVzbWQEAAABN2FqP9qz/X67FYcT1/xd/ee23+j2TEMKJcv3/zMpXw8vNTWeijeXLw9WXKewsAAAAoKzHT+xb/0/z/f/xzpaHOITwzltFXP4bwJHq/+Tj73+tj1Xf/3++uSlOpHi+eB55Px9CZ77tjAAAADjOZvPWy+v/v9LNpS9+P/lp1/5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKb9GwAA///tNjfM") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000008c0)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0x20) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f514, &(0x7f0000000100)={0x4, 0x5, 0x2}) 2.503286931s ago: executing program 0 (id=360): r0 = socket$inet(0x2, 0x3, 0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffd72}}]}, 0x78}}, 0x0) 2.503071161s ago: executing program 6 (id=361): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000780)={0x0, 0x50, &(0x7f0000000000)={&(0x7f00000007c0)=@bridge_delneigh={0x30, 0x1c, 0xf07, 0x0, 0x0, {0x7, 0x0, 0x0, r1, 0x80, 0x87, 0x9}, [@NDA_LLADDR={0xa, 0x2, @link_local}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}}, 0x0) 2.296204015s ago: executing program 0 (id=362): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$inet(r0, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @private=0xa010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0x2}], 0x1, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @local, @dev}}}, @ip_retopts={{0x14, 0x0, 0x7, {[@rr={0x7, 0x3, 0x8b}, @noop]}}}], 0x38}, 0x0) 1.579604177s ago: executing program 6 (id=363): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=@bridge_delneigh={0x28, 0x1c, 0xc07, 0x0, 0xfffffffc, {0x7, 0x0, 0x0, r1, 0x80, 0x64}, [@NDA_LLADDR={0xa, 0x2, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.578689358s ago: executing program 3 (id=364): setresuid(0xee01, 0x0, 0x0) keyctl$restrict_keyring(0xb, 0xfffffffffffffffc, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000500)={[{@codepage={'codepage', 0x3d, 'cp932'}}, {@part={'part', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x6}}, {@umask={'umask', 0x3d, 0x6}}, {@gid}, {@iocharset={'iocharset', 0x3d, 'cp862'}}]}, 0x1, 0x2db, &(0x7f0000000800)="$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") unlink(&(0x7f0000001c80)='./file2\x00') syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) 1.47368816s ago: executing program 5 (id=365): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x288, 0x258, 0x258, 0x288, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@connlimit={{0x40}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@remote, 'team_slave_1\x00'}}}, {{@uncond, 0x0, 0xf8, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000800)={@mcast2={0xff, 0x5}, @mcast1, @mcast2, 0x10000000, 0x0, 0x8000}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001c00c1", @ANYBLOB="fffbac4412cba1c6811c37809ee56f59aec9289a0a6a3f1a7c02f43fc4bef25e695c07da3bd15bf2653277a9ca9087199d73bf28cd0bed4d192dd94a1afa1bbc5764cb442e32ee2588b0e424c495c50f3b4294769313f185c142f7777c4a27655224898bbba697d8eb4fb464f01762f2a66141c1e457fea9c2adf60a09e8058075ae92272cf36252fc350ebee07dd5369425eefad96cd135a33b247de0064c93bfcae5d904a595e7b6413bfcfb66224e9e4e9ba7bf30f2bfea8b639fd33eb22122d5131bc8924e8442fe5206a27ef4cb10344f72ccbbca13bf6f22e9b679b86462ed25432b1d935c6d", @ANYRESHEX=r0, @ANYBLOB="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"], 0x14}}, 0xc4) 1.391675929s ago: executing program 6 (id=366): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000010180)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, &(0x7f0000000280)=0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) shutdown(r0, 0x2) 1.391477619s ago: executing program 0 (id=367): syz_mount_image$minix(&(0x7f00000001c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000080)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="7665b56bff7d13a2d819dd99d7b7fb44d89826e61bdd16b72b7b4b28466b2dd5276d640c15e37c725cc51cf9ccb08269fbbcf21642cf3700d39319aedab841312becd7508764407fc111e219d48aff23cec7bff40e31ce41ce552026be34aef66f44ef30690a7b52e1dd15b63c9d5de5b8fd41279c39eaa7c3660cdf0466414f5b966df46c5dd09f5d724a4d956293d161bf6a0aab3287558cfa91db1a051d07", @ANYRES32, @ANYRESOCT=0x0, @ANYRES8, @ANYRES8=0x0], 0x9, 0x1e5, &(0x7f0000000400)="$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") mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 1.291176701s ago: executing program 6 (id=368): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=@bridge_setlink={0x44, 0x11, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r1}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x0, 0x0, 0x123e}, {0x8}, {0x8}]}}]}]}, 0x44}}, 0x0) 1.284145302s ago: executing program 5 (id=370): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) syz_mount_image$squashfs(&(0x7f00000010c0), &(0x7f0000001100)='./file0\x00', 0xa10040, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x1, 0x1b1, &(0x7f0000000f00)="$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") write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) 1.132017969s ago: executing program 0 (id=371): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) utimes(&(0x7f0000000080)='./file0\x00', 0x0) 1.131680349s ago: executing program 6 (id=372): socket(0xb, 0x80000, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000003d80), 0x1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) readv(r4, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000080)=""/61, 0x3d}], 0x2) syz_usb_disconnect(r3) syz_io_uring_setup(0x9, &(0x7f0000000780)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, 0x0) ioctl$I2C_RETRIES(r2, 0x701, 0x1ff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x10, 0x1, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r8, r7) io_uring_enter(0xffffffffffffffff, 0x567, 0xd16d, 0x15, 0x0, 0x0) r9 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[], 0x0) getgroups(0x0, 0x0) 1.131331269s ago: executing program 3 (id=373): socket(0xb, 0x80000, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000003d80), 0x1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) readv(r4, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000080)=""/61, 0x3d}], 0x2) syz_usb_disconnect(r3) syz_io_uring_setup(0x9, &(0x7f0000000780)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, 0x0) ioctl$I2C_RETRIES(r2, 0x701, 0x1ff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x10, 0x1, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) r8 = syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(r8, r7) io_uring_enter(0xffffffffffffffff, 0x567, 0xd16d, 0x15, 0x0, 0x0) r9 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10) r10 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000240)={'syz_tun\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000180)=ANY=[], 0x0) ioctl$VIDIOC_G_STD(r1, 0x80085617, &(0x7f0000003ec0)) 1.100274383s ago: executing program 5 (id=374): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000280)='./file0\x00', 0x208008, &(0x7f0000000000)=ANY=[], 0x80, 0x162, &(0x7f00000005c0)="$eJzs2rFKw0AYB/BPGi3UzdGpUKkONkkTrbNjcXNzLG2uDV5sSQRpX0CcBIVz8CUEn8BHyOimi4MvEUlzhCQWzSDkhP9vyR++NPlyV77pOv7U67KgQ7Q/uzv92PKnXrNnHw1Zlw0o0SeiZhzCKHrQ6Zu3tB5GpK+4oVo7n8m1tTcWJzfM5Y5VdUsAAAAAAAAAAAAAAAAAAAAAAFBSuyFDYyK8a+Zyp5upBi3tfMC54wcVtVe5dlOe4SIm+GO8Pnb+hrNNGVxx7Md1M//7exl2J4K/F9fXuPRmRjBfdFxvMHbGzoVl2T3zwDQPLWP5LKP4xPaT7InC6NnUKZLSeua82WuZ82Zy/7VtV9xeFd8WzBdy/xUIa2q0UTLUiEiBNlQKfU2xf9S/CTVSoo1MSEfExsqpov06d1TRWE+uo7rdeonnnz6c8pEsLr+1Tn+0ZvJNlC9V9eEA8LOvAAAA//8Jlzfq") chdir(&(0x7f0000000080)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) openat$cgroup_ro(r0, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0) 1.058015568s ago: executing program 0 (id=375): socket(0xb, 0x80000, 0x7) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vbi(&(0x7f0000003d80), 0x1, 0x2) r2 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f000010"], 0x0) r4 = syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) readv(r4, &(0x7f0000001640)=[{0x0}, {&(0x7f0000000080)=""/61, 0x3d}], 0x2) syz_usb_disconnect(r3) syz_io_uring_setup(0x9, &(0x7f0000000780)={0x0, 0x2, 0x10100, 0x0, 0x4}, &(0x7f0000001240)=0x0, 0x0) ioctl$I2C_RETRIES(r2, 0x701, 0x1ff) syz_io_uring_submit(r5, 0x0, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r1, 0x0, &(0x7f0000000340)}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x10, 0x1, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r7, 0x404c534a, &(0x7f00000001c0)={0x0, 0x0, 0x9}) dup2(0xffffffffffffffff, r7) 953.1181ms ago: executing program 2 (id=376): openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) unshare(0x2c020400) r0 = socket(0x2, 0x2, 0x1) bind$inet6(r0, 0x0, 0x0) 840.828393ms ago: executing program 5 (id=377): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000580200000000000000000000000040"]) 604.98887ms ago: executing program 5 (id=378): memfd_secret(0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x444b, &(0x7f0000008900)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, 0x0, 0x0) 0s ago: executing program 2 (id=379): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r0, &(0x7f0000000180), 0x40010) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): SSID 50:50:50:50:50:50 [ 70.481578][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.512039][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.541287][ T4316] EXT4-fs (loop3): 1 truncate cleaned up [ 70.547068][ T4316] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 72.161606][ C1] sched: RT throttling activated [ 72.182340][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.188968][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.215415][ T4318] loop2: detected capacity change from 0 to 8192 [ 73.332686][ T4340] Zero length message leads to an empty skb [ 74.585590][ T4343] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.714329][ T26] audit: type=1326 audit(1729937603.901:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 74.776775][ T26] audit: type=1326 audit(1729937603.941:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 74.802259][ T26] audit: type=1326 audit(1729937603.941:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=81 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 74.824664][ T26] audit: type=1326 audit(1729937603.941:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 74.846986][ T26] audit: type=1326 audit(1729937603.941:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 74.873369][ T26] audit: type=1326 audit(1729937603.941:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 74.932200][ T26] audit: type=1326 audit(1729937603.941:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 74.966433][ T26] audit: type=1326 audit(1729937603.941:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 75.088320][ T26] audit: type=1326 audit(1729937603.941:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 75.110812][ T26] audit: type=1326 audit(1729937603.941:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4351 comm="syz.0.18" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 76.298809][ T4363] input: syz1 as /devices/virtual/input/input5 [ 76.704878][ T4372] netlink: 9 bytes leftover after parsing attributes in process `syz.4.24'. [ 76.728452][ T4372] device gretap0 entered promiscuous mode [ 76.785235][ T4375] netlink: 9 bytes leftover after parsing attributes in process `syz.4.24'. [ 76.847533][ T4375] 0ªX: renamed from gretap0 [ 76.935079][ T4375] device 00ªX left promiscuous mode [ 76.945933][ T4375] A link change request failed with some changes committed already. Interface 00ªX may have been left with an inconsistent configuration, please check. [ 77.126231][ T4372] netlink: 9 bytes leftover after parsing attributes in process `syz.4.24'. [ 77.801021][ T4382] loop2: detected capacity change from 0 to 512 [ 77.801865][ T4372] device 00ªX entered promiscuous mode [ 77.852376][ T4382] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 77.886439][ T4382] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.26: inode #1: comm syz.2.26: iget: illegal inode # [ 77.887393][ T4377] netlink: 9 bytes leftover after parsing attributes in process `syz.4.24'. [ 77.915191][ T4382] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.26: error while reading EA inode 1 err=-117 [ 77.939907][ T4382] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 77.962066][ T4382] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.26: inode #1: comm syz.2.26: iget: illegal inode # [ 77.980286][ T4377] 1ªX: renamed from 00ªX [ 77.985514][ T4382] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.26: error while reading EA inode 1 err=-117 [ 77.999484][ T4377] device 01ªX left promiscuous mode [ 78.002793][ T4382] EXT4-fs (loop2): 1 orphan inode deleted [ 78.006743][ T4377] A link change request failed with some changes committed already. Interface 01ªX may have been left with an inconsistent configuration, please check. [ 78.020965][ T4382] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x000000000000004c,minixdf,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 79.165645][ T4411] loop2: detected capacity change from 0 to 256 [ 79.237366][ T4413] loop1: detected capacity change from 0 to 22 [ 79.262832][ T4413] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 79.342162][ T4413] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 79.345134][ T4415] loop4: detected capacity change from 0 to 2048 [ 79.572938][ T4413] overlayfs: failed to resolve './file0': -2 [ 79.582971][ T4158] loop4: p3 < > p4 < > [ 79.596811][ T4158] loop4: partition table partially beyond EOD, truncated [ 79.717452][ T4422] process 'syz.2.33' launched './file0' with NULL argv: empty string added [ 80.661332][ T4158] loop4: p3 start 4284289 is beyond EOD, truncated [ 80.743161][ T4415] loop4: p3 < > p4 < > [ 80.801126][ T4427] loop3: detected capacity change from 0 to 2048 [ 80.808833][ T4415] loop4: partition table partially beyond EOD, truncated [ 80.824787][ T4415] loop4: p3 start 4284289 is beyond EOD, truncated [ 81.015375][ T4177] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 81.068338][ T4433] loop2: detected capacity change from 0 to 1024 [ 82.130246][ T21] cfg80211: failed to load regulatory.db [ 82.231937][ T4177] usb 5-1: Using ep0 maxpacket: 8 [ 82.292147][ T4427] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 82.597919][ T4433] hfsplus: failed to load root directory [ 82.681953][ T4177] usb 5-1: device descriptor read/all, error -71 [ 82.715223][ T4443] loop1: detected capacity change from 0 to 16 [ 82.822208][ T4443] erofs: (device loop1): mounted with root inode @ nid 36. [ 82.920238][ T4443] attempt to access beyond end of device [ 82.920238][ T4443] loop1: rw=0, want=24, limit=16 [ 83.164140][ T4437] udevd[4437]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 83.241251][ T4459] erofs: (device loop1): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 83.250768][ T4459] erofs: (device loop1): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 83.260150][ T4459] erofs: (device loop1): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 83.269817][ T4459] attempt to access beyond end of device [ 83.269817][ T4459] loop1: rw=524288, want=32, limit=16 [ 83.281954][ T4459] attempt to access beyond end of device [ 83.281954][ T4459] loop1: rw=524288, want=24, limit=16 [ 86.071307][ T4490] loop2: detected capacity change from 0 to 256 [ 86.211534][ T4490] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 86.946567][ T4496] loop0: detected capacity change from 0 to 32768 [ 87.153559][ T4496] ======================================================= [ 87.153559][ T4496] WARNING: The mand mount option has been deprecated and [ 87.153559][ T4496] and is ignored by this kernel. Remove the mand [ 87.153559][ T4496] option from the mount to silence this warning. [ 87.153559][ T4496] ======================================================= [ 88.755294][ T4496] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 89.420754][ T4529] loop1: detected capacity change from 0 to 128 [ 89.616687][ T4164] ocfs2: Unmounting device (7,0) on (node local) [ 89.714874][ T4529] FAT-fs (loop1): Unrecognized mount option "sys_imni_xlate=0" or missing value [ 90.367935][ T4538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 90.435686][ T4541] loop0: detected capacity change from 0 to 764 [ 90.443530][ T4542] loop3: detected capacity change from 0 to 512 [ 90.490161][ T4541] rock: directory entry would overflow storage [ 90.498479][ T4541] rock: sig=0x4654, size=5, remaining=4 [ 90.558467][ T4542] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 90.574956][ T4542] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=2802c018, mo2=0002] [ 90.583547][ T4542] System zones: 0-2, 18-18, 34-35 [ 90.589896][ T4542] EXT4-fs (loop3): mounted filesystem without journal. Opts: lazytime,noinit_itable,debug,,errors=continue. Quota mode: writeback. [ 91.695270][ T4556] loop2: detected capacity change from 0 to 1024 [ 91.963363][ T4556] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 92.194999][ T4564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 92.377648][ T4574] netlink: 180 bytes leftover after parsing attributes in process `syz.1.72'. [ 92.393871][ T4574] loop1: detected capacity change from 0 to 512 [ 94.069039][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 94.438944][ T4574] EXT4-fs (loop1): 1 orphan inode deleted [ 94.444760][ T4574] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 94.457263][ T4574] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.551526][ T4593] loop4: detected capacity change from 0 to 164 [ 95.441431][ T4605] syz.0.79 uses obsolete (PF_INET,SOCK_PACKET) [ 95.616746][ T4614] ptrace attach of "./syz-executor exec"[4615] was attempted by "./syz-executor exec"[4614] [ 96.345516][ T4602] sctp: failed to load transform for md5: -2 [ 96.400885][ T4597] sctp: failed to load transform for md5: -2 [ 96.422105][ T4607] sctp: failed to load transform for md5: -2 [ 96.689144][ T4635] device syzkaller1 entered promiscuous mode [ 96.803817][ T4638] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 96.858446][ T4638] netlink: 'syz.0.85': attribute type 1 has an invalid length. [ 96.866344][ T4638] netlink: 4 bytes leftover after parsing attributes in process `syz.0.85'. [ 97.352642][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 97.579318][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.632122][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.661053][ T4633] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 97.781027][ T4641] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.840188][ T4641] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.885964][ T4641] bond0 (unregistering): Released all slaves [ 98.801568][ T4655] loop3: detected capacity change from 0 to 2048 [ 99.014240][ T4655] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.591553][ T4679] xt_l2tp: v2 doesn't support IP mode [ 100.706849][ T4672] tap0: tun_chr_ioctl cmd 1074025677 [ 101.153087][ T4672] tap0: linktype set to 6 [ 102.468972][ T4688] loop3: detected capacity change from 0 to 2048 [ 102.974016][ T4711] netlink: 36 bytes leftover after parsing attributes in process `syz.3.101'. [ 103.058352][ T4713] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 103.399122][ T4713] loop2: detected capacity change from 0 to 8 [ 103.578623][ T4713] SQUASHFS error: Failed to read block 0x1ea: -5 [ 103.585836][ T4713] unable to read xattr id index table [ 103.928134][ T4182] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 103.938236][ T4182] CPU: 0 PID: 4182 Comm: kworker/u5:7 Not tainted 5.15.169-syzkaller #0 [ 103.946583][ T4182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 103.956640][ T4182] Workqueue: hci2 hci_rx_work [ 103.961346][ T4182] Call Trace: [ 103.964627][ T4182] [ 103.967555][ T4182] dump_stack_lvl+0x1e3/0x2d0 [ 103.972238][ T4182] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 103.977863][ T4182] ? panic+0x860/0x860 [ 103.981934][ T4182] ? sysfs_create_dir_ns+0x282/0x390 [ 103.987220][ T4182] sysfs_create_dir_ns+0x2c6/0x390 [ 103.992340][ T4182] ? sysfs_warn_dup+0xa0/0xa0 [ 103.997019][ T4182] ? do_raw_spin_unlock+0x137/0x8b0 [ 104.002237][ T4182] kobject_add_internal+0x6e0/0xe00 [ 104.007439][ T4182] kobject_add+0x14e/0x210 [ 104.011852][ T4182] ? device_add+0x3c2/0xfd0 [ 104.016350][ T4182] ? kobject_init+0x1d0/0x1d0 [ 104.021019][ T4182] ? __raw_spin_lock_init+0x41/0x100 [ 104.026306][ T4182] ? get_device_parent+0x128/0x400 [ 104.031435][ T4182] device_add+0x476/0xfd0 [ 104.035764][ T4182] hci_conn_add_sysfs+0xe4/0x1f0 [ 104.040696][ T4182] le_conn_complete_evt+0xc15/0x1500 [ 104.045987][ T4182] ? cs_le_create_conn+0x5f0/0x5f0 [ 104.051103][ T4182] hci_le_meta_evt+0x28c/0x3f50 [ 104.055954][ T4182] ? __lock_acquire+0x1ff0/0x1ff0 [ 104.061005][ T4182] ? __mutex_lock_common+0x444/0x25a0 [ 104.066379][ T4182] ? hci_remote_host_features_evt+0x280/0x280 [ 104.072442][ T4182] ? __mutex_unlock_slowpath+0x218/0x750 [ 104.078077][ T4182] ? hci_event_packet+0x3b4/0x1550 [ 104.083185][ T4182] ? mutex_unlock+0x10/0x10 [ 104.087682][ T4182] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 104.093657][ T4182] ? print_irqtrace_events+0x210/0x210 [ 104.099116][ T4182] hci_event_packet+0xc41/0x1550 [ 104.104051][ T4182] ? rcu_lock_release+0x20/0x20 [ 104.108905][ T4182] ? hci_send_to_monitor+0x99/0x4d0 [ 104.114101][ T4182] hci_rx_work+0x232/0x990 [ 104.118518][ T4182] process_one_work+0x8a1/0x10c0 [ 104.123461][ T4182] ? worker_detach_from_pool+0x260/0x260 [ 104.129119][ T4182] ? _raw_spin_lock_irqsave+0x120/0x120 [ 104.134656][ T4182] ? kthread_data+0x4e/0xc0 [ 104.139152][ T4182] ? wq_worker_running+0x97/0x170 [ 104.144175][ T4182] worker_thread+0xaca/0x1280 [ 104.148857][ T4182] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 104.154770][ T4182] kthread+0x3f6/0x4f0 [ 104.158829][ T4182] ? rcu_lock_release+0x20/0x20 [ 104.163678][ T4182] ? kthread_blkcg+0xd0/0xd0 [ 104.168264][ T4182] ret_from_fork+0x1f/0x30 [ 104.172687][ T4182] [ 104.178345][ T4182] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 104.192366][ T4182] Bluetooth: hci2: failed to register connection device [ 104.235540][ T4719] loop4: detected capacity change from 0 to 1764 [ 104.258458][ T26] kauditd_printk_skb: 5 callbacks suppressed [ 104.258472][ T26] audit: type=1326 audit(1729937633.441:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4717 comm="syz.3.103" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d72083719 code=0x0 [ 104.380652][ T4725] loop2: detected capacity change from 0 to 1024 [ 104.589810][ T4725] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 104.618158][ T4731] loop3: detected capacity change from 0 to 128 [ 104.818275][ T4731] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 104.853327][ T4731] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.864950][ T4734] loop1: detected capacity change from 0 to 16 [ 106.661326][ T26] audit: type=1804 audit(1729937635.721:28): pid=4736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.107" name="/newroot/21/file0/bus" dev="loop3" ino=125 res=1 errno=0 [ 106.903189][ T4734] erofs: (device loop1): mounted with root inode @ nid 36. [ 106.991149][ T4739] sd 0:0:1:0: device reset [ 107.119283][ T4742] loop3: detected capacity change from 0 to 64 [ 107.489922][ T4742] overlayfs: upper fs needs to support d_type. [ 107.535900][ T4753] loop0: detected capacity change from 0 to 2048 [ 107.555518][ T4742] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 107.676017][ T4742] overlayfs: failed to set xattr on upper [ 107.688733][ T4742] overlayfs: ...falling back to index=off,metacopy=off. [ 107.710230][ T4742] overlayfs: failed to resolve './file0': -2 [ 107.798990][ T4753] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,grpjquota=,,errors=continue. Quota mode: none. [ 108.011961][ T4211] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 108.272168][ T4765] loop1: detected capacity change from 0 to 32768 [ 108.330457][ T4765] XFS: ikeep mount option is deprecated. [ 108.347709][ T4765] XFS: noikeep mount option is deprecated. [ 108.371968][ T4211] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 108.391726][ T4211] usb 5-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 108.400798][ T4211] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.473825][ T4211] usb 5-1: config 0 descriptor?? [ 108.484590][ T4761] loop2: detected capacity change from 0 to 32768 [ 108.484658][ T4765] XFS (loop1): Mounting V5 Filesystem [ 108.603618][ T4765] XFS (loop1): Ending clean mount [ 108.621434][ T4761] XFS (loop2): Mounting V5 Filesystem [ 108.634311][ T4765] XFS (loop1): Quotacheck needed: Please wait. [ 108.733834][ T4765] XFS (loop1): Quotacheck: Done. [ 108.820458][ T4211] usb 5-1: USB disconnect, device number 4 [ 108.829752][ T4761] XFS (loop2): Ending clean mount [ 108.845184][ T4761] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 [ 108.918725][ T4761] XFS (loop2): Unmount and run xfs_repair [ 108.931663][ T4761] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 108.966346][ T4761] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 109.011648][ T4761] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 109.013576][ T4166] XFS (loop1): Unmounting Filesystem [ 109.034890][ T4761] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 109.062965][ T4761] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 109.101665][ T4761] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 109.122329][ T4761] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 109.131303][ T4761] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.161712][ T4761] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.181803][ T4761] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74 [ 109.202079][ T4761] XFS (loop2): Failed to initialize disk quotas. [ 109.272393][ T4211] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x39/0xc0, xfs_finobt block 0x20 [ 109.294957][ T4211] XFS (loop2): Unmount and run xfs_repair [ 109.300897][ T4211] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 109.325298][ T4211] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 109.355987][ T4211] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 109.375472][ T4211] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 109.424962][ T4211] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 109.453192][ T4211] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 109.473324][ T4211] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 109.508795][ T4211] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.540647][ T4211] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 109.566108][ T4761] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x20 len 8 error 74 [ 109.663603][ T4792] loop0: detected capacity change from 0 to 32768 [ 109.670641][ T4799] loop1: detected capacity change from 0 to 256 [ 109.688556][ T4797] kvm: emulating exchange as write [ 109.718482][ T4799] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 109.776771][ T4792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.119 (4792) [ 109.801248][ T4799] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe622a5da, utbl_chksum : 0xe619d30d) [ 109.864535][ T4792] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 109.918583][ T4792] BTRFS info (device loop0): using free space tree [ 109.945967][ T4792] BTRFS info (device loop0): has skinny extents [ 110.693637][ T4213] Bluetooth: hci2: command 0x0406 tx timeout [ 111.609435][ T4792] BTRFS info (device loop0): enabling ssd optimizations [ 111.713625][ T4165] XFS (loop2): Unmounting Filesystem [ 112.313485][ T4851] device  entered promiscuous mode [ 112.991821][ T4854] loop3: detected capacity change from 0 to 128 [ 113.119857][ T4854] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 113.141969][ T4854] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 113.150571][ T4858] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 113.199036][ T4858] kvm: pic: level sensitive irq not supported [ 113.202772][ T4858] kvm: pic: non byte read [ 113.204063][ T4792] syz.0.119 (4792) used greatest stack depth: 18232 bytes left [ 113.234390][ T4858] kvm: pic: level sensitive irq not supported [ 113.234458][ T4858] kvm: pic: non byte read [ 114.307118][ T4873] loop4: detected capacity change from 0 to 256 [ 114.409363][ T4873] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 114.554135][ T4876] loop3: detected capacity change from 0 to 2048 [ 114.630781][ T4876] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 114.647785][ T4873] Process accounting resumed [ 114.653736][ T4876] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 114.664449][ T4876] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 114.672297][ T4876] UDF-fs: Scanning with blocksize 512 failed [ 114.703088][ T4876] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 114.927342][ T4872] Process accounting resumed [ 115.929874][ T4896] loop0: detected capacity change from 0 to 4096 [ 116.125522][ T4896] NILFS (loop0): invalid segment: Checksum error in segment payload [ 116.133967][ T4896] NILFS (loop0): trying rollback from an earlier position [ 116.210966][ T4896] NILFS (loop0): recovery complete [ 116.376713][ T4897] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 116.658522][ T4903] loop3: detected capacity change from 0 to 4096 [ 116.708045][ T4905] loop1: detected capacity change from 0 to 256 [ 117.742419][ T4914] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.754003][ T4914] FAT-fs (loop1): Filesystem has been set read-only [ 117.761058][ T4914] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.771372][ T4914] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 117.817567][ T26] audit: type=1800 audit(1729937646.971:29): pid=4914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.138" name="file1" dev="loop1" ino=1048593 res=0 errno=0 [ 118.401951][ T4915] loop0: detected capacity change from 0 to 32768 [ 118.408175][ T4903] EXT4-fs (loop3): Test dummy encryption mode enabled [ 118.415410][ T4903] EXT4-fs (loop3): bad block size 8192 [ 118.481868][ T4922] loop4: detected capacity change from 0 to 512 [ 118.700180][ T4915] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 118.726309][ T4922] EXT4-fs (loop4): Unrecognized mount option "dont_hash" or missing value [ 118.818680][ T4928] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 119.151878][ T4213] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 119.772709][ T4213] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 120.536004][ T4213] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 120.617881][ T4213] usb 2-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 120.676679][ T4213] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.713449][ T4213] usb 2-1: config 0 descriptor?? [ 120.731153][ T4922] loop4: detected capacity change from 0 to 512 [ 120.843367][ T4164] ocfs2: Unmounting device (7,0) on (node local) [ 120.910699][ T4922] EXT4-fs (loop4): inline encryption not supported [ 120.917994][ T4922] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 120.938265][ T4942] tipc: Started in network mode [ 120.943440][ T4942] tipc: Node identity eaf2cef553f6, cluster identity 4711 [ 120.956707][ T4942] tipc: Enabled bearer , priority 0 [ 120.976236][ T4922] EXT4-fs (loop4): 1 orphan inode deleted [ 121.016935][ T4922] EXT4-fs (loop4): 1 truncate cleaned up [ 121.223762][ T4947] loop3: detected capacity change from 0 to 1024 [ 121.240367][ T4922] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,nodelalloc,debug_want_extra_isize=0x0000000000000006,inode_readahead_blks=0x0000000000010000,jqfmt=vfsold,quota,inlinecrypt,,errors=continue. Quota mode: writeback. [ 121.817962][ T4947] hfsplus: catalog name length corrupted [ 121.841626][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 121.850610][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 121.859598][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 121.868562][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 121.877528][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 121.886508][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 121.895433][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 121.904416][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 121.913342][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 121.922300][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 121.980905][ T4941] tipc: Resetting bearer [ 121.983563][ T4177] tipc: Node number set to 3104100085 [ 122.218857][ T4951] xt_CONNSECMARK: invalid mode: 0 [ 122.251920][ T4951] EXT4-fs error (device loop4): empty_inline_dir:1855: inode #12: block 7: comm syz.4.142: bad entry in directory: directory entry overrun - offset=4, inode=13, rec_len=784, size=60 fake=0 [ 123.521615][ T4949] loop0: detected capacity change from 0 to 32768 [ 123.550419][ T4951] EXT4-fs warning (device loop4): empty_inline_dir:1862: bad inline directory (dir #12) - inode 13, rec_len 784, name_len 5inline size 60 [ 123.565731][ T7] usb 2-1: USB disconnect, device number 2 [ 123.669196][ T4941] tipc: Disabling bearer [ 123.717369][ T4949] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.146 (4949) [ 123.754957][ T4949] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 123.764044][ T4949] BTRFS info (device loop0): setting nodatacow, compression disabled [ 123.773081][ T4949] BTRFS info (device loop0): max_inline at 0 [ 123.779093][ T4949] BTRFS info (device loop0): enabling disk space caching [ 123.786183][ T4949] BTRFS info (device loop0): turning off barriers [ 123.792671][ T4949] BTRFS info (device loop0): turning on flush-on-commit [ 123.799627][ T4949] BTRFS info (device loop0): doing ref verification [ 123.806278][ T4949] BTRFS info (device loop0): force clearing of disk cache [ 123.809505][ T4954] loop1: detected capacity change from 0 to 8192 [ 123.813586][ T4949] BTRFS info (device loop0): enabling ssd optimizations [ 123.813633][ T4949] BTRFS info (device loop0): max_inline at 4096 [ 123.813653][ T4949] BTRFS info (device loop0): disk space caching is enabled [ 123.841294][ T4949] BTRFS info (device loop0): has skinny extents [ 124.562119][ T4214] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 124.661233][ T4949] BTRFS info (device loop0): clearing free space tree [ 124.668388][ T4949] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 124.678839][ T4949] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 124.931694][ T4214] usb 4-1: Using ep0 maxpacket: 32 [ 125.194173][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 125.489509][ T4214] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 125.697861][ T4214] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00 [ 125.707435][ T4214] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.768862][ T4214] usb 4-1: config 0 descriptor?? [ 125.848421][ T4997] kcapi: manufacturer command 0 unknown. [ 126.161508][ T4996] loop4: detected capacity change from 0 to 2048 [ 126.400735][ T4996] NILFS (loop4): invalid segment: Checksum error in segment payload [ 126.426747][ T4996] NILFS (loop4): trying rollback from an earlier position [ 126.462559][ T4996] NILFS (loop4): recovery complete [ 126.520590][ T4998] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.590692][ T4962] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop0 scanned by udevd (4962) [ 126.627125][ T4956] netlink: 64 bytes leftover after parsing attributes in process `syz.3.150'. [ 127.948053][ T5017] loop4: detected capacity change from 0 to 512 [ 128.021874][ T4214] usbhid 4-1:0.0: can't add hid device: -71 [ 128.028185][ T4214] usbhid: probe of 4-1:0.0 failed with error -71 [ 128.045658][ T5017] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 128.066049][ T4214] usb 4-1: USB disconnect, device number 2 [ 128.131300][ T5017] EXT4-fs (loop4): 1 truncate cleaned up [ 128.201798][ T5017] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,stripe=0x0000000000000200,,errors=continue. Quota mode: none. [ 129.326099][ T5033] loop1: detected capacity change from 0 to 512 [ 129.431060][ T5033] EXT4-fs (loop1): Ignoring removed bh option [ 129.590531][ T5033] EXT4-fs (loop1): can't mount with data=, fs mounted w/o journal [ 129.880938][ T5033] loop1: detected capacity change from 0 to 128 [ 130.957025][ T5033] FAT-fs (loop1): Unrecognized mount option "0x0000000000000000" or missing value [ 131.125047][ T5049] loop0: detected capacity change from 0 to 1024 [ 131.856327][ T5049] EXT4-fs error (device loop0): ext4_map_blocks:738: inode #3: block 1: comm syz.0.164: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.872494][ T5049] Quota error (device loop0): write_blk: dquota write failed [ 131.879886][ T5049] Quota error (device loop0): find_free_dqentry: Can't write quota data block 1 [ 131.889096][ T5049] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 131.899127][ T5049] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.164: Failed to acquire dquot type 0 [ 131.912073][ T5049] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm syz.0.164: lblock 1 mapped to illegal pblock 1 (length 1) [ 131.926603][ T5049] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 131.935449][ T5049] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 131.945968][ T5049] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.164: Failed to acquire dquot type 0 [ 131.957580][ T5049] EXT4-fs error (device loop0): ext4_free_blocks:6223: comm syz.0.164: Freeing blocks not in datazone - block = 0, count = 4096 [ 131.976429][ T5049] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #3: block 1: comm syz.0.164: lblock 1 mapped to illegal pblock 1 (length 1) [ 132.006172][ T5049] Quota error (device loop0): do_insert_tree: Can't read tree quota block 1 [ 132.015612][ T5049] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 132.025628][ T5049] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.164: Failed to acquire dquot type 0 [ 132.038828][ T5049] EXT4-fs (loop0): 1 orphan inode deleted [ 132.044986][ T5049] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.259130][ T5056] loop1: detected capacity change from 0 to 256 [ 132.371258][ T5060] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 132.658196][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.667341][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.132929][ T5058] tipc: Started in network mode [ 133.137807][ T5058] tipc: Node identity fe800000000000000000000000000036, cluster identity 4711 [ 133.156534][ T5058] tipc: Enabled bearer , priority 10 [ 134.310143][ T23] tipc: Node number set to 4269801526 [ 134.377375][ T5077] loop3: detected capacity change from 0 to 1024 [ 134.402965][ C0] dccp_v6_rcv: dropped packet with invalid checksum [ 134.409917][ C0] dccp_v6_rcv: dropped packet with invalid checksum [ 134.445138][ T4559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.587131][ T4559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.721905][ T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 134.966745][ T5088] attempt to access beyond end of device [ 134.966745][ T5088] loop3: rw=34817, want=5780, limit=1024 [ 134.990059][ T5088] attempt to access beyond end of device [ 134.990059][ T5088] loop3: rw=34817, want=2560, limit=1024 [ 135.529926][ T4559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.702686][ T4559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.000432][ T5095] loop2: detected capacity change from 0 to 512 [ 136.051835][ T4884] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 136.062353][ T5095] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 136.075509][ T5084] chnl_net:caif_netlink_parms(): no params data found [ 136.185750][ T5095] EXT4-fs error (device loop2): ext4_orphan_get:1427: comm syz.2.177: bad orphan inode 16 [ 136.277509][ T5095] ext4_test_bit(bit=15, block=4) = 0 [ 136.283136][ T5095] EXT4-fs (loop2): 1 orphan inode deleted [ 136.292152][ T5095] EXT4-fs (loop2): mounted filesystem without journal. Opts: data_err=ignore,nodelalloc,bsdgroups,inode_readahead_blks=0x0000000002000000,block_validity,quota,,errors=continue. Quota mode: writeback. [ 136.322169][ T4884] usb 4-1: Using ep0 maxpacket: 32 [ 136.482883][ T4884] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 136.550551][ T5106] capability: warning: `syz.2.177' uses deprecated v2 capabilities in a way that may be insecure [ 136.567924][ T5106] 9pnet: p9_fd_create_tcp (5106): problem binding to privport [ 136.670221][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.701241][ T5084] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.711914][ T4884] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 136.721939][ T4884] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 136.730249][ T4884] usb 4-1: Product: syz [ 136.734710][ T4884] usb 4-1: Manufacturer: syz [ 136.739422][ T4884] usb 4-1: SerialNumber: syz [ 136.755481][ T4884] usb 4-1: config 0 descriptor?? [ 136.769731][ T5084] device bridge_slave_0 entered promiscuous mode [ 136.772135][ T5113] EXT4-fs error (device loop2): __ext4_new_inode:1076: comm syz.2.177: reserved inode found cleared - inode=1 [ 136.788539][ T5092] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 136.802528][ T4211] Bluetooth: hci4: command 0x0409 tx timeout [ 136.811243][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.819747][ T5084] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.863663][ T5084] device bridge_slave_1 entered promiscuous mode [ 136.952241][ T26] audit: type=1326 audit(1729937666.141:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5094 comm="syz.2.177" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f093e033719 code=0x0 [ 137.076507][ T5084] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.117593][ T5084] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.140925][ T4211] usb 4-1: USB disconnect, device number 3 [ 137.315957][ T5084] team0: Port device team_slave_0 added [ 137.354492][ T5084] team0: Port device team_slave_1 added [ 137.432136][ T7] usb 2-1: unable to get BOS descriptor or descriptor too short [ 137.501696][ T7] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 137.517222][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 137.526048][ T7] usb 2-1: can't read configurations, error -71 [ 137.563321][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.721659][ T5084] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 137.776110][ T5084] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 137.807799][ T5084] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 137.874902][ T5084] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.059257][ T5121] kvm [5120]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xa10000000000 [ 138.209647][ T5121] kvm [5120]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xa20000000000 [ 138.287848][ T5140] gfs2: gfs2 mount does not exist [ 139.323740][ T4211] Bluetooth: hci4: command 0x041b tx timeout [ 139.384183][ T5121] kvm [5120]: vcpu0, guest rIP: 0x18e ignored wrmsr: 0x11e data 0xa30000000000 [ 140.487821][ T5084] device hsr_slave_0 entered promiscuous mode [ 140.628240][ T5084] device hsr_slave_1 entered promiscuous mode [ 140.707635][ T5084] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.753006][ T5084] Cannot create hsr debugfs directory [ 145.198729][ T7] Bluetooth: hci4: command 0x040f tx timeout [ 145.542522][ T4559] device hsr_slave_0 left promiscuous mode [ 145.572582][ T5185] loop1: detected capacity change from 0 to 512 [ 145.579837][ T4211] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 145.596817][ T4559] device hsr_slave_1 left promiscuous mode [ 145.617844][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.658867][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.693599][ T5185] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 145.710676][ T5185] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 145.731927][ T5185] input: syz0 as /devices/virtual/input/input6 [ 145.807559][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.875656][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.959760][ T4559] device bridge_slave_1 left promiscuous mode [ 145.961819][ T4211] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 146.001182][ T4211] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.043331][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.084498][ T4211] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.164402][ T4211] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.230431][ T4211] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.315780][ T4211] usb 1-1: invalid MIDI out EP 0 [ 146.353354][ T4559] device bridge_slave_0 left promiscuous mode [ 146.388903][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.630506][ T4559] device veth1_macvtap left promiscuous mode [ 146.664238][ T4559] device veth0_macvtap left promiscuous mode [ 146.693825][ T4559] device veth1_vlan left promiscuous mode [ 146.720611][ T4559] device veth0_vlan left promiscuous mode [ 146.913074][ T4211] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 146.972508][ T4211] usb 1-1: USB disconnect, device number 2 [ 147.281816][ T4211] Bluetooth: hci4: command 0x0419 tx timeout [ 147.333717][ T5198] netlink: 24 bytes leftover after parsing attributes in process `syz.2.193'. [ 147.642793][ T5200] fuse: Invalid rootmode [ 148.624997][ T4559] team0 (unregistering): Port device team_slave_1 removed [ 148.688822][ T4559] team0 (unregistering): Port device team_slave_0 removed [ 150.266663][ T5216] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 150.287506][ T5218] loop3: detected capacity change from 0 to 512 [ 150.313322][ T5216] ERROR: device name not specified. [ 150.340470][ T5216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 150.360681][ T5216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.198'. [ 150.376133][ T5218] EXT4-fs (loop3): Ignoring removed bh option [ 150.403343][ T5216] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 38132 - 0 [ 150.429045][ T5218] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 150.446973][ T5216] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 38132 - 0 [ 150.459782][ T5216] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 38132 - 0 [ 150.461341][ T5212] loop1: detected capacity change from 0 to 2048 [ 150.479679][ T5216] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 38132 - 0 [ 150.521913][ T5220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.198'. [ 150.575411][ T5218] loop3: detected capacity change from 0 to 128 [ 150.585184][ T5212] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 150.599520][ T5212] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.621450][ T5220] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 38132 - 0 [ 150.656038][ T5220] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 38132 - 0 [ 150.669473][ T5220] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 38132 - 0 [ 150.719050][ T5220] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 38132 - 0 [ 150.769876][ T5218] FAT-fs (loop3): Unrecognized mount option "0x0000000000000000" or missing value [ 150.968964][ T5084] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 151.004724][ T5218] loop3: detected capacity change from 0 to 256 [ 151.042015][ T5084] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 151.084898][ T5084] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 151.234866][ T5084] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 151.391848][ T4177] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 151.701845][ T4177] usb 1-1: Using ep0 maxpacket: 32 [ 151.892530][ T4177] usb 1-1: config index 0 descriptor too short (expected 1180, got 375) [ 151.900901][ T4177] usb 1-1: config 0 has an invalid interface number: 26 but max is 2 [ 152.160387][ T4177] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping [ 152.169935][ T4177] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 152.180522][ T4177] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3 [ 152.194883][ T4177] usb 1-1: config 0 has no interface number 0 [ 152.201170][ T4177] usb 1-1: config 0 interface 26 altsetting 106 endpoint 0xC has invalid maxpacket 1024, setting to 64 [ 152.212584][ T5084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.219485][ T4177] usb 1-1: config 0 interface 26 altsetting 106 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 152.219519][ T4177] usb 1-1: config 0 interface 26 altsetting 106 has an invalid endpoint with address 0x0, skipping [ 152.219543][ T4177] usb 1-1: config 0 interface 26 altsetting 106 has an invalid endpoint with address 0xED, skipping [ 152.219568][ T4177] usb 1-1: config 0 interface 26 altsetting 106 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 152.219595][ T4177] usb 1-1: config 0 interface 26 altsetting 106 endpoint 0x3 has invalid wMaxPacketSize 0 [ 152.219619][ T4177] usb 1-1: config 0 interface 26 altsetting 106 has 5 endpoint descriptors, different from the interface descriptor's value: 9 [ 152.219648][ T4177] usb 1-1: config 0 interface 26 has no altsetting 0 [ 152.763683][ T4177] usb 1-1: New USB device found, idVendor=07c0, idProduct=1503, bcdDevice=73.f3 [ 152.937032][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.946763][ T4177] usb 1-1: Product: syz [ 152.950968][ T4177] usb 1-1: Manufacturer: syz [ 152.963534][ T4177] usb 1-1: SerialNumber: syz [ 152.992924][ T5260] syz.3.203[5260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 152.993090][ T5260] syz.3.203[5260] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.012524][ T4177] usb 1-1: config 0 descriptor?? [ 153.042682][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.085926][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.123761][ T5084] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.150716][ T5266] loop1: detected capacity change from 0 to 512 [ 153.192542][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 153.233431][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 153.274771][ T4249] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.281887][ T4249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.372471][ T4249] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 153.383285][ T5266] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.205: corrupted inode contents [ 153.420408][ T5266] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #3: comm syz.1.205: mark_inode_dirty error [ 153.432782][ T4177] iowarrior 1-1:0.26: no interrupt-in endpoint found [ 153.597166][ T4177] usb 1-1: USB disconnect, device number 3 [ 153.610433][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 153.641828][ T5266] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #3: comm syz.1.205: corrupted inode contents [ 153.668561][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 153.687550][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.694714][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.710414][ T5266] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #3: comm syz.1.205: mark_inode_dirty error [ 153.734310][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 153.753724][ T5266] Quota error (device loop1): write_blk: dquota write failed [ 153.770704][ T5266] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 153.788457][ T5266] EXT4-fs error (device loop1): ext4_acquire_dquot:6197: comm syz.1.205: Failed to acquire dquot type 0 [ 153.809277][ T5266] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.205: corrupted inode contents [ 153.823429][ T5266] EXT4-fs error (device loop1): ext4_dirty_inode:6010: inode #16: comm syz.1.205: mark_inode_dirty error [ 153.839596][ T5266] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.205: corrupted inode contents [ 153.854530][ T5266] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #16: comm syz.1.205: mark_inode_dirty error [ 153.872362][ T5266] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.205: corrupted inode contents [ 153.884873][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 153.905511][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 153.930905][ T5266] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem [ 153.965601][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 153.980316][ T5266] EXT4-fs error (device loop1): ext4_do_update_inode:5174: inode #16: comm syz.1.205: corrupted inode contents [ 153.998521][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.020373][ T5266] EXT4-fs error (device loop1): ext4_truncate:4272: inode #16: comm syz.1.205: mark_inode_dirty error [ 154.033614][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.048698][ T5266] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem [ 154.063176][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.079117][ T5266] EXT4-fs (loop1): 1 truncate cleaned up [ 154.090822][ T5266] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 154.108651][ T5266] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 154.208092][ T5084] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 155.075193][ T5084] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.142636][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.157789][ T5293] hugetlbfs: Bad value 'e' for mount option 'nr_inodes' [ 155.157789][ T5293] [ 155.172414][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.180984][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.227703][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.353201][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.859881][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.875745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.909918][ T5084] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.954452][ T5308] loop0: detected capacity change from 0 to 4096 [ 156.073111][ T5308] ntfs: volume version 3.1. [ 156.160943][ T5312] loop2: detected capacity change from 0 to 2048 [ 156.273438][ T5312] NILFS (loop2): invalid segment: Checksum error in segment payload [ 156.281465][ T5312] NILFS (loop2): trying rollback from an earlier position [ 156.357233][ T5312] NILFS (loop2): recovery complete [ 156.442491][ T5325] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 156.619703][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 156.669128][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 156.702728][ T5331] loop0: detected capacity change from 0 to 1024 [ 156.869878][ T5084] device veth0_vlan entered promiscuous mode [ 156.995094][ T5331] EXT4-fs (loop0): Test dummy encryption mode enabled [ 157.057604][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.066102][ T5331] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 157.092647][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.130848][ T5331] EXT4-fs (loop0): Ignoring removed orlov option [ 157.168965][ T5084] device veth1_vlan entered promiscuous mode [ 157.185396][ T5331] EXT4-fs (loop0): Cannot use DAX on a filesystem that may contain inline data [ 157.206435][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.223694][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.303800][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 157.494493][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 157.507876][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 157.542312][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 157.585968][ T5084] device veth0_macvtap entered promiscuous mode [ 157.623715][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 157.647808][ T5343] loop0: detected capacity change from 0 to 1024 [ 157.659186][ T5084] device veth1_macvtap entered promiscuous mode [ 157.678988][ T5295] loop3: detected capacity change from 0 to 32768 [ 157.697645][ T4212] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 157.725779][ T5343] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 157.740096][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.763351][ T5343] EXT4-fs (loop0): orphan cleanup on readonly fs [ 157.780828][ T5343] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz.0.218: Invalid inode table block 0 in block_group 0 [ 157.801275][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.817244][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.830812][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 157.844034][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.854140][ T5343] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 157.874515][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 157.878505][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.881056][ T5343] EXT4-fs error (device loop0): ext4_quota_write:6592: inode #3: comm syz.0.218: mark_inode_dirty error [ 157.903250][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.917899][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.928857][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.940641][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.968497][ T4212] usb 3-1: Using ep0 maxpacket: 8 [ 157.986664][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 157.987050][ T5295] gfs2: fsid=syz:syz: Trying to join cluster "lock_dlm", "syz:syz" [ 158.001651][ T5343] Quota error (device loop0): write_blk: dquota write failed [ 158.009105][ T5343] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 158.020033][ T5295] dlm: no local IP address has been set [ 158.030759][ T5295] dlm: cannot start dlm midcomms -107 [ 158.054962][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.062009][ T5295] gfs2: fsid=syz:syz: dlm_new_lockspace error -107 [ 158.075366][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.085681][ T5343] EXT4-fs error (device loop0): ext4_acquire_dquot:6197: comm syz.0.218: Failed to acquire dquot type 0 [ 158.105598][ T4212] usb 3-1: config 200 has an invalid interface number: 51 but max is 0 [ 158.105634][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.115413][ T4212] usb 3-1: config 200 has no interface number 0 [ 158.133058][ T4212] usb 3-1: config 200 interface 51 has no altsetting 0 [ 158.140122][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.142834][ T5343] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz.0.218: Invalid inode table block 0 in block_group 0 [ 158.157964][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.198231][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.198259][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.210599][ T5343] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 158.239304][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.252832][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.257432][ T5084] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.270356][ T5343] EXT4-fs error (device loop0): ext4_ext_truncate:4454: inode #15: comm syz.0.218: mark_inode_dirty error [ 158.271319][ T5084] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.292020][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.299152][ T5084] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.306820][ T5343] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz.0.218: Invalid inode table block 0 in block_group 0 [ 158.318553][ T5084] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.330316][ T5084] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.339704][ T4212] usb 3-1: New USB device found, idVendor=0c45, idProduct=602d, bcdDevice=d4.c3 [ 158.350274][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.350311][ T5084] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.363498][ T5343] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 158.371667][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.387703][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.388822][ T4212] usb 3-1: Product: syz [ 158.398482][ T4212] usb 3-1: Manufacturer: syz [ 158.404635][ T5343] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem [ 158.409149][ T5084] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.428809][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.431243][ T4212] usb 3-1: SerialNumber: syz [ 158.448380][ T5343] EXT4-fs error (device loop0): __ext4_get_inode_loc:4320: comm syz.0.218: Invalid inode table block 0 in block_group 0 [ 158.461909][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.470661][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.481202][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.489648][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.508487][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.518719][ T5343] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5806: Corrupt filesystem [ 158.556182][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.585254][ T5343] EXT4-fs error (device loop0): ext4_truncate:4272: inode #15: comm syz.0.218: mark_inode_dirty error [ 158.603214][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.609754][ T5343] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem [ 158.653783][ T5343] EXT4-fs (loop0): Remounting filesystem read-only [ 158.662445][ T5343] EXT4-fs (loop0): 1 truncate cleaned up [ 158.669535][ T5343] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,grpid,errors=remount-ro,noblock_validity,block_validity,minixdf,noauto_da_alloc,. Quota mode: writeback. [ 158.803732][ T4212] gspca_main: sonixb-2.14.0 probing 0c45:602d [ 158.831905][ T4212] sonixb 3-1:200.51: Error reading register 00: -71 [ 158.870407][ T4532] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.910230][ T4212] usb 3-1: USB disconnect, device number 2 [ 158.941718][ T4532] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.960819][ T26] audit: type=1326 audit(1729937688.141:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.253979][ T26] audit: type=1326 audit(1729937688.171:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.287568][ T26] audit: type=1326 audit(1729937688.171:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.319383][ T26] audit: type=1326 audit(1729937688.171:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.348269][ T26] audit: type=1326 audit(1729937688.171:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.382298][ T26] audit: type=1326 audit(1729937688.171:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.414394][ T26] audit: type=1326 audit(1729937688.171:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.457067][ T26] audit: type=1326 audit(1729937688.171:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.500226][ T4211] Bluetooth: hci3: command 0x0409 tx timeout [ 159.508075][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 159.554342][ T26] audit: type=1326 audit(1729937688.171:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.642179][ T1478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.650469][ T1478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.750121][ T5337] chnl_net:caif_netlink_parms(): no params data found [ 159.778302][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 159.837564][ T26] audit: type=1326 audit(1729937688.171:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5342 comm="syz.0.218" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe8d5954719 code=0x7ffc0000 [ 159.941808][ T4212] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 160.010859][ T5386] loop5: detected capacity change from 0 to 256 [ 160.026924][ T5377] loop3: detected capacity change from 0 to 4096 [ 160.041139][ T5337] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.051218][ T5337] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.085944][ T5386] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 160.109025][ T5337] device bridge_slave_0 entered promiscuous mode [ 160.129661][ T5337] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.151236][ T5337] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.203960][ T5337] device bridge_slave_1 entered promiscuous mode [ 160.300641][ T4559] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.322082][ T4212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.348010][ T4212] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.535880][ T4212] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 161.049468][ T4212] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00 [ 161.060803][ T4212] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.636163][ T4212] usb 3-1: config 0 descriptor?? [ 161.645567][ T4225] Bluetooth: hci3: command 0x041b tx timeout [ 161.653977][ T5337] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.667492][ T5337] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.768858][ T4559] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.790023][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.224'. [ 161.839830][ T5407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.224'. [ 161.855760][ T5337] team0: Port device team_slave_0 added [ 161.911526][ T5410] loop5: detected capacity change from 0 to 128 [ 161.917455][ T4559] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.953405][ T5337] team0: Port device team_slave_1 added [ 161.981930][ T4213] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 162.008258][ T5380] loop0: detected capacity change from 0 to 32768 [ 162.017922][ T5410] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 162.033588][ T5410] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 162.056825][ T4559] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.062302][ T5380] XFS: attr2 mount option is deprecated. [ 162.077675][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.089764][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.117730][ T5380] XFS: ikeep mount option is deprecated. [ 162.130734][ T5380] XFS: noikeep mount option is deprecated. [ 162.137142][ T5380] XFS: noattr2 mount option is deprecated. [ 162.187934][ T5380] XFS (loop0): attr2 and noattr2 cannot both be specified. [ 162.203510][ T4212] waltop 0003:172F:0038.0001: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0 [ 162.253482][ T5337] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.281836][ T5337] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.288813][ T5337] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.455088][ T5337] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.576656][ T5372] udc-core: couldn't find an available UDC or it's busy [ 162.674537][ T5372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.984066][ T5372] udc-core: couldn't find an available UDC or it's busy [ 162.991109][ T5372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.111795][ T4213] usb 4-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 163.136072][ T4213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.258359][ T4213] usb 4-1: config 0 descriptor?? [ 163.325419][ T4213] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 163.787412][ T5372] udc-core: couldn't find an available UDC or it's busy [ 163.828306][ T5372] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.932916][ T5428] udc-core: couldn't find an available UDC or it's busy [ 163.949209][ T5428] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 163.958618][ T4212] Bluetooth: hci3: command 0x040f tx timeout [ 164.067544][ T5337] device hsr_slave_0 entered promiscuous mode [ 164.082855][ T4212] usb 3-1: USB disconnect, device number 3 [ 164.100909][ T5337] device hsr_slave_1 entered promiscuous mode [ 164.108344][ T5337] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.116365][ T5337] Cannot create hsr debugfs directory [ 164.127612][ T4559] device  left promiscuous mode [ 164.301776][ T4213] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 164.431907][ T4295] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 164.550569][ T5337] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 164.569646][ T5337] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 164.628242][ T5337] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 164.664446][ T5337] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 164.719650][ T4213] usb 6-1: unable to get BOS descriptor or descriptor too short [ 164.734452][ T4295] usb 1-1: Using ep0 maxpacket: 16 [ 164.812095][ T4213] usb 6-1: config 3 has an invalid interface number: 19 but max is 0 [ 164.835655][ T4213] usb 6-1: config 3 has an invalid interface number: 4 but max is 0 [ 164.858509][ T4213] usb 6-1: config 3 has 2 interfaces, different from the descriptor's value: 1 [ 164.872004][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 164.885404][ T4213] usb 6-1: config 3 has no interface number 0 [ 164.892161][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 164.906336][ T4213] usb 6-1: config 3 has no interface number 1 [ 164.915522][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 164.919929][ T5337] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.935699][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 164.939734][ T4213] usb 6-1: config 3 interface 19 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 164.956179][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 164.956210][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0 [ 164.956235][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 7 [ 164.956262][ T4295] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 165.003122][ T4213] usb 6-1: config 3 interface 19 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 165.008399][ T5337] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.021944][ T4213] usb 6-1: too many endpoints for config 3 interface 4 altsetting 131: 175, using maximum allowed: 30 [ 165.034330][ T4213] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0x8E has invalid maxpacket 32 [ 165.044519][ T4213] usb 6-1: config 3 interface 4 altsetting 131 endpoint 0xC has invalid wMaxPacketSize 0 [ 165.060925][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 165.068395][ T4213] usb 6-1: config 3 interface 4 altsetting 131 bulk endpoint 0xC has invalid maxpacket 0 [ 165.079179][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 165.094076][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 165.102464][ T4213] usb 6-1: config 3 interface 4 altsetting 131 has 2 endpoint descriptors, different from the interface descriptor's value: 175 [ 165.107999][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.115861][ T4213] usb 6-1: config 3 interface 19 has no altsetting 0 [ 165.115886][ T4213] usb 6-1: config 3 interface 4 has no altsetting 0 [ 165.138361][ T4295] usb 1-1: New USB device found, idVendor=0458, idProduct=704a, bcdDevice=3a.55 [ 165.147505][ T4295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.148564][ T4535] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.155579][ T4295] usb 1-1: Product: syz [ 165.162672][ T4535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.166777][ T4295] usb 1-1: Manufacturer: syz [ 165.179348][ T4295] usb 1-1: SerialNumber: syz [ 165.182419][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.190761][ T4295] usb 1-1: config 0 descriptor?? [ 165.199475][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.209057][ T4535] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.216183][ T4535] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.224886][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.244419][ T4295] gspca_main: gspca_sn9c20x-2.14.0 probing 0458:704a [ 165.271755][ T4212] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 165.281218][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.300299][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.309209][ T4213] usb 6-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=53.f5 [ 165.328305][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.339387][ T4213] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 165.357832][ T4213] usb 6-1: Product: syz [ 165.366450][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.378896][ T4213] usb 6-1: Manufacturer: syz [ 165.388023][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.400009][ T4213] usb 6-1: SerialNumber: syz [ 165.423031][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.436536][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.455462][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.475059][ T4295] gspca_sn9c20x: Write register 1000 failed -71 [ 165.481347][ T4295] gspca_sn9c20x: Device initialization failed [ 165.496242][ T5337] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.509511][ T4295] gspca_sn9c20x: probe of 1-1:0.0 failed with error -71 [ 165.528584][ T5337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.536736][ T4295] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 165.545343][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.554434][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.572453][ T4295] usb 1-1: USB disconnect, device number 4 [ 165.579146][ T4535] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.683382][ T4212] usb 3-1: unable to get BOS descriptor or descriptor too short [ 165.743028][ T4213] pl2303 6-1:3.19: required endpoints missing [ 165.749372][ T4212] usb 3-1: not running at top speed; connect to a high speed hub [ 165.812851][ T4213] pl2303 6-1:3.4: required interrupt-in endpoint missing [ 165.822341][ T4559] device hsr_slave_0 left promiscuous mode [ 165.841847][ T4212] usb 3-1: config 81 has an invalid interface number: 106 but max is 0 [ 165.858702][ T4212] usb 3-1: config 81 has no interface number 0 [ 165.872348][ T4559] device hsr_slave_1 left promiscuous mode [ 165.873481][ T4213] usb 6-1: USB disconnect, device number 2 [ 165.884464][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.900311][ T4212] usb 3-1: config 81 interface 106 altsetting 196 endpoint 0x1 has invalid wMaxPacketSize 0 [ 165.910876][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.927323][ T4212] usb 3-1: config 81 interface 106 has no altsetting 0 [ 165.945041][ T4559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.959678][ T4559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 165.965871][ T4302] usb 4-1: USB disconnect, device number 4 [ 165.983679][ T4559] device bridge_slave_1 left promiscuous mode [ 165.990200][ T4559] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.002076][ T4214] Bluetooth: hci3: command 0x0419 tx timeout [ 166.060681][ T4559] device bridge_slave_0 left promiscuous mode [ 166.078710][ T4559] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.111759][ T4212] usb 3-1: New USB device found, idVendor=1164, idProduct=0622, bcdDevice=30.63 [ 166.120843][ T4212] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.147126][ T4212] usb 3-1: Product: syz [ 166.151339][ T4212] usb 3-1: Manufacturer: syz [ 166.176452][ T4212] usb 3-1: SerialNumber: syz [ 166.212491][ T4559] device veth1_macvtap left promiscuous mode [ 166.223899][ T4559] device veth0_macvtap left promiscuous mode [ 166.240434][ T4559] device veth1_vlan left promiscuous mode [ 166.253104][ T4559] device veth0_vlan left promiscuous mode [ 166.296152][ T5502] mmap: syz.5.236 (5502): VmData 175878144 exceed data ulimit 65536. Update limits or use boot option ignore_rlimit_data. [ 166.461752][ T4214] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 166.684568][ T4212] pvrusb2: Hardware description: Gotview USB 2.0 DVD 2 [ 166.698369][ T4212] usb 3-1: selecting invalid altsetting 0 [ 166.708123][ T4212] usb 3-1: USB disconnect, device number 4 [ 166.715554][ T4212] pvrusb2: Device being rendered inoperable [ 166.770928][ T5514] loop5: detected capacity change from 0 to 32768 [ 167.242006][ T4214] usb 1-1: Using ep0 maxpacket: 32 [ 167.611978][ T4214] usb 1-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 167.811962][ T4214] usb 1-1: New USB device found, idVendor=1630, idProduct=0042, bcdDevice=5b.13 [ 167.834753][ T4214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.900812][ T4214] usb 1-1: Product: syz [ 167.915777][ T4214] usb 1-1: Manufacturer: syz [ 167.931507][ T4214] usb 1-1: SerialNumber: syz [ 167.949444][ T4214] usb 1-1: config 0 descriptor?? [ 167.986077][ T4559] team0 (unregistering): Port device team_slave_1 removed [ 168.061889][ T5529] loop2: detected capacity change from 0 to 4096 [ 168.064254][ T4214] usb 1-1: bad CDC descriptors [ 168.074872][ T4559] team0 (unregistering): Port device team_slave_0 removed [ 168.088837][ T4214] usb 1-1: bad CDC descriptors [ 168.139966][ T4559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.226068][ T5529] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512) [ 168.600543][ T4559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.736382][ T4559] bond0 (unregistering): Released all slaves [ 168.787796][ T4214] usb 1-1: USB disconnect, device number 5 [ 168.917943][ T5337] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.065062][ T5534] loop5: detected capacity change from 0 to 32768 [ 169.079663][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 169.087359][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.212551][ T5534] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 169.309989][ T5546] netlink: 'syz.2.244': attribute type 12 has an invalid length. [ 169.449399][ T5084] ocfs2: Unmounting device (7,5) on (node local) [ 169.598255][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.623613][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.665531][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.684476][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.721997][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.776843][ T5564] loop5: detected capacity change from 0 to 1024 [ 169.778906][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.791804][ T4300] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 169.823626][ T5337] device veth0_vlan entered promiscuous mode [ 169.876613][ T5337] device veth1_vlan entered promiscuous mode [ 169.901954][ T5564] hfsplus: inconsistency in B*Tree (0,1,255,1,0) [ 169.951447][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.982261][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 170.005266][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.030780][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.057554][ T5337] device veth0_macvtap entered promiscuous mode [ 170.158710][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.183747][ T5337] device veth1_macvtap entered promiscuous mode [ 170.191895][ T4300] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 170.209656][ T4300] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 170.231100][ T4300] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 170.256923][ T4300] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 170.276582][ T4300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.285028][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.285955][ T5552] loop0: detected capacity change from 0 to 32768 [ 170.315296][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.340644][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.377266][ T4300] usb 3-1: invalid MIDI out EP 0 [ 170.381307][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.402011][ T7] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 170.418011][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.459378][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.469302][ T5552] [ 170.469302][ T5552] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.469302][ T5552] [ 170.496596][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.539429][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.569785][ T4300] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 170.588923][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.601167][ T5552] ERROR: (device loop0): dbAlloc: the hint is outside the map [ 170.601167][ T5552] [ 170.620379][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.636942][ T4300] usb 3-1: USB disconnect, device number 5 [ 170.646244][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.651849][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 170.688804][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.710586][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.731467][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.757326][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.780806][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.791963][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 170.807042][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.826706][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 170.837413][ T5337] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.854886][ T7] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 170.868500][ T5337] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.901464][ T154] read_mapping_page failed! [ 170.915675][ T5337] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.923523][ T154] ERROR: (device loop0): txCommit: [ 170.923523][ T154] [ 170.930984][ T154] jfs_write_inode: jfs_commit_inode failed! [ 170.940964][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.950970][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.961554][ T4164] [ 170.961554][ T4164] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.961554][ T4164] [ 170.986993][ T4164] [ 170.986993][ T4164] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 170.986993][ T4164] [ 171.013983][ T5337] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.031626][ T5337] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.050623][ T5337] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.061885][ T7] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f [ 171.073478][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.081664][ T5337] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.091799][ T7] usb 6-1: Product: syz [ 171.095981][ T7] usb 6-1: Manufacturer: syz [ 171.100597][ T7] usb 6-1: SerialNumber: syz [ 171.116868][ T7] usb 6-1: config 0 descriptor?? [ 171.164838][ T7] usbtouchscreen: probe of 6-1:0.0 failed with error -8 [ 171.257682][ T1478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.282330][ T1478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.341948][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.369281][ T1478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.384034][ T1478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.415852][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.433747][ T7] usb 6-1: USB disconnect, device number 3 [ 171.490622][ T5590] netlink: 44 bytes leftover after parsing attributes in process `syz.0.250'. [ 171.872712][ T5599] loop2: detected capacity change from 0 to 1024 [ 172.665283][ T1478] hfsplus: b-tree write err: -5, ino 4 [ 173.178044][ T5607] netlink: 24 bytes leftover after parsing attributes in process `syz.5.253'. [ 173.341081][ T5611] ALSA: mixer_oss: invalid OSS volume 'ELFT' [ 173.542497][ T5621] loop5: detected capacity change from 0 to 8 [ 173.622491][ T5621] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 173.740125][ T5630] loop2: detected capacity change from 0 to 128 [ 173.799840][ T5633] loop0: detected capacity change from 0 to 1024 [ 173.877168][ T5633] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 173.978409][ T5630] EXT4-fs (loop2): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none. [ 174.134794][ T5630] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.369545][ T5633] EXT4-fs (loop0): mounted filesystem without journal. Opts: noquota,nombcache,auto_da_alloc=0x0000000000000002,nombcache,noinit_itable,nomblk_io_submit,init_itable=0x0000000000000009,usrquota,errors=continue,,errors=continue. Quota mode: writeback. [ 175.173691][ T4213] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 175.308258][ T5654] netlink: 180 bytes leftover after parsing attributes in process `syz.6.263'. [ 175.323791][ T5654] loop6: detected capacity change from 0 to 512 [ 175.762187][ T5654] EXT4-fs (loop6): 1 orphan inode deleted [ 175.768181][ T5654] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 175.780166][ T5654] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 176.224247][ T4213] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 176.246066][ T4213] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 176.397895][ T4213] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 176.611435][ T4213] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 176.651490][ T4213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.841873][ T4300] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 177.320708][ T4213] usb 6-1: invalid MIDI out EP 0 [ 177.352199][ T4213] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 177.391963][ T4300] usb 1-1: unable to get BOS descriptor or descriptor too short [ 177.426880][ T5176] udevd[5176]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 177.491990][ T4300] usb 1-1: config 129 has an invalid interface number: 48 but max is 1 [ 177.531099][ T4300] usb 1-1: config 129 has an invalid interface number: 223 but max is 1 [ 177.570327][ T4300] usb 1-1: config 129 has no interface number 0 [ 177.597236][ T4300] usb 1-1: config 129 has no interface number 1 [ 177.624210][ T4300] usb 1-1: config 129 interface 48 altsetting 1 has an invalid endpoint with address 0x80, skipping [ 177.652164][ T4300] usb 1-1: config 129 interface 48 has no altsetting 0 [ 177.671032][ T4300] usb 1-1: config 129 interface 223 has no altsetting 0 [ 177.805771][ T23] usb 6-1: USB disconnect, device number 4 [ 178.402832][ T4300] usb 1-1: New USB device found, idVendor=054c, idProduct=0144, bcdDevice=3a.38 [ 178.465380][ T4300] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.682126][ T4300] usb 1-1: Product: syz [ 178.686430][ T4300] usb 1-1: Manufacturer: syz [ 178.692013][ T4300] usb 1-1: SerialNumber: syz [ 178.721172][ T5708] loop3: detected capacity change from 0 to 16 [ 179.029472][ T5708] erofs: (device loop3): mounted with root inode @ nid 36. [ 179.105298][ T4300] usb 1-1: active config #129 != 1 ?? [ 179.533313][ T4300] usb 1-1: active config #129 != 1 ?? [ 179.564565][ T4300] usb 1-1: USB disconnect, device number 6 [ 179.573379][ T5708] attempt to access beyond end of device [ 179.573379][ T5708] loop3: rw=0, want=24, limit=16 [ 179.888545][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 179.897992][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 179.907408][ T5724] erofs: (device loop3): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 179.917127][ T5724] attempt to access beyond end of device [ 179.917127][ T5724] loop3: rw=524288, want=32, limit=16 [ 179.930156][ T5724] attempt to access beyond end of device [ 179.930156][ T5724] loop3: rw=524288, want=24, limit=16 [ 180.652470][ T4300] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 180.831660][ T4211] Bluetooth: hci1: command 0x0406 tx timeout [ 180.837954][ T4211] Bluetooth: hci2: command 0x0406 tx timeout [ 180.940983][ T5752] loop3: detected capacity change from 0 to 164 [ 181.122240][ T4300] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 181.244396][ T4300] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 181.718453][ T4300] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 181.733266][ T4300] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 181.746341][ T4300] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.817670][ T5755] netlink: 180 bytes leftover after parsing attributes in process `syz.2.278'. [ 181.834693][ T4300] usb 1-1: invalid MIDI out EP 0 [ 181.893751][ T5755] loop2: detected capacity change from 0 to 512 [ 181.994165][ T4211] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 182.149141][ T4300] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 182.179415][ T4300] usb 1-1: USB disconnect, device number 7 [ 182.240612][ T5175] udevd[5175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 182.283969][ T5755] EXT4-fs (loop2): 1 orphan inode deleted [ 182.290525][ T5755] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 182.303046][ T5755] ext4 filesystem being mounted at /61/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 182.521978][ T4211] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 182.544403][ T4211] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 182.556382][ T4211] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.571007][ T4211] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 182.591844][ T4211] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.677789][ T4211] usb 7-1: invalid MIDI out EP 0 [ 182.794810][ T4211] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 183.755126][ T4211] usb 7-1: USB disconnect, device number 2 [ 183.903841][ T5574] udevd[5574]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 184.958291][ T5798] loop6: detected capacity change from 0 to 16 [ 184.996420][ T5799] loop5: detected capacity change from 0 to 1024 [ 185.064577][ T5798] erofs: (device loop6): mounted with root inode @ nid 36. [ 185.100985][ T5798] attempt to access beyond end of device [ 185.100985][ T5798] loop6: rw=0, want=24, limit=16 [ 185.106598][ T5799] EXT4-fs (loop5): Test dummy encryption mode enabled [ 185.174016][ T5799] EXT4-fs (loop5): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 185.213264][ T5794] loop3: detected capacity change from 0 to 4096 [ 185.219831][ T5799] EXT4-fs (loop5): Ignoring removed orlov option [ 185.279928][ T5799] EXT4-fs (loop5): Cannot use DAX on a filesystem that may contain inline data [ 185.417730][ T5804] erofs: (device loop6): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 185.427183][ T5804] erofs: (device loop6): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 185.436559][ T5804] erofs: (device loop6): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 185.446264][ T5804] attempt to access beyond end of device [ 185.446264][ T5804] loop6: rw=524288, want=32, limit=16 [ 185.457628][ T5804] attempt to access beyond end of device [ 185.457628][ T5804] loop6: rw=524288, want=24, limit=16 [ 186.054544][ T5794] ntfs: volume version 3.1. [ 186.254797][ T5809] loop5: detected capacity change from 0 to 128 [ 186.538831][ T5809] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 187.020325][ T5809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.222878][ T5826] loop3: detected capacity change from 0 to 764 [ 187.257154][ T5826] rock: directory entry would overflow storage [ 187.420549][ T5826] rock: sig=0x4654, size=5, remaining=4 [ 187.731775][ T5833] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 187.890226][ T4213] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 187.901738][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 187.901754][ T26] audit: type=1804 audit(1729937716.941:57): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.299" name="/newroot/21/file0/bus" dev="loop5" ino=125 res=1 errno=0 [ 188.625182][ T26] audit: type=1800 audit(1729937717.121:58): pid=5833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.299" name="file3" dev="loop5" ino=105 res=0 errno=0 [ 188.821894][ T4213] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 188.896967][ T4213] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 188.960998][ T4213] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 188.973508][ T5830] loop0: detected capacity change from 0 to 32768 [ 189.000016][ T4213] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.015583][ T4213] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.077645][ T5830] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop0 scanned by syz.0.302 (5830) [ 189.102301][ T4213] usb 7-1: invalid MIDI out EP 0 [ 189.221793][ T7] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 189.250571][ T4213] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 189.301643][ T4300] usb 7-1: USB disconnect, device number 3 [ 189.320627][ T5830] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 189.350257][ T5830] BTRFS info (device loop0): use zlib compression, level 3 [ 189.368214][ T5830] BTRFS info (device loop0): force zlib compression, level 3 [ 189.391876][ T5830] BTRFS info (device loop0): max_inline at 4096 [ 189.408629][ T5830] BTRFS info (device loop0): using free space tree [ 189.428982][ T5830] BTRFS info (device loop0): has skinny extents [ 189.515231][ T5843] loop3: detected capacity change from 0 to 32768 [ 189.562391][ T5843] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.305 (5843) [ 189.565532][ T4214] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 189.593301][ T7] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 189.615366][ T7] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 189.627938][ T7] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.647204][ T7] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 189.656780][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.695691][ T5843] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 189.705945][ T5843] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 189.719611][ T7] usb 3-1: invalid MIDI out EP 0 [ 189.723538][ T5843] BTRFS info (device loop3): trying to use backup root at mount time [ 189.729371][ T5830] BTRFS info (device loop0): enabling ssd optimizations [ 189.738877][ T5843] BTRFS info (device loop3): force clearing of disk cache [ 189.747168][ T5843] BTRFS info (device loop3): enabling ssd optimizations [ 189.778203][ T5843] BTRFS info (device loop3): using spread ssd allocation scheme [ 189.793348][ T5843] BTRFS info (device loop3): enabling disk space caching [ 189.859514][ T5843] BTRFS info (device loop3): disk space caching is enabled [ 189.889969][ T5843] BTRFS info (device loop3): has skinny extents [ 189.890331][ T5574] udevd[5574]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 189.954720][ T4214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 189.980986][ T7] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 190.019481][ T4214] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 190.049072][ T7] usb 3-1: USB disconnect, device number 6 [ 190.075709][ T4214] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 190.139129][ T4214] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 190.156781][ T4214] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 190.167495][ T4214] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.171837][ T23] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 190.191307][ T4214] usb 6-1: config 0 descriptor?? [ 190.463018][ T4214] hdpvr 6-1:0.0: firmware version 0x15 dated y|Ÿ [ 190.605760][ T23] usb 7-1: config 4 has an invalid interface number: 231 but max is 0 [ 190.618018][ T5929] loop0: detected capacity change from 0 to 16 [ 190.633712][ T23] usb 7-1: config 4 has no interface number 0 [ 190.676677][ T5929] erofs: (device loop0): mounted with root inode @ nid 36. [ 190.778534][ T5929] attempt to access beyond end of device [ 190.778534][ T5929] loop0: rw=0, want=24, limit=16 [ 190.821971][ T23] usb 7-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 190.884385][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.949537][ T23] usb 7-1: Product: syz [ 190.996748][ T23] usb 7-1: Manufacturer: syz [ 191.001428][ T23] usb 7-1: SerialNumber: syz [ 191.002960][ T5936] loop2: detected capacity change from 0 to 4096 [ 191.083144][ T5939] erofs: (device loop0): z_erofs_readahead: readahead error at page 3601 @ nid 36 [ 191.092695][ T5939] erofs: (device loop0): z_erofs_readahead: readahead error at page 3600 @ nid 36 [ 191.102075][ T5939] erofs: (device loop0): z_erofs_readahead: readahead error at page 3599 @ nid 36 [ 191.111725][ T5939] attempt to access beyond end of device [ 191.111725][ T5939] loop0: rw=524288, want=32, limit=16 [ 191.123179][ T5939] attempt to access beyond end of device [ 191.123179][ T5939] loop0: rw=524288, want=24, limit=16 [ 191.759912][ T5936] ntfs: volume version 3.1. [ 191.781947][ T4214] hdpvr 6-1:0.0: Could not setup controls [ 191.855434][ T23] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 191.864708][ T4214] hdpvr 6-1:0.0: registering videodev failed [ 192.100574][ T4214] hdpvr: probe of 6-1:0.0 failed with error -71 [ 192.178344][ T4214] usb 6-1: USB disconnect, device number 5 [ 192.381836][ T23] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 192.395103][ T23] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 192.588712][ T5959] tap0: tun_chr_ioctl cmd 1074025677 [ 193.222261][ T23] usb 7-1: USB disconnect, device number 4 [ 193.228911][ T5959] tap0: linktype set to 6 [ 193.506609][ T5966] loop5: detected capacity change from 0 to 4096 [ 193.807501][ T5966] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 194.090379][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.104824][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.171649][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 194.370104][ T5966] ntfs3: loop5: ino=1e, "file1" encrypted i/o not supported [ 194.404812][ T26] audit: type=1800 audit(1729937723.591:59): pid=5966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.317" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 194.437166][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 194.732815][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.891386][ T4306] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 194.995185][ T23] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 195.112325][ T23] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 195.432567][ T23] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 195.474327][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.496199][ T4306] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 195.529764][ T4306] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.545733][ T6004] loop2: detected capacity change from 0 to 512 [ 195.557324][ T23] usb 1-1: config 0 descriptor?? [ 195.588955][ T4306] usb 4-1: config 0 descriptor?? [ 195.628885][ T5985] loop6: detected capacity change from 0 to 32768 [ 195.643559][ T4306] cp210x 4-1:0.0: cp210x converter detected [ 195.646904][ T6004] EXT4-fs (loop2): Mount option "nouser_xattr" will be removed by 3.5 [ 195.646904][ T6004] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 195.646904][ T6004] [ 195.688760][ T6004] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.325: corrupted inode contents [ 195.706610][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 195.715188][ T6004] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #3: comm syz.2.325: mark_inode_dirty error [ 195.732964][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 195.746644][ T6004] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #3: comm syz.2.325: corrupted inode contents [ 195.760054][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 195.770720][ T6004] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #3: comm syz.2.325: mark_inode_dirty error [ 195.770809][ T5985] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 scanned by syz.6.321 (5985) [ 195.790499][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 195.807844][ T6004] Quota error (device loop2): write_blk: dquota write failed [ 195.816372][ T6004] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 195.829484][ T6004] EXT4-fs error (device loop2): ext4_acquire_dquot:6197: comm syz.2.325: Failed to acquire dquot type 0 [ 195.852623][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 195.871822][ T5985] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 195.871834][ T4296] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 195.888878][ T6004] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.325: corrupted inode contents [ 195.921733][ T5985] BTRFS info (device loop6): using free space tree [ 195.928420][ T5985] BTRFS info (device loop6): has skinny extents [ 195.936361][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 195.950119][ T6004] EXT4-fs error (device loop2): ext4_dirty_inode:6010: inode #16: comm syz.2.325: mark_inode_dirty error [ 195.978022][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 195.990389][ T6004] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.325: corrupted inode contents [ 196.005055][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 196.016815][ T6004] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #16: comm syz.2.325: mark_inode_dirty error [ 196.044920][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.049737][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 196.059367][ T6004] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.325: corrupted inode contents [ 196.067814][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.075147][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 196.085157][ T6004] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 196.096203][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 196.096277][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.113946][ T4306] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 196.115569][ T6004] EXT4-fs error (device loop2): ext4_do_update_inode:5174: inode #16: comm syz.2.325: corrupted inode contents [ 196.127725][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.140973][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.142158][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 196.154853][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.160707][ T6004] EXT4-fs error (device loop2): ext4_truncate:4272: inode #16: comm syz.2.325: mark_inode_dirty error [ 196.174374][ T5985] BTRFS info (device loop6): enabling ssd optimizations [ 196.181673][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 196.188539][ T6004] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 196.201958][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 196.219851][ T6004] EXT4-fs (loop2): 1 truncate cleaned up [ 196.225677][ T6004] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nouser_xattr,. Quota mode: writeback. [ 196.241950][ T6004] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 196.253315][ T4306] usb 4-1: cp210x converter now attached to ttyUSB0 [ 196.269583][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.304774][ T6004] EXT4-fs error (device loop2): ext4_generic_delete_entry:2729: inode #12: block 13: comm syz.2.325: bad entry in directory: inode out of bounds - offset=24, inode=33554445, rec_len=16, size=4096 fake=0 [ 196.315127][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.332896][ T4296] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 196.342617][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 196.351670][ T6004] EXT4-fs error (device loop2) in ext4_delete_entry:2800: Corrupt filesystem [ 196.362700][ T6004] EXT4-fs (loop2): Remounting filesystem read-only [ 196.375265][ T4296] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 196.406765][ T4296] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 196.420104][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.440260][ T23] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 196.447900][ T4296] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 196.458422][ T23] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 196.477991][ T4296] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 196.522005][ T23] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 196.555684][ T23] microsoft 0003:045E:07DA.0002: no inputs found [ 196.574879][ T4296] usb 6-1: invalid MIDI out EP 0 [ 196.583592][ T23] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 196.662640][ T23] usb 1-1: USB disconnect, device number 8 [ 196.689017][ T4306] usb 4-1: USB disconnect, device number 5 [ 196.830680][ T4306] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 196.928825][ T4306] cp210x 4-1:0.0: device disconnected [ 196.940850][ T4296] snd-usb-audio: probe of 6-1:27.0 failed with error -22 [ 196.949952][ T6046] loop0: detected capacity change from 0 to 128 [ 196.987103][ T6044] loop6: detected capacity change from 0 to 2048 [ 196.989117][ T4296] usb 6-1: USB disconnect, device number 6 [ 197.006249][ T6050] loop2: detected capacity change from 0 to 256 [ 197.087222][ T6050] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d) [ 197.118460][ T6046] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.146762][ T6046] ext4 filesystem being mounted at /68/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 197.210392][ T6044] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 197.310942][ T6044] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 197.336452][ T6044] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28 [ 197.350112][ T6044] EXT4-fs (loop6): This should not happen!! Data will be lost [ 197.350112][ T6044] [ 197.422389][ T6044] EXT4-fs (loop6): Total free blocks count 0 [ 197.442299][ T6044] EXT4-fs (loop6): Free/Dirty block details [ 197.460584][ T6044] EXT4-fs (loop6): free_blocks=2415919104 [ 197.502049][ T6044] EXT4-fs (loop6): dirty_blocks=16 [ 197.507224][ T6044] EXT4-fs (loop6): Block reservation details [ 197.579607][ T6044] EXT4-fs (loop6): i_reserved_data_blocks=1 [ 197.622794][ T6059] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 11 with error 28 [ 197.702999][ T6059] EXT4-fs (loop6): This should not happen!! Data will be lost [ 197.702999][ T6059] [ 198.121801][ T4225] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 198.342923][ T6071] tap0: tun_chr_ioctl cmd 1074025677 [ 198.358821][ T6071] tap0: linktype set to 6 [ 198.475984][ T6058] loop3: detected capacity change from 0 to 32768 [ 198.491368][ T6074] loop0: detected capacity change from 0 to 1024 [ 198.523176][ T4225] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 198.535497][ T6058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.331 (6058) [ 198.581048][ T4225] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 198.616713][ T4225] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 198.619694][ T6079] loop6: detected capacity change from 0 to 512 [ 198.636008][ T4225] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 198.678029][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.693427][ T6058] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 198.709578][ T6058] BTRFS info (device loop3): using free space tree [ 198.726155][ T6058] BTRFS info (device loop3): has skinny extents [ 198.778744][ T4225] usb 3-1: invalid MIDI out EP 0 [ 198.788266][ T6088] loop0: detected capacity change from 0 to 128 [ 198.797414][ T6079] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: writeback. [ 198.861819][ T6079] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.896410][ T6088] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 198.926101][ T6088] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 198.951764][ T6058] BTRFS info (device loop3): enabling ssd optimizations [ 198.980101][ T6079] EXT4-fs error (device loop6): ext4_ext_check_inode:501: inode #2: comm syz.6.337: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 199.019611][ T6079] EXT4-fs (loop6): Remounting filesystem read-only [ 199.286460][ T4225] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 199.294849][ T6109] loop5: detected capacity change from 0 to 2048 [ 199.327596][ T4225] usb 3-1: USB disconnect, device number 7 [ 199.457864][ T6109] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.719952][ T6123] netlink: 12 bytes leftover after parsing attributes in process `syz.6.345'. [ 199.809456][ T6128] syz.3.340[6128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 199.809558][ T6128] syz.3.340[6128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 200.022963][ T6139] autofs4:pid:6139:autofs_fill_super: called with bogus options [ 200.126563][ T6145] netlink: 8 bytes leftover after parsing attributes in process `syz.0.351'. [ 200.151786][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz.2.352'. [ 200.241829][ T5924] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 200.315612][ T6155] loop3: detected capacity change from 0 to 128 [ 200.429416][ T6155] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 200.471771][ T6155] ext4 filesystem being mounted at /71/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 200.491951][ T5924] usb 6-1: Using ep0 maxpacket: 16 [ 200.497592][ T26] audit: type=1800 audit(1729937729.681:60): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.353" name="bus" dev="loop3" ino=12 res=0 errno=0 [ 200.601682][ T23] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.617174][ T4296] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 200.632220][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 200.653411][ T5924] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.663819][ T5924] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 200.678069][ T5924] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 200.687901][ T5924] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.704933][ T5924] usb 6-1: config 0 descriptor?? [ 200.900451][ T6161] loop2: detected capacity change from 0 to 32768 [ 200.991880][ T23] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 201.002469][ T4296] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 201.012717][ T4886] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 201.022184][ T4296] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.033819][ T23] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.045339][ T4296] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.058496][ T23] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.072641][ T4296] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.082784][ T23] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.092316][ T4296] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.100344][ T6161] (syz.2.357,6161,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 201.113862][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.118497][ T6161] (syz.2.357,6161,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 201.154935][ T6161] JBD2: Ignoring recovery information on journal [ 201.165431][ T23] usb 1-1: invalid MIDI out EP 0 [ 201.196815][ T4296] usb 7-1: invalid MIDI out EP 0 [ 201.202934][ T23] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 201.232825][ T5425] udevd[5425]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.250697][ T5924] input: HID 045e:07da as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:045E:07DA.0003/input/input9 [ 201.290428][ T4296] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 201.305060][ T6161] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 201.337770][ T5425] udevd[5425]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 201.368429][ T5921] usb 1-1: USB disconnect, device number 9 [ 201.382528][ T4250] usb 7-1: USB disconnect, device number 5 [ 201.410580][ T5924] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 201.454416][ T4886] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 201.467723][ T5924] usb 6-1: USB disconnect, device number 7 [ 201.482448][ T4886] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 201.499966][ T4886] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.525402][ T4165] ocfs2: Unmounting device (7,2) on (node local) [ 201.533895][ T4886] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 201.552441][ T4886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.616286][ T4886] usb 4-1: invalid MIDI out EP 0 [ 201.760102][ T4886] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 201.817589][ T4886] usb 4-1: USB disconnect, device number 6 [ 201.988148][ T6177] loop5: detected capacity change from 0 to 256 [ 202.346269][ T6184] netlink: 76 bytes leftover after parsing attributes in process `syz.0.360'. [ 202.361939][ T6183] bridge: RTM_NEWNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 203.198193][ T6175] loop2: detected capacity change from 0 to 40427 [ 203.254824][ T6190] loop3: detected capacity change from 0 to 64 [ 203.337942][ T6196] loop0: detected capacity change from 0 to 64 [ 203.347642][ T6198] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 203.410146][ T6175] F2FS-fs (loop2): Found nat_bits in checkpoint [ 203.505999][ T6206] loop5: detected capacity change from 0 to 8 [ 203.606254][ T6175] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 203.737227][ T6217] loop5: detected capacity change from 0 to 24 [ 203.764196][ T4165] attempt to access beyond end of device [ 203.764196][ T4165] loop2: rw=2049, want=45104, limit=40427 [ 203.873228][ T5924] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 203.991801][ T5921] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 203.991947][ T4886] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 204.231908][ T5924] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 204.268987][ T5924] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.280729][ T5924] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.294560][ T5924] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.304091][ T5924] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.371808][ T5921] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 204.385368][ T5924] usb 7-1: invalid MIDI out EP 0 [ 204.408957][ T5921] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.447991][ T4886] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 204.456720][ T5921] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.482276][ T4886] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.514245][ T5924] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 204.521797][ T4886] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.550884][ T5921] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.561365][ T4886] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.581190][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.601699][ T4886] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.629376][ T4296] usb 7-1: USB disconnect, device number 6 [ 204.635264][ T5921] usb 1-1: invalid MIDI out EP 0 [ 204.637207][ T6222] loop5: detected capacity change from 0 to 32768 [ 204.686906][ T6226] loop2: detected capacity change from 0 to 128 [ 204.714100][ T6222] JBD2: Ignoring recovery information on journal [ 204.734974][ T5175] udevd[5175]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.767518][ T5921] snd-usb-audio: probe of 1-1:27.0 failed with error -22 [ 204.772568][ T4886] usb 4-1: invalid MIDI out EP 0 [ 204.815159][ T4886] snd-usb-audio: probe of 4-1:27.0 failed with error -22 [ 204.859820][ T6222] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 204.871395][ T4886] usb 1-1: USB disconnect, device number 10 [ 204.888162][ T23] usb 4-1: USB disconnect, device number 7 [ 204.919729][ T5175] udevd[5175]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.931526][ T6222] [ 204.937909][ T6222] ====================================================== [ 204.944935][ T6222] WARNING: possible circular locking dependency detected [ 204.951958][ T6222] 5.15.169-syzkaller #0 Not tainted [ 204.957167][ T6222] ------------------------------------------------------ [ 204.964190][ T6222] syz.5.378/6222 is trying to acquire lock: [ 204.970090][ T6222] ffff88805fdf22e0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 204.981818][ T6222] [ 204.981818][ T6222] but task is already holding lock: [ 204.989170][ T6222] ffff88805fdf2378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330 [ 204.999776][ T6222] [ 204.999776][ T6222] which lock already depends on the new lock. [ 204.999776][ T6222] [ 205.010254][ T6222] [ 205.010254][ T6222] the existing dependency chain (in reverse order) is: [ 205.019250][ T6222] [ 205.019250][ T6222] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}: [ 205.027060][ T6222] lock_acquire+0x1db/0x4f0 [ 205.032101][ T6222] down_read+0x45/0x2e0 [ 205.036791][ T6222] ocfs2_init_acl+0x398/0x930 [ 205.041991][ T6222] ocfs2_mknod+0x1e8f/0x2cd0 [ 205.047111][ T6222] ocfs2_mkdir+0x194/0x430 [ 205.052040][ T6222] vfs_mkdir+0x3b6/0x590 [ 205.056812][ T6222] do_mkdirat+0x260/0x520 [ 205.061655][ T6222] __x64_sys_mkdir+0x6a/0x80 [ 205.066766][ T6222] do_syscall_64+0x3b/0xb0 [ 205.071695][ T6222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.078118][ T6222] [ 205.078118][ T6222] -> #3 (jbd2_handle){++++}-{0:0}: [ 205.085398][ T6222] lock_acquire+0x1db/0x4f0 [ 205.090409][ T6222] start_this_handle+0x12e1/0x1570 [ 205.096033][ T6222] jbd2__journal_start+0x2d1/0x5c0 [ 205.101676][ T6222] jbd2_journal_start+0x25/0x30 [ 205.107031][ T6222] ocfs2_start_trans+0x3c2/0x6f0 [ 205.112486][ T6222] ocfs2_mknod+0x15bb/0x2cd0 [ 205.117613][ T6222] ocfs2_mkdir+0x194/0x430 [ 205.122539][ T6222] vfs_mkdir+0x3b6/0x590 [ 205.127312][ T6222] do_mkdirat+0x260/0x520 [ 205.132152][ T6222] __x64_sys_mkdir+0x6a/0x80 [ 205.137270][ T6222] do_syscall_64+0x3b/0xb0 [ 205.142197][ T6222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.148618][ T6222] [ 205.148618][ T6222] -> #2 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 205.157140][ T6222] lock_acquire+0x1db/0x4f0 [ 205.162159][ T6222] down_read+0x45/0x2e0 [ 205.166823][ T6222] ocfs2_start_trans+0x3b7/0x6f0 [ 205.172281][ T6222] ocfs2_mknod+0x15bb/0x2cd0 [ 205.177401][ T6222] ocfs2_mkdir+0x194/0x430 [ 205.182324][ T6222] vfs_mkdir+0x3b6/0x590 [ 205.187069][ T6222] do_mkdirat+0x260/0x520 [ 205.191918][ T6222] __x64_sys_mkdir+0x6a/0x80 [ 205.197050][ T6222] do_syscall_64+0x3b/0xb0 [ 205.201979][ T6222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.208433][ T6222] [ 205.208433][ T6222] -> #1 (sb_internal#3){.+.+}-{0:0}: [ 205.215898][ T6222] lock_acquire+0x1db/0x4f0 [ 205.220911][ T6222] ocfs2_start_trans+0x2b2/0x6f0 [ 205.226354][ T6222] ocfs2_truncate_file+0x661/0x14f0 [ 205.232085][ T6222] ocfs2_setattr+0x165e/0x1c70 [ 205.237379][ T6222] notify_change+0xc6d/0xf50 [ 205.242486][ T6222] do_truncate+0x21c/0x300 [ 205.247415][ T6222] path_openat+0x28a3/0x2f20 [ 205.252525][ T6222] do_filp_open+0x21c/0x460 [ 205.257564][ T6222] do_sys_openat2+0x13b/0x4f0 [ 205.262758][ T6222] __x64_sys_openat+0x243/0x290 [ 205.268131][ T6222] do_syscall_64+0x3b/0xb0 [ 205.273057][ T6222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.279483][ T6222] [ 205.279483][ T6222] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 205.288242][ T6222] validate_chain+0x1649/0x5930 [ 205.293612][ T6222] __lock_acquire+0x1295/0x1ff0 [ 205.298987][ T6222] lock_acquire+0x1db/0x4f0 [ 205.303993][ T6222] down_write+0x38/0x60 [ 205.308655][ T6222] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 205.315157][ T6222] ocfs2_truncate_file+0xe3c/0x14f0 [ 205.320866][ T6222] ocfs2_setattr+0x165e/0x1c70 [ 205.326138][ T6222] notify_change+0xc6d/0xf50 [ 205.331239][ T6222] do_truncate+0x21c/0x300 [ 205.336191][ T6222] path_openat+0x28a3/0x2f20 [ 205.341301][ T6222] do_filp_open+0x21c/0x460 [ 205.346322][ T6222] do_sys_openat2+0x13b/0x4f0 [ 205.351508][ T6222] __x64_sys_openat+0x243/0x290 [ 205.356873][ T6222] do_syscall_64+0x3b/0xb0 [ 205.361804][ T6222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.368228][ T6222] [ 205.368228][ T6222] other info that might help us debug this: [ 205.368228][ T6222] [ 205.378438][ T6222] Chain exists of: [ 205.378438][ T6222] &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem [ 205.378438][ T6222] [ 205.392416][ T6222] Possible unsafe locking scenario: [ 205.392416][ T6222] [ 205.399862][ T6222] CPU0 CPU1 [ 205.405209][ T6222] ---- ---- [ 205.410574][ T6222] lock(&oi->ip_xattr_sem); [ 205.415149][ T6222] lock(jbd2_handle); [ 205.421722][ T6222] lock(&oi->ip_xattr_sem); [ 205.428814][ T6222] lock(&ocfs2_file_ip_alloc_sem_key); [ 205.434344][ T6222] [ 205.434344][ T6222] *** DEADLOCK *** [ 205.434344][ T6222] [ 205.442490][ T6222] 3 locks held by syz.5.378/6222: [ 205.447503][ T6222] #0: ffff888025d90460 (sb_writers#19){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80 [ 205.456722][ T6222] #1: ffff88805fdf2648 (&sb->s_type->i_mutex_key#25){+.+.}-{3:3}, at: do_truncate+0x208/0x300 [ 205.467068][ T6222] #2: ffff88805fdf2378 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_try_remove_refcount_tree+0xa1/0x330 [ 205.478125][ T6222] [ 205.478125][ T6222] stack backtrace: [ 205.483997][ T6222] CPU: 1 PID: 6222 Comm: syz.5.378 Not tainted 5.15.169-syzkaller #0 [ 205.492054][ T6222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 205.502110][ T6222] Call Trace: [ 205.505391][ T6222] [ 205.508307][ T6222] dump_stack_lvl+0x1e3/0x2d0 [ 205.512993][ T6222] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 205.518646][ T6222] ? print_circular_bug+0x12b/0x1a0 [ 205.523864][ T6222] check_noncircular+0x2f8/0x3b0 [ 205.528791][ T6222] ? add_chain_block+0x850/0x850 [ 205.533719][ T6222] ? lockdep_lock+0x11f/0x2a0 [ 205.538422][ T6222] validate_chain+0x1649/0x5930 [ 205.543283][ T6222] ? stack_trace_save+0x113/0x1c0 [ 205.548291][ T6222] ? reacquire_held_locks+0x660/0x660 [ 205.553651][ T6222] ? stack_trace_snprint+0xe0/0xe0 [ 205.558768][ T6222] ? lockdep_unlock+0x166/0x300 [ 205.563629][ T6222] ? mark_lock+0x98/0x340 [ 205.567944][ T6222] __lock_acquire+0x1295/0x1ff0 [ 205.572822][ T6222] lock_acquire+0x1db/0x4f0 [ 205.577331][ T6222] ? ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 205.583482][ T6222] ? read_lock_is_recursive+0x10/0x10 [ 205.588844][ T6222] ? __might_sleep+0xc0/0xc0 [ 205.593427][ T6222] ? rwsem_write_trylock+0x166/0x210 [ 205.598725][ T6222] ? clear_nonspinnable+0x60/0x60 [ 205.603745][ T6222] down_write+0x38/0x60 [ 205.607891][ T6222] ? ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 205.614032][ T6222] ocfs2_try_remove_refcount_tree+0xb2/0x330 [ 205.620024][ T6222] ? ocfs2_remove_refcount_tree+0x1000/0x1000 [ 205.626080][ T6222] ? ocfs2_truncate_file+0xa07/0x14f0 [ 205.631441][ T6222] ocfs2_truncate_file+0xe3c/0x14f0 [ 205.636627][ T6222] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 205.642339][ T6222] ? ocfs2_simple_size_update+0x4d0/0x4d0 [ 205.648050][ T6222] ? do_raw_spin_unlock+0x137/0x8b0 [ 205.653241][ T6222] ? memset+0x1f/0x40 [ 205.657235][ T6222] ? _raw_spin_unlock+0x24/0x40 [ 205.662083][ T6222] ? ocfs2_inode_lock_tracker+0x455/0x750 [ 205.667813][ T6222] ? ocfs2_inode_lock_atime+0x5a0/0x5a0 [ 205.673382][ T6222] ? ocfs2_rw_lock+0x13a/0x250 [ 205.678159][ T6222] ? ocfs2_create_new_inode_locks+0x6d0/0x6d0 [ 205.684237][ T6222] ? jbd2_journal_begin_ordered_truncate+0xbc/0x150 [ 205.690818][ T6222] ocfs2_setattr+0x165e/0x1c70 [ 205.695585][ T6222] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 205.701389][ T6222] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 205.707630][ T6222] ? ktime_get_coarse_real_ts64+0x107/0x120 [ 205.713531][ T6222] ? current_time+0x1ba/0x300 [ 205.718214][ T6222] ? atime_needs_update+0x7b0/0x7b0 [ 205.723419][ T6222] ? evm_inode_setattr+0xf7/0x5b0 [ 205.728430][ T6222] ? rwsem_write_trylock+0x166/0x210 [ 205.733733][ T6222] ? bpf_lsm_inode_setattr+0x5/0x10 [ 205.738941][ T6222] ? security_inode_setattr+0xce/0x120 [ 205.744392][ T6222] ? ocfs2_extend_allocation+0x1ba0/0x1ba0 [ 205.750201][ T6222] notify_change+0xc6d/0xf50 [ 205.754789][ T6222] do_truncate+0x21c/0x300 [ 205.759194][ T6222] ? rcu_lock_release+0x20/0x20 [ 205.764033][ T6222] ? ima_bprm_check+0x2b0/0x2b0 [ 205.768872][ T6222] ? bpf_lsm_path_truncate+0x5/0x10 [ 205.774058][ T6222] path_openat+0x28a3/0x2f20 [ 205.778664][ T6222] ? do_filp_open+0x460/0x460 [ 205.783333][ T6222] do_filp_open+0x21c/0x460 [ 205.787822][ T6222] ? vfs_tmpfile+0x2e0/0x2e0 [ 205.792419][ T6222] ? _raw_spin_unlock+0x24/0x40 [ 205.797288][ T6222] ? alloc_fd+0x598/0x630 [ 205.801618][ T6222] do_sys_openat2+0x13b/0x4f0 [ 205.806307][ T6222] ? do_sys_open+0x220/0x220 [ 205.810896][ T6222] __x64_sys_openat+0x243/0x290 [ 205.815755][ T6222] ? __ia32_sys_open+0x270/0x270 [ 205.820697][ T6222] ? syscall_enter_from_user_mode+0x2e/0x240 [ 205.826667][ T6222] ? lockdep_hardirqs_on+0x94/0x130 [ 205.831858][ T6222] ? syscall_enter_from_user_mode+0x2e/0x240 [ 205.837868][ T6222] do_syscall_64+0x3b/0xb0 [ 205.842364][ T6222] ? clear_bhb_loop+0x15/0x70 [ 205.847029][ T6222] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 205.852917][ T6222] RIP: 0033:0x7f423dd2a719 [ 205.857349][ T6222] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.876974][ T6222] RSP: 002b:00007f423c1a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 205.885382][ T6222] RAX: ffffffffffffffda RBX: 00007f423dee1f80 RCX: 00007f423dd2a719 [ 205.893352][ T6222] RDX: 0000000000007a05 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 205.901328][ T6222] RBP: 00007f423dd9d32e R08: 0000000000000000 R09: 0000000000000000 [ 205.909303][ T6222] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000 [ 205.917295][ T6222] R13: 0000000000000000 R14: 00007f423dee1f80 R15: 00007ffcc18b8c38 [ 205.925273][ T6222] [ 205.980098][ T5084] ocfs2: Unmounting device (7,5) on (node local)