last executing test programs: 10.711929922s ago: executing program 0 (id=2385): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4}) io_uring_enter(r0, 0x1, 0x0, 0x0, 0x0, 0x0) 10.655259357s ago: executing program 0 (id=2387): pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000008b}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$pid(0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], 0x78) fcntl$addseals(r4, 0x409, 0x0) fallocate(r4, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x100010, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="12010100000000105801000100000000000109022400010000002009040000010300000009210000000122dc01090589"], 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x1010000, &(0x7f0000000600)=ANY=[@ANYBLOB='utf8=1,iocharset=koi8-r,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,utf8=0,codepage=850,nfs=nostale_ro,shortname=winnt,shortname=lower,shortname=win95,shortname=lower,nonumtail=0,shortname=mixed,check=strict,allow_utime=00000000000040000000777,\x00'], 0x5, 0x363, &(0x7f0000000280)="$eJzs3U1oY1UbAOA3vWnSGfi+dicKQnQnaJnOTje2SAcGu1EJ/izE4HRUkiq0WGwX09aF4lJwqSt3CrpwIS5FUMSdC7eOIKPiQmc34OCR5OYmt0naaQerFJ8Hmpy+57znnPtDcntJTp9bjPal6bh8/fq1mJmpRHXxkcW4UYm5yKKwG+NqE2IAwOlwI6X4PeWOmFI54SkBACes9/7/QkQ0Yi6PvP7lYe2Td38AOPX6f/+fOazNzEEVr5zIlACAEzZ2///efdW13k+1+LVa+lQAAHBaPfH0M48urUQ83mjMRKy9udncbMZDw/qly/FSdGI1zsVs3IzILxS6D5Xe44WLK8vnGo3GTvw0F82ImOonNvMrhaWsl1+PhZiNuX5+/2ojpZRd+GRleaHRExG7O73xY62y2ZyOs/3xvz8bq8MLj6KT3lPExZXl841+B821In8nYm9436I7//mYjW+fH3STUvEJxpXlKwvFpIf5m816XBrshQPvgAAAAAAAAAAAAAAAAAAAAAAAwG2ZbwzMDdbPSd3nfKWc+fkJ9b31cfL8/vpAe/n6QKmeIqXfXnug+VYW+9YHGl2fZ9NCggAAAAAAAAAAAAAAAAAAADCwsVWLVqezur6xtd0uF3bWN7amIqIbefnrj744E+NtblGo5kPUIwZDNPrDbrdbKSsapyxiPD3rDl5EPvh0MONym/pgKyZOo35wVafzv3t+fHcYuTsrev5z2CaLyRuYlabx8EjPa//Pp3ScHTUonC9H6uOjX00plSJvlNOvPDveYVQiqsc/cNvtqTi4TeoWvrr24p3F3m99nnL33T/75NV33v+l3ep0R47eEaytb9xM7ValaHy83dLd1UWkEnmhUj4Tqoel7+2PtLLvfn3qrre/OdroqRx5tXs+j7TJ8s35eDS9lhe60xypOjNMn+5vRGd1esLJf6vCbRzTO9777MOUfvj5yEMMTY29bFT+nlcfAAAAAAAAAAAAAAAAAACgrPRd8b7+l32nD8t68LGTnxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/HOG//+/VNjbjZHIUQp/7EzIqq+ub0TU/u3NBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgP+6vAAAA///tLFqQ") syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000012002505a8a4f0"], 0x0) syz_usb_control_io(r5, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 9.845912443s ago: executing program 4 (id=2389): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES64], 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000200)={0x1f, @none}, 0x8) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f00000001c0)=0x800001, 0x4) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098ee0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4e5531c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") open(0x0, 0x0, 0x0) rename(0x0, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x4018480c, &(0x7f00000000c0)={0x2, 0xffffffff}) r3 = openat$sequencer(0xffffff9c, 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x60001, 0x84) openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000240)={@local}) ioctl$SNDCTL_MIDI_INFO(r3, 0xc074510c, &(0x7f0000004740)={"f3a992c5f0640ce3df762062bc2a6b18c8f7b5ffabec44e38f218d52e570", 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}) 7.552685872s ago: executing program 4 (id=2411): socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x7d, 0x1f, 0x22, 0x20, 0xfd86, 0x2248, 0x755b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x0, 0x8, 0x5, 0x50}}]}}]}}, 0x0) 7.248555186s ago: executing program 0 (id=2416): socket$rds(0x15, 0x5, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$ax25(0xffffffffffffffff, &(0x7f0000000100)="5712a4e17ec0ded95269e528922ada693b137e", 0x13, 0x10, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000012c0)=ANY=[@ANYBLOB="869578ce66b3c206"], 0x8) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x15, 0x5, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r3, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) getsockopt$inet6_opts(r1, 0x29, 0x3b, 0x0, &(0x7f0000001000)) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@broadcast, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2c}}, {{@in6=@mcast1, 0x0, 0x3c}, 0x0, @in6=@empty}}, 0xe8) ioperm(0x0, 0x5, 0x5e3b) gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) io_getevents(0x0, 0x0, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace00000000000000002100000002ff02000000000000000000000000000104004e200023b0"], 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000400)=""/248, 0x60ae0}], 0x2000000000000069, 0x0, 0xd66}, 0x0) sendmsg$tipc(r5, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 6.134430597s ago: executing program 0 (id=2426): ioperm(0x0, 0x69, 0x4) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000100000000000000e9ff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000007d40)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48) r3 = getgid() pipe2$9p(&(0x7f000000acc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84080) r5 = fsopen(&(0x7f000000ad00)='smb3\x00', 0x1) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f000000aec0)={0x0, 0x0}) getresuid(&(0x7f0000000440), &(0x7f0000000480)=0x0, &(0x7f00000004c0)) r8 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) r9 = request_key(&(0x7f0000000540)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000cc0)=', ez\xe3\x91\xe5\xe8\xa3$:@^@,\x00^!\x95\xf0\x82\xdc-5\x10\xc3&\x8c\x87\xa5|t\x8a.\xe3\x8bH\xa5\x17m0\xb7L\x99A\x06\xeez1RA\xe8\xa4\"\x01T\xe9\x1a\xd6\x94)\xe5\xd7__\x11\x7f\x7f\xe6\xea\xd1\xa0<;\xff^\x9ap\xcf?\n\x85P\b/nqm/EA\xa3\x16\x82\x8e\x88\x1f\x93\x12\xe49\xf9\xc3^\xaf5\xca\xd3zh\x98\xd3\x11vM\xe2j\xbb\xc2L\xdd\x87uS\xeb\xce\xacl\xb4X\xf4\xc5\xbd\x81)I\xd4\xf0\xd8\x14\xe8\x8b2\x8d\xa0\xee\xd0\xc0\'\xb5\x99B==\xa1\x8e\x18\xac\xe7\xc3\xe9\xb7\x19\xa5\xc9rOX\xe7\xea\xc9\'\xf2\xf3\x1e4\xae\xf5s*\x9d\x80\xd2$\xf0b\x17\f(1`\xb6\xfc\xcf?\xe7\xf4\xba\xe7Q-\xbb\xa4i\xd8\xafy\x06\xfa\xaa\x8d`\xa1\xcae\xe1\xa3j\xa4\x8a\x81jf\xa5\x13\xaf8\xe7\\\xdfd\x15\t\x00\xa9Dw\xcew\x83\xdc\xd9\x81\x1f\tAyK\xf5;\xe0\x81\x83`\xf8\xb8\xe5\xe5j\x00\x98\xe6\xb1N\xff&\xd5\x8aO\xb0!\xe5z\x1e\xa3\xfe\x0e\xdc\x9cr\xe0\x16\xeaK\xd3U~1\xa1\x88NE\xc0\xf45\xa8\xc7\xef\xe6{#\xb4\xb5\xf2\xd9\x83 F\xdef\x11\xff\x93\xa6\xd4\x90\x1d\xb3\xca\x9b\xc2', r8) add_key$user(&(0x7f0000000480), &(0x7f00000004c0)={'syz', 0x3}, &(0x7f0000000500)="3fd8", 0x2, r8) r10 = add_key(&(0x7f0000000080)='user\x00', &(0x7f0000000000)={'syz', 0x2}, &(0x7f0000000040)='9', 0x1, 0xfffffffffffffffc) keyctl$chown(0x4, r10, 0xee00, 0xffffffffffffffff) keyctl$setperm(0x5, r10, 0x4002410) keyctl$chown(0x4, r10, 0x0, 0x0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000340)={'fscrypt:', @auto=[0x39, 0x65, 0x34, 0x63, 0x62, 0x31, 0x35, 0x38, 0x36, 0x64, 0x31, 0x31, 0x39, 0x7, 0x37, 0x32]}, &(0x7f0000000400)={0x0, "73e73a3005c9b57dbd109d20dc40610329720531d20c6da8e8884926925e5f7f1a26a408a47b7eecddfcf8fe2ac3324d5c84a6110efac0f054b14948004000", 0x112}, 0x48, r10) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000340)=""/197, 0xc5, &(0x7f0000000680)={&(0x7f0000000440)={'sha256-avx\x00'}, &(0x7f0000000580)="707adafc6dc1f5848de9d72dbe8157eb7c42c3aee040a104df25956930f29c2f190f11ad989240b0037578d6d8c49edddba7587e470cde580fae8d43d326e8a542dbb7a0d29c5d21ff8f440f3ec5f9ef0ea890563e1dadb0280e40e162405a813060f4a4b9240427a56491d4499c0e70c312eab3f0fe537169677a3849e48e47f10ec56ae9c52b9cdff38498e564a9f668fd4ae53a1a40f1f503bf542c4900383c00830ba4a1a27baaac9c90807764151738687bda8d3c2c8843a0063d48bd7c3b4b5391ac369d89c4675621cf354d0e11c2edcba3c18de1a654f4f056ba94dc", 0xe0}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) keyctl$chown(0x4, r9, 0x0, 0x0) accept$packet(0xffffffffffffffff, &(0x7f000000b140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000b180)=0x14) read$FUSE(0xffffffffffffffff, &(0x7f000000b240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000d300)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000006c0)=[{&(0x7f0000000580)="c1318e88a5657626f73bef5eb71ec59e9d36215fbbb9d386801937ec92dcaa487286512150a631d5e1", 0x29}, {&(0x7f00000005c0)="bd97509a7b841cf64645fa495f5e9e9dad7e8c00cee4b644069e4d7710fd140b3d31fb7230172688a483c48f", 0x2c}, {&(0x7f0000000640)}, {0x0}], 0x4, &(0x7f0000000740)=[@rights={{0x10}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee00}}}], 0x68}}, {{&(0x7f00000007c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000008c0)=[{&(0x7f0000003940)="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", 0x1000}, {&(0x7f0000000840)="dca4429ac1162bfc", 0x8}, {&(0x7f0000000880)="3890f2d4e649980a92423182a15541ded1a5ee2da764689c60dd65aaf44a0763296782e59ef17829e4440eb0dcf485", 0x2f}], 0x3, 0x0, 0x0, 0x810}}, {{&(0x7f0000004940)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006e40), 0x0, &(0x7f00000074c0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r4]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, r11}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}], 0xd8, 0x40000c0}}, {{&(0x7f00000075c0)=@file={0x1, './file0/file0\x00'}, 0x6e, &(0x7f0000008980)=[{&(0x7f0000007640)}, {0xfffffffffffffffe}, {&(0x7f0000000700)="860e776487c5ea2ead60c66ad36b2deb0890eba2e0575430ee04a21dae941e48d403e30bf7119dce313bbcabd8bc0ce2261963e4", 0x34}, {&(0x7f0000007700)="305f4c434d425f402fea668c7735e219d90dad7699c409057cebd2a516c1195b2b9fb1b650323e72fe55fc34d6c86c58786eff5bcda8f9f574410c580dbe8697a6262b8812afdb6fcc402a095e1bc423cac908cf92725e8cc37f6e8f60e10344333b8f1319d627e2ad0bc65e414e0efc4c5a54a438956a00f4326a06b62d5eec070ddb04463947076859b1dcae4188457e86beb771b4351a8e7e63f9ea963e372548075665a11dd1", 0xa8}, {&(0x7f00000077c0)="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", 0x1000}, {&(0x7f00000087c0)="b154cea92e9d2355674783694027883e98a67c12614155b0afcc87b6db0081ec16621336efc656d8abb66ce4d710aa271632cfe5c49ad9468f437e9150d8fb76332804da037937cac91af0d8ca0b896610c987bd4c073c23afc45ca13782dbcf0a72d60e44b405ee41b482b4e70a7bba52630d17f44e5639e25cfc2e85cd3a73c84513ef0e1316d1096e5cf73d43c140908fb3ace78c2c9e8fd2d052a156baf8eccdb20e9f0c0f20319f5777afc54d49808ca6dd5a5acb264ab7f26616bbcfcf7b5f5bf968dfdb3cd189bc5dc67ebfc9adb4b656d49ebd67adc031e92c", 0xdd}, {&(0x7f00000088c0)="da1b5c60e190dd4585e45d1715f225a0e4c53bede8e6d39812bb06fa462155ff94627e357ba9629d8c7c1dfb8192d9c6401a6c9236e12ece781c380aafdfd006a0be394dd492b9cac7cad2d165deeece2945809850cbb61a78162ae1f66b59461f19c3bee9e4ae5bcebb517f492a800d", 0x70}], 0x7, &(0x7f0000000900)=ANY=[@ANYBLOB="1c000000000000000100000001000000", @ANYRESOCT=r12, @ANYRES32, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r3, @ANYRES32, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r12, @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="0015000020000000000000000100000001000000", @ANYRES32, @ANYRES32=r9, @ANYRESOCT=r9, @ANYRES32=r5], 0xf0, 0x10}}, {{0x0, 0x0, &(0x7f000000ae80)=[{&(0x7f000000ae40)="ed81805264c104a1", 0x8}], 0x1, &(0x7f0000000b00)=[@cred={{0x1c, 0x1, 0x2, {r6, r7, r11}}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38, 0xc000}}, {{&(0x7f000000af80)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f000000b100)=[{&(0x7f000000b000)="bc314862059a0d862a318bd52ff93927833fd80f357ce8e1c4c1ec82d60a1ffa502cb3a439ce79e7c309849ee27883efb801cee70bca64a471ba3f5064946e1859a958ae97c483715576142fa3ddd700f5260aa529caef8be3d824d69b6b8ab5a17ed3e8a866acd4ea0a519f73acb8d8d632bad47670", 0x76}, {&(0x7f000000b080)="f5ef0d08ed8b7475384dad7d8c46943fb54addf199be6a7e4b48193e43e3e753bfd4413d9abceb20654360c96046adb6f2d5da42b3eec6dfd1f6a0a9c1223e450523986e82ca598cee92ee87e50149943c53ca249320ba75dc99c2f3d56cd8", 0x5f}], 0x2, 0x0, 0x0, 0x20000011}}], 0x6, 0x48000) read$FUSE(0xffffffffffffffff, &(0x7f0000002640)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004680)=0x0) fstat(r0, &(0x7f00000046c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000140)={0xa8, 0x22, 0x20, 0x70bd28, 0x25dfdbfe, "", [@generic="b76510ee670ace848fe92d6ba8ac6be3a1aded363d3c0ec51da2131c79771e5ca39d3d340c59b87ce5f7d24e5a10265fb75f6fdc66161e97f0c348f5349d53fe19fbcd733ec318d9d2cf9db625dbcda70bab561e17c760e16e89385e488b4ff2fb6c0c31844ecd8ebb98c848c88752ab85c9800bee60627b2f590ba2d390b9d64801bf995ba68692d00c32c0c378db67d08a2e45b30c0444"]}, 0xa8}], 0x1, &(0x7f0000000e40)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000034000000000000000100000001000000", @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r2, @ANYBLOB="000000201c000000fdffffff00000000020000bc359b9d383434f25c9b8b11bb29f9ca1946ef87f29ae419fb623d69f476c5673507b1b0a86bf26faeb99e431b2e9e57ec9e8cdac948d9d0f782ead570eca56c854b38e4d077bb14b7fc74f6db7fda9c52749ab887c9c891e9d7e30d0617db3a785766b044311c536b7cd28964f4636e36fe839147b0ff9f96c6114a175ffd93d4bfd0fbb9d80855f1daff92aab2caf7aa59da5074ff3bcc92b44098d3faf1d750fb964bc39daa7eb60877fdd9948cf6db42cd27c5831348f23636aef6fcfefccba429e35de8a850eb32dbf51b0e68b6656783f454904f78e648a9", @ANYRES32=r6, @ANYRES32=0xee01, @ANYRES32=r13, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB='\x00\x00\x00\x00'], 0xd8}, 0x0) syz_open_procfs(r6, &(0x7f00000000c0)='fd\x00') fspick(0xffffffffffffffff, 0x0, 0xd61973282017dcb0) 5.999992058s ago: executing program 0 (id=2427): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) sched_setscheduler(0x0, 0x0, 0x0) getpid() sched_setscheduler(0x0, 0x0, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r0, 0x0, 0x2) 5.223297252s ago: executing program 1 (id=2428): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close(r0) 5.12677402s ago: executing program 1 (id=2431): syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') getpid() r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000640)={'vlan0\x00', &(0x7f0000001000)=@ethtool_perm_addr={0x20, 0xc8, "7fefb8177f7a224d31ae4b5cb1cacaa1c0a718f89168cd1afd822c4a8278fa912956b1127eac914eb235e493ffba854f777bb6ac8016f62d41ff6d24c2d8c6b434832f847ee99c210b73320a1cadce0176e922cfd20b5406bb1d5f94f8a2cc67c2a6df7c5d677bc6333105643df5127a7de6b8ae40e7328d671726106e767cf9fd5c008ef23365299018ed9e9d45173dd2f2f44796105ce0c2004d09e36063582f64f4054742ec9fbb78ec68a6aa6cf4bf0e959ccaeb04d2c852ae8cd14b511edba9de404980f633"}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) rseq(&(0x7f0000000040), 0x20, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x7, 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x298) mmap(&(0x7f00005ca000/0x3000)=nil, 0x3000, 0xb635773f06ebbeee, 0xa0011, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$ttys(0xc, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000080)={{0x2, 0x0, @broadcast}, {0x0, @broadcast}, 0x1e, {0x2, 0x0, @empty}, 'veth0_vlan\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000080)="290000001e00190f00003fffffffda060200000000e80001dd0008040d000800ea11c21d0005000000", 0x29}], 0x1) geteuid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0xff000000}, 0x0) 5.054016786s ago: executing program 2 (id=2433): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}], {0x14}}, 0x50}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 4.966691643s ago: executing program 2 (id=2434): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x74}]}}}}}}}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000003) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000a00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}], 0x38) write$snapshot(r8, &(0x7f0000000080)="7e4accdc42881a21f836e10f566dc4391a30c8352547f9bdec4560d7563b80a5e9595deb6322695ffb", 0x29) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602ab1100000e000a000f00000002", 0x29}], 0x1}, 0x0) 4.963479604s ago: executing program 1 (id=2435): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000a80)='B', 0x1}], 0x1}, 0x0) close(r0) recvmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, &(0x7f0000000440)=""/210, 0xd2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/140, 0x8c}], 0x1, 0x0, 0x2}}], 0x2, 0x143, 0x0) 4.914676187s ago: executing program 1 (id=2436): r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="850000002a00000025000000000000009500000000000000afcd48d6494d614dcc6fab5335ec470db2c6161dba392176dd2963038e1d69ba7ea94c500dc4ef2fad96ed406f21caf5adcf920569c00cc1199684fa7c93836d9ea2cfb0e60436e05425cc4686b066707de94a4f4d5fc79c987d669f381faca0f9d9924be41c6eee84309e7a23c19a39484809539fcb4e0b6eab1aa7d55545a34effa077faa5916b8f67ba24828e8b476090bef25c59e88254f54077f799bf408301000000bf2255d6a0244d35b213bda84cc1722fd8cc2e47a7d8b85a5e3d77ac463920e231b7ae0da8616d2b7958f91f5da6c025d060ab186d94af98af1da2b5952eb15855933a212304e035f7a35dfc72c81256a55a25f8fe3b28d7e53c78fbfe5ab0255f347160ec83070000000000004015cf10453f6c0b973b81a484ebad04859d928365a7ea3fab8b4b380a00d72bc0480f949c479757306720399379d9271cf555c14d56b51c2298237bebfc08e0d5976a942b846970cfd98b9d4139f1111f2dc5e46ac1c60a9b030074bfbcd4b090121754e90bf0649fae26f7d599a32eef6cb22f84135f0e519f0b1e4aaa026d570ecb5e8cddbed65ff702000000a3ff4f824cf796b07a6ff61c5552417fd703f7f14d8b7897bfca3cdf6a662d8bc9c89c9120072a5d00dcdd8595356c9b2492aaf1264d4ef4a410c882834867bcd2b6e558d17879570c8ad943e392955f4f979ea132dfba30bd0f6ea508000000a0c548552b571bed5647323c78a996810000000571cbb17d9f37282462f0e9c147c0d497c61433c6ccc35601eef97ee611be8c97f4151fcda6cb799c6e924966a7f90b01fd1e75ee76bd72346cfbb526890aa7fe5e68949a3b30567e54d3504723177d356c4604bca492ecec37e83efceefd7ca2533659edc825e8ed9be8796831aaa48099c75753ebbe05cc85451c6a145074343caea5c4bf690441974b155f5adc681a03c0bbb8358856175e2ce8b0cbbbe3c033e54ffcebde1d9d3d350000000000000000e0f209150a07682c4e14e3a83558df6f3fc97f1730a136bdee07e98cb984b2e2304a1b63afefdb636e56bbaae4e62136574bc6371a0bb2be1a962aae9c1258da6ef590e1d85ea9e12b3025f43e7e08ccffc5064dea4c39cf4b98e1fc6efb5978f51e16b678eca0b658a56008948e561a9845e4ff29e2bdb1d0b923b272341c5e093fd66a2946501559335781092cf8ce987c56cd31121624d7455f2a3666276c7c0e812b28e2f30d035cee5d0e77a3c72208ec651cc0ae637fa474816bc59d2e2a00092419304b338a987e9d3044d856ce24f370030be3b5f79f030b8d3ebce68663ef5af469abe753314fae31a0445859a5ece8fb11a4ee8e46354c9c3a041a1e7b55c4e81dba1e12289ee34463aaf28345bde0c195bc9f022ca8ce37ed85464c31679053e7f9d04bb5cb51da0b7958989fd70f241262d0af3246eb4fc4bda345360200000001fbddeacd3adaa4d2715e21c71f4d578455d1d118d372ad6e9326b98ac67658ae791ee8b479a7c9efe3625a9d971b5997485d6a063dc6f7359e2eccc2fb39d419de1a7b5c9dc22c96295a4601adf59d44e58eb1c60b3475be31a9b7cf42b6402312d2725b8d9fa700a86407e79ae29d2c117ca65fc86c2dce97aa03279a66ec87122219b0f796ab92b1adecae50fdb408c8a80f7f02f750d6c977a1919f9f69a6cfefdf879d447df53f3b9b700056b5af553d18a6cc50feeb7bfad9b7be3283b6450d264e7712d2f1d7004548b19162cef04d18d4f5987baab97a9bfbd8f185b5631820420b75b6522c0e21c882c66f4f25ffb6d95e07de02205fca4f18a2eb5b63e45d5d80fe52734093ae5aa3c0b4f3f45bfff201000000000000002e31560e5b741445ea2a1acee2e98c9f3427834ba0a765d20ba2ab083430f87af976a46f9a9a1ac7dea1ea6845f9aa66237e0dacc107f532348cc2116473381e961f3d9c8c21578fe3245097c280abe51427b9f6cd72e65731b7ca661eb5da6d0252803c66730cd5eac907f09b9695906313f8873522608c6fc01e1b9e16587bb5f715303e6b89e5c54d680ac66d09af90dbf50ee69a39265964279d174b0000000000000000000000fa08ad0731ba49fbf981f8265e7f1f4c2d97f4680b135f87c228ce694181a0df1774fa7d94944bb92d2b89f73f0e8b63f6316c5762f3288bc970720f48b5647dd177db6812fae0533496b6d58da50ee80a6b9a7438978c5465113f668eb4484350048289d07dbef325d3221a7cb35f812f257941a9781e3214c2a3228f52e33e9362fabae396ce087cc5dcf89d99844b762a9cf17548c54fccad2c7ae8072b82e0880815daf966bd5343c1635e123f868a7167cfcff33384253af570f4ef9c0254afdd89c73943562b530dd88da8a94013bbaf204bebc38055adc39f07f7c22711f4d1f6dcc928d1578a093c072e0b92babc76f47ee367e745a024a2278319d9a4d1378482b70304669c447c71ca4d54c82395a3958d576c42c08a5e5adfb58306164cc7bb212f36468f40ce185a63c6b05292186095c1f407ce74297d16470988f1647f7b6f6cdc6ab8be3cacc325df963c2cb80cfe07ded6d55f556be0a3dfa85f0aa2b336faa53b8b0a2dafe0840fff03ead2c4a07dbffeb4ae7617c8eed2f8c12883592538aab23f465ce974729aedb4ae550da3f7f180c6f6fd91c653a77e9304b05dd7ada7fcb8277acac71ed37d4ef8a5885a208b34ac5c34d61fbcee2c9be9af7c7685c7d2f302b0601c3672710098d3d9dfc14f346ff7e1f89a3249254edffbd22aec008810fb9fc59f5c39fc7fa52358506d2557e12c8c3e3b0e9d924c50051383a4c9f6a1bb4187c1168d52ce26659325ce4fd7759c4f84d1fd8652cfecc60d590bff108ecef2d51d8fbd095ed7c1688a8898f8bd19ead4be1eb5797e6aef9cf6d9ca92e52106e03d29b669c0096b37c976b5889dc15c7803422a15f54da7901c2f6e894cd48dfe7e82d79a0943fc133d1605303a2a93361400"/2165], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) setsockopt$sock_attach_bpf(r0, 0x6, 0xc, &(0x7f0000000080)=r1, 0x4) 4.023562951s ago: executing program 2 (id=2438): socket$kcm(0xa, 0x922000000003, 0x11) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, 0x0, 0x1f) r2 = socket(0x2b, 0x80801, 0x1) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$kcm(0xffffffffffffffff, 0x0, 0xc010) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x1e, &(0x7f00000005c0)=ANY=[], 0x20) 4.011978441s ago: executing program 1 (id=2439): syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000e00)=ANY=[@ANYRES64=0x0, @ANYRES8=0x0], 0x1, 0x554d, &(0x7f0000005e40)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537S1EbiOMA/ks0av9RKX3vVfqmx+gR+ljoS/UAvYRHsFfoBTyD+7ZHWHQxGYQsBgQnG1Y+H8jEych3ZjQvM4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPTpodou//359vfWnMPxNnlmAwAAAFyyr7bL+sO8qX9I1z+lS19SvYiIMiIurd1HMWlljlJO1fH96sUY/kfUCac+pul4HxHf0/H0ue9fAQAAAO7Xbr1ZNKv1ppgPPSBeU7NpU378kSmviIhq/pgprTwVXzOF1ff3OH5lSqs3sGaZwpott/HltkmuTtpGrVOayWxV/4l1reynXwAAYEjtlUDHKgQAAIA78HPoATCM4lycnzNOm1N6IPiuVQMAAADeoGLoAQAAAAC9q9f/3v8HAAAA9615/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB92lfb5W69WXS1r67MORyv8DsiOpryzQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4Zn/eUSAEwiAM9q7vTOb+h5UGDY1NqkD4+BuDAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICL/XlJgRAIgiiYM/530vc/rCToGUSIgIZHFbVoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPii3/3yf2JqnEnmThtLxyPJ2lVj66qx96Bx9GC8/RsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICLnbvnjaMIAwA8t3t7+QCEMegKAwoSBTTEvoRASihAFgU/AclyzsFwIZC4IJEFcgMVch0hISgRQgKZLv8hNZbShC6FCyNRUQTNfjjrD+AUJbsX+3mk2Xl3vZ59Z+9k+fWsDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoLL1dnghKeM0bqaKuDr2+/bqYuw39/TRzfXbM7HFuLNv5HT37tdvPZoJTK4X6zun+rWdL5tPBgAAgKMhrVXkd7KN+dgnU3n9n1XnxJr/+6eKuKrn99b9m9urx8svzVT1/2+/3n1u50JTxXXioEvLo+Hc/lS6j2iKE+/p/z2jm9/5/G8vaf6CJO+tPbuV5fez882tW+/08vBYE9kCAA/idNWXQfX7UOwHbSYGwJHRrRXeVf2fTrWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEATttbCE1XcCSHMdO/H0eb26uJB/c312zNVe+PGjfX6mHGILISwtDwaZg3OZdJdvXb944XRaHil+eBUCKG9q5fBB2OcE8J/n1O+PUN7s/j3oDMZabQaJOXrMyn5PMygeu89/JFb+oEEAMChlZUt1vV3so35eKwzHcK9H3bX/69Ucb84PE79f/fDv+8Viu+t1/+Dxmc6uWZXLn06e/Xa9deWLy1cHF4cfvL6mcGbg7Pnz507Pxvv1dzsUkiGc22nCQAAwGOic8CxXtnq9X8yvX/9/+SeMcap/z/7bvBFefq3cZOq/w90f9Gv7UwAAACOot5O9MxLf/15UO3c6fXC5wsrK1cGxXZn/0yxbTTdB3SsbPX6P51uOysAAACgCVtrnV3r/xdqcRhz/f/JH5//uT5mGkI4EcLlEMLw9OLl0YXmpjPRmvhH5fxCvbZnCgAAQFtOlK2+/p/lz/8nO488JCGEV18u4uqzrsap/9N3v/qpfq368/9nm5viREr6xf3I+34I3X7bGQEAAHCYHS9bLPb/yDbmP/rl5Ps9z/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANO2fAAAA//8Nujoo") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r4, 0x5406, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r6, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) ioctl$TIOCGSID(r4, 0x5429, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.945460607s ago: executing program 2 (id=2440): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x40281, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) close_range(r1, 0xffffffffffffffff, 0x0) 3.421949679s ago: executing program 4 (id=2441): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 3.403031981s ago: executing program 4 (id=2442): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2f, 0x4, 0x0, 0x0, 0xbc, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010110}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@empty}, {@multicast1}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x80}}, {@remote}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.188298628s ago: executing program 3 (id=2445): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}], {0x14}}, 0x50}}, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3.123053075s ago: executing program 3 (id=2446): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000a80)='B', 0x1}], 0x1}, 0x0) close(r0) recvmmsg(r1, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/39, 0x27}], 0x1, &(0x7f0000000440)=""/210, 0xd2}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000005c0)=""/140, 0x8c}], 0x1, 0x0, 0x2}}], 0x2, 0x143, 0x0) 3.05834351s ago: executing program 3 (id=2447): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x283, 0x0, &(0x7f0000000140)="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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.923296221s ago: executing program 3 (id=2448): capset(&(0x7f0000000200)={0x19980330}, &(0x7f0000000040)) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b4b, 0x0) 2.832610258s ago: executing program 3 (id=2449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000140)={@local, @multicast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000f5", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x74}]}}}}}}}}, 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$TCFLSH(r6, 0x400455c8, 0x20000000003) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r8 = fcntl$dupfd(r7, 0x0, r7) write$sndseq(r8, &(0x7f0000000a00)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw8}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"448cc880fe353ca0f2c2e953"}}], 0x38) write$snapshot(r8, &(0x7f0000000080)="7e4accdc42881a21f836e10f566dc4391a30c8352547f9bdec4560d7563b80a5e9595deb6322695ffb", 0x29) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602ab1100000e000a000f00000002", 0x29}], 0x1}, 0x0) 2.729291026s ago: executing program 2 (id=2450): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0x8}, 0x48) getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000040)='mm_page_alloc\x00', r6}, 0x10) r8 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xf, 0x10, r8, 0x0) r9 = syz_open_procfs(0x0, &(0x7f00000000c0)='smaps\x00') read$FUSE(r9, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) gettid() r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r13 = dup(r12) sendmsg$netlink(r13, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000002140)=ANY=[@ANYRES16=r10, @ANYRES64=r5, @ANYBLOB='\x00\b\x00\x00\x00', @ANYRESOCT=0x0, @ANYRESOCT=r11, @ANYRESDEC=r2, @ANYRESDEC=r7], 0x108}, {&(0x7f0000000000)=ANY=[], 0x1f88}], 0x2}, 0x0) 137.653709ms ago: executing program 2 (id=2451): open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) keyctl$clear(0x7, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = getpid() inotify_init1(0x0) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000001000/0x3000)=nil) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000ac0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x5511, &(0x7f0000015b80)="$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") r1 = open(&(0x7f0000000040)='.\x00', 0x0, 0x82) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, &(0x7f0000000380)='cache=mmap') ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc0185879, &(0x7f00000004c0)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x2401}) r4 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r4, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x20200}], 0x1, 0x7a00, 0x0, 0x3) 134.438379ms ago: executing program 4 (id=2452): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b0000000200000009000100"], 0x7c}}, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x58}}, 0x0) 75.337184ms ago: executing program 1 (id=2453): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) mbind(&(0x7f00004b1000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) 73.783024ms ago: executing program 3 (id=2454): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000080)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8}, @printk={@ld}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) r5 = socket$igmp(0x2, 0x3, 0x2) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, 0x0, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000500)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private}}}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000440)=@framed={{}, [@printk={@lu}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r7}, 0x10) r8 = add_key$keyring(&(0x7f0000000080), &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r8, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000180)='i=Ov:cb2e\xdf\xff\xff\x04\x00\xff\xff\xff') ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x3}, 0x0, 0x0, 0x0, 0x3f}}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$nl_route(0x10, 0x3, 0x0) 73.441834ms ago: executing program 4 (id=2455): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0xe0}]}}}]}, 0x44}}, 0x0) 0s ago: executing program 0 (id=2456): mkdir(&(0x7f0000000080)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@nodevmap}], [], 0x6b}}) chdir(&(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f0000000200)='./file1\x00', 0x1000, 0x0) kernel console output (not intermixed with test programs): ] PM: Enabling pm_trace changes system date and time during resume. [ 196.956299][ T6671] PM: Correct system time has to be restored manually after resume. [ 197.396850][ T3578] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 197.636654][ T3578] usb 4-1: Using ep0 maxpacket: 32 [ 197.796895][ T3578] usb 4-1: config index 0 descriptor too short (expected 35577, got 27) [ 197.809995][ T3578] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 197.826528][ T3578] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 197.835736][ T3578] usb 4-1: config 1 has no interface number 0 [ 197.854900][ T3578] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 197.890611][ T3578] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 197.914174][ T3578] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 197.938194][ T3578] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 197.947814][ T3578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.966650][ T21] usb 5-1: USB disconnect, device number 14 [ 198.006849][ T6682] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 198.029450][ T3578] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found [ 198.233530][ T6682] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 198.253737][ T3578] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached [ 198.287138][ T6721] smc: net device vlan0 applied user defined pnetid SYZ1 [ 198.305766][ T6721] smc: net device bridge_slave_0 applied user defined pnetid SYZ1 [ 198.403984][ T6728] PM: Enabling pm_trace changes system date and time during resume. [ 198.403984][ T6728] PM: Correct system time has to be restored manually after resume. [ 198.471073][ T5437] usb 4-1: USB disconnect, device number 15 [ 198.486843][ T5437] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected [ 198.576214][ T3547] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 198.586229][ T5528] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 198.826081][ T5528] usb 3-1: Using ep0 maxpacket: 8 [ 198.936366][ T3547] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 198.946799][ T5528] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 198.957263][ T3547] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice=3f.99 [ 198.966519][ T5528] usb 3-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 198.979934][ T3547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.992039][ T5528] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 199.003984][ T3547] usb 1-1: config 0 descriptor?? [ 199.009084][ T5528] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.057579][ T3547] usb 1-1: interface 1 not found [ 199.065458][ T5528] usbtmc 3-1:16.0: bulk endpoints not found [ 199.332606][ T5528] usb 1-1: USB disconnect, device number 16 [ 199.798739][ T6758] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1023'. [ 200.012160][ T6766] PM: Enabling pm_trace changes system date and time during resume. [ 200.012160][ T6766] PM: Correct system time has to be restored manually after resume. [ 200.138920][ T5439] usb 3-1: USB disconnect, device number 9 [ 200.155547][ T5528] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 200.352052][ T6790] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1036'. [ 200.405444][ T5528] usb 2-1: Using ep0 maxpacket: 32 [ 200.525344][ T5528] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 200.540997][ T5528] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 200.552124][ T5528] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 200.565903][ T5528] usb 2-1: config 1 has no interface number 0 [ 200.581500][ T5528] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 200.595053][ T5528] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 200.618924][ T5528] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 200.643678][ T5528] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 200.662736][ T5528] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.725363][ T6762] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 200.754812][ T5528] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 201.387361][ T6762] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 201.535712][ T5528] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 201.775880][ T5439] usb 2-1: USB disconnect, device number 13 [ 201.795250][ T5439] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 201.853736][ T5528] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 201.919804][ T6825] netlink: 'syz.2.1050': attribute type 61 has an invalid length. [ 202.655677][ T5528] usb 1-1: Using ep0 maxpacket: 8 [ 202.904330][ T3578] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 203.464710][ T3578] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffee, bcdDevice=e6.a3 [ 203.502250][ T3578] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.516948][ T3578] usb 3-1: Product: syz [ 203.521252][ T3578] usb 3-1: Manufacturer: syz [ 203.531620][ T3578] usb 3-1: SerialNumber: syz [ 203.584783][ T3578] usb 3-1: config 0 descriptor?? [ 203.593818][ T5528] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 203.604235][ T5528] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.618075][ T5528] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.635690][ T5528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.656028][ T3578] usb-storage 3-1:0.0: USB Mass Storage device detected [ 203.694636][ T5528] usbtmc 1-1:16.0: bulk endpoints not found [ 203.902505][ T23] usb 3-1: USB disconnect, device number 10 [ 205.775432][ T6902] netlink: 'syz.2.1078': attribute type 1 has an invalid length. [ 206.042479][ T5437] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 206.589658][ T23] usb 1-1: USB disconnect, device number 17 [ 206.752329][ T5437] usb 4-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 206.780950][ T5437] usb 4-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 206.810509][ T5437] usb 4-1: New USB device found, idVendor=0930, idProduct=0215, bcdDevice= 8.78 [ 206.855975][ T5437] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.872893][ T5439] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 206.937033][ T5437] usb 4-1: Direct firmware load for ath3k-1.fw failed with error -2 [ 207.047275][ T5437] usb 4-1: Falling back to sysfs fallback for: ath3k-1.fw [ 207.282132][ T5439] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 207.668141][ T5439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 207.683195][ T5439] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 207.700536][ T5439] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 207.801831][ T5439] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 207.834467][ T5439] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 207.861719][ T5439] usb 3-1: Manufacturer: syz [ 207.885712][ T5439] usb 3-1: config 0 descriptor?? [ 208.031489][ T3547] usb 5-1: new low-speed USB device number 15 using dummy_hcd [ 208.221457][ T13] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 208.281383][ T5528] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 208.391437][ T3547] usb 5-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 208.404266][ T3547] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 208.415166][ T5439] appleir 0003:05AC:8243.000C: unknown main item tag 0x0 [ 208.423269][ T3547] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 208.434465][ T5439] appleir 0003:05AC:8243.000C: No inputs registered, leaving [ 208.443096][ T3547] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 208.458666][ T3547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.468617][ T5439] appleir 0003:05AC:8243.000C: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 208.501746][ T6943] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 208.541656][ T5528] usb 1-1: Using ep0 maxpacket: 8 [ 208.547404][ T3547] hub 5-1:1.0: bad descriptor, ignoring hub [ 208.555731][ T3547] hub: probe of 5-1:1.0 failed with error -5 [ 208.563001][ T3547] cdc_wdm 5-1:1.0: skipping garbage [ 208.568389][ T3547] cdc_wdm 5-1:1.0: skipping garbage [ 208.584985][ T3547] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 208.591394][ T13] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 208.605721][ T3547] cdc_wdm 5-1:1.0: Unknown control protocol [ 208.681406][ T5528] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 208.700709][ T5528] usb 1-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 208.714949][ T13] usb 2-1: Dual-Role OTG device on HNP port [ 208.731200][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.761071][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.771104][ T5528] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 208.790652][ T13] usb 2-1: SerialNumber: syz [ 208.795719][ T5528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.842086][ T13] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 208.852132][ T5528] usbtmc 1-1:16.0: bulk endpoints not found [ 208.962530][ T5528] usb 3-1: USB disconnect, device number 11 [ 208.991265][ T3580] usb 5-1: USB disconnect, device number 15 [ 209.044094][ T13] usb 2-1: USB disconnect, device number 14 [ 209.841076][ T3545] usb 1-1: USB disconnect, device number 18 [ 209.850642][ T13] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 210.120481][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 210.240590][ T13] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 210.254240][ T13] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 210.263547][ T13] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 210.272843][ T13] usb 5-1: config 1 has no interface number 0 [ 210.279002][ T13] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 210.289932][ T13] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 210.301168][ T13] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 210.314336][ T13] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 210.323575][ T13] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.331689][ T3545] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 210.361407][ T6971] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.382161][ T13] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 210.559765][ T6987] netlink: 'syz.1.1110': attribute type 1 has an invalid length. [ 210.584332][ T6971] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 210.617117][ T13] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 210.700509][ T3545] usb 1-1: config 0 has an invalid interface number: 32 but max is 0 [ 210.715696][ T3545] usb 1-1: config 0 has no interface number 0 [ 210.732193][ T3545] usb 1-1: config 0 interface 32 altsetting 0 endpoint 0x81 has invalid maxpacket 57964, setting to 1024 [ 210.749106][ T3545] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice=15.b4 [ 210.759872][ T3545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.780990][ T3545] usb 1-1: config 0 descriptor?? [ 210.821644][ T3545] usbhid 1-1:0.32: couldn't find an input interrupt endpoint [ 210.833681][ T3578] usb 5-1: USB disconnect, device number 16 [ 210.851419][ T3578] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 211.019969][ T23] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 211.149894][ T3545] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 211.506333][ T23] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 212.323410][ T7003] netlink: 'syz.0.1107': attribute type 16 has an invalid length. [ 212.331333][ T7003] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.1107'. [ 212.421320][ T13] usb 1-1: USB disconnect, device number 19 [ 212.449355][ T3545] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 212.467807][ T3545] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 212.479025][ T3545] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 212.489432][ T23] usb 3-1: Dual-Role OTG device on HNP port [ 212.490100][ T3545] usb 2-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 212.530427][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.539728][ T3545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.564056][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 212.572616][ T23] usb 3-1: SerialNumber: syz [ 212.587583][ T7002] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 212.604353][ T3545] hub 2-1:1.0: bad descriptor, ignoring hub [ 212.610775][ T3545] hub: probe of 2-1:1.0 failed with error -5 [ 212.620637][ T23] cdc_ether: probe of 3-1:1.0 failed with error -22 [ 212.630248][ T3545] cdc_wdm 2-1:1.0: skipping garbage [ 212.647789][ T3545] cdc_wdm 2-1:1.0: skipping garbage [ 212.680527][ T3545] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 212.688146][ T3545] cdc_wdm 2-1:1.0: Unknown control protocol [ 212.837563][ T23] usb 3-1: USB disconnect, device number 12 [ 213.251092][ T7031] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 213.448777][ T3545] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 213.698714][ T3545] usb 1-1: Using ep0 maxpacket: 8 [ 213.749024][ T13] usb 2-1: USB disconnect, device number 15 [ 213.898728][ T3545] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 213.912130][ T3545] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 213.922337][ T3545] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 213.938547][ T5429] usb 3-1: new full-speed USB device number 13 using dummy_hcd [ 213.953046][ T3545] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.968111][ T3545] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.631606][ T5528] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 214.704592][ T3545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.719649][ T7050] netlink: 'syz.3.1130': attribute type 61 has an invalid length. [ 214.968241][ T5429] usb 3-1: not running at top speed; connect to a high speed hub [ 214.998066][ T3545] usb 1-1: GET_CAPABILITIES returned 0 [ 215.003582][ T3545] usbtmc 1-1:16.0: can't read capabilities [ 215.048223][ T5429] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 215.060093][ T5429] usb 3-1: config 1 interface 0 has no altsetting 0 [ 215.068474][ T5528] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 215.077597][ T5528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.087517][ T5528] usb 5-1: config 0 descriptor?? [ 215.204278][ T3578] usb 1-1: USB disconnect, device number 20 [ 215.218083][ T5429] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 215.231816][ T5429] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.245358][ T5429] usb 3-1: Product: syz [ 215.249732][ T5429] usb 3-1: Manufacturer: 烾꾄蒤䊶돥鹏㥝纳ֽ椖竮덤㑷裈ꥀ裚 [ 215.263333][ T5429] usb 3-1: SerialNumber: syz [ 215.288582][ T7038] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 215.609104][ T5429] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 215.619403][ T5429] usb 3-1: USB disconnect, device number 13 [ 215.677861][ T23] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 216.067606][ T23] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 216.167705][ T23] usb 2-1: Dual-Role OTG device on HNP port [ 216.197786][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 216.211262][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 216.219765][ T5528] usb 5-1: Cannot set autoneg [ 216.219871][ T23] usb 2-1: SerialNumber: syz [ 216.229314][ T5528] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -32 [ 216.281264][ T23] cdc_ether: probe of 2-1:1.0 failed with error -22 [ 216.495600][ T5528] usb 2-1: USB disconnect, device number 16 [ 216.947093][ T5429] usb 3-1: new low-speed USB device number 14 using dummy_hcd [ 217.326977][ T5429] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 217.345034][ T5429] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 217.354720][ T5429] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt [ 217.400322][ T5429] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 217.431332][ T5429] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.467441][ T7091] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 217.487566][ T5429] hub 3-1:1.0: bad descriptor, ignoring hub [ 217.496140][ T5429] hub: probe of 3-1:1.0 failed with error -5 [ 217.506564][ T5429] cdc_wdm 3-1:1.0: skipping garbage [ 217.515940][ T5429] cdc_wdm 3-1:1.0: skipping garbage [ 217.529123][ T5429] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 217.535349][ T5429] cdc_wdm 3-1:1.0: Unknown control protocol [ 217.596769][ T5528] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 217.716654][ T13] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 217.766113][ T3545] usb 5-1: USB disconnect, device number 17 [ 217.836925][ T5528] usb 1-1: Using ep0 maxpacket: 8 [ 217.967086][ T5528] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 217.984166][ T5528] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 217.995519][ T5528] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 218.007012][ T5528] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 218.022842][ T5528] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 218.035348][ T5528] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.137829][ T13] usb 2-1: not running at top speed; connect to a high speed hub [ 218.247274][ T3545] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 218.268480][ T13] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 218.305585][ T13] usb 2-1: config 1 interface 0 has no altsetting 0 [ 218.806505][ T5528] usb 1-1: GET_CAPABILITIES returned 0 [ 218.812402][ T5528] usbtmc 1-1:16.0: can't read capabilities [ 218.847622][ T23] usb 3-1: USB disconnect, device number 14 [ 218.856279][ T13] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 218.866916][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.875617][ T13] usb 2-1: Product: syz [ 218.880586][ T13] usb 2-1: Manufacturer: 烾꾄蒤䊶돥鹏㥝纳ֽ椖竮덤㑷裈ꥀ裚 [ 218.891422][ T13] usb 2-1: SerialNumber: syz [ 218.916267][ T7108] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 218.926359][ T3545] usb 5-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 218.950413][ T3545] usb 5-1: config 255 has 1 interface, different from the descriptor's value: 255 [ 218.961860][ T3545] usb 5-1: New USB device found, idVendor=0930, idProduct=0215, bcdDevice= 8.78 [ 218.973511][ T3545] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.082030][ T21] usb 1-1: USB disconnect, device number 21 [ 219.226115][ T13] cdc_ether: probe of 2-1:1.0 failed with error -71 [ 219.250912][ T13] usb 2-1: USB disconnect, device number 17 [ 219.818796][ T7145] netlink: 'syz.4.1166': attribute type 10 has an invalid length. [ 219.909158][ T7145] team0: Port device geneve1 added [ 220.055542][ T21] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 220.465599][ T21] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 220.479677][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.507828][ T21] usb 3-1: config 0 descriptor?? [ 220.615232][ T13] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 220.975109][ T13] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 220.995579][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.007439][ T13] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.017837][ T13] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 221.115174][ T13] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 221.138861][ T13] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 221.156609][ T13] usb 2-1: Manufacturer: syz [ 221.192994][ T13] usb 2-1: config 0 descriptor?? [ 221.290489][ T7164] netlink: 'syz.0.1172': attribute type 1 has an invalid length. [ 221.330745][ T7165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.634853][ T21] usb 3-1: Cannot set autoneg [ 221.639746][ T21] MOSCHIP usb-ethernet driver: probe of 3-1:0.0 failed with error -32 [ 221.686535][ T13] appleir 0003:05AC:8243.000D: unknown main item tag 0x0 [ 221.694123][ T13] appleir 0003:05AC:8243.000D: No inputs registered, leaving [ 221.710903][ T13] appleir 0003:05AC:8243.000D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 222.114211][ T13] usb 2-1: USB disconnect, device number 18 [ 222.284462][ T23] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 222.754268][ T23] usb 1-1: not running at top speed; connect to a high speed hub [ 222.934068][ T23] usb 1-1: config 1 interface 0 altsetting 7 endpoint 0x3 has invalid maxpacket 1024, setting to 64 [ 222.953525][ T23] usb 1-1: config 1 interface 0 has no altsetting 0 [ 223.568865][ T5528] usb 3-1: USB disconnect, device number 15 [ 223.703709][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 223.714073][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 223.723310][ T23] usb 1-1: Product: syz [ 223.743758][ T23] usb 1-1: Manufacturer: 烾꾄蒤䊶돥鹏㥝纳ֽ椖竮덤㑷裈ꥀ裚 [ 223.770396][ T23] usb 1-1: SerialNumber: syz [ 223.817581][ T7172] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 223.834770][ T7193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.020704][ T7202] netlink: 'syz.2.1188': attribute type 10 has an invalid length. [ 224.084366][ T7202] team0: Port device geneve1 added [ 224.254196][ T23] cdc_ether: probe of 1-1:1.0 failed with error -71 [ 224.266079][ T23] usb 1-1: USB disconnect, device number 22 [ 224.444188][ T3579] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 224.763591][ T3579] usb 3-1: Using ep0 maxpacket: 8 [ 224.905930][ T3579] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 225.035494][ T13] kernel write not supported for file /input/mice (pid: 13 comm: kworker/0:1) [ 225.075817][ T3579] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 225.086711][ T3579] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 225.100223][ T3579] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.113903][ T3579] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 225.126494][ T3579] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.402855][ T3579] usb 3-1: usb_control_msg returned -32 [ 225.411902][ T3579] usbtmc 3-1:16.0: can't read capabilities [ 225.522805][ T3543] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 225.903232][ T3543] usb 1-1: Using ep0 maxpacket: 8 [ 226.053555][ T3543] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 226.099985][ T3543] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 226.274639][ T3543] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 226.376527][ T3543] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 226.419107][ T3543] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 226.428296][ T3543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.494374][ T3579] kernel write not supported for file /input/mice (pid: 3579 comm: kworker/1:7) [ 226.742450][ T3543] usb 1-1: GET_CAPABILITIES returned 0 [ 226.748062][ T3543] usbtmc 1-1:16.0: can't read capabilities [ 226.985071][ T5429] usb 1-1: USB disconnect, device number 23 [ 227.477847][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 227.477862][ T26] audit: type=1326 audit(1720533060.539:1743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7263 comm="syz.1.1214" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x0 [ 227.619293][ T5429] usb 3-1: USB disconnect, device number 16 [ 227.676348][ T7271] device geneve2 entered promiscuous mode [ 227.820809][ T13] kernel write not supported for file /input/mice (pid: 13 comm: kworker/0:1) [ 228.846047][ T7296] netlink: 'syz.0.1226': attribute type 10 has an invalid length. [ 228.925962][ T7296] team0: Port device geneve1 added [ 228.981319][ T7306] input: syz0 as /devices/virtual/input/input6 [ 229.134347][ T7312] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1232'. [ 229.146063][ T26] audit: type=1326 audit(1720533062.210:1744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.1.1231" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x0 [ 229.241010][ T3550] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 229.635187][ T3550] usb 1-1: Using ep0 maxpacket: 8 [ 229.859678][ T3550] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 229.961039][ T3550] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 229.989240][ T3550] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 231.420224][ T3550] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.501652][ T3550] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 231.534584][ T3550] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.809322][ T7334] netlink: 128 bytes leftover after parsing attributes in process `syz.4.1238'. [ 231.889675][ T3550] usb 1-1: usb_control_msg returned -32 [ 231.895345][ T3550] usbtmc 1-1:16.0: can't read capabilities [ 232.817673][ T7352] input: syz0 as /devices/virtual/input/input7 [ 233.007957][ T26] audit: type=1326 audit(1720533066.062:1745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.3.1248" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4b8cabd9 code=0x0 [ 233.213519][ T7365] netlink: 124 bytes leftover after parsing attributes in process `syz.4.1250'. [ 234.007056][ T23] usb 1-1: USB disconnect, device number 24 [ 235.735375][ T26] audit: type=1326 audit(1720533068.793:1746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7397 comm="syz.0.1261" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2dd5bd9 code=0x0 [ 235.757233][ C1] vkms_vblank_simulate: vblank timer overrun [ 235.826895][ T7418] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1265'. [ 235.957078][ T7427] netlink: 'syz.4.1267': attribute type 10 has an invalid length. [ 236.318717][ T7435] IPVS: Scheduler module ip_vs_sip not found [ 236.496063][ T7441] input: syz0 as /devices/virtual/input/input8 [ 237.102911][ T26] audit: type=1326 audit(1720533070.164:1747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7469 comm="syz.3.1283" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4b8cabd9 code=0x0 [ 237.124737][ C1] vkms_vblank_simulate: vblank timer overrun [ 237.468460][ T7485] netlink: 124 bytes leftover after parsing attributes in process `syz.2.1288'. [ 237.561284][ T7488] input: syz0 as /devices/virtual/input/input9 [ 237.822739][ T7498] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1294'. [ 239.068798][ T7521] input: syz0 as /devices/virtual/input/input10 [ 239.491453][ T7532] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1307'. [ 239.823298][ T7547] netlink: 'syz.2.1312': attribute type 10 has an invalid length. [ 240.235577][ T3578] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 240.585174][ T3578] usb 3-1: Using ep0 maxpacket: 8 [ 240.721426][ T3578] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 240.764024][ T3578] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 240.770839][ T7573] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1322'. [ 240.775561][ T3578] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 240.793893][ T3578] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 240.814582][ T3578] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 240.825042][ T3578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.958234][ T7583] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 241.155157][ T3578] usb 3-1: usb_control_msg returned -32 [ 241.166320][ T3578] usbtmc 3-1:16.0: can't read capabilities [ 244.042566][ T3547] usb 3-1: USB disconnect, device number 17 [ 244.159009][ T7616] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 244.286907][ T7624] tipc: Started in network mode [ 244.291810][ T7624] tipc: Node identity 7272fa111a48, cluster identity 4711 [ 244.308156][ T7624] tipc: Enabled bearer , priority 0 [ 244.327988][ T7624] tipc: Resetting bearer [ 244.364188][ T7622] tipc: Disabling bearer [ 245.199702][ T7650] loop2: detected capacity change from 0 to 8 [ 245.202572][ T7644] netlink: 'syz.4.1348': attribute type 10 has an invalid length. [ 245.392614][ T7650] SQUASHFS error: Unable to read inode 0xa7 [ 245.411895][ T7661] tipc: Bearer : already 2 bearers with priority 0 [ 245.434909][ T7661] tipc: Enabling of bearer rejected, cannot adjust to lower [ 245.630980][ T7667] netlink: 'syz.2.1357': attribute type 3 has an invalid length. [ 245.670911][ T7673] netlink: 'syz.1.1362': attribute type 4 has an invalid length. [ 245.680671][ T7667] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1357'. [ 245.739908][ T7667] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1357'. [ 246.569628][ T7689] loop2: detected capacity change from 0 to 8 [ 246.683823][ T7689] SQUASHFS error: Unable to read inode 0xa7 [ 246.697942][ T7691] loop0: detected capacity change from 0 to 8192 [ 246.752082][ T7691] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal [ 246.752624][ T7691] REISERFS (device loop0): using ordered data mode [ 246.752635][ T7691] reiserfs: using flush barriers [ 246.779631][ T7691] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 246.779976][ T7691] REISERFS (device loop0): checking transaction log (loop0) [ 246.809711][ T7691] REISERFS (device loop0): Using r5 hash to sort names [ 246.811594][ T7691] REISERFS warning (device loop0): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2) [ 246.811867][ T7691] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 247.157663][ T7708] netlink: 'syz.2.1375': attribute type 4 has an invalid length. [ 248.216789][ T7737] loop0: detected capacity change from 0 to 512 [ 248.323255][ T7747] netlink: 'syz.2.1392': attribute type 4 has an invalid length. [ 248.341011][ T26] audit: type=1800 audit(1720533081.410:1748): pid=7737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1387" name="file1" dev="loop0" ino=1048611 res=0 errno=0 [ 248.382353][ T7737] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 248.430133][ T7737] FAT-fs (loop0): Filesystem has been set read-only [ 248.458772][ T7737] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 248.498057][ T7737] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 0, start 8e210000) [ 248.671470][ T7735] FAT-fs (loop0): error, invalid access to FAT (entry 0x8e210000) [ 249.394980][ T7770] kvm [7769]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 249.409074][ T7770] kvm [7769]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 249.462258][ T7770] kvm [7769]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 249.820415][ T7790] loop2: detected capacity change from 0 to 128 [ 249.932353][ T7790] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 249.995642][ T7790] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 250.277821][ T7783] loop0: detected capacity change from 0 to 40427 [ 250.402352][ T7783] F2FS-fs (loop0): invalid crc value [ 250.454025][ T7783] F2FS-fs (loop0): Found nat_bits in checkpoint [ 250.564863][ T7783] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4 [ 250.606761][ T26] audit: type=1800 audit(1720533083.681:1749): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1409" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 250.714039][ T26] audit: type=1800 audit(1720533083.721:1750): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1409" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 250.735590][ T3508] attempt to access beyond end of device [ 250.735590][ T3508] loop0: rw=2049, want=45104, limit=40427 [ 251.098306][ T7822] netlink: 'syz.1.1425': attribute type 4 has an invalid length. [ 251.271150][ T7814] kvm [7812]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 251.304546][ T7814] kvm [7812]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 251.347484][ T7814] kvm [7812]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 253.838294][ T7857] loop2: detected capacity change from 0 to 4096 [ 253.934043][ T7857] ntfs: (device loop2): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 253.990985][ T7876] loop0: detected capacity change from 0 to 128 [ 254.050398][ T7876] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 254.088878][ T7857] ntfs: volume version 3.1. [ 254.133410][ T7876] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 255.648558][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.655312][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.887139][ T7923] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 257.320872][ T7944] fuse: Unknown parameter '0x0000000000000005' [ 257.433864][ T7946] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1475'. [ 257.720127][ T7953] loop2: detected capacity change from 0 to 8 [ 257.782351][ T7953] Filesystem uses "unknown" compression. This is not supported [ 257.823861][ T7960] loop0: detected capacity change from 0 to 1024 [ 257.849145][ T7953] loop2: detected capacity change from 0 to 512 [ 257.910460][ T7953] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000008000,minixdf,,errors=continue. Quota mode: writeback. [ 257.926958][ T7953] ext4 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 258.086557][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1486'. [ 258.227507][ T7977] fuse: Unknown parameter '0x0000000000000005' [ 258.323468][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1489'. [ 258.397579][ T3579] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 258.946324][ T3579] usb 1-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 258.972600][ T3579] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.176064][ T3579] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.195495][ T3579] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.231889][ T3579] usb 1-1: Product: Э [ 259.259218][ T3579] usb 1-1: Manufacturer: 忯긐檆嶹ȁ踶⅏烈⍉쉴ꡙ␅䏲ﯭ䖍﨣⺭헄ꮟ荢巆仚퀚㫪垀φᇆᐸ堵쬗塙㈏縻ꯦ湰腠Ƈ [ 259.310009][ T3579] usb 1-1: SerialNumber: syz [ 259.390477][ T8005] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 259.696431][ T3579] usb 1-1: 0:2 : does not exist [ 259.742669][ T3579] usb 1-1: USB disconnect, device number 25 [ 259.979605][ T8018] fuse: Unknown parameter '0x0000000000000005' [ 260.004815][ T8020] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 260.020544][ T8018] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1502'. [ 260.406629][ T8023] kvm [8022]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 260.442726][ T8023] kvm [8022]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 260.480122][ T8023] kvm [8022]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 260.492724][ T8041] loop0: detected capacity change from 0 to 4096 [ 260.532428][ T8041] ntfs: (device loop0): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 260.645349][ T8041] ntfs: volume version 3.1. [ 260.722732][ T8058] fuse: Unknown parameter '0x0000000000000005' [ 260.830675][ T8061] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1516'. [ 261.120845][ T8073] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 261.356099][ T8085] loop0: detected capacity change from 0 to 24 [ 261.994528][ T3550] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 262.044799][ T5439] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 262.244440][ T3550] usb 2-1: Using ep0 maxpacket: 16 [ 262.261463][ T8102] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 262.294262][ T5439] usb 1-1: Using ep0 maxpacket: 16 [ 262.371668][ T3550] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.398502][ T3550] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 262.411562][ T3550] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 262.433205][ T3550] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 262.444818][ T3550] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.458936][ T3550] usb 2-1: config 0 descriptor?? [ 262.538717][ T8104] kvm [8103]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0 [ 262.550318][ T8104] kvm [8103]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0 [ 262.569786][ T8104] kvm [8103]: vcpu0, guest rIP: 0x1be ignored wrmsr: 0x11e data 0xbe702111 [ 262.584337][ T5439] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 262.593752][ T5439] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.605125][ T5439] usb 1-1: Product: syz [ 262.609508][ T5439] usb 1-1: Manufacturer: syz [ 262.614722][ T5439] usb 1-1: SerialNumber: syz [ 262.622993][ T5439] usb 1-1: config 0 descriptor?? [ 262.946079][ T3550] koneplus 0003:1E7D:2E22.000E: unknown main item tag 0x0 [ 262.987318][ T3550] koneplus 0003:1E7D:2E22.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0 [ 263.108480][ T5439] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -71 [ 263.127410][ T5439] usb 1-1: USB disconnect, device number 26 [ 263.153998][ T3550] koneplus 0003:1E7D:2E22.000E: couldn't init struct koneplus_device [ 263.176712][ T3550] koneplus 0003:1E7D:2E22.000E: couldn't install mouse [ 263.211020][ T3550] koneplus: probe of 0003:1E7D:2E22.000E failed with error -71 [ 263.247529][ T3550] usb 2-1: USB disconnect, device number 19 [ 263.606749][ T8128] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1540'. [ 264.275238][ T8153] xt_NFQUEUE: number of total queues is 0 [ 264.541576][ T8161] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1552'. [ 264.811576][ T8171] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 264.893061][ T3580] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 265.174172][ T3580] usb 1-1: Using ep0 maxpacket: 16 [ 265.190362][ T8182] xt_NFQUEUE: number of total queues is 0 [ 265.259621][ T8186] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 265.333028][ T3580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.347870][ T3580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.358654][ T3580] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 265.375017][ T3580] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 265.384354][ T3580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.401778][ T3580] usb 1-1: config 0 descriptor?? [ 265.895629][ T3580] koneplus 0003:1E7D:2E22.000F: unknown main item tag 0x0 [ 265.938409][ T3580] koneplus 0003:1E7D:2E22.000F: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 266.112632][ T3580] koneplus 0003:1E7D:2E22.000F: couldn't init struct koneplus_device [ 266.134128][ T3580] koneplus 0003:1E7D:2E22.000F: couldn't install mouse [ 266.151884][ T3580] koneplus: probe of 0003:1E7D:2E22.000F failed with error -71 [ 266.184148][ T3580] usb 1-1: USB disconnect, device number 27 [ 266.369500][ T7283] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.487856][ T7283] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.559107][ T8218] xt_NFQUEUE: number of total queues is 0 [ 266.661490][ T7283] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.786034][ T7283] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.871145][ T8229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.045015][ T8206] chnl_net:caif_netlink_parms(): no params data found [ 267.776045][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.840363][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.944165][ T8206] device bridge_slave_0 entered promiscuous mode [ 268.009182][ T8256] netlink: 'syz.4.1584': attribute type 4 has an invalid length. [ 268.018716][ T8256] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.1584'. [ 268.030850][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.058326][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.099766][ T8206] device bridge_slave_1 entered promiscuous mode [ 268.203927][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 268.243209][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 268.281728][ T5439] Bluetooth: hci4: command 0x0409 tx timeout [ 268.364928][ T8206] team0: Port device team_slave_0 added [ 268.394346][ T8206] team0: Port device team_slave_1 added [ 268.456792][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 268.481011][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.538972][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 268.591667][ T8284] loop0: detected capacity change from 0 to 64 [ 268.609852][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 268.609869][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 268.609892][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 268.714025][ C1] vkms_vblank_simulate: vblank timer overrun [ 268.715985][ T8284] hfs: inconsistency in B*Tree (1,0,2,2,3) [ 268.727979][ T8206] device hsr_slave_0 entered promiscuous mode [ 268.735777][ T8206] device hsr_slave_1 entered promiscuous mode [ 268.737649][ T8206] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.737793][ T8206] Cannot create hsr debugfs directory [ 268.762216][ T26] audit: type=1326 audit(1720533101.850:1751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8285 comm="syz.3.1591" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4b8cabd9 code=0x0 [ 269.196769][ T7283] device hsr_slave_0 left promiscuous mode [ 269.208808][ T7283] device hsr_slave_1 left promiscuous mode [ 269.735018][ T7283] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.048955][ T7283] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.084731][ T7283] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.166871][ T7283] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.193689][ T8306] loop0: detected capacity change from 0 to 512 [ 270.226588][ T7283] device bridge_slave_1 left promiscuous mode [ 270.251841][ T7283] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.255088][ T8306] EXT4-fs error (device loop0): ext4_orphan_get:1423: comm syz.0.1596: bad orphan inode 13 [ 270.279839][ T7283] device bridge_slave_0 left promiscuous mode [ 270.286750][ T7283] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.300506][ T7283] device veth0_macvtap left promiscuous mode [ 270.306904][ T7283] device veth1_vlan left promiscuous mode [ 270.312893][ T7283] device veth0_vlan left promiscuous mode [ 270.329327][ T8306] ext4_test_bit(bit=12, block=4) = 1 [ 270.360537][ T3549] Bluetooth: hci4: command 0x041b tx timeout [ 270.375244][ T8306] is_bad_inode(inode)=0 [ 270.409813][ T8306] NEXT_ORPHAN(inode)=0 [ 270.424704][ T8306] max_ino=32 [ 270.432444][ T8306] i_nlink=1 [ 270.441414][ T8306] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 270.496797][ T7283] team0 (unregistering): Port device geneve1 removed [ 270.607604][ T8306] EXT4-fs warning (device loop0): dx_probe:832: inode #2: comm syz.0.1596: Unrecognised inode hash code 20 [ 270.651960][ T8306] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.1596: Corrupt directory, running e2fsck is recommended [ 270.807289][ T8329] EXT4-fs warning (device loop0): dx_probe:832: inode #2: comm syz.0.1596: Unrecognised inode hash code 20 [ 270.874994][ T8329] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.1596: Corrupt directory, running e2fsck is recommended [ 270.925393][ T7283] team0 (unregistering): Port device team_slave_1 removed [ 271.574165][ T3545] Bluetooth: Firmware file "ath3k-1.fw" not found [ 271.581790][ T5437] Bluetooth: Firmware file "ath3k-1.fw" request failed (err=-110) [ 271.599640][ T3545] ath3k: probe of 5-1:255.0 failed with error -2 [ 271.629641][ T5437] ath3k: probe of 4-1:255.0 failed with error -110 [ 271.648204][ T3545] usb 5-1: USB disconnect, device number 18 [ 271.677157][ T5437] usb 4-1: USB disconnect, device number 16 [ 271.721657][ T7283] team0 (unregistering): Port device team_slave_0 removed [ 271.753173][ T7283] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.816904][ T7283] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.849491][ T8329] EXT4-fs warning (device loop0): dx_probe:832: inode #2: comm syz.0.1596: Unrecognised inode hash code 20 [ 271.932504][ T8329] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.1596: Corrupt directory, running e2fsck is recommended [ 272.094091][ T7283] bond0 (unregistering): Released all slaves [ 272.176398][ T8310] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 272.439285][ T3580] Bluetooth: hci4: command 0x040f tx timeout [ 275.669341][ T3580] Bluetooth: hci4: command 0x0419 tx timeout [ 275.715658][ T26] audit: type=1326 audit(1720533108.793:1752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8365 comm="syz.0.1605" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2dd5bd9 code=0x0 [ 275.941774][ T8370] input: syz1 as /devices/virtual/input/input11 [ 276.829974][ T8206] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.887435][ T8206] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.961802][ T8206] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 277.030076][ T8206] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 278.130577][ T8206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.197468][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.217163][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.263823][ T8206] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.299902][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.318332][ T1289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.344437][ T1289] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.351714][ T1289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.495402][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.506736][ T26] audit: type=1326 audit(1720533111.595:1753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8429 comm="syz.1.1621" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x0 [ 278.667418][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.679853][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.692664][ T3549] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.699788][ T3549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.710046][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.941658][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 279.050656][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.170800][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.183474][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.483431][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.582343][ T8206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 279.614653][ T8206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 279.663167][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.681752][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.715175][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.723852][ T8460] hub 9-0:1.0: USB hub found [ 279.731785][ T8460] hub 9-0:1.0: 8 ports detected [ 279.761823][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.786496][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.824308][ T21] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.974062][ T8469] loop0: detected capacity change from 0 to 1024 [ 280.918894][ T8469] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.989969][ T8469] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038 (0x7fffffff) [ 281.053469][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 281.079178][ T3578] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 281.099534][ T8206] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 281.205247][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 281.214086][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 281.360837][ T8499] serio: Serial port pts0 [ 281.567553][ T3549] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 281.817226][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 281.909693][ T3580] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 281.935040][ T3549] usb 5-1: Using ep0 maxpacket: 16 [ 282.081558][ T8206] device veth0_vlan entered promiscuous mode [ 282.093757][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 282.103102][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 282.132074][ T8206] device veth1_vlan entered promiscuous mode [ 282.174012][ T26] audit: type=1326 audit(1720533115.257:1754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8504 comm="syz.0.1635" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2dd5bd9 code=0x0 [ 282.185097][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 282.204743][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 282.224665][ T3549] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 282.246139][ T8408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 282.254746][ T3549] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 282.278226][ T3549] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.309008][ T8508] sp0: Synchronizing with TNC [ 282.313705][ T8206] device veth0_macvtap entered promiscuous mode [ 282.321735][ T3549] usb 5-1: config 0 descriptor?? [ 282.343915][ T8206] device veth1_macvtap entered promiscuous mode [ 282.376457][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.394373][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.414061][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.433931][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.446737][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.462509][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.481544][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.504188][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.521741][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 282.541320][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.563224][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 282.641342][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 282.654929][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 282.672498][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 282.693708][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 282.726275][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.738919][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.760985][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.771876][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.782154][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.793091][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.803375][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.832322][ T8489] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1632'. [ 282.857394][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.883333][ T8489] udc-core: couldn't find an available UDC or it's busy [ 282.900519][ T8206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 282.912778][ T8489] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 282.927684][ T8206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 282.943223][ T8206] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 282.956063][ T3549] hid (null): bogus close delimiter [ 282.983290][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 283.002835][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 283.015969][ T3549] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 283.043204][ T8206] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.053982][ T3549] hid-generic 0003:0158:0100.0010: unknown main item tag 0x0 [ 283.061415][ T3549] hid-generic 0003:0158:0100.0010: bogus close delimiter [ 283.076367][ T8206] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.101143][ T8206] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.111264][ T3549] hid-generic 0003:0158:0100.0010: item 0 0 2 10 parsing failed [ 283.128091][ T3549] hid-generic: probe of 0003:0158:0100.0010 failed with error -22 [ 283.142626][ T8206] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.192267][ T3549] usb 5-1: USB disconnect, device number 19 [ 283.407954][ T8536] hub 9-0:1.0: USB hub found [ 283.421918][ T8536] hub 9-0:1.0: 8 ports detected [ 284.299257][ T8551] xt_l2tp: missing protocol rule (udp|l2tpip) [ 284.433635][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.748945][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.824991][ T6150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.887427][ T6150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.904649][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 284.968347][ T5429] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 285.105662][ T8570] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 287.457443][ T26] audit: type=1326 audit(1720533120.549:1755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.0.1660" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb3d2dd5bd9 code=0x0 [ 288.148827][ T3578] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 288.230259][ T8614] loop2: detected capacity change from 0 to 1024 [ 288.284569][ T8616] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 288.290520][ T8614] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 288.349869][ T8614] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 288.359098][ T8614] System zones: 0-1, 4-36, 102-102 [ 288.365365][ T8614] EXT4-fs (loop2): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 288.509109][ T8622] hub 9-0:1.0: USB hub found [ 288.536520][ T8622] hub 9-0:1.0: 8 ports detected [ 288.544101][ T8626] sctp: [Deprecated]: syz.2.1666 (pid 8626) Use of int in max_burst socket option deprecated. [ 288.544101][ T8626] Use struct sctp_assoc_value instead [ 288.622800][ T8625] serio: Serial port pts0 [ 288.637836][ T8628] xt_l2tp: missing protocol rule (udp|l2tpip) [ 290.105928][ T8651] Failed to get privilege flags for destination (handle=0x2:0x0) [ 290.189324][ T26] audit: type=1326 audit(1720534148.190:1756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8646 comm="syz.2.1680" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c9d556bd9 code=0x0 [ 291.090894][ T8665] xt_l2tp: missing protocol rule (udp|l2tpip) [ 291.570465][ T8667] serio: Serial port pts0 [ 291.598950][ T8674] sctp: [Deprecated]: syz.1.1684 (pid 8674) Use of int in max_burst socket option deprecated. [ 291.598950][ T8674] Use struct sctp_assoc_value instead [ 292.783336][ T8698] Failed to get privilege flags for destination (handle=0x2:0x0) [ 292.801614][ T8699] hub 9-0:1.0: USB hub found [ 292.823353][ T8699] hub 9-0:1.0: 8 ports detected [ 293.186509][ T8701] loop2: detected capacity change from 0 to 1024 [ 293.254921][ T8708] serio: Serial port pts1 [ 293.369611][ T8701] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 293.382035][ T8701] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff) [ 293.543263][ T8735] xt_l2tp: missing protocol rule (udp|l2tpip) [ 293.683645][ T8733] Failed to get privilege flags for destination (handle=0x2:0x0) [ 294.472355][ T8754] serio: Serial port pts0 [ 294.594037][ T8772] Failed to get privilege flags for destination (handle=0x2:0x0) [ 294.810474][ T8791] loop2: detected capacity change from 0 to 1024 [ 295.040423][ T155] hfsplus: b-tree write err: -5, ino 4 [ 295.046178][ T5429] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 295.361360][ T5429] usb 2-1: Using ep0 maxpacket: 16 [ 295.687782][ T5429] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 295.709509][ T5429] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 295.771565][ T5429] usb 2-1: Product: syz [ 295.793255][ T5429] usb 2-1: Manufacturer: syz [ 295.825213][ T5429] usb 2-1: SerialNumber: syz [ 295.862654][ T5429] usb 2-1: config 0 descriptor?? [ 296.471900][ T5429] dvb_usb_dtv5100: probe of 2-1:0.0 failed with error -71 [ 296.495549][ T5429] usb 2-1: USB disconnect, device number 20 [ 298.001855][ T8889] loop2: detected capacity change from 0 to 8 [ 298.767318][ T8889] SQUASHFS error: lzo decompression failed, data probably corrupt [ 298.817005][ T8889] SQUASHFS error: Failed to read block 0x91: -5 [ 298.837983][ T8889] SQUASHFS error: Unable to read metadata cache entry [8f] [ 298.851320][ T8889] SQUASHFS error: Unable to read inode 0x11f [ 299.097618][ T8909] loop2: detected capacity change from 0 to 256 [ 299.171417][ T5429] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 299.204075][ T26] audit: type=1800 audit(1720535182.295:1757): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1774" name="file0" dev="loop2" ino=1048620 res=0 errno=0 [ 299.601458][ T5429] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 299.621003][ T5429] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 299.811569][ T5429] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 299.839198][ T5429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.890407][ T5429] usb 5-1: Product: syz [ 299.898934][ T5429] usb 5-1: Manufacturer: syz [ 299.910496][ T5429] usb 5-1: SerialNumber: syz [ 300.024211][ T5429] usb 5-1: bad CDC descriptors [ 300.617899][ T8938] loop0: detected capacity change from 0 to 1024 [ 300.723796][ T6111] hfsplus: b-tree write err: -5, ino 4 [ 300.885627][ T8944] loop2: detected capacity change from 0 to 128 [ 300.951884][ T8944] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 300.976894][ T8944] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038 (0x7fffffff) [ 301.001717][ T8944] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 301.009858][ T8944] IPv6: NLM_F_CREATE should be set when creating new route [ 301.061838][ T8944] fscrypt (loop2, inode 12): Unsupported encryption flags (0x10) [ 301.638977][ T8978] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1800'. [ 301.672048][ T8978] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1800'. [ 301.876295][ T5429] usb 5-1: USB disconnect, device number 20 [ 301.938414][ T9000] loop2: detected capacity change from 0 to 256 [ 302.080516][ T9000] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 302.116647][ T9000] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 302.137645][ T9015] fuse: Bad value for 'fd' [ 302.217028][ T3547] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 302.451345][ T3547] usb 1-1: Using ep0 maxpacket: 16 [ 302.541320][ T5429] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 302.552231][ T9037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 302.559503][ T9037] IPv6: NLM_F_CREATE should be set when creating new route [ 302.566828][ T9037] IPv6: NLM_F_CREATE should be set when creating new route [ 302.731409][ T3547] usb 1-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 302.752164][ T3547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.760226][ T3547] usb 1-1: Product: syz [ 302.769167][ T3547] usb 1-1: Manufacturer: syz [ 302.776119][ T3547] usb 1-1: SerialNumber: syz [ 302.787610][ T3547] usb 1-1: config 0 descriptor?? [ 302.831996][ T9033] loop2: detected capacity change from 0 to 32768 [ 302.898993][ T9033] [ 302.898993][ T9033] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 302.898993][ T9033] [ 302.931376][ T5429] usb 4-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 302.944451][ T9033] ERROR: (device loop2): dbAlloc: the hint is outside the map [ 302.944451][ T9033] [ 302.966891][ T5429] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 303.013508][ T3671] read_mapping_page failed! [ 303.018721][ T3671] ERROR: (device loop2): txCommit: [ 303.018721][ T3671] [ 303.034292][ T3671] jfs_write_inode: jfs_commit_inode failed! [ 303.040416][ T8206] [ 303.040416][ T8206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.040416][ T8206] [ 303.051759][ T5429] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 303.051787][ T5429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 303.051806][ T5429] usb 4-1: SerialNumber: syz [ 303.069732][ T8206] [ 303.069732][ T8206] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 303.069732][ T8206] [ 303.243155][ T9066] xt_l2tp: v2 doesn't support IP mode [ 303.249782][ T26] audit: type=1326 audit(1720535186.335:1758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9065 comm="syz.1.1835" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x0 [ 303.291305][ T3547] dvb_usb_dtv5100: probe of 1-1:0.0 failed with error -71 [ 303.324571][ T3547] usb 1-1: USB disconnect, device number 28 [ 303.393956][ T5429] usb 4-1: 0:2 : does not exist [ 303.449500][ T5429] usb 4-1: USB disconnect, device number 18 [ 303.493308][ T6320] udevd[6320]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 303.703913][ T9089] loop2: detected capacity change from 0 to 512 [ 303.844251][ T9089] EXT4-fs error (device loop2): ext4_ext_check_inode:501: inode #16: comm syz.2.1841: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 303.891751][ T9089] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1841: couldn't read orphan inode 16 (err -117) [ 303.911786][ T9089] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,noquota,nouid32,barrier,noauto_da_alloc,journal_dev=0x00000000000001ff,barrier,delalloc,usrquota,,errors=continue. Quota mode: writeback. [ 303.933345][ T9089] ext4 filesystem being mounted at /36/file1 supports timestamps until 2038 (0x7fffffff) [ 304.013231][ T26] audit: type=1804 audit(1720535187.095:1759): pid=9089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1841" name="/newroot/36/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 304.092138][ T9106] xt_l2tp: v2 doesn't support IP mode [ 304.116066][ T26] audit: type=1326 audit(1720535187.205:1760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9105 comm="syz.3.1847" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4b8cabd9 code=0x0 [ 304.258079][ T9113] loop0: detected capacity change from 0 to 1024 [ 305.066781][ T9158] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 305.074456][ T9158] IPv6: NLM_F_CREATE should be set when creating new route [ 306.107450][ T9180] xt_ipvs: protocol family 7 not supported [ 306.302333][ T5429] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 306.681422][ T5429] usb 4-1: Using ep0 maxpacket: 16 [ 306.769676][ T9217] Cannot find del_set index 0 as target [ 307.527093][ T5429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 307.571010][ T5429] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 308.286997][ T5429] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 308.371332][ T5429] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.386963][ T5429] usb 4-1: config 0 descriptor?? [ 308.675523][ T9241] loop0: detected capacity change from 0 to 128 [ 308.693371][ T9238] xt_ipvs: protocol family 7 not supported [ 308.764725][ T9211] loop2: detected capacity change from 0 to 32768 [ 308.791863][ T9241] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 308.845305][ T9211] XFS (loop2): Mounting V5 Filesystem [ 308.879297][ T9183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1875'. [ 308.907498][ T9183] udc-core: couldn't find an available UDC or it's busy [ 308.915019][ T9183] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 308.931986][ T5429] hid (null): bogus close delimiter [ 308.962364][ T5429] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 308.977736][ T5429] hid-generic 0003:0158:0100.0011: unknown main item tag 0x0 [ 309.033104][ T5429] hid-generic 0003:0158:0100.0011: bogus close delimiter [ 309.035793][ T3672] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 309.041564][ T5429] hid-generic 0003:0158:0100.0011: item 0 0 2 10 parsing failed [ 309.053067][ T3672] attempt to access beyond end of device [ 309.053067][ T3672] loop0: rw=1, want=145, limit=128 [ 309.069865][ T3672] buffer_io_error: 25 callbacks suppressed [ 309.069883][ T3672] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 309.109249][ T5429] hid-generic: probe of 0003:0158:0100.0011 failed with error -22 [ 309.270161][ T5429] usb 4-1: USB disconnect, device number 19 [ 309.291339][ T9211] XFS (loop2): Ending clean mount [ 309.630501][ T8206] XFS (loop2): Unmounting Filesystem [ 309.791460][ T5439] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 310.101279][ T5439] usb 2-1: Using ep0 maxpacket: 16 [ 310.221645][ T5439] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 310.252466][ T5439] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 310.267089][ T5439] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.291068][ T5439] usb 2-1: config 0 descriptor?? [ 310.412632][ T9298] netlink: 'syz.2.1916': attribute type 16 has an invalid length. [ 310.772188][ T9274] udc-core: couldn't find an available UDC or it's busy [ 310.779511][ T9274] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 310.806995][ T5439] hid (null): unknown global tag 0xc [ 311.145023][ T5439] hid (null): unknown global tag 0xa5 [ 311.223815][ T5439] hid (null): unknown global tag 0xd [ 311.297580][ T5439] hid (null): unknown global tag 0xc [ 311.525329][ T5439] hid-generic 0003:0158:0100.0012: unknown main item tag 0x1 [ 311.575652][ T5439] hid-generic 0003:0158:0100.0012: unexpected long global item [ 311.741191][ T5439] hid-generic: probe of 0003:0158:0100.0012 failed with error -22 [ 312.508681][ T9326] loop0: detected capacity change from 0 to 128 [ 312.581466][ T5429] usb 2-1: USB disconnect, device number 21 [ 312.616216][ T9326] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 312.644048][ T9331] netlink: 'syz.3.1929': attribute type 16 has an invalid length. [ 312.723177][ T4377] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 312.746836][ T4377] attempt to access beyond end of device [ 312.746836][ T4377] loop0: rw=1, want=145, limit=128 [ 312.789888][ T4377] Buffer I/O error on dev loop0, logical block 144, lost async page write [ 317.053406][ T9392] xt_l2tp: v2 doesn't support IP mode [ 317.072721][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.079153][ T1375] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.104258][ T26] audit: type=1326 audit(1720535200.195:1761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9391 comm="syz.1.1951" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x0 [ 317.131212][ T5429] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 317.571204][ T5429] usb 4-1: device not accepting address 20, error -71 [ 318.504572][ T9416] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 319.377170][ T9397] loop0: detected capacity change from 0 to 32768 [ 319.811482][ T1289] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 319.916939][ T3578] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 320.233022][ T1289] usb 2-1: Using ep0 maxpacket: 32 [ 320.291175][ T3578] usb 3-1: Using ep0 maxpacket: 8 [ 320.398583][ T1289] usb 2-1: config index 0 descriptor too short (expected 156, got 27) [ 320.450774][ T1289] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 320.462891][ T3578] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 320.518979][ T3578] usb 3-1: config 179 has no interface number 0 [ 320.603615][ T3578] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 320.747394][ T3578] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 320.822394][ T1289] usb 2-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 320.867584][ T1289] usb 2-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 320.918486][ T3578] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 320.938434][ T1289] usb 2-1: Product: syz [ 320.949647][ T1289] usb 2-1: Manufacturer: syz [ 320.954776][ T3578] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 320.978841][ T1289] usb 2-1: SerialNumber: syz [ 320.987392][ T3578] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 321.007166][ T1289] usb 2-1: config 0 descriptor?? [ 321.013206][ T3578] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 321.023071][ T3578] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.055315][ T1289] ldusb 2-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 321.068096][ T9429] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 321.078170][ T1289] ldusb 2-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 321.139579][ T9445] 9pnet: Insufficient options for proto=fd [ 321.146979][ T9447] netlink: 'syz.4.1972': attribute type 82 has an invalid length. [ 321.148195][ T9447] loop7: detected capacity change from 0 to 16384 [ 321.198590][ T9447] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3595025837 (7190051674 ns) > initial count (1582628368 ns). Using initial count to start timer. [ 321.268605][ T3578] usb 2-1: USB disconnect, device number 22 [ 321.275010][ C1] ldusb 2-1:0.0: usb_submit_urb failed (-19) [ 321.297378][ T3578] ldusb 2-1:0.0: LD USB Device #0 now disconnected [ 321.331367][ T3248] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 321.493979][ T9425] ldusb: No device or device unplugged -19 [ 321.504110][ T9454] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 321.507116][ T1289] usb 3-1: USB disconnect, device number 18 [ 321.521154][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 321.529483][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 321.581182][ T3248] usb 1-1: Using ep0 maxpacket: 16 [ 321.731495][ T3248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 321.742932][ T3248] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 321.756600][ T3248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.808750][ T9458] Cannot find del_set index 0 as target [ 321.831703][ T3248] usb 1-1: config 0 descriptor?? [ 322.363749][ T9432] loop0: detected capacity change from 0 to 256 [ 322.471651][ T9432] FAT-fs (loop0): Directory bread(block 64) failed [ 322.478377][ T9432] FAT-fs (loop0): Directory bread(block 65) failed [ 322.485230][ T9432] FAT-fs (loop0): Directory bread(block 66) failed [ 322.491873][ T9432] FAT-fs (loop0): Directory bread(block 67) failed [ 322.498656][ T9432] FAT-fs (loop0): Directory bread(block 68) failed [ 322.505240][ T9432] FAT-fs (loop0): Directory bread(block 69) failed [ 322.511939][ T9432] FAT-fs (loop0): Directory bread(block 70) failed [ 322.518473][ T9432] FAT-fs (loop0): Directory bread(block 71) failed [ 322.525123][ T9432] FAT-fs (loop0): Directory bread(block 72) failed [ 322.531718][ T9432] FAT-fs (loop0): Directory bread(block 73) failed [ 322.772526][ T9432] udc-core: couldn't find an available UDC or it's busy [ 322.779505][ T9432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 322.802921][ T3248] hid (null): unknown global tag 0xc [ 322.808297][ T3248] hid (null): unknown global tag 0xa5 [ 322.821447][ T3248] hid (null): unknown global tag 0xd [ 322.848126][ T3248] hid (null): unknown global tag 0xc [ 322.853989][ T3543] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 322.863715][ T3248] hid-generic 0003:0158:0100.0013: unknown main item tag 0x1 [ 322.881348][ T3248] hid-generic 0003:0158:0100.0013: unexpected long global item [ 322.889346][ T3248] hid-generic: probe of 0003:0158:0100.0013 failed with error -22 [ 323.261470][ T3543] usb 3-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 323.282199][ T3543] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.299216][ T3543] usb 3-1: config 0 descriptor?? [ 323.621417][ T3248] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 323.671652][ T3578] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 323.766690][ T9504] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 323.881283][ T3248] usb 4-1: Using ep0 maxpacket: 32 [ 323.941288][ T3578] usb 5-1: Using ep0 maxpacket: 8 [ 323.993862][ T9460] netlink: 'syz.2.1977': attribute type 21 has an invalid length. [ 324.001970][ T9460] netlink: 'syz.2.1977': attribute type 5 has an invalid length. [ 324.011664][ T3248] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 324.015019][ T9460] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1977'. [ 324.031641][ T3248] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 324.107850][ T3578] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 324.116879][ T3578] usb 5-1: config 179 has no interface number 0 [ 324.123285][ T3578] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 324.135169][ T3578] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 324.146504][ T3578] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 324.157740][ T3578] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 324.169217][ T3578] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 324.198541][ T3578] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 324.213431][ T3578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.241033][ T3580] usb 1-1: USB disconnect, device number 29 [ 324.261617][ T9493] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 324.312496][ T3248] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 324.331864][ T3248] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 324.346165][ T3248] usb 4-1: Product: syz [ 324.350360][ T3248] usb 4-1: Manufacturer: syz [ 324.362202][ T3248] usb 4-1: SerialNumber: syz [ 324.385542][ T3248] usb 4-1: config 0 descriptor?? [ 324.436338][ T3248] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 324.472186][ T3248] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 324.711578][ T3543] pegasus: probe of 3-1:0.0 failed with error -32 [ 324.800807][ T3543] usb 4-1: USB disconnect, device number 22 [ 324.807136][ C1] ldusb 4-1:0.0: usb_submit_urb failed (-19) [ 324.835687][ T3543] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 324.865761][ T3248] usb 5-1: USB disconnect, device number 21 [ 324.871857][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 324.871945][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 324.968452][ T9520] device pim6reg1 entered promiscuous mode [ 325.022095][ T9491] ldusb: No device or device unplugged -19 [ 325.409086][ T9531] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 325.665136][ T3511] Bluetooth: hci4: link tx timeout [ 325.671248][ T3511] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 325.840378][ T9554] loop0: detected capacity change from 0 to 2048 [ 325.975708][ T9554] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 326.141253][ T3547] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 326.174365][ T3511] Bluetooth: hci4: link tx timeout [ 326.179577][ T3511] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 326.249456][ T5528] usb 3-1: USB disconnect, device number 19 [ 326.301207][ T5439] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 326.368501][ T9593] loop2: detected capacity change from 0 to 512 [ 326.391210][ T3547] usb 5-1: Using ep0 maxpacket: 8 [ 326.423603][ T9593] EXT4-fs (loop2): orphan cleanup on readonly fs [ 326.512996][ T3547] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 326.540109][ T3547] usb 5-1: config 179 has no interface number 0 [ 326.560047][ T9593] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2030: bg 0: block 248: padding at end of block bitmap is not set [ 326.577876][ T3547] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 326.589380][ T3511] Bluetooth: hci4: link tx timeout [ 326.594542][ T3511] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 326.603337][ T3547] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 326.614606][ T9593] Quota error (device loop2): write_blk: dquota write failed [ 326.615086][ T9593] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 326.625867][ T3547] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 326.646482][ T3547] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 326.658038][ T3547] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 326.659064][ T9593] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.2030: Failed to acquire dquot type 1 [ 326.671807][ T3547] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 326.692546][ T3547] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 326.731528][ T9559] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 326.743150][ T9593] EXT4-fs (loop2): 1 truncate cleaned up [ 326.749798][ T9600] device pim6reg1 entered promiscuous mode [ 326.774132][ T9593] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 326.828038][ T9593] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 326.851438][ T5439] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=8e.77 [ 326.860836][ T5439] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.875622][ T5439] usb 4-1: Product: syz [ 326.888021][ T5439] usb 4-1: Manufacturer: syz [ 326.892829][ T5439] usb 4-1: SerialNumber: syz [ 326.905402][ T5439] usb 4-1: config 0 descriptor?? [ 326.924989][ T9593] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 327.003249][ T9593] Quota error (device loop2): find_block_dqentry: Quota for id 131072 referenced but not present [ 327.016541][ T9593] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 131072 [ 327.026556][ T9593] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz.2.2030: Failed to acquire dquot type 1 [ 327.051221][ T3248] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 327.223459][ T5528] usb 5-1: USB disconnect, device number 22 [ 327.241179][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 327.249493][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 327.258327][ T5439] pegasus: probe of 4-1:0.0 failed with error -71 [ 327.287132][ T5439] usb 4-1: USB disconnect, device number 23 [ 327.305685][ T9622] tipc: Enabling of bearer rejected, failed to enable media [ 327.374773][ T9626] netlink: 'syz.2.2043': attribute type 1 has an invalid length. [ 327.482115][ T3248] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 327.495709][ T3248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.505579][ T3248] usb 2-1: config 0 descriptor?? [ 328.012092][ T9630] loop2: detected capacity change from 0 to 65536 [ 328.026638][ T5439] Bluetooth: hci4: command 0x0406 tx timeout [ 328.202623][ T9610] netlink: 'syz.1.2038': attribute type 21 has an invalid length. [ 328.217716][ T9610] netlink: 'syz.1.2038': attribute type 5 has an invalid length. [ 328.227147][ T9610] netlink: 156 bytes leftover after parsing attributes in process `syz.1.2038'. [ 328.286650][ T9630] XFS (loop2): Mounting V5 Filesystem [ 328.921475][ T3248] pegasus: probe of 2-1:0.0 failed with error -32 [ 328.979180][ T9630] XFS (loop2): Ending clean mount [ 328.998685][ T9630] XFS (loop2): Quotacheck needed: Please wait. [ 329.114808][ T9630] XFS (loop2): Quotacheck: Done. [ 329.162658][ T9662] netlink: 'syz.4.2052': attribute type 82 has an invalid length. [ 329.173632][ T9662] loop7: detected capacity change from 0 to 16384 [ 329.313692][ T9664] loop0: detected capacity change from 0 to 512 [ 329.320094][ T9662] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3595025837 (7190051674 ns) > initial count (1582628368 ns). Using initial count to start timer. [ 329.550501][ T9664] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 329.612114][ T9664] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 329.683431][ T3545] usb 2-1: USB disconnect, device number 23 [ 329.723009][ T9664] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended [ 329.788098][ T9664] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 329.807489][ T8206] XFS (loop2): Unmounting Filesystem [ 329.814313][ T9664] System zones: 0-2, 18-18, 34-34 [ 329.827225][ T9664] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 329.850498][ T9664] EXT4-fs (loop0): 1 truncate cleaned up [ 329.856686][ T9664] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 330.059112][ T9681] EXT4-fs error (device loop0): ext4_generic_delete_entry:2680: inode #12: block 13: comm syz.0.2053: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 330.080300][ C0] vkms_vblank_simulate: vblank timer overrun [ 330.130177][ T9681] EXT4-fs error (device loop0) in ext4_delete_entry:2751: Corrupt filesystem [ 330.192587][ T3248] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 331.421865][ T3248] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=8e.77 [ 331.744222][ T3248] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.778249][ T3248] usb 5-1: Product: syz [ 331.798447][ T3248] usb 5-1: Manufacturer: syz [ 331.811355][ T3248] usb 5-1: SerialNumber: syz [ 331.844668][ T3248] usb 5-1: config 0 descriptor?? [ 331.919797][ T9720] tipc: Enabling of bearer rejected, failed to enable media [ 332.353515][ T9702] loop0: detected capacity change from 0 to 32768 [ 332.401526][ T3248] pegasus: probe of 5-1:0.0 failed with error -71 [ 332.428987][ T3248] usb 5-1: USB disconnect, device number 23 [ 332.481291][ T9702] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.2064 (9702) [ 332.622062][ T9702] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 332.666912][ T9702] BTRFS info (device loop0): using free space tree [ 332.748342][ T9702] BTRFS info (device loop0): has skinny extents [ 333.024714][ T9702] BTRFS info (device loop0): enabling ssd optimizations [ 333.917983][ T9775] netlink: 'syz.3.2084': attribute type 82 has an invalid length. [ 333.960406][ T9775] loop7: detected capacity change from 0 to 16384 [ 334.821355][ T9798] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 334.901245][ T5429] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 334.924244][ T9808] netlink: 1 bytes leftover after parsing attributes in process `syz.0.2091'. [ 334.963762][ T9795] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 335.091379][ T9798] usb 3-1: Using ep0 maxpacket: 8 [ 335.233704][ T9798] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 335.242391][ T9798] usb 3-1: config 179 has no interface number 0 [ 335.248679][ T9798] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 335.260078][ T9798] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 335.271878][ T9798] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.283490][ T9798] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 335.295316][ T9798] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 335.308668][ T9798] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 335.317825][ T9798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.341726][ T9768] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 335.381471][ T9795] usb 4-1: descriptor type invalid, skip [ 335.387446][ T9795] usb 4-1: descriptor type invalid, skip [ 335.393441][ T9795] usb 4-1: descriptor type invalid, skip [ 335.399099][ T9795] usb 4-1: descriptor type invalid, skip [ 335.405263][ T9795] usb 4-1: descriptor type invalid, skip [ 335.421519][ T5429] usb 5-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=8e.77 [ 335.430884][ T5429] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.440043][ T5429] usb 5-1: Product: syz [ 335.444353][ T5429] usb 5-1: Manufacturer: syz [ 335.448952][ T5429] usb 5-1: SerialNumber: syz [ 335.455488][ T5429] usb 5-1: config 0 descriptor?? [ 335.671451][ T9795] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 335.680630][ T9795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.688776][ T9795] usb 4-1: Product: syz [ 335.693747][ T9795] usb 4-1: Manufacturer: syz [ 335.699396][ T9795] usb 4-1: SerialNumber: syz [ 335.707778][ T9795] r8152-cfgselector 4-1: config 0 descriptor?? [ 335.771400][ T5429] pegasus: probe of 5-1:0.0 failed with error -71 [ 335.790709][ T5429] usb 5-1: USB disconnect, device number 24 [ 335.814440][ T9798] usb 3-1: USB disconnect, device number 20 [ 335.821199][ C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 335.829517][ C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 335.891234][ T3547] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 335.981297][ T9795] r8152-cfgselector 4-1: Unknown version 0x0000 [ 336.001889][ T9795] r8152-cfgselector 4-1: Unknown version 0x0000 [ 336.008327][ T9795] r8152-cfgselector 4-1: bad CDC descriptors [ 336.047824][ T9795] r8152-cfgselector 4-1: Unknown version 0x0000 [ 336.056419][ T9795] r8152-cfgselector 4-1: USB disconnect, device number 24 [ 336.131264][ T3547] usb 1-1: Using ep0 maxpacket: 8 [ 336.251431][ T3547] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 336.307341][ T3547] usb 1-1: config 0 has no interface number 0 [ 336.316412][ T3547] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 336.328136][ T3547] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 336.337354][ T3547] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.819508][ T3547] usb 1-1: config 0 descriptor?? [ 336.863899][ T3547] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 336.956988][ T9843] loop2: detected capacity change from 0 to 4096 [ 337.107683][ T9855] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 337.149932][ T9859] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 337.174173][ T9859] overlayfs: missing 'lowerdir' [ 337.364719][ T3547] usb 1-1: USB disconnect, device number 30 [ 337.373614][ T3547] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 337.621309][ T9799] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 337.763254][ T9893] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 337.787422][ T9893] overlayfs: missing 'lowerdir' [ 338.001553][ T9799] usb 4-1: descriptor type invalid, skip [ 338.017703][ T9799] usb 4-1: descriptor type invalid, skip [ 338.038042][ T9799] usb 4-1: descriptor type invalid, skip [ 338.058404][ T9799] usb 4-1: descriptor type invalid, skip [ 338.067408][ T9905] loop2: detected capacity change from 0 to 1024 [ 338.074189][ T9799] usb 4-1: descriptor type invalid, skip [ 338.251541][ T9798] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 338.341742][ T9799] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 338.360410][ T9799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 338.380355][ T9799] usb 4-1: Product: syz [ 338.388366][ T9799] usb 4-1: Manufacturer: syz [ 338.393980][ T9929] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 338.397170][ T9799] usb 4-1: SerialNumber: syz [ 338.413482][ T9929] overlayfs: missing 'lowerdir' [ 338.419199][ T9799] r8152-cfgselector 4-1: config 0 descriptor?? [ 338.681803][ T9799] r8152-cfgselector 4-1: Unknown version 0x0000 [ 338.688256][ T9798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 338.711631][ T9799] r8152-cfgselector 4-1: Unknown version 0x0000 [ 338.727921][ T9798] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 338.738112][ T9799] r8152-cfgselector 4-1: bad CDC descriptors [ 338.747535][ T9798] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 338.758794][ T9798] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.767454][ T9799] r8152-cfgselector 4-1: Unknown version 0x0000 [ 338.785304][ T9798] usb 5-1: config 0 descriptor?? [ 338.791678][ T9799] r8152-cfgselector 4-1: USB disconnect, device number 25 [ 338.823038][ T9795] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 339.121258][ T9795] usb 2-1: Using ep0 maxpacket: 8 [ 339.266023][ T9795] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 339.276014][ T9795] usb 2-1: config 0 has no interface number 0 [ 339.287012][ T9795] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 339.298899][ T9795] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 339.313180][ T9795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.330026][ T9795] usb 2-1: config 0 descriptor?? [ 339.384435][ T9795] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 339.471832][ T9798] usb 5-1: language id specifier not provided by device, defaulting to English [ 339.544343][ T9960] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2151'. [ 339.905172][ T9798] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0014/input/input12 [ 339.954116][ T9795] usb 2-1: USB disconnect, device number 24 [ 339.988437][ T9795] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected [ 339.997336][ T9973] netlink: 53 bytes leftover after parsing attributes in process `syz.0.2152'. [ 340.391366][ T3547] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 340.661424][ T3547] usb 3-1: Using ep0 maxpacket: 16 [ 340.664556][ T9798] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0014/input/input13 [ 340.719416][ T9983] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 340.749013][ T9983] overlayfs: missing 'lowerdir' [ 340.771194][ T9798] uclogic 0003:256C:006D.0014: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 340.783145][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 340.783188][ T3547] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 340.820156][ T9798] usb 5-1: USB disconnect, device number 25 [ 340.842739][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.898225][ T3547] usb 3-1: config 0 descriptor?? [ 341.174251][ T9975] loop2: detected capacity change from 0 to 256 [ 341.250477][ T9975] FAT-fs (loop2): Directory bread(block 64) failed [ 341.257368][ T9975] FAT-fs (loop2): Directory bread(block 65) failed [ 341.264097][ T9975] FAT-fs (loop2): Directory bread(block 66) failed [ 341.270600][ T9975] FAT-fs (loop2): Directory bread(block 67) failed [ 341.277649][ T9975] FAT-fs (loop2): Directory bread(block 68) failed [ 341.284380][ T9975] FAT-fs (loop2): Directory bread(block 69) failed [ 341.291166][ T9975] FAT-fs (loop2): Directory bread(block 70) failed [ 341.297695][ T9975] FAT-fs (loop2): Directory bread(block 71) failed [ 341.304390][ T9975] FAT-fs (loop2): Directory bread(block 72) failed [ 341.311633][ T9975] FAT-fs (loop2): Directory bread(block 73) failed [ 341.552334][ T9975] udc-core: couldn't find an available UDC or it's busy [ 341.559289][ T9975] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 341.572072][ T3547] hid (null): unknown global tag 0xc [ 341.577818][ T3547] hid (null): unknown global tag 0xa5 [ 341.591646][ T3547] hid (null): unknown global tag 0xd [ 341.604919][ T3547] hid (null): unknown global tag 0xc [ 341.631856][ T3547] hid-generic 0003:0158:0100.0015: unknown main item tag 0x1 [ 341.649956][ T3547] hid-generic 0003:0158:0100.0015: unexpected long global item [ 341.671409][ T3547] hid-generic: probe of 0003:0158:0100.0015 failed with error -22 [ 341.749671][T10014] IPv6: Can't replace route, no match found [ 341.874522][T10019] team0: Device geneve2 is up. Set it down before adding it as a team port [ 342.123278][T10022] netlink: 1 bytes leftover after parsing attributes in process `syz.3.2169'. [ 342.574198][T10038] loop0: detected capacity change from 0 to 2048 [ 342.710554][T10038] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 342.744837][T10038] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.871601][ T5439] usb 3-1: USB disconnect, device number 21 [ 343.164000][T10053] loop0: detected capacity change from 0 to 512 [ 343.967936][T10053] EXT4-fs (loop0): orphan cleanup on readonly fs [ 344.055268][T10053] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2182: bg 0: block 248: padding at end of block bitmap is not set [ 344.087946][T10053] Quota error (device loop0): write_blk: dquota write failed [ 344.114343][T10053] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 344.156387][T10062] loop2: detected capacity change from 0 to 512 [ 344.163162][T10053] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.2182: Failed to acquire dquot type 1 [ 344.219151][T10053] EXT4-fs (loop0): 1 truncate cleaned up [ 344.251312][T10053] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 344.269176][T10062] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 344.330388][T10053] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 344.351988][T10062] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 344.369313][T10062] EXT4-fs (loop2): orphan cleanup on readonly fs [ 344.479580][T10062] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.2184: bad orphan inode 15 [ 344.560997][T10062] ext4_test_bit(bit=14, block=2) = 0 [ 344.567798][T10053] EXT4-fs (loop0): re-mounted. Opts: (null). Quota mode: writeback. [ 344.607808][T10062] EXT4-fs (loop2): mounted filesystem without journal. Opts: sysvgroups,,errors=continue. Quota mode: none. [ 344.630984][T10062] EXT4-fs error (device loop2): ext4_map_blocks:601: inode #2: block 3: comm syz.2.2184: lblock 0 mapped to illegal pblock 3 (length 1) [ 344.661035][T10053] Quota error (device loop0): find_block_dqentry: Quota for id 131072 referenced but not present [ 344.672226][T10053] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 131072 [ 344.683105][T10053] EXT4-fs error (device loop0): ext4_acquire_dquot:6196: comm syz.0.2182: Failed to acquire dquot type 1 [ 345.110843][T10090] overlayfs: failed to resolve './file0': -2 [ 345.480525][T10083] netlink: 1 bytes leftover after parsing attributes in process `syz.4.2190'. [ 345.741682][T10095] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2195'. [ 345.788155][T10101] loop0: detected capacity change from 0 to 4096 [ 345.900151][T10107] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 346.155358][ T3547] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 346.395354][T10126] IPv6: Can't replace route, no match found [ 346.519653][T10135] team0: Device geneve2 is up. Set it down before adding it as a team port [ 346.531411][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 346.551005][ T3547] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 346.578216][ T3547] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 346.601900][ T3547] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 346.617817][ T3547] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.653934][ T3547] usb 3-1: config 0 descriptor?? [ 346.691515][T10099] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 347.549208][ T3547] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.557131][ T3547] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.565324][ T3547] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.573348][ T3547] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.580940][ T3547] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.605167][ T3547] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 347.629328][ T3547] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 347.723023][ T3547] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 347.885893][T10163] loop2: detected capacity change from 0 to 128 [ 348.120431][ T3547] usb 3-1: USB disconnect, device number 22 [ 348.787775][T10184] loop0: detected capacity change from 0 to 32768 [ 349.250904][T10184] XFS (loop0): Mounting V5 Filesystem [ 349.684821][T10184] XFS (loop0): Ending clean mount [ 349.730156][T10184] XFS (loop0): Quotacheck needed: Please wait. [ 349.783082][T10212] fuse: Bad value for 'fd' [ 349.909663][T10184] XFS (loop0): Quotacheck: Done. [ 349.976113][ T3508] XFS (loop0): Unmounting Filesystem [ 351.211641][T10245] loop2: detected capacity change from 0 to 4096 [ 351.353783][T10262] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 351.425007][T10253] fuse: Bad value for 'fd' [ 354.010936][T10289] netlink: 'syz.2.2255': attribute type 1 has an invalid length. [ 354.105172][T10301] overlayfs: failed to resolve './file1': -2 [ 354.145562][T10289] device bond1 entered promiscuous mode [ 354.183812][T10289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 357.112000][T10343] overlayfs: failed to resolve './file0': -2 [ 357.236165][T10348] loop2: detected capacity change from 0 to 128 [ 357.600513][T10354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2283'. [ 358.518981][T10367] loop0: detected capacity change from 0 to 512 [ 359.081917][ T9795] Bluetooth: hci4: command 0x0405 tx timeout [ 359.100283][T10367] EXT4-fs (loop0): fragment/cluster size (268435456) != block size (4096) [ 359.217153][T10373] netlink: 1 bytes leftover after parsing attributes in process `syz.2.2289'. [ 359.256081][T10373] netlink: 129384 bytes leftover after parsing attributes in process `syz.2.2289'. [ 359.712990][ T9795] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 359.720973][T10399] Process accounting resumed [ 359.784353][T10403] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2302'. [ 359.800283][T10403] netlink: 129384 bytes leftover after parsing attributes in process `syz.1.2302'. [ 360.638011][ T9795] usb 4-1: Using ep0 maxpacket: 32 [ 360.771425][ T9795] usb 4-1: config 0 interface 0 has no altsetting 0 [ 360.779459][T10414] loop2: detected capacity change from 0 to 512 [ 360.804875][T10422] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2310'. [ 360.919503][T10414] EXT4-fs (loop2): fragment/cluster size (268435456) != block size (4096) [ 360.944550][ T9795] usb 4-1: New USB device found, idVendor=fd86, idProduct=2248, bcdDevice=75.5b [ 360.944581][ T9795] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.944601][ T9795] usb 4-1: Product: syz [ 360.944617][ T9795] usb 4-1: Manufacturer: syz [ 360.944630][ T9795] usb 4-1: SerialNumber: syz [ 360.947447][ T9795] usb 4-1: config 0 descriptor?? [ 361.002523][ T9795] usb-storage 4-1:0.0: USB Mass Storage device detected [ 361.019788][T10430] capability: warning: `syz.2.2313' uses 32-bit capabilities (legacy support in use) [ 361.155407][T10433] can: request_module (can-proto-0) failed. [ 361.212848][ T9798] usb 4-1: USB disconnect, device number 26 [ 362.338249][T10452] loop0: detected capacity change from 0 to 128 [ 363.037621][T10482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.061299][T10480] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 363.169068][T10486] loop2: detected capacity change from 0 to 512 [ 363.269795][T10486] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 363.303264][T10486] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.2335: iget: bad i_size value: -67835469387268086 [ 363.320137][T10486] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.2335: couldn't read orphan inode 15 (err -117) [ 363.321255][ T3545] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 363.333120][T10486] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 363.351208][T10486] ext2 filesystem being mounted at /125/file0 supports timestamps until 2038 (0x7fffffff) [ 363.390570][ T26] audit: type=1326 audit(1720535246.475:1762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10492 comm="syz.1.2337" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x0 [ 363.635950][ T3545] usb 1-1: Using ep0 maxpacket: 32 [ 363.655360][T10502] loop2: detected capacity change from 0 to 256 [ 363.761371][ T3545] usb 1-1: config 0 interface 0 has no altsetting 0 [ 363.761791][T10502] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x12727065, utbl_chksum : 0xe619d30d) [ 363.895596][ T26] audit: type=1800 audit(1720535246.985:1763): pid=10502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2340" name="bus" dev="loop2" ino=1048628 res=0 errno=0 [ 363.904833][T10518] program syz.4.2348 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 363.926844][ T3545] usb 1-1: New USB device found, idVendor=fd86, idProduct=2248, bcdDevice=75.5b [ 363.940552][ T3545] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.966123][ T3545] usb 1-1: Product: syz [ 363.980830][ T3545] usb 1-1: Manufacturer: syz [ 363.993815][T10502] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 363.997084][ T3545] usb 1-1: SerialNumber: syz [ 364.002293][T10502] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 364.028677][ T3545] usb 1-1: config 0 descriptor?? [ 364.082374][ T3545] usb-storage 1-1:0.0: USB Mass Storage device detected [ 364.265243][T10502] tipc: Started in network mode [ 364.275440][T10502] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 364.287522][T10502] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 364.323102][ T9798] usb 1-1: USB disconnect, device number 31 [ 364.329473][T10502] tipc: Enabled bearer , priority 10 [ 364.332573][T10534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.360060][T10534] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.634778][T10545] loop2: detected capacity change from 0 to 64 [ 364.890120][T10554] device pim6reg1 entered promiscuous mode [ 364.938253][T10556] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 365.188973][T10563] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 365.217847][T10563] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 365.231471][ T5528] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 365.250591][ T5528] Bluetooth: hci2: Injecting HCI hardware error event [ 365.260315][ T3511] Bluetooth: hci2: hardware error 0x00 [ 365.334132][ T9795] tipc: Node number set to 1 [ 365.517314][T10569] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 365.534691][T10577] loop0: detected capacity change from 0 to 64 [ 365.552372][T10569] tipc: Enabled bearer , priority 10 [ 365.769782][T10583] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 366.018696][T10597] can: request_module (can-proto-0) failed. [ 366.025677][ T3543] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 366.249079][T10612] netlink: 'syz.1.2386': attribute type 8 has an invalid length. [ 366.431401][ T3543] usb 4-1: Using ep0 maxpacket: 32 [ 366.614482][ T3543] usb 4-1: config 0 interface 0 has no altsetting 0 [ 366.740440][ T3580] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 366.865182][ T5528] tipc: Node number set to 1748695569 [ 366.967200][ T26] audit: type=1326 audit(1720535250.055:1764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2391" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x0 [ 366.984271][T10627] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 367.041516][ T3543] usb 4-1: New USB device found, idVendor=fd86, idProduct=2248, bcdDevice=75.5b [ 367.061654][ T3543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.070382][ T3543] usb 4-1: Product: syz [ 367.076135][ T26] audit: type=1326 audit(1720535250.165:1765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x7ffc0000 [ 367.091118][ T3543] usb 4-1: Manufacturer: syz [ 367.103656][ T3543] usb 4-1: SerialNumber: syz [ 367.112449][ T3543] usb 4-1: config 0 descriptor?? [ 367.119479][ T26] audit: type=1326 audit(1720535250.165:1766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x7ffc0000 [ 367.150146][ T26] audit: type=1326 audit(1720535250.195:1767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f76a0afabd9 code=0x7ffc0000 [ 367.151336][ T3580] usb 1-1: Using ep0 maxpacket: 16 [ 367.179250][ T26] audit: type=1326 audit(1720535250.195:1768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x7ffc0000 [ 367.182579][ T3543] usb-storage 4-1:0.0: USB Mass Storage device detected [ 367.210487][ T26] audit: type=1326 audit(1720535250.195:1769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x7ffc0000 [ 367.235315][ T5528] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 367.250821][ T26] audit: type=1326 audit(1720535250.195:1770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f76a0afabd9 code=0x7ffc0000 [ 367.286116][ T26] audit: type=1326 audit(1720535250.195:1771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10625 comm="syz.1.2391" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f76a0afabd9 code=0x7ffc0000 [ 367.381466][ T3580] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024 [ 367.421187][ T3580] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 367.430254][ T3580] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.442849][T10630] loop2: detected capacity change from 0 to 32768 [ 367.450483][ T9795] usb 4-1: USB disconnect, device number 27 [ 367.459745][ T3580] usb 1-1: config 0 descriptor?? [ 367.529311][T10630] XFS (loop2): Mounting V5 Filesystem [ 367.565874][T10630] XFS (loop2): Ending clean mount [ 367.576848][T10630] XFS (loop2): Quotacheck needed: Please wait. [ 367.626830][T10630] XFS (loop2): Quotacheck: Done. [ 367.631422][ T5528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 367.657000][ T5528] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 367.668997][ T5528] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 367.683145][ T8206] XFS (loop2): Unmounting Filesystem [ 367.684442][ T5528] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 367.698824][ T5528] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.708873][ T5528] usb 5-1: config 0 descriptor?? [ 367.735025][T10614] loop0: detected capacity change from 0 to 256 [ 367.741441][T10623] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 367.805397][T10614] FAT-fs (loop0): Directory bread(block 64) failed [ 367.812045][T10614] FAT-fs (loop0): Directory bread(block 65) failed [ 367.818683][T10614] FAT-fs (loop0): Directory bread(block 66) failed [ 367.825328][T10614] FAT-fs (loop0): Directory bread(block 67) failed [ 367.832086][T10614] FAT-fs (loop0): Directory bread(block 68) failed [ 367.838627][T10614] FAT-fs (loop0): Directory bread(block 69) failed [ 367.849855][T10614] FAT-fs (loop0): Directory bread(block 70) failed [ 367.856728][T10614] FAT-fs (loop0): Directory bread(block 71) failed [ 367.863400][T10614] FAT-fs (loop0): Directory bread(block 72) failed [ 367.870684][T10614] FAT-fs (loop0): Directory bread(block 73) failed [ 368.122515][T10614] udc-core: couldn't find an available UDC or it's busy [ 368.129539][T10614] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 368.152437][ T3580] hid (null): unknown global tag 0xc [ 368.158629][ T3580] hid (null): unknown global tag 0xa5 [ 368.172291][ T3580] hid (null): unknown global tag 0xd [ 368.181393][ T3580] hid (null): unknown global tag 0xc [ 368.199607][ T3580] hid-generic 0003:0158:0100.0017: unknown main item tag 0x1 [ 368.199682][ T5528] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 368.211956][ T3580] hid-generic 0003:0158:0100.0017: unexpected long global item [ 368.245329][ T5528] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 368.246118][ T3580] hid-generic: probe of 0003:0158:0100.0017 failed with error -22 [ 368.274925][ T5528] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 368.279660][T10664] netlink: 'syz.1.2401': attribute type 8 has an invalid length. [ 368.299898][ T5528] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 368.319963][T10663] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 368.336471][ T5528] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 368.346586][ T5528] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 368.404530][ T5528] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 368.434594][ T5528] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 368.480095][ T5528] usb 5-1: USB disconnect, device number 26 [ 368.528375][T10673] loop2: detected capacity change from 0 to 256 [ 368.589844][T10673] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb69a62dc, utbl_chksum : 0xe619d30d) [ 368.977472][T10686] fuse: Unknown parameter 'use00000000000000000000' [ 369.501949][ T5429] usb 1-1: USB disconnect, device number 32 [ 369.666415][ T9799] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 370.210742][ T7] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 370.221247][ T9799] usb 5-1: Using ep0 maxpacket: 32 [ 370.249612][ T7] Bluetooth: hci4: Injecting HCI hardware error event [ 370.279947][ T3505] Bluetooth: hci4: hardware error 0x00 [ 370.414758][ T9799] usb 5-1: config 0 interface 0 has no altsetting 0 [ 370.553811][ T26] kauditd_printk_skb: 16 callbacks suppressed [ 370.553824][ T26] audit: type=1326 audit(1720535253.645:1788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10717 comm="syz.2.2421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c9d556bd9 code=0x0 [ 370.626573][ T9799] usb 5-1: New USB device found, idVendor=fd86, idProduct=2248, bcdDevice=75.5b [ 370.655054][ T9799] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.678030][ T9799] usb 5-1: Product: syz [ 370.707362][ T9799] usb 5-1: Manufacturer: syz [ 370.712749][ T9799] usb 5-1: SerialNumber: syz [ 370.728966][ T9799] usb 5-1: config 0 descriptor?? [ 371.493428][ T9799] usb-storage 5-1:0.0: USB Mass Storage device detected [ 371.592460][ T26] audit: type=1326 audit(1720535254.675:1789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10738 comm="syz.3.2430" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d4b8cabd9 code=0x0 [ 371.731190][ T9795] usb 5-1: USB disconnect, device number 27 [ 371.746329][T10742] netlink: 'syz.1.2431': attribute type 8 has an invalid length. [ 371.821254][ T3543] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 371.946628][T10760] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 372.801217][ T3543] usb 1-1: Using ep0 maxpacket: 8 [ 373.091481][ T3543] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 373.099622][ T3543] usb 1-1: config 0 has no interface number 0 [ 373.119842][ T3543] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 373.181139][ T3543] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 373.190202][ T3543] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.235041][ T26] audit: type=1326 audit(1720535256.325:1790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10770 comm="syz.2.2440" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c9d556bd9 code=0x0 [ 373.322889][ T3543] usb 1-1: config 0 descriptor?? [ 373.444253][ T3543] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 373.833103][ T9795] usb 1-1: USB disconnect, device number 33 [ 373.842456][ T9795] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected [ 374.052951][T10795] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 376.072209][T10799] overlayfs: failed to resolve './file0': -2 [ 376.781419][T10812] [ 376.783783][T10812] ====================================================== [ 376.790879][T10812] WARNING: possible circular locking dependency detected [ 376.797894][T10812] 5.15.162-syzkaller #0 Not tainted [ 376.803088][T10812] ------------------------------------------------------ [ 376.810188][T10812] syz-executor/10812 is trying to acquire lock: [ 376.816455][T10812] ffff8880683f0018 (&sighand->siglock){-.-.}-{2:2}, at: __lock_task_sighand+0x11a/0x290 [ 376.821229][T10803] loop2: detected capacity change from 0 to 40427 [ 376.826236][T10812] [ 376.826236][T10812] but task is already holding lock: [ 376.826243][T10812] ffff8880b9b35bb8 (lock#10){+.+.}-{2:2}, at: local_lock_acquire+0xd/0x170 [ 376.853152][T10812] [ 376.853152][T10812] which lock already depends on the new lock. [ 376.853152][T10812] [ 376.863629][T10812] [ 376.863629][T10812] the existing dependency chain (in reverse order) is: [ 376.872824][T10812] [ 376.872824][T10812] -> #3 (lock#10){+.+.}-{2:2}: [ 376.879762][T10812] lock_acquire+0x1db/0x4f0 [ 376.884783][T10812] local_lock_acquire+0x29/0x170 [ 376.890381][T10812] __mmap_lock_do_trace_acquire_returned+0x7c/0x340 [ 376.897603][T10812] stack_map_get_build_id_offset+0x612/0x930 [ 376.904134][T10812] __bpf_get_stack+0x495/0x570 [ 376.909431][T10812] bpf_get_stack_raw_tp+0x1b2/0x220 [ 376.915161][T10812] 0xffffffffa002a47e [ 376.919667][T10812] bpf_trace_run2+0x19e/0x340 [ 376.924872][T10812] trace_tlb_flush+0xed/0x110 [ 376.930082][T10812] switch_mm_irqs_off+0x748/0xa30 [ 376.935635][T10812] __schedule+0x1167/0x45b0 [ 376.940667][T10812] schedule+0x11b/0x1f0 [ 376.945345][T10812] do_nanosleep+0x1bc/0x7b0 [ 376.950381][T10812] hrtimer_nanosleep+0x24d/0x490 [ 376.955944][T10812] __se_sys_clock_nanosleep+0x323/0x3b0 [ 376.962140][T10812] do_syscall_64+0x3b/0xb0 [ 376.967176][T10812] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 376.973600][T10812] [ 376.973600][T10812] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 376.980907][T10812] lock_acquire+0x1db/0x4f0 [ 376.985944][T10812] _raw_spin_lock_nested+0x2d/0x40 [ 376.991592][T10812] raw_spin_rq_lock_nested+0x26/0x140 [ 376.997498][T10812] task_fork_fair+0x5d/0x350 [ 377.002630][T10812] sched_cgroup_fork+0x2d3/0x330 [ 377.008367][T10812] copy_process+0x224a/0x3ef0 [ 377.013558][T10812] kernel_clone+0x210/0x960 [ 377.018572][T10812] kernel_thread+0x168/0x1e0 [ 377.023686][T10812] rest_init+0x21/0x330 [ 377.028356][T10812] start_kernel+0x48c/0x540 [ 377.033386][T10812] secondary_startup_64_no_verify+0xb1/0xbb [ 377.039801][T10812] [ 377.039801][T10812] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 377.047109][T10812] lock_acquire+0x1db/0x4f0 [ 377.052127][T10812] _raw_spin_lock_irqsave+0xd1/0x120 [ 377.057943][T10812] try_to_wake_up+0xae/0x1300 [ 377.063157][T10812] complete_signal+0x5a0/0x9a0 [ 377.068560][T10812] __send_signal+0xaaf/0xd40 [ 377.073684][T10812] do_notify_parent+0xc1e/0xf00 [ 377.079070][T10812] do_exit+0x1464/0x2480 [ 377.083943][T10812] do_group_exit+0x144/0x310 [ 377.089061][T10812] __x64_sys_exit_group+0x3b/0x40 [ 377.094617][T10812] do_syscall_64+0x3b/0xb0 [ 377.099558][T10812] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 377.105976][T10812] [ 377.105976][T10812] -> #0 (&sighand->siglock){-.-.}-{2:2}: [ 377.113805][T10812] validate_chain+0x1649/0x5930 [ 377.119194][T10812] __lock_acquire+0x1295/0x1ff0 [ 377.124615][T10812] lock_acquire+0x1db/0x4f0 [ 377.129682][T10812] _raw_spin_lock_irqsave+0xd1/0x120 [ 377.135506][T10812] __lock_task_sighand+0x11a/0x290 [ 377.141151][T10812] group_send_sig_info+0x23f/0x2d0 [ 377.146891][T10812] bpf_send_signal_common+0x2d8/0x420 [ 377.153669][T10812] bpf_send_signal+0x15/0x20 [ 377.158869][T10812] bpf_prog_9fbc3d1d47c9b36c+0x1a/0x700 [ 377.165455][T10812] bpf_trace_run4+0x1ea/0x390 [ 377.170839][T10812] __mmap_lock_do_trace_acquire_returned+0x2d6/0x340 [ 377.178305][T10812] exc_page_fault+0x564/0x700 [ 377.183513][T10812] asm_exc_page_fault+0x22/0x30 [ 377.188887][T10812] __put_user_nocheck_4+0x3/0x11 [ 377.194348][T10812] schedule_tail+0x92/0xb0 [ 377.199292][T10812] ret_from_fork+0x8/0x30 [ 377.204141][T10812] [ 377.204141][T10812] other info that might help us debug this: [ 377.204141][T10812] [ 377.214367][T10812] Chain exists of: [ 377.214367][T10812] &sighand->siglock --> &rq->__lock --> lock#10 [ 377.214367][T10812] [ 377.226725][T10812] Possible unsafe locking scenario: [ 377.226725][T10812] [ 377.234173][T10812] CPU0 CPU1 [ 377.239530][T10812] ---- ---- [ 377.244974][T10812] lock(lock#10); [ 377.248706][T10812] lock(&rq->__lock); [ 377.255292][T10812] lock(lock#10); [ 377.261537][T10812] lock(&sighand->siglock); [ 377.266215][T10812] [ 377.266215][T10812] *** DEADLOCK *** [ 377.266215][T10812] [ 377.274356][T10812] 5 locks held by syz-executor/10812: [ 377.279725][T10812] #0: ffff88807e840f28 (&mm->mmap_lock){++++}-{3:3}, at: exc_page_fault+0x181/0x700 [ 377.289312][T10812] #1: ffff8880b9b35bb8 (lock#10){+.+.}-{2:2}, at: local_lock_acquire+0xd/0x170 [ 377.298378][T10812] #2: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 377.307702][T10812] #3: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 377.317017][T10812] #4: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x5/0x30 [ 377.326308][T10812] [ 377.326308][T10812] stack backtrace: [ 377.332192][T10812] CPU: 1 PID: 10812 Comm: syz-executor Not tainted 5.15.162-syzkaller #0 [ 377.340604][T10812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 377.350694][T10812] Call Trace: [ 377.353966][T10812] [ 377.356891][T10812] dump_stack_lvl+0x1e3/0x2d0 [ 377.361565][T10812] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 377.367349][T10812] ? print_circular_bug+0x12b/0x1a0 [ 377.372552][T10812] check_noncircular+0x2f8/0x3b0 [ 377.377500][T10812] ? add_chain_block+0x850/0x850 [ 377.382421][T10812] ? lockdep_lock+0x11f/0x2a0 [ 377.387097][T10812] validate_chain+0x1649/0x5930 [ 377.392059][T10812] ? reacquire_held_locks+0x660/0x660 [ 377.397596][T10812] ? validate_chain+0x112/0x5930 [ 377.402562][T10812] ? reacquire_held_locks+0x660/0x660 [ 377.407944][T10812] ? reacquire_held_locks+0x660/0x660 [ 377.413438][T10812] ? mark_lock+0x98/0x340 [ 377.417758][T10812] __lock_acquire+0x1295/0x1ff0 [ 377.422600][T10812] lock_acquire+0x1db/0x4f0 [ 377.427124][T10812] ? __lock_task_sighand+0x11a/0x290 [ 377.432410][T10812] ? read_lock_is_recursive+0x10/0x10 [ 377.437792][T10812] ? read_lock_is_recursive+0x10/0x10 [ 377.443238][T10812] ? _raw_spin_lock_irqsave+0xac/0x120 [ 377.448687][T10812] ? lockdep_hardirqs_off+0x70/0x100 [ 377.453984][T10812] _raw_spin_lock_irqsave+0xd1/0x120 [ 377.459276][T10812] ? __lock_task_sighand+0x11a/0x290 [ 377.464560][T10812] ? _raw_spin_lock+0x40/0x40 [ 377.469265][T10812] ? __lock_acquire+0x1295/0x1ff0 [ 377.474295][T10812] __lock_task_sighand+0x11a/0x290 [ 377.479417][T10812] group_send_sig_info+0x23f/0x2d0 [ 377.484618][T10812] ? lockdep_assert_task_sighand_held+0x280/0x280 [ 377.491030][T10812] ? read_lock_is_recursive+0x10/0x10 [ 377.496414][T10812] bpf_send_signal_common+0x2d8/0x420 [ 377.501780][T10812] ? rcu_lock_release+0x20/0x20 [ 377.506630][T10812] ? read_lock_is_recursive+0x10/0x10 [ 377.511997][T10812] bpf_send_signal+0x15/0x20 [ 377.516604][T10812] bpf_prog_9fbc3d1d47c9b36c+0x1a/0x700 [ 377.522130][T10812] bpf_trace_run4+0x1ea/0x390 [ 377.526806][T10812] ? bpf_trace_run3+0x380/0x380 [ 377.531659][T10812] ? get_mm_memcg_path+0x454/0x550 [ 377.536771][T10812] __mmap_lock_do_trace_acquire_returned+0x2d6/0x340 [ 377.543433][T10812] exc_page_fault+0x564/0x700 [ 377.548095][T10812] ? __lock_acquire+0x1ff0/0x1ff0 [ 377.553104][T10812] asm_exc_page_fault+0x22/0x30 [ 377.557961][T10812] RIP: 0010:__put_user_nocheck_4+0x3/0x11 [ 377.563665][T10812] Code: 00 00 48 39 d9 73 54 0f 01 cb 66 89 01 31 c9 0f 01 ca c3 0f 1f 44 00 00 48 bb fd ef ff ff ff 7f 00 00 48 39 d9 73 34 0f 01 cb <89> 01 31 c9 0f 01 ca c3 66 0f 1f 44 00 00 48 bb f9 ef ff ff ff 7f [ 377.583289][T10812] RSP: 0018:ffffc900030d7f28 EFLAGS: 00050293 [ 377.589352][T10812] RAX: 00000000000004e1 RBX: 00007fffffffeffd RCX: 00005555563e47d0 [ 377.597317][T10812] RDX: 0000000000000000 RSI: ffffffff8a8b3ca0 RDI: ffffffff8ad8f680 [ 377.605278][T10812] RBP: 0000000000000000 R08: dffffc0000000000 R09: fffffbfff1bc8e76 [ 377.613469][T10812] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880570d4220 [ 377.621447][T10812] R13: 0000000000000000 R14: ffff8880570d3b80 R15: dffffc0000000000 [ 377.629455][T10812] schedule_tail+0x92/0xb0 [ 377.633868][T10812] ret_from_fork+0x8/0x30 [ 377.638190][T10812] [ 377.674639][T10803] F2FS-fs (loop2): invalid crc value [ 377.713264][T10803] F2FS-fs (loop2): Found nat_bits in checkpoint [ 377.754818][T10803] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4 [ 378.051600][T10823] attempt to access beyond end of device [ 378.051600][T10823] loop2: rw=2049, want=78088, limit=40427 [ 378.063213][T10823] attempt to access beyond end of device [ 378.063213][T10823] loop2: rw=2049, want=78072, limit=40427 [ 378.129034][ T26] audit: type=1800 audit(1720535261.115:1791): pid=10823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2451" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 378.275206][ T8206] attempt to access beyond end of device [ 378.275206][ T8206] loop2: rw=2049, want=45104, limit=40427 [ 378.302787][ T8206] attempt to access beyond end of device [ 378.302787][ T8206] loop2: rw=2051, want=45064, limit=40427 [ 378.314347][ T8206] attempt to access beyond end of device [ 378.314347][ T8206] loop2: rw=2051, want=131072, limit=40427 [ 378.325991][ T8206] attempt to access beyond end of device [ 378.325991][ T8206] loop2: rw=2051, want=77824, limit=40427 [ 378.337642][ T8206] F2FS-fs (loop2): Issue discard(4614, 4614, 1019) failed, ret: -5 [ 378.337679][ T8206] F2FS-fs (loop2): Issue discard(9761, 9761, 6623) failed, ret: -5 [ 378.346114][ T8206] F2FS-fs (loop2): Issue discard(5638, 5638, 4090) failed, ret: -5 [ 378.512125][ T1375] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.530645][ T1375] ieee802154 phy1 wpan1: encryption failed: -22