last executing test programs: 14m26.73751974s ago: executing program 2 (id=542): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYBLOB="dd3fd355ac7560b0df13cd6a1c9c8498679918bbd9fc2b4c9701cecbf57430e235d2d805349dc3a2442fe3940f8fac3ae189fc43b495abd467631a1f2d7fa0fe31463f"], 0x2c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, r1, 0x3) r5 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800008, &(0x7f0000000280)={[{@data_err_ignore}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000000100}, 0x0) setns(r5, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 14m21.082646361s ago: executing program 2 (id=552): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r9) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 14m19.473396442s ago: executing program 2 (id=557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="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", @ANYRES32, @ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) 14m18.459092644s ago: executing program 2 (id=562): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYBLOB="dd3fd355ac7560b0df13cd6a1c9c8498679918bbd9fc2b4c9701cecbf57430e235d2d805349dc3a2442fe3940f8fac3ae189fc43b495abd467631a1f2d7fa0fe31463f"], 0x2c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, r1, 0x3) r5 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800008, &(0x7f0000000280)={[{@data_err_ignore}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x800000000100}, 0x0) setns(r5, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 14m10.850600227s ago: executing program 2 (id=578): syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000bfd000/0x400000)=nil) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000005c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x540, 0x280, 0x1b0, 0x370, 0x370, 0x370, 0x470, 0x470, 0x470, 0x470, 0x470, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000010000000}}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x84}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xb}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x7f, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {0x1}, {0x87}, 0xfffffffd}}}, {{@uncond, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x370}}, {{@ipv6={@empty, @private0, [0xff, 0x0, 0xffffff00, 0xffffffff], [0xffffff00, 0xffffff, 0x0, 0xffffffff], 'geneve0\x00', 'xfrm0\x00', {0xff}, {}, 0x3a, 0x5, 0x0, 0x8}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x0, 0x4}}}, {{@ipv6={@private1, @local, [0xffffff00, 0xff, 0xff000000, 0xff], [0xff, 0xff, 0xffffffff, 0xff], 'veth0_to_bridge\x00', 'dummy0\x00', {0xff}, {}, 0x0, 0x3, 0x2, 0x50}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}, {0x62, 0x8, 0x7, 0xb, 0x30ba, 0x222}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a0) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = gettid() timer_create(0x1, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r4, 0x0) accept4(r4, 0x0, 0x0, 0x0) 14m6.851900195s ago: executing program 2 (id=580): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) inotify_init1(0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) 13m50.319807912s ago: executing program 32 (id=580): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000340)={[0xfffffffffffffffd]}, 0x8, 0x800) io_setup(0x1, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) inotify_init1(0x800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000780)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_PEER_MEASUREMENT_START(r4, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000007c0)={0x1c, r5, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) 15.86645613s ago: executing program 3 (id=2347): timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x3, 0x7, 0x50000}]}) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002bc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0xf4, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_CHAIN_USERDATA={0xd4, 0xc, "4d71c14fa46eabdd19f1eda67eb503312b5c0c2e1e44963d0ea41dcaa5410655abf3068c0bb635d959c723000f368af39d274e1a3144d0628bb659f455005e3a344c1b0b95b73fa39bd58fe5cf8c9827a8e9b66eb5ad5a0e3b9208921df9aea91e2aaf4f92450c31892bdec9afebc5726ee27f8f72fe7a51308b1ca00d28caf1b0532de9cd85eee39331f33e53d798874a285b588247a61315a4d91fdaa922b6c2f7bc51bd8ee5a5ed18aa1357928c10e34b57a4c46af516d9333e7eb7bb3649f58ffc4accdd311722698fda4bb3babb"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWTABLE={0x4c, 0x0, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELTABLE={0x10c, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0xf8, 0x6, "bec3d318f46f99ab652999cb840e1976ffd0fa74ad736a317c75d466dd8f5f80a2aaa9a2266e6838267a799300b70f454c50b28d5f0c3f380ce5881d36be1230ba06a7806d5e6a013e959a25a3386c1731a1039490460cb87549c5b59f3121076193039c665a29486f1da661a236801189e9624c6504834e5ab1fabe0fb03f4a4e4b3ec777b20ae01699d663fae5cff191273ed445a52bc27be993790d357d04fa4209bce59ac006bccfef7743e55c6f63a06a6a468db5bde3a40df3afe32b5cfad224f8f9e52d13b05289e990f5889fd8bffbfe0b20c824935d3d07917a5132087cac4990a0a4c7b3f0d58ce759155fcdab4ac1"}]}, @NFT_MSG_DELFLOWTABLE={0xe8, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0xfffffffffffffe26, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x6}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_HOOK={0x6c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_HOOK_DEVS={0x40, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg1\x00'}, {0x14, 0x1, 'virt_wifi0\x00'}, {0x14, 0x1, 'veth0\x00'}]}]}, @NFTA_FLOWTABLE_HOOK={0x20, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10001}, @NFTA_FLOWTABLE_HOOK_DEVS={0x4}]}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6d55c3c5}, @NFTA_HOOK_DEV={0x14, 0x3, 'ip6gre0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x91777a}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x428}, 0x1, 0x0, 0x0, 0x24044000}, 0x0) ioctl$AUTOFS_IOC_SETTIMEOUT(r1, 0x80049367, &(0x7f00000005c0)=0x8) 13.806230808s ago: executing program 3 (id=2351): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643db4efb2e38465fd45c8ea589f83afbd3af0ec3213fab9887425ed5583b233091f8d971793485c69ed76cd86be5d66bdc6c1c034f2921b8363f25db60971647ca40e3aca68cb236d1f484c9c5c6214bdd1f1303d9db23e53aa911ef6233407134582c7c97abee266294b8a94001e766d159ee51afca622ce788d7ff1b8abae3a3ea51d921872b129f9e61fa1bec0ddf832f48e616df56df5c44b9ec3543e10fce65b3817799edc88dc61ec0a477a7cbfb7626076fd616e7e0ea08d28059797021330e64c4b9a68ffb18d94b5241f43a9c327aedf93f9cc69bc10f1", @ANYRESDEC=0x0]) kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x280000) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000080)={&(0x7f00000006c0)=[{0x8001, 0x0, 0x1, 0x3}], 0x1, 0x20, 0x0, 0x6}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) fcntl$dupfd(r3, 0x406, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb27", 0x8a}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, 0x0, 0x0) 13.159912299s ago: executing program 4 (id=2352): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x28, 0x8, 0x76, 0xfffff020}, {0x6, 0x27, 0x1, 0x6}]}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000000), r1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="d80000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000069000400b80012800c0001006d6163766c616e00a80002800800010008000000080001001d000000080001000000000008000300010000000a000400aaaaaaaaaaaa0000700005800a000400bbbbbbbbbbbb00000a0004008e4964100e7900000a000400982c81cbdd1500000a0004000620724a1b2600000a0004000180c200000e00000a000400aaaaaaaaaaaa00000a000400ffffffffffff00000a000400ffffffffffff00000a000400aaaaaaaaaaaa00000800010001"], 0xd8}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r1) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000180)=0x0) sendmsg$NFC_CMD_DISABLE_SE(r1, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r4, 0x20, 0x70bd26, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}, @NFC_ATTR_SE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040094) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000c00)=ANY=[@ANYBLOB="1c040000", @ANYRES16=r2, @ANYBLOB="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"], 0x41c}}, 0x0) 12.565674978s ago: executing program 4 (id=2353): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYBLOB="dd3fd355ac7560b0df13cd6a1c9c8498679918bbd9fc2b4c9701cecbf57430e235d2d805349dc3a2442fe3940f8fac3ae189fc43b495abd467631a1f2d7fa0fe31463f"], 0x2c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, r1, 0x3) r5 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800008, &(0x7f0000000280)={[{@data_err_ignore}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$eJzs3c9rXNUeAPDvnfxq077XPHjw2rdpVloonbQ1tgqCERciWCjoVtswmYaYSaZkJqUJWbSIIIigxYWgG9dV686t6Nq/wY2ItFRNgxUXMnLnR5Lmd9KZTNt8PnCTc+6cO+d87517z5m5h5kA9qz+9E8m4khEfJhEHKqvTyKiq5rqjBiqlbs/P5dLlyQqldd/S6plFubncrFsm9SBeuZwRHz3bsTxzOp6SzOz48OFQn6qnh8oT1weKM3MnhibGB7Nj+Ynz5waHDx99tmzZ5oX6x8/zB6889ErT3819Nc7/7v1wfdJDMXB+mPL42iW/uiv75OudBc+4OVmV9ZmSbsbwI6kp2ZH7SyPI3EoOqopAOBJlvb/FQBgj0n0/wCwxzQ+B1iYn8s1lvZ+IrG77r4UEftq8Tfub9Ye6azfs9tXvQ/au5BEZ/2OaOrNJtXfHxGfffPWF+mS5hc6bzbpmQE2du16RFzs6199/U9WzVnYrpNbKNO/Ir/X+h9op2/T8c9za43/Movjn1gc/yzpWePc3Yn+iO7l+dXnf+b2mhu+2ITK6+O/F2pz29JA6+O/5FrtzlhVX0f9Ptm/0szRiBgr5NNr278j4lh09VwaK+RPbVDHsXt/31vvseXjv99vvH0zrT/9v1Qic7uz58FtRobLww8Z9qK71yP+37k0t68afzX02vV/f31u18rjn647v9ETH11Kvvr8e5+uVyyNP423sayOv7Uqn0c8FSvir1qa0ZZsOD9xID38J2t/167j658+6V2v/uXHP13S+hvvBdbRvfNoV0uPf+/G8fcly+drlppZ+1biX/v13528UU03dsbV4XJ56lREd/La6vWnl7Zt5Bvl0/hrka6Mf+n6t9brP30neHGLMXbe+fXLnce/qCVTLNP4R7Z1/LefuHV/vGPn8afHf7CaOlZfs5Xr31Yb+DD7DgAAAAAAAAAAAAAAAAAAAAAAAAC2KhMRByPJZBfTmUw2W/sN7/9Gb6ZQLJWPXypOT45E9bey+6Ir0/iqy0O1fNL4/tO+ZfnTK/LPRMR/IuLjnv3VfDZXLIy0O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqDuwzu//p37paXfrAICW2bdpiXv5B7KVSqXSwvYAAK23ef8PADxpNuj/9+9mOwCA3eP9PwDsPfp/ANh79P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC02Plz59Kl8uf8XC7Nj1yZmR4vXjkxki+NZyemc9lccepydrRYHC3ks7nixGbPVygWLw/G5PTVgXK+VB4ozcxemChOT5YvjE0Mj+Yv5Lt2JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7SzOz4cKGQn3oiEu9HxCPQjFYkkngkmtGWxM8nfjy8UZkbm7yMhx6JKB6zRLuvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPh38CAAD//4BhJWs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000300)={'crct10dif\x00'}}) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) setns(r5, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 12.512934949s ago: executing program 3 (id=2355): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x94) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000001c0)='./file0\x00', 0x2048c5, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x0, 0x29f, &(0x7f0000000840)="$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") r3 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r3, &(0x7f0000002c00)={0x2020}, 0x2020) ioctl$TCSETSW2(r2, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"}) ioctl$TIOCGPGRP(r1, 0x5437, 0x0) ioctl$TCSBRKP(r1, 0x5425, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r0, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) ioctl$NILFS_IOCTL_GET_SUSTAT(r0, 0x80306e85, &(0x7f0000000000)) 12.354976625s ago: executing program 3 (id=2356): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) r2 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r2, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x3c, 0x3e9, 0x800, 0x70bd26, 0x25dfdbfb, {0x2, 0x0, 0x2, r1, 0x75, 0x4, 0x7f, 0x200, 0x0, 0x2, 0x10}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000d4}, 0x8000) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000540)={0x8, 'wlan1\x00', {'rose0\x00'}, 0x7}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000880)={'ip6_vti0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x4, 0x3, 0x7, 0x9, 0x54, @mcast1, @local, 0x700, 0x80, 0x400, 0x2005}}) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$HIDIOCGSTRING(0xffffffffffffffff, 0x81044804, 0x0) syz_read_part_table(0x5d7, &(0x7f0000000c00)="$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") recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$IOCTL_VMCI_GET_CONTEXT_ID(r6, 0x7b3, &(0x7f0000000280)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x0, 0x0, 'lblc\x00', 0x1e, 0x80, 0x53}, 0x2c) r7 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r7, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000140)="f3", 0x1}], 0x1}, 0x20000000}], 0x1, 0x0) 11.314381839s ago: executing program 3 (id=2358): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYBLOB="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", @ANYBLOB="dd3fd355ac7560b0df13cd6a1c9c8498679918bbd9fc2b4c9701cecbf57430e235d2d805349dc3a2442fe3940f8fac3ae189fc43b495abd467631a1f2d7fa0fe31463f"], 0x2c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, r1, 0x3) r5 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800008, &(0x7f0000000280)={[{@data_err_ignore}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$eJzs3c9rXNUeAPDvnfxq077XPHjw2rdpVloonbQ1tgqCERciWCjoVtswmYaYSaZkJqUJWbSIIIigxYWgG9dV686t6Nq/wY2ItFRNgxUXMnLnR5Lmd9KZTNt8PnCTc+6cO+d87517z5m5h5kA9qz+9E8m4khEfJhEHKqvTyKiq5rqjBiqlbs/P5dLlyQqldd/S6plFubncrFsm9SBeuZwRHz3bsTxzOp6SzOz48OFQn6qnh8oT1weKM3MnhibGB7Nj+Ynz5waHDx99tmzZ5oX6x8/zB6889ErT3819Nc7/7v1wfdJDMXB+mPL42iW/uiv75OudBc+4OVmV9ZmSbsbwI6kp2ZH7SyPI3EoOqopAOBJlvb/FQBgj0n0/wCwxzQ+B1iYn8s1lvZ+IrG77r4UEftq8Tfub9Ye6azfs9tXvQ/au5BEZ/2OaOrNJtXfHxGfffPWF+mS5hc6bzbpmQE2du16RFzs6199/U9WzVnYrpNbKNO/Ir/X+h9op2/T8c9za43/Movjn1gc/yzpWePc3Yn+iO7l+dXnf+b2mhu+2ITK6+O/F2pz29JA6+O/5FrtzlhVX0f9Ptm/0szRiBgr5NNr278j4lh09VwaK+RPbVDHsXt/31vvseXjv99vvH0zrT/9v1Qic7uz58FtRobLww8Z9qK71yP+37k0t68afzX02vV/f31u18rjn647v9ETH11Kvvr8e5+uVyyNP423sayOv7Uqn0c8FSvir1qa0ZZsOD9xID38J2t/167j658+6V2v/uXHP13S+hvvBdbRvfNoV0uPf+/G8fcly+drlppZ+1biX/v13528UU03dsbV4XJ56lREd/La6vWnl7Zt5Bvl0/hrka6Mf+n6t9brP30neHGLMXbe+fXLnce/qCVTLNP4R7Z1/LefuHV/vGPn8afHf7CaOlZfs5Xr31Yb+DD7DgAAAAAAAAAAAAAAAAAAAAAAAAC2KhMRByPJZBfTmUw2W/sN7/9Gb6ZQLJWPXypOT45E9bey+6Ir0/iqy0O1fNL4/tO+ZfnTK/LPRMR/IuLjnv3VfDZXLIy0O3gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqDuwzu//p37paXfrAICW2bdpiXv5B7KVSqXSwvYAAK23ef8PADxpNuj/9+9mOwCA3eP9PwDsPfp/ANh79P8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC02Plz59Kl8uf8XC7Nj1yZmR4vXjkxki+NZyemc9lccepydrRYHC3ks7nixGbPVygWLw/G5PTVgXK+VB4ozcxemChOT5YvjE0Mj+Yv5Lt2JSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2J7SzOz4cKGQn3oiEu9HxCPQjFYkkngkmtGWxM8nfjy8UZkbm7yMhx6JKB6zRLuvTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACPh38CAAD//4BhJWs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000300)={'crct10dif\x00'}}) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) setns(r5, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 8.994898335s ago: executing program 1 (id=2359): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) listen(r0, 0x8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x154}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xfffffffd}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x50}}, 0x0) mmap(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x200000e, 0x13, r5, 0xea8dc000) r6 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r6, 0x84, 0x7c, 0x0, 0x0) 7.9191913s ago: executing program 3 (id=2360): r0 = openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) (async) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000040)={0x0, 0x0, 0x5}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000000440)={0x0, 0x0, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) (async) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000840)={0x0, "86a160ada48a3911ebbc8e423c2bd673"}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000001840)={0x1e, 0x2, {0x1, @usage=0x7, r1, 0xffffffff, 0x5, 0xfffffffffffffff9, 0x4f97, 0x7, 0x40c, @struct={0x8de, 0x6}, 0x8, 0x1, [0x7, 0x314800, 0x9, 0x380e, 0xfffffffffffffffa, 0x1]}, {0x766, @struct={0x3}, r2, 0x1, 0x3, 0x100, 0x2187, 0xa, 0x8, @struct={0x5, 0x5}, 0x1ff, 0x2, [0x5, 0x5e0a66f8, 0xfffffffffffff800, 0x4, 0x5000000000000, 0x10001]}, {0x9, @usage=0xaf0, r3, 0x80, 0x6, 0x8, 0x1, 0x800, 0x40, @usage, 0x0, 0x80000000, [0x100000000, 0x5, 0x94, 0x2, 0x2, 0x5]}, {0x2, 0x800, 0x1ff}}) r4 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000001d80)={'ip6_vti0\x00', &(0x7f0000001d00)={'ip6gre0\x00', 0x0, 0x29, 0x2, 0x2, 0x5, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x8000, 0x7800, 0xcd, 0x3b}}) (async) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001e40)={0x1b, 0x0, 0x0, 0x400, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x50) (async) r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001f00)=@generic={&(0x7f0000001ec0)='./file0\x00'}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001f80)={0x6, 0x7, &(0x7f0000001c40)=@raw=[@exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @jmp={0x5, 0x0, 0x1, 0x4, 0x3, 0x0, 0xfffffffffffffffc}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0xa7ee}, @func={0x85, 0x0, 0x1, 0x0, 0x7}], &(0x7f0000001c80)='syzkaller\x00', 0x8, 0x7, &(0x7f0000001cc0)=""/7, 0x41000, 0x20, '\x00', r5, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000001e00)={0x0, 0xa, 0x9, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000001f40)=[r6, 0xffffffffffffffff, r7, 0xffffffffffffffff], 0x0, 0x10, 0x7}, 0x94) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000002040)={{0x1, 0x1, 0x18, r4, {0x7}}, './file0\x00'}) r9 = syz_genetlink_get_family_id$team(&(0x7f00000020c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000002180)={'ip6tnl0\x00', &(0x7f0000002100)={'syztnl2\x00', r5, 0x4, 0x16, 0x1, 0x4, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x700, 0x8000, 0x4, 0xb}}) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000022c0)={'syztnl2\x00', &(0x7f00000021c0)={'sit0\x00', r5, 0xce91daab7cf9eb06, 0x40, 0x81, 0xfffffc01, {{0x31, 0x4, 0x1, 0x8, 0xc4, 0x68, 0x0, 0x6, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, {[@lsrr={0x83, 0x7, 0xc0, [@private=0xa010101]}, @timestamp={0x44, 0x14, 0xb2, 0x0, 0x4, [0x9, 0x9, 0x31, 0xff]}, @timestamp_prespec={0x44, 0x24, 0x57, 0x3, 0x7, [{@remote, 0x6016}, {@empty}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@rand_addr=0x64010100, 0x9}]}, @generic={0x8f, 0x3, 'D'}, @rr={0x7, 0x13, 0xb9, [@multicast2, @multicast2, @dev={0xac, 0x14, 0x14, 0x2e}, @local]}, @noop, @timestamp_addr={0x44, 0x54, 0x92, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x2d}, 0x9}, {@broadcast, 0x37}, {@private=0xa010100, 0x2}, {@private=0xa010100, 0x6}, {@broadcast, 0x4}, {@broadcast, 0x6}, {@rand_addr=0x64010102, 0x3ff}, {@local, 0xb}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x8}]}, @ra={0x94, 0x4, 0x1}]}}}}}) (async) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000002300)={@empty, 0x0}, &(0x7f0000002340)=0x14) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002400)={'syztnl0\x00', &(0x7f0000002380)={'ip6_vti0\x00', r5, 0x0, 0x5, 0x9, 0xff, 0x52, @dev={0xfe, 0x80, '\x00', 0x10}, @private0, 0x8000, 0x20, 0x5, 0x7}}) sendmsg$TEAM_CMD_OPTIONS_GET(r8, &(0x7f0000002b00)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002ac0)={&(0x7f0000002440)={0x650, r9, 0x400, 0x70bd28, 0x25dfdbfb, {}, [{{0x8, 0x1, r5}, {0x214, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x100}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x63e}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0x8, 0xfd, 0x3, 0x2}, {0x3ff, 0x81, 0x87, 0x5}, {0x0, 0x0, 0x3, 0x8}, {0x10d5, 0x4, 0xd, 0x5}, {0x1, 0x49, 0x3, 0xa}, {0x6, 0x2, 0xb0, 0x3}]}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r11}}}]}}, {{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}]}}, {{0x8, 0x1, r5}, {0xfc, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x921a}}, {0x8, 0x6, r12}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xe}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x80000001}}}]}}, {{0x8, 0x1, r13}, {0x210, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x64, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x34, 0x4, [{0xfff7, 0x5, 0x4a, 0x3}, {0xc5b9, 0xe2, 0x5, 0x1cb5}, {0x9, 0x7e, 0xb9, 0x3}, {0x0, 0xf, 0x2, 0x7fffffff}, {0x223, 0x2, 0x7, 0x7f}, {0x0, 0x81, 0xff, 0x8}]}}}]}}]}, 0x650}, 0x1, 0x0, 0x0, 0x40008081}, 0x880) (async) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b80), r8) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000002c40)={&(0x7f0000002b40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x2c, r14, 0x200, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10000, 0x4a}}}}, [@NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xbd, 0xfffff000}}]}, 0x2c}}, 0x40001) ioctl$sock_inet6_tcp_SIOCINQ(r8, 0x541b, &(0x7f0000002c80)) (async) r15 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002cc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x81, '\x00', r10, r8, 0x3, 0x5, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002dc0)={{r15}, &(0x7f0000002d40), &(0x7f0000002d80)=r4}, 0x20) r16 = openat$vcs(0xffffffffffffff9c, &(0x7f0000002e00), 0x20001, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r16, &(0x7f0000002f00)={&(0x7f0000002e40)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002ec0)={&(0x7f0000002e80)={0x14, r14, 0x800, 0x70bd2d, 0x25dfdbff, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4044084}, 0x4000) (async) r17 = syz_genetlink_get_family_id$tipc(&(0x7f0000002f80), r8) sendmsg$TIPC_CMD_GET_NETID(r8, &(0x7f0000003040)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000003000)={&(0x7f0000002fc0)={0x1c, r17, 0x20, 0x70bd27, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async) ioctl$sock_SIOCGIFINDEX_80211(r16, 0x8933, &(0x7f0000003080)={'wlan1\x00'}) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000042c0)={r8, 0x0, 0xce, 0x44, &(0x7f00000030c0)="0b25e2f4f82aeadc4e1194c13d5772b94aabd34b8b20f3510fe0b0f6db178530fd75aea3fe3b1af8e2f925b38c01fcb4b5790e4b4de5be21245187b6112feb38c52164f48f6f80fd5a7586c1b9df11235ec98d734e4ab2c8da9696fa95612570507a7fc93ea990d622abdb31c0db98c1b83fc2d99558f821a77227cbc2369f1bad1347f2a83e0722f055bd91a2e44538912743be45c515712adcf6d584afe4a20d668f65ab11669c0217a4642f9cd9007bc1a4baa26488824077046b40d1373a230e1d007e97f65b23fc8880c695", &(0x7f00000031c0)=""/68, 0x3, 0x0, 0x1000, 0x6a, &(0x7f0000003240)="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", &(0x7f0000004240)="85263399d838b7681f8c9a0d390e41ab44e382326f16a8a44da117af5ed4a32a7ff6f1492607d940f80e377b80ebd48e2219bc74b56e7129acb34ebf05b2f22506dd4768636e0e697f52e0994371e08800295546d76dc941177b18ac84ec64372457a38a52bb91b782a8", 0x0, 0x0, 0x8001}, 0x50) sendmsg$IPCTNL_MSG_CT_GET_STATS(r8, &(0x7f0000004400)={&(0x7f0000004340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000043c0)={&(0x7f0000004380)={0x14, 0x5, 0x1, 0xf04, 0x0, 0x0, {0x5, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2008000) 7.826193324s ago: executing program 5 (id=2361): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="0a00000016000000b30000007f"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x5, 0x0, 0x0, 0x600}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0xa, 0xa}, @printk={@x={0x18, 0x0}, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5, 0x1, 0xb, 0x1, 0x5}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffe00}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xde, &(0x7f0000003e40)=""/222}, 0x36) 7.715928897s ago: executing program 1 (id=2363): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000000000)=0x5a, 0x4) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000340)=0x5, 0x4) sendmmsg$inet6(r0, &(0x7f0000006000)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x1ff, @loopback, 0x4}, 0x1c, 0x0, 0x1f}}], 0x1, 0x4000) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbd3df250200000005000400010000000500040001000000140002007e657468315f746f5f7465616d0000000900030073797a32000000000900010073"], 0x68}, 0x1, 0x0, 0x0, 0x4000145}, 0x0) 7.64680686s ago: executing program 5 (id=2364): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) pipe2$9p(&(0x7f00000001c0), 0x3e8) 7.533414223s ago: executing program 1 (id=2365): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, &(0x7f0000000000)=""/10, 0x2}, 0x20) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044080}, 0x0) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, r1, 0x3) r4 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800008, &(0x7f0000000280)={[{@data_err_ignore}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r8 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r8, r8, r8}, &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000300)={'crct10dif\x00'}}) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) setns(r4, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 7.055042139s ago: executing program 0 (id=2366): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmsg$nl_route(r3, 0x0, 0x20048094) sched_getattr(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0x0, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0xf, 0x9, 0x6ff5, 0x9f5, 0x5, 0x7f, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x8000001, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x51a, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x8004, 0x4a, 0xf, 0xfffff32a, 0xfffffffa, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x0, 0xfff, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x4, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x4, 0xc, 0x0, 0x4d, 0x2, 0x4, 0x0, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0x80000001, 0xee6, 0x800, 0x8000, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) 5.764365091s ago: executing program 0 (id=2367): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x10000}) r0 = syz_open_dev$sg(&(0x7f0000000100), 0x0, 0x1) ioctl$SG_IO(r0, 0x2285, &(0x7f00000016c0)={0x53, 0xfffffffffffffffc, 0x7, 0x5, @scatter={0x0, 0x0, 0x0}, &(0x7f0000001480)="424b2b6d38a97b", 0x0, 0x3, 0x21, 0x3, 0x0}) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$afs(&(0x7f0000000180)=@cell={0x23, 'syz0:', 'syz1'}, &(0x7f0000000240)='.\x00', &(0x7f000001f640), 0x4044, 0x0) mount$afs(&(0x7f000001f380)=@cell={0x23, 'syz1:', 'syz1', '.backup'}, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x10000, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8004, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fsopen(0x0, 0x0) accept4$netrom(0xffffffffffffffff, 0x0, 0x0, 0x80000) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) 5.566401917s ago: executing program 1 (id=2368): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x368}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000000)={'macsec0\x00', @random="010011311000"}) 5.511111829s ago: executing program 0 (id=2369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40010}, 0x4008000) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}]}, 0x24}}, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x8800, 0x0, 0x0) clock_nanosleep(0x4, 0x1, 0x0, 0x0) r6 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000001fc0)=ANY=[@ANYBLOB="5df700ab9923657a1d6b9c518dd8fa4ca703737e156f773eaebfc66e039916f47d53875ce87eefc3d7a5e5f2fb561d079b16", @ANYRES16=r6, @ANYBLOB="000225bd7000fddbdf2503000000080004000900000008000400008000000400068005000500080000003400018014000400fc02000000000000000000000000000008000600120000001400040020010000000000000000000000000002"], 0x64}, 0x1, 0x0, 0x0, 0x504d54e8b3991ce2}, 0x4008851) r7 = syz_open_procfs(0x0, &(0x7f0000000080)='net\x00') getdents64(r7, &(0x7f0000002080)=""/4108, 0x100c) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/141, 0x8d}, {&(0x7f00000001c0)=""/17, 0x11}], 0x6, &(0x7f0000000600)=""/191, 0xbf}, 0x5}], 0x1, 0x2000, &(0x7f0000003700)={0x77359400}) request_key(0x0, &(0x7f0000000340)={'syz', 0x2}, &(0x7f0000000940)='-#{%]:\x00', 0xffffffffffffffff) 5.46590384s ago: executing program 5 (id=2370): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x20) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYRES16=r2, @ANYRES16, @ANYBLOB="ee3b3cadca110ad2f21721402e5048bb974b4e9760751ed44ab5c4a4fb5e3cf7216e8392acacb72e039885d48eb0c906e5986c8381a914d8487680933d801e42710a9d22b2df5798707c1a6dcfa1f2b8fd2db63a3c24a9352a7525408e865a81b99239a7a400f5b1b1769464829c34276ace7c92d7929209c26155ad7ffebd683a1d6ed3801ab69dd0f28e817623335eba4a30a7ccdd4a58252f9b5fb86fea2a31b229dc8d59d753cb686abf9634e96616b98a71848986b92e503108ff9393f3b07d269634bc4b3f1caca1ebfc8e1e3847b489ea715e23e559140e0ff08ebdeb6e050b13cf005cd6e42e3008b0185d54be73e1052898fda33c43eeb5c50a1012932a9dc408c192e7049ee1ca4b8190f07527011f349dff2434d83a45fd705f26d7753cc4afa70c0a37fc0e778b1a996502cb22289ba24a84c7486dd6effaa7de5dd0521e37795d20e936633f9a541e0e9490c2143b5ee1", @ANYBLOB="dd3fd355ac7560b0df13cd6a1c9c8498679918bbd9fc2b4c9701cecbf57430e235d2d805349dc3a2442fe3940f8fac3ae189fc43b495abd467631a1f2d7fa0fe31463f"], 0x2c}, 0x1, 0x0, 0x0, 0x20044080}, 0x0) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, r1, 0x3) r5 = syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800008, &(0x7f0000000280)={[{@data_err_ignore}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000300)={'crct10dif\x00'}}) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) setns(r5, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) 4.372345967s ago: executing program 0 (id=2371): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) setsockopt$inet6_IPV6_PKTINFO(r0, 0x29, 0x32, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, r1}, 0x14) sendto$inet6(r0, &(0x7f00000000c0)="800034ca269bb73c", 0x8, 0x200440c0, &(0x7f0000000040)={0xa, 0xfffd, 0xff, @private2}, 0x1c) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) shutdown(r2, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x4, @remote, 0x8}, 0x1c) 4.330691698s ago: executing program 0 (id=2372): prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x6b, 0x4, 0x7, 0x0, 0x0, 0x0, 0x4, 0xa, 0xd, 0xa0, 0x8, 0x5, 0x0, 0x2, 0x9, 0x3, 0x3, 0x2e, 0x4, '\x00', 0x1, 0xffffffffffffff7f}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r3, 0x6, 0x0) dup2(0xffffffffffffffff, r3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280440e, &(0x7f0000000300)={[{@debug}, {@jqfmt_vfsv0}, {@inlinecrypt}, {@errors_remount}, {@test_dummy_encryption_v1}, {@norecovery}, {@delalloc}, {@nogrpid}, {@minixdf}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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") r4 = syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x82180c, 0x0) r5 = inotify_init1(0x80800) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x1, 0x363, &(0x7f0000000880)="$eJzs3U9oHFUYAPBvM/lbaJODUBSE0ZugoX/woKeUkkIxF5Wl6kFcbKqSjYUsLqaHbuNFPAoe9eRFPOjBQ88iKOLNg1crSFU8aG8Fi092d3Z3trtJU2Fbg7/fYfnyvffNe7OZZF8m2ZdXVmLj/ExcuHHjeszPV2J65fRK3KzEUmTRcyVGzY7JAQAHw82U4s/Utc+SyoSnBABMWOf1/7XDpcw7X+/VP3n1B4ADr/j5f2GvPvO7NVycyJQAgAkbuf//6FDz7PCv+qdLfxUAABxUz7/40jOn1iKey/P5iM13m9VmNZ4etJ+6EG9EPdbjWCzGrYjuQqH9UOk8njm7tnosz/NW/LIU1XZFsxqx2WpWuyuFU1mnfi6Ox2IsFfXFaiOllJ35Ym31eN4REVdanfFjs9KszsShYvwfD8V6nIg8Hhipjzi7tnoiLw5Q3ezVtyJ2Bvct2vNfjsX4/tW4GPU4v3AuUuota9ZWLx/P89Npbai+WZ2L8/1nYdc7IAAAAAAAAAAAAAAAAAAAAAAA8K8s531L/f1v0mD/nuXlMe2d/XG69cX+QDvd/YHSXIqU/nj7iep7WQztD3T7/jzN6nRM3d9TBwAAAAAAAAAAAAAAAAAAgP+MxvZs1Or19a3G9qWNctDaamxPRUQ78+a3n321EKN97hBMF2OUmvIidWmjlrJe55QN9SmCrD14L/Pp1f6My33m+mcxdhpzuzfV64cf+fnDQebhrHfkvwd9sqnx5dlt0ygHm0e6U7qbJ+rSySI4cYfO11JKux3n8sujVVGJmL77T9zeQWoH31x//cGTjaNPdjJfpq7HHl88d+2Dj3/bqNXbI7fVP5ndatxKG7Xi4/EX2+5BVrp+KtENKuUrYXqv8p3hTC374fcXHnr/u/2NnsqZt8b0ybqn8/lWY7tSfKV0mma7QTvXCab6VQv1s1nEbceZGXPxTyA4+tFK7erln37db1Xpm4SNOgAAAAAAAAAAAAAAAAAA4J4ovVe8ULzZd2avqqeenfzMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODeGfz//1KwM5LZT/BXK0ab5ta3GhFH7vdpAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwP/dPAAAA///fkWru") syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r6 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r9, &(0x7f0000003540)=[{{&(0x7f00000003c0)=@file={0x1, './file1\x00'}, 0x6e, &(0x7f0000002d00)=[{&(0x7f0000000480)="548f90eaf3544c1db784c3f559a08120aec2f563549574ab79b129cc3e18ddbd61d799b25e883bbd53814818c4b41b764771f9094b983d12e975f6c0fb95", 0x3e}, {&(0x7f00000004c0)="776908fbc3629d7a35e7c3ee9d98f52865433db5809dfde3cd04bbb340", 0x1d}, {&(0x7f0000000500)="82d8f8329bfc89e68904428e8578f5de260bd5c7bb7f6e4a045cbdcbece8c0f5c9", 0x21}, {&(0x7f0000000540)="1a2a50c36a125cf500b6a1bc58704ee3303d4fb6a8352dc4a09b27ee0ef31a5e03fb9782381fb6ca2d03407314f6f03cce04784a58cb09bf5c6d514c211cd7818c3647d36cc3f4b787a096359fb51f73dcd9e307b330487f8c5da10eb8e03c6402088b1fdd3cb63d67ab3b1a462d9a056dfe6878c23ae84a920d596be4ce9bc418749af0dbe35ef55b3f2167bdec41fb2199b5ba24f310d39cc05ff7ba826a33", 0xa0}, {&(0x7f0000000600)="da4cf64d2bb9e021968741d9a4f20081572a2d4a69c565cb632d2541e75154c57c58d4c7f16d97d4d26325be2dccddc62e97a7d35d5420472c1843dca6f75b90d7265785ba502957fc81cfdff83c42ae5956a0273561c0b4fe8720a8cfc33d72358a97317181bebae8ea6432bcd3d8689523a239ab745d9372575dd92e98c04689223d20dcb2ebae5d90c528c330c30a171c793bd60e140818da7d6646b9302ad68bde116e04e6e81641ffcbecc7ed4fcd9c4366530ed789ee92", 0xba}, {&(0x7f0000001c00)="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", 0x1000}, {&(0x7f0000002c00)="0ffb0dea85266983f72da079e6fe40d5f9019aa15dce8ccbb9a998eb53526c86a2b661eed14efc676701b01d1028fdf2946b3b54a1c931854c05150ed9f4196d9762df5555b1131ee174b02d4f403279b70c7e4d054c1ecd15df49948fb67a9d8d2988f86e08dfd946497043c31a3346e97c8fa4318a371c1f0f95b74df0dc5deb7880bf359c199ee4449f7b3e7025a44df84742c91978c9c313cbdc1ff5bef41e89cbcf04af93bab5c5144b23d5696966056d2d356bf2fa5fd7bc3015fe3cbe94d09a3a0964ea3cff57d3532a1fedfc0223ccf663c5e41fa37eb9383f16a8ce5c48eb58f9c13a", 0xe7}], 0x7, &(0x7f0000003240)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r0, r5]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r9, r2, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r6, r0, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r7}}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xee01, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r6, r4, r0, r4]}}], 0x118, 0x8800}}, {{&(0x7f0000003380)=@file={0x1, './file2\x00'}, 0x6e, &(0x7f00000034c0)=[{&(0x7f0000003400)="8754499d54398b369495b946e8d9737fe1bb0637096ab909db6d95186555c321d8126fb36061ea972002b8694a3a45195928eff56125eb00daef99d3da400258f871bb68bca0dd8c97562674918e6fcf2916382fed6fdcb86d0bc221969a0f0a23d7ce64f792934285a5bba1a1719f15d71b54677213e6e483aba146dd594500000d0b411d7646bc1dfdebdfbf6776138952aa5a2384", 0x96}], 0x1, &(0x7f0000003500)}}], 0x2, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) utimensat(0xffffffffffffffff, &(0x7f0000000000)='./file2\x00', 0x0, 0x100) munmap$IORING_OFF_CQ_RING(0x0, 0x80000000) mount$fuseblk(0x0, 0x0, 0x0, 0x24000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x40) 4.170906043s ago: executing program 1 (id=2373): r0 = socket(0x23, 0x80805, 0x0) r1 = accept(r0, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x8}, {}, {0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x220008e8}, 0x804) socket$nl_netfilter(0x10, 0x3, 0xc) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x40, &(0x7f000001f500)={[{@compress_algo={'compress', 0x3d, 'zstd'}}, {@clear_cache}, {@space_cache_v1}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$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") r5 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_ACTIVATE(r5, 0x5606, 0x2) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1b8, 0x1b8, 0xc8, 0xffffffff, 0xffffffff, 0xe8, 0x288, 0xe8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) write$uinput_user_dev(r7, &(0x7f0000000b00)={'syz1\x00', {0x5, 0x0, 0x7, 0xa927}, 0x4001f, [0xd, 0x1, 0x5, 0x2, 0x9, 0x8, 0x9, 0x6, 0x1, 0x81, 0x5, 0x8, 0x4, 0x9, 0x9, 0x10000, 0x5, 0x2, 0xdfffffff, 0x80004, 0x2, 0xf0, 0x9, 0x2, 0x8, 0x2, 0x0, 0xb, 0xa, 0x56, 0x56, 0x4, 0x1, 0x7, 0x4, 0xfffffffd, 0x4, 0x80000004, 0x3, 0x7, 0x433, 0x90, 0x1, 0x281, 0x1, 0x0, 0x55, 0xb3, 0x9, 0x400, 0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x2, 0xc, 0x804, 0x9, 0x10000, 0xf7cb, 0x9ea8, 0x4], [0xfea3, 0x1, 0x1, 0xff, 0x40, 0x2, 0x9, 0x200009d9, 0xfffffffe, 0x5, 0x9, 0xfffffff2, 0x8000004, 0x10002, 0x1009, 0x1, 0x403, 0x8000, 0x8000, 0x20d, 0xa1, 0xfff, 0x3b, 0xfffffffa, 0x4, 0x4, 0x978e, 0x10000, 0x7f, 0x0, 0x7, 0x67ef, 0x7, 0x7fffffff, 0x81, 0x0, 0xfff, 0x0, 0x7fffffff, 0xc2, 0x58, 0xb8, 0x10000004, 0x2, 0x0, 0x3, 0x13, 0x10000b36, 0xf8c, 0xfffffffc, 0x10, 0x24, 0x1, 0x3, 0x7b2b, 0x5e16, 0xffffffff, 0x101, 0xbb, 0x3, 0x7, 0xc, 0x9, 0x1], [0x9, 0xe9, 0x35c, 0x5, 0x3f54, 0x4, 0x7fffffff, 0x0, 0x400, 0xfffffffa, 0x2f, 0x6, 0x5, 0xfffffffa, 0x45, 0x5, 0x6, 0xfffffffc, 0x9, 0x6, 0x81, 0xc23, 0x8b, 0x200, 0x1, 0x4, 0x7, 0xb, 0x736d, 0x7b, 0x1, 0x800, 0x81, 0x6, 0x2000007, 0x133cf491, 0x12a, 0x66, 0x6, 0xfff, 0x1, 0x25f, 0x401, 0xffffffff, 0xff, 0x92a3, 0x292, 0xffff8001, 0xff, 0x8, 0x5, 0x7, 0x8, 0x9, 0xffffffa4, 0x7, 0xca1c, 0xe, 0x0, 0x3, 0x5f0c, 0x81de, 0xc, 0x8000f], [0x9316, 0x1, 0x5, 0x601, 0x100, 0x7, 0x4, 0x7b, 0x8, 0xb69, 0x9, 0xfffffffd, 0x8, 0xa69e, 0x0, 0x5, 0x7ff, 0xfffffffe, 0x9, 0x4, 0x7, 0x8, 0x8, 0x5857, 0x2, 0x6891407b, 0x10005, 0x4, 0x6eef, 0x84, 0x7, 0x2, 0xe, 0x0, 0xfffffffe, 0x4, 0x356300, 0x7, 0x81, 0x3, 0x0, 0x0, 0x4, 0x2, 0x8, 0x100, 0x4, 0x1, 0x4, 0x62c0502, 0x3, 0xf6, 0x6, 0xfffffff4, 0x2, 0x1, 0xa0, 0x40000f, 0x7, 0x15ae29aa, 0xfffffffa, 0xef, 0x4, 0x80000000]}, 0x45c) ioctl$FICLONERANGE(r7, 0x4020940d, &(0x7f00000000c0)={{r7}, 0x0, 0x0, 0x100000}) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r1, 0x8983, &(0x7f0000000000)={0x1, 'veth0_to_team\x00', {}, 0x5}) 4.046779717s ago: executing program 4 (id=2374): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000180)='./file1\x00', 0x100008, &(0x7f0000000080)={[{@ssd}, {@commit={'commit', 0x3d, 0xffffffffffffffff}}, {@compress_force}, {@nodatasum}, {@thread_pool={'thread_pool', 0x3d, 0x100000001}}, {@nodatasum}, {@noacl}, {@inode_cache}, {@datasum}, {@ssd}, {@user_subvol_rm}]}, 0x2, 0x55ae, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') pread64(r0, &(0x7f00000001c0)=""/73, 0x49, 0x400000000000000) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000000)={0x3, 0x10, 0x2}) 3.073993779s ago: executing program 0 (id=2375): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = getpid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) mmap$usbmon(&(0x7f0000bdf000/0x4000)=nil, 0x4000, 0x2000003, 0x10010, 0xffffffffffffffff, 0x3) syz_pidfd_open(r0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x800008, &(0x7f0000000280)={[{@data_err_ignore}, {@resuid}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xffff}}, {@noblock_validity}]}, 0x1, 0x7b2, &(0x7f00000009c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, &(0x7f0000000100)=""/66, 0x42, &(0x7f0000000340)={&(0x7f0000000300)={'crct10dif\x00'}}) prctl$PR_SET_PDEATHSIG(0x1, 0x3a) 2.637772334s ago: executing program 4 (id=2376): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="280000001c00010029bd7000ffdbdf2507000000", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4040004) sendmsg$nl_route(r3, 0x0, 0x20048094) sched_getattr(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_SET(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r6 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000000)={'\x00', 0x40, 0xe, 0x1, 0x5, 0x10}) ioctl$BLKTRACESTART(0xffffffffffffffff, 0x1274, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f00000002c0)={'syztnl2\x00', 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000540)={'syz1\x00', {0x6, 0x7fff, 0x0, 0xb}, 0x6, [0x9, 0x8, 0x5, 0x6, 0x6, 0x3, 0xafc, 0x32, 0xf, 0x9, 0x6ff5, 0x9f5, 0x5, 0x7f, 0x0, 0x6, 0x8001, 0x6, 0x4a4c, 0x3, 0xfffffffd, 0x9, 0x10, 0x8001, 0x5, 0x2, 0xd4a, 0xffefe87a, 0x8000001, 0x8, 0x9, 0x9, 0x8, 0x9, 0x0, 0xe, 0xf9c6, 0x3ff, 0x3ff, 0x4, 0xd, 0xff, 0x8, 0x9, 0x80000001, 0x83f5, 0x0, 0x2, 0xfe0, 0x7ff, 0x8, 0x3, 0x4, 0x2, 0xa45, 0x51a, 0xffff, 0x0, 0x2, 0x9, 0xf, 0x101, 0x200, 0x9a0], [0x3, 0x8, 0x6, 0xd, 0x1, 0xad10, 0x6, 0x13a0, 0x86, 0x7fff, 0x101, 0x8, 0x5, 0x1, 0x2, 0xffff, 0x8004, 0x4a, 0xf, 0xfffff32a, 0xfffffffa, 0x4c4, 0x400, 0x7f, 0x10000, 0x7, 0x4, 0x8, 0x30, 0x9, 0x1, 0x3, 0x4c6fbc51, 0x10001, 0xd35, 0xa, 0x6, 0x0, 0xfff, 0x200, 0x20, 0x9, 0x0, 0x3ec8d8d2, 0x0, 0x3, 0x3, 0x2, 0x8, 0x6, 0xe51, 0x1, 0x7, 0x8, 0x3, 0x2, 0x0, 0x62, 0x7, 0x6, 0x4, 0x6, 0xfff, 0x4], [0x4, 0x9, 0x6, 0x10000, 0x6, 0x8, 0xffffffff, 0xfd, 0x20, 0x8, 0x9, 0x4, 0xc, 0x0, 0x4d, 0x2, 0x4, 0x0, 0x10000, 0x5, 0x40, 0x4, 0x8, 0x0, 0x4, 0x2, 0x80008001, 0x9, 0x1, 0xffff, 0x5, 0x7, 0x1, 0x9, 0x4, 0xfff, 0x3, 0x0, 0x5, 0x80000001, 0x53c2, 0x4, 0x4, 0x3, 0x80, 0x50, 0x3, 0xc, 0x8, 0x5, 0x4, 0x400, 0x3, 0x5, 0x86, 0x6, 0x400000, 0xb, 0x4, 0x0, 0x420, 0xfe6c, 0x2, 0x9], [0x3, 0x9, 0xffffffff, 0x2, 0x66, 0xffff, 0x401, 0x6, 0x8, 0x3, 0x101, 0x4, 0x9, 0x7, 0xce, 0x2, 0x8001, 0x1, 0x7, 0x6, 0x601000, 0x9, 0x5, 0xd, 0x1, 0x446, 0x800, 0x2, 0x0, 0x3, 0x2, 0x375, 0xfffffff1, 0x5, 0x5, 0x4, 0x7fff, 0x4, 0x3a2, 0x3, 0x2005, 0x80000001, 0xee6, 0x800, 0x8000, 0x3, 0x1, 0x7, 0x3, 0x9, 0xc, 0x3, 0x1, 0x1, 0x3, 0x296, 0x6, 0xb, 0xf, 0x4, 0x6, 0x7, 0xd, 0x400]}, 0x45c) 2.004683424s ago: executing program 5 (id=2377): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f0000000f80)=ANY=[@ANYBLOB="66643d0c79d3846101009049ca56f0a2f705", @ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYBLOB="2c67726f75705f69643db4efb2e38465fd45c8ea589f83afbd3af0ec3213fab9887425ed5583b233091f8d971793485c69ed76cd86be5d66bdc6c1c034f2921b8363f25db60971647ca40e3aca68cb236d1f484c9c5c6214bdd1f1303d9db23e53aa911ef6233407134582c7c97abee266294b8a94001e766d159ee51afca622ce788d7ff1b8abae3a3ea51d921872b129f9e61fa1bec0ddf832f48e616df56df5c44b9ec3543e10fce65b3817799edc88dc61ec0a477a7cbfb7626076fd616e7e0ea08d28059797021330e64c4b9a68ffb18d94b5241f43a9c327aedf93f9cc69bc10f1", @ANYRESDEC=0x0]) kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x280000) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_GET_VINFO(r0, 0xc0186e86, &(0x7f0000000080)={&(0x7f00000006c0)=[{0x8001, 0x0, 0x1, 0x3}], 0x1, 0x20, 0x0, 0x6}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002840)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x20}, 0x1c, 0x0}}], 0x1, 0x14018891) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48001}, 0x4044050) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) fcntl$dupfd(r3, 0x406, r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb27", 0x8a}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3f81f9b1d", 0x30}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a", 0xaf}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca5", 0x6e}], 0x6, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 1.959836136s ago: executing program 4 (id=2378): syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x8413, &(0x7f0000000100)={[{@delalloc}, {}, {@nodioread_nolock}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@noblock_validity}, {@usrjquota}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@inlinecrypt}, {@sysvgroups}]}, 0x18, 0x56a, &(0x7f0000000780)="$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") 1.734626153s ago: executing program 4 (id=2379): syz_mount_image$reiserfs(&(0x7f0000000140), &(0x7f0000001140)='./file6\x00', 0x98, &(0x7f0000000280), 0x1, 0x10ef, &(0x7f00000022c0)="$eJzs2DGLE0EYBuB3dg/kqshcvx5oYSHHHfEPXKGQxsLaLljZmUrJz/HnyFX2R3pTBOyVTQwJEhDJYuB4Hlh252Vmvp1yvgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDvLPlekosmqdusSVKSrrubLJJ02/zx17ZJydv3k9mrj+PXs8209FmT0q9aj+vN01rHdVxv6suL22d19unzh3avZEmX+9V8ev5mOehR+trtoDsCAADAw/DzaKMT1wcAAAD+ZrBGAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAA6vajSVKSrrubLJJ0p/0tAAAA4EglTd6NDuWbNsDOi3wblZRHu+RH6edc58uB9QAAAMC/KXv38ec5z5O9/DJnubrajH+/srxN2iTXf+xzv5pP18/lfFr+5wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAGCqAAAA//9TGNII") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x54) ioctl$DRM_IOCTL_RM_MAP(r0, 0x80087601, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000ffb000/0x3000)=nil}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x44004000) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a94000000060a010400000000000000000a00080154000480500001800b00010074617267657400004000028008000240000080012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a32000000000900010073797a31000000001400058008000140000000000800024000000002140000001100010000000000000000000100000a87fabb6ff17e13dd8730f6dc56b4384f8102d68d9a1f33333bb2511c1549e7c852ac"], 0xbc}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x5c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0x5c}}, 0x0) 713.907217ms ago: executing program 5 (id=2380): r0 = io_uring_setup(0x524d, &(0x7f0000000240)={0x0, 0xc50b, 0x400, 0x1, 0x15}) r1 = syz_io_uring_setup(0xeff, &(0x7f00000001c0)={0x0, 0x0, 0x2000, 0x83, 0x3ae, 0x0, r0}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f0000000180)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) io_uring_enter(r1, 0x2883, 0xf1bd, 0x0, 0x0, 0x0) io_uring_enter(r1, 0x7fffffe, 0x5, 0x5, 0x0, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000480), 0xc0041, 0x0) ioctl$TCXONC(r4, 0x540a, 0x0) syz_mount_image$exfat(&(0x7f00000009c0), &(0x7f0000000000)='./file1\x00', 0x842, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESOCT], 0x1, 0x1531, &(0x7f0000001f40)="$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") ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000002c0)="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") io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r0, 0x1e, &(0x7f00000003c0)={r4}, 0x1) socket$unix(0x1, 0x1, 0x0) getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000400)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xa5e438, &(0x7f0000000f80)=ANY=[@ANYRESDEC, @ANYRESHEX=0x0, @ANYRESDEC, @ANYBLOB="4ea4164323d0136eb525e4df0380654dda5ebcf2de4311b52a2281c85ff08dbd024f787cd68755278fc572e23916a8c3d6696a0bf0670d64b4f5a0a0e534317a2966e83ce615c95af5aecc2e04a42b3bb6c722a5849ba823ebc75abf6d4b6e5fffc844d9d095cbd2eb8a982eb3140257", @ANYRESHEX, @ANYRESHEX, @ANYRES16, @ANYRESDEC, @ANYRES32, @ANYBLOB="7aeda1d6837f043d2a22c1915eea3dfeab43ec63d77bc272e120beee38535d1c7c9cf24eadcb54c973979d44ffec577ad8fccba1e318be1222476e6f5ad0eaac2b91ac75092abac1b2187896d9e0bf3aea86627b926d3b95bdcf3ecf4f059a3a810cbd5545bc3e8a79719ffe211c0b57852840a3a75f64cf5d92ac13c44498766147741f4d94bf69a545e3959883a98f1f016a0cfb33a512730d37ac726ffe55a72289560327d45955feddf137a28343e03fe764cbd23fd132eb4557f95a2e54046260", @ANYRESDEC, @ANYRESDEC, @ANYRES16, @ANYRESHEX=0x0], 0xb, 0x0, &(0x7f0000000000)) add_key(&(0x7f0000000100)='big_key\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)='n', 0x1, 0xffffffffffffffff) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r5, &(0x7f0000001580)={0x2020}, 0x2020) syz_emit_ethernet(0x56, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="0777dfbf82ba", @void, {@canfd={0xd, {{0x2, 0x0, 0x0, 0x1}, 0x16, 0x1, 0x0, 0x0, "450aaa80c682d5e8b3ab411696be952a16c8709987d090892cbcf8ead5bc69c3cdca6c53f214e47433df88aa7b7317b00c10a8cf1c773f48bc0bad8be8a6291b"}}}}, &(0x7f0000000080)={0x0, 0x3, [0x80a, 0xc11, 0x25]}) close(r4) ioctl$XFS_IOC_FSGROWFSLOG(r0, 0x4008586f, &(0x7f00000004c0)={0xf1ec, 0x6}) io_uring_enter(r1, 0x788, 0x6a28, 0x1, 0x0, 0x0) io_uring_enter(r1, 0x41b3, 0x550b, 0x8, 0x0, 0x0) 426.133726ms ago: executing program 5 (id=2381): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x18, 0x30, 0xb, 0x70bd28, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x48890}, 0x40) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r5, 0x4008ae90, &(0x7f0000001580)={0x2, 0x0, [{0x12, 0x1, 0x3, 0x8, 0x8, 0x6, 0x40}, {0x0, 0x0, 0x7, 0x13, 0xd55b, 0x40, 0x7f}]}) syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$uac1(r2, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000040)=ANY=[@ANYRESOCT=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000400)={0x0, 0x9, 0xf, "16b8b76dd4b307c1d0f9cfc0c149ad"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=2382): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r1 = fsopen(&(0x7f0000000500)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00008c7000/0x2000)=nil, 0x2000, 0x2000007, 0x10, r3, 0x5ee36000) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x9, 0xa, 0x0, 0x20000000, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): hcd [ 831.987452][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 832.139749][ T13] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 832.168968][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 833.078957][ T13] usb 6-1: config 0 descriptor?? [ 833.148821][ T13] gspca_main: sunplus-2.14.0 probing 041e:400b [ 834.249881][ T13] gspca_sunplus: reg_w_riv err -110 [ 834.431162][T10756] loop5: detected capacity change from 0 to 2048 [ 834.453823][T10783] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1681'. [ 834.765003][ T13] sunplus: probe of 6-1:0.0 failed with error -110 [ 834.797031][T10756] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 835.062282][ T13] usb 6-1: USB disconnect, device number 28 [ 835.510860][T10786] md: could not open device unknown-block(112,0). [ 835.888099][T10786] md: md_import_device returned -6 [ 835.906572][T10798] trusted_key: encrypted_key: insufficient parameters specified [ 836.041051][T10802] loop4: detected capacity change from 0 to 4096 [ 836.140127][T10803] loop1: detected capacity change from 0 to 8192 [ 837.359938][T10812] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 838.391978][T10803] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 838.420854][T10803] REISERFS (device loop1): using ordered data mode [ 838.443381][ T4489] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 838.482027][T10827] fuse: Unknown parameter 'user_i00000000000000000000' [ 838.491087][T10803] reiserfs: using flush barriers [ 838.721766][T10803] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 838.768388][ T4489] usb 6-1: Using ep0 maxpacket: 32 [ 839.062211][T10803] REISERFS (device loop1): checking transaction log (loop1) [ 839.158566][ T4489] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 839.207642][ T4489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.297764][ T4489] usb 6-1: config 0 descriptor?? [ 839.453103][ T4489] gspca_main: sunplus-2.14.0 probing 041e:400b [ 839.483909][T10803] REISERFS (device loop1): Using tea hash to sort names [ 839.507610][T10803] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 839.710443][T10836] loop4: detected capacity change from 0 to 8192 [ 839.876417][T10842] lo speed is unknown, defaulting to 1000 [ 841.021376][ T4489] gspca_sunplus: reg_w_riv err -110 [ 841.047204][T10836] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 841.413808][T10836] REISERFS (device loop4): using ordered data mode [ 841.504598][T10836] reiserfs: using flush barriers [ 841.621636][T10836] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 841.842927][T10836] REISERFS (device loop4): checking transaction log (loop4) [ 841.917568][ T4489] sunplus: probe of 6-1:0.0 failed with error -110 [ 841.932020][ T4489] usb 6-1: USB disconnect, device number 29 [ 842.055380][T10847] trusted_key: encrypted_key: insufficient parameters specified [ 844.801628][ T4318] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 845.199781][T10836] REISERFS (device loop4): Using tea hash to sort names [ 845.219537][T10836] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 845.267978][ T4318] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 845.337065][ T4318] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 845.611697][ T4318] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 845.634440][ T4318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.730414][ T4318] usb 1-1: Product: syz [ 845.778642][ T4318] usb 1-1: Manufacturer: syz [ 845.842588][ T4318] usb 1-1: SerialNumber: syz [ 846.329583][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1701'. [ 846.599988][ T4318] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 846.613221][T10868] fuse: Unknown parameter 'user_id00000000000000000000' [ 846.665398][ T4318] usb 1-1: USB disconnect, device number 45 [ 846.818696][T10869] loop4: detected capacity change from 0 to 4096 [ 846.936559][ T4915] udevd[4915]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 847.081461][T10872] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 847.531777][ T4318] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 848.652979][T10882] loop4: detected capacity change from 0 to 8192 [ 848.683109][T10882] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 848.692611][ T4318] usb 2-1: Using ep0 maxpacket: 32 [ 848.755582][T10882] REISERFS (device loop4): using ordered data mode [ 848.797155][T10882] reiserfs: using flush barriers [ 848.932638][T10882] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 848.971437][T10882] REISERFS (device loop4): checking transaction log (loop4) [ 849.001287][T10654] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 849.009468][ T4318] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 849.026043][ T4318] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.042804][ T4318] usb 2-1: config 0 descriptor?? [ 849.104142][ T4318] gspca_main: sunplus-2.14.0 probing 041e:400b [ 850.012361][T10654] usb 1-1: Using ep0 maxpacket: 32 [ 850.184614][T10882] REISERFS (device loop4): Using tea hash to sort names [ 850.196035][T10654] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 850.216150][T10654] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 850.227416][T10882] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 850.279441][T10654] usb 1-1: config 0 descriptor?? [ 850.382518][T10654] gspca_main: sunplus-2.14.0 probing 041e:400b [ 850.557771][ T4318] gspca_sunplus: reg_w_riv err -71 [ 850.563536][ T4318] sunplus: probe of 2-1:0.0 failed with error -71 [ 850.573576][ T4318] usb 2-1: USB disconnect, device number 39 [ 850.763956][T10900] lo speed is unknown, defaulting to 1000 [ 851.820316][T10654] gspca_sunplus: reg_w_riv err -110 [ 851.826298][T10654] sunplus: probe of 1-1:0.0 failed with error -110 [ 851.907266][ T21] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 852.726228][T10907] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1714'. [ 853.099520][ T21] usb 6-1: Using ep0 maxpacket: 32 [ 853.251397][ T21] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 853.302540][ T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.831395][ T21] usb 6-1: config 0 descriptor?? [ 854.023644][T10654] usb 1-1: USB disconnect, device number 46 [ 854.037220][T10916] fuse: Bad value for 'fd' [ 854.057584][T10912] loop5: detected capacity change from 0 to 2048 [ 854.066344][ T21] gspca_main: sunplus-2.14.0 probing 041e:400b [ 854.606968][T10912] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 854.637146][ T21] gspca_sunplus: reg_w_riv err -110 [ 854.642876][ T21] sunplus: probe of 6-1:0.0 failed with error -110 [ 854.653248][T10914] loop1: detected capacity change from 0 to 4096 [ 855.088791][T10654] usb 6-1: USB disconnect, device number 30 [ 855.122043][T10925] trusted_key: encrypted_key: insufficient parameters specified [ 855.329561][T10930] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 856.380000][T10944] Cannot find del_set index 1 as target [ 858.579752][ T4489] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 858.623212][ T13] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 858.883241][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 859.013797][ T13] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 859.055899][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 859.109087][ T13] usb 2-1: config 0 descriptor?? [ 859.166831][ T13] gspca_main: sunplus-2.14.0 probing 041e:400b [ 859.413952][T10960] fuse: Bad value for 'fd' [ 859.425143][ T4489] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 859.462248][ T4489] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 859.804900][ T4489] usb 5-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 859.878949][ T4489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.046792][ T4489] usb 5-1: Product: syz [ 860.134680][T10954] loop1: detected capacity change from 0 to 2048 [ 860.161247][ T4489] usb 5-1: Manufacturer: syz [ 860.176980][ T4489] usb 5-1: SerialNumber: syz [ 860.269570][ T13] gspca_sunplus: reg_w_riv err -110 [ 860.274880][ T13] sunplus: probe of 2-1:0.0 failed with error -110 [ 860.364658][T10954] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 860.595278][T10952] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1727'. [ 860.617551][T10971] trusted_key: encrypted_key: insufficient parameters specified [ 861.534383][ T4285] usb 2-1: USB disconnect, device number 40 [ 861.571443][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 861.577826][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 862.284614][T10974] trusted_key: encrypted_key: insufficient parameters specified [ 862.762045][ T4489] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 863.410303][ T4489] usb 5-1: USB disconnect, device number 39 [ 865.184131][ T4915] udevd[4915]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 865.318421][T10999] loop1: detected capacity change from 0 to 4096 [ 865.596242][ T4285] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 865.613806][T11010] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 866.507688][ T4285] usb 1-1: Using ep0 maxpacket: 32 [ 867.927902][ T4285] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 867.940562][ T4285] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.178284][ T4285] usb 1-1: config 0 descriptor?? [ 869.331913][ T4285] usb 1-1: can't set config #0, error -71 [ 869.352025][ T4285] usb 1-1: USB disconnect, device number 47 [ 869.358016][ T21] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 870.191481][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 870.408436][ T21] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 870.416091][ T21] usb 5-1: can't read configurations, error -71 [ 870.444006][T11051] trusted_key: encrypted_key: insufficient parameters specified [ 870.452593][T11051] trusted_key: encrypted_key: insufficient parameters specified [ 870.505724][ T4285] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 870.993518][T11055] loop4: detected capacity change from 0 to 8192 [ 871.076843][T11055] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 871.112652][T11064] loop5: detected capacity change from 0 to 4096 [ 871.123352][T11055] REISERFS (device loop4): using ordered data mode [ 871.129921][T11055] reiserfs: using flush barriers [ 871.159645][T11055] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 871.177675][T11055] REISERFS (device loop4): checking transaction log (loop4) [ 871.238778][T11066] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 871.253400][ T4285] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 871.307428][ T4285] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 871.435416][T11055] REISERFS (device loop4): Using tea hash to sort names [ 871.481441][T11055] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 872.467447][ T4285] usb 1-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 872.476583][ T4285] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.484764][ T4285] usb 1-1: Product: syz [ 872.489028][ T4285] usb 1-1: Manufacturer: syz [ 872.493665][ T4285] usb 1-1: SerialNumber: syz [ 872.737112][ T4285] usb 1-1: can't set config #1, error -71 [ 872.744172][ T4285] usb 1-1: USB disconnect, device number 48 [ 874.026179][ T13] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 874.318469][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 874.698006][ T13] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 874.707139][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.821485][T11096] trusted_key: encrypted_key: insufficient parameters specified [ 874.850043][ T13] usb 2-1: config 0 descriptor?? [ 874.860524][T11096] trusted_key: encrypted_key: insufficient parameters specified [ 874.916718][ T13] gspca_main: sunplus-2.14.0 probing 041e:400b [ 875.405289][T11103] nfs: Unknown parameter 'À(&^/' [ 875.418930][T11103] loop4: detected capacity change from 0 to 8 [ 876.084194][ T13] gspca_sunplus: reg_w_riv err -110 [ 876.089507][ T13] sunplus: probe of 2-1:0.0 failed with error -110 [ 876.146907][T11088] loop1: detected capacity change from 0 to 2048 [ 876.189986][T11103] SQUASHFS error: zlib decompression failed, data probably corrupt [ 876.198052][T11103] SQUASHFS error: Failed to read block 0x9b: -5 [ 876.204406][T11103] SQUASHFS error: Unable to read metadata cache entry [99] [ 876.211646][T11103] SQUASHFS error: Unable to read inode 0x127 [ 876.524789][T11088] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 876.997382][T11115] lo speed is unknown, defaulting to 1000 [ 878.932322][ T4285] usb 2-1: USB disconnect, device number 41 [ 880.102821][T11107] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 881.461744][ T4234] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 881.857696][ T4234] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 881.912099][ T4234] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 882.067614][T11147] device syzkaller0 entered promiscuous mode [ 882.117567][ T4234] usb 2-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 882.137965][ T4234] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.170629][ T4234] usb 2-1: Product: syz [ 882.175259][ T4234] usb 2-1: Manufacturer: syz [ 882.192510][ T4234] usb 2-1: SerialNumber: syz [ 882.724409][T11136] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1768'. [ 883.027941][ T4234] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 883.082782][ T4234] usb 2-1: USB disconnect, device number 42 [ 883.518006][ T4915] udevd[4915]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 886.084585][ T21] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 886.451588][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 886.491492][T11179] device syzkaller0 entered promiscuous mode [ 886.591050][ T21] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 886.650215][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.667708][ T21] usb 2-1: config 0 descriptor?? [ 887.291322][T11188] lo speed is unknown, defaulting to 1000 [ 888.080434][ T21] gspca_main: sunplus-2.14.0 probing 041e:400b [ 888.237491][ T21] gspca_sunplus: reg_w_riv err -71 [ 888.242897][ T21] sunplus: probe of 2-1:0.0 failed with error -71 [ 888.315271][ T21] usb 2-1: USB disconnect, device number 43 [ 890.097516][T11208] nfs: Unknown parameter 'À(&^/' [ 891.010405][ T13] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 891.368544][ T13] usb 1-1: too many configurations: 223, using maximum allowed: 8 [ 891.530776][ T13] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 891.618497][T11217] lo speed is unknown, defaulting to 1000 [ 892.879510][ T13] usb 1-1: can't read configurations, error -61 [ 893.977792][ T13] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 894.256626][T11224] loop4: detected capacity change from 0 to 4096 [ 894.293422][T11226] device syzkaller0 entered promiscuous mode [ 894.476860][T11231] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 895.689862][ T7] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 896.079731][ T7] usb 6-1: Using ep0 maxpacket: 32 [ 896.989785][ T7] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 897.008349][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.050500][ T7] usb 6-1: config 0 descriptor?? [ 897.552234][ T7] gspca_main: sunplus-2.14.0 probing 041e:400b [ 897.639643][ T4231] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 897.647599][ T7] gspca_sunplus: reg_w_riv err -71 [ 897.669519][ T7] sunplus: probe of 6-1:0.0 failed with error -71 [ 897.713226][ T7] usb 6-1: USB disconnect, device number 31 [ 897.808131][T11254] loop1: detected capacity change from 0 to 8192 [ 897.963356][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 897.971212][T11254] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 897.993935][T11254] REISERFS (device loop1): using ordered data mode [ 898.011876][T11254] reiserfs: using flush barriers [ 898.085250][T11254] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 898.102757][ T4231] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 898.152599][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.246330][ T7] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 898.291255][T11254] REISERFS (device loop1): checking transaction log (loop1) [ 898.358383][ T4231] usb 5-1: config 0 descriptor?? [ 898.574076][ T4231] gspca_main: sunplus-2.14.0 probing 041e:400b [ 898.711964][ T7] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 898.754934][ T7] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 898.993802][ T7] usb 6-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 899.019118][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 899.062580][T11246] loop4: detected capacity change from 0 to 2048 [ 899.079165][T11254] REISERFS (device loop1): Using tea hash to sort names [ 899.094374][ T7] usb 6-1: Product: syz [ 899.098409][T11254] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 899.141111][ T7] usb 6-1: Manufacturer: syz [ 899.152618][ T7] usb 6-1: SerialNumber: syz [ 899.338381][T11246] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 899.372695][ T4231] gspca_sunplus: reg_w_riv err -110 [ 899.378008][ T4231] sunplus: probe of 5-1:0.0 failed with error -110 [ 899.654526][T11278] lo speed is unknown, defaulting to 1000 [ 900.251944][T11258] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1806'. [ 900.496889][T11246] lo speed is unknown, defaulting to 1000 [ 901.214252][ T7] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 901.249848][ T7] usb 6-1: USB disconnect, device number 32 [ 901.575829][ T4918] udevd[4918]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 901.649515][ T6525] usb 5-1: USB disconnect, device number 42 [ 902.016205][T11286] loop4: detected capacity change from 0 to 4096 [ 902.201915][T11289] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 902.409814][ T7] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 902.806932][ T7] usb 2-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 903.090036][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 903.478194][ T7] usb 2-1: string descriptor 0 read error: -71 [ 903.484518][ T7] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 903.533268][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 903.555886][ T7] usb 2-1: config 0 descriptor?? [ 903.575432][ T7] usb 2-1: can't set config #0, error -71 [ 903.599883][ T7] usb 2-1: USB disconnect, device number 44 [ 904.507456][ T21] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 904.865303][ T21] usb 2-1: Using ep0 maxpacket: 32 [ 905.148878][ T21] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 905.159022][ T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.189313][ T21] usb 2-1: config 0 descriptor?? [ 905.245635][ T21] gspca_main: sunplus-2.14.0 probing 041e:400b [ 906.946074][T11331] trusted_key: encrypted_key: insufficient parameters specified [ 906.956840][T11331] trusted_key: encrypted_key: insufficient parameters specified [ 907.550862][ T21] gspca_sunplus: reg_w_riv err -110 [ 907.556294][ T21] sunplus: probe of 2-1:0.0 failed with error -110 [ 907.915294][T11335] loop4: detected capacity change from 0 to 2048 [ 908.791240][ T21] usb 2-1: USB disconnect, device number 45 [ 909.075349][T11335] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 910.134330][T11361] lo speed is unknown, defaulting to 1000 [ 910.724722][T11359] device syzkaller0 entered promiscuous mode [ 911.793718][T11373] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1831'. [ 912.529285][T11380] fuse: Unknown parameter '0x0000000000000003' [ 912.674258][ T21] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 912.685581][T11383] trusted_key: encrypted_key: insufficient parameters specified [ 912.695298][T11383] trusted_key: encrypted_key: insufficient parameters specified [ 912.703541][ T4489] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 912.988450][ T21] usb 5-1: Using ep0 maxpacket: 32 [ 912.988540][ T4489] usb 6-1: Using ep0 maxpacket: 32 [ 913.141020][ T4489] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 913.182516][ T4489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.192206][ T21] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 913.239251][ T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 913.357276][ T4489] usb 6-1: config 0 descriptor?? [ 913.432984][ T21] usb 5-1: config 0 descriptor?? [ 913.558681][ T4489] gspca_main: sunplus-2.14.0 probing 041e:400b [ 913.632932][ T21] gspca_main: sunplus-2.14.0 probing 041e:400b [ 914.000032][T11377] loop5: detected capacity change from 0 to 2048 [ 914.743391][ T21] gspca_sunplus: reg_w_riv err -110 [ 914.748828][ T4489] gspca_sunplus: reg_w_riv err -110 [ 914.766016][ T4489] sunplus: probe of 6-1:0.0 failed with error -110 [ 914.772759][ T21] sunplus: probe of 5-1:0.0 failed with error -110 [ 914.831395][ T21] usb 5-1: USB disconnect, device number 43 [ 914.926832][T11377] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 915.808476][T11403] lo speed is unknown, defaulting to 1000 [ 915.975233][ T4489] usb 6-1: USB disconnect, device number 33 [ 916.678019][T11401] loop4: detected capacity change from 0 to 8192 [ 916.739340][T11409] trusted_key: encrypted_key: insufficient parameters specified [ 916.747824][T11409] trusted_key: encrypted_key: insufficient parameters specified [ 916.773933][T11401] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 916.980170][T11401] REISERFS (device loop4): using ordered data mode [ 917.078799][T11421] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1843'. [ 917.236987][T11401] reiserfs: using flush barriers [ 917.342870][T11424] nfs: Unknown parameter 'À(&^/' [ 917.355174][T11424] loop5: detected capacity change from 0 to 8 [ 918.092637][T11424] SQUASHFS error: zlib decompression failed, data probably corrupt [ 918.100727][T11424] SQUASHFS error: Failed to read block 0x9b: -5 [ 918.107091][T11424] SQUASHFS error: Unable to read metadata cache entry [99] [ 918.114359][T11424] SQUASHFS error: Unable to read inode 0x127 [ 918.156958][T11401] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 918.312464][T11401] REISERFS (device loop4): checking transaction log (loop4) [ 918.465982][T11401] REISERFS (device loop4): Using tea hash to sort names [ 918.476872][T11401] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 918.487202][T11431] fuse: Unknown parameter 'fd0x0000000000000003' [ 919.463556][T11442] lo speed is unknown, defaulting to 1000 [ 922.336378][ T4489] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 923.571188][ T4489] usb 6-1: device descriptor read/64, error -71 [ 923.845429][T11455] loop4: detected capacity change from 0 to 8192 [ 923.936348][T11455] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 923.945948][ T4489] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 923.993713][T11455] REISERFS (device loop4): using ordered data mode [ 924.000289][T11455] reiserfs: using flush barriers [ 924.057432][T11455] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 924.091599][T11455] REISERFS (device loop4): checking transaction log (loop4) [ 924.109067][T11455] REISERFS (device loop4): Using r5 hash to sort names [ 924.131909][T11455] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 924.161908][ T26] audit: type=1800 audit(1781600707.485:32): pid=11455 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1845" name="file1" dev="loop4" ino=3 res=0 errno=0 [ 924.264327][ T4489] usb 6-1: Using ep0 maxpacket: 32 [ 924.417701][ T4489] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 924.450370][ T4489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 924.473845][ T4489] usb 6-1: config 0 descriptor?? [ 924.516806][ T4489] gspca_main: sunplus-2.14.0 probing 041e:400b [ 925.009267][T11448] loop5: detected capacity change from 0 to 2048 [ 925.280436][T11478] nfs: Unknown parameter 'À(&^/' [ 925.292763][T11478] loop1: detected capacity change from 0 to 8 [ 925.326096][ T4489] gspca_sunplus: reg_w_riv err -110 [ 925.331634][ T4489] sunplus: probe of 6-1:0.0 failed with error -110 [ 925.394815][T11448] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 925.488455][ T4318] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 925.551264][T11478] SQUASHFS error: zlib decompression failed, data probably corrupt [ 925.559485][T11478] SQUASHFS error: Failed to read block 0x9b: -5 [ 925.565903][T11478] SQUASHFS error: Unable to read metadata cache entry [99] [ 925.573177][T11478] SQUASHFS error: Unable to read inode 0x127 [ 925.845883][ T4318] usb 1-1: Using ep0 maxpacket: 32 [ 925.997693][ T4318] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 926.040803][ T4318] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.219234][T11481] fuse: Unknown parameter 'fd0x0000000000000003' [ 926.258799][ T4318] usb 1-1: config 0 descriptor?? [ 926.303064][ T4318] gspca_main: sunplus-2.14.0 probing 041e:400b [ 926.477813][T11483] lo speed is unknown, defaulting to 1000 [ 927.691136][T11479] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 928.480073][T11494] lo speed is unknown, defaulting to 1000 [ 930.255421][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.263097][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 930.335240][T11491] loop4: detected capacity change from 0 to 4096 [ 930.348088][ T4318] gspca_sunplus: reg_w_riv err -110 [ 930.485727][T11496] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1858'. [ 930.727776][ T4318] sunplus: probe of 1-1:0.0 failed with error -110 [ 930.746618][ T4489] usb 6-1: USB disconnect, device number 35 [ 930.794238][ T4318] usb 1-1: USB disconnect, device number 51 [ 930.836283][T11497] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 931.980244][T11519] fuse: Unknown parameter 'fd0x0000000000000003' [ 932.907448][T11522] lo speed is unknown, defaulting to 1000 [ 934.215784][T11534] nfs: Unknown parameter 'À(&^/' [ 934.751242][T11534] loop4: detected capacity change from 0 to 8 [ 934.798656][T11534] SQUASHFS error: zlib decompression failed, data probably corrupt [ 934.806635][T11534] SQUASHFS error: Failed to read block 0x9b: -5 [ 934.812914][T11534] SQUASHFS error: Unable to read metadata cache entry [99] [ 934.820283][T11534] SQUASHFS error: Unable to read inode 0x127 [ 935.028872][T11542] loop1: detected capacity change from 0 to 2048 [ 935.309222][T11546] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1874'. [ 935.379436][T11542] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 935.638728][T11551] trusted_key: encrypted_key: insufficient parameters specified [ 935.647294][T11551] trusted_key: encrypted_key: insufficient parameters specified [ 935.659449][ T4318] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 935.807390][T11553] lo speed is unknown, defaulting to 1000 [ 937.251945][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 937.382347][ T4318] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 937.402519][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.437250][ T4318] usb 5-1: config 0 descriptor?? [ 937.485984][ T4318] gspca_main: sunplus-2.14.0 probing 041e:400b [ 937.620095][ T6525] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 937.890850][ T6525] usb 2-1: Using ep0 maxpacket: 32 [ 938.031845][ T6525] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 938.084343][ T6525] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 938.172762][ T6525] usb 2-1: config 0 descriptor?? [ 938.239676][ T6525] gspca_main: sunplus-2.14.0 probing 041e:400b [ 938.328236][T11571] lo speed is unknown, defaulting to 1000 [ 939.105165][ T4318] gspca_sunplus: reg_w_riv err -110 [ 939.125410][ T4318] sunplus: probe of 5-1:0.0 failed with error -110 [ 939.905998][T11575] lo speed is unknown, defaulting to 1000 [ 940.642987][ T6525] gspca_sunplus: reg_w_riv err -110 [ 940.648308][ T6525] sunplus: probe of 2-1:0.0 failed with error -110 [ 940.929537][ T6525] usb 5-1: USB disconnect, device number 44 [ 941.909116][T11584] lo speed is unknown, defaulting to 1000 [ 942.433870][ T6525] usb 2-1: USB disconnect, device number 46 [ 942.821803][T11596] nfs: Unknown parameter 'À(&^/' [ 942.834557][T11596] loop1: detected capacity change from 0 to 8 [ 943.546342][T11596] SQUASHFS error: zlib decompression failed, data probably corrupt [ 943.554429][T11596] SQUASHFS error: Failed to read block 0x9b: -5 [ 943.560812][T11596] SQUASHFS error: Unable to read metadata cache entry [99] [ 943.568119][T11596] SQUASHFS error: Unable to read inode 0x127 [ 944.062948][T11600] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1885'. [ 944.878923][T11606] trusted_key: encrypted_key: insufficient parameters specified [ 944.887620][T11606] trusted_key: encrypted_key: insufficient parameters specified [ 944.975219][T11608] nfs: Unknown parameter 'À(&^/' [ 945.840093][T11620] fuse: Bad value for 'fd' [ 946.067335][T11619] loop1: detected capacity change from 0 to 8192 [ 947.241554][T11619] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 947.416755][T11638] nfs: Unknown parameter 'À(&^/' [ 947.475605][T11619] REISERFS (device loop1): using ordered data mode [ 947.634088][T11636] lo speed is unknown, defaulting to 1000 [ 947.834206][T11619] reiserfs: using flush barriers [ 947.938999][T11619] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 948.095253][T11619] REISERFS (device loop1): checking transaction log (loop1) [ 948.704454][T11651] lo speed is unknown, defaulting to 1000 [ 949.372571][ T4233] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 950.359479][T11619] REISERFS (device loop1): Using tea hash to sort names [ 950.445047][ T4233] usb 1-1: Using ep0 maxpacket: 32 [ 950.489947][T11619] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 950.575034][ T4233] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 950.591779][ T4233] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.657875][ T4233] usb 1-1: config 0 descriptor?? [ 950.750797][ T4233] gspca_main: sunplus-2.14.0 probing 041e:400b [ 951.821135][ T4233] gspca_sunplus: reg_w_riv err -110 [ 951.826924][ T4233] sunplus: probe of 1-1:0.0 failed with error -110 [ 953.140499][T11685] lo speed is unknown, defaulting to 1000 [ 953.637033][ T4233] usb 1-1: USB disconnect, device number 52 [ 954.180770][T11696] lo speed is unknown, defaulting to 1000 [ 954.786366][T11700] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1913'. [ 954.970565][ T4231] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 955.296961][T11707] nfs: Unknown parameter 'À(&^/' [ 955.310421][T11707] loop1: detected capacity change from 0 to 8 [ 955.893418][ T4231] usb 6-1: Using ep0 maxpacket: 32 [ 956.035471][T11708] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1914'. [ 956.081656][T11707] SQUASHFS error: zlib decompression failed, data probably corrupt [ 956.089789][T11707] SQUASHFS error: Failed to read block 0x9b: -5 [ 956.096162][T11707] SQUASHFS error: Unable to read metadata cache entry [99] [ 956.103531][T11707] SQUASHFS error: Unable to read inode 0x127 [ 957.236981][ T4231] usb 6-1: unable to read config index 0 descriptor/all [ 957.244009][ T4231] usb 6-1: can't read configurations, error -71 [ 957.435515][T11718] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1917'. [ 958.046854][T11722] fuse: Bad value for 'fd' [ 958.459940][T11724] nfs: Unknown parameter 'À(&^/' [ 959.028323][T11735] lo speed is unknown, defaulting to 1000 [ 961.592184][T11756] lo speed is unknown, defaulting to 1000 [ 962.689834][T11766] nfs: Unknown parameter 'À(&^/' [ 963.203809][T11769] lo speed is unknown, defaulting to 1000 [ 966.286883][T11795] device syzkaller0 entered promiscuous mode [ 966.524797][T11799] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1934'. [ 968.907421][T11811] lo speed is unknown, defaulting to 1000 [ 969.927032][T11810] loop4: detected capacity change from 0 to 2048 [ 970.223637][T11810] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 970.473189][ T4233] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 970.483654][T11826] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 970.765666][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 970.798325][ T4231] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 970.895832][ T4233] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 970.928644][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.039441][ T4233] usb 2-1: config 0 descriptor?? [ 971.079677][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 971.096016][ T4233] gspca_main: sunplus-2.14.0 probing 041e:400b [ 971.210344][ T4231] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 971.232532][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 971.273789][ T4231] usb 1-1: config 0 descriptor?? [ 971.322331][ T4231] gspca_main: sunplus-2.14.0 probing 041e:400b [ 971.946676][ T4233] gspca_sunplus: reg_w_riv err -110 [ 971.951989][ T4233] sunplus: probe of 2-1:0.0 failed with error -110 [ 971.964575][ T4231] gspca_sunplus: reg_w_riv err -110 [ 971.970716][ T4231] sunplus: probe of 1-1:0.0 failed with error -110 [ 971.989775][T11823] loop1: detected capacity change from 0 to 2048 [ 972.002380][T11842] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1945'. [ 972.132071][T11823] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 972.488064][T11823] lo speed is unknown, defaulting to 1000 [ 972.920887][T11852] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1948'. [ 974.200705][ T4233] usb 2-1: USB disconnect, device number 47 [ 974.516040][T11864] nfs: Unknown parameter 'À(&^/' [ 974.531183][T11864] loop5: detected capacity change from 0 to 8 [ 974.678163][T11866] nfs: Unknown parameter 'À(&^/' [ 974.799275][T11864] SQUASHFS error: zlib decompression failed, data probably corrupt [ 974.807668][T11864] SQUASHFS error: Failed to read block 0x9b: -5 [ 974.814070][T11864] SQUASHFS error: Unable to read metadata cache entry [99] [ 974.821572][T11864] SQUASHFS error: Unable to read inode 0x127 [ 975.193107][ T4233] usb 1-1: USB disconnect, device number 53 [ 975.244446][T11868] loop4: detected capacity change from 0 to 2048 [ 975.367700][T11868] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 976.099863][T11881] nfs: Unknown parameter 'À(&^/' [ 976.127169][T11881] loop1: detected capacity change from 0 to 8 [ 976.199767][T11880] lo speed is unknown, defaulting to 1000 [ 976.268611][T11881] SQUASHFS error: zlib decompression failed, data probably corrupt [ 976.276763][T11881] SQUASHFS error: Failed to read block 0x9b: -5 [ 976.283139][T11881] SQUASHFS error: Unable to read metadata cache entry [99] [ 976.290431][T11881] SQUASHFS error: Unable to read inode 0x127 [ 976.308432][T11876] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 976.347383][T11872] loop5: detected capacity change from 0 to 8192 [ 977.031188][T11872] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 977.097700][T11872] REISERFS (device loop5): using ordered data mode [ 977.151693][T11872] reiserfs: using flush barriers [ 977.176528][T11889] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1956'. [ 977.233722][T11872] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 977.338227][T11872] REISERFS (device loop5): checking transaction log (loop5) [ 977.549564][T11894] trusted_key: encrypted_key: insufficient parameters specified [ 977.561301][T11894] trusted_key: encrypted_key: insufficient parameters specified [ 980.347132][T11892] trusted_key: encrypted_key: insufficient parameters specified [ 980.393187][T11896] trusted_key: encrypted_key: insufficient parameters specified [ 980.483748][T11872] REISERFS (device loop5): Using tea hash to sort names [ 980.549040][T11872] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 980.872851][T11901] lo speed is unknown, defaulting to 1000 [ 981.337645][ T4235] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 981.361378][T11906] loop5: detected capacity change from 0 to 32768 [ 982.537314][ T4235] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 982.550617][ T4235] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 982.573719][ T4235] usb 5-1: config 0 descriptor?? [ 982.618347][ T4235] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 983.068731][T11904] udc-core: couldn't find an available UDC or it's busy [ 983.082865][T11904] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 983.125090][ T4235] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 983.159972][ T4235] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 983.426609][T11917] loop5: detected capacity change from 0 to 32768 [ 983.553579][T11917] (syz.5.1963,11917,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 983.599077][T11917] (syz.5.1963,11917,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 983.658208][T11917] (syz.5.1963,11917,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x656d756e, computed 0x6ffed392. Applying ECC. [ 983.724905][T11917] (syz.5.1963,11917,0):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0x656d756e, computed 0xb3a26753 [ 983.779528][T11925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1967'. [ 983.783234][T11917] (syz.5.1963,11917,0):ocfs2_validate_dir_block:452 ERROR: Checksum failed for dinode 288 [ 983.831947][T11917] (syz.5.1963,11917,0):ocfs2_read_virt_blocks:1021 ERROR: status = -5 [ 983.864880][T11917] (syz.5.1963,11917,0):ocfs2_read_dir_block:511 ERROR: status = -5 [ 983.891917][T11917] (syz.5.1963,11917,0):ocfs2_find_entry_el:728 ERROR: reading directory 18, offset 0 [ 983.914395][T11917] (syz.5.1963,11917,0):ocfs2_init_global_system_inodes:462 ERROR: status = -22 [ 983.940257][T11917] (syz.5.1963,11917,0):ocfs2_init_global_system_inodes:464 ERROR: Unable to load system inode 1, possibly corrupt fs? [ 983.940297][T11917] (syz.5.1963,11917,0):ocfs2_init_global_system_inodes:473 ERROR: status = -22 [ 984.013170][T11917] (syz.5.1963,11917,1):ocfs2_initialize_super:2281 ERROR: status = -22 [ 984.027641][T11917] (syz.5.1963,11917,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 984.938202][T11748] usb 5-1: USB disconnect, device number 45 [ 985.512598][T11939] trusted_key: encrypted_key: insufficient parameters specified [ 985.523090][T11939] trusted_key: encrypted_key: insufficient parameters specified [ 988.683844][T11958] lo speed is unknown, defaulting to 1000 [ 989.110762][T11968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1978'. [ 989.656806][T11974] netlink: 182 bytes leftover after parsing attributes in process `syz.1.1981'. [ 990.176293][ T4231] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 990.523092][ T4231] usb 2-1: Using ep0 maxpacket: 32 [ 990.686188][ T4231] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 990.839436][ T4231] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 990.880373][ T4231] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 990.922576][ T4231] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 991.103807][T11990] trusted_key: encrypted_key: insufficient parameters specified [ 991.124143][T11990] trusted_key: encrypted_key: insufficient parameters specified [ 991.882342][T11994] trusted_key: encrypted_key: insufficient parameters specified [ 991.890781][T11996] trusted_key: encrypted_key: insufficient parameters specified [ 992.013757][ T4231] usb 2-1: config 0 descriptor?? [ 992.295734][T12002] netlink: 'syz.3.1988': attribute type 1 has an invalid length. [ 992.317942][T12002] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1988'. [ 992.462964][T12006] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1990'. [ 992.784297][T12018] loop1: detected capacity change from 0 to 2048 [ 992.796947][T11739] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 992.928532][T12018] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 993.415534][T12023] lo speed is unknown, defaulting to 1000 [ 993.914951][ T4177] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 994.721322][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.729921][T12022] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 994.744952][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.838638][ T4234] usb 2-1: USB disconnect, device number 48 [ 995.007695][T11739] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 995.023314][T11739] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 995.045125][T11739] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 995.055708][ T4177] usb 1-1: Using ep0 maxpacket: 32 [ 995.066631][T11739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.191730][ T4177] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 995.205429][ T4177] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 995.233111][ T4177] usb 1-1: config 0 descriptor?? [ 995.312531][ T4177] gspca_main: sunplus-2.14.0 probing 041e:400b [ 995.375862][T11739] usb 5-1: usb_control_msg returned -32 [ 995.383827][T11739] usbtmc 5-1:16.0: can't read capabilities [ 995.505741][T11747] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 995.639132][T12036] lo speed is unknown, defaulting to 1000 [ 995.765576][T11747] usb 6-1: Using ep0 maxpacket: 32 [ 995.896551][T11747] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 995.983473][T12041] trusted_key: encrypted_key: insufficient parameters specified [ 995.992126][T12041] trusted_key: encrypted_key: insufficient parameters specified [ 996.079808][T11747] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 996.090618][ T4177] gspca_sunplus: reg_w_riv err -110 [ 996.096894][ T4177] sunplus: probe of 1-1:0.0 failed with error -110 [ 996.148506][T11747] usb 6-1: config 0 descriptor?? [ 996.230465][T11747] gspca_main: sunplus-2.14.0 probing 041e:400b [ 996.597837][T12043] lo speed is unknown, defaulting to 1000 [ 997.011267][T11747] gspca_sunplus: reg_w_riv err -110 [ 997.026123][T11747] sunplus: probe of 6-1:0.0 failed with error -110 [ 997.102200][ T5270] usb 5-1: USB disconnect, device number 46 [ 997.516435][T12050] loop5: detected capacity change from 0 to 2048 [ 997.636938][T12050] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 998.307160][ T4234] usb 1-1: USB disconnect, device number 54 [ 998.542457][T11737] usb 6-1: USB disconnect, device number 38 [ 998.577057][T12064] device veth0_to_team entered promiscuous mode [ 998.596426][T12064] input: syz1 as /devices/virtual/input/input6 [ 998.782769][T12067] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2004'. [ 998.808532][T12068] loop5: detected capacity change from 0 to 136 [ 999.391705][T12064] device veth0_to_team left promiscuous mode [ 1000.336629][ T4233] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1000.487561][T12084] lo speed is unknown, defaulting to 1000 [ 1000.552039][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2009'. [ 1000.651459][ T4233] usb 5-1: Using ep0 maxpacket: 32 [ 1000.658961][T12086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1000.803988][T12088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2009'. [ 1000.871432][T12088] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 1000.882054][ T4233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1000.905828][ T4233] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1000.945824][ T443] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 1000.953402][ T4233] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1001.010086][ T4233] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.082401][ T4233] usb 5-1: config 0 descriptor?? [ 1001.855907][T12092] trusted_key: encrypted_key: insufficient parameters specified [ 1001.866753][T12092] trusted_key: encrypted_key: insufficient parameters specified [ 1002.232943][T12094] loop4: detected capacity change from 0 to 2048 [ 1002.428982][T12094] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1003.551826][T12114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2015'. [ 1003.687160][ T4234] usb 5-1: USB disconnect, device number 47 [ 1003.760558][T12112] loop1: detected capacity change from 0 to 8192 [ 1003.868234][T12112] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal [ 1003.921273][T12112] REISERFS (device loop1): using ordered data mode [ 1003.991059][T12112] reiserfs: using flush barriers [ 1004.035548][T12112] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1004.104978][T12112] REISERFS (device loop1): checking transaction log (loop1) [ 1004.290396][ T4234] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1004.380366][T12125] lo speed is unknown, defaulting to 1000 [ 1004.582866][ T4234] usb 5-1: Using ep0 maxpacket: 16 [ 1004.643905][T12112] REISERFS (device loop1): Using tea hash to sort names [ 1004.734656][T12112] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage. [ 1004.810335][ T4234] usb 5-1: config 1 has an invalid interface descriptor of length 8, skipping [ 1004.837024][T12127] loop5: detected capacity change from 0 to 8192 [ 1004.853714][ T4234] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1004.916009][ T4234] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1004.940394][T12127] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal [ 1005.074773][T12134] lo speed is unknown, defaulting to 1000 [ 1005.721430][T12127] REISERFS (device loop5): using ordered data mode [ 1005.727997][T12127] reiserfs: using flush barriers [ 1005.790363][ T4234] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1005.821111][T12127] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1005.882849][ T4234] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1005.903966][T12127] REISERFS (device loop5): checking transaction log (loop5) [ 1005.932911][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1005.998458][ T4234] usb 5-1: SerialNumber: syz [ 1006.095372][ T4234] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 1006.149498][ T4234] cdc_acm 5-1:1.0: This needs exactly 3 endpoints [ 1006.195616][ T4234] cdc_acm: probe of 5-1:1.0 failed with error -22 [ 1006.533998][T12140] mmap: syz.0.2023 (12140) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 1006.560348][T12127] REISERFS (device loop5): Using tea hash to sort names [ 1006.611701][T12127] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 1008.015655][ T5270] usb 5-1: USB disconnect, device number 48 [ 1008.105425][T12157] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2027'. [ 1008.159980][T12159] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2028'. [ 1008.738216][T12167] lo speed is unknown, defaulting to 1000 [ 1008.942697][ T4231] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 1009.066722][T12173] loop1: detected capacity change from 0 to 2048 [ 1009.219495][ T4231] usb 1-1: Using ep0 maxpacket: 32 [ 1009.260052][T12173] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,noload,norecovery,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 1009.359723][ T4231] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1009.369864][ T4231] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1009.424809][ T4231] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1009.433916][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1009.466109][ T4231] usb 1-1: config 0 descriptor?? [ 1011.399352][ T5270] usb 1-1: USB disconnect, device number 55 [ 1011.548356][T12190] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2035'. [ 1011.575845][T12188] 9pnet: Insufficient options for proto=fd [ 1011.799661][T12188] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 1011.903361][T12194] nfs: Unknown parameter 'À(&^/' [ 1011.916688][T12194] loop5: detected capacity change from 0 to 8 [ 1012.058819][T12194] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1012.067005][T12194] SQUASHFS error: Failed to read block 0x9b: -5 [ 1012.073408][T12194] SQUASHFS error: Unable to read metadata cache entry [99] [ 1012.080808][T12194] SQUASHFS error: Unable to read inode 0x127 [ 1012.947798][ T5270] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 1013.006098][T12202] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2040'. [ 1013.154896][T12210] loop4: detected capacity change from 0 to 1764 [ 1013.319403][T12216] lo speed is unknown, defaulting to 1000 [ 1013.378355][ T5270] usb 1-1: Using ep0 maxpacket: 32 [ 1013.521615][T12214] lo speed is unknown, defaulting to 1000 [ 1013.616505][ T5270] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.626732][ T5270] usb 1-1: config 0 has no interfaces? [ 1013.632726][ T5270] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1013.641828][ T5270] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1013.651963][ T5270] usb 1-1: config 0 descriptor?? [ 1013.692369][ T4231] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 1013.925566][T12224] trusted_key: encrypted_key: insufficient parameters specified [ 1013.934393][T12224] trusted_key: encrypted_key: insufficient parameters specified [ 1014.213064][ T4231] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1014.342847][ T4231] usb 5-1: config 129 has an invalid interface number: 135 but max is 0 [ 1014.362395][ T4231] usb 5-1: config 129 has an invalid interface number: 5 but max is 0 [ 1014.464142][ T4231] usb 5-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 1014.578514][ T4231] usb 5-1: config 129 has no interface number 0 [ 1014.732165][ T4231] usb 5-1: config 129 has no interface number 1 [ 1014.759680][ T4231] usb 5-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 1014.981099][ T4231] usb 5-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 1015.002798][ T4231] usb 5-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 1015.419328][T12245] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2051'. [ 1015.465302][T12245] device gretap1 entered promiscuous mode [ 1015.495698][ T4231] usb 5-1: config 129 interface 135 has no altsetting 0 [ 1015.502738][ T4231] usb 5-1: config 129 interface 5 has no altsetting 0 [ 1015.515067][ T4233] usb 1-1: USB disconnect, device number 56 [ 1015.688884][T12254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2054'. [ 1015.776067][T12257] fuse: Bad value for 'fd' [ 1015.804772][ T4231] usb 5-1: string descriptor 0 read error: -22 [ 1015.821402][ T4231] usb 5-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 1015.852753][ T4231] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1015.920338][T12242] loop5: detected capacity change from 0 to 32768 [ 1015.941523][ T4231] usb 5-1: MIDIStreaming interface descriptor not found [ 1016.617415][T12265] netlink: 'syz.3.2055': attribute type 1 has an invalid length. [ 1016.771147][ T4231] usb 5-1: USB disconnect, device number 49 [ 1017.106147][T12274] loop5: detected capacity change from 0 to 1024 [ 1017.289461][T12282] bridge0: port 2(bridge_slave_1) entered disabled state [ 1017.613479][ T4231] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 1018.185151][ T4410] hfsplus: b-tree write err: -5, ino 3 [ 1018.294953][T12296] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2067'. [ 1019.292453][ T4231] usb 5-1: Using ep0 maxpacket: 32 [ 1019.315513][T12311] overlayfs: missing 'lowerdir' [ 1019.430361][ T4231] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1019.462583][ T4231] usb 5-1: config 0 has no interfaces? [ 1019.468574][ T4231] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1019.496130][ T4231] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1019.543574][ T4231] usb 5-1: config 0 descriptor?? [ 1019.874878][T12319] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 1019.916909][T12324] lo speed is unknown, defaulting to 1000 [ 1020.273861][T12326] loop4: detected capacity change from 0 to 2048 [ 1020.374935][T12326] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1020.416975][T12311] loop5: detected capacity change from 0 to 32768 [ 1020.442354][T12311] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 scanned by syz.5.2071 (12311) [ 1020.564402][T12311] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 1020.603590][T12311] BTRFS info (device loop5): setting nodatacow, compression disabled [ 1020.646469][T12311] BTRFS info (device loop5): use no compression [ 1020.652783][T12311] BTRFS info (device loop5): enabling disk space caching [ 1020.671151][T12311] BTRFS info (device loop5): ignoring data csums [ 1020.677590][T12311] BTRFS info (device loop5): turning on async discard [ 1020.754773][T12311] BTRFS info (device loop5): enabling free space tree [ 1020.852674][T12311] BTRFS error (device loop5): ignoredatacsums must be used with ro mount option [ 1021.221233][T12345] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 1021.336079][T11738] usb 5-1: USB disconnect, device number 50 [ 1021.340326][T12311] BTRFS error (device loop5): open_ctree failed: -22 [ 1021.901306][T12352] overlayfs: missing 'lowerdir' [ 1022.430954][ T7] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1022.438667][ T4231] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 1022.753992][ T7] usb 2-1: Using ep0 maxpacket: 32 [ 1022.932153][ T4231] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1022.943337][ T7] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1022.952335][ T7] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1022.973103][ T4231] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1022.994593][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.003017][ T4231] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1023.018554][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1023.041602][ T7] usb 2-1: config 0 descriptor?? [ 1023.058197][T12354] loop4: detected capacity change from 0 to 32768 [ 1023.084194][T12346] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1023.360260][T12354] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.2081 (12354) [ 1023.699825][T12368] nfs: Unknown parameter 'À(&^/' [ 1023.772795][T12367] lo speed is unknown, defaulting to 1000 [ 1023.888935][T11738] usb 1-1: USB disconnect, device number 57 [ 1023.913959][T12354] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 1023.973109][T12354] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1023.995871][T12354] BTRFS info (device loop4): use no compression [ 1024.010012][T12369] loop1: detected capacity change from 0 to 2048 [ 1024.020592][T12354] BTRFS info (device loop4): enabling disk space caching [ 1024.028226][T12354] BTRFS info (device loop4): ignoring data csums [ 1024.034903][T12354] BTRFS info (device loop4): turning on async discard [ 1024.042291][T12354] BTRFS info (device loop4): enabling free space tree [ 1024.049503][T12354] BTRFS error (device loop4): ignoredatacsums must be used with ro mount option [ 1024.181263][T12354] BTRFS error (device loop4): open_ctree failed: -22 [ 1024.293550][ T4918] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (4918) [ 1024.386620][T12369] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1024.480194][T12382] loop5: detected capacity change from 0 to 128 [ 1024.743817][T12376] nfs: Unknown parameter 'À(&^/' [ 1025.035070][T12382] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 1025.174690][T12382] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1025.275989][ T4182] udevd[4182]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1025.300126][ T1107] usb 2-1: USB disconnect, device number 49 [ 1025.802502][T11747] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 1026.008219][ T1107] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1026.062653][T11747] usb 1-1: Using ep0 maxpacket: 32 [ 1026.192819][T11747] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1026.280160][T11747] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1026.409711][ T1107] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1026.454604][T11747] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1026.491416][ T1107] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1026.622785][T11747] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1026.669583][ T1107] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1026.767068][T11747] usb 1-1: config 0 descriptor?? [ 1026.802351][ T26] audit: type=1326 audit(1781600802.251:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1026.863060][T12409] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 1026.875398][ T26] audit: type=1326 audit(1781600802.279:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1026.900038][ T26] audit: type=1326 audit(1781600802.279:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1026.955303][T12409] cgroup: noprefix used incorrectly [ 1026.962043][ T1107] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 1026.971155][ T1107] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 1026.972430][ T26] audit: type=1326 audit(1781600802.279:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1027.017595][T12414] loop4: detected capacity change from 0 to 22 [ 1027.026724][ T1107] usb 6-1: Product: syz [ 1027.031079][ T1107] usb 6-1: Manufacturer: syz [ 1027.054520][T12414] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1027.071491][ T1107] usb 6-1: SerialNumber: syz [ 1027.145713][T12414] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1027.155339][ T26] audit: type=1326 audit(1781600802.279:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1027.222435][T12418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2099'. [ 1027.231672][ T26] audit: type=1326 audit(1781600802.279:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1027.427276][ T26] audit: type=1326 audit(1781600802.279:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1027.460976][ T1107] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 39 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 1027.585448][T12423] nfs: Unknown parameter 'À(&^/' [ 1027.709024][ T4231] usb 6-1: USB disconnect, device number 39 [ 1027.724762][T12423] loop1: detected capacity change from 0 to 8 [ 1027.816824][T12423] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1027.825091][T12423] SQUASHFS error: Failed to read block 0x9b: -5 [ 1027.831506][T12423] SQUASHFS error: Unable to read metadata cache entry [99] [ 1027.838840][T12423] SQUASHFS error: Unable to read inode 0x127 [ 1028.048803][ T26] audit: type=1326 audit(1781600802.279:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1028.131848][ T4231] usblp0: removed [ 1028.294723][ T26] audit: type=1326 audit(1781600802.279:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1028.335895][ T26] audit: type=1326 audit(1781600802.279:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12405 comm="syz.3.2096" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f985f06fe59 code=0x7ffc0000 [ 1028.868440][ T7] usb 1-1: USB disconnect, device number 58 [ 1028.943638][ T5270] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 1029.246991][ T5270] usb 5-1: Using ep0 maxpacket: 32 [ 1029.582977][ T5270] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1029.592051][ T5270] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1029.601634][ T5270] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.619478][ T5270] usb 5-1: config 0 descriptor?? [ 1030.477870][T12446] loop5: detected capacity change from 0 to 512 [ 1030.486232][T12424] loop4: detected capacity change from 0 to 2048 [ 1030.633907][T12424] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1030.700664][T12446] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2107: invalid indirect mapped block 4294967295 (level 1) [ 1030.704265][T12446] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.2107: invalid indirect mapped block 4294967295 (level 1) [ 1030.705143][T12446] EXT4-fs (loop5): 2 truncates cleaned up [ 1030.705179][T12446] EXT4-fs (loop5): mounted filesystem without journal. Opts: noauto_da_alloc,init_itable=0x0000000000004004,barrier=0x0000000000000005,,errors=continue. Quota mode: writeback. [ 1030.801891][T12446] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm syz.5.2107: bg 0: block 5: invalid block bitmap [ 1030.811583][T12446] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1030.888856][T12446] EXT4-fs error (device loop5): ext4_get_parent:1906: inode #11: comm syz.5.2107: bad parent inode number: 3 [ 1031.425725][ T4231] usb 5-1: USB disconnect, device number 51 [ 1032.372967][T12461] loop4: detected capacity change from 0 to 512 [ 1032.390573][T12463] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2111'. [ 1032.685579][T12461] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 1032.739000][T12473] nfs: Unknown parameter 'À(&^/' [ 1032.881898][T12461] ext4 filesystem being mounted at /391/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1033.742174][ T1107] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1033.864272][T12496] trusted_key: encrypted_key: insufficient parameters specified [ 1033.876834][T12496] trusted_key: encrypted_key: insufficient parameters specified [ 1033.991294][ T4233] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1034.002200][ T1107] usb 6-1: Using ep0 maxpacket: 32 [ 1034.132705][ T1107] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1034.214681][ T1107] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1034.346229][ T1107] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1034.954339][ T1107] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.163202][ T1107] usb 6-1: config 0 descriptor?? [ 1036.027653][ T4233] usb 2-1: Using ep0 maxpacket: 32 [ 1036.332559][ T4233] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1036.383119][ T4233] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1036.490843][ T4233] usb 2-1: config 0 descriptor?? [ 1036.597805][ T4233] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1037.069759][T12489] loop1: detected capacity change from 0 to 2048 [ 1037.085955][T12513] loop5: detected capacity change from 0 to 2048 [ 1037.221400][T12515] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2128'. [ 1037.274828][T12489] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1037.294970][T11739] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 1037.487986][T12515] nfs: Unknown parameter 'À(&^/' [ 1037.494777][T12515] loop4: detected capacity change from 0 to 8 [ 1037.523213][ T4233] gspca_sunplus: reg_w_riv err -110 [ 1037.528662][ T4233] sunplus: probe of 2-1:0.0 failed with error -110 [ 1037.567073][T12513] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1037.602424][T12515] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1037.610883][T12515] SQUASHFS error: Failed to read block 0x9b: -5 [ 1037.617643][T12515] SQUASHFS error: Unable to read metadata cache entry [99] [ 1037.624952][T12515] SQUASHFS error: Unable to read inode 0x127 [ 1038.454735][T11747] usb 6-1: USB disconnect, device number 40 [ 1038.464821][T11739] usb 1-1: Using ep0 maxpacket: 16 [ 1038.602502][T11739] usb 1-1: config 0 has no interfaces? [ 1038.729816][T12540] loop4: detected capacity change from 0 to 512 [ 1038.779264][T11739] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 1038.800114][T11739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.832873][T11739] usb 1-1: Product: syz [ 1038.840386][T11739] usb 1-1: Manufacturer: syz [ 1038.845659][T11739] usb 1-1: SerialNumber: syz [ 1038.863299][T11739] r8152-cfgselector 1-1: config 0 descriptor?? [ 1038.954968][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2137'. [ 1039.159555][ T4233] usb 2-1: USB disconnect, device number 50 [ 1039.168394][T12554] loop4: detected capacity change from 0 to 128 [ 1039.212372][T11739] usbip-host 1-1: 1-1 is not in match_busid table... skip! [ 1039.235032][T12554] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2 [ 1039.437685][T11747] usb 1-1: USB disconnect, device number 59 [ 1040.137950][T12558] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2139'. [ 1040.187158][ T13] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1040.217444][T12558] device vlan2 entered promiscuous mode [ 1040.237936][T12558] device bridge0 entered promiscuous mode [ 1040.403208][T12567] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2143'. [ 1040.958848][T12573] nfs: Unknown parameter 'À(&^/' [ 1041.067201][T12571] lo speed is unknown, defaulting to 1000 [ 1041.190727][ T4238] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 1041.198572][ T13] usb 6-1: Using ep0 maxpacket: 16 [ 1041.455068][ T13] usb 6-1: config 1 has an invalid interface number: 105 but max is 0 [ 1041.465833][ T13] usb 6-1: config 1 has no interface number 0 [ 1041.498946][ T13] usb 6-1: config 1 interface 105 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1041.541530][ T13] usb 6-1: config 1 interface 105 has no altsetting 0 [ 1041.595506][ T4238] usb 5-1: Using ep0 maxpacket: 32 [ 1041.726439][ T4238] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1041.745186][ T4238] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1041.753945][ T13] usb 6-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 1041.773458][ T13] usb 6-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 1041.786795][ T13] usb 6-1: Product: syz [ 1041.796133][ T13] usb 6-1: Manufacturer: syz [ 1041.800838][ T13] usb 6-1: SerialNumber: syz [ 1041.815119][ T4238] usb 5-1: config 0 descriptor?? [ 1041.883258][ T4238] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1042.105740][ T13] aqc111: probe of 6-1:1.105 failed with error -22 [ 1042.333614][ T4233] usb 6-1: USB disconnect, device number 41 [ 1042.468105][T12563] loop4: detected capacity change from 0 to 2048 [ 1042.588402][T12563] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1042.635093][T11747] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1042.798034][ T4238] gspca_sunplus: reg_w_riv err -110 [ 1042.803640][ T4238] sunplus: probe of 5-1:0.0 failed with error -110 [ 1042.898501][T11747] usb 2-1: Using ep0 maxpacket: 32 [ 1043.074962][T12591] lo speed is unknown, defaulting to 1000 [ 1043.773018][T12589] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1043.794285][T11747] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1043.804222][T11747] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1043.819990][T11747] usb 2-1: config 0 descriptor?? [ 1043.873830][T11747] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1043.960785][T12594] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2150'. [ 1044.020401][T12597] loop5: detected capacity change from 0 to 4096 [ 1044.067059][T12597] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 1044.194984][T11739] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 1044.465793][T11739] usb 1-1: Using ep0 maxpacket: 16 [ 1044.528244][T12586] loop1: detected capacity change from 0 to 2048 [ 1045.130971][T12586] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1045.434907][T11747] gspca_sunplus: reg_w_riv err -110 [ 1045.440321][T11747] sunplus: probe of 2-1:0.0 failed with error -110 [ 1045.458507][ T1107] usb 5-1: USB disconnect, device number 52 [ 1045.538116][T11739] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1045.624791][T11739] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 1045.691490][T11739] usb 1-1: can't read configurations, error -71 [ 1046.466175][T12618] trusted_key: encrypted_key: insufficient parameters specified [ 1046.478092][T12618] trusted_key: encrypted_key: insufficient parameters specified [ 1046.862142][T12623] nfs: Unknown parameter 'À(&^/' [ 1047.623808][T12626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2157'. [ 1047.699406][T12626] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2157'. [ 1048.668503][T11739] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 1049.121176][T11738] usb 2-1: USB disconnect, device number 51 [ 1049.716410][T12635] lo speed is unknown, defaulting to 1000 [ 1051.029449][T12608] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1051.282464][T12638] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 1051.309318][T12641] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.2162'. [ 1051.955586][T12654] loop1: detected capacity change from 0 to 512 [ 1052.029107][T12654] EXT4-fs (loop1): Ignoring removed bh option [ 1052.045752][T12656] device sit0 entered promiscuous mode [ 1052.070667][T12656] netlink: 'syz.1.2166': attribute type 1 has an invalid length. [ 1052.078498][T12656] netlink: 1 bytes leftover after parsing attributes in process `syz.1.2166'. [ 1052.099464][T12654] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 1052.169270][T12659] nfs: Unknown parameter 'À(&^/' [ 1052.409902][T12654] EXT4-fs (loop1): 1 truncate cleaned up [ 1052.487850][T12654] EXT4-fs (loop1): mounted filesystem without journal. Opts: bh,,errors=continue. Quota mode: none. [ 1053.469005][T12676] FAULT_INJECTION: forcing a failure. [ 1053.469005][T12676] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1053.748122][T12676] CPU: 1 PID: 12676 Comm: syz.0.2173 Not tainted syzkaller #0 [ 1053.755662][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1053.765764][T12676] Call Trace: [ 1053.769076][T12676] [ 1053.772080][T12676] dump_stack_lvl+0x188/0x250 [ 1053.776806][T12676] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1053.782471][T12676] ? show_regs_print_info+0x20/0x20 [ 1053.787711][T12676] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 1053.793388][T12676] should_fail+0x38c/0x4c0 [ 1053.797850][T12676] _copy_from_user+0x2e/0x170 [ 1053.802561][T12676] __copy_msghdr_from_user+0xc9/0x630 [ 1053.807974][T12676] ? verify_lock_unused+0x140/0x140 [ 1053.813206][T12676] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1053.818565][T12676] ? finish_task_switch+0x12f/0x640 [ 1053.823818][T12676] ___sys_sendmsg+0x19a/0x2e0 [ 1053.828729][T12676] ? __sys_sendmsg+0x2a0/0x2a0 [ 1053.833567][T12676] __se_sys_sendmsg+0x1af/0x290 [ 1053.838467][T12676] ? __x64_sys_sendmsg+0x80/0x80 [ 1053.843540][T12676] ? lockdep_hardirqs_on+0x94/0x140 [ 1053.848808][T12676] do_syscall_64+0x4c/0xa0 [ 1053.853252][T12676] ? clear_bhb_loop+0x30/0x80 [ 1053.857958][T12676] ? clear_bhb_loop+0x30/0x80 [ 1053.862672][T12676] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1053.868610][T12676] RIP: 0033:0x7f25dc23be59 [ 1053.873052][T12676] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1053.892697][T12676] RSP: 002b:00007f25da495028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1053.901139][T12676] RAX: ffffffffffffffda RBX: 00007f25dc4b4fa0 RCX: 00007f25dc23be59 [ 1053.909139][T12676] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 1053.917138][T12676] RBP: 00007f25da495090 R08: 0000000000000000 R09: 0000000000000000 [ 1053.925150][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1053.933148][T12676] R13: 00007f25dc4b5038 R14: 00007f25dc4b4fa0 R15: 00007fff31b15818 [ 1053.941170][T12676] [ 1054.209181][ T13] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1054.253648][T12681] usb usb7: usbfs: process 12681 (syz.0.2175) did not claim interface 0 before use [ 1054.379959][T12685] loop4: detected capacity change from 0 to 2048 [ 1054.505539][ T13] usb 6-1: Using ep0 maxpacket: 32 [ 1054.540115][T12660] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1054.665280][ T13] usb 6-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1054.824055][T12685] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1054.867362][ T13] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1055.105003][ T13] usb 6-1: config 0 descriptor?? [ 1055.370281][ T13] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1057.940626][ T13] gspca_sunplus: reg_w_riv err -110 [ 1057.945922][ T13] sunplus: probe of 6-1:0.0 failed with error -110 [ 1058.133694][T12700] loop5: detected capacity change from 0 to 2048 [ 1058.192765][T12706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2179'. [ 1058.273880][T12700] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1058.530322][T11738] usb 6-1: USB disconnect, device number 42 [ 1058.556489][T12706] nfs: Unknown parameter 'À(&^/' [ 1058.568353][T12706] loop1: detected capacity change from 0 to 8 [ 1058.959395][T12706] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1058.967392][T12706] SQUASHFS error: Failed to read block 0x9b: -5 [ 1058.973845][T12706] SQUASHFS error: Unable to read metadata cache entry [99] [ 1058.981202][T12706] SQUASHFS error: Unable to read inode 0x127 [ 1059.420975][T12728] netlink: 'syz.3.2185': attribute type 1 has an invalid length. [ 1060.868915][T12728] netlink: 'syz.3.2185': attribute type 2 has an invalid length. [ 1060.877559][T12728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2185'. [ 1060.975323][T12736] device syzkaller0 entered promiscuous mode [ 1061.052257][T12736] FAULT_INJECTION: forcing a failure. [ 1061.052257][T12736] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.056732][T12741] device syzkaller0 entered promiscuous mode [ 1061.112265][T12736] CPU: 1 PID: 12736 Comm: syz.4.2189 Not tainted syzkaller #0 [ 1061.119796][T12736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1061.129889][T12736] Call Trace: [ 1061.133204][T12736] [ 1061.136172][T12736] dump_stack_lvl+0x188/0x250 [ 1061.140993][T12736] ? show_regs_print_info+0x20/0x20 [ 1061.146250][T12736] ? load_image+0x400/0x400 [ 1061.150793][T12736] ? __lock_acquire+0x7d10/0x7d10 [ 1061.155863][T12736] ? __fget_files+0x40f/0x480 [ 1061.160582][T12736] should_fail+0x38c/0x4c0 [ 1061.165055][T12736] _copy_from_user+0x2e/0x170 [ 1061.169782][T12736] __sys_sendto+0x2e9/0x620 [ 1061.174342][T12736] ? __ia32_sys_getpeername+0x80/0x80 [ 1061.179788][T12736] ? __lock_acquire+0x7d10/0x7d10 [ 1061.185159][T12736] ? lock_chain_count+0x20/0x20 [ 1061.190057][T12736] ? vtime_user_exit+0x2c8/0x3e0 [ 1061.195052][T12736] __x64_sys_sendto+0xda/0xf0 [ 1061.199780][T12736] do_syscall_64+0x4c/0xa0 [ 1061.204237][T12736] ? clear_bhb_loop+0x30/0x80 [ 1061.209052][T12736] ? clear_bhb_loop+0x30/0x80 [ 1061.213769][T12736] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1061.219712][T12736] RIP: 0033:0x7f1b99604e59 [ 1061.224162][T12736] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.243810][T12736] RSP: 002b:00007f1b9785e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1061.252272][T12736] RAX: ffffffffffffffda RBX: 00007f1b9987dfa0 RCX: 00007f1b99604e59 [ 1061.260319][T12736] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 1061.266069][ T7] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 1061.268340][T12736] RBP: 00007f1b9785e090 R08: 00002000000001c0 R09: 0000000000000014 [ 1061.283910][T12736] R10: 0000000000048040 R11: 0000000000000246 R12: 0000000000000001 [ 1061.291920][T12736] R13: 00007f1b9987e038 R14: 00007f1b9987dfa0 R15: 00007ffee7330448 [ 1061.299946][T12736] [ 1061.307108][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1061.313699][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.584285][T12754] trusted_key: encrypted_key: insufficient parameters specified [ 1061.634717][T12750] trusted_key: encrypted_key: insufficient parameters specified [ 1061.706903][T12757] loop1: detected capacity change from 0 to 1024 [ 1061.764341][ T7] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1061.776426][T12759] FAULT_INJECTION: forcing a failure. [ 1061.776426][T12759] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.806972][T12757] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1061.818603][ T7] usb 1-1: not running at top speed; connect to a high speed hub [ 1061.850988][T12759] CPU: 0 PID: 12759 Comm: syz.4.2196 Not tainted syzkaller #0 [ 1061.858489][T12759] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1061.868648][T12759] Call Trace: [ 1061.871925][T12759] [ 1061.874956][T12759] dump_stack_lvl+0x188/0x250 [ 1061.879674][T12759] ? show_regs_print_info+0x20/0x20 [ 1061.884873][T12759] ? load_image+0x400/0x400 [ 1061.889379][T12759] ? __lock_acquire+0x7d10/0x7d10 [ 1061.894406][T12759] should_fail+0x38c/0x4c0 [ 1061.898828][T12759] _copy_from_user+0x2e/0x170 [ 1061.903549][T12759] __copy_msghdr_from_user+0xc9/0x630 [ 1061.908961][T12759] ? verify_lock_unused+0x140/0x140 [ 1061.914255][T12759] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 1061.919548][T12759] ___sys_sendmsg+0x19a/0x2e0 [ 1061.924232][T12759] ? __sys_sendmsg+0x2a0/0x2a0 [ 1061.929188][T12759] ? vfs_write+0x8b2/0xd60 [ 1061.933637][T12759] __se_sys_sendmsg+0x1af/0x290 [ 1061.938493][T12759] ? __x64_sys_sendmsg+0x80/0x80 [ 1061.943440][T12759] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1061.949438][T12759] ? lockdep_hardirqs_on+0x94/0x140 [ 1061.954637][T12759] do_syscall_64+0x4c/0xa0 [ 1061.959058][T12759] ? clear_bhb_loop+0x30/0x80 [ 1061.963799][T12759] ? clear_bhb_loop+0x30/0x80 [ 1061.968615][T12759] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1061.974506][T12759] RIP: 0033:0x7f1b99604e59 [ 1061.978964][T12759] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1061.998607][T12759] RSP: 002b:00007f1b9785e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1062.007020][T12759] RAX: ffffffffffffffda RBX: 00007f1b9987dfa0 RCX: 00007f1b99604e59 [ 1062.014992][T12759] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000004 [ 1062.022959][T12759] RBP: 00007f1b9785e090 R08: 0000000000000000 R09: 0000000000000000 [ 1062.030946][T12759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1062.038941][T12759] R13: 00007f1b9987e038 R14: 00007f1b9987dfa0 R15: 00007ffee7330448 [ 1062.046927][T12759] [ 1062.089332][ T7] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 4 [ 1062.273698][ T7] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40 [ 1062.292545][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.311777][ T7] usb 1-1: Product: syz [ 1062.315988][ T7] usb 1-1: Manufacturer: syz [ 1062.463854][ T7] usb 1-1: SerialNumber: syz [ 1064.366495][T12779] tipc: Cannot configure node identity twice [ 1064.483389][T12778] lo speed is unknown, defaulting to 1000 [ 1064.775756][ T7] usb 1-1: 1:1: invalid format type 0x1002 is detected, processed as PCM [ 1064.784285][ T7] usb 1-1: 1:1 : sample bitwidth 253 in over sample bytes 16 [ 1064.834740][ T7] usb 1-1: 1:1 : unsupported sample bitwidth 253 in 16 bytes [ 1064.916424][ T7] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1064.925831][T12785] loop1: detected capacity change from 0 to 1024 [ 1064.978896][ T7] usb 1-1: USB disconnect, device number 62 [ 1065.028019][T12794] kAFS: No cell specified [ 1065.234772][ T13] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 1065.411486][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1065.523140][ T13] usb 5-1: Using ep0 maxpacket: 32 [ 1066.248707][ T13] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 1066.278804][ T13] usb 5-1: config 0 has no interface number 0 [ 1066.335560][ T5270] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 1066.465546][ T13] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1066.542535][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1066.550614][ T13] usb 5-1: Product: syz [ 1066.603767][ T13] usb 5-1: Manufacturer: syz [ 1066.622736][ T13] usb 5-1: SerialNumber: syz [ 1066.653688][ T13] usb 5-1: config 0 descriptor?? [ 1066.706070][ T13] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1066.725296][ T5270] usb 2-1: config 0 has an invalid interface number: 151 but max is 0 [ 1066.738530][ T5270] usb 2-1: config 0 has no interface number 0 [ 1066.761915][ T5270] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10 [ 1066.799091][ T5270] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1066.852875][T12817] loop5: detected capacity change from 0 to 512 [ 1066.933098][ T13] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1066.976161][ T13] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1067.007150][ T5270] usb 2-1: New USB device found, idVendor=0499, idProduct=ebb7, bcdDevice=68.2f [ 1067.033102][ T5270] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1067.121443][ T5270] usb 2-1: Product: syz [ 1067.332158][ T5270] usb 2-1: Manufacturer: syz [ 1067.740597][ T4312] hfsplus: b-tree write err: -5, ino 25 [ 1067.754334][ T5270] usb 2-1: SerialNumber: syz [ 1067.892197][ T4312] hfsplus: b-tree write err: -5, ino 4 [ 1068.015673][ T5270] usb 2-1: config 0 descriptor?? [ 1068.026219][ T4312] hfsplus: b-tree write err: -5, ino 2 [ 1068.087618][T12817] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled [ 1068.155089][T12817] EXT4-fs (loop5): inline encryption not supported [ 1068.184854][T12817] EXT4-fs (loop5): inodes count not valid: 64 vs 32 [ 1068.503271][T12828] lo speed is unknown, defaulting to 1000 [ 1069.197179][ T4234] usb 5-1: USB disconnect, device number 53 [ 1069.216515][ C0] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -108 [ 1069.226632][ T4234] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1069.261208][ T4234] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1069.303010][ T4234] quatech2 5-1:0.51: device disconnected [ 1069.823298][ T4177] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 1070.126558][ T4177] usb 1-1: Using ep0 maxpacket: 16 [ 1070.268024][ T4177] usb 1-1: config 1 has an invalid descriptor of length 191, skipping remainder of the config [ 1070.344691][ T4177] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1070.427816][T12850] loop4: detected capacity change from 0 to 256 [ 1070.499620][T12850] exfat: Unknown parameter '01777777777777777777777iocharset' [ 1070.528307][ T5270] usb 2-1: can't set config #0, error -71 [ 1070.541535][ T5270] usb 2-1: USB disconnect, device number 52 [ 1070.657531][ T4177] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1070.677727][ T4177] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.726798][ T4177] usb 1-1: Product: syz [ 1070.803902][T12850] loop4: detected capacity change from 0 to 512 [ 1070.810668][ T4177] usb 1-1: Manufacturer: syz [ 1070.815536][ T4177] usb 1-1: SerialNumber: syz [ 1071.777729][ T4177] usb 1-1: 0:2 : does not exist [ 1071.838646][ T4177] usb 1-1: USB disconnect, device number 63 [ 1071.891169][T12863] loop5: detected capacity change from 0 to 512 [ 1072.022772][T12850] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 1072.042681][T12850] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1072.210302][T12868] lo speed is unknown, defaulting to 1000 [ 1073.008255][ T4181] udevd[4181]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1073.042314][T12863] EXT4-fs (loop5): orphan cleanup on readonly fs [ 1073.043927][T12863] __quota_error: 66 callbacks suppressed [ 1073.043943][T12863] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 1073.044076][T12863] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 1073.044110][T12863] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.2227: Failed to acquire dquot type 0 [ 1073.045140][T12863] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 1073.045162][T12863] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 1073.045194][T12863] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.2227: Failed to acquire dquot type 0 [ 1073.051763][T12863] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.2227: bg 0: block 64: padding at end of block bitmap is not set [ 1073.082917][T12863] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 1073.095870][T12863] Quota error (device loop5): dq_insert_tree: Quota tree root isn't allocated! [ 1073.096019][T12863] Quota error (device loop5): qtree_write_dquot: Error -5 occurred while creating quota [ 1073.096055][T12863] EXT4-fs error (device loop5): ext4_acquire_dquot:6236: comm syz.5.2227: Failed to acquire dquot type 0 [ 1073.107217][T12863] EXT4-fs (loop5): 1 orphan inode deleted [ 1073.186288][T12863] EXT4-fs (loop5): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000003,nolazytime,,errors=continue. Quota mode: writeback. [ 1073.541241][T12890] loop5: detected capacity change from 0 to 2048 [ 1073.581832][T11739] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1073.762993][T12894] loop1: detected capacity change from 0 to 8192 [ 1073.769113][T12890] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1073.959306][T12900] nfs: Unknown parameter 'À(&^/' [ 1074.568115][T12897] EXT4-fs error (device loop5): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1074.592299][T12894] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "" [ 1074.657663][T12906] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2235'. [ 1075.022588][T11739] usb 1-1: unable to get BOS descriptor or descriptor too short [ 1075.130833][T11739] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.140986][T11739] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1075.170973][T12914] loop5: detected capacity change from 0 to 256 [ 1075.316562][T12914] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 1075.423550][T11739] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 1075.451659][T11739] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.481574][T12917] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2237'. [ 1075.508655][T12914] exFAT-fs (loop5): error, invalid size(size(0) > aligned(9223372036854777344) [ 1075.508655][T12914] [ 1075.512919][T11739] usb 1-1: Product: syz [ 1075.523883][T12914] exFAT-fs (loop5): Filesystem has been set read-only [ 1075.555760][T11739] usb 1-1: Manufacturer: syz [ 1075.589350][T11739] usb 1-1: SerialNumber: syz [ 1075.728103][T12919] lo speed is unknown, defaulting to 1000 [ 1076.359468][T12894] loop1: detected capacity change from 0 to 32768 [ 1076.404079][T11739] usb 1-1: selecting invalid altsetting 1 [ 1076.410381][T11739] usb 1-1: unit 0 not found! [ 1076.424093][T11739] snd-usb-audio: probe of 1-1:1.0 failed with error -22 [ 1076.462132][T12894] XFS (loop1): sunit and swidth must be specified together [ 1076.531958][T11739] usb 1-1: USB disconnect, device number 64 [ 1076.954599][ T4915] udevd[4915]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1077.995563][T12946] loop1: detected capacity change from 0 to 2048 [ 1078.014269][T12952] netlink: 100 bytes leftover after parsing attributes in process `syz.5.2246'. [ 1078.745384][T12955] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2247'. [ 1078.868696][T12946] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1079.303161][T12963] nfs: Unknown parameter 'À(&^/' [ 1079.864353][T12965] lo speed is unknown, defaulting to 1000 [ 1081.062150][T12974] lo speed is unknown, defaulting to 1000 [ 1081.976785][ T4188] EXT4-fs error (device loop1): ext4_find_extent:929: inode #2: comm syz-executor: pblk 93 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4) [ 1082.001691][T12969] loop4: detected capacity change from 0 to 4096 [ 1082.143182][T12969] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 1082.175055][T12969] ntfs: (device loop4): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 1082.188867][T12969] ntfs: volume version 3.1. [ 1082.196300][T12980] bridge0: port 2(bridge_slave_1) entered disabled state [ 1082.218248][T12969] ntfs: (device loop4): map_mft_record_page(): Mft record 0x9 is corrupt. Run chkdsk. [ 1082.269091][T12969] ntfs: (device loop4): map_mft_record(): Failed with error code 5. [ 1082.277138][T12969] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0x9 as bad. Run chkdsk. [ 1082.303320][T12969] ntfs: (device loop4): load_system_files(): Failed to load $Secure. [ 1082.331542][T12985] loop1: detected capacity change from 0 to 764 [ 1082.346269][T12969] ntfs: (device loop4): ntfs_fill_super(): Failed to load system files. [ 1082.511067][T12985] Symlink component flag not implemented [ 1082.583815][T12985] Symlink component flag not implemented [ 1083.081426][T11738] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1083.536696][T11738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1083.585989][T11738] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1083.670172][T11738] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1083.779867][T11738] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1083.856665][T11738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1083.972773][T11738] usb 1-1: config 0 descriptor?? [ 1086.722333][T11738] usbhid 1-1:0.0: can't add hid device: -71 [ 1086.728397][T11738] usbhid: probe of 1-1:0.0 failed with error -71 [ 1086.807782][T11738] usb 1-1: USB disconnect, device number 65 [ 1087.173694][T11739] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1087.760042][T13014] loop5: detected capacity change from 0 to 4096 [ 1087.775419][T13021] lo speed is unknown, defaulting to 1000 [ 1087.831528][T13014] NILFS (loop5): unrecognized mount option "=00000000000000000100000" [ 1087.913712][T11739] usb 2-1: Using ep0 maxpacket: 32 [ 1088.140032][T11739] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1088.149129][T11739] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1088.174298][T11739] usb 2-1: config 0 descriptor?? [ 1088.219437][T11739] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1088.240585][ T4238] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1088.529806][ T4238] usb 1-1: Using ep0 maxpacket: 32 [ 1088.614852][T13035] loop4: detected capacity change from 0 to 32768 [ 1088.660003][ T4238] usb 1-1: config 1 has an invalid interface number: 11 but max is 0 [ 1088.686062][ T4238] usb 1-1: config 1 has no interface number 0 [ 1088.699774][T13035] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Trying to join cluster "lock_nolock", "__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9" [ 1088.719650][ T4238] usb 1-1: config 1 interface 11 has no altsetting 0 [ 1088.734600][T13035] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: Now mounting FS (format 0)... [ 1088.750125][T13004] loop1: detected capacity change from 0 to 2048 [ 1088.775479][T13035] gfs2: Invalid block size [ 1088.780978][T13035] gfs2: fsid=__Š°"_½z#²˱1Ä ¢ “I¡3ØÆÆåwÕÊ‚X9: can't read superblock: -22 [ 1088.841766][T13004] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1088.930926][ T4238] usb 1-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=48.2e [ 1088.955910][ T4238] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1089.002005][ T4238] usb 1-1: Product: syz [ 1089.020421][ T4238] usb 1-1: Manufacturer: syz [ 1089.028374][T11739] gspca_sunplus: reg_w_riv err -110 [ 1089.033759][T11739] sunplus: probe of 2-1:0.0 failed with error -110 [ 1089.036479][ T4238] usb 1-1: SerialNumber: syz [ 1089.171037][ T4238] option 1-1:1.11: GSM modem (1-port) converter detected [ 1089.199282][ T4238] usb 1-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 1089.450638][ T1109] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 1089.940520][T13031] lo speed is unknown, defaulting to 1000 [ 1090.197510][T11739] usb 2-1: USB disconnect, device number 53 [ 1090.349706][ T1109] usb 5-1: Using ep0 maxpacket: 32 [ 1090.708010][ T1109] usb 5-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 1090.779813][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1090.973272][ T1109] usb 5-1: Product: syz [ 1090.988670][ T1109] usb 5-1: Manufacturer: syz [ 1091.004423][ T1109] usb 5-1: SerialNumber: syz [ 1091.087813][ T1109] hub 5-1:1.0: bad descriptor, ignoring hub [ 1091.093886][ T1109] hub: probe of 5-1:1.0 failed with error -5 [ 1091.413083][T11738] usb 1-1: USB disconnect, device number 66 [ 1091.418249][T13073] loop5: detected capacity change from 0 to 2048 [ 1091.466892][T11738] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 1091.504444][T11738] option 1-1:1.11: device disconnected [ 1091.519614][ T1109] usb 5-1: palm_os_4_probe - error -110 getting connection info [ 1091.527359][ T1109] visor 5-1:1.0: Handspring Visor / Palm OS converter detected [ 1091.566079][T13073] EXT4-fs (loop5): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1091.589529][ T1109] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 1091.707152][ T1109] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 1092.287412][T13081] lo speed is unknown, defaulting to 1000 [ 1092.730975][ T4234] usb 5-1: USB disconnect, device number 54 [ 1092.770145][T13067] loop1: detected capacity change from 0 to 32768 [ 1092.776911][ T4234] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 1092.819678][ T4234] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 1092.839247][ T4234] visor 5-1:1.0: device disconnected [ 1092.954781][T13067] XFS (loop1): Mounting V5 Filesystem [ 1093.165993][ T1109] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1093.263508][ T4234] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 1093.447754][ T1109] usb 6-1: Using ep0 maxpacket: 32 [ 1093.555952][ T4234] usb 5-1: Using ep0 maxpacket: 32 [ 1093.603883][ T1109] usb 6-1: config index 0 descriptor too short (expected 35577, got 27) [ 1093.623543][ T1109] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1093.653251][ T1109] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1093.684353][ T1109] usb 6-1: config 1 has no interface number 0 [ 1093.699143][ T1109] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1093.711108][ T4234] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1093.732813][ T4234] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.800023][ T1109] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1093.838325][ T4234] usb 5-1: config 0 descriptor?? [ 1093.857591][ T1109] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1093.885824][ T1109] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1093.918640][ T4234] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1093.931055][T13067] XFS (loop1): Ending clean mount [ 1093.960242][ T1109] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found [ 1094.009092][T13067] XFS (loop1): Quotacheck needed: Please wait. [ 1094.162475][T13067] XFS (loop1): Quotacheck: Done. [ 1094.209551][ T1109] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached [ 1094.351462][ T4188] XFS (loop1): Unmounting Filesystem [ 1094.406191][T13095] loop4: detected capacity change from 0 to 2048 [ 1094.636781][T13095] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1094.736778][ T4234] gspca_sunplus: reg_w_riv err -110 [ 1094.742430][ T4234] sunplus: probe of 5-1:0.0 failed with error -110 [ 1095.428586][T13132] lo speed is unknown, defaulting to 1000 [ 1096.178492][ T4237] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22) [ 1096.249687][T11738] usb 6-1: USB disconnect, device number 43 [ 1096.399496][T11739] usb 5-1: USB disconnect, device number 55 [ 1096.661166][T11738] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected [ 1096.759182][T13146] lo speed is unknown, defaulting to 1000 [ 1097.800171][T13151] trusted_key: encrypted_key: insufficient parameters specified [ 1097.906943][T13151] trusted_key: encrypted_key: insufficient parameters specified [ 1099.176297][T13159] loop5: detected capacity change from 0 to 4096 [ 1099.265821][T13159] NILFS (loop5): invalid segment: Checksum error in segment payload [ 1099.265964][T13159] NILFS (loop5): trying rollback from an earlier position [ 1099.331746][T13145] loop1: detected capacity change from 0 to 40427 [ 1099.344292][T13159] NILFS (loop5): recovery complete [ 1099.350395][T13172] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1099.442864][T13145] F2FS-fs (loop1): build fault injection attr: rate: 4, type: 0x1ffff [ 1099.452441][T13145] F2FS-fs (loop1) : inject slab alloc in f2fs_kmem_cache_alloc of iget_locked+0x191/0x820 [ 1099.452489][T13145] F2FS-fs (loop1): Failed to read F2FS meta data inode [ 1100.358484][T13124] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1100.985204][T13124] usb 2-1: Using ep0 maxpacket: 32 [ 1102.883040][T13124] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1102.942743][T13124] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1103.128683][T13124] usb 2-1: config 0 descriptor?? [ 1103.369758][T13124] usb 2-1: can't set config #0, error -71 [ 1103.399877][T13124] usb 2-1: USB disconnect, device number 54 [ 1103.855345][ T1109] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1104.149639][ T1109] usb 5-1: Using ep0 maxpacket: 32 [ 1104.357805][ T1109] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 1104.422848][ T1109] usb 5-1: config 0 has no interface number 0 [ 1104.565864][ T1109] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 1104.835685][ T1109] usb 5-1: config 0 interface 196 has no altsetting 0 [ 1107.249969][T13231] lo speed is unknown, defaulting to 1000 [ 1107.389702][ T1109] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 1107.627852][ T1109] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.641699][ T1109] usb 5-1: Product: syz [ 1107.646012][ T1109] usb 5-1: Manufacturer: syz [ 1107.712924][ T1109] usb 5-1: config 0 descriptor?? [ 1107.767791][ T1109] usb 5-1: can't set config #0, error -71 [ 1107.783897][T13239] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2326'. [ 1107.794653][ T1109] usb 5-1: USB disconnect, device number 56 [ 1107.800996][T13239] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2326'. [ 1110.522931][T13256] loop4: detected capacity change from 0 to 32768 [ 1110.552025][T13254] loop1: detected capacity change from 0 to 32768 [ 1110.621125][T13256] JBD2: Ignoring recovery information on journal [ 1110.639675][T13256] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75 [ 1110.650264][T13256] JBD2: bad block at offset 32 [ 1110.656759][T13254] XFS (loop1): Mounting V5 Filesystem [ 1110.707631][T13256] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1110.804642][T13254] XFS (loop1): Ending clean mount [ 1111.061622][ T4189] ocfs2: Unmounting device (7,4) on (node local) [ 1113.408721][T13296] could not allocate digest TFM handle rmd320 [ 1113.661474][ T4188] XFS (loop1): Unmounting Filesystem [ 1114.954984][T13316] netlink: 200 bytes leftover after parsing attributes in process `syz.3.2347'. [ 1115.006513][T13320] FAULT_INJECTION: forcing a failure. [ 1115.006513][T13320] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 1115.022295][T13320] CPU: 1 PID: 13320 Comm: syz.4.2348 Not tainted syzkaller #0 [ 1115.029805][T13320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1115.039881][T13320] Call Trace: [ 1115.043176][T13320] [ 1115.046128][T13320] dump_stack_lvl+0x188/0x250 [ 1115.050928][T13320] ? show_regs_print_info+0x20/0x20 [ 1115.056146][T13320] ? load_image+0x400/0x400 [ 1115.060680][T13320] ? __lock_acquire+0x7d10/0x7d10 [ 1115.065743][T13320] ? mark_lock+0x94/0x320 [ 1115.070097][T13320] should_fail+0x38c/0x4c0 [ 1115.074542][T13320] prepare_alloc_pages+0x1e4/0x5f0 [ 1115.079692][T13320] __alloc_pages+0x11b/0x480 [ 1115.084313][T13320] ? zone_statistics+0x170/0x170 [ 1115.089282][T13320] ? verify_lock_unused+0x140/0x140 [ 1115.094515][T13320] alloc_pages_vma+0x393/0x7c0 [ 1115.099308][T13320] wp_page_copy+0x21e/0x2050 [ 1115.103944][T13320] ? do_wp_page+0x902/0xad0 [ 1115.108475][T13320] ? insert_page_into_pte_locked+0x480/0x480 [ 1115.114474][T13320] ? do_raw_spin_unlock+0x11d/0x230 [ 1115.119694][T13320] ? _raw_spin_unlock+0x24/0x40 [ 1115.124566][T13320] ? do_wp_page+0x902/0xad0 [ 1115.129128][T13320] handle_mm_fault+0x1f06/0x4410 [ 1115.134200][T13320] ? get_page+0xe0/0xe0 [ 1115.138397][T13320] ? vmacache_find+0x4f0/0x590 [ 1115.143331][T13320] ? vmacache_update+0xa0/0x100 [ 1115.148220][T13320] ? find_vma+0x1df/0x230 [ 1115.152583][T13320] do_user_addr_fault+0x489/0xc80 [ 1115.157669][T13320] exc_page_fault+0x60/0x100 [ 1115.162317][T13320] asm_exc_page_fault+0x22/0x30 [ 1115.167203][T13320] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40 [ 1115.173833][T13320] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 a4 31 c0 0f 01 ca c3 90 90 90 90 90 90 90 90 90 90 89 d1 83 f8 [ 1115.193475][T13320] RSP: 0018:ffffc900034afa00 EFLAGS: 00050206 [ 1115.199567][T13320] RAX: ffffffff83e25a01 RBX: 00002000000012ff RCX: 0000000000001000 [ 1115.207686][T13320] RDX: 0000000000001000 RSI: ffff88807abf9000 RDI: 00002000000012c0 [ 1115.215703][T13320] RBP: 0000000000001000 R08: ffff88807abf9fff R09: 1ffff1100f57f3ff [ 1115.223711][T13320] R10: dffffc0000000000 R11: ffffed100f57f400 R12: ffff88807abf9000 [ 1115.232067][T13320] R13: 0000000000001000 R14: 00007ffffffff000 R15: 00002000000022c0 [ 1115.240072][T13320] ? copy_page_to_iter+0x481/0x910 [ 1115.245218][T13320] copy_page_to_iter+0x49e/0x910 [ 1115.250223][T13320] pipe_read+0x544/0x1260 [ 1115.254607][T13320] ? pipe_wait_writable+0x5b0/0x5b0 [ 1115.259847][T13320] ? end_current_label_crit_section+0x14b/0x170 [ 1115.266121][T13320] ? memset+0x1e/0x40 [ 1115.270137][T13320] ? iov_iter_init+0xb4/0x170 [ 1115.274843][T13320] vfs_read+0x759/0xd60 [ 1115.279038][T13320] ? kernel_read+0x1e0/0x1e0 [ 1115.283663][T13320] ? __fget_files+0x40f/0x480 [ 1115.288376][T13320] ? __fdget_pos+0x1e2/0x370 [ 1115.292991][T13320] ? ksys_read+0x71/0x260 [ 1115.297375][T13320] ksys_read+0x152/0x260 [ 1115.301651][T13320] ? vfs_write+0xd60/0xd60 [ 1115.306096][T13320] ? lockdep_hardirqs_on+0x94/0x140 [ 1115.311408][T13320] do_syscall_64+0x4c/0xa0 [ 1115.315854][T13320] ? clear_bhb_loop+0x30/0x80 [ 1115.320672][T13320] ? clear_bhb_loop+0x30/0x80 [ 1115.325380][T13320] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1115.331298][T13320] RIP: 0033:0x7f1b99604e59 [ 1115.335737][T13320] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1115.355403][T13320] RSP: 002b:00007f1b9783d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1115.363859][T13320] RAX: ffffffffffffffda RBX: 00007f1b9987e090 RCX: 00007f1b99604e59 [ 1115.371863][T13320] RDX: 0000000000001000 RSI: 00002000000012c0 RDI: 0000000000000005 [ 1115.379864][T13320] RBP: 00007f1b9783d090 R08: 0000000000000000 R09: 0000000000000000 [ 1115.387944][T13320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1115.395938][T13320] R13: 00007f1b9987e128 R14: 00007f1b9987e090 R15: 00007ffee7330448 [ 1115.403959][T13320] [ 1115.595303][T13323] lo speed is unknown, defaulting to 1000 [ 1116.821870][T11739] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1117.302211][T11739] usb 1-1: Using ep0 maxpacket: 32 [ 1117.431449][T11739] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1117.496260][T11739] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1117.505939][ T4237] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 1117.621841][T11739] usb 1-1: config 0 descriptor?? [ 1117.781527][T13337] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1117.815275][T13337] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2352'. [ 1118.028893][ T4237] usb 2-1: Using ep0 maxpacket: 32 [ 1118.277703][T11739] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1118.370014][ T4237] usb 2-1: config 0 has an invalid interface number: 51 but max is 0 [ 1118.379274][ T4237] usb 2-1: config 0 has no interface number 0 [ 1118.638962][ T1109] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1118.718888][ T4237] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1118.742917][ T4237] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.790656][ T4237] usb 2-1: Product: syz [ 1118.854662][ T4237] usb 2-1: Manufacturer: syz [ 1118.893699][ T4237] usb 2-1: SerialNumber: syz [ 1118.915516][ T4237] usb 2-1: config 0 descriptor?? [ 1118.921125][ T1109] usb 5-1: Using ep0 maxpacket: 32 [ 1119.111645][ T4237] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1119.245762][ T1109] usb 5-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1119.261620][ T1109] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1119.278260][ T1109] usb 5-1: config 0 descriptor?? [ 1119.328925][ T1109] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1119.433424][T13358] overlayfs: missing 'lowerdir' [ 1119.484908][T11739] gspca_sunplus: reg_w_riv err -110 [ 1119.493311][T11739] sunplus: probe of 1-1:0.0 failed with error -110 [ 1119.554583][ T4237] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1119.566070][ T4237] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1119.805545][T13362] lo speed is unknown, defaulting to 1000 [ 1120.546395][ T1109] gspca_sunplus: reg_w_riv err -110 [ 1120.551861][ T1109] sunplus: probe of 5-1:0.0 failed with error -110 [ 1120.672348][T13341] loop4: detected capacity change from 0 to 2048 [ 1120.817133][T13341] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1121.200213][T13366] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 1121.324115][T13367] lo speed is unknown, defaulting to 1000 [ 1121.523473][ C0] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1121.546158][ T1109] usb 2-1: USB disconnect, device number 55 [ 1121.648978][ T1109] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1121.707578][ T1109] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1122.337099][ T1109] quatech2 2-1:0.51: device disconnected [ 1122.911909][T13382] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2363'. [ 1123.232883][T13386] loop1: detected capacity change from 0 to 2048 [ 1123.290699][ T1109] usb 1-1: USB disconnect, device number 67 [ 1123.368761][T13386] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,resuid=0x0000000000000000,auto_da_alloc=0x000000000000ffff,noblock_validity,,errors=continue. Quota mode: none. [ 1123.582678][T13387] lo speed is unknown, defaulting to 1000 [ 1123.793504][T13398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2366'. [ 1124.866597][T13403] capability: warning: `syz.0.2367' uses deprecated v2 capabilities in a way that may be insecure [ 1125.815885][ T1109] Bluetooth: hci4: command 0x0409 tx timeout [ 1126.260234][ T5270] usb 5-1: USB disconnect, device number 57 [ 1126.261153][T13413] lo speed is unknown, defaulting to 1000 [ 1127.232022][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 1127.238562][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 1127.452101][T13387] chnl_net:caif_netlink_parms(): no params data found [ 1127.606445][T13426] loop4: detected capacity change from 0 to 32768 [ 1127.726022][T13422] loop1: detected capacity change from 0 to 32768 [ 1127.802394][T13387] bridge0: port 1(bridge_slave_0) entered blocking state [ 1127.854689][T13422] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz.1.2373 (13422) [ 1127.867529][T11738] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1127.875317][T13387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1127.915451][T13387] device bridge_slave_0 entered promiscuous mode [ 1127.948496][T13235] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by udevd (13235) [ 1127.962990][T13387] bridge0: port 2(bridge_slave_1) entered blocking state [ 1127.971556][T13422] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 1127.977477][T13387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1127.982066][T13422] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1127.998000][T13422] BTRFS info (device loop1): use zstd compression, level 3 [ 1128.005625][T13422] BTRFS info (device loop1): force clearing of disk cache [ 1128.013203][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 1128.022994][T13422] BTRFS info (device loop1): enabling disk space caching [ 1128.032205][T13422] BTRFS info (device loop1): disk space caching is enabled [ 1128.084875][T13422] BTRFS info (device loop1): has skinny extents [ 1128.283085][T13387] device bridge_slave_1 entered promiscuous mode [ 1128.506302][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2376'. [ 1128.592511][T13422] BTRFS info (device loop1): enabling ssd optimizations [ 1128.655674][T13422] BTRFS info (device loop1): clearing free space tree [ 1128.665206][T11738] usb 1-1: Using ep0 maxpacket: 32 [ 1128.689414][T13422] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 1128.702190][T13422] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 1128.743101][T13387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1128.795128][T11738] usb 1-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 1128.827921][T13387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1128.837300][T11738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.872779][T11738] usb 1-1: config 0 descriptor?? [ 1129.056316][T13387] team0: Port device team_slave_0 added [ 1129.063378][T13424] x_tables: duplicate entry at hook 2 [ 1129.088621][T13387] team0: Port device team_slave_1 added [ 1129.134391][T11738] gspca_main: sunplus-2.14.0 probing 041e:400b [ 1129.746959][T13387] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1129.746977][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.747005][T13387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1129.748729][T13387] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1129.748743][T13387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1129.748770][T13387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1129.889858][T13466] loop4: detected capacity change from 0 to 8192 [ 1129.972539][T11738] gspca_sunplus: reg_w_riv err -110 [ 1130.001694][T13466] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 1130.035033][T13387] device hsr_slave_0 entered promiscuous mode [ 1130.114354][T13466] REISERFS (device loop4): using ordered data mode [ 1130.120924][T13466] reiserfs: using flush barriers [ 1130.196919][T13466] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 1130.231323][T13466] REISERFS (device loop4): checking transaction log (loop4) [ 1130.243893][T13387] device hsr_slave_1 entered promiscuous mode [ 1130.256462][T13387] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1130.265251][ T4232] Bluetooth: hci4: command 0x040f tx timeout [ 1130.291279][T13387] Cannot create hsr debugfs directory [ 1130.353221][T11738] sunplus: probe of 1-1:0.0 failed with error -110 [ 1130.557831][T13466] REISERFS (device loop4): Using tea hash to sort names [ 1130.565220][T13466] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 1130.659950][T13466] [ 1130.662336][T13466] ====================================================== [ 1130.669463][T13466] WARNING: possible circular locking dependency detected [ 1130.676506][T13466] syzkaller #0 Not tainted [ 1130.680935][T13466] ------------------------------------------------------ [ 1130.687968][T13466] syz.4.2379/13466 is trying to acquire lock: [ 1130.694052][T13466] ffff88802c120128 (&mm->mmap_lock){++++}-{3:3}, at: __might_fault+0x90/0x110 [ 1130.702969][T13466] [ 1130.702969][T13466] but task is already holding lock: [ 1130.710353][T13466] ffff888147a4b090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x75/0xd0 [ 1130.719386][T13466] [ 1130.719386][T13466] which lock already depends on the new lock. [ 1130.719386][T13466] [ 1130.729811][T13466] [ 1130.729811][T13466] the existing dependency chain (in reverse order) is: [ 1130.738848][T13466] [ 1130.738848][T13466] -> #1 (&sbi->lock){+.+.}-{3:3}: [ 1130.746190][T13466] __mutex_lock_common+0x1e3/0x2400 [ 1130.751945][T13466] mutex_lock_nested+0x17/0x20 [ 1130.757261][T13466] reiserfs_write_lock+0x75/0xd0 [ 1130.762756][T13466] reiserfs_dirty_inode+0x10d/0x260 [ 1130.768620][T13466] __mark_inode_dirty+0x2c8/0xc90 [ 1130.774201][T13466] touch_atime+0x3b6/0x640 [ 1130.779181][T13466] generic_file_mmap+0xc1/0x120 [ 1130.784586][T13466] mmap_file+0x5d/0xb0 [ 1130.789200][T13466] mmap_region+0xf88/0x1650 [ 1130.794255][T13466] do_mmap+0x819/0xe90 [ 1130.798911][T13466] vm_mmap_pgoff+0x1c1/0x2d0 [ 1130.804040][T13466] ksys_mmap_pgoff+0x54b/0x790 [ 1130.809351][T13466] do_syscall_64+0x4c/0xa0 [ 1130.814320][T13466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.820760][T13466] [ 1130.820760][T13466] -> #0 (&mm->mmap_lock){++++}-{3:3}: [ 1130.828352][T13466] __lock_acquire+0x2c42/0x7d10 [ 1130.833770][T13466] lock_acquire+0x19e/0x400 [ 1130.838826][T13466] __might_fault+0xb3/0x110 [ 1130.843870][T13466] reiserfs_ioctl+0x13b/0x330 [ 1130.849197][T13466] __se_sys_ioctl+0xfa/0x170 [ 1130.854337][T13466] do_syscall_64+0x4c/0xa0 [ 1130.859300][T13466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1130.865751][T13466] [ 1130.865751][T13466] other info that might help us debug this: [ 1130.865751][T13466] [ 1130.875999][T13466] Possible unsafe locking scenario: [ 1130.875999][T13466] [ 1130.883471][T13466] CPU0 CPU1 [ 1130.888858][T13466] ---- ---- [ 1130.894235][T13466] lock(&sbi->lock); [ 1130.898265][T13466] lock(&mm->mmap_lock); [ 1130.905137][T13466] lock(&sbi->lock); [ 1130.911704][T13466] lock(&mm->mmap_lock); [ 1130.916059][T13466] [ 1130.916059][T13466] *** DEADLOCK *** [ 1130.916059][T13466] [ 1130.924220][T13466] 1 lock held by syz.4.2379/13466: [ 1130.929456][T13466] #0: ffff888147a4b090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock+0x75/0xd0 [ 1130.938903][T13466] [ 1130.938903][T13466] stack backtrace: [ 1130.944811][T13466] CPU: 0 PID: 13466 Comm: syz.4.2379 Not tainted syzkaller #0 [ 1130.952295][T13466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 1130.962371][T13466] Call Trace: [ 1130.965669][T13466] [ 1130.968613][T13466] dump_stack_lvl+0x188/0x250 [ 1130.973309][T13466] ? load_image+0x400/0x400 [ 1130.977828][T13466] ? show_regs_print_info+0x20/0x20 [ 1130.983143][T13466] ? print_circular_bug+0x12b/0x1a0 [ 1130.988366][T13466] check_noncircular+0x296/0x330 [ 1130.993458][T13466] ? add_chain_block+0x940/0x940 [ 1130.998532][T13466] ? lockdep_lock+0xf1/0x1f0 [ 1131.003156][T13466] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 1131.009164][T13466] ? mark_lock+0x94/0x320 [ 1131.013533][T13466] __lock_acquire+0x2c42/0x7d10 [ 1131.018475][T13466] ? verify_lock_unused+0x140/0x140 [ 1131.023696][T13466] ? __mutex_trylock_common+0x155/0x260 [ 1131.029352][T13466] ? rcu_lock_release+0x20/0x20 [ 1131.034228][T13466] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 1131.039705][T13466] ? reiserfs_write_lock+0x75/0xd0 [ 1131.044842][T13466] ? __mutex_lock_common+0x465/0x2400 [ 1131.050239][T13466] lock_acquire+0x19e/0x400 [ 1131.054766][T13466] ? __might_fault+0x90/0x110 [ 1131.059469][T13466] ? mutex_lock_io_nested+0x60/0x60 [ 1131.064707][T13466] ? read_lock_is_recursive+0x10/0x10 [ 1131.070105][T13466] __might_fault+0xb3/0x110 [ 1131.074624][T13466] ? __might_fault+0x90/0x110 [ 1131.079310][T13466] reiserfs_ioctl+0x13b/0x330 [ 1131.084001][T13466] ? reiserfs_unpack+0x580/0x580 [ 1131.088962][T13466] __se_sys_ioctl+0xfa/0x170 [ 1131.093566][T13466] do_syscall_64+0x4c/0xa0 [ 1131.097996][T13466] ? clear_bhb_loop+0x30/0x80 [ 1131.102695][T13466] ? clear_bhb_loop+0x30/0x80 [ 1131.107389][T13466] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 1131.113304][T13466] RIP: 0033:0x7f1b99604e59 [ 1131.117735][T13466] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1131.137362][T13466] RSP: 002b:00007f1b9785e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1131.145799][T13466] RAX: ffffffffffffffda RBX: 00007f1b9987dfa0 RCX: 00007f1b99604e59 [ 1131.153787][T13466] RDX: 0000200000000080 RSI: 0000000080087601 RDI: 0000000000000004 [ 1131.161784][T13466] RBP: 00007f1b9969ad6f R08: 0000000000000000 R09: 0000000000000000 [ 1131.169780][T13466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1131.177770][T13466] R13: 00007f1b9987e038 R14: 00007f1b9987dfa0 R15: 00007ffee7330448 [ 1131.185775][T13466] [ 1131.289871][T13387] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.320003][T13466] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2379'. [ 1131.388224][T13387] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.626669][T13387] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.839883][T13387] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1132.217418][T13387] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1132.227849][T13387] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1132.237656][T13387] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1132.247413][T13387] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1132.287966][ T4489] usb 1-1: USB disconnect, device number 68 [ 1132.349114][T13387] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1132.391453][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1132.399710][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1132.420851][T13387] 8021q: adding VLAN 0 to HW filter on device team0 [ 1132.434637][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1132.444810][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1132.456741][ T4397] bridge0: port 1(bridge_slave_0) entered blocking state [ 1132.463852][ T4397] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1132.479914][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1132.497468][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1132.506481][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1132.513588][ T4285] Bluetooth: hci4: command 0x0419 tx timeout [ 1132.520031][ T4397] bridge0: port 2(bridge_slave_1) entered blocking state [ 1132.527567][ T4397] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1132.538446][ T4312] tipc: Left network mode [ 1132.545208][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1132.554014][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1132.571554][T13387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1132.582537][T13387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1132.595454][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1132.604352][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1132.613548][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1132.622778][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1132.631705][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1132.640043][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1132.648853][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1132.657454][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1132.669790][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1132.680760][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1132.742215][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1132.749955][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1132.761175][T13387] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1132.790451][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1132.799283][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1132.828202][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1132.836495][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1132.844811][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1132.853541][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1132.870683][T13387] device veth0_vlan entered promiscuous mode [ 1132.881304][T13387] device veth1_vlan entered promiscuous mode [ 1132.898749][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1132.907088][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1132.918256][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1132.926817][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1132.937415][T13387] device veth0_macvtap entered promiscuous mode [ 1132.950619][T13387] device veth1_macvtap entered promiscuous mode [ 1132.963740][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.974284][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1132.985165][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1132.995696][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.005773][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.016905][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.026818][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.038735][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.049476][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1133.060448][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.071466][T13387] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1133.087969][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1133.096316][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1133.104241][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1133.113350][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1133.123759][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.134698][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.144664][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.155243][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.165358][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.176457][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.186367][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.197000][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.206913][T13387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1133.217377][T13387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1133.228237][T13387] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1133.245619][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1133.254378][ T4397] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1133.264483][T13387] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.273288][T13387] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.282364][T13387] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.295920][T13387] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1133.331634][T13387] ieee80211 phy15: Selected rate control algorithm 'minstrel_ht' [ 1133.363009][ T4397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.371942][T13387] ieee80211 phy16: Selected rate control algorithm 'minstrel_ht' [ 1133.374930][ T4397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.391683][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1133.409890][ T4397] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1133.417763][ T4397] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1133.425632][ T7541] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1133.745950][ T4312] device hsr_slave_0 left promiscuous mode [ 1133.752286][ T4312] device hsr_slave_1 left promiscuous mode [ 1133.758664][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1133.767161][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1133.774817][ T4312] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1133.782494][ T4312] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1133.790765][ T4312] device bridge_slave_1 left promiscuous mode [ 1133.796971][ T4312] bridge0: port 2(bridge_slave_1) entered disabled state [ 1133.805011][ T4312] bridge0: port 1(bridge_slave_0) entered disabled state [ 1133.816024][ T4312] device veth1_macvtap left promiscuous mode [ 1133.822768][ T4312] device veth0_macvtap left promiscuous mode [ 1133.828957][ T4312] device veth1_vlan left promiscuous mode [ 1133.834860][ T4312] device veth0_vlan left promiscuous mode [ 1133.946391][ T4312] team0 (unregistering): Port device team_slave_1 removed [ 1133.960381][ T4312] team0 (unregistering): Port device team_slave_0 removed [ 1133.972191][ T4312] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1133.984674][ T4312] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1134.039046][ T4312] bond0 (unregistering): Released all slaves