last executing test programs: 7m46.878498814s ago: executing program 3 (id=413): socket$inet6(0xa, 0x80002, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)="be38", 0xffe7}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14140000000b001400000000000000000000000700000007038b0100000000"], 0x38}, 0x0) 7m45.658935126s ago: executing program 3 (id=415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) 7m44.711446032s ago: executing program 3 (id=418): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) sendto(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x44, 0x0, 0x0, 0xfffffffd}, {0x3d, 0x0, 0x0, 0xfffffffc}, {0x6, 0x4}]}) 7m43.741716148s ago: executing program 3 (id=422): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file0\x00', 0x800000, &(0x7f0000000040)={[{@lastblock={'lastblock', 0x3d, 0xe2}}, {@gid}, {@gid_forget}, {@session={'session', 0x3d, 0xffffffffffffff00}}, {@unhide}, {@uid}, {@uid_forget}, {@uid_ignore}, {@shortad}, {@gid_ignore}, {@dmode={'dmode', 0x3d, 0x7fffffff}}, {@uid_ignore}, {@fileset}, {@shortad}]}, 0x4, 0xc24, &(0x7f0000000d00)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) 7m43.441466596s ago: executing program 3 (id=426): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file1\x00', 0x10000, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRESDEC], 0xfe, 0x687, &(0x7f0000000fc0)="$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") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) 7m41.056700046s ago: executing program 3 (id=428): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000040)="c4e16015edc4c231059000000000c4c1f877c744240000000080c7442402e624abe4c7442406000000000f01142466bad10466edc4e1797ed8c4e10171e02766b8fd008ec0c74424000e000000c74424024ceb0000c7442406000000000f011c240f89f6220000", 0x67}], 0x1, 0x7c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 7m25.376413929s ago: executing program 32 (id=428): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000040)="c4e16015edc4c231059000000000c4c1f877c744240000000080c7442402e624abe4c7442406000000000f01142466bad10466edc4e1797ed8c4e10171e02766b8fd008ec0c74424000e000000c74424024ceb0000c7442406000000000f011c240f89f6220000", 0x67}], 0x1, 0x7c, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x4b, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2m40.396440953s ago: executing program 5 (id=1263): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r2, 0x80dc5521, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000012c0)=ANY=[@ANYBLOB="ce020100", @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000777,\x00'], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setuid(0xee01) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) 2m38.846871584s ago: executing program 5 (id=1265): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c5}, 0x40084) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB='\b \r\x00\x00\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmsg$inet(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4040004) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r0, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$eJzs3T9oJFUcB/DvzO4ac7fIqY0g/gER0UA4O8HmbBQO5DhEBBVORGyUixAT7LJWNhZaq6SyCWJntJQ0wUYRrKKmiI2gwcJgocXK7iQSNytqNtk5Mp8PTGYm89783rDzfbvN7AZorAtJLiVpJZlL0klSHG5wb7Vc2N9dnd28lvT7T/1SDNtV+5WDfueT9JI8kmSjLPJKO1lef27nt60nHnh7qXP/h+vPzk71Ivft7mw/uffBlbc+ufzw8lff/HSlyKV0/3ZdJ68Y8792kdx2GsVuEEW77hHwX1x94+NvB7m/Pcl9w/x3UqZ68d5ZvGmjk4fe/6e+7/789Z3THCtw8vr9zuA9sNcHGqdM0k1Rzieptstyfr76DP9d61z56sLi63MvLyxdf6numQo4Kd1k+/HPZj49P5L/H1tV/oGza5D/p6+ufT/Y3muNHOzP1DMo4HTdVa0G+Z97YeXBjMs/cKbJPzSX/ENzyT80l/xDc8k/NJf8wxnWOdjojT0s/9Bc8g/NJf/QXIfzDwA0S3+m7ieQgbrUPf8AAAAAAAAAAAAAAAAAAABHrc5uXjtYplXzi/eS3ceStMfVbw1/jzi5efj33K/FoNlfiqrbRJ6/Z8ITTOijmp++vuWHeut/eXe99VeuJ703k1xst4/ef8X+/Xd8t/7L8c6LExb4n4qR/UefmW79UX+s1Vv/8lby+WD+uThu/ilzx3A9fv7pHv6K5WN67fcJTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDU/BkAAP//d4lu0g==") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r4, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x4, @desc3}) r5 = dup3(r2, r0, 0x80000) read(r5, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r5, &(0x7f0000001d40)=""/4095, 0xfff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x2, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000008500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000340)='./bus\x00', 0x81008c, &(0x7f0000002740)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0xffffffffffffffff, @ANYBLOB="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", @ANYRES32], 0x1, 0x686, &(0x7f0000002080)="$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") syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./bus\x00', 0x140cae, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRES32=r7], 0x1, 0x25d, &(0x7f0000000bc0)="$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") r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x100) getdents64(r8, &(0x7f0000001600)=""/4094, 0xffe) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x718, 0x3d8, 0x0, 0x578, 0x3d8, 0x3d8, 0x648, 0x648, 0x648, 0x648, 0x648, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x29}, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:memory_device_t:s0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) 2m37.55642691s ago: executing program 5 (id=1271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) rmdir(0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r4, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000880)={[{@acl}, {@user_xattr}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@sysvgroups}, {@debug}, {@abort}, {@noload}, {@abort}, {@nodiscard}], [{@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'grpjquota'}}, {@smackfsdef={'smackfsdef', 0x3d, '!)\''}}, {@uid_eq}, {@flag='ro'}, {@context={'context', 0x3d, 'user_u'}}]}, 0xff, 0x48b, &(0x7f00000001c0)="$eJzs281vFOUfAPDvbLe8/qD9IaIgSBVNiC8tLaAcTIxvCQdNTPSAx9oWghRqaE2ENFo94NGQeDceTfwLPHky6snEKx5NDAnRxgQ0Jq6ZnZm+LLuwpdsOsp9Psu088zz7PM93Zp7ps/NsA+haA+mPJOJ/EXElIvqy5PICA9mvG/OzY3/Oz44lUau98VtSL3d9fnaslivetzWvc9uyRqJ3abXTFy6eGZ2cnDifp4dmzr47NH3h4tOnz46emjg1cW5jnjFytEmvf7l866j+vmlPGt/1PR9M7d19/K3Lr42duPz291+l/d21L8tP47jdsVqpgTTw37Nj05j3eKcbK9k/tcU4k2rZvaFdPRFRzQfnleiLnlg8eX3xyseldg5YU+k9e2Pr7LkacA9LouweAOUo/tCnn3+L1zpNPe4K117IPgClcd/IX1lONSp5md41bH8gIk7M/fX5ibmstaXHv9bkuQEAwGp9k85/nmo2/6vEriXltudrQ/0R8f+I2BER90XEzoi4P6Je9oGIeHCF7Q80pG+ef1au3lFgbUrnf8/la1vL53/F7C/6e/LUtnr8vcnJ05MTh/JjcjB6N6bp4WaVF1W8/NOnrdpfnP9lr7T99PeSSq5Wswd0m4o946Mzo52alF77KGJPtVn8ycJKQBIRuyNiz8qq3l5snH7iy72tCt0+/lvowDpT7Yuiktm5aIi/kDRbnxw5duzI4eFnnxk5OrQpJicODRVXxc1++PHS663aX1X8HZCe/y3Lr/+GEn1/JEvXa6cXMp5vt41LP3/S8jNltf3rf0F6/W9I3qyv6W7I970/OjNzfjhiQ/JqPb1s/8jie4t0UT6N/+CB5uN/R/6eNP6HIiK9iPdFxMMRsT8/d49ExKMRceAW8X/34mPvtMq7G87/eNP738L137/8/K98o+fMt1+3ar+9+9+R+tbBfE/9/ncbrbtT3EYbrmYAAAC4h1Xq341PKoML25XK4GD2Hf6dsaUyOTU98+TJqffOjWffoe+P3krxpKtvyfPQ4WQurzFLj+TPiov8w/lz4896NtfTg2NTk+Mlxw7dbmuL8Z/6tafs3gFrzv9rQfdqHP+VkvoBrD9//6F7Gf/QvYx/6F7Nxv+HDWlrAXAvqvWV3QOgPG3O/19a634A68/nf+hexj90pdX8X3+Tjc15tauqp7q6t/83NtIjtS5t9a9RzVEp/RjeVRv7Oz+a7nijeoej+/j84p4Sb0oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd9G8AAAD///JQ8Vw=") 2m32.074541002s ago: executing program 5 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x10000, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001) 2m31.452689949s ago: executing program 5 (id=1292): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x10, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = msgget$private(0x0, 0x7fc) msgrcv(r3, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x8, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) 2m29.292969216s ago: executing program 5 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) rmdir(0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r4, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000880)={[{@acl}, {@user_xattr}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@sysvgroups}, {@debug}, {@abort}, {@noload}, {@abort}, {@nodiscard}], [{@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'grpjquota'}}, {@smackfsdef={'smackfsdef', 0x3d, '!)\''}}, {@uid_eq}, {@flag='ro'}, {@context={'context', 0x3d, 'user_u'}}]}, 0xff, 0x48b, &(0x7f00000001c0)="$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") 2m27.114525554s ago: executing program 33 (id=1299): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2000c) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000480)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) rmdir(0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg(r4, &(0x7f00000039c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4004004) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2006c805}, 0x20040054) syz_mount_image$ext4(&(0x7f0000000740)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1810714, &(0x7f0000000880)={[{@acl}, {@user_xattr}, {@grpjquota_path={'grpjquota', 0x3d, './file0'}}, {@sysvgroups}, {@debug}, {@abort}, {@noload}, {@abort}, {@nodiscard}], [{@euid_eq}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_user={'subj_user', 0x3d, 'grpjquota'}}, {@smackfsdef={'smackfsdef', 0x3d, '!)\''}}, {@uid_eq}, {@flag='ro'}, {@context={'context', 0x3d, 'user_u'}}]}, 0xff, 0x48b, &(0x7f00000001c0)="$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") 20.408034594s ago: executing program 1 (id=1644): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@lazytime}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") syz_emit_ethernet(0x9a, &(0x7f0000000080)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x3, 0x6, "bc87ce", 0x64, 0x11, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @remote}, {[], {0x4e22, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x4, 0x0, "b8774b9a1e1760c03b0ee4b057acd0e995535488316386b6fd7c361a2ecdea10", "0afa2240faa41704d3bab4d590437f8b", {"f9801386fb837112e5a808e7609cd745", "9040e9d4d035f138d7ca3988d5c91522"}}}}}}}}, 0x0) syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000080)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0xaaaaaaaaaaaad67, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 12.754502902s ago: executing program 4 (id=1662): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xfffffffffffffffe) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x1ff) socket$inet(0x2, 0x4000000000000001, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$binfmt_register(0xffffffffffffff9c, 0x0, 0x1, 0x0) writev(r3, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x4e24, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x0, 0x6}, {0x0, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r4, 0x0, 0x0, 0x1c) 11.076126141s ago: executing program 4 (id=1665): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x3b, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) 10.942226398s ago: executing program 1 (id=1666): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x100, 0x0) close(r2) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x80}, 0x200c8080) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x5}, {}, {0x2, 0xfff1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x80000001, 0x3, 0x8, 0xb, 0x101, 0xffffcbef, 0x183, 0x5, 0x7, 0x1, 0x14, 0x9, 0x1a, 0x3, 0xd0b, 0x38f4}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) 10.57817636s ago: executing program 1 (id=1667): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x28042, 0x194) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) r1 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x178) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x800, &(0x7f0000000100)={[{@allow_utime}, {@umask={'umask', 0x3d, 0x2}}, {@keep_last_dots}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@discard}, {@utf8}, {}, {@keep_last_dots}, {@discard}, {@namecase}]}, 0x1, 0x153a, &(0x7f0000000680)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002140)='./file1\x00', 0xb4ff0f24f14720c2, &(0x7f0000002300)=ANY=[], 0x1, 0x0, 0x0) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file1\x00', 0x2000010, &(0x7f00000001c0), 0xff, 0x54a, &(0x7f0000000200)="$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") ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x0) truncate(0x0, 0x8000) 8.474520314s ago: executing program 1 (id=1673): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004740), 0x0, 0x48c0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x1) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000040)={&(0x7f0000000200)=[{0x3, 0x8001, 0x1, &(0x7f0000000080)="f2"}], 0x1}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000ac0)={0x2c, &(0x7f0000000900)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0}) 7.610042824s ago: executing program 2 (id=1674): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x10, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = msgget$private(0x0, 0x7fc) msgrcv(r3, 0xffffffffffffffff, 0x0, 0x0, 0x1000) 7.591217985s ago: executing program 4 (id=1675): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000700)={0x34, &(0x7f0000000000)={0x40, 0x8, 0x21, "08ec4b0f87247f6e05d3430982893b03d15b0e07ba54d579877166a5fadbae9503"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000640)=ANY=[@ANYBLOB="201507"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.422471204s ago: executing program 2 (id=1677): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1fe, @mcast1, 0x80000001}, 0x72) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 6.359407057s ago: executing program 6 (id=1678): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f00000033c0)={0x2020}, 0x2020) 5.065256133s ago: executing program 0 (id=1680): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x2a, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r0, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) socket$netlink(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)={0x38, r1, 0x1, 0x0, 0x4003, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x8, 0x63}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}]]}, 0x38}}, 0x0) 4.812794188s ago: executing program 0 (id=1681): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x2000c015}, 0x2404c8c0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$FUSE_INTERRUPT(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4.694636885s ago: executing program 2 (id=1682): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet_udp(0x2, 0x2, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsmount(r2, 0x1, 0x6) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 4.598052571s ago: executing program 0 (id=1683): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") syz_mount_image$fuse(0x0, 0x0, 0x4400, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200)={[{@clear_cache}, {@ssd_spread}, {@space_cache}, {@discard_sync}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@space_cache}, {@nodatacow}, {@noflushoncommit}, {@user_subvol_rm}, {@barrier}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=") r0 = openat(0xffffffffffffff9c, 0x0, 0x141042, 0x0) creat(&(0x7f0000000580)='./file3\x00', 0x84) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x183042, 0x0) openat(0xffffffffffffff9c, 0x0, 0x101142, 0x0) pwrite64(r0, &(0x7f00000002c0), 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x8, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000440), 0x8, &(0x7f0000000300)) syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3200041, &(0x7f0000000000)=ANY=[@ANYBLOB="6561733d666f2c6561733d6e052c636173653d617369732c636865636b3d6e6f6e652c00"], 0x1, 0x9e18, &(0x7f000000a040)="$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") syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, 0x0) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bpq0, 0x10001, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) 4.09254743s ago: executing program 6 (id=1684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) recvmsg$unix(0xffffffffffffffff, &(0x7f0000002580)={&(0x7f0000002340), 0x6e, &(0x7f00000024c0)=[{0x0}], 0x1}, 0x40000042) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000100)={0x0, @aes256, 0x0, @desc1}) msync(&(0x7f000044f000/0x4000)=nil, 0x4000, 0x4) socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000001100)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0xfffffffe, 0x1, 0x6}}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000000), 0x6) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f0000002280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002240)={&(0x7f00000001c0)={0x28, 0x0, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40800}, 0x8040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f00000025c0)=0x4) 3.92445911s ago: executing program 2 (id=1685): openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000001b00)="a6", 0x1, 0x20000045, &(0x7f0000000140)={0xa, 0x4001, 0x10000, @loopback, 0xfffffffd}, 0x1c) 3.818840156s ago: executing program 0 (id=1686): ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/stat\x00', 0x0, 0x0) sendfile(r2, r6, 0x0, 0xdc) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0x9}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xc8}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 3.22874352s ago: executing program 2 (id=1687): getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x10, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r3 = msgget$private(0x0, 0x7fc) msgrcv(r3, 0xffffffffffffffff, 0x0, 0x0, 0x1000) 2.955042607s ago: executing program 4 (id=1688): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x65, 0x3, 0xd913, 0x81, 0x1}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}}}, 0x24}}, 0x0) 2.89859848s ago: executing program 6 (id=1689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$igmp(0x2, 0x3, 0x2) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='comm\x00') read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) 2.814898255s ago: executing program 0 (id=1690): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x10, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r4 = msgget$private(0x0, 0x7fc) msgrcv(r4, 0xffffffffffffffff, 0x0, 0x0, 0x1000) msgsnd(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="04"], 0x8, 0x0) syz_open_dev$usbfs(&(0x7f0000000140), 0x76, 0x101301) 1.900479109s ago: executing program 2 (id=1691): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x408c5}, 0x40084) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYRES16, @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB='\b \r\x00\x00\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x20004090}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) connect$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r2 = syz_open_pts(r0, 0x80) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(r3, 0x0, 0x275a, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xc000, &(0x7f0000000380), 0x2, 0x24d, &(0x7f0000000440)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @aes128, 0x4, @desc3}) r6 = dup3(r2, r0, 0x80000) read(r6, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r6, &(0x7f0000001d40)=""/4095, 0xfff) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_trace', 0x2, 0xa0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x16, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a0000008500000008000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket$inet6(0xa, 0x1, 0x0) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f0000000340)='./bus\x00', 0x81008c, &(0x7f0000002740)=ANY=[@ANYRES64=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES64, @ANYRES64=0xffffffffffffffff, @ANYBLOB="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", @ANYRES32], 0x1, 0x686, &(0x7f0000002080)="$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") syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./bus\x00', 0x140cae, &(0x7f00000002c0)=ANY=[@ANYRES8, @ANYRESOCT, @ANYRES32=r8], 0x1, 0x25d, &(0x7f0000000bc0)="$eJzsmD+L1E4Yx7+TZGc3P36I1RU2Ch64ou7e5lCuWc4TBCsbT9RKFy8eZ3K3ko3gLqh32NhoZyHYWPgGLK642s43IGihgmDhFhaCyEFkdibJxGT/ELDy+RTDM8888/yb7FMsCIL4Z/n86cfHJ+eWVk8C+B/zqCr9VxNgTMqGZv/h+d0Tz9rnX7x+/+rN1oH7e3/6E1eiaD/SFbUJ8S0A9RUTYRIpiu/+EsK82qyimsiXYeC4kq+AoaHkGzAqsV8XPyMJcBsM15S+K+wbjVsbvtu42fXXhLAglpZYHLFk6hX5DXcY1tReeGTaea8/8Dq+7waaYKmzgqOBZ+U0U4UkmDeX618FHMMVA22VrchP5H/18aMdoYl7swAj6V8LBlqqiMX9pE1YQjXujWyJVv8hK63frCbhxdN6Hb+wWuUV04qs+b5r9vrt77N3JC/EwVKNKnC7hMO6KOes0jwAoI4OokyGSG8tww0qSI9M8aVmjI/M7NkGkGiih+M+nZFgaa+DYofL6kVLFHgxV0UsmNlfwtNMzn9PSIdIietzw723+aMv6iklBdcjNj0Ey+TDJxnXZs05Tql8x2wMPAN+VM19ALx4hGkCR2COeVPg3a6cH9FLhmMAj+eHpc2vZrh5p9nrD05tbHbW3XV3y3EWzzBg+7TTHA0iuebmXjqf7dF8+k+bz5UxttzguNcJw6AlV844bIRh4Iz2jvazubTb/XZdXQtxAcBRuRFThScezVwMxqWNoWSgnjciCIIgCIIgCIIgCIIgCIKYlcwfnodhq/9BJ+JI698BAAD//3e9W0Q=") r9 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x100) getdents64(r9, &(0x7f0000001600)=""/4094, 0xffe) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x718, 0x3d8, 0x0, 0x578, 0x3d8, 0x3d8, 0x648, 0x648, 0x648, 0x648, 0x648, 0x6, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x29}, [], [0xffffff00, 0x0, 0x0, 0x1f9814788dbf7ab2], 'veth1\x00', 'syz_tun\x00'}, 0x11e, 0xa8, 0x1d0, 0x1f000000, {0x0, 0x7}}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:memory_device_t:s0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'batadv_slave_0\x00', 'ip6gretap0\x00', {}, {}, 0x2b}, 0x0, 0x1e0, 0x208, 0x7400, {}, [@common=@rt={{0x138}, {0x0, [0x0, 0x5], 0x0, 0x0, 0x0, [@dev, @private2={0xfc, 0x2, '\x00', 0x1}, @remote, @private2, @private1, @dev, @dev={0xfe, 0x80, '\x00', 0x34}, @mcast2, @local, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, @loopback, @mcast1, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28, 'CHECKSUM\x00', 0x0, {0x68}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x9}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x778) 1.892783289s ago: executing program 6 (id=1692): syz_emit_ethernet(0x0, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000080)="0f8a0000008066f30fb3186626660f826e376464f30f11745a2f660fc73166edf20f2218ea000000807e00650f1af6653ef081580000000000", 0x3e}], 0xaaaaaaaaaaaad67, 0x11, 0x0, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.813246924s ago: executing program 1 (id=1693): prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x9}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x1fe, @mcast1, 0x80000001}, 0x72) syz_open_dev$ttys(0xc, 0x2, 0x1) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.472748954s ago: executing program 1 (id=1694): bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='coredump_filter\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) read$FUSE(r0, &(0x7f00000033c0)={0x2020}, 0x2020) 1.428583446s ago: executing program 4 (id=1695): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x990a269cb2d58133, 0x0, {0x7, 0x1f, 0x23c, 0xffffffffc4100f4d, 0x6, 0x88, 0x80000001, 0xffeffffc, 0x0, 0x0, 0x10, 0x10ff}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x72, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 1.355574601s ago: executing program 6 (id=1696): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) socket$inet_udp(0x2, 0x2, 0x0) r2 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsmount(r2, 0x1, 0x6) sendmmsg(r1, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 986.456072ms ago: executing program 4 (id=1697): syz_io_uring_setup(0x1717, 0x0, 0x0, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) 304.855532ms ago: executing program 0 (id=1698): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000e00)=0x7) r0 = getpid() timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x7, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0xa4000061) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), 0xffffffffffffffff) syz_clone(0x1222080, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, 0x0) ioctl$TIOCSPTLCK(r1, 0x40045431, &(0x7f0000000000)) r2 = ioctl$TIOCGPTPEER(r1, 0x5441, 0xb3d) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000001540)='./file0\x00', 0x2000004c, &(0x7f00000012c0)=ANY=[@ANYBLOB="ce020100", @ANYRESHEX=0xee00, @ANYBLOB=',allow_utime=00000000000000000000777,\x00'], 0x1, 0x14fe, &(0x7f0000002a80)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000009840)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) setuid(0xee01) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): [ 65.150044][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.189418][ T4395] loop1: detected capacity change from 0 to 128 [ 65.202375][ T4277] Bluetooth: hci3: command 0x0419 tx timeout [ 65.218749][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.278598][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 65.281010][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.287740][ T4277] Bluetooth: hci4: command 0x0419 tx timeout [ 65.296046][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.347586][ T4395] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 65.362399][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 65.411754][ T4395] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 65.492784][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.527369][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.545534][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.563822][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.587275][ T4406] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 65.608689][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.669643][ T4410] netlink: 844 bytes leftover after parsing attributes in process `syz.1.8'. [ 65.829210][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.852984][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.889448][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 65.920999][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.944305][ T4414] tipc: Started in network mode [ 65.949622][ T4414] tipc: Node identity 82df7394a91c, cluster identity 4711 [ 65.956001][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.971878][ T4414] tipc: Enabled bearer , priority 0 [ 65.988042][ T4414] device syzkaller0 entered promiscuous mode [ 66.000523][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.074670][ T4413] tipc: Resetting bearer [ 66.139993][ T4417] loop0: detected capacity change from 0 to 2048 [ 66.210057][ T4266] EXT4-fs (loop1): unmounting filesystem. [ 66.245873][ T4413] tipc: Disabling bearer [ 67.986086][ T4436] syz.0.17 (4436) used greatest stack depth: 19824 bytes left [ 68.194156][ T4451] loop1: detected capacity change from 0 to 256 [ 68.254856][ T4452] process 'syz.0.21' launched './file0' with NULL argv: empty string added [ 68.616041][ T4457] 9pnet_fd: Insufficient options for proto=fd [ 68.995675][ T4461] loop2: detected capacity change from 0 to 512 [ 69.130801][ T4467] x_tables: duplicate underflow at hook 1 [ 69.201962][ T4468] loop3: detected capacity change from 0 to 128 [ 69.495312][ T4461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 69.748279][ T4258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 69.978097][ T4481] 9pnet_virtio: no channels available for device 127.0.0.1 [ 70.098157][ T4484] ip6t_REJECT: ECHOREPLY is not supported [ 70.235067][ T4489] netlink: 4 bytes leftover after parsing attributes in process `syz.1.33'. [ 70.251409][ T4489] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.074333][ T4489] device bridge_slave_1 left promiscuous mode [ 71.080514][ T4489] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.307894][ T4500] device bridge1 entered promiscuous mode [ 71.803503][ T4504] loop1: detected capacity change from 0 to 16 [ 71.857024][ T4504] erofs: (device loop1): mounted with root inode @ nid 36. [ 71.968637][ T4504] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 72.068891][ T4504] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -23 in[64, 4032] out[1851] [ 72.124256][ T4504] erofs: (device loop1): z_erofs_read_folio: failed to read, err [-117] [ 72.911539][ C0] sched: RT throttling activated [ 72.920716][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 72.940282][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 73.907871][ T4518] x_tables: duplicate underflow at hook 1 [ 73.968199][ T4518] loop4: detected capacity change from 0 to 128 [ 74.434003][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 74.556943][ T4521] tipc: Enabled bearer , priority 0 [ 74.614245][ T4521] tipc: Resetting bearer [ 74.648066][ T4520] tipc: Disabling bearer [ 74.848205][ T4529] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 75.187211][ T4536] netlink: 4 bytes leftover after parsing attributes in process `syz.4.47'. [ 75.482718][ T4537] sch_tbf: burst 7 is lower than device lo mtu (65550) ! [ 75.956738][ T4547] loop2: detected capacity change from 0 to 512 [ 75.968357][ T4548] loop4: detected capacity change from 0 to 128 [ 75.978126][ T4548] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 76.013766][ T4548] x_tables: duplicate underflow at hook 1 [ 76.183240][ T4547] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.49: inode has both inline data and extents flags [ 76.204204][ T4547] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.49: couldn't read orphan inode 15 (err -117) [ 76.473857][ T4547] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 76.946130][ T126] cfg80211: failed to load regulatory.db [ 77.047317][ T4560] mmap: syz.1.54 (4560) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 77.178626][ T4567] x_tables: duplicate underflow at hook 1 [ 77.251188][ T4568] loop4: detected capacity change from 0 to 128 [ 77.623762][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 78.227148][ T4581] netlink: 4 bytes leftover after parsing attributes in process `syz.4.61'. [ 78.240559][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.901672][ T14] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 78.958123][ T4581] device bridge_slave_1 left promiscuous mode [ 78.964539][ T4581] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.163939][ T14] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.370231][ T14] usb 2-1: config 1 interface 1 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 79.721814][ T14] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 79.885333][ T14] usb 2-1: config 1 interface 1 has no altsetting 0 [ 80.941904][ T14] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 80.950289][ T4599] loop2: detected capacity change from 0 to 512 [ 80.959969][ T4599] EXT4-fs: inline encryption not supported [ 80.979904][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.988034][ T14] usb 2-1: Product: syz [ 80.992804][ T14] usb 2-1: Manufacturer: syz [ 81.084585][ T14] usb 2-1: SerialNumber: syz [ 81.096391][ T14] usb 2-1: can't set config #1, error -71 [ 81.105795][ T4599] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 81.107546][ T14] usb 2-1: USB disconnect, device number 2 [ 81.330769][ T4275] EXT4-fs (loop2): unmounting filesystem. [ 82.657995][ T4621] device syzkaller0 entered promiscuous mode [ 83.199680][ T4637] ip6t_REJECT: ECHOREPLY is not supported [ 85.114943][ T26] audit: type=1326 audit(1769127304.355:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 85.221651][ T26] audit: type=1326 audit(1769127304.385:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 85.343083][ T26] audit: type=1326 audit(1769127304.385:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 85.775180][ T26] audit: type=1326 audit(1769127304.385:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 85.859911][ T26] audit: type=1326 audit(1769127304.385:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 85.892651][ T26] audit: type=1326 audit(1769127304.385:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 86.036922][ T26] audit: type=1326 audit(1769127304.385:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 86.106481][ T26] audit: type=1326 audit(1769127304.385:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 86.185028][ T4666] netlink: 'syz.2.89': attribute type 8 has an invalid length. [ 86.419818][ T26] audit: type=1326 audit(1769127304.385:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=433 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 86.489004][ T26] audit: type=1326 audit(1769127304.385:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4654 comm="syz.0.86" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 87.459303][ T4684] loop2: detected capacity change from 0 to 128 [ 87.483251][ T4684] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 89.039452][ T4698] loop2: detected capacity change from 0 to 512 [ 89.076374][ T4698] EXT4-fs: journaled quota format not specified [ 89.131593][ T4313] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 90.761694][ T4313] usb 5-1: Using ep0 maxpacket: 16 [ 90.851893][ T4313] usb 5-1: device descriptor read/all, error -71 [ 91.153256][ T4717] device syzkaller0 entered promiscuous mode [ 92.121198][ T4735] loop4: detected capacity change from 0 to 128 [ 92.137987][ T4735] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 92.296283][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 92.296302][ T26] audit: type=1800 audit(1769127311.395:13): pid=4735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.106" name="file2" dev="loop4" ino=95 res=0 errno=0 [ 93.877340][ T4750] netlink: 'syz.4.110': attribute type 1 has an invalid length. [ 94.062859][ T4750] netlink: 'syz.4.110': attribute type 2 has an invalid length. [ 94.995870][ T4768] Bluetooth: MGMT ver 1.22 [ 95.331696][ T4778] x_tables: duplicate underflow at hook 1 [ 96.038442][ T4784] netlink: 'syz.3.121': attribute type 8 has an invalid length. [ 98.015051][ T4802] loop4: detected capacity change from 0 to 2048 [ 98.328657][ T4808] tipc: Started in network mode [ 98.340368][ T4808] tipc: Node identity 92763fa155f2, cluster identity 4711 [ 98.359148][ T4808] tipc: Enabled bearer , priority 0 [ 98.429490][ T4808] tipc: Resetting bearer [ 98.453748][ T4807] tipc: Resetting bearer [ 98.519698][ T4807] tipc: Disabling bearer [ 103.432430][ T4870] netlink: 'syz.3.145': attribute type 8 has an invalid length. [ 103.829917][ T4881] binder: BINDER_SET_CONTEXT_MGR already set [ 103.858900][ T4881] binder: 4880:4881 ioctl 4018620d 200000000040 returned -16 [ 104.745935][ T4890] overlayfs: failed to resolve './file1': -2 [ 106.207541][ T4916] binder: BINDER_SET_CONTEXT_MGR already set [ 106.225304][ T4916] binder: 4915:4916 ioctl 4018620d 200000000040 returned -16 [ 106.505066][ T4924] netlink: 4 bytes leftover after parsing attributes in process `syz.3.162'. [ 108.411019][ T4956] netlink: 'syz.2.170': attribute type 4 has an invalid length. [ 108.618254][ T4959] binder: BINDER_SET_CONTEXT_MGR already set [ 108.693224][ T4959] binder: 4958:4959 ioctl 4018620d 200000000040 returned -16 [ 108.833672][ T4965] netlink: 'syz.1.172': attribute type 8 has an invalid length. [ 110.507844][ T4988] netlink: 8 bytes leftover after parsing attributes in process `syz.2.180'. [ 111.061106][ T4986] tipc: Started in network mode [ 111.094425][ T4986] tipc: Node identity cefb95890649, cluster identity 4711 [ 111.233597][ T4986] tipc: Enabled bearer , priority 0 [ 111.525833][ T4986] tipc: Resetting bearer [ 111.537636][ T4984] tipc: Disabling bearer [ 111.727909][ T5003] ip6t_REJECT: ECHOREPLY is not supported [ 112.503725][ T5011] binder: 5010:5011 ioctl c0306201 0 returned -14 [ 113.798261][ T4373] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 113.951732][ T5034] fuse: Bad value for 'fd' [ 113.991806][ T4373] usb 4-1: Using ep0 maxpacket: 8 [ 114.010230][ T4373] usb 4-1: unable to get BOS descriptor or descriptor too short [ 114.042776][ T4373] usb 4-1: config 143 has an invalid interface number: 213 but max is 1 [ 114.068551][ T4373] usb 4-1: config 143 has an invalid descriptor of length 36, skipping remainder of the config [ 114.120025][ T4373] usb 4-1: config 143 has 1 interface, different from the descriptor's value: 2 [ 114.176956][ T4336] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 114.326853][ T4373] usb 4-1: config 143 has no interface number 0 [ 114.338861][ T4373] usb 4-1: config 143 interface 213 has no altsetting 0 [ 114.364743][ T4373] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=aa.f8 [ 114.376284][ T4373] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.388196][ T4373] usb 4-1: Product: syz [ 114.395170][ T4373] usb 4-1: Manufacturer: syz [ 114.399887][ T4373] usb 4-1: SerialNumber: syz [ 114.655618][ C0] hrtimer: interrupt took 55908 ns [ 114.692854][ T4373] asix: probe of 4-1:143.213 failed with error -22 [ 114.748667][ T4373] usb 4-1: USB disconnect, device number 2 [ 114.873415][ T4336] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 114.884794][ T4336] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 114.895875][ T4336] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.059317][ T4336] usb 2-1: config 0 interface 0 has no altsetting 0 [ 115.066156][ T4336] usb 2-1: New USB device found, idVendor=056a, idProduct=00fb, bcdDevice= 0.00 [ 115.075368][ T4336] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.086222][ T4336] usb 2-1: config 0 descriptor?? [ 115.093071][ T5032] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 115.119383][ T5049] binder: 5048:5049 ioctl c0306201 0 returned -14 [ 115.301041][ T5052] netlink: 844 bytes leftover after parsing attributes in process `syz.2.200'. [ 115.547973][ T4336] wacom 0003:056A:00FB.0001: unknown main item tag 0x0 [ 115.555561][ T5058] 9pnet: p9_errstr2errno: server reported unknown error [ 115.564134][ T4336] wacom 0003:056A:00FB.0001: unknown main item tag 0x0 [ 115.571997][ T4336] wacom 0003:056A:00FB.0001: unknown main item tag 0x0 [ 115.591036][ T4336] wacom 0003:056A:00FB.0001: hidraw0: USB HID v0.07 Device [HID 056a:00fb] on usb-dummy_hcd.1-1/input0 [ 115.981299][ T4313] usb 2-1: USB disconnect, device number 3 [ 116.921183][ T5078] x_tables: duplicate underflow at hook 1 [ 117.655921][ T5060] fido_id[5060]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 120.704927][ T5118] fuse: Bad value for 'fd' [ 120.860997][ T5126] 9pnet: p9_errstr2errno: server reported unknown error [ 121.171864][ T4320] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 121.411778][ T4320] usb 5-1: Using ep0 maxpacket: 16 [ 121.448217][ T4320] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 121.600592][ T4320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.639404][ T4320] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 121.650990][ T4320] usb 5-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 121.662086][ T4320] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 121.693462][ T4320] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.711740][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.719788][ T4320] usb 5-1: Product: syz [ 121.731617][ T4320] usb 5-1: Manufacturer: syz [ 121.756798][ T4320] usb 5-1: SerialNumber: syz [ 122.055388][ T4320] usb 5-1: USB disconnect, device number 4 [ 122.684772][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.398389][ T26] audit: type=1326 audit(1769127343.642:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 125.441769][ T5183] device bridge1 entered promiscuous mode [ 125.544193][ T26] audit: type=1326 audit(1769127343.642:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 125.731581][ T26] audit: type=1326 audit(1769127343.642:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 125.961639][ T26] audit: type=1326 audit(1769127343.642:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 126.129194][ T26] audit: type=1326 audit(1769127343.642:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 126.316541][ T26] audit: type=1326 audit(1769127343.642:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 126.339820][ T26] audit: type=1326 audit(1769127343.642:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 126.381373][ T26] audit: type=1326 audit(1769127343.642:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 126.468946][ T26] audit: type=1326 audit(1769127343.642:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 126.522530][ T26] audit: type=1326 audit(1769127343.642:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5184 comm="syz.3.242" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bbe39acb9 code=0x7ffc0000 [ 126.601350][ T5209] x_tables: duplicate underflow at hook 1 [ 127.266142][ T5220] 9pnet: p9_errstr2errno: server reported unknown error [ 129.314632][ T5242] device bridge1 entered promiscuous mode [ 130.450979][ T5250] netlink: 4 bytes leftover after parsing attributes in process `syz.2.260'. [ 131.307675][ T5260] x_tables: duplicate underflow at hook 1 [ 131.431329][ T5266] ip6t_REJECT: ECHOREPLY is not supported [ 132.835961][ T5280] 9pnet_fd: Insufficient options for proto=fd [ 133.352542][ T5288] x_tables: duplicate underflow at hook 1 [ 133.461466][ T5291] syzkaller0: create flow: hash 1068602944 index 1 [ 133.486038][ T4320] syzkaller0: tun_net_xmit 76 [ 133.494671][ T4320] syzkaller0: tun_net_xmit 48 [ 133.512455][ T4336] syzkaller0: tun_net_xmit 76 [ 133.594333][ T5291] syzkaller0: delete flow: hash 1068602944 index 1 [ 137.925275][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.932699][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.986453][ T129] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 139.171656][ T129] usb 1-1: Using ep0 maxpacket: 16 [ 139.179477][ T129] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 139.207518][ T129] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.219936][ T129] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.229841][ T129] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 139.240860][ T129] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 139.256586][ T129] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 139.265841][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.273936][ T129] usb 1-1: Product: syz [ 139.278503][ T129] usb 1-1: Manufacturer: syz [ 139.283439][ T129] usb 1-1: SerialNumber: syz [ 139.566854][ T5297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 139.588441][ T5304] device bridge2 entered promiscuous mode [ 139.671838][ T129] usb 1-1: USB disconnect, device number 2 [ 139.806820][ T5346] tipc: Started in network mode [ 139.826343][ T5346] tipc: Node identity c6f46f3eac1f, cluster identity 4711 [ 139.842022][ T5346] tipc: Enabled bearer , priority 0 [ 139.881321][ T5346] tipc: Resetting bearer [ 139.906381][ T5344] tipc: Disabling bearer [ 139.923582][ T5340] udevd[5340]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 141.811648][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 141.931674][ T129] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 142.258212][ T129] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 142.273430][ T129] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.283649][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 142.327342][ T129] usb 3-1: config 0 has no interface number 0 [ 142.346562][ T129] usb 3-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f7.3f [ 142.740161][ T129] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.782342][ T129] usb 3-1: Product: syz [ 142.792240][ T129] usb 3-1: Manufacturer: syz [ 142.801199][ T129] usb 3-1: SerialNumber: syz [ 142.897531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 143.017644][ T129] usb 3-1: config 0 descriptor?? [ 143.204879][ T5391] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 143.716310][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 143.731554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.739901][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.748228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.756621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 143.765110][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 143.773523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 144.057466][ T5397] tipc: Enabled bearer , priority 0 [ 144.071877][ T129] snd-usb-audio: probe of 3-1:0.2 failed with error -2 [ 144.100396][ T5397] tipc: Resetting bearer [ 144.112185][ T129] usb 3-1: USB disconnect, device number 2 [ 144.126530][ T5350] udevd[5350]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 144.157243][ T5396] tipc: Disabling bearer [ 144.259444][ T5404] Zero length message leads to an empty skb [ 145.079119][ T5416] x_tables: duplicate underflow at hook 1 [ 145.281872][ T4333] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 145.493347][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 145.509933][ T5423] netlink: 156 bytes leftover after parsing attributes in process `syz.1.313'. [ 145.531620][ T4333] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.541435][ T4333] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 145.568134][ T5423] netlink: 156 bytes leftover after parsing attributes in process `syz.1.313'. [ 145.587970][ T4333] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.609720][ T4333] usb 4-1: config 0 descriptor?? [ 146.193702][ T4333] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor [ 146.269757][ T4333] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input8 [ 146.395385][ T4333] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0 [ 146.560059][ T4333] usb 4-1: USB disconnect, device number 3 [ 146.870910][ T5440] tipc: Enabling of bearer rejected, failed to enable media [ 146.946979][ T5432] fido_id[5432]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 147.482704][ T5466] x_tables: duplicate underflow at hook 1 [ 147.541704][ T4313] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 147.801840][ T4313] usb 3-1: Using ep0 maxpacket: 16 [ 147.830429][ T4313] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 147.942978][ T4313] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 148.102568][ T4313] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 148.129137][ T4313] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 148.154891][ T4313] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 148.247532][ T4313] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 148.266834][ T4313] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.284494][ T4313] usb 3-1: Product: syz [ 148.288831][ T4313] usb 3-1: Manufacturer: syz [ 148.301560][ T4313] usb 3-1: SerialNumber: syz [ 148.562616][ T5473] ip6t_REJECT: ECHOREPLY is not supported [ 148.601323][ T4313] usb 3-1: USB disconnect, device number 3 [ 149.494867][ T5483] tipc: Enabled bearer , priority 0 [ 149.631149][ T5482] tipc: Disabling bearer [ 150.779988][ T5508] xt_hashlimit: size too large, truncated to 1048576 [ 150.994047][ T5514] netlink: 844 bytes leftover after parsing attributes in process `syz.3.337'. [ 152.691685][ T4313] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 153.019980][ T4313] usb 5-1: Using ep0 maxpacket: 16 [ 153.033457][ T4313] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 153.042852][ T4313] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 153.053336][ T4313] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 153.063290][ T4313] usb 5-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 153.074341][ T4313] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 153.102086][ T4313] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 153.111170][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 153.135886][ T4313] usb 5-1: Product: syz [ 153.140717][ T4313] usb 5-1: Manufacturer: syz [ 153.145674][ T4313] usb 5-1: SerialNumber: syz [ 153.384880][ T4313] usb 5-1: USB disconnect, device number 5 [ 153.642753][ T5438] udevd[5438]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 153.773122][ T5537] tipc: Enabled bearer , priority 0 [ 153.895099][ T5536] tipc: Resetting bearer [ 153.970747][ T5536] tipc: Disabling bearer [ 154.126387][ T5548] x_tables: duplicate underflow at hook 1 [ 156.301960][ T5574] netlink: 844 bytes leftover after parsing attributes in process `syz.3.357'. [ 156.635930][ T5580] tipc: Enabled bearer , priority 0 [ 156.670116][ T5580] tipc: Resetting bearer [ 156.713637][ T5579] tipc: Disabling bearer [ 157.543896][ T5593] x_tables: duplicate underflow at hook 1 [ 158.804852][ T5616] fuse: Bad value for 'fd' [ 159.322380][ T5621] x_tables: duplicate underflow at hook 1 [ 162.334330][ T5610] Cannot find del_set index 0 as target [ 162.600331][ T5639] 9pnet_fd: p9_fd_create_tcp (5639): problem connecting socket to 127.0.0.1 [ 162.702212][ T5641] netlink: 844 bytes leftover after parsing attributes in process `syz.4.375'. [ 163.331883][ T7] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.357134][ T5652] x_tables: duplicate underflow at hook 1 [ 163.562011][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 163.574273][ T7] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 163.704542][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.725803][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 163.828856][ T7] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 163.840017][ T7] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 163.861430][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 163.903522][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.915500][ T7] usb 2-1: Product: syz [ 163.919719][ T7] usb 2-1: Manufacturer: syz [ 163.926681][ T7] usb 2-1: SerialNumber: syz [ 164.795094][ T5666] netlink: 16 bytes leftover after parsing attributes in process `syz.0.385'. [ 164.911981][ T7] usb 2-1: USB disconnect, device number 4 [ 165.019756][ T5678] binder: 5677:5678 ioctl c0306201 0 returned -14 [ 165.123230][ T5685] x_tables: duplicate underflow at hook 1 [ 166.013724][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.707101][ T4321] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 166.793501][ T5703] x_tables: duplicate underflow at hook 1 [ 167.031780][ T4321] usb 1-1: Using ep0 maxpacket: 16 [ 167.039583][ T4321] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 167.888636][ T4321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.899227][ T4321] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 167.909164][ T4321] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 167.921082][ T4321] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 167.946567][ T4321] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 167.956026][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.968820][ T4321] usb 1-1: Product: syz [ 168.000486][ T4321] usb 1-1: Manufacturer: syz [ 168.005660][ T4321] usb 1-1: SerialNumber: syz [ 168.251921][ T5719] netlink: 16 bytes leftover after parsing attributes in process `syz.3.400'. [ 168.384795][ T4321] usb 1-1: USB disconnect, device number 3 [ 168.425429][ T5731] x_tables: duplicate underflow at hook 1 [ 170.079046][ T5628] udevd[5628]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.456505][ T5749] netlink: 'syz.1.412': attribute type 8 has an invalid length. [ 171.179721][ T5758] x_tables: duplicate underflow at hook 1 [ 171.991129][ T5770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.417'. [ 172.861883][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 172.861958][ T26] audit: type=1326 audit(1769127647.792:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5771 comm="syz.3.418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9bbe39acb9 code=0x0 [ 179.321965][ T5827] ip6t_REJECT: ECHOREPLY is not supported [ 180.607859][ T5841] netlink: 844 bytes leftover after parsing attributes in process `syz.2.438'. [ 181.121735][ T4277] Bluetooth: hci3: command 0x0406 tx timeout [ 181.122744][ T47] Bluetooth: hci2: command 0x0406 tx timeout [ 181.135702][ T4277] Bluetooth: hci1: command 0x0406 tx timeout [ 181.145158][ T4277] Bluetooth: hci0: command 0x0406 tx timeout [ 181.745197][ T5850] IPVS: dh: FWM 3 0x00000003 - no destination available [ 181.764050][ T5851] x_tables: duplicate underflow at hook 1 [ 184.448902][ T5880] block device autoloading is deprecated and will be removed. [ 185.427030][ T5891] netlink: 844 bytes leftover after parsing attributes in process `syz.4.453'. [ 185.732327][ T5895] device bridge3 entered promiscuous mode [ 188.027954][ T5911] ip6t_REJECT: ECHOREPLY is not supported [ 190.542461][ T5933] netlink: 'syz.1.463': attribute type 4 has an invalid length. [ 192.935474][ T5947] overlayfs: missing 'lowerdir' [ 193.049233][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 193.144858][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 193.155525][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 193.170838][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 193.180115][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 193.187690][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 193.225378][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.1.469'. [ 194.219761][ T5949] chnl_net:caif_netlink_parms(): no params data found [ 194.559090][ T5967] 9pnet_fd: Insufficient options for proto=fd [ 194.683148][ T5949] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.797619][ T5949] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.005251][ T5949] device bridge_slave_0 entered promiscuous mode [ 195.062493][ T5949] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.069704][ T5949] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.078432][ T5949] device bridge_slave_1 entered promiscuous mode [ 195.184985][ T5949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.202709][ T5949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.264997][ T5949] team0: Port device team_slave_0 added [ 195.301751][ T5949] team0: Port device team_slave_1 added [ 195.345268][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.361586][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.418152][ T5949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.441838][ T4270] Bluetooth: hci0: command 0x0409 tx timeout [ 195.449551][ T5949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.486094][ T5949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.581545][ T129] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 195.589350][ T5949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.674210][ T5949] device hsr_slave_0 entered promiscuous mode [ 195.681605][ T5949] device hsr_slave_1 entered promiscuous mode [ 195.688601][ T5949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.697372][ T5949] Cannot create hsr debugfs directory [ 195.720158][ T5988] tipc: Enabled bearer , priority 0 [ 195.751764][ T5988] device syzkaller0 entered promiscuous mode [ 195.771739][ T129] usb 1-1: Using ep0 maxpacket: 32 [ 195.777703][ T5988] tipc: Resetting bearer [ 195.778678][ T129] usb 1-1: config index 0 descriptor too short (expected 30262, got 54) [ 195.808212][ T5986] tipc: Resetting bearer [ 195.817336][ T129] usb 1-1: config 71 has too many interfaces: 126, using maximum allowed: 32 [ 195.838712][ T129] usb 1-1: config 71 has an invalid descriptor of length 0, skipping remainder of the config [ 195.866720][ T5986] tipc: Disabling bearer [ 195.871519][ T129] usb 1-1: config 71 has 1 interface, different from the descriptor's value: 126 [ 195.891620][ T5989] netlink: 'syz.1.475': attribute type 8 has an invalid length. [ 195.901673][ T129] usb 1-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=dc.a9 [ 195.914633][ T129] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=16 [ 195.928788][ T129] usb 1-1: Product: syz [ 195.936204][ T129] usb 1-1: Manufacturer: syz [ 195.941281][ T129] usb 1-1: SerialNumber: syz [ 196.192330][ T129] usb 1-1: USB disconnect, device number 4 [ 196.252718][ T5995] ip6t_REJECT: ECHOREPLY is not supported [ 196.927735][ T5949] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 196.965336][ T5949] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 196.975641][ T5949] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 196.985996][ T5949] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 197.510505][ T5949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.521807][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 197.534337][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 197.576538][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 197.620156][ T5949] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.656304][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 197.669508][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 197.692105][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.699239][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.722054][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 197.744503][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 197.759248][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 197.769159][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.776323][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.794533][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 197.819356][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 197.852012][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 197.874283][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 197.905993][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 197.927145][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 197.969418][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 197.993467][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 198.028440][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 198.053290][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 198.359948][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 198.520057][ T5949] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.369313][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.381287][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.641732][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 201.048021][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 201.065907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 201.122563][ T5949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.695235][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 201.793429][ T6054] Bluetooth: MGMT ver 1.22 [ 204.160816][ T6072] ip6t_REJECT: ECHOREPLY is not supported [ 204.450890][ T5949] device veth0_vlan entered promiscuous mode [ 204.492369][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 204.521998][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 204.566024][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 204.592421][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 204.779395][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 204.957558][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 205.098217][ T5949] device veth1_vlan entered promiscuous mode [ 205.331921][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 205.344386][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 205.382661][ T5949] device veth0_macvtap entered promiscuous mode [ 205.400033][ T5949] device veth1_macvtap entered promiscuous mode [ 205.425694][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.464332][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.516422][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.570835][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.596966][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.709334][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.785676][ T6089] binder: 6088:6089 ioctl c0306201 0 returned -14 [ 205.887703][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.075767][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.184954][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.196001][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.207623][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.232444][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 206.244725][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 206.272725][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 206.295678][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 206.316114][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.356973][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.411659][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.461560][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.491295][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.528288][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.558678][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.576345][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.598960][ T5949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.619942][ T5949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.642685][ T5949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.652363][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 206.661176][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 206.689307][ T5949] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.719463][ T5949] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.737123][ T5949] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.756163][ T5949] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.771553][ T7] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 206.928456][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.947769][ T4350] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.951528][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.956721][ T4350] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.981784][ T7] usb 5-1: Using ep0 maxpacket: 16 [ 206.996375][ T7] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 207.011836][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 207.032626][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 207.034702][ T7] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 207.074643][ T7] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 207.092729][ T7] usb 5-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 207.125757][ T7] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 207.157027][ T7] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 207.169281][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.195743][ T7] usb 5-1: Product: syz [ 207.206609][ T7] usb 5-1: Manufacturer: syz [ 207.215651][ T6110] netlink: 844 bytes leftover after parsing attributes in process `syz.1.506'. [ 207.220103][ T7] usb 5-1: SerialNumber: syz [ 207.878578][ T7] usb 5-1: USB disconnect, device number 6 [ 208.282027][ T6098] udevd[6098]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.310409][ T6122] binder: 6119:6122 ioctl c0306201 0 returned -14 [ 208.372260][ T6126] binder: 6119:6126 ioctl c0306201 0 returned -14 [ 210.013242][ T6140] x_tables: duplicate underflow at hook 1 [ 210.235414][ T6144] ip6t_REJECT: ECHOREPLY is not supported [ 213.196357][ T6169] netlink: 844 bytes leftover after parsing attributes in process `syz.1.521'. [ 213.362540][ T6175] binder: 6174:6175 ioctl c0306201 0 returned -14 [ 213.370369][ T6175] binder: 6174:6175 ioctl c0306201 0 returned -14 [ 214.137404][ T6187] fuse: Bad value for 'fd' [ 214.648940][ T6194] x_tables: duplicate underflow at hook 1 [ 216.925043][ T6210] overlayfs: './file1' not a directory [ 217.122984][ T6220] binder: 6218:6220 ioctl c0306201 0 returned -14 [ 217.182506][ T6221] binder: 6218:6221 ioctl c0306201 0 returned -14 [ 218.348119][ T6234] ip6t_REJECT: ECHOREPLY is not supported [ 219.405418][ T6245] 9pnet_fd: Insufficient options for proto=fd [ 223.369936][ T6288] netlink: 844 bytes leftover after parsing attributes in process `syz.5.556'. [ 227.025269][ T6342] x_tables: duplicate underflow at hook 1 [ 227.635943][ T6348] block device autoloading is deprecated and will be removed. [ 229.044803][ T6361] netlink: 844 bytes leftover after parsing attributes in process `syz.5.573'. [ 229.127455][ T6367] x_tables: duplicate underflow at hook 1 [ 232.667530][ T6401] device bridge2 entered promiscuous mode [ 232.977867][ T6419] netlink: 844 bytes leftover after parsing attributes in process `syz.5.589'. [ 235.886915][ T6472] device bridge4 entered promiscuous mode [ 236.163210][ T6479] netlink: 844 bytes leftover after parsing attributes in process `syz.0.608'. [ 241.175301][ T6526] tipc: Enabled bearer , priority 0 [ 241.393477][ T6527] tipc: Resetting bearer [ 241.567851][ T6524] tipc: Disabling bearer [ 241.935923][ T6529] netlink: 844 bytes leftover after parsing attributes in process `syz.0.624'. [ 242.049495][ T6532] tipc: Started in network mode [ 242.118247][ T6532] tipc: Node identity b2dd0b954b63, cluster identity 4711 [ 242.338101][ T6532] tipc: Enabled bearer , priority 0 [ 242.985482][ T6544] tipc: Resetting bearer [ 243.049284][ T6531] tipc: Disabling bearer [ 246.082224][ T6588] netlink: 844 bytes leftover after parsing attributes in process `syz.5.640'. [ 246.551705][ T4373] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 246.741675][ T4373] usb 5-1: Using ep0 maxpacket: 16 [ 246.748780][ T4373] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 246.788542][ T4373] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 246.850841][ T4373] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 246.933932][ T4373] usb 5-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 247.126756][ T4373] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 247.427107][ T4373] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 247.562628][ T4373] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.599582][ T4373] usb 5-1: Product: syz [ 247.629928][ T4373] usb 5-1: Manufacturer: syz [ 247.650163][ T4373] usb 5-1: SerialNumber: syz [ 250.116218][ T4373] usb 5-1: USB disconnect, device number 7 [ 250.391403][ T6627] ip6t_REJECT: ECHOREPLY is not supported [ 250.419528][ T6579] udevd[6579]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 256.171985][ T6667] tipc: Enabled bearer , priority 0 [ 256.238344][ T6665] tipc: Disabling bearer [ 256.280107][ T6673] netlink: 844 bytes leftover after parsing attributes in process `syz.4.663'. [ 256.911752][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 258.087884][ T14] usb 1-1: Using ep0 maxpacket: 16 [ 258.103105][ T14] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 258.112309][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.123227][ T14] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 258.135615][ T14] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 258.159819][ T14] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 258.188298][ T14] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 258.206772][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.227185][ T14] usb 1-1: Product: syz [ 258.232125][ T14] usb 1-1: Manufacturer: syz [ 258.240294][ T14] usb 1-1: SerialNumber: syz [ 258.441899][ T14] usb 1-1: can't set config #1, error -71 [ 258.450446][ T14] usb 1-1: USB disconnect, device number 5 [ 259.813024][ T6712] ip6t_REJECT: ECHOREPLY is not supported [ 259.829986][ T6717] netlink: 844 bytes leftover after parsing attributes in process `syz.5.675'. [ 260.806524][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.815798][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.171575][ T7] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 264.244743][ T6759] x_tables: duplicate underflow at hook 1 [ 264.391539][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 264.409080][ T7] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 264.577234][ T7] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.804018][ T7] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 264.918955][ T7] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 264.966967][ T7] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 265.053184][ T7] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 265.083558][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.118182][ T7] usb 2-1: Product: syz [ 265.139218][ T7] usb 2-1: Manufacturer: syz [ 265.144262][ T7] usb 2-1: SerialNumber: syz [ 265.872481][ T7] usb 2-1: USB disconnect, device number 5 [ 265.999385][ T6774] netlink: 844 bytes leftover after parsing attributes in process `syz.0.689'. [ 266.020726][ T6775] x_tables: duplicate underflow at hook 1 [ 266.973780][ T6579] udevd[6579]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 267.291003][ T6788] fuse: Bad value for 'fd' [ 269.822818][ T6819] x_tables: duplicate underflow at hook 1 [ 269.863661][ T6813] ip6t_REJECT: ECHOREPLY is not supported [ 270.102427][ T6816] netlink: 'syz.4.702': attribute type 8 has an invalid length. [ 271.173694][ T6831] block device autoloading is deprecated and will be removed. [ 271.799021][ T6844] x_tables: duplicate underflow at hook 1 [ 272.646337][ T4989] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 273.011549][ T4989] usb 1-1: Using ep0 maxpacket: 16 [ 273.018437][ T4989] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 273.037942][ T4989] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 273.084487][ T4989] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 273.107755][ T4989] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 273.119163][ T4989] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 273.169977][ T4989] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 273.285540][ T4989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.373963][ T4989] usb 1-1: Product: syz [ 273.438895][ T4989] usb 1-1: Manufacturer: syz [ 273.509978][ T4989] usb 1-1: SerialNumber: syz [ 275.471869][ T4989] usb 1-1: USB disconnect, device number 6 [ 275.730408][ T26] audit: type=1326 audit(2000001374.820:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 275.992347][ T6878] netlink: 'syz.1.715': attribute type 8 has an invalid length. [ 276.716094][ T6824] udevd[6824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.751707][ T26] audit: type=1326 audit(2000001374.820:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 278.089041][ T6889] block device autoloading is deprecated and will be removed. [ 278.234226][ T26] audit: type=1326 audit(2000001374.820:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 278.465758][ T26] audit: type=1326 audit(2000001374.820:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 278.532546][ T26] audit: type=1326 audit(2000001374.820:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 278.984682][ T26] audit: type=1326 audit(2000001374.820:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 279.207060][ T26] audit: type=1326 audit(2000001374.820:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 279.288951][ T26] audit: type=1326 audit(2000001374.820:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 279.327641][ T26] audit: type=1326 audit(2000001374.820:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 279.350325][ T4373] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 279.382197][ T26] audit: type=1326 audit(2000001374.820:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6864 comm="syz.5.714" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc20479acb9 code=0x7ffc0000 [ 280.368983][ T4373] usb 2-1: Using ep0 maxpacket: 16 [ 280.376250][ T4373] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 280.385394][ T4373] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 280.395773][ T4373] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 280.405973][ T4373] usb 2-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 280.417042][ T4373] usb 2-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 280.479975][ T4373] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 280.538196][ T4373] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.560378][ T4373] usb 2-1: Product: syz [ 280.571507][ T4373] usb 2-1: Manufacturer: syz [ 280.577869][ T4373] usb 2-1: SerialNumber: syz [ 280.819037][ T4373] usb 2-1: USB disconnect, device number 6 [ 281.062582][ T6888] udevd[6888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 281.474318][ T4488] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.613124][ T4488] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.696145][ T6944] x_tables: duplicate underflow at hook 1 [ 282.749777][ T6943] block device autoloading is deprecated and will be removed. [ 282.817675][ T4488] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.662487][ T4488] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.598874][ T6963] device bridge1 entered promiscuous mode [ 285.049147][ T4488] tipc: Left network mode [ 285.161537][ T4989] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 285.351650][ T4989] usb 1-1: Using ep0 maxpacket: 16 [ 285.358766][ T4989] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 285.427029][ T4989] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 285.488434][ T4989] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 285.539976][ T4989] usb 1-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 285.599647][ T4989] usb 1-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 285.672119][ T4989] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 285.714116][ T4989] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.745940][ T4989] usb 1-1: Product: syz [ 285.763932][ T4989] usb 1-1: Manufacturer: syz [ 285.782989][ T4989] usb 1-1: SerialNumber: syz [ 286.062981][ T4989] usb 1-1: USB disconnect, device number 7 [ 292.285125][ T4321] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 292.492049][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 292.498995][ T4321] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 292.509096][ T4321] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 292.519559][ T4321] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 292.530344][ T4321] usb 5-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 292.546001][ T4321] usb 5-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 292.562285][ T4321] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 292.571406][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 292.579881][ T4321] usb 5-1: Product: syz [ 292.584423][ T4321] usb 5-1: Manufacturer: syz [ 292.589228][ T4321] usb 5-1: SerialNumber: syz [ 292.787073][ T7028] netlink: 'syz.5.755': attribute type 8 has an invalid length. [ 292.964247][ T4321] usb 5-1: USB disconnect, device number 8 [ 293.201238][ T4488] device hsr_slave_0 left promiscuous mode [ 293.516234][ T7050] udevd[7050]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 293.640247][ T4488] device hsr_slave_1 left promiscuous mode [ 293.809683][ T4488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.818117][ T4488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.826824][ T4488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.942736][ T4488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.989650][ T4488] device bridge_slave_1 left promiscuous mode [ 294.000465][ T4488] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.032648][ T4488] device bridge_slave_0 left promiscuous mode [ 294.041293][ T4488] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.094829][ T4488] device veth1_macvtap left promiscuous mode [ 294.106799][ T4488] device veth0_macvtap left promiscuous mode [ 294.119598][ T4488] device veth1_vlan left promiscuous mode [ 294.130035][ T4488] device veth0_vlan left promiscuous mode [ 297.535232][ T4488] team0 (unregistering): Port device team_slave_1 removed [ 297.580027][ T4488] team0 (unregistering): Port device team_slave_0 removed [ 297.632786][ T4488] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.722594][ T4488] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.371645][ T4333] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 298.382794][ T4488] bond0 (unregistering): Released all slaves [ 298.472573][ T7072] netlink: 4 bytes leftover after parsing attributes in process `syz.4.765'. [ 298.487388][ T7101] netlink: 'syz.5.772': attribute type 8 has an invalid length. [ 298.601835][ T4333] usb 3-1: Using ep0 maxpacket: 16 [ 298.642866][ T4333] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 298.654839][ T4333] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 298.676158][ T4333] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 298.686323][ T4333] usb 3-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 298.882198][ T4333] usb 3-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 298.919115][ T4333] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.109340][ T7125] block device autoloading is deprecated and will be removed. [ 302.154803][ T4333] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.154828][ T4333] usb 3-1: Product: syz [ 302.167610][ T4333] usb 3-1: Manufacturer: syz [ 302.182166][ T4333] usb 3-1: SerialNumber: syz [ 302.304174][ T4333] usb 3-1: can't set config #1, error -71 [ 302.318050][ T4333] usb 3-1: USB disconnect, device number 4 [ 302.391914][ T7112] udevd[7112]: setting mode of /dev/bus/usb/003/004 to 020664 failed: No such file or directory [ 302.481730][ T7112] udevd[7112]: setting owner of /dev/bus/usb/003/004 to uid=0, gid=0 failed: No such file or directory [ 304.114293][ T7148] x_tables: duplicate underflow at hook 1 [ 304.559218][ T7161] netlink: 'syz.0.789': attribute type 8 has an invalid length. [ 306.705101][ T7188] netlink: 844 bytes leftover after parsing attributes in process `syz.1.797'. [ 306.915514][ T7195] block device autoloading is deprecated and will be removed. [ 306.981351][ T7195] loop0: detected capacity change from 0 to 764 [ 307.127851][ T7195] Symlink component flag not implemented [ 307.134650][ T7195] Symlink component flag not implemented (116) [ 307.651521][ T4989] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 307.841817][ T4989] usb 6-1: Using ep0 maxpacket: 16 [ 309.340976][ T4989] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 309.529075][ T4989] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 309.771098][ T4989] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 309.954204][ T4989] usb 6-1: too many endpoints for config 1 interface 2 altsetting 0: 255, using maximum allowed: 30 [ 310.135930][ T7215] x_tables: duplicate underflow at hook 1 [ 311.350833][ T4989] usb 6-1: config 1 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 311.381547][ T4989] usb 6-1: string descriptor 0 read error: -71 [ 311.387849][ T4989] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.397614][ T4989] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.436825][ T4989] usb 6-1: can't set config #1, error -71 [ 311.486640][ T4989] usb 6-1: USB disconnect, device number 2 [ 312.168529][ T7230] device syzkaller0 entered promiscuous mode [ 313.296713][ T7238] tipc: Enabled bearer , priority 0 [ 314.001048][ T7237] tipc: Disabling bearer [ 314.081672][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 314.201717][ T7253] 9pnet: p9_errstr2errno: server reported unknown error [ 315.786097][ T7273] x_tables: duplicate underflow at hook 1 [ 316.124086][ T7277] netlink: 844 bytes leftover after parsing attributes in process `syz.1.817'. [ 317.726221][ T7283] netlink: 4 bytes leftover after parsing attributes in process `syz.4.819'. [ 323.654956][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.5.830'. [ 323.674646][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 323.921657][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.257263][ T7343] x_tables: duplicate underflow at hook 1 [ 328.061837][ T7379] netlink: 4 bytes leftover after parsing attributes in process `syz.2.844'. [ 328.986609][ T7389] x_tables: duplicate underflow at hook 1 [ 330.900836][ T7409] device syzkaller0 entered promiscuous mode [ 333.216791][ T4333] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 333.522992][ T4333] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 333.546227][ T4333] usb 6-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.00 [ 333.572331][ T4333] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.609838][ T4333] usb 6-1: config 0 descriptor?? [ 333.617981][ T7443] ip6t_REJECT: ECHOREPLY is not supported [ 335.007228][ T4333] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 335.050169][ T4333] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 335.088888][ T4333] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 335.134937][ T4333] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 335.183399][ T4333] logitech-hidpp-device 0003:046D:C090.0003: unknown main item tag 0x0 [ 335.281798][ T4333] logitech-hidpp-device 0003:046D:C090.0003: hidraw0: USB HID v0.00 Device [HID 046d:c090] on usb-dummy_hcd.5-1/input0 [ 335.369507][ T4333] usb 6-1: USB disconnect, device number 3 [ 337.178064][ T7477] device syzkaller0 entered promiscuous mode [ 337.207311][ T7474] fido_id[7474]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 337.239176][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.5.868'. [ 337.583381][ T7481] bridge0: port 3(veth0_to_bond) entered blocking state [ 337.590879][ T7481] bridge0: port 3(veth0_to_bond) entered disabled state [ 337.602985][ T7481] device veth0_to_bond entered promiscuous mode [ 337.611644][ T7481] bridge0: port 3(veth0_to_bond) entered blocking state [ 337.619085][ T7481] bridge0: port 3(veth0_to_bond) entered forwarding state [ 341.923395][ T7589] device syzkaller0 entered promiscuous mode [ 343.712009][ T7605] device syzkaller0 entered promiscuous mode [ 346.933534][ T7631] netlink: 'syz.1.895': attribute type 8 has an invalid length. [ 348.884760][ T7639] device syzkaller0 entered promiscuous mode [ 349.239006][ T7653] capability: warning: `syz.2.901' uses deprecated v2 capabilities in a way that may be insecure [ 352.209338][ T7692] device syzkaller0 entered promiscuous mode [ 352.251043][ T7698] ip6t_REJECT: ECHOREPLY is not supported [ 354.792759][ T7737] x_tables: duplicate underflow at hook 1 [ 356.603862][ T7751] device syzkaller0 entered promiscuous mode [ 359.416230][ T7810] device syzkaller0 entered promiscuous mode [ 359.895993][ T7819] netlink: 60 bytes leftover after parsing attributes in process `syz.2.944'. [ 361.288224][ T7840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.949'. [ 361.912733][ T7844] netlink: 20 bytes leftover after parsing attributes in process `syz.5.952'. [ 362.398779][ T22] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 362.493339][ T22] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 367.351222][ T7962] netlink: 4 bytes leftover after parsing attributes in process `syz.0.985'. [ 368.662328][ T7981] netlink: 24 bytes leftover after parsing attributes in process `syz.5.987'. [ 372.496375][ T8054] block device autoloading is deprecated and will be removed. [ 374.262659][ T8074] block device autoloading is deprecated and will be removed. [ 374.841512][ T22] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 375.155842][ T8089] x_tables: duplicate underflow at hook 1 [ 375.183399][ T8089] loop1: detected capacity change from 0 to 128 [ 375.541581][ T22] usb 1-1: Using ep0 maxpacket: 8 [ 375.578080][ T22] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 375.885124][ T22] usb 1-1: config 0 has no interface number 0 [ 375.903058][ T22] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 375.982966][ T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.021650][ T22] usb 1-1: Product: syz [ 376.036263][ T22] usb 1-1: Manufacturer: syz [ 376.040920][ T22] usb 1-1: SerialNumber: syz [ 376.258091][ T22] usb 1-1: config 0 descriptor?? [ 376.761656][ T22] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 376.783634][ T22] usb 1-1: No valid video chain found. [ 376.790820][ T22] usb 1-1: USB disconnect, device number 8 [ 385.110251][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.116762][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.772174][ T8184] device syzkaller0 entered promiscuous mode [ 393.947598][ T8243] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1048'. [ 410.309880][ T8397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 410.317520][ T8397] IPv6: NLM_F_CREATE should be set when creating new route [ 414.966658][ T8455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 414.973985][ T8455] IPv6: NLM_F_CREATE should be set when creating new route [ 416.410827][ T8470] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1105'. [ 416.571161][ T8472] sch_tbf: burst 88 is lower than device veth3 mtu (1514) ! [ 417.112253][ T8477] xt_policy: neither incoming nor outgoing policy selected [ 418.493272][ T8500] device syzkaller0 entered promiscuous mode [ 421.718030][ T8557] x_tables: duplicate underflow at hook 1 [ 422.880030][ T8567] device syzkaller0 entered promiscuous mode [ 425.794972][ T8604] binder: 8600:8604 ioctl 4018620d 0 returned -22 [ 426.362934][ T8606] "syz.0.1133" (8606) uses obsolete ecb(arc4) skcipher [ 426.812427][ T126] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 427.061631][ T126] usb 1-1: Using ep0 maxpacket: 16 [ 427.083656][ T126] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 427.121635][ T8617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1138'. [ 427.171576][ T126] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 427.202016][ T126] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 427.231862][ T126] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 23 [ 427.266431][ T126] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 427.296203][ T126] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 427.319700][ T126] usb 1-1: SerialNumber: syz [ 427.338338][ T8610] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 427.345932][ T8610] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 427.423375][ T8624] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 429.086854][ T126] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 429.100481][ T126] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 429.109086][ T126] usb 1-1: USB disconnect, device number 9 [ 434.372676][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 434.372689][ T26] audit: type=1326 audit(2000000069.650:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 434.430568][ T26] audit: type=1326 audit(2000000069.650:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 434.608581][ T26] audit: type=1326 audit(2000000069.650:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 434.641739][ T26] audit: type=1326 audit(2000000069.650:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 434.801141][ T26] audit: type=1326 audit(2000000069.650:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 434.989656][ T26] audit: type=1326 audit(2000000069.650:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 435.127993][ T8682] device syzkaller0 entered promiscuous mode [ 435.157055][ T26] audit: type=1326 audit(2000000069.650:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 435.221513][ T26] audit: type=1326 audit(2000000069.650:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 435.449919][ T8689] x_tables: duplicate underflow at hook 1 [ 435.487433][ T26] audit: type=1326 audit(2000000069.650:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 436.164116][ T26] audit: type=1326 audit(2000000069.700:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8674 comm="syz.1.1148" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21d9b9acb9 code=0x7ffc0000 [ 436.418431][ T8710] netlink: 844 bytes leftover after parsing attributes in process `syz.5.1155'. [ 438.575034][ T8746] x_tables: duplicate underflow at hook 1 [ 440.175703][ T8770] block device autoloading is deprecated and will be removed. [ 443.168082][ T8804] x_tables: duplicate underflow at hook 1 [ 445.580966][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.587440][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.759451][ T4333] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 449.770090][ T8839] block device autoloading is deprecated and will be removed. [ 450.307781][ T8841] loop2: detected capacity change from 0 to 256 [ 450.433060][ T8841] ======================================================= [ 450.433060][ T8841] WARNING: The mand mount option has been deprecated and [ 450.433060][ T8841] and is ignored by this kernel. Remove the mand [ 450.433060][ T8841] option from the mount to silence this warning. [ 450.433060][ T8841] ======================================================= [ 450.787575][ T8841] exfat: Unknown parameter 'Î' [ 451.784761][ T8864] x_tables: duplicate underflow at hook 1 [ 453.411971][ T8876] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 455.706422][ T8882] block device autoloading is deprecated and will be removed. [ 455.723765][ T8882] loop0: detected capacity change from 0 to 764 [ 455.779521][ T8882] Symlink component flag not implemented [ 455.785321][ T8882] Symlink component flag not implemented (116) [ 456.432560][ T8897] block device autoloading is deprecated and will be removed. [ 457.378230][ T8906] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1213'. [ 458.512533][ T8916] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1217'. [ 459.652390][ T8923] loop0: detected capacity change from 0 to 256 [ 459.674525][ T8923] exfat: Unknown parameter 'Î' [ 462.141471][ T4336] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 462.331588][ T4336] usb 6-1: Using ep0 maxpacket: 32 [ 462.338739][ T4336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.412198][ T4336] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.445621][ T4336] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 462.475995][ T4336] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.505905][ T4336] usb 6-1: config 0 descriptor?? [ 462.971084][ T4336] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 463.012738][ T8956] loop4: detected capacity change from 0 to 512 [ 463.094499][ T8956] EXT4-fs warning (device loop4): ext4_enable_quotas:7087: Failed to enable quota tracking (type=1, err=-13, ino=4). Please run e2fsck to fix. [ 463.154156][ T8956] EXT4-fs (loop4): mount failed [ 463.259707][ T4336] usb 6-1: USB disconnect, device number 4 [ 463.352969][ T8965] device bridge2 entered promiscuous mode [ 463.396781][ T8959] fido_id[8959]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 465.231933][ T8988] netlink: 844 bytes leftover after parsing attributes in process `syz.2.1235'. [ 467.780484][ T9012] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1242'. [ 469.916685][ T9022] loop0: detected capacity change from 0 to 512 [ 469.973470][ T9022] ext4: Unknown parameter 'grpquota.nouid32' [ 469.984081][ T9027] loop4: detected capacity change from 0 to 128 [ 470.093822][ T9022] EXT4-fs error (device loop0): ext4_iget_extra_inode:4756: inode #15: comm syz.0.1244: corrupted in-inode xattr [ 470.149698][ T9022] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1244: couldn't read orphan inode 15 (err -117) [ 471.283233][ T9022] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 471.360798][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 472.513606][ T9044] loop4: detected capacity change from 0 to 128 [ 472.541229][ T9045] loop0: detected capacity change from 0 to 512 [ 472.639865][ T9045] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 472.660252][ T9044] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 472.688129][ T9045] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 472.699282][ T9044] ext4 filesystem being mounted at /251/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 472.759800][ T9044] fscrypt (loop4, inode 12): Direct key flag not allowed with different contents and filenames modes [ 472.785453][ T9045] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 472.831197][ T9045] EXT4-fs (loop0): 1 truncate cleaned up [ 472.837196][ T9045] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 473.293729][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 473.317165][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 475.217861][ T9075] device bridge3 entered promiscuous mode [ 480.060952][ T9126] device bridge5 entered promiscuous mode [ 481.366865][ T9144] loop0: detected capacity change from 0 to 256 [ 481.396944][ T9144] exfat: Unknown parameter 'Î' [ 487.390014][ T9201] tmpfs: Bad value for 'mpol' [ 489.386771][ T4754] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.736499][ T9222] loop0: detected capacity change from 0 to 512 [ 489.741584][ T4754] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.763951][ T9222] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 489.807112][ T9222] EXT4-fs (loop0): 1 truncate cleaned up [ 489.821472][ T9222] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 489.836978][ T4754] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.944209][ T4754] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.944491][ T4273] EXT4-fs (loop0): unmounting filesystem. [ 491.066765][ T4336] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 491.246140][ T9245] loop4: detected capacity change from 0 to 128 [ 491.258274][ T9245] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 491.301695][ T4336] usb 2-1: Using ep0 maxpacket: 16 [ 491.333804][ T4336] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 491.447743][ T9245] x_tables: duplicate underflow at hook 1 [ 491.537395][ T4270] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 491.551946][ T4270] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 491.565336][ T4270] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 491.592190][ T4270] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 491.606947][ T4270] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 491.617825][ T4270] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 491.742726][ T4336] usb 2-1: config 1 has an invalid descriptor of length 59, skipping remainder of the config [ 491.811493][ T4336] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 491.830148][ T4336] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 491.880677][ T4336] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 491.890236][ T4336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 491.903875][ T4336] usb 2-1: Product: syz [ 491.908106][ T4336] usb 2-1: Manufacturer: syz [ 491.918392][ T4336] usb 2-1: SerialNumber: syz [ 492.782679][ T4336] usb 2-1: 0:2 : does not exist [ 492.821739][ T4336] usb 2-1: USB disconnect, device number 7 [ 492.974282][ T9258] Cannot find set identified by id 65534 to match [ 493.722624][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 493.890631][ T8888] udevd[8888]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 494.149217][ T9243] chnl_net:caif_netlink_parms(): no params data found [ 494.985372][ T9243] bridge0: port 1(bridge_slave_0) entered blocking state [ 495.015470][ T9243] bridge0: port 1(bridge_slave_0) entered disabled state [ 495.039369][ T9243] device bridge_slave_0 entered promiscuous mode [ 495.126329][ T9243] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.322769][ T9243] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.341104][ T9243] device bridge_slave_1 entered promiscuous mode [ 495.725328][ T9243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 495.771686][ T4270] Bluetooth: hci0: command 0x041b tx timeout [ 495.867035][ T9243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.214353][ T9243] team0: Port device team_slave_0 added [ 496.312480][ T9243] team0: Port device team_slave_1 added [ 496.370914][ T9301] 9pnet_fd: Insufficient options for proto=fd [ 496.582722][ T4754] device hsr_slave_0 left promiscuous mode [ 496.595993][ T4754] device hsr_slave_1 left promiscuous mode [ 496.603779][ T4754] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 496.611714][ T4754] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.619694][ T4754] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 496.628001][ T4754] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.642905][ T4754] device veth0_to_bond left promiscuous mode [ 496.649085][ T4754] bridge0: port 3(veth0_to_bond) entered disabled state [ 496.664420][ T4754] device bridge_slave_1 left promiscuous mode [ 496.680901][ T4754] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.696900][ T4754] device bridge_slave_0 left promiscuous mode [ 496.703468][ T4754] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.728774][ T7] libceph: connect (1)[c::]:6789 error -101 [ 496.741992][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 496.759521][ T4754] device veth1_macvtap left promiscuous mode [ 496.765785][ T4754] device veth0_macvtap left promiscuous mode [ 496.772035][ T4754] device veth1_vlan left promiscuous mode [ 496.777938][ T4754] device veth0_vlan left promiscuous mode [ 496.907350][ T9320] x_tables: duplicate underflow at hook 1 [ 497.568526][ T9284] ceph: No mds server is up or the cluster is laggy [ 497.579091][ T7] libceph: connect (1)[c::]:6789 error -101 [ 497.585362][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 497.841677][ T4270] Bluetooth: hci0: command 0x040f tx timeout [ 498.261772][ T4333] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 498.461599][ T4333] usb 1-1: Using ep0 maxpacket: 16 [ 498.472433][ T4333] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 498.507668][ T4333] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 498.523633][ T4333] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 498.550428][ T4333] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 498.599928][ T4333] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 498.670966][ T4333] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.696654][ T4333] usb 1-1: Product: syz [ 498.711149][ T4333] usb 1-1: Manufacturer: syz [ 498.716146][ T4333] usb 1-1: SerialNumber: syz [ 498.957828][ T4333] usb 1-1: 0:2 : does not exist [ 498.991762][ T4333] usb 1-1: USB disconnect, device number 10 [ 499.181610][ T4336] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 499.238180][ T8888] udevd[8888]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 499.365948][ T4336] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 499.375300][ T4336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.396950][ T4336] usb 3-1: config 0 descriptor?? [ 499.403610][ T4754] team0 (unregistering): Port device team_slave_1 removed [ 499.407615][ T4336] cp210x 3-1:0.0: cp210x converter detected [ 499.455792][ T4754] team0 (unregistering): Port device team_slave_0 removed [ 499.509758][ T4754] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.585573][ T4754] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.654835][ T9343] x_tables: duplicate underflow at hook 1 [ 499.921634][ T4270] Bluetooth: hci0: command 0x0419 tx timeout [ 500.034828][ T4336] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 500.095180][ T4336] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 500.136670][ T9345] 9pnet_fd: Insufficient options for proto=fd [ 500.183128][ T4336] usb 3-1: cp210x converter now attached to ttyUSB0 [ 500.249617][ T4336] usb 3-1: USB disconnect, device number 5 [ 500.315783][ T4336] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 500.335734][ T4336] cp210x 3-1:0.0: device disconnected [ 500.468850][ T9349] x_tables: duplicate underflow at hook 1 [ 501.508909][ T4754] bond0 (unregistering): Released all slaves [ 501.522085][ T9357] block device autoloading is deprecated and will be removed. [ 501.849447][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 501.863266][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 501.889629][ T9243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 502.474462][ T9243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 502.511429][ T9243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 502.577518][ T9243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 503.242120][ T22] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 503.283499][ T9375] 9pnet_fd: Insufficient options for proto=fd [ 503.405275][ T9243] device hsr_slave_0 entered promiscuous mode [ 503.428992][ T9243] device hsr_slave_1 entered promiscuous mode [ 503.441702][ T22] usb 3-1: Using ep0 maxpacket: 16 [ 503.449318][ T22] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 503.468798][ T22] usb 3-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 503.543379][ T9243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 503.571759][ T9243] Cannot create hsr debugfs directory [ 504.121238][ T22] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 504.130352][ T22] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 504.302132][ T22] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 504.311236][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.361476][ T22] usb 3-1: Product: syz [ 504.365676][ T22] usb 3-1: Manufacturer: syz [ 504.370582][ T22] usb 3-1: SerialNumber: syz [ 505.159085][ T22] usb 3-1: 0:2 : does not exist [ 505.317588][ T9395] loop4: detected capacity change from 0 to 128 [ 505.330457][ T9395] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 505.397071][ T22] usb 3-1: USB disconnect, device number 6 [ 506.154605][ T9243] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 506.244197][ T8888] udevd[8888]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 506.278960][ T9243] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 506.367939][ T9243] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 506.552629][ T9243] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 506.575195][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.582384][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 508.336531][ T9243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.444800][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 508.477422][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 508.532270][ T9243] 8021q: adding VLAN 0 to HW filter on device team0 [ 509.282949][ T9432] Set syz1 is full, maxelem 65536 reached [ 512.293021][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 512.312038][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 512.363015][ T4519] bridge0: port 1(bridge_slave_0) entered blocking state [ 512.370198][ T4519] bridge0: port 1(bridge_slave_0) entered forwarding state [ 512.430566][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 512.440217][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 512.476915][ T4519] bridge0: port 2(bridge_slave_1) entered blocking state [ 512.484171][ T4519] bridge0: port 2(bridge_slave_1) entered forwarding state [ 512.518020][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 512.636489][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 512.825552][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 512.848410][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 512.897798][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 512.916862][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 512.942077][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 512.961081][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 512.983154][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 513.008896][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 513.026700][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 513.063656][ T9466] Error parsing options; rc = [-22] [ 513.069647][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 513.173047][ T9243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 513.267486][ T9470] netlink: 'syz.4.1357': attribute type 2 has an invalid length. [ 513.317063][ T9470] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1357'. [ 513.362322][ T9474] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 513.530194][ T9480] block device autoloading is deprecated and will be removed. [ 514.021559][ T4373] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 514.241680][ T4373] usb 1-1: Using ep0 maxpacket: 8 [ 514.268125][ T4373] usb 1-1: unable to get BOS descriptor or descriptor too short [ 514.411891][ T4373] usb 1-1: config 4 interface 0 has no altsetting 0 [ 514.558675][ T4373] usb 1-1: string descriptor 0 read error: -22 [ 514.649018][ T4373] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 514.774876][ T4373] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.977483][ T4373] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 515.361661][ T4373] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 515.415443][ T4373] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 515.454602][ T4373] usb 1-1: media controller created [ 515.483247][ T9500] x_tables: duplicate underflow at hook 1 [ 516.163094][ T4373] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 516.172212][ T9504] 9pnet_fd: Insufficient options for proto=fd [ 516.243479][ T9495] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1363'. [ 516.272284][ T4373] zl10353_read_register: readreg error (reg=127, ret==0) [ 516.441896][ T4373] usb 1-1: USB disconnect, device number 11 [ 516.558471][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 516.576136][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 516.654709][ T9243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 519.078853][ T9552] x_tables: duplicate underflow at hook 1 [ 521.007865][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 521.088140][ T4519] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 521.184960][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 521.204931][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 521.393414][ T9243] device veth0_vlan entered promiscuous mode [ 521.412257][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 521.427932][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 521.455282][ T9243] device veth1_vlan entered promiscuous mode [ 521.531006][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 521.552406][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 521.582428][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 521.602221][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 521.637075][ T9243] device veth0_macvtap entered promiscuous mode [ 521.671762][ T9243] device veth1_macvtap entered promiscuous mode [ 521.726412][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.739143][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.750112][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.750662][ T9581] 9pnet_fd: Insufficient options for proto=fd [ 521.761283][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.778123][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.789157][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.799493][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.811569][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.833733][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.885906][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 521.897683][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 521.962686][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 521.987953][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 522.105291][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.144063][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.196128][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.267679][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.506999][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.791555][ T9586] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 522.806717][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.821380][ T9243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 522.881446][ T9243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 522.897931][ T9243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.934069][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 522.947672][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 523.100184][ T9243] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.211021][ T9243] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.782070][ T9243] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.860800][ T9243] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 524.511219][ T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.528499][ T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.574969][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 524.616704][ T7568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 524.780949][ T7568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 524.907758][ T7549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 527.608672][ T9658] x_tables: duplicate underflow at hook 1 [ 528.942093][ T9666] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1400'. [ 529.696962][ T9666] device bond1 entered promiscuous mode [ 529.765046][ T9666] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.915422][ T9679] device syzkaller0 entered promiscuous mode [ 530.901593][ T4336] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 531.093813][ T4336] usb 7-1: config 0 has no interfaces? [ 531.099350][ T4336] usb 7-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 531.141494][ T4336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.189701][ T4336] usb 7-1: config 0 descriptor?? [ 531.791564][ T4336] usb 7-1: USB disconnect, device number 2 [ 533.317954][ T9618] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 534.291442][ T9618] usb 2-1: Using ep0 maxpacket: 16 [ 534.298528][ T9618] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 534.540911][ T9618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.776462][ T9618] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 534.844733][ T9618] usb 2-1: too many endpoints for config 1 interface 2 altsetting 255: 255, using maximum allowed: 30 [ 534.900066][ T9751] 9pnet_fd: Insufficient options for proto=fd [ 535.018282][ T9618] usb 2-1: config 1 interface 2 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 535.680696][ T9618] usb 2-1: config 1 interface 2 has no altsetting 0 [ 535.776964][ T9618] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 535.862274][ T9746] Set syz1 is full, maxelem 65536 reached [ 535.999648][ T9618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.073680][ T9618] usb 2-1: Product: syz [ 536.286737][ T9618] usb 2-1: Manufacturer: syz [ 536.310559][ T9618] usb 2-1: SerialNumber: syz [ 536.352598][ T9618] usb 2-1: can't set config #1, error -71 [ 536.653065][ T9618] usb 2-1: USB disconnect, device number 8 [ 540.138671][ T9804] 9pnet_fd: Insufficient options for proto=fd [ 541.938041][ T9823] IPVS: length: 139 != 8 [ 543.221469][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 543.411595][ T22] usb 2-1: Using ep0 maxpacket: 8 [ 543.419791][ T22] usb 2-1: config 0 has an invalid interface number: 31 but max is 0 [ 543.459350][ T22] usb 2-1: config 0 has no interface number 0 [ 543.507753][ T22] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 543.549573][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.573213][ T22] usb 2-1: Product: syz [ 543.577434][ T22] usb 2-1: Manufacturer: syz [ 543.617807][ T9840] device syzkaller0 entered promiscuous mode [ 543.633556][ T22] usb 2-1: SerialNumber: syz [ 543.664743][ T22] usb 2-1: config 0 descriptor?? [ 543.777983][ T9842] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 543.899521][ T22] usb 2-1: Found UVC 0.04 device syz (046d:08c3) [ 543.919537][ T22] usb 2-1: No streaming interface found for terminal 6. [ 544.006411][ T9847] block device autoloading is deprecated and will be removed. [ 544.133257][ T22] usb 2-1: Failed to create links for entity 5 [ 544.139576][ T22] usb 2-1: Failed to register entities (-22). [ 544.224548][ T22] usb 2-1: USB disconnect, device number 9 [ 549.269321][ T9888] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 549.292115][ T9888] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 549.356473][ T9888] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 549.399263][ T9888] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 549.439733][ T9888] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 549.498627][ T9888] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 549.522026][ T9888] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 549.528056][ T9888] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 549.588565][ T9888] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 549.607951][ T9888] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 549.631524][ T9888] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 549.676076][ T9888] Bluetooth: hci4: Suspend notifier action (1) failed: -4 [ 549.694895][ T9888] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 549.703741][ T9888] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 549.741047][ T9888] Bluetooth: hci0: Suspend notifier action (1) failed: -4 [ 550.381486][ T126] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 550.432167][ T9931] 9pnet_fd: Insufficient options for proto=fd [ 550.450866][ T9932] x_tables: duplicate underflow at hook 1 [ 550.481552][ T4270] Bluetooth: hci1: command 0x0c1a tx timeout [ 550.653150][ T126] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 550.675870][ T126] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 550.996035][ T126] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 551.034705][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.438651][ T126] hub 7-1:4.0: USB hub found [ 551.451558][ T4270] Bluetooth: hci2: command 0x0c1a tx timeout [ 551.601556][ T47] Bluetooth: hci3: command 0x0c1a tx timeout [ 551.691446][ T47] Bluetooth: hci4: command 0x0c1a tx timeout [ 551.742155][ T126] hub 7-1:4.0: 2 ports detected [ 551.761441][ T47] Bluetooth: hci0: command 0x0c1a tx timeout [ 551.801580][ T126] usb 7-1: selecting invalid altsetting 1 [ 551.821379][ T126] hub 7-1:4.0: Using single TT (err -22) [ 552.139120][ T126] hub 7-1:4.0: hub_hub_status failed (err = -71) [ 552.168660][ T126] hub 7-1:4.0: config failed, can't get hub status (err -71) [ 553.215055][ T47] Bluetooth: hci1: command 0x0406 tx timeout [ 553.392409][ T126] usb 7-1: USB disconnect, device number 3 [ 553.521393][ T4270] Bluetooth: hci2: command 0x0406 tx timeout [ 553.681564][ T47] Bluetooth: hci3: command 0x0406 tx timeout [ 553.753405][ T9961] device syzkaller0 entered promiscuous mode [ 553.761777][ T47] Bluetooth: hci4: command 0x0406 tx timeout [ 553.841488][ T47] Bluetooth: hci0: command 0x0406 tx timeout [ 556.114026][ T4336] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 556.227548][T10011] NILFS (nullb0): couldn't find nilfs on the device [ 557.253193][ T4336] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 557.282141][ T4336] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 557.326870][ T4336] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 557.376113][ T4336] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 557.412693][ T4336] usb 7-1: SerialNumber: syz [ 557.676291][ T4336] usb 7-1: 0:2 : does not exist [ 558.480882][ T4336] usb 7-1: unit 5: unexpected type 0x03 [ 558.498752][ T4336] usb 7-1: USB disconnect, device number 4 [ 558.942466][ T9950] udevd[9950]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 559.720338][T10052] x_tables: duplicate underflow at hook 1 [ 560.695013][T10037] blktrace: Concurrent blktraces are not allowed on loop12 [ 560.761521][ T126] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 560.951414][ T126] usb 3-1: Using ep0 maxpacket: 16 [ 560.958233][ T126] usb 3-1: config 0 has an invalid interface number: 180 but max is 0 [ 560.999161][ T126] usb 3-1: config 0 has no interface number 0 [ 561.018655][ T126] usb 3-1: config 0 interface 180 has no altsetting 0 [ 561.044412][ T126] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=e8.1f [ 561.079111][ T126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.095335][ T126] usb 3-1: Product: syz [ 561.110021][ T126] usb 3-1: Manufacturer: syz [ 561.117201][ T126] usb 3-1: SerialNumber: syz [ 561.138004][ T126] usb 3-1: config 0 descriptor?? [ 561.317641][T10086] device syzkaller0 entered promiscuous mode [ 561.472756][ T126] viperboard 3-1:0.180: version 0.00 found at bus 003 address 007 [ 561.542027][ T126] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100 [ 561.565251][ T126] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5 [ 561.671579][ T126] usb 3-1: USB disconnect, device number 7 [ 562.427173][ T26] kauditd_printk_skb: 13 callbacks suppressed [ 562.427188][ T26] audit: type=1326 audit(2000000017.720:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 562.461666][ T26] audit: type=1326 audit(2000000017.720:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 562.484849][ T26] audit: type=1326 audit(2000000017.730:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 562.602667][ T26] audit: type=1326 audit(2000000017.730:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 562.912976][T10109] x_tables: duplicate underflow at hook 1 [ 564.138451][ T26] audit: type=1326 audit(2000000017.730:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 564.382259][ T26] audit: type=1326 audit(2000000017.730:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 564.416450][ T26] audit: type=1326 audit(2000000017.730:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 564.489462][ T26] audit: type=1326 audit(2000000017.730:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 564.489493][ T26] audit: type=1326 audit(2000000017.730:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 564.489517][ T26] audit: type=1326 audit(2000000017.730:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10099 comm="syz.0.1494" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fe5f339acb9 code=0x7ffc0000 [ 565.320886][T10139] device syzkaller0 entered promiscuous mode [ 568.005843][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.012952][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.048808][T10191] device syzkaller0 entered promiscuous mode [ 576.327933][ T4373] libceph: connect (1)[c::]:6789 error -101 [ 576.334152][ T4373] libceph: mon0 (1)[c::]:6789 connect error [ 576.460380][T10254] ceph: No mds server is up or the cluster is laggy [ 576.984890][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1536'. [ 577.812399][T10289] netlink: 'syz.2.1538': attribute type 10 has an invalid length. [ 578.682173][T10289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.740504][T10289] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 578.798783][T10290] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 578.832837][T10290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.866303][T10290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.942528][T10290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.949988][T10290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 579.656259][T10290] bond0: (slave batadv0): Releasing backup interface [ 580.985494][T10322] x_tables: duplicate underflow at hook 1 [ 586.949234][T10394] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1557'. [ 588.210524][T10413] x_tables: duplicate underflow at hook 1 [ 592.458883][T10450] fuse: Unknown parameter 'grou00000000000000000000' [ 593.566605][T10484] netlink: 864 bytes leftover after parsing attributes in process `syz.4.1576'. [ 594.613039][T10492] x_tables: duplicate underflow at hook 1 [ 595.297950][T10499] Bluetooth: MGMT ver 1.22 [ 596.154354][T10516] fuse: Unknown parameter 'grou00000000000000000000' [ 597.022094][T10525] netlink: 'syz.1.1587': attribute type 1 has an invalid length. [ 597.735348][T10525] device bond2 entered promiscuous mode [ 597.755590][T10525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 597.777271][T10534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1587'. [ 598.835941][T10525] bond2: (slave bridge3): making interface the new active one [ 598.863817][T10525] device bridge3 entered promiscuous mode [ 598.889704][T10525] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 598.929051][ T7551] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 599.152947][T10547] binder: 10546:10547 ioctl c0306201 0 returned -14 [ 599.236302][T10549] tipc: Enabled bearer , priority 0 [ 599.254054][T10549] device syzkaller0 entered promiscuous mode [ 599.294533][T10548] tipc: Resetting bearer [ 599.495328][T10548] tipc: Disabling bearer [ 600.568445][T10564] netlink: 864 bytes leftover after parsing attributes in process `syz.2.1594'. [ 602.047778][T10587] block device autoloading is deprecated and will be removed. [ 602.063437][T10594] syz.2.1600 uses obsolete (PF_INET,SOCK_PACKET) [ 603.366686][T10607] tipc: Enabled bearer , priority 0 [ 603.575677][T10607] device syzkaller0 entered promiscuous mode [ 603.999823][T10605] tipc: Resetting bearer [ 604.190009][T10605] tipc: Disabling bearer [ 604.355329][T10623] 9pnet: Could not find request transport: fd0x0000000000000003 [ 606.456633][T10668] x_tables: duplicate underflow at hook 1 [ 608.239510][T10689] 9pnet_fd: Insufficient options for proto=fd [ 608.271412][ T126] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 608.384474][T10691] tipc: Enabled bearer , priority 0 [ 608.478533][T10691] device syzkaller0 entered promiscuous mode [ 608.496036][ T126] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 608.521453][ T126] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 608.584654][ T126] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 608.629126][ T126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 608.668965][ T126] usb 3-1: SerialNumber: syz [ 608.878280][T10696] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 608.905976][ T126] usb 3-1: 0:2 : does not exist [ 608.995186][ T126] usb 3-1: USB disconnect, device number 8 [ 609.267566][T10696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 609.294137][T10696] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.383774][T10702] udevd[10702]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 609.696076][T10687] tipc: Resetting bearer [ 609.981487][T10687] tipc: Disabling bearer [ 610.172204][ T126] tipc: Node number set to 1793814334 [ 611.041105][T10735] device syzkaller0 entered promiscuous mode [ 616.047213][T10770] tipc: Enabled bearer , priority 0 [ 616.082206][T10770] device syzkaller0 entered promiscuous mode [ 616.114371][T10769] tipc: Resetting bearer [ 616.219382][T10769] tipc: Disabling bearer [ 618.931484][ T4321] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 619.151401][ T4321] usb 5-1: Using ep0 maxpacket: 16 [ 619.158396][ T4321] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 619.221654][ T4321] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 619.268727][ T4321] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 619.302644][ T4321] usb 5-1: Product: syz [ 619.327816][ T4321] usb 5-1: Manufacturer: syz [ 619.358056][ T4321] usb 5-1: SerialNumber: syz [ 619.391042][ T4321] usb 5-1: config 0 descriptor?? [ 619.419978][ T4321] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 619.541396][ T4321] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 620.539123][ T4321] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 622.680968][ T4321] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 622.707615][ T4321] em28xx 5-1:0.0: board has no eeprom [ 623.920734][T10857] fuse: Unknown parameter 'group_id00000000000000000000' [ 623.941389][ T4321] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 623.949285][ T4321] em28xx 5-1:0.0: dvb set to bulk mode. [ 623.992928][ T14] em28xx 5-1:0.0: Binding DVB extension [ 624.031493][ T4321] usb 5-1: USB disconnect, device number 10 [ 624.038037][ T4321] em28xx 5-1:0.0: Disconnecting em28xx [ 624.497094][ T14] em28xx 5-1:0.0: Registering input extension [ 625.643038][ T4321] em28xx 5-1:0.0: Closing input extension [ 625.861227][ T4321] em28xx 5-1:0.0: Freeing device [ 626.241635][ T4321] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 626.451554][ T4321] usb 5-1: Using ep0 maxpacket: 8 [ 626.463024][ T4321] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 627.491341][ T4321] usb 5-1: config 179 has no interface number 0 [ 627.498093][ T4321] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 627.509726][ T4321] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 627.521491][ T4321] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 627.533143][ T4321] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 627.641749][ T4321] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 627.655658][ T4321] usb 5-1: config 179 interface 65 has no altsetting 0 [ 627.663359][ T4321] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 627.673517][ T4321] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 627.719349][ T4321] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input10 [ 627.897369][T10886] 9pnet_fd: Insufficient options for proto=fd [ 627.965732][ T22] usb 5-1: USB disconnect, device number 11 [ 627.965767][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 627.982485][ T22] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 627.989998][ C0] dummy_hcd dummy_hcd.4: timer fired with no URBs pending? [ 628.382032][T10895] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1671'. [ 629.265145][ T9618] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 630.309379][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 630.315757][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.685250][ T9618] usb 2-1: Using ep0 maxpacket: 16 [ 630.693945][ T9618] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 630.741377][ T22] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 630.769895][ T9618] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 630.783826][ T9618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.796120][ T9618] usb 2-1: Product: syz [ 630.801072][ T9618] usb 2-1: Manufacturer: syz [ 630.806044][ T9618] usb 2-1: SerialNumber: syz [ 630.830433][ T9618] usb 2-1: config 0 descriptor?? [ 630.849632][ T9618] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 630.871926][ T9618] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 630.936804][T10918] x_tables: duplicate underflow at hook 1 [ 630.988302][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 631.025867][ T22] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 631.061181][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.092367][ T22] usb 5-1: Product: syz [ 631.108268][ T22] usb 5-1: Manufacturer: syz [ 631.127013][ T22] usb 5-1: SerialNumber: syz [ 631.250059][ T22] usb 5-1: config 0 descriptor?? [ 631.420916][ T22] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected [ 631.572719][ T22] usb 5-1: Detected FT-X [ 631.695545][ T22] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 631.956672][ T9618] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 632.074770][T10927] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 632.082168][T10927] IPv6: NLM_F_CREATE should be set when creating new route [ 632.168682][ T22] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 632.411205][ T14] usb 5-1: USB disconnect, device number 12 [ 632.495635][ T14] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 632.523981][ T9618] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 632.557366][ T9618] em28xx 2-1:0.0: board has no eeprom [ 632.580602][ T14] ftdi_sio 5-1:0.0: device disconnected [ 633.009826][T10941] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1686'. [ 633.563679][ T9618] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 633.577969][ T9618] em28xx 2-1:0.0: dvb set to bulk mode. [ 633.788046][ T9618] em28xx 2-1:0.0: Binding DVB extension [ 634.883892][T10897] em28xx 2-1:0.0: reading from i2c device at 0x6 failed (error=-5) [ 634.932707][ T14] usb 2-1: USB disconnect, device number 10 [ 634.939286][ T14] em28xx 2-1:0.0: Disconnecting em28xx [ 635.451763][ T9618] em28xx 2-1:0.0: Registering input extension [ 635.483724][ T14] em28xx 2-1:0.0: Closing input extension [ 635.569991][ T14] em28xx 2-1:0.0: Freeing device [ 690.884324][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 690.890658][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 743.441252][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 743.448231][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P7551/1:b..l [ 743.456582][ C1] (detected by 1, t=10502 jiffies, g=46437, q=161 ncpus=2) [ 743.463946][ C1] task:kworker/u4:24 state:R running task stack:23952 pid:7551 ppid:2 flags:0x00004000 [ 743.475605][ C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet [ 743.483519][ C1] Call Trace: [ 743.486801][ C1] [ 743.489716][ C1] __schedule+0x11d1/0x40e0 [ 743.494224][ C1] ? mark_lock+0x94/0x320 [ 743.498564][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 743.504796][ C1] ? __sched_text_start+0x8/0x8 [ 743.509631][ C1] ? lock_chain_count+0x20/0x20 [ 743.514588][ C1] ? preempt_schedule_irq+0xb0/0x160 [ 743.520046][ C1] preempt_schedule_irq+0xbb/0x160 [ 743.525165][ C1] ? preempt_schedule_notrace+0x120/0x120 [ 743.530868][ C1] ? rcu_is_watching+0x11/0xa0 [ 743.535623][ C1] ? rcu_irq_exit_check_preempt+0xdb/0x210 [ 743.541423][ C1] irqentry_exit+0x63/0x70 [ 743.545831][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 743.551882][ C1] RIP: 0010:lock_acquire+0x225/0x4a0 [ 743.557173][ C1] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3d 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 43 c7 44 3d 08 00 00 00 00 65 48 8b 04 [ 743.576946][ C1] RSP: 0018:ffffc9000f427920 EFLAGS: 00000206 [ 743.583028][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 33ab2264f4057e00 [ 743.591010][ C1] RDX: 0000000000000000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0c20 [ 743.598963][ C1] RBP: ffffc9000f427a28 R08: dffffc0000000000 R09: 1ffffffff215e648 [ 743.606918][ C1] R10: dffffc0000000000 R11: fffffbfff215e649 R12: 0000000000000000 [ 743.614875][ C1] R13: 1ffff92001e84f30 R14: 0000000000000246 R15: dffffc0000000000 [ 743.623027][ C1] ? read_lock_is_recursive+0x10/0x10 [ 743.628558][ C1] ? batadv_primary_if_get_selected+0x77/0x410 [ 743.634696][ C1] ? batadv_iv_ogm_queue_add+0xcf0/0xcf0 [ 743.640347][ C1] batadv_iv_ogm_schedule+0x407/0xf10 [ 743.645707][ C1] ? batadv_iv_ogm_schedule+0x3e3/0xf10 [ 743.651266][ C1] ? batadv_iv_ogm_schedule+0x3e3/0xf10 [ 743.656998][ C1] ? batadv_iv_send_outstanding_bat_ogm_packet+0x840/0x840 [ 743.664203][ C1] batadv_iv_send_outstanding_bat_ogm_packet+0x72f/0x840 [ 743.671394][ C1] ? process_one_work+0x7b0/0x1160 [ 743.676496][ C1] process_one_work+0x8a2/0x1160 [ 743.681425][ C1] ? worker_detach_from_pool+0x240/0x240 [ 743.687045][ C1] ? _raw_spin_lock_irq+0xb7/0xf0 [ 743.692075][ C1] ? _raw_spin_lock_irqsave+0x100/0x100 [ 743.697652][ C1] ? kthread_data+0x4b/0xc0 [ 743.702250][ C1] worker_thread+0xaa2/0x1270 [ 743.706940][ C1] kthread+0x29d/0x330 [ 743.711003][ C1] ? worker_clr_flags+0x1a0/0x1a0 [ 743.716016][ C1] ? kthread_blkcg+0xd0/0xd0 [ 743.720605][ C1] ret_from_fork+0x1f/0x30 [ 743.725013][ C1] [ 743.728044][ C1] rcu: rcu_preempt kthread starved for 9976 jiffies! g46437 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 743.739149][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 743.749201][ C1] rcu: RCU grace-period kthread stack dump: [ 743.755090][ C1] task:rcu_preempt state:R running task stack:27184 pid:16 ppid:2 flags:0x00004000 [ 743.765957][ C1] Call Trace: [ 743.769220][ C1] [ 743.772138][ C1] __schedule+0x11d1/0x40e0 [ 743.776639][ C1] ? __sched_text_start+0x8/0x8 [ 743.781677][ C1] ? __mod_timer+0x91e/0xd00 [ 743.786263][ C1] schedule+0xb9/0x180 [ 743.790319][ C1] schedule_timeout+0x184/0x2d0 [ 743.795167][ C1] ? console_conditional_schedule+0x40/0x40 [ 743.801051][ C1] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 743.806925][ C1] ? update_process_times+0x1b0/0x1b0 [ 743.812310][ C1] ? prepare_to_swait_event+0x335/0x350 [ 743.817840][ C1] rcu_gp_fqs_loop+0x303/0x1340 [ 743.822677][ C1] ? rcu_gp_kthread+0x3b0/0x3b0 [ 743.827633][ C1] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 743.833770][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 743.838958][ C1] ? rcu_gp_init+0x14e0/0x14e0 [ 743.843712][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 743.849590][ C1] ? finish_swait+0xc3/0x1d0 [ 743.854251][ C1] rcu_gp_kthread+0x99/0x3b0 [ 743.858826][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 743.863921][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 743.869795][ C1] ? __kthread_parkme+0x162/0x1c0 [ 743.874827][ C1] kthread+0x29d/0x330 [ 743.878974][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 743.884086][ C1] ? kthread_blkcg+0xd0/0xd0 [ 743.888672][ C1] ret_from_fork+0x1f/0x30 [ 743.893077][ C1] [ 743.896079][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 743.902378][ C1] Sending NMI from CPU 1 to CPUs 0: [ 743.907625][ C0] NMI backtrace for cpu 0 skipped: idling at default_idle+0xb/0x10 SYZFAIL: failed to send rpc fd=3 want=1512 sent=0 n=-1 (errno 32: Broken pipe) [ 745.495340][ T7543] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.600220][ T7543] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.744816][ T7543] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.829768][ T7543] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 745.971176][ T7543] tipc: Left network mode [ 746.915466][ T7543] device hsr_slave_0 left promiscuous mode [ 746.923468][ T7543] device hsr_slave_1 left promiscuous mode [ 746.930001][ T7543] device bridge_slave_1 left promiscuous mode [ 746.936927][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 746.946760][ T7543] device bridge_slave_0 left promiscuous mode [ 746.954163][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 746.983487][ T7543] device veth1_macvtap left promiscuous mode [ 746.989588][ T7543] device veth0_macvtap left promiscuous mode [ 746.996251][ T7543] device veth1_vlan left promiscuous mode [ 747.002459][ T7543] device veth0_vlan left promiscuous mode [ 747.785700][ T7543] team0 (unregistering): Port device team_slave_1 removed [ 747.831784][ T7543] team0 (unregistering): Port device team_slave_0 removed [ 747.876395][ T7543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 747.925442][ T7543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 748.230987][ T7543] bond0 (unregistering): Released all slaves [ 748.797007][ T7543] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.883614][ T7543] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.954067][ T7543] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.044266][ T7543] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.198238][ T7543] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.289033][ T7543] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.369303][ T7543] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.429602][ T7543] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.616620][ T7543] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.707977][ T7543] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.775411][ T7543] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 749.866040][ T7543] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 750.047682][ T7543] tipc: Left network mode [ 750.063359][ T7543] tipc: Left network mode [ 750.088509][ T7543] tipc: Left network mode [ 751.887973][ T7543] device hsr_slave_0 left promiscuous mode [ 751.894589][ T7543] device hsr_slave_1 left promiscuous mode [ 751.901049][ T7543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.910377][ T7543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.919468][ T7543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.927303][ T7543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.938986][ T7543] device bridge_slave_1 left promiscuous mode [ 751.945547][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.958218][ T7543] device bridge_slave_0 left promiscuous mode [ 751.965206][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.986242][ T7543] device hsr_slave_0 left promiscuous mode [ 751.996751][ T7543] device hsr_slave_1 left promiscuous mode [ 752.003923][ T7543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.015753][ T7543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.024562][ T7543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.033271][ T7543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.041015][ T7543] device bridge_slave_0 left promiscuous mode [ 752.047573][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.061634][ T7543] device hsr_slave_0 left promiscuous mode [ 752.068082][ T7543] device hsr_slave_1 left promiscuous mode [ 752.075046][ T7543] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 752.082823][ T7543] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 752.090666][ T7543] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 752.098830][ T7543] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 752.106857][ T7543] device bridge_slave_0 left promiscuous mode [ 752.113374][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.159414][ T7543] device veth1_macvtap left promiscuous mode [ 752.165550][ T7543] device veth0_macvtap left promiscuous mode [ 752.171978][ T7543] device veth1_vlan left promiscuous mode [ 752.179131][ T7543] device veth1_macvtap left promiscuous mode [ 752.186194][ T7543] device veth0_macvtap left promiscuous mode [ 752.192434][ T7543] device veth1_vlan left promiscuous mode [ 752.198212][ T7543] device veth0_vlan left promiscuous mode [ 752.205576][ T7543] device veth1_macvtap left promiscuous mode [ 752.211699][ T7543] device veth0_macvtap left promiscuous mode [ 752.217762][ T7543] device veth1_vlan left promiscuous mode [ 752.223614][ T7543] device veth0_vlan left promiscuous mode [ 752.326014][ T1266] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.335429][ T1266] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.982768][ T7543] team0 (unregistering): Port device team_slave_1 removed [ 753.026350][ T7543] team0 (unregistering): Port device team_slave_0 removed [ 753.068040][ T7543] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.113125][ T7543] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface