last executing test programs: 7m50.750123003s ago: executing program 1 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) truncate(&(0x7f0000001c00)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42d9) 7m50.559201082s ago: executing program 1 (id=52): setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, &(0x7f0000000040)=0xfffffffa, 0x4) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0xfffffdf0) syz_mount_image$fuse(0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) syz_emit_ethernet(0x4e, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010142, 0x0) r1 = syz_io_uring_setup(0x3e3, &(0x7f00000020c0)={0x0, 0xe138, 0x2, 0x1200001, 0xffffffff}, &(0x7f0000000000)=0x0, &(0x7f0000002080)=0x0, &(0x7f0000002140)) syz_io_uring_modify_offsets$generic(r2, r3, 0x2c, 0x10000) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000080), 0x0) io_uring_enter(r1, 0x7659, 0xecb2, 0x1, &(0x7f0000002240)={[0x5]}, 0x8) readv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/165, 0xa5}], 0x1) 7m49.571468751s ago: executing program 1 (id=61): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) fcntl$lock(r0, 0x7, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r1, &(0x7f00000001c0)={0x11, 0x17, r2, 0x1, 0xf}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r4, &(0x7f0000000140)=ANY=[], 0xffffff6a) splice(r3, 0x0, r1, 0x0, 0xa, 0xc) 7m48.558435991s ago: executing program 1 (id=68): syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x46, 0xc11, &(0x7f0000000d00)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020) 7m47.425201687s ago: executing program 1 (id=73): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x2, @local, 0x8ac2d78a}}, 0x0, 0x0, 0x43, 0x0, "ee8b0e650926a96ecc136e7fb980e989db9e8bf9b9312948f6651a8de213eb94cd46e19d9c65a018444a131f4da58ae36556dd38ea6c029607462029add09240005c6776267513308a3d40aa1c788df6"}, 0xd8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000001c0)=@gcm_256={{0x304}, "6ae04425ace3f60c", "acba84f0a6731f234db1cc7f3f382ad796bd667cb12ea99509873931d2873103", "0f9dafb4", "ec3fff9afd96e6c0"}, 0x38) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) ioctl$int_in(r0, 0x5421, &(0x7f0000000140)=0xffff) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000440)=0x634, 0x4) writev(r0, &(0x7f0000000080)=[{&(0x7f00000002c0)="ec", 0xfdef}], 0x1) 7m46.886205653s ago: executing program 1 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 7m46.701690462s ago: executing program 32 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x8000) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x84}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) 7m42.871288451s ago: executing program 4 (id=97): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xe, 0x2, &(0x7f0000000500)=ANY=[@ANYBLOB="b70000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write(r0, &(0x7f0000000700)='h', 0x1) recvfrom(r0, &(0x7f0000000040)=""/156, 0x9c, 0x101, 0x0, 0x0) 7m42.408387654s ago: executing program 4 (id=100): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 7m41.753616286s ago: executing program 4 (id=103): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd2(0x7e, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r2, 0x0, 0x2, r3}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x2}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x2, 0x95c, 0x61, 0x7, 0xfe, 0xe, 0x1, 0x47, 0x8b, 0x3, 0x3, 0x18, 0x7}, {0x9, 0xa, 0x8, 0xff, 0x0, 0x4, 0x5, 0x1, 0x72, 0xc0, 0x5, 0x3, 0x401}, {0x5, 0x5, 0x40, 0x2, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x12, 0x2c, 0xc}], 0x6}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000003c0)={[0xc9, 0x200000000d, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x8, 0x7fffffffffff8, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x3, 0xbde], 0x1000, 0x67a64fa265d09613}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 7m41.292312269s ago: executing program 4 (id=107): syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$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") r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x80000, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 7m40.549581045s ago: executing program 4 (id=110): setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0x130, 0x111, 0x4b4, 0x130, 0xd4feffff, 0x270, 0x20a, 0x278, 0x270, 0x278, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffffff, 0xff000000], [0x0, 0x0, 0x0, 0xffffff00], 'dvmrp0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x8ba4, 0x0, 0x80000001, '\x00', {0x10000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0xffffffc1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000004240)=0xc3, 0x4) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x8, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) 7m39.119407205s ago: executing program 4 (id=116): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x18c}, {&(0x7f0000000700)="44900001000056ee66c372f3105eb186dd8062fad2d5b5bfb0ba06f274a8d026bd209da8ffa6a26e3b3f8075704a9d0ef9aff7f1e7db24609f02d34e76992c9df9fe6888c6c9a4825c6223be6ac54536025af1dea54e527c68b0ff250261953f2da79a78104c2d9e7b16ed86b124945aa9ab7581ebd385fb61d442035db81e18c2d2462d0bb25fffe4b81ce90b597992b2a4d541611ce77f58dce7c9500118229e7cdf4ca7f6adca92c73d97ce54164c1942b2568635bec8e020b41fb2f8bba4154f0013000000000000000000001c8a9f7956583e26f6f0edc415851d0b8305fe66c2b7c114e3712d87744938848f28a13cb604000000000000000000000000000000c7aa503589", 0x108}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2acae1946a4495103af0d7d41775462593f51df475710215facd37b35605811f4af67f999", 0x5b}], 0x2) write(r0, &(0x7f0000001e00)="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", 0x32d) 7m38.770873822s ago: executing program 33 (id=116): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000c80)="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", 0x18c}, {&(0x7f0000000700)="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", 0x108}], 0x2}}], 0x1, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) writev(r0, &(0x7f0000000940)=[{&(0x7f0000000180)="398b2593a2dc7e", 0x7}, {&(0x7f0000000400)="7f96b1c0057470ba3ad9c683aafbd45ff640c70156ed616124c8d5f2ae803a3fb2703e02865d049bec0875e912a8e3c258991aeb6ae7f2acae1946a4495103af0d7d41775462593f51df475710215facd37b35605811f4af67f999", 0x5b}], 0x2) write(r0, &(0x7f0000001e00)="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", 0x32d) 6m30.184679838s ago: executing program 6 (id=379): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x3f00, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x4c}}, 0x0) 6m27.263574102s ago: executing program 6 (id=389): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x44, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4894}, 0x2) r6 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r6, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r5, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0007000024c1020000ff3207c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 6m25.073538809s ago: executing program 6 (id=394): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYBLOB="2c736d61636b6673726f6f743d2d5c7f402d832c66736d616769633d3078303030303030303030303030303030302c00"], 0xfa, 0x6b6, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = syz_open_dev$usbmon(&(0x7f0000000b40), 0xffff, 0x100) ioctl$MON_IOCG_STATS(r3, 0x80089203, 0x0) 6m23.826155701s ago: executing program 6 (id=397): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="28000000130005000100"/20, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r4], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) write$P9_RSTATFS(r9, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r2, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(0x0, 0xb) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r12, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00'}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x43, 0x0, 0x0) 6m22.146214804s ago: executing program 6 (id=399): r0 = syz_open_dev$loop(&(0x7f0000000380), 0x5, 0x400) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0xb635773f06ebbeed, 0x11, r0, 0x1529d000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x8) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x101000, 0x4, 0x2d}, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x8000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r1, 0x4000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 6m21.80904103s ago: executing program 6 (id=402): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x46000a}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) 6m18.476736254s ago: executing program 5 (id=409): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) syz_pidfd_open(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r3, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) 6m16.261199133s ago: executing program 5 (id=414): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='(o', 0x2) 6m15.134274349s ago: executing program 5 (id=419): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x890d000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x3}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x6, 0x0}, {0x18, 0x9, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x6, 0x1, 0x5, 0x2}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback=0xd, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 6m12.946374886s ago: executing program 5 (id=422): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x50) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x989046, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') sendfile(r0, r0, &(0x7f0000000000)=0xa01f, 0x100000110) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 6m11.44522924s ago: executing program 5 (id=427): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f0000000000)=ANY=[], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r1, 0x0, 0x0, 0x1000f4) r2 = open(&(0x7f00000000c0)='./bus\x00', 0x64842, 0x0) pwritev2(r2, &(0x7f0000000240), 0x1, 0x0, 0x0, 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0) fallocate(r3, 0x20, 0x0, 0x10000) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x20242, 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8001}) 6m11.24628986s ago: executing program 5 (id=428): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6m10.931134646s ago: executing program 34 (id=428): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) readv(r0, &(0x7f00000006c0)=[{&(0x7f0000002480)=""/4110, 0x48}], 0x1000000000000082) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) socket$nl_netfilter(0x10, 0x3, 0xc) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) 6m6.654159516s ago: executing program 35 (id=402): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x46000a}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, @remote, 0x0, 0x6, 0x0, 0x100, 0x6, 0x4180107, r4}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000240)={@mcast2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x86020086, r7}) 2m19.704547345s ago: executing program 7 (id=952): bind$packet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, 0x0, 0x4004054) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x12, r7, 0x4295f000) 2m19.246245218s ago: executing program 7 (id=956): r0 = syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[], 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r2, 0x5452, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x3, 0x635}) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x0, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x3f, 0x0, 0x0) syz_usb_control_io(r4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000003c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x1, 0x2d, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x0) syz_usb_connect$cdc_ecm(0x3, 0x0, 0x0, 0x0) syz_usb_control_io$printer(r3, &(0x7f00000002c0)={0x14, &(0x7f0000000100)={0x0, 0xd, 0x53, {0x53, 0xe, "f79a51943bacfed441b354091ca3448262f3a1547db5af4cd8cee6aea3cbcda7bb9a89bc5fedf5852cf322af0e16ba3bad76c1ecde66e44fffdc0d62fde61fb3a4cd6f314ee034524c4dcadf8cd90e0b38"}}, 0x0}, 0x0) 2m12.351332206s ago: executing program 7 (id=966): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0xca, 0xac2) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), r0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x88440) syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@none, "303ebd", 0x2}}}, 0xd) r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x80802, 0xcd) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x7, 0x4010000000000ffd, 0x0, 0x0, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a7beda9d69098c8b534464c516bdd8a0f35", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0xfffffffffffffce8, 0x6]}}) syz_usb_connect$hid(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x15, 0x3, &(0x7f0000000000)=@framed={{0xc3, 0xa, 0xa, 0xfe00, 0x0, 0x71, 0x10, 0x1a}}, 0x0}, 0x94) io_setup(0x400, &(0x7f0000000200)) fcntl$notify(0xffffffffffffffff, 0x402, 0x8000001d) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x2b}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m6.894585895s ago: executing program 7 (id=976): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") open(&(0x7f0000000100)='./bus\x00', 0x14927e, 0x1) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x5000, 0x0) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) 2m4.508843793s ago: executing program 7 (id=980): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x4c0142, 0x161) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000001c0)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x20004450) listen(0xffffffffffffffff, 0x0) syz_usbip_server_init(0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0x4, 0x1, 0xffffffffffffffff, 0xffff7171}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r3, 0x0, 0x0}, 0x20) r4 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$6lowpan_control(r4, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 1', 0x1b) ioctl$TUNSETNOCSUM(0xffffffffffffffff, 0xc0189436, 0x1ffffffe) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 2m3.14621253s ago: executing program 7 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1294440, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) 2m1.664254313s ago: executing program 36 (id=985): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x1294440, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') read$FUSE(r4, &(0x7f0000002c00)={0x2020}, 0x2020) 16.086415159s ago: executing program 3 (id=1285): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x403, 0x78bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmmsg(r9, &(0x7f0000000000), 0x400000000000235, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0005000082180000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) 14.968537053s ago: executing program 3 (id=1276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f00000001c0)="c744240077dd0000c74424027fbe0000c7442406000000000f011c24b8010000000f01c1450f01ca470f01f866baf80cb8e4f61882ef66bafc0c66b8795966ef40250000000066b8de000f00d02e0f005ffa0f01c92e640fc71f", 0x5a}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000040)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x6, 0x48d, &(0x7f0000000980)="$eJzs3EtvG1UbAOB3xnV6/5qv3wV6AQIFEXFJmrRAF2xAIHWDhARIZRnStCpNG9QEiVYVTREqS9RfACyR+AWsYIOAFYgtSGyQEFKFuqGwGjT2TOpcHGzHjil+HsntOTNnfM47M8c+MyfjAAbWSP5PErErIr4fithTzy4vMFL/79bNy9O/37w8nUSWvfRrUiv3283L02XRcrudRWY0jUjfTeLAGvXOX7x0dmp2duZCkR9fOPfG+PzFS4+fOTd1eub0zPnJY8eOHpl46snJJ7oS5+68rfvfnju47/ir11+YPnH9ta8+yZfvKtY3xlE33PJ7b2+yfCRGlu/LBg9F/JRlWct1/N3tbkgnW/rYENpSiYj8cFXz/h97ohK3D96eeP6dvjYO6Kksy7Ktq5ZWysRiBvyDJdF0VbqpDQE2WflFn1//lq9NHH703Y1n6hdAedy3ild9zZZIizLVFde33TQSEScW//ggf8Wa9yEAALrrs3z889ha4780/t9Q7l9Rnxsajoh/R8TeiPhPRPw3Iv4XUSt7V0Tc3Wb9Iyvyq8c/3zabXumKfPz3dDG3dXv8N1SLvzBcKXK7a/FXk1NnZmcOF/tkNKpb8/zEOnV8/tx37y9lti1f1zj+y195/eVYsC79ZcuKG3QnpxamuhB6zY2rS4GuGP8mSzMBSUTsi4j9Hbx/vs/OPPLxwWbr/zr+dXRhnin7KOLh+vFfjBXxl5L15yfHt8XszOHx8qxY7etvrr3YrP4Nxd8FN65G7Fh1/kdj/MNJ43ztfPt1XPvhvabXNJ2e/0PJy7X0ULHsramFhQsTEUPJ4urlk7e3LfNl+Tz+0UNrxZ/W3uPDYrsDEZGfxPdExL0RcV/R9vsj4oGIOLRO/F8+++DrncffW3n8J9s6/u0nKme/+LRZ/a0d/6O11GixpJXPv1YbuJF9BwAAAHeKtPY38Ek6tpRO07GxiFdq93Z3pLNz8wuPnpp78/zJ+t/KD0c1Le90pQ33QyeKe8NlfnJF/kjtvnGWZdn2Wn5sem62V3PqQGt2Nun/uZ8r/W4d0HNtzaM1e6INuCO11f9XPy0E3ME8rw2Dq9X+X+1xO4DN5/sfBtda/f9KxK0+NAXYZL7/YXDp/zC49H8YXPo/DKSNPNe/XmLv8Y43zzZUe/n7Kh1u/mNP9sZ6iUqnm29t42cOepCIdM1V1YjoS3vaSqS9qyI/+drbKj+QrRa+0umJ3XZi2cfEUD8+mwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALrhzwAAAP//dNfhIw==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11.698905262s ago: executing program 9 (id=1284): syz_mount_image$ext4(&(0x7f0000000500)='ext4\x00', &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000100)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@quota}]}, 0xfd, 0x269, &(0x7f0000000a00)="$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") sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000090) socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, 0x0, 0x1cc) write(0xffffffffffffffff, &(0x7f0000000200), 0x0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', 0x0, 0x8, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) write$vga_arbiter(r1, &(0x7f0000005440)=@other={'trylock', ' ', 'io'}, 0xb) 9.745077887s ago: executing program 8 (id=1289): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, 0x0}, 0x20) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 9.619476393s ago: executing program 3 (id=1291): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) r0 = getpid() socket$key(0xf, 0x3, 0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/acpi/devices/PNP0C0F:00/status\x00', 0x0, 0x0) read(r3, &(0x7f00000002c0)=""/10, 0x5b) 7.949387384s ago: executing program 2 (id=1292): ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 7.858704229s ago: executing program 0 (id=1294): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10) listen(r0, 0x5) r1 = syz_io_uring_setup(0x10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)=@in={0x2, 0x0, @empty}}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000600)='secret\x00', &(0x7f0000000700)='AQAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAA==\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000800)='mount_timeout\x00', &(0x7f0000000900)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) write(r6, &(0x7f0000000800)='ceph v2\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) 6.937542663s ago: executing program 9 (id=1295): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 6.128299823s ago: executing program 0 (id=1296): unshare(0x2a020480) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x81}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r1, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r2, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000d00)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}], 0x30}, 0x0) 6.128164213s ago: executing program 3 (id=1297): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1000002, 0x10010, r0, 0x0) syz_open_dev$usbfs(&(0x7f0000000240), 0x207, 0xb0343) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r3, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) r4 = timerfd_create(0x0, 0x0) read(r4, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r4, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) read$FUSE(r2, &(0x7f0000007600)={0x2020}, 0x2) 6.128047463s ago: executing program 8 (id=1298): pselect6(0x40, &(0x7f0000000000)={0xb42d, 0x7, 0x1, 0x8, 0x7, 0x80, 0xffffffffffff3b7a, 0x80000001}, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000200)={[0x6000, 0xe000, 0xd000, 0x41000], 0x1, 0x2, 0xff5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 6.110227703s ago: executing program 2 (id=1299): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f00000024c0)=ANY=[], 0x3, 0x240, &(0x7f0000000500)="$eJzs2s9rHGUYB/Bn0tbGlHQj/qIF8UUP6mVocvbQIC2IAUW7QhWkUzPRZcfdsLMsrIjJqV79EzyLR2+C9OglF/8CD14klxx7EEe6u5pG4iGI3ZJ+Ppd94N0vzzPMy8t7mP3Xv/6su1XnW8UwFrIsFq7GbtzLYiUW4i+78dorN3964b2bH7y1vrFx7d2Urq/fWF1LKV188ccPv/jupbvDC+9/f/GH87G38tH+wdqve8/tXdr/48annTp16tTrD1ORbvf7w+J2VabNTt3NU3qnKou6TJ1eXQ6OrG9V/e3tcSp6m8tL24OyrlPRG6duOU7DfhoOxqn4pOj0Up7naXkp+C/a395rmjhozt2Kpmme/CYu3I3lX6IV2VMpe/pq9uyt7Pnd7NJB07TmPSr/C+//8fbAob4YUX01ao/a09/p+vpWdKKKMq5EK36P+9tkZlpff3Pj2pU0sRJ3qp1ZfmfUPnM0vxqtWDk+vzrNp7hT/fbEtO3OqH0+liLORczya9GKZ47Prx3mJ/3PTPovxqsvP9A/j1b8/HH0o4rNuJ89zH+5mtIbb2+ko/NfnvwPAOC0ydPfjr2/5fm/rU/zJ7gf/uN+dTYun53vsxNRjz/vFlVVDhRVOVh8NMY4DUVENtlg2WyjzXsexQmLuR5LPCSHL33ekwAAAAAAAAAAAHASD+Nzwnk/IwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj7MwAA//+3Ycw+") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ptrace(0x10, 0x1) syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000480)={0x2020}, 0x2020) 5.032542586s ago: executing program 2 (id=1300): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x332b4000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) ioctl$int_in(r1, 0x5452, &(0x7f0000000140)=0xc378) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) recvfrom(r1, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) 5.028274596s ago: executing program 9 (id=1310): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800032c00f326635000800000f300f0f1c9a65660ff3b20618a420c90000672e660f38803d004000000f285473b83f018ec866b9800000c00f320f300f20e06635800000000f22e02b7aa60f154e2c", 0x51}], 0x1, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x400c008}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.010699047s ago: executing program 8 (id=1301): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file0\x00', 0x8, &(0x7f0000002300)=ANY=[@ANYBLOB='volume=00000000000000000007,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,session=18446181123756130176,gid=ignore,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574377b04463822", @ANYRESDEC=0x0, @ANYBLOB=',uid=ignore,gid=ignore,uid=forget,umask=00000000000020000000000,session=00000000000000000008,rootdir=00000000000000050221,\x00'], 0x4, 0xc24, &(0x7f0000000d00)="$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") r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0xc0000, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000003300)=@gettfilter={0x24, 0x2e, 0x41d, 0x70bd30, 0x25dfdafd, {0x0, 0x0, 0x0, r6, {0xc, 0x10}, {0xffe4, 0xfff1}, {0x0, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setgroups(0x0, 0x0) 4.765805069s ago: executing program 0 (id=1302): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0xa}, 0x28) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001980)={0x9, {"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", 0x1061}}, 0x1006) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x20042000) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x9, 0x4c032, 0xffffffffffffffff, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) 4.765640919s ago: executing program 3 (id=1303): open(0x0, 0x4827e, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000200), 0x0, 0x2000000}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x8, 0x2, 0x4}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000002800)={0x0, 0x0, &(0x7f0000002700), &(0x7f0000002740), 0x800, r3}, 0x38) 4.520150341s ago: executing program 8 (id=1304): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x4004662b, 0x0) 2.353459096s ago: executing program 9 (id=1305): ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 2.352093006s ago: executing program 0 (id=1316): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, 0x0, 0x42, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r3, &(0x7f0000000340)={0x15, 0x110, 0xfa00, {r4, 0x1, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e20, 0x5, @empty, 0xbff}, @ib={0x1b, 0xf, 0x6, {"50916300000000000000000700"}, 0x8000000000000001, 0x8, 0x3ff}}}, 0x118) 2.350826386s ago: executing program 3 (id=1317): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800032c00f326635000800000f300f0f1c9a65660ff3b20618a420c90000672e660f38803d004000000f285473b83f018ec866b9800000c00f320f300f20e06635800000000f22e02b7aa60f154e2c", 0x51}], 0x1, 0x4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x400c008}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.339868337s ago: executing program 2 (id=1318): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair(0x1, 0xa, 0x0, 0x0) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) mount(0x0, &(0x7f0000000080)='./dev\x00', 0x0, 0xa00414, 0x0) ioctl(0xffffffffffffffff, 0xc138fd07, &(0x7f0000000000)="040000000000000000000400380100"/46) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r3, 0x201, 0x400000, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x2000004}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x8, 0x2, 0x7fff8000}]}) close_range(r4, 0xffffffffffffffff, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000096c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x0) 2.330137437s ago: executing program 8 (id=1319): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) io_destroy(0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @random="4955487998f1", @void, {@generic={0x8906}}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) 1.072504958s ago: executing program 0 (id=1306): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x800000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000480)={0xffffffffffffffff, 0x0}, 0x20) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 1.048652549s ago: executing program 9 (id=1307): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfc409000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) process_vm_readv(r1, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000040c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000011c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a600000000c0a010100000000000000000a0000070900020073797a31000000000900010073797a31000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c000280080001"], 0x88}}, 0x4000040) 736.577244ms ago: executing program 2 (id=1308): r0 = socket$nl_audit(0x10, 0x3, 0x9) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0x10208, 0x83, 0xffff, 0x4, 0xabe6, 0x0, 0x0, 0x8, 0x8001}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, 0x0) wait4(r3, &(0x7f0000000240), 0x80000000, &(0x7f0000000280)) syz_fuse_handle_req(r1, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) utimes(&(0x7f0000000400)='./file0\x00', 0x0) writev(r4, 0x0, 0x0) dup3(r1, r4, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) 241.986898ms ago: executing program 8 (id=1309): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1a85, @empty}, 0x10) listen(r0, 0x5) r1 = syz_io_uring_setup(0x10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, &(0x7f0000000500), &(0x7f0000000600)=@in={0x2, 0x0, @empty}}) io_uring_enter(r1, 0x1, 0x0, 0x0, 0x0, 0x0) r5 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:6789:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000400)='ms_mode\x00', &(0x7f0000000500)='crc\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000600)='secret\x00', &(0x7f0000000700)='AQAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAA==\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000800)='mount_timeout\x00', &(0x7f0000000900)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = accept4(r0, 0x0, 0x0, 0x800) write(r6, &(0x7f0000000800)='ceph v2\n\x00\x00\x00\x00\x00\x00\x00\x00', 0x10) 17.348499ms ago: executing program 2 (id=1311): socket$inet_tcp(0x2, 0x1, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="0403"], 0xe) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x14, r4, 0x1}, 0x14}}, 0x0) 3.37453ms ago: executing program 9 (id=1312): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, 0x0, &(0x7f0000000240)) 0s ago: executing program 0 (id=1326): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) io_destroy(0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x74, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SOCKET_LEVEL={0x8, 0x3, 0x89}]}}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x9c}}, 0x0) syz_emit_ethernet(0xe, &(0x7f0000000200)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @random="4955487998f1", @void, {@generic={0x8906}}}, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) kernel console output (not intermixed with test programs): altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 131.214247][ T4319] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.289359][ T4319] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.328509][ T5522] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 131.379088][ T5540] loop0: detected capacity change from 0 to 128 [ 131.546213][ T5546] synth uevent: /devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:00: unknown uevent action string [ 131.557979][ T5546] acpi device:00: uevent: failed to send synthetic uevent: -22 [ 131.644610][ T5540] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 132.014501][ T5540] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 132.033777][ T4319] usb 7-1: USB disconnect, device number 3 [ 132.517355][ T5549] udevd[5549]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.878149][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.884561][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.494921][ T4378] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 134.859970][ T4378] usb 4-1: config index 0 descriptor too short (expected 198, got 18) [ 134.927922][ T4378] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.192197][ T4378] usb 4-1: config 0 has no interfaces? [ 135.493227][ T4378] usb 4-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 135.672689][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 135.892560][ T4378] usb 4-1: Product: syz [ 136.017029][ T4378] usb 4-1: Manufacturer: syz [ 136.154345][ T4378] usb 4-1: SerialNumber: syz [ 136.204017][ T4378] usb 4-1: config 0 descriptor?? [ 136.300501][ T4378] usb 4-1: can't set config #0, error -71 [ 136.341053][ T4378] usb 4-1: USB disconnect, device number 2 [ 140.041730][ T5619] FAULT_INJECTION: forcing a failure. [ 140.041730][ T5619] name failslab, interval 1, probability 0, space 0, times 1 [ 140.064239][ T4319] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 140.091806][ T5619] CPU: 1 PID: 5619 Comm: syz.3.292 Not tainted syzkaller #0 [ 140.099155][ T5619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 140.109251][ T5619] Call Trace: [ 140.112556][ T5619] [ 140.115506][ T5619] dump_stack_lvl+0x188/0x24e [ 140.120261][ T5619] ? show_regs_print_info+0x12/0x12 [ 140.125599][ T5619] ? load_image+0x410/0x410 [ 140.130144][ T5619] ? __lock_acquire+0x7c40/0x7c40 [ 140.135206][ T5619] should_fail_ex+0x390/0x4c0 [ 140.140073][ T5619] should_failslab+0x5/0x20 [ 140.145040][ T5619] slab_pre_alloc_hook+0x59/0x300 [ 140.150110][ T5619] ? crypto_spawn_alg+0x8b/0x1d0 [ 140.155089][ T5619] ? crypto_create_tfm_node+0x73/0x380 [ 140.160585][ T5619] __kmem_cache_alloc_node+0x4f/0x270 [ 140.165999][ T5619] ? crypto_create_tfm_node+0x73/0x380 [ 140.171496][ T5619] __kmalloc_node+0xa2/0x240 [ 140.176148][ T5619] crypto_create_tfm_node+0x73/0x380 [ 140.181472][ T5619] crypto_spawn_tfm2+0x58/0x90 [ 140.186286][ T5619] hmac_init_tfm+0x7c/0x180 [ 140.191633][ T5619] crypto_shash_init_tfm+0x1ba/0x310 [ 140.197316][ T5619] crypto_create_tfm_node+0x151/0x380 [ 140.203341][ T5619] ? crypto_alg_mod_lookup+0x1a9/0x570 [ 140.210243][ T5619] crypto_alloc_tfm_node+0x177/0x360 [ 140.216632][ T5619] sctp_auth_init_hmacs+0x1c1/0x490 [ 140.224411][ T5619] sctp_auth_init+0x286/0x460 [ 140.230567][ T5619] sctp_setsockopt_auth_supported+0x302/0x530 [ 140.237650][ T5619] sctp_setsockopt+0x71d/0xf90 [ 140.242607][ T5619] ? sock_common_recvmsg+0x190/0x190 [ 140.248111][ T5619] __sys_setsockopt+0x2bf/0x3d0 [ 140.253208][ T5619] __x64_sys_setsockopt+0xb1/0xc0 [ 140.258282][ T5619] do_syscall_64+0x4c/0xa0 [ 140.262764][ T5619] ? clear_bhb_loop+0x60/0xb0 [ 140.267673][ T5619] ? clear_bhb_loop+0x60/0xb0 [ 140.272679][ T5619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.278682][ T5619] RIP: 0033:0x7f7485b9e159 [ 140.283318][ T5619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.304187][ T5619] RSP: 002b:00007f7486ac5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 140.313372][ T5619] RAX: ffffffffffffffda RBX: 00007f7485e25fa0 RCX: 00007f7485b9e159 [ 140.322381][ T5619] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 140.331182][ T5619] RBP: 00007f7485c3503b R08: 0000000000000008 R09: 0000000000000000 [ 140.339196][ T5619] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.347197][ T5619] R13: 00007f7485e26038 R14: 00007f7485e25fa0 R15: 00007ffe5da6efb8 [ 140.355222][ T5619] [ 140.466142][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.519225][ T4319] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.558464][ T4319] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 140.590682][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.645741][ T4319] usb 6-1: config 0 descriptor?? [ 140.725361][ T5633] netlink: 'syz.3.294': attribute type 1 has an invalid length. [ 140.763478][ T5633] 8021q: adding VLAN 0 to HW filter on device bond2 [ 140.840631][ T5633] bond2: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 140.854744][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 141.071937][ T4319] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 141.088420][ T4319] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 141.108741][ T4319] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 141.121036][ T4319] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 141.132428][ T4319] playstation 0003:054C:0DF2.0003: unknown main item tag 0x0 [ 141.146954][ T4319] playstation 0003:054C:0DF2.0003: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0 [ 141.388640][ T4378] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 141.694643][ T4378] usb 4-1: Using ep0 maxpacket: 32 [ 141.715652][ T4378] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 141.835711][ T4378] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 141.910818][ T4378] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 141.982545][ T4378] usb 4-1: Product: syz [ 142.024844][ T4378] usb 4-1: Manufacturer: syz [ 142.068407][ T4378] usb 4-1: SerialNumber: syz [ 142.218140][ T5611] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.237415][ T4378] usb 4-1: config 0 descriptor?? [ 142.247464][ T5643] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 142.274665][ T5611] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.305829][ T4319] playstation 0003:054C:0DF2.0003: Invalid reportID received, expected 9 got 104 [ 142.338485][ T4319] playstation 0003:054C:0DF2.0003: Failed to retrieve DualSense pairing info: -22 [ 142.377371][ T4319] playstation 0003:054C:0DF2.0003: Failed to get MAC address from DualSense [ 142.394188][ T4319] playstation 0003:054C:0DF2.0003: Failed to create dualsense. [ 142.480526][ T4319] playstation: probe of 0003:054C:0DF2.0003 failed with error -22 [ 143.390069][ T4319] usb 6-1: USB disconnect, device number 4 [ 143.778546][ T5671] fido_id[5671]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 144.485920][ T4288] Bluetooth: unknown link type 131 [ 144.554811][ T4319] usb 4-1: USB disconnect, device number 3 [ 144.698877][ T5706] bridge0: port 3(wlan0) entered blocking state [ 144.724885][ T5707] binder: 5705:5707 ioctl 4018620d 0 returned -22 [ 144.748988][ T5706] bridge0: port 3(wlan0) entered disabled state [ 144.753521][ T5707] binder: 5705:5707 ioctl c0306201 0 returned -14 [ 144.779652][ T5706] device wlan0 entered promiscuous mode [ 146.061914][ T5728] loop3: detected capacity change from 0 to 512 [ 146.137827][ T5728] EXT4-fs error (device loop3): ext4_orphan_get:1409: inode #15: comm syz.3.318: iget: bad i_size value: 38620345925642 [ 146.171567][ T5728] EXT4-fs error (device loop3): ext4_orphan_get:1414: comm syz.3.318: couldn't read orphan inode 15 (err -117) [ 146.210039][ T5728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 146.220187][ T1182] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 146.404749][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 146.431381][ T1182] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.465647][ T1182] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 146.500047][ T1182] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 146.522242][ T1182] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.534091][ T1182] usb 6-1: Product: syz [ 146.544826][ T4288] Bluetooth: hci1: command 0x0409 tx timeout [ 146.554471][ T1182] usb 6-1: Manufacturer: syz [ 146.559182][ T1182] usb 6-1: SerialNumber: syz [ 146.782477][ T5710] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 146.804451][ T5710] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 147.604262][ T1182] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 147.672267][ T1182] usb 6-1: USB disconnect, device number 5 [ 147.714559][ T5761] netlink: 48 bytes leftover after parsing attributes in process `syz.2.325'. [ 148.135199][ T5773] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.078090][ T1182] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 150.544551][ T5806] svc: failed to register lockdv1 RPC service (errno 111). [ 150.581851][ T5806] lockd_up: makesock failed, error=-111 [ 151.697262][ T5820] kvm [5819]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x80000001 [ 153.274156][ C0] sched: RT throttling activated [ 155.308315][ T5882] overlayfs: failed to resolve './bus': -2 [ 157.580067][ T5901] syz.0.356 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 157.606085][ T5901] futex_wake_op: syz.0.356 tries to shift op by 144; fix this program [ 157.615604][ T5901] futex_wake_op: syz.0.356 tries to shift op by 144; fix this program [ 159.191962][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 159.353122][ T5926] loop6: detected capacity change from 0 to 512 [ 159.446986][ T5926] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 159.466973][ T5926] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 159.494828][ T5926] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 159.511020][ T5929] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 159.523192][ T5926] EXT4-fs (loop6): can't mount with commit=1, fs mounted w/o journal [ 161.010304][ T1182] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 161.779209][ T1182] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.835163][ T1182] usb 7-1: config 27 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 162.562654][ T1182] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 163.321481][ T1182] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.350196][ T1182] usb 7-1: invalid MIDI out EP 0 [ 163.519505][ T1182] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 163.587723][ T4319] usb 7-1: USB disconnect, device number 4 [ 163.825287][ T4376] udevd[4376]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 167.020262][ T5994] netlink: 'syz.6.379': attribute type 1 has an invalid length. [ 167.049083][ T5997] device gretap1 entered promiscuous mode [ 167.156218][ T6023] netlink: 48 bytes leftover after parsing attributes in process `syz.0.385'. [ 168.222987][ T6036] device syzkaller0 entered promiscuous mode [ 168.546696][ T4282] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 168.556816][ T4282] Bluetooth: hci1: Injecting HCI hardware error event [ 168.565717][ T4282] Bluetooth: hci1: hardware error 0x00 [ 168.580299][ T4384] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 168.867074][ T4384] usb 6-1: Using ep0 maxpacket: 8 [ 169.103220][ T4384] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.306758][ T4384] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 1040, setting to 1024 [ 169.358785][ T4384] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 169.504580][ T4384] usb 6-1: config 0 interface 0 has no altsetting 0 [ 169.511366][ T4384] usb 6-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00 [ 169.569867][ T6055] loop3: detected capacity change from 0 to 2048 [ 169.581832][ T4384] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.654986][ T4384] usb 6-1: config 0 descriptor?? [ 169.673081][ T6058] loop6: detected capacity change from 0 to 164 [ 169.684987][ T6038] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 169.799830][ T6058] isofs_fill_super: bread failed, dev=loop6, iso_blknum=41, block=82 [ 170.024427][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.069632][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.704477][ T4282] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 171.647073][ T4384] usbhid 6-1:0.0: can't add hid device: -71 [ 171.665304][ T4384] usbhid: probe of 6-1:0.0 failed with error -71 [ 171.768772][ T4384] usb 6-1: USB disconnect, device number 7 [ 172.669012][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 172.800035][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.2.401'. [ 173.255952][ T6102] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.804479][ T4319] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 174.020602][ T4319] usb 4-1: config 0 has no interfaces? [ 174.034779][ T4319] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 174.113847][ T4319] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.175211][ T4319] usb 4-1: config 0 descriptor?? [ 174.401025][ T6108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.704661][ T6108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.766013][ T1182] usb 4-1: USB disconnect, device number 4 [ 174.981451][ T6124] wg1 speed is unknown, defaulting to 1000 [ 174.991203][ T6124] wg1 speed is unknown, defaulting to 1000 [ 174.999880][ T6124] wg1 speed is unknown, defaulting to 1000 [ 175.094953][ T6124] infiniband syz2: set active [ 175.100039][ T6124] infiniband syz2: added wg1 [ 175.628864][ T6124] infiniband syz2: Couldn't open port 1 [ 175.655800][ T6124] RDS/IB: syz2: added [ 175.660514][ T6124] smc: adding ib device syz2 with port count 1 [ 175.667015][ T6124] smc: ib device syz2 port 1 has pnetid [ 175.680647][ T4384] wg1 speed is unknown, defaulting to 1000 [ 175.710989][ T4384] wg1 speed is unknown, defaulting to 1000 [ 175.719714][ T6124] wg1 speed is unknown, defaulting to 1000 [ 175.803112][ T6124] wg1 speed is unknown, defaulting to 1000 [ 175.858370][ T6124] wg1 speed is unknown, defaulting to 1000 [ 175.912357][ T6124] wg1 speed is unknown, defaulting to 1000 [ 175.966072][ T6124] wg1 speed is unknown, defaulting to 1000 [ 176.394197][ T1182] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.624321][ T1182] usb 4-1: Using ep0 maxpacket: 8 [ 176.630246][ T1182] usb 4-1: device descriptor read/all, error -71 [ 182.803688][ T6176] loop5: detected capacity change from 0 to 8192 [ 183.004937][ T6188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.424'. [ 183.296318][ T4895] infiniband syz2: set down [ 183.312662][ T1182] wg1 speed is unknown, defaulting to 1000 [ 183.679383][ T4299] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.847474][ T4384] wg1 speed is unknown, defaulting to 1000 [ 183.956028][ T4299] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.163513][ T4299] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.388421][ T4299] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.482965][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 184.504863][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 184.523214][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 184.534931][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 184.547138][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 184.556926][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 184.665521][ T6220] wg1 speed is unknown, defaulting to 1000 [ 185.432684][ T6237] device syzkaller0 entered promiscuous mode [ 186.624444][ T4282] Bluetooth: hci2: command 0x0409 tx timeout [ 186.878484][ T6220] chnl_net:caif_netlink_parms(): no params data found [ 187.558777][ T6220] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.571146][ T6220] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.582639][ T6220] device bridge_slave_0 entered promiscuous mode [ 187.598216][ T6220] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.607747][ T6220] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.641813][ T6220] device bridge_slave_1 entered promiscuous mode [ 188.166307][ T6220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 188.178045][ T6302] loop3: detected capacity change from 0 to 1024 [ 188.237729][ T6302] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 188.394575][ T6220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.705722][ T4282] Bluetooth: hci2: command 0x041b tx timeout [ 189.329161][ T6220] team0: Port device team_slave_0 added [ 189.491481][ T4299] device hsr_slave_0 left promiscuous mode [ 189.512683][ T4299] device hsr_slave_1 left promiscuous mode [ 189.592565][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 189.612119][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 189.666075][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 189.673634][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.840097][ T4299] device bridge_slave_1 left promiscuous mode [ 189.854613][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.875024][ T4299] device bridge_slave_0 left promiscuous mode [ 189.882363][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.671185][ T4282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 190.681280][ T4282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 190.690988][ T4282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 190.704730][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 190.715578][ T4282] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 190.722803][ T4282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 190.784302][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 190.883084][ T4299] device veth1_macvtap left promiscuous mode [ 190.904222][ T4299] device veth0_macvtap left promiscuous mode [ 190.944716][ T4299] device veth1_vlan left promiscuous mode [ 190.950694][ T4299] device veth0_vlan left promiscuous mode [ 191.104296][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 192.127660][ T4299] infiniband syz2: set down [ 192.793268][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 192.877137][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 193.080122][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 193.170059][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 193.261821][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.375969][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.553845][ T4893] smc: removing ib device syz2 [ 194.081369][ T6355] futex_wake_op: syz.3.450 tries to shift op by 144; fix this program [ 194.129526][ T4299] bond0 (unregistering): Released all slaves [ 194.156379][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.162774][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.359592][ T6220] team0: Port device team_slave_1 added [ 194.493130][ T22] wg1 speed is unknown, defaulting to 1000 [ 194.683350][ T6361] device syzkaller0 entered promiscuous mode [ 194.772743][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.796656][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.864179][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 194.971652][ T6220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.996149][ T6220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.024578][ T6220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.053781][ T6220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.214278][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 199.266274][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 201.800616][ T6220] device hsr_slave_0 entered promiscuous mode [ 201.839984][ T6220] device hsr_slave_1 entered promiscuous mode [ 201.852006][ T6220] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.862982][ T6436] netlink: 60 bytes leftover after parsing attributes in process `syz.3.467'. [ 201.883320][ T6220] Cannot create hsr debugfs directory [ 202.287736][ T4299] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.362630][ T6317] chnl_net:caif_netlink_parms(): no params data found [ 202.446249][ T4299] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.587459][ T4299] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.609989][ T6220] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 202.695811][ T6220] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 202.757338][ T4299] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.985075][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.091295][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.258986][ T6317] device bridge_slave_0 entered promiscuous mode [ 203.292815][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.337591][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.365377][ T6317] device bridge_slave_1 entered promiscuous mode [ 203.493627][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.548394][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.720178][ T6317] team0: Port device team_slave_0 added [ 203.806431][ T6317] team0: Port device team_slave_1 added [ 203.910438][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.939823][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.054779][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.111825][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.151415][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.264315][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.292878][ T6220] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 204.309288][ T6220] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 204.566920][ T6317] device hsr_slave_0 entered promiscuous mode [ 204.590366][ T6317] device hsr_slave_1 entered promiscuous mode [ 204.631928][ T6317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.659348][ T6317] Cannot create hsr debugfs directory [ 204.968689][ T6220] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.155446][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 205.165705][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 205.270007][ T6520] FAULT_INJECTION: forcing a failure. [ 205.270007][ T6520] name failslab, interval 1, probability 0, space 0, times 0 [ 205.283384][ T6520] CPU: 1 PID: 6520 Comm: syz.3.480 Not tainted syzkaller #0 [ 205.290705][ T6520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.300785][ T6520] Call Trace: [ 205.304076][ T6520] [ 205.307022][ T6520] dump_stack_lvl+0x188/0x24e [ 205.311739][ T6520] ? show_regs_print_info+0x12/0x12 [ 205.316980][ T6520] ? load_image+0x410/0x410 [ 205.321514][ T6520] ? __might_sleep+0xd0/0xd0 [ 205.326136][ T6520] should_fail_ex+0x390/0x4c0 [ 205.330854][ T6520] should_failslab+0x5/0x20 [ 205.335379][ T6520] slab_pre_alloc_hook+0x59/0x300 [ 205.340442][ T6520] kmem_cache_alloc+0x56/0x2f0 [ 205.345249][ T6520] ? zswap_frontswap_store+0x414/0x1680 [ 205.350836][ T6520] zswap_frontswap_store+0x414/0x1680 [ 205.356255][ T6520] ? zswap_frontswap_init+0x100/0x100 [ 205.361669][ T6520] ? __lock_acquire+0x7c40/0x7c40 [ 205.366726][ T6520] ? do_raw_spin_lock+0x128/0x2f0 [ 205.371790][ T6520] ? __rwlock_init+0x140/0x140 [ 205.376581][ T6520] ? do_raw_spin_unlock+0x11d/0x230 [ 205.381819][ T6520] __frontswap_store+0x2d9/0x5b0 [ 205.386803][ T6520] swap_writepage+0xc8/0x1a0 [ 205.391431][ T6520] shrink_folio_list+0x2f81/0x8050 [ 205.396604][ T6520] ? reclaim_clean_pages_from_list+0xb80/0xb80 [ 205.402806][ T6520] ? mark_lock+0x94/0x320 [ 205.407170][ T6520] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 205.413189][ T6520] ? finish_task_switch+0x262/0x8e0 [ 205.418428][ T6520] ? lockdep_hardirqs_on+0x94/0x140 [ 205.423657][ T6520] ? finish_task_switch+0x262/0x8e0 [ 205.428899][ T6520] ? __schedule+0x1087/0x4030 [ 205.433620][ T6520] reclaim_folio_list+0x85/0x2e0 [ 205.438605][ T6520] reclaim_pages+0x575/0x690 [ 205.443235][ T6520] ? folio_isolate_lru+0xf10/0xf10 [ 205.448368][ T6520] ? preempt_schedule_thunk+0x16/0x18 [ 205.453783][ T6520] madvise_cold_or_pageout_pte_range+0x1936/0x1f30 [ 205.460420][ T6520] ? folio_put+0xd0/0xd0 [ 205.464692][ T6520] ? folio_put+0xd0/0xd0 [ 205.468991][ T6520] walk_pgd_range+0xb28/0x1370 [ 205.474701][ T6520] __walk_page_range+0x136/0x590 [ 205.480524][ T6520] walk_page_range+0x3b9/0x590 [ 205.486026][ T6520] ? page_mapped_in_vma+0x800/0x800 [ 205.491436][ T6520] ? mlock_page_drain_local+0x75/0x490 [ 205.497100][ T6520] ? mlock_page_drain_local+0x75/0x490 [ 205.503564][ T6520] do_madvise+0x1cb1/0x3520 [ 205.508380][ T6520] ? plist_add+0x3d7/0x490 [ 205.513103][ T6520] ? madvise_set_anon_name+0x420/0x420 [ 205.519844][ T6520] ? schedule+0xd0/0x180 [ 205.524906][ T6520] ? futex_wait_queue+0x23/0x1b0 [ 205.529873][ T6520] ? futex_wait_queue+0x134/0x1b0 [ 205.534960][ T6520] ? futex_unqueue+0xc7/0xf0 [ 205.539789][ T6520] ? futex_wait+0x4a3/0x5c0 [ 205.544616][ T6520] ? futex_wait_setup+0x270/0x270 [ 205.550018][ T6520] ? file_end_write+0x156/0x250 [ 205.555124][ T6520] ? vfs_write+0x777/0x9a0 [ 205.559697][ T6520] ? do_futex+0x310/0x320 [ 205.564409][ T6520] ? __ia32_sys_get_robust_list+0x100/0x100 [ 205.570671][ T6520] ? lock_chain_count+0x20/0x20 [ 205.575775][ T6520] __x64_sys_madvise+0xa2/0xb0 [ 205.580854][ T6520] do_syscall_64+0x4c/0xa0 [ 205.585482][ T6520] ? clear_bhb_loop+0x60/0xb0 [ 205.590371][ T6520] ? clear_bhb_loop+0x60/0xb0 [ 205.595084][ T6520] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 205.601676][ T6520] RIP: 0033:0x7f7485b9e159 [ 205.606299][ T6520] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.628397][ T6520] RSP: 002b:00007f7486aa4028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 205.637628][ T6520] RAX: ffffffffffffffda RBX: 00007f7485e26090 RCX: 00007f7485b9e159 [ 205.646347][ T6520] RDX: 0000000000000015 RSI: 0000000000800000 RDI: 0000200000000000 [ 205.654389][ T6520] RBP: 00007f7485c3503b R08: 0000000000000000 R09: 0000000000000000 [ 205.663694][ T6520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.672837][ T6520] R13: 00007f7485e26128 R14: 00007f7485e26090 R15: 00007ffe5da6efb8 [ 205.681463][ T6520] [ 206.564006][ T6220] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.598769][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 207.368375][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 207.425944][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.433178][ T4923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.499663][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 207.533927][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 207.578175][ T4923] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.585354][ T4923] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.663333][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 207.856239][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 207.889412][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 207.978939][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 208.009751][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 208.039438][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 208.136054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 208.159278][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 208.221904][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 208.248719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 208.340774][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 208.369927][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 208.460701][ T6220] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 208.798129][ T6317] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 209.598449][ T6317] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 209.650111][ T6317] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 210.875893][ T6317] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 210.968663][ T6563] syz.3.489 (6563): drop_caches: 2 [ 211.034471][ T4299] bridge0: port 3(wlan0) entered disabled state [ 211.273511][ T4299] device wlan0 left promiscuous mode [ 211.282671][ T4299] bridge0: port 3(wlan0) entered disabled state [ 211.509406][ T4299] device hsr_slave_0 left promiscuous mode [ 211.547888][ T4299] device hsr_slave_1 left promiscuous mode [ 211.559432][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.605498][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.653749][ T4299] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.697558][ T4299] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.743297][ T4299] device bridge_slave_1 left promiscuous mode [ 211.772356][ T4299] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.821868][ T4299] device bridge_slave_0 left promiscuous mode [ 211.872455][ T4299] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.085143][ T4299] device veth1_macvtap left promiscuous mode [ 212.096512][ T4299] device veth0_macvtap left promiscuous mode [ 212.124420][ T4299] device veth1_vlan left promiscuous mode [ 212.131429][ T4299] device veth0_vlan left promiscuous mode [ 214.195655][ T4299] team0 (unregistering): Port device team_slave_1 removed [ 214.271791][ T4299] team0 (unregistering): Port device team_slave_0 removed [ 214.343901][ T6602] loop3: detected capacity change from 0 to 32768 [ 214.352260][ T4299] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.431159][ T4299] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.443564][ T6602] XFS (loop3): Mounting V5 Filesystem [ 214.502419][ T6602] XFS (loop3): Ending clean mount [ 214.591380][ T26] kauditd_printk_skb: 67 callbacks suppressed [ 214.591395][ T26] audit: type=1800 audit(1789193126.069:93): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.497" name="file1" dev="loop3" ino=6150 res=0 errno=0 [ 214.613007][ T4319] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x189/0x240, xfs_agfl block 0x3 [ 214.656295][ T4319] XFS (loop3): Unmount and run xfs_repair [ 214.662244][ T4319] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 214.670647][ T4319] 00000000: 58 41 46 4c 00 00 00 00 d7 dc 42 4e 07 00 00 00 XAFL......BN.... [ 214.680027][ T4319] 00000010: 9f 91 9c b7 20 0a 10 1d 00 00 00 00 00 00 00 00 .... ........... [ 214.689694][ T4319] 00000020: e6 0a 0e bb ff ff ff ff 00 00 0b f0 00 00 0b f1 ................ [ 214.702737][ T4319] 00000030: 00 00 0b f2 00 00 0b f3 00 00 0b f4 00 00 0b f5 ................ [ 214.730594][ T4319] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 214.762659][ T4319] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 214.787389][ T4319] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 214.801271][ T4319] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 214.818024][ T6602] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x21f/0x400" at daddr 0x3 len 1 error 74 [ 215.118275][ T4281] XFS (loop3): Unmounting Filesystem [ 215.183462][ T4299] bond0 (unregistering): Released all slaves [ 215.451705][ T6220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.505748][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.513298][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.676005][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.276130][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 216.289385][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 216.320454][ T6317] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.336376][ T26] audit: type=1326 audit(1789193127.819:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6636 comm="syz.0.502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x0 [ 216.360120][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 216.360747][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 216.430564][ T4923] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.437861][ T4923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.507831][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 216.557360][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 216.612609][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 216.640621][ T4893] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.647860][ T4893] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.684496][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 216.763947][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 216.775191][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 216.790695][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 216.800188][ T4923] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 217.158211][ T6637] ceph: No mds server is up or the cluster is laggy [ 217.267123][ T6317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 217.449400][ T6317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 217.510443][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 217.538881][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 217.585190][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 217.609374][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 217.638081][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 217.652281][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 217.742188][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 218.176726][ T6674] Cannot find add_set index 0 as target [ 219.233606][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 219.283954][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 219.399449][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 219.445949][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 219.486902][ T6696] overlayfs: failed to clone upperpath [ 219.495432][ T6220] device veth0_vlan entered promiscuous mode [ 219.503410][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 219.520272][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 219.588319][ T6220] device veth1_vlan entered promiscuous mode [ 219.682126][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 219.715039][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 219.763163][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 219.800522][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 219.849093][ T6220] device veth0_macvtap entered promiscuous mode [ 220.591844][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 220.619366][ T6220] device veth1_macvtap entered promiscuous mode [ 220.654314][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 220.661833][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.693653][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.749705][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.769206][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.809150][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.847003][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.859332][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.877360][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 220.905036][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 220.927617][ T6220] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.954002][ T6220] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.004475][ T6220] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.012273][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 221.023545][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 221.057592][ T6220] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.077499][ T6220] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.094157][ T6220] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.102907][ T6220] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.288641][ T4913] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.310862][ T4913] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.332380][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 221.385055][ T4913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.392973][ T4913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.424492][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 221.668519][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 222.651924][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 222.661910][ T4893] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 223.421384][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 223.446482][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 223.459843][ T6317] device veth0_vlan entered promiscuous mode [ 223.508109][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 223.535808][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 223.554828][ T1182] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 223.578332][ T6317] device veth1_vlan entered promiscuous mode [ 223.614024][ T6317] device veth0_macvtap entered promiscuous mode [ 223.627021][ T6317] device veth1_macvtap entered promiscuous mode [ 223.643992][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.770557][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.811980][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.052542][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.077563][ T1182] usb 8-1: Using ep0 maxpacket: 32 [ 224.119791][ T1182] usb 8-1: config 0 has no interfaces? [ 224.193919][ T1182] usb 8-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 224.239088][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.315003][ T1182] usb 8-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 224.405488][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.424294][ T1182] usb 8-1: Manufacturer: syz [ 224.425611][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.444391][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 224.449846][ T1182] usb 8-1: config 0 descriptor?? [ 224.459832][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 224.493377][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 224.517481][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 224.537043][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 224.557402][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 224.583909][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 224.600722][ T4906] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 224.614421][ T6749] bridge: RTM_NEWNEIGH with invalid ether address [ 224.686363][ T1182] usb 8-1: USB disconnect, device number 2 [ 224.706287][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.773148][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.789645][ T6317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.800574][ T6317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.706126][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.717704][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 226.764743][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 226.783074][ T6317] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.800237][ T6317] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.810525][ T6317] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.825072][ T6317] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.154697][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.209643][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.352853][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 228.382250][ T4910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.438925][ T4910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.642466][ T4895] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 233.774300][ T4319] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 234.420483][ T6842] loop3: detected capacity change from 0 to 131072 [ 234.468732][ T4319] usb 8-1: config 0 has no interfaces? [ 234.484219][ T4319] usb 8-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 234.504439][ T6842] F2FS-fs (loop3): invalid crc value [ 234.524178][ T4319] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.550397][ T4319] usb 8-1: config 0 descriptor?? [ 234.580866][ T6842] F2FS-fs (loop3): Found nat_bits in checkpoint [ 234.629585][ T6842] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2 [ 234.654429][ T6842] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 235.460362][ T4319] usb 8-1: USB disconnect, device number 3 [ 235.748239][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.8.543'. [ 235.764319][ T6864] netem: change failed [ 238.350073][ T6891] loop3: detected capacity change from 0 to 512 [ 238.400730][ T6891] EXT4-fs (loop3): Unsupported encryption level 190 [ 238.550387][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 238.563017][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 238.570754][ T6901] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 238.579992][ T6901] device bridge_slave_0 left promiscuous mode [ 238.586339][ T6901] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.668365][ T6901] device bridge_slave_1 left promiscuous mode [ 238.674872][ T6901] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.713117][ T6905] loop7: detected capacity change from 0 to 128 [ 238.720298][ T6901] bond0: (slave bond_slave_0): Releasing backup interface [ 238.758627][ T6901] bond0: (slave bond_slave_1): Releasing backup interface [ 238.800647][ T6901] team0: Port device team_slave_0 removed [ 238.860934][ T6905] EXT4-fs (loop7): Test dummy encryption mode enabled [ 238.864638][ T6901] team0: Port device team_slave_1 removed [ 238.875332][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.882787][ T6901] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.910021][ T6901] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.917728][ T6901] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.941727][ T6905] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 239.020474][ T6905] ext4 filesystem being mounted at /8/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 239.347164][ T4378] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 239.565831][ T4378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 239.603103][ T4378] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.652862][ T6905] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 239.662739][ T4378] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.679138][ T4378] usb 4-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 239.709348][ T4378] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.746135][ T4378] usb 4-1: config 0 descriptor?? [ 239.928407][ T6220] EXT4-fs (loop7): unmounting filesystem. [ 240.771699][ T4378] logitech 0003:046D:C295.0004: ignoring exceeding usage max [ 240.811922][ T4378] logitech 0003:046D:C295.0004: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.3-1/input0 [ 240.835616][ T4378] logitech 0003:046D:C295.0004: no inputs found [ 241.795225][ T22] usb 4-1: USB disconnect, device number 7 [ 242.025180][ T6957] fido_id[6957]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 242.190232][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 242.663767][ T6974] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 0 [ 246.099045][ T7044] loop3: detected capacity change from 0 to 128 [ 248.683045][ T7058] CacheFiles: Failed to register: -95 [ 248.769362][ T7068] netlink: 4 bytes leftover after parsing attributes in process `syz.0.584'. [ 248.831020][ T7068] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.878673][ T7068] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.364529][ T1182] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 250.578175][ T1182] usb 8-1: config index 0 descriptor too short (expected 23569, got 27) [ 250.593997][ T1182] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 250.648055][ T1182] usb 8-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 250.683648][ T1182] usb 8-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 250.712293][ T1182] usb 8-1: Manufacturer: syz [ 250.731530][ T1182] usb 8-1: config 0 descriptor?? [ 250.984263][ T1182] rc_core: IR keymap rc-hauppauge not found [ 250.990241][ T1182] Registered IR keymap rc-empty [ 251.022192][ T1182] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0 [ 251.087316][ T1182] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input8 [ 251.541491][ T7084] jffs2: notice: (7084) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 252.635965][ T27] usb 8-1: USB disconnect, device number 4 [ 253.576439][ T7134] SET target dimension over the limit! [ 256.470270][ T14] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 256.479956][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.539030][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.667407][ T14] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 256.689969][ T14] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 256.773285][ T14] usb 8-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice= 1.00 [ 256.842869][ T7192] tipc: Enabling of bearer rejected, failed to enable media [ 256.851798][ T14] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 256.891499][ T14] usb 8-1: Product: syz [ 256.921903][ T14] usb 8-1: Manufacturer: syz [ 256.966489][ T14] usb 8-1: SerialNumber: syz [ 257.012267][ T14] usb 8-1: NFC: intf ffff888075d78000 id ffffffff8d419c00 [ 257.106148][ T14] nfcmrvl 8-1:1.0: NFC: registered with nci successfully [ 257.136144][ T7205] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 257.247150][ T4897] nfcmrvl 8-1:1.0: NFC: send entry, len 4 [ 257.989770][ T4897] usb 8-1: NFC: urb ffff88807a4e3300 submission failed (90) [ 257.990503][ T27] usb 8-1: USB disconnect, device number 5 [ 258.050128][ T27] usb 8-1: NFC: intf ffff888075d78000 [ 258.810061][ T7215] overlayfs: failed to clone lowerpath [ 259.030734][ T7172] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.937359][ T7237] loop3: detected capacity change from 0 to 32768 [ 260.944867][ T7237] XFS: noikeep mount option is deprecated. [ 261.237127][ T7237] XFS (loop3): Mounting V5 Filesystem [ 261.362861][ T7237] XFS (loop3): Ending clean mount [ 261.386214][ T7237] XFS (loop3): Quotacheck needed: Please wait. [ 261.639583][ T7237] XFS (loop3): Quotacheck: Done. [ 262.779533][ T4281] XFS (loop3): Unmounting Filesystem [ 265.302091][ T7288] loop8: detected capacity change from 0 to 128 [ 265.377825][ T7288] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 265.397232][ T7288] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 266.367131][ T6317] EXT4-fs (loop8): unmounting filesystem. [ 266.759650][ T7310] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 266.824963][ T7310] batman_adv: batadv0: Adding interface: gretap1 [ 266.861866][ T7310] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.033072][ T7310] batman_adv: batadv0: Interface activated: gretap1 [ 271.628774][ T7360] netlink: 'syz.7.642': attribute type 10 has an invalid length. [ 271.664131][ T7360] netlink: 40 bytes leftover after parsing attributes in process `syz.7.642'. [ 271.696316][ T7360] device dummy0 entered promiscuous mode [ 271.849643][ T7360] bridge0: port 3(dummy0) entered blocking state [ 272.669742][ T7371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.645'. [ 272.674548][ T7360] bridge0: port 3(dummy0) entered disabled state [ 272.810087][ T7360] bridge0: port 3(dummy0) entered blocking state [ 272.816613][ T7360] bridge0: port 3(dummy0) entered forwarding state [ 272.955145][ T7379] Bluetooth: MGMT ver 1.22 [ 277.093509][ T7405] loop3: detected capacity change from 0 to 32768 [ 277.100624][ T7405] XFS: noikeep mount option is deprecated. [ 277.294391][ T7407] netlink: 'syz.2.657': attribute type 13 has an invalid length. [ 277.302456][ T7407] netlink: 'syz.2.657': attribute type 27 has an invalid length. [ 277.357427][ T7405] XFS (loop3): Mounting V5 Filesystem [ 278.411473][ T7405] XFS (loop3): Ending clean mount [ 278.424461][ T7405] XFS (loop3): Quotacheck needed: Please wait. [ 279.238927][ T7405] XFS (loop3): Quotacheck: Done. [ 279.597918][ T4281] XFS (loop3): Unmounting Filesystem [ 279.878687][ T7434] fuse: Bad value for 'group_id' [ 281.044248][ T4349] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 281.872660][ T7450] loop3: detected capacity change from 0 to 256 [ 282.114364][ T7446] netlink: 'syz.8.663': attribute type 1 has an invalid length. [ 282.214213][ T4349] usb 8-1: Using ep0 maxpacket: 8 [ 282.227880][ T4349] usb 8-1: config 2 has an invalid interface number: 241 but max is 0 [ 282.274136][ T4349] usb 8-1: config 2 has no interface number 0 [ 282.321132][ T4349] usb 8-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.368007][ T7446] bond1: (slave bridge1): making interface the new active one [ 282.382335][ T4349] usb 8-1: config 2 interface 241 has no altsetting 0 [ 282.412433][ T4349] usb 8-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3 [ 282.415064][ T7446] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 282.446006][ T4349] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 282.484138][ T4349] usb 8-1: Product: syz [ 282.494650][ T4349] usb 8-1: Manufacturer: syz [ 282.513821][ T4349] usb 8-1: SerialNumber: syz [ 282.540153][ T4349] ti_usb_3410_5052 8-1:2.241: TI USB 3410 1 port adapter converter detected [ 282.568541][ T4349] ti_usb_3410_5052 8-1:2.241: missing endpoints [ 282.719306][ T7466] loop8: detected capacity change from 0 to 256 [ 282.809108][ T7466] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 282.979151][ T26] audit: type=1800 audit(1789193194.459:95): pid=7466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.666" name="file1" dev="loop8" ino=1048613 res=0 errno=0 [ 283.298578][ T4349] usb 8-1: USB disconnect, device number 6 [ 283.529322][ T7492] loop8: detected capacity change from 0 to 2048 [ 283.552727][ T7492] UDF-fs: bad mount option "0xffffffffffffffff" or missing value [ 286.217067][ T7521] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 287.694334][ T27] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 287.919613][ T27] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 287.939744][ T27] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 287.991826][ T27] usb 8-1: config 0 has no interface number 0 [ 288.025673][ T27] usb 8-1: config 0 interface 50 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 288.087807][ T27] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 288.123309][ T27] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.154271][ T27] usb 8-1: Product: syz [ 288.158480][ T27] usb 8-1: Manufacturer: syz [ 288.214174][ T27] usb 8-1: SerialNumber: syz [ 288.256477][ T27] usb 8-1: config 0 descriptor?? [ 288.319465][ T27] yurex 8-1:0.50: Could not find endpoints [ 288.719597][ T7553] ip_tables: iptables: counters copy to user failed while replacing table [ 290.504660][ T27] usb 8-1: USB disconnect, device number 7 [ 290.667590][ T7571] device syzkaller0 entered promiscuous mode [ 291.828670][ T7592] device syzkaller0 entered promiscuous mode [ 291.968553][ T7599] loop3: detected capacity change from 0 to 128 [ 292.317005][ T7607] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[7607] [ 295.911545][ T7629] netlink: 12 bytes leftover after parsing attributes in process `syz.2.702'. [ 295.920508][ T7629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 302.032935][ T26] audit: type=1326 audit(1789193213.349:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7659 comm="syz.0.691" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x0 [ 304.351636][ T7691] device syzkaller0 entered promiscuous mode [ 308.161061][ T7712] tipc: Started in network mode [ 308.198238][ T7712] tipc: Node identity 2000004, cluster identity 4711 [ 308.211053][ T7712] tipc: Node number set to 33554436 [ 308.368674][ T7717] netlink: 'syz.0.711': attribute type 1 has an invalid length. [ 308.417115][ T7717] device lo entered promiscuous mode [ 308.499226][ T7717] device tunl0 entered promiscuous mode [ 308.612153][ T7717] device gre0 entered promiscuous mode [ 308.878686][ T7717] device gretap0 entered promiscuous mode [ 309.084891][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 309.521774][ T7717] device erspan0 entered promiscuous mode [ 309.615315][ T7717] device ip_vti0 entered promiscuous mode [ 309.940112][ T7717] device ip6_vti0 entered promiscuous mode [ 311.514683][ T7717] device sit0 entered promiscuous mode [ 312.684489][ T7717] device ip6tnl0 entered promiscuous mode [ 312.721550][ T7717] device ip6gre0 entered promiscuous mode [ 312.801001][ T7717] device ip6gretap0 entered promiscuous mode [ 312.865248][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.873211][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.921889][ T7717] device bridge0 entered promiscuous mode [ 313.008554][ T7717] device bond0 entered promiscuous mode [ 313.020588][ T7717] device bond_slave_0 entered promiscuous mode [ 313.043140][ T7717] device bond_slave_1 entered promiscuous mode [ 313.141344][ T7717] device team0 entered promiscuous mode [ 313.151001][ T7717] device team_slave_0 entered promiscuous mode [ 313.173648][ T7717] device team_slave_1 entered promiscuous mode [ 313.249748][ T7717] device dummy0 entered promiscuous mode [ 313.338570][ T7717] device nlmon0 entered promiscuous mode [ 313.365683][ T7717] device caif0 entered promiscuous mode [ 313.616087][ T7758] netlink: 'syz.8.726': attribute type 1 has an invalid length. [ 314.584719][ T7772] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 314.612207][ T7772] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 314.704234][ T4287] Bluetooth: hci3: command 0x0406 tx timeout [ 317.027736][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.034300][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.239035][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.248002][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.256408][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.264767][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.273115][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.281530][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.289987][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.298368][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.306757][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.315097][ T7797] tc action pedit unable to extract header offset for header type (0x5) [ 317.323411][ T7797] 0: reclassify loop, rule prio 0, protocol 800 [ 320.665644][ T7822] loop7: detected capacity change from 0 to 2048 [ 320.856337][ T7822] UDF-fs: bad mount option "絴抉蛱嵸股蓧曝t棠涠弍旷7;Z潃茘護N\򖖤u喎o?痄崃sC{禰vlxddt紿椒|頌襮c戔$"?踅V8Zublxり萒5絇緔﹞"妶FOm=Q脒>躖3b眑~汆鱂g[s+S搷K咑B{f鶵甏鹅O#8""be鄡囯"j戔[嘨訒堣霝囅W冿軒be;K" or missing value [ 322.010201][ T7849] tipc: Started in network mode [ 322.015261][ T7849] tipc: Node identity 0010000000000000002, cluster identity 4711 [ 322.777757][ T7869] FAULT_INJECTION: forcing a failure. [ 322.777757][ T7869] name failslab, interval 1, probability 0, space 0, times 0 [ 323.063040][ T7869] CPU: 1 PID: 7869 Comm: syz.8.749 Not tainted syzkaller #0 [ 323.070391][ T7869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 323.080483][ T7869] Call Trace: [ 323.083776][ T7869] [ 323.086717][ T7869] dump_stack_lvl+0x188/0x24e [ 323.091426][ T7869] ? show_regs_print_info+0x12/0x12 [ 323.096650][ T7869] ? load_image+0x410/0x410 [ 323.101181][ T7869] ? __might_sleep+0xd0/0xd0 [ 323.105790][ T7869] ? __lock_acquire+0x7c40/0x7c40 [ 323.110843][ T7869] should_fail_ex+0x390/0x4c0 [ 323.115549][ T7869] should_failslab+0x5/0x20 [ 323.120078][ T7869] slab_pre_alloc_hook+0x59/0x300 [ 323.125128][ T7869] ? ntfs_init_fs_context+0x1d1/0x490 [ 323.130645][ T7869] __kmem_cache_alloc_node+0x4f/0x270 [ 323.136052][ T7869] ? ntfs_init_fs_context+0x1d1/0x490 [ 323.141450][ T7869] kmalloc_trace+0x26/0xe0 [ 323.145915][ T7869] ntfs_init_fs_context+0x1d1/0x490 [ 323.151145][ T7869] alloc_fs_context+0x628/0x7d0 [ 323.156036][ T7869] __se_sys_fsopen+0xa0/0x2c0 [ 323.160742][ T7869] do_syscall_64+0x4c/0xa0 [ 323.165206][ T7869] ? clear_bhb_loop+0x60/0xb0 [ 323.169920][ T7869] ? clear_bhb_loop+0x60/0xb0 [ 323.174628][ T7869] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 323.180548][ T7869] RIP: 0033:0x7f607119e159 [ 323.185064][ T7869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 323.204694][ T7869] RSP: 002b:00007f6072108028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 323.213129][ T7869] RAX: ffffffffffffffda RBX: 00007f6071425fa0 RCX: 00007f607119e159 [ 323.221240][ T7869] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000140 [ 323.229226][ T7869] RBP: 00007f607123503b R08: 0000000000000000 R09: 0000000000000000 [ 323.237210][ T7869] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 323.245204][ T7869] R13: 00007f6071426038 R14: 00007f6071425fa0 R15: 00007fffddb64448 [ 323.253215][ T7869] [ 323.713993][ T7876] loop8: detected capacity change from 0 to 32768 [ 323.929790][ T7876] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.751 (7876) [ 324.240861][ T7876] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 324.253356][ T7876] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 324.262720][ T7876] BTRFS info (device loop8): use zlib compression, level 3 [ 324.270052][ T7876] BTRFS info (device loop8): turning on sync discard [ 324.277148][ T7876] BTRFS info (device loop8): using free space tree [ 324.617192][ T7891] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.2963677906), cmd(3) [ 325.142817][ T7901] loop3: detected capacity change from 0 to 8 [ 325.195720][ T7901] SQUASHFS error: Failed to read block 0x4de: -5 [ 325.203532][ T7901] SQUASHFS error: Failed to read block 0x4de: -5 [ 325.217009][ T7901] SQUASHFS error: Failed to read block 0x4de: -5 [ 325.226492][ T7901] SQUASHFS error: Failed to read block 0x4de: -5 [ 325.234198][ T26] audit: type=1800 audit(1789193236.699:97): pid=7901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.753" name="file1" dev="loop3" ino=5 res=0 errno=0 [ 325.494611][ T4287] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201' [ 325.494719][ T4287] CPU: 0 PID: 4287 Comm: kworker/u5:7 Not tainted syzkaller #0 [ 325.494741][ T4287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 325.494754][ T4287] Workqueue: hci2 hci_rx_work [ 325.494787][ T4287] Call Trace: [ 325.494795][ T4287] [ 325.494804][ T4287] dump_stack_lvl+0x188/0x24e [ 325.494840][ T4287] ? show_regs_print_info+0x12/0x12 [ 325.494872][ T4287] ? load_image+0x410/0x410 [ 325.494918][ T4287] sysfs_create_dir_ns+0x26a/0x290 [ 325.494948][ T4287] ? __lock_acquire+0x7c40/0x7c40 [ 325.494978][ T4287] ? sysfs_warn_dup+0xa0/0xa0 [ 325.495010][ T4287] ? do_raw_spin_unlock+0x11d/0x230 [ 325.495035][ T4287] kobject_add_internal+0x617/0xca0 [ 325.495066][ T4287] kobject_add+0x160/0x230 [ 325.495094][ T4287] ? kobject_init+0x1c0/0x1c0 [ 325.495121][ T4287] ? __raw_spin_lock_init+0x41/0x100 [ 325.495140][ T4287] ? klist_children_get+0x50/0x50 [ 325.495171][ T4287] ? get_device_parent+0x121/0x3e0 [ 325.495203][ T4287] device_add+0x470/0x1050 [ 325.495236][ T4287] hci_conn_add_sysfs+0xd1/0x1e0 [ 325.495270][ T4287] le_conn_complete_evt+0xfac/0x15c0 [ 325.495309][ T4287] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 325.495343][ T4287] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 325.495368][ T4287] ? mutex_unlock+0x10/0x10 [ 325.495387][ T4287] ? skb_pull_data+0xec/0x1f0 [ 325.495412][ T4287] hci_le_conn_complete_evt+0x183/0x440 [ 325.495445][ T4287] ? hci_remote_host_features_evt+0x230/0x230 [ 325.495468][ T4287] hci_event_packet+0x7b3/0x1290 [ 325.495496][ T4287] ? lock_chain_count+0x20/0x20 [ 325.495524][ T4287] ? hci_conn_valid+0x220/0x220 [ 325.495542][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 325.495571][ T4287] ? kcov_remote_start+0x50f/0x810 [ 325.495596][ T4287] ? lockdep_hardirqs_on+0x94/0x140 [ 325.495623][ T4287] ? hci_send_to_monitor+0x9c/0x4a0 [ 325.495655][ T4287] hci_rx_work+0x3eb/0xd40 [ 325.495683][ T4287] ? _raw_spin_unlock+0x40/0x40 [ 325.495714][ T4287] ? process_one_work+0x7b4/0x1160 [ 325.495740][ T4287] process_one_work+0x8ab/0x1160 [ 325.495780][ T4287] ? worker_detach_from_pool+0x240/0x240 [ 325.495809][ T4287] ? _raw_spin_lock_irq+0xb7/0xf0 [ 325.495834][ T4287] ? _raw_spin_lock_irqsave+0x100/0x100 [ 325.495863][ T4287] ? wq_worker_running+0x97/0x190 [ 325.495906][ T4287] worker_thread+0xaf5/0x12a0 [ 325.495946][ T4287] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 325.495984][ T4287] kthread+0x29d/0x330 [ 325.496001][ T4287] ? worker_clr_flags+0x1a0/0x1a0 [ 325.496025][ T4287] ? kthread_blkcg+0xd0/0xd0 [ 325.496047][ T4287] ret_from_fork+0x1f/0x30 [ 325.496088][ T4287] [ 325.496109][ T4287] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 325.496136][ T4287] Bluetooth: hci2: failed to register connection device [ 326.442607][ T7908] mmap: syz.2.755 (7908) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 326.657626][ T7876] BTRFS error (device loop8): open_ctree failed: -12 [ 326.763569][ T7919] loop0: detected capacity change from 0 to 4096 [ 327.117724][ T7919] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 327.118239][ T7919] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 327.125204][ T7891] tty tty2: ldisc open failed (-12), clearing slot 1 [ 327.287626][ T7938] device syzkaller0 entered promiscuous mode [ 327.364133][ T7919] ldm_parse_privhead(): Cannot find PRIVHEAD structure. LDM database is corrupt. Aborting. [ 327.420122][ T7940] tipc: Enabled bearer , priority 0 [ 327.422854][ T7919] ldm_validate_privheads(): Cannot find PRIVHEAD 3. [ 327.455564][ T7938] tipc: Resetting bearer [ 327.474645][ T7919] ldm_validate_privheads(): Primary and backup PRIVHEADs don't match. [ 327.493156][ T7919] loop0: [ 327.517329][ T7937] tipc: Resetting bearer [ 327.590626][ T5983] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by udevd (5983) [ 327.626752][ T7937] tipc: Disabling bearer [ 328.341677][ T7944] ip_tables: iptables: counters copy to user failed while replacing table [ 330.148773][ T7957] tc action pedit offset 8 out of bounds [ 330.155086][ T7957] tc action pedit offset 8 out of bounds [ 330.160786][ T7957] tc action pedit offset 8 out of bounds [ 330.166507][ T7957] tc action pedit offset 8 out of bounds [ 330.172170][ T7957] tc action pedit offset 8 out of bounds [ 330.177889][ T7957] tc action pedit offset 8 out of bounds [ 330.183551][ T7957] tc action pedit offset 8 out of bounds [ 330.189255][ T7957] tc action pedit offset 8 out of bounds [ 330.194940][ T7957] tc action pedit offset 8 out of bounds [ 330.200627][ T7957] tc action pedit offset 8 out of bounds [ 330.206326][ T7957] 0: reclassify loop, rule prio 0, protocol 800 [ 330.976023][ T7969] xt_CONNSECMARK: invalid mode: 66 [ 332.043171][ T7983] sctp: [Deprecated]: syz.7.768 (pid 7983) Use of struct sctp_assoc_value in delayed_ack socket option. [ 332.043171][ T7983] Use struct sctp_sack_info instead [ 333.383423][ T8003] loop3: detected capacity change from 0 to 128 [ 333.725656][ T7987] kvm [7986]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x3c3180 [ 333.946311][ T8015] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4281] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[8015] [ 333.959869][ T7987] kvm [7986]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 334.197188][ T7987] kvm [7986]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x186) = 0x3c3180 [ 337.636138][ T8047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.780'. [ 338.274822][ T8062] netlink: 28 bytes leftover after parsing attributes in process `syz.3.787'. [ 338.327509][ T8062] netlink: 'syz.3.787': attribute type 7 has an invalid length. [ 338.344293][ T8062] netlink: 4 bytes leftover after parsing attributes in process `syz.3.787'. [ 338.875346][ T8062] device bond0 entered promiscuous mode [ 338.942556][ T8062] device bridge0 entered promiscuous mode [ 338.997617][ T8062] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 339.078600][ T8062] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 339.370541][ T8076] loop8: detected capacity change from 0 to 2048 [ 339.452282][ T8081] netlink: 'syz.0.790': attribute type 2 has an invalid length. [ 340.221679][ T8076] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 342.307884][ T8088] loop7: detected capacity change from 0 to 4096 [ 342.497920][ T8105] loop8: detected capacity change from 0 to 1024 [ 343.794488][ T4886] hfsplus: bad catalog file entry [ 348.320006][ T8147] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 348.417715][ T8151] device syzkaller0 entered promiscuous mode [ 348.498639][ T8151] tipc: Enabled bearer , priority 0 [ 348.591385][ T8152] tipc: Resetting bearer [ 348.653145][ T8149] tipc: Resetting bearer [ 348.844491][ T8149] tipc: Disabling bearer [ 350.593164][ T8180] bridge0: port 1(syz_tun) entered blocking state [ 350.600456][ T8180] bridge0: port 1(syz_tun) entered disabled state [ 350.624505][ T8180] device syz_tun entered promiscuous mode [ 350.653034][ T8180] bridge0: port 1(syz_tun) entered blocking state [ 350.659972][ T8180] bridge0: port 1(syz_tun) entered forwarding state [ 355.017681][ T8215] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 355.025715][ T8215] IPv6: NLM_F_CREATE should be set when creating new route [ 355.531243][ T8221] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 357.646030][ T8229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.150055][ T8261] ceph: No mds server is up or the cluster is laggy [ 359.160461][ T22] libceph: connect (1)[c::]:6789 error -101 [ 359.915113][ T22] libceph: mon0 (1)[c::]:6789 connect error [ 360.719658][ T8216] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.735236][ T8216] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.749795][ T8216] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.759253][ T8216] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.908205][ T8231] IPv6: ADDRCONF(NETDEV_CHANGE): batadv0: link becomes ready [ 360.932340][ T8231] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 361.149012][ T8288] loop3: detected capacity change from 0 to 2048 [ 361.285354][ T8296] netlink: 68 bytes leftover after parsing attributes in process `syz.8.835'. [ 361.383801][ T8288] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 363.243046][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/154.tmp-b7:3' failed: Read-only file system [ 363.432150][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system [ 363.465523][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system [ 364.178394][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/154.tmp-b7:3' failed: Read-only file system [ 364.225221][ T8308] netlink: 36 bytes leftover after parsing attributes in process `syz.3.838'. [ 364.474424][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/154.tmp-b7:3' failed: Read-only file system [ 364.496994][ T8312] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 364.572057][ T8316] nvmet_tcp: enabling port 1 (127.0.0.1:4420) [ 364.846836][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/155.tmp-b7:3' failed: Read-only file system [ 365.899045][ T53] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:82abe1ec-c93f-48d8-92dc-a354aec7511a for subsystem testsubsys not allowed [ 365.918546][ T8318] nvme nvme0: Connect for subsystem testsubsys is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:82abe1ec-c93f-48d8-92dc-a354aec7511a [ 365.957215][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/155.tmp-b7:3' failed: Read-only file system [ 367.211048][ T8318] nvme nvme0: failed to connect queue: 0 ret=16772 [ 368.307160][ T8340] loop3: detected capacity change from 0 to 32768 [ 369.848380][ T8340] XFS (loop3): Mounting V5 Filesystem [ 370.956505][ T8340] XFS (loop3): Ending clean mount [ 371.119488][ T4281] XFS (loop3): Unmounting Filesystem [ 371.230888][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/156.tmp-b7:3' failed: Read-only file system [ 371.311973][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:3' failed: Read-only file system [ 372.782269][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/156.tmp-b7:3' failed: Read-only file system [ 372.818468][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:3' failed: Read-only file system [ 373.238166][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/156.tmp-b7:3' failed: Read-only file system [ 373.297867][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/156.tmp-b7:3' failed: Read-only file system [ 374.095408][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/157.tmp-b7:3' failed: Read-only file system [ 377.448264][ T7] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 377.665628][ T7] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 377.706949][ T7] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 377.744294][ T7] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.752352][ T7] usb 9-1: Product: syz [ 377.769210][ T5983] udevd[5983]: symlink '../../loop3' '/dev/disk/by-diskseq/157.tmp-b7:3' failed: Read-only file system [ 377.778453][ T7] usb 9-1: Manufacturer: syz [ 377.824463][ T7] usb 9-1: SerialNumber: syz [ 378.248702][ T8429] loop7: detected capacity change from 0 to 40427 [ 378.286035][ T8429] F2FS-fs (loop7): invalid crc_offset: 4177530876 [ 378.302789][ T8409] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.366386][ T8429] F2FS-fs (loop7): Wrong journal entry on segno 65538 [ 378.374494][ T8429] F2FS-fs (loop7): Failed to initialize F2FS segment manager (-117) [ 378.471156][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.621906][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.163051][ T8409] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.210813][ T7] cdc_ether: probe of 9-1:1.0 failed with error -22 [ 379.227203][ T7] usb 9-1: USB disconnect, device number 2 [ 379.337175][ T5549] udevd[5549]: symlink '../../loop7' '/dev/disk/by-diskseq/158.tmp-b7:7' failed: Read-only file system [ 379.350088][ T5549] udevd[5549]: symlink '../../loop7' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:7' failed: Read-only file system [ 379.855066][ T8283] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 380.131327][ T5549] udevd[5549]: symlink '../../loop3' '/dev/disk/by-diskseq/157.tmp-b7:3' failed: Read-only file system [ 380.144917][ T8283] usb 9-1: Using ep0 maxpacket: 8 [ 380.277735][ T8283] usb 9-1: config index 0 descriptor too short (expected 301, got 72) [ 380.286643][ T5983] udevd[5983]: symlink '../../loop7' '/dev/disk/by-diskseq/158.tmp-b7:7' failed: Read-only file system [ 380.385100][ T8283] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 380.411560][ T5983] udevd[5983]: symlink '../../loop7' '/dev/disk/by-diskseq/158.tmp-b7:7' failed: Read-only file system [ 380.427328][ T8283] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 380.438514][ T8283] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 380.455009][ T8283] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 380.469652][ T8283] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 380.493354][ T8283] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 381.001564][ T8283] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.079379][ T8283] usb 9-1: can't set config #16, error -71 [ 381.106749][ T8283] usb 9-1: USB disconnect, device number 3 [ 381.222966][ T8464] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 381.432165][ T8469] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 382.759946][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.3.873'. [ 383.102515][ T8484] device syzkaller0 entered promiscuous mode [ 385.724587][ T4287] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 385.733516][ T4287] Bluetooth: hci2: Injecting HCI hardware error event [ 385.745321][ T4288] Bluetooth: hci2: hardware error 0x00 [ 385.816716][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.0.883'. [ 387.984372][ T4288] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 388.334113][ T4349] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 388.577864][ T8574] loop8: detected capacity change from 0 to 64 [ 388.676768][ T4349] usb 8-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.868605][ T4349] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 389.043700][ T4349] usb 8-1: config 0 interface 0 has no altsetting 0 [ 389.060352][ T4349] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 389.087661][ T4349] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 389.242453][ T8583] loop3: detected capacity change from 0 to 4096 [ 391.479812][ T4349] usb 8-1: config 0 descriptor?? [ 391.603477][ T4349] usb 8-1: can't set config #0, error -71 [ 391.658122][ T4349] usb 8-1: USB disconnect, device number 8 [ 395.825378][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 395.835070][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 395.844158][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 395.853348][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 395.862726][ T8638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.909'. [ 395.874715][ T8638] loop3: detected capacity change from 0 to 16 [ 395.900331][ T8638] erofs: (device loop3): mounted with root inode @ nid 36. [ 396.881117][ T8647] device syzkaller0 entered promiscuous mode [ 396.917584][ T8647] tipc: Enabled bearer , priority 0 [ 397.794442][ T8646] tipc: Resetting bearer [ 397.925514][ T8646] tipc: Disabling bearer [ 397.942190][ T7] tipc: Node number set to 3145728 [ 398.102031][ T8668] netlink: 'syz.0.913': attribute type 13 has an invalid length. [ 398.110028][ T8668] netlink: 'syz.0.913': attribute type 27 has an invalid length. [ 402.975879][ T8719] loop3: detected capacity change from 0 to 2048 [ 403.161115][ T8719] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.644871][ T8735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.929'. [ 404.655570][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz.0.929'. [ 404.664990][ T8735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.929'. [ 404.674150][ T8735] netlink: 16 bytes leftover after parsing attributes in process `syz.0.929'. [ 407.954522][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.004805][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.048787][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.071967][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.128162][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.199340][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.222101][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.260248][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.312348][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.336496][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.401622][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.469868][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.706239][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.869161][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.876870][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.884568][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.892070][ T127] hid-generic 0006:0008:0001.0005: unknown main item tag 0x0 [ 408.921372][ T127] hid-generic 0006:0008:0001.0005: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 409.743808][ T8785] fido_id[8785]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 412.705834][ T8817] loop3: detected capacity change from 0 to 32768 [ 412.749092][ T8817] XFS (loop3): Mounting V5 Filesystem [ 412.830585][ T8809] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6) [ 412.837676][ T8809] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 412.856231][ T8810] vhci_hcd: connection closed [ 412.865829][ T8817] XFS (loop3): Ending clean mount [ 412.880804][ T8809] vhci_hcd vhci_hcd.0: Device attached [ 412.893979][ T8817] XFS (loop3): Quotacheck needed: Please wait. [ 412.920133][ T4462] vhci_hcd: stop threads [ 412.925531][ T4462] vhci_hcd: release socket [ 412.954101][ T4462] vhci_hcd: disconnect device [ 413.011590][ T8817] XFS (loop3): Quotacheck: Done. [ 413.172290][ T8832] loop7: detected capacity change from 0 to 1024 [ 413.636235][ T5549] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 413.741844][ T4281] XFS (loop3): Unmounting Filesystem [ 416.514228][ T22] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 416.956207][ T22] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 416.978884][ T22] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 416.997921][ T22] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.010793][ T22] usb 8-1: Product: syz [ 417.023368][ T22] usb 8-1: Manufacturer: syz [ 417.033860][ T22] usb 8-1: SerialNumber: syz [ 417.273869][ T8864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 417.298987][ T8864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 417.328109][ T22] cdc_ether: probe of 8-1:1.0 failed with error -22 [ 417.357540][ T22] usb 8-1: USB disconnect, device number 9 [ 417.744926][ T8897] loop3: detected capacity change from 0 to 512 [ 417.783308][ T8897] EXT4-fs (loop3): invalid journal inode [ 417.864224][ T8897] EXT4-fs (loop3): can't get journal size [ 417.927881][ T8897] EXT4-fs (loop3): 1 truncate cleaned up [ 417.956732][ T22] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 417.965715][ T8897] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 422.260250][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 425.786376][ T8957] loop3: detected capacity change from 0 to 64 [ 428.590172][ T8970] loop7: detected capacity change from 0 to 512 [ 428.600715][ T8970] EXT4-fs (loop7): invalid journal inode [ 428.606963][ T8970] EXT4-fs (loop7): can't get journal size [ 428.865759][ T8970] EXT4-fs (loop7): 1 truncate cleaned up [ 428.871882][ T8970] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 429.917213][ T8970] loop7: detected capacity change from 512 to 64 [ 429.932603][ T8987] EXT4-fs warning (device loop7): ext4_dx_find_entry:1798: inode #2: lblock 2: comm syz.7.976: error -12 reading directory block [ 430.025792][ T6220] EXT4-fs warning (device loop7): htree_dirblock_to_tree:1083: inode #2: lblock 1: comm syz-executor: error -12 reading directory block [ 430.074211][ T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 430.091088][ T6220] EXT4-fs (loop7): unmounting filesystem. [ 430.953672][ T22] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 431.062351][ T22] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 431.074162][ T22] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.082271][ T22] usb 4-1: Product: syz [ 431.086495][ T22] usb 4-1: Manufacturer: syz [ 431.091127][ T22] usb 4-1: SerialNumber: syz [ 431.354400][ T8980] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 431.363109][ T8980] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.422782][ T22] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 431.475416][ T22] usb 4-1: USB disconnect, device number 8 [ 431.635037][ T9005] loop8: detected capacity change from 0 to 32768 [ 431.854145][ T9005] XFS (loop8): Mounting V5 Filesystem [ 431.976900][ T9005] XFS (loop8): Ending clean mount [ 431.989423][ T9005] XFS (loop8): Quotacheck needed: Please wait. [ 432.036615][ T4325] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.102935][ T9005] XFS (loop8): Quotacheck: Done. [ 432.184120][ T22] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 432.274409][ T9008] netlink: 'syz.2.983': attribute type 13 has an invalid length. [ 432.294418][ T9008] netlink: 'syz.2.983': attribute type 27 has an invalid length. [ 432.784272][ T22] usb 4-1: Using ep0 maxpacket: 8 [ 432.957572][ T6317] XFS (loop8): Unmounting Filesystem [ 432.963869][ T22] usb 4-1: device descriptor read/all, error -71 [ 433.038023][ T4325] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.241158][ T4325] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.484348][ T4325] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 433.719039][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 433.732437][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 433.746429][ T4282] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 433.754727][ T4282] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 433.762292][ T4282] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 433.771605][ T4282] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 434.462783][ T9051] loop8: detected capacity change from 0 to 2048 [ 434.492692][ T9051] UDF-fs: bad mount option "絴抉蛱嵸股蓧曝t棠涠弍旷7;Z潃茘護N\򖖤u喎o?痄崃sC{禰vlxddt紿椒|頌襮c戔$"?踅V8Zublxり萒5絇緔﹞"妶FOm=Q脒>躖3b眑~汆鱂g[s+S搷K咑B{f鶵甏鹅O#8""be鄡囯"j戔[嘨訒堣霝囅W冿軒be;K" or missing value [ 435.050292][ T4325] tipc: Left network mode [ 436.243326][ T9070] loop8: detected capacity change from 0 to 32768 [ 436.251889][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 436.303692][ T9072] tipc: Enabling of bearer rejected, failed to enable media [ 436.357331][ T9070] XFS (loop8): Mounting V5 Filesystem [ 436.495278][ T9070] XFS (loop8): Ending clean mount [ 437.436523][ T6317] XFS (loop8): Unmounting Filesystem [ 438.082798][ T9104] loop8: detected capacity change from 0 to 16 [ 438.163135][ T9104] erofs: (device loop8): erofs_init_device: empty device tag @ pos 0 [ 438.176551][ T9037] chnl_net:caif_netlink_parms(): no params data found [ 438.315554][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 439.117580][ T9037] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.175913][ T26] audit: type=1326 audit(1789193350.629:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.8.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607119e159 code=0x7fc00000 [ 439.345560][ T9037] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.516108][ T9037] device bridge_slave_0 entered promiscuous mode [ 439.548724][ T26] audit: type=1326 audit(1789193350.719:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.8.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f607119e159 code=0x7fc00000 [ 439.720667][ T26] audit: type=1326 audit(1789193350.879:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9115 comm="syz.8.1005" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f607119e159 code=0x7fc00000 [ 439.907186][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.913525][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.940330][ T9037] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.965341][ T9037] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.973512][ T9037] device bridge_slave_1 entered promiscuous mode [ 439.998043][ T9138] netlink: 'syz.2.1010': attribute type 4 has an invalid length. [ 440.008026][ T9135] loop3: detected capacity change from 0 to 512 [ 440.076346][ T9135] EXT4-fs (loop3): Test dummy encryption mode enabled [ 440.102258][ T9133] netlink: 'syz.2.1010': attribute type 4 has an invalid length. [ 440.105180][ T9135] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 441.288635][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 441.305618][ T9037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 441.341620][ T9135] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 441.356851][ T9135] EXT4-fs (loop3): 1 truncate cleaned up [ 441.362553][ T9135] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 441.878071][ T9037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.062667][ T9037] team0: Port device team_slave_0 added [ 442.112607][ T9148] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 442.124895][ T9037] team0: Port device team_slave_1 added [ 442.142882][ T9150] netlink: 'syz.3.1008': attribute type 13 has an invalid length. [ 442.166381][ T9150] netlink: 'syz.3.1008': attribute type 27 has an invalid length. [ 442.247844][ T4325] device hsr_slave_0 left promiscuous mode [ 442.267687][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 442.273720][ T4325] device hsr_slave_1 left promiscuous mode [ 442.293348][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.311981][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.346449][ T4325] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.353919][ T4325] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.403076][ T4325] bridge0: port 3(dummy0) entered disabled state [ 442.423897][ T4325] device bridge_slave_1 left promiscuous mode [ 442.432841][ T4325] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.454398][ T4325] device bridge_slave_0 left promiscuous mode [ 442.460632][ T4325] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.521216][ T4325] device veth1_macvtap left promiscuous mode [ 442.536563][ T4325] device veth0_macvtap left promiscuous mode [ 442.542817][ T4325] device veth1_vlan left promiscuous mode [ 442.552717][ T4325] device veth0_vlan left promiscuous mode [ 443.086806][ T4325] team0 (unregistering): Port device team_slave_1 removed [ 443.136823][ T4325] team0 (unregistering): Port device team_slave_0 removed [ 443.186139][ T4325] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 443.237729][ T4325] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 443.344130][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 443.565767][ T4325] bond0 (unregistering): Released all slaves [ 443.718272][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.782177][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.849326][ T9037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.610726][ T9037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.691260][ T9037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.785821][ T9037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.951893][ T9037] device hsr_slave_0 entered promiscuous mode [ 445.972880][ T9037] device hsr_slave_1 entered promiscuous mode [ 446.010540][ T9037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.050274][ T9037] Cannot create hsr debugfs directory [ 446.336867][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 446.347319][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 446.356530][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 446.366838][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 446.376073][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1021'. [ 447.122362][ T9196] loop8: detected capacity change from 0 to 512 [ 447.428030][ T9196] EXT4-fs (loop8): Unsupported encryption level 190 [ 447.733648][ T9037] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 447.762806][ T26] audit: type=1326 audit(1789193359.239:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 447.788385][ T9037] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 447.812428][ T9037] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 447.824185][ T26] audit: type=1326 audit(1789193359.239:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 447.858798][ T9037] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 447.916431][ T26] audit: type=1326 audit(1789193359.239:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 447.997267][ T26] audit: type=1326 audit(1789193359.239:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 448.115388][ T9037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.138727][ T26] audit: type=1326 audit(1789193359.239:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 448.171093][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 448.197515][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 448.236831][ T26] audit: type=1326 audit(1789193359.239:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 448.263926][ T9037] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.287779][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 448.303726][ T26] audit: type=1326 audit(1789193359.239:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 448.346627][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 448.384195][ T26] audit: type=1326 audit(1789193359.239:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 448.404753][ T4913] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.415311][ T4913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 449.245176][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 449.253636][ T26] audit: type=1326 audit(1789193359.239:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 449.487859][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 449.497064][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 449.509657][ T4913] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.516821][ T4913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 449.526886][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 449.536061][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 449.544284][ T26] audit: type=1326 audit(1789193359.239:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9213 comm="syz.0.1022" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe9f839e159 code=0x7fc00000 [ 449.635674][ T9037] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 449.648143][ T127] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 449.850262][ T127] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 449.863844][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 449.895082][ T127] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 450.242560][ T127] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 450.251792][ T127] usb 4-1: Manufacturer: syz [ 450.285551][ T127] usb 4-1: config 0 descriptor?? [ 450.311494][ T9037] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 450.394124][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 450.429399][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 450.474714][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 450.488864][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 450.499804][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 450.522748][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 450.534063][ T127] rc_core: IR keymap rc-hauppauge not found [ 450.543032][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 450.554195][ T127] Registered IR keymap rc-empty [ 450.557029][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 450.570976][ T127] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 450.571650][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 450.608823][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 450.619321][ T127] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9 [ 451.117913][ T9233] jffs2: notice: (9233) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 451.654506][ T127] usb 4-1: USB disconnect, device number 11 [ 452.268316][ T9280] loop8: detected capacity change from 0 to 512 [ 452.308474][ T9280] EXT4-fs: Ignoring removed bh option [ 452.346230][ T9280] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 452.368259][ T9280] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 452.392482][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 452.420189][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 452.447284][ T9037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.450511][ T9280] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 452.463274][ T9280] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 455.953364][ T6317] EXT4-fs (loop8): unmounting filesystem. [ 456.598998][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 456.612783][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 456.632158][ T9349] netlink: 'syz.8.1049': attribute type 1 has an invalid length. [ 456.709383][ T9349] 8021q: adding VLAN 0 to HW filter on device bond2 [ 456.783276][ T9357] bond2: (slave geneve2): making interface the new active one [ 456.822010][ T9357] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 456.871134][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 456.933715][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 456.947348][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 456.988724][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 457.024561][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 457.053095][ T9037] device veth0_vlan entered promiscuous mode [ 457.103315][ T9037] device veth1_vlan entered promiscuous mode [ 457.169915][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 457.189216][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 457.203660][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 457.231602][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 457.260459][ T9037] device veth0_macvtap entered promiscuous mode [ 457.280789][ T9037] device veth1_macvtap entered promiscuous mode [ 457.300511][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 457.320851][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 457.358573][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 457.393863][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.428494][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.458964][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 457.468840][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 457.484262][ T9037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 457.518415][ T9037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 457.533538][ T9037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.548537][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 457.560752][ T4913] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 457.583390][ T9037] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.599081][ T9037] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.619031][ T9037] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.637841][ T9037] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.939667][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.953606][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.001117][ T4908] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 458.066044][ T4458] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.081843][ T4458] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.140662][ T9394] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1056'. [ 458.165400][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 458.176797][ T9391] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1057'. [ 458.186599][ T9391] netem: change failed [ 459.348861][ T9415] loop9: detected capacity change from 0 to 512 [ 459.354256][ T4318] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 459.363746][ T9415] EXT4-fs: Ignoring removed bh option [ 459.399696][ T9415] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 459.455927][ T9415] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 459.536521][ T9415] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 459.564516][ T9415] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 459.575866][ T4318] usb 4-1: Using ep0 maxpacket: 32 [ 459.589352][ T4318] usb 4-1: too many endpoints for config 0 interface 0 altsetting 5: 33, using maximum allowed: 30 [ 459.648390][ T4318] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 459.668720][ T4318] usb 4-1: config 0 interface 0 has no altsetting 0 [ 459.675600][ T4318] usb 4-1: New USB device found, idVendor=056a, idProduct=0301, bcdDevice= 0.00 [ 459.685110][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.702168][ T4318] usb 4-1: config 0 descriptor?? [ 459.991758][ T9037] EXT4-fs (loop9): unmounting filesystem. [ 460.114745][ T9409] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1061'. [ 460.155229][ T4318] usbhid 4-1:0.0: can't add hid device: -71 [ 460.163788][ T4318] usbhid: probe of 4-1:0.0 failed with error -71 [ 460.215502][ T4318] usb 4-1: USB disconnect, device number 12 [ 460.431187][ T9449] Cannot find add_set index 0 as target [ 461.454138][ T4318] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 461.492508][ T9463] nvmet: failed to open file ./file0: (-2) [ 461.648901][ T4318] usb 9-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 461.663896][ T4318] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.691330][ T4318] usb 9-1: Product: syz [ 461.704119][ T4318] usb 9-1: Manufacturer: syz [ 461.718357][ T4318] usb 9-1: SerialNumber: syz [ 461.844572][ T9476] bond2: (slave veth0_to_bond): Releasing backup interface [ 461.860124][ T9476] bond1: (slave geneve2): Releasing active interface [ 461.936837][ T9479] netlink: 28 bytes leftover after parsing attributes in process `syz.9.1076'. [ 461.990806][ T9479] netem: change failed [ 462.173495][ T4318] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 462.571152][ T9498] loop9: detected capacity change from 0 to 4096 [ 463.504457][ T9498] ntfs3: loop9: failed to replay log file. Can't mount rw! [ 463.782613][ T9504] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1082'. [ 464.078507][ T9508] Cannot find add_set index 0 as target [ 464.883006][ T22] usb 9-1: USB disconnect, device number 4 [ 464.924732][ T22] usblp0: removed [ 465.311499][ T9522] tipc: Failed to remove unknown binding: 66,0,0/4:1525117323/1525117325 [ 465.346243][ T9522] tipc: Failed to remove unknown binding: 66,0,0/4:1525117323/1525117324 [ 465.369120][ T9524] tipc: Failed to remove unknown binding: 66,0,0/4:1525117323/1525117325 [ 465.395547][ T9524] tipc: Failed to remove unknown binding: 66,0,0/4:1525117323/1525117324 [ 465.464206][ T22] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 465.650026][ T9529] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 465.674548][ T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11 [ 465.694113][ T22] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 465.730164][ T22] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 465.732235][ T9529] batman_adv: batadv0: Adding interface: gretap1 [ 465.769742][ T22] usb 9-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00 [ 465.799002][ T9529] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.874608][ T22] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.912480][ T22] usb 9-1: config 0 descriptor?? [ 465.919041][ T9529] batman_adv: batadv0: Interface activated: gretap1 [ 465.957122][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 465.964849][ T9539] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 465.973460][ T9539] device bridge_slave_0 left promiscuous mode [ 465.979876][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.018948][ T9539] device bridge_slave_1 left promiscuous mode [ 466.025488][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.041503][ T9539] bond0: (slave bond_slave_0): Releasing backup interface [ 466.049641][ T9539] device bond_slave_0 left promiscuous mode [ 466.067413][ T9539] bond0: (slave bond_slave_1): Releasing backup interface [ 466.078070][ T9539] device bond_slave_1 left promiscuous mode [ 466.087734][ T9539] device team_slave_0 left promiscuous mode [ 466.117683][ T9539] team0: Port device team_slave_0 removed [ 466.124242][ T9539] device team_slave_1 left promiscuous mode [ 466.155022][ T9539] team0: Port device team_slave_1 removed [ 466.359668][ T22] logitech 0003:046D:C295.0006: ignoring exceeding usage max [ 466.389740][ T22] logitech 0003:046D:C295.0006: hidraw0: USB HID v0.00 Device [HID 046d:c295] on usb-dummy_hcd.8-1/input0 [ 466.419262][ T22] logitech 0003:046D:C295.0006: no inputs found [ 467.404292][ T9558] tipc: Started in network mode [ 467.426240][ T9558] tipc: Node identity 4, cluster identity 4711 [ 467.454416][ T9558] tipc: Node number set to 4 [ 467.489051][ T22] usb 9-1: USB disconnect, device number 5 [ 468.011577][ T9572] tipc: Failed to remove unknown binding: 66,0,0/0:103918236/103918238 [ 468.038842][ T9572] tipc: Failed to remove unknown binding: 66,0,0/0:103918236/103918237 [ 468.064276][ T9573] tipc: Failed to remove unknown binding: 66,0,0/0:103918236/103918238 [ 468.086800][ T9573] tipc: Failed to remove unknown binding: 66,0,0/0:103918236/103918237 [ 469.312810][ T22] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 469.570518][ T22] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 469.590061][ T22] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.607552][ T22] usb 10-1: Product: syz [ 469.613768][ T22] usb 10-1: Manufacturer: syz [ 469.619872][ T22] usb 10-1: SerialNumber: syz [ 470.075717][ T22] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 470.157411][ T9606] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 473.580100][ T4318] usb 10-1: USB disconnect, device number 2 [ 473.614788][ T4318] usblp0: removed [ 473.745740][ T9650] tipc: Failed to remove unknown binding: 66,0,0/0:1112942055/1112942057 [ 473.777155][ T9650] tipc: Failed to remove unknown binding: 66,0,0/0:1112942055/1112942056 [ 474.796623][ T9658] tipc: Failed to remove unknown binding: 66,0,0/0:1112942055/1112942057 [ 475.785458][ T9658] tipc: Failed to remove unknown binding: 66,0,0/0:1112942055/1112942056 [ 477.000894][ T9670] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 477.134300][ T9670] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 477.796720][ T9673] loop3: detected capacity change from 0 to 512 [ 477.844950][ T9673] EXT4-fs: Ignoring removed bh option [ 477.867576][ T9673] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 477.924154][ T9673] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 478.049583][ T9673] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 478.069423][ T9688] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 478.081217][ T9688] batman_adv: batadv0: Adding interface: gretap1 [ 478.087655][ T9688] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.113221][ T9688] batman_adv: batadv0: Interface activated: gretap1 [ 478.154749][ T9673] ext4 filesystem being mounted at /229/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 478.833575][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 480.204601][ T9719] tipc: Failed to remove unknown binding: 66,0,0/3145728:55525085/55525087 [ 480.235899][ T9719] tipc: Failed to remove unknown binding: 66,0,0/3145728:55525085/55525086 [ 481.942302][ T9719] tipc: Failed to remove unknown binding: 66,0,0/3145728:55525085/55525087 [ 481.974105][ T9719] tipc: Failed to remove unknown binding: 66,0,0/3145728:55525085/55525086 [ 482.204796][ T9739] device syzkaller0 entered promiscuous mode [ 487.245961][ T9770] netlink: 'syz.8.1139': attribute type 1 has an invalid length. [ 487.290053][ T9770] 8021q: adding VLAN 0 to HW filter on device bond3 [ 488.198362][ T9776] bond3 (unregistering): Released all slaves [ 489.242930][ T9832] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 497.419245][ T9943] wg1 speed is unknown, defaulting to 1000 [ 497.426724][ T9943] wg1 speed is unknown, defaulting to 1000 [ 497.433074][ T9943] wg1 speed is unknown, defaulting to 1000 [ 497.525919][ T9943] infiniband syz2: set down [ 497.530476][ T9943] infiniband syz2: added wg1 [ 497.538745][ T4318] wg1 speed is unknown, defaulting to 1000 [ 498.231547][ T9943] RDS/IB: syz2: added [ 498.235624][ T9943] smc: adding ib device syz2 with port count 1 [ 498.241769][ T9943] smc: ib device syz2 port 1 has pnetid [ 498.248603][ T9943] wg1 speed is unknown, defaulting to 1000 [ 498.274271][ T22] wg1 speed is unknown, defaulting to 1000 [ 498.354238][ T9943] wg1 speed is unknown, defaulting to 1000 [ 498.416057][ T9943] wg1 speed is unknown, defaulting to 1000 [ 498.470357][ T9943] wg1 speed is unknown, defaulting to 1000 [ 498.527562][ T9943] wg1 speed is unknown, defaulting to 1000 [ 498.829626][ T9951] netlink: 'syz.0.1175': attribute type 1 has an invalid length. [ 498.895253][ T9951] 8021q: adding VLAN 0 to HW filter on device bond1 [ 498.942678][ T9958] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 498.963819][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 499.890523][ T9980] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=none,decodes=none:owns=io+mem [ 500.221621][ T9994] EXT4-fs warning (device sda1): verify_group_input:175: Bad blocks count 0 [ 500.593628][ T9998] loop8: detected capacity change from 0 to 512 [ 500.679249][ T9998] EXT4-fs error (device loop8): ext4_orphan_get:1409: inode #15: comm syz.8.1186: iget: bad i_size value: 38620345925642 [ 500.714832][ T9998] EXT4-fs error (device loop8): ext4_orphan_get:1414: comm syz.8.1186: couldn't read orphan inode 15 (err -117) [ 500.884114][ T9998] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 501.507273][T10009] loop9: detected capacity change from 0 to 8 [ 501.524286][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.530632][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.575911][T10006] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.584533][T10006] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.596339][T10006] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.602817][T10006] SQUASHFS error: Failed to read block 0x4de: -5 [ 501.612664][T10010] rdma_rxe: rxe_register_device failed with error -23 [ 501.620599][T10010] rdma_rxe: failed to add wg1 [ 502.387922][ T26] kauditd_printk_skb: 11 callbacks suppressed [ 502.388010][ T26] audit: type=1800 audit(1789193413.069:122): pid=10006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1188" name="file1" dev="loop9" ino=5 res=0 errno=0 [ 503.504214][T10002] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 505.009560][ T6317] EXT4-fs (loop8): unmounting filesystem. [ 505.493346][T10037] sctp: [Deprecated]: syz.9.1195 (pid 10037) Use of struct sctp_assoc_value in delayed_ack socket option. [ 505.493346][T10037] Use struct sctp_sack_info instead [ 507.668112][T10062] rdma_rxe: rxe_register_device failed with error -23 [ 507.675081][T10062] rdma_rxe: failed to add wg1 [ 520.933146][T10163] loop9: detected capacity change from 0 to 164 [ 521.637649][T10167] rock: directory entry would overflow storage [ 521.644359][T10167] rock: sig=0x4f50, size=4, remaining=3 [ 521.649929][T10167] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 523.904283][T10219] xt_CT: You must specify a L4 protocol and not use inversions on it [ 525.423876][T10233] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 527.451046][T10269] overlayfs: failed to resolve './bus': -2 [ 528.960986][T10286] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1253'. [ 530.166151][T10302] loop8: detected capacity change from 0 to 2048 [ 530.243563][T10302] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 532.846952][T10335] overlayfs: failed to clone upperpath [ 534.666571][T10363] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1260'. [ 536.180566][T10392] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 538.462740][T10428] netlink: 'syz.3.1285': attribute type 1 has an invalid length. [ 539.309449][T10428] bond3: (slave bridge1): making interface the new active one [ 539.362966][T10428] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 541.307408][T10450] ceph: No mds server is up or the cluster is laggy [ 541.352742][T10449] loop3: detected capacity change from 0 to 512 [ 541.432271][T10449] EXT4-fs (loop3): orphan cleanup on readonly fs [ 541.467990][T10449] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 541.552102][T10449] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 541.616814][T10449] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.1276: attempt to clear invalid blocks 2 len 1 [ 541.674670][T10449] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1276: invalid indirect mapped block 1819239214 (level 0) [ 541.719883][T10449] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.1276: invalid indirect mapped block 1819239214 (level 1) [ 541.889620][T10449] EXT4-fs (loop3): 1 truncate cleaned up [ 541.964157][T10449] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 543.666002][T10492] loop9: detected capacity change from 0 to 128 [ 543.776971][T10492] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 543.995681][T10492] ext4 filesystem being mounted at /44/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 544.017744][ T4281] EXT4-fs (loop3): unmounting filesystem. [ 546.496032][T10527] overlayfs: failed to resolve './bus': -2 [ 547.606776][ T9037] EXT4-fs (loop9): unmounting filesystem. [ 547.746836][T10545] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1295'. [ 548.331062][T10534] ceph: No mds server is up or the cluster is laggy [ 549.128545][T10569] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[4272] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[10569] [ 549.664993][T10575] loop8: detected capacity change from 0 to 2048 [ 549.706075][T10128] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 552.282630][T10604] tipc: Started in network mode [ 552.454058][T10604] tipc: Node identity 2000004, cluster identity 4711 [ 552.472309][T10604] tipc: Node number set to 33554436 [ 554.210164][T10628] overlayfs: failed to clone upperpath [ 554.516903][T10634] ceph: No mds server is up or the cluster is laggy [ 554.626012][ T7723] ------------[ cut here ]------------ [ 554.631697][ T7723] WARNING: CPU: 1 PID: 7723 at net/ceph/messenger_v2.c:2940 ceph_con_v2_try_read+0x71c6/0x7330 [ 554.642451][ T7723] Modules linked in: [ 554.646404][ T7723] CPU: 1 PID: 7723 Comm: kworker/1:9 Not tainted syzkaller #0 [ 554.653968][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.664072][ T7723] Workqueue: ceph-msgr ceph_con_workfn [ 554.669655][ T7723] RIP: 0010:ceph_con_v2_try_read+0x71c6/0x7330 [ 554.675931][ T7723] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 35 89 8e f7 48 c7 c7 a0 97 ad 8b 44 89 f6 e8 76 10 5a f7 0f 0b e9 45 ff ff ff e8 1a 89 8e f7 <0f> 0b 41 bd c3 ff ff ff e9 39 ff ff ff e8 08 89 8e f7 0f 0b 41 bd [ 554.695748][ T7723] RSP: 0018:ffffc9000cae76c0 EFLAGS: 00010293 [ 554.701839][ T7723] RAX: ffffffff89f3b876 RBX: dffffc0000000000 RCX: ffff88807dc78000 [ 554.709884][ T7723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 554.717911][ T7723] RBP: ffffc9000cae7bb8 R08: 0000000000000000 R09: 0000000000000002 [ 554.725935][ T7723] R10: 0000000000000006 R11: 0000000000000000 R12: fffff5200195cf24 [ 554.733971][ T7723] R13: 1ffff1100466a0e7 R14: 0000000000000000 R15: ffff8880233506c0 [ 554.741962][ T7723] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 554.751049][ T7723] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 554.757684][ T7723] CR2: 00007ffdde60f008 CR3: 00000000367e5000 CR4: 00000000003506e0 [ 554.765706][ T7723] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 554.773697][ T7723] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 554.781713][ T7723] Call Trace: [ 554.785098][ T7723] [ 554.788150][ T7723] ? prepare_write_message_footer+0x4b0/0x4b0 [ 554.794350][ T7723] ? __mutex_trylock_common+0x15c/0x260 [ 554.799974][ T7723] ? trace_raw_output_contention_end+0xd0/0xd0 [ 554.806176][ T7723] ? rcu_is_watching+0x11/0xa0 [ 554.811037][ T7723] ? trace_contention_end+0x5f/0x170 [ 554.816378][ T7723] ? __mutex_lock+0x1ab/0xae0 [ 554.821171][ T7723] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 554.827224][ T7723] ? __lock_acquire+0x7c40/0x7c40 [ 554.832289][ T7723] ceph_con_workfn+0x1ed/0x1110 [ 554.837208][ T7723] ? _raw_spin_unlock_irq+0x1f/0x40 [ 554.842439][ T7723] ? process_one_work+0x7b4/0x1160 [ 554.847673][ T7723] process_one_work+0x8ab/0x1160 [ 554.852659][ T7723] ? worker_detach_from_pool+0x240/0x240 [ 554.858356][ T7723] ? _raw_spin_lock_irq+0xb7/0xf0 [ 554.863407][ T7723] ? _raw_spin_lock_irqsave+0x100/0x100 [ 554.869011][ T7723] ? wq_worker_running+0x97/0x190 [ 554.874162][ T7723] worker_thread+0xaf5/0x12a0 [ 554.878895][ T7723] kthread+0x29d/0x330 [ 554.883046][ T7723] ? worker_clr_flags+0x1a0/0x1a0 [ 554.888131][ T7723] ? kthread_blkcg+0xd0/0xd0 [ 554.892737][ T7723] ret_from_fork+0x1f/0x30 [ 554.897233][ T7723] [ 554.900291][ T7723] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 554.907567][ T7723] CPU: 1 PID: 7723 Comm: kworker/1:9 Not tainted syzkaller #0 [ 554.915016][ T7723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 554.925061][ T7723] Workqueue: ceph-msgr ceph_con_workfn [ 554.930521][ T7723] Call Trace: [ 554.933790][ T7723] [ 554.936712][ T7723] dump_stack_lvl+0x188/0x24e [ 554.941410][ T7723] ? memcpy+0x3c/0x60 [ 554.945443][ T7723] ? show_regs_print_info+0x12/0x12 [ 554.950637][ T7723] ? load_image+0x410/0x410 [ 554.955165][ T7723] panic+0x2d3/0x710 [ 554.959059][ T7723] ? bpf_jit_dump+0xd0/0xd0 [ 554.963559][ T7723] ? ret_from_fork+0x1f/0x30 [ 554.968146][ T7723] __warn+0x2f8/0x4f0 [ 554.972119][ T7723] ? ceph_con_v2_try_read+0x71c6/0x7330 [ 554.977661][ T7723] ? ceph_con_v2_try_read+0x71c6/0x7330 [ 554.983200][ T7723] report_bug+0x2ba/0x4f0 [ 554.987588][ T7723] ? ceph_con_v2_try_read+0x71c6/0x7330 [ 554.993129][ T7723] handle_bug+0x3a/0x70 [ 554.997280][ T7723] exc_invalid_op+0x16/0x40 [ 555.001779][ T7723] asm_exc_invalid_op+0x16/0x20 [ 555.006650][ T7723] RIP: 0010:ceph_con_v2_try_read+0x71c6/0x7330 [ 555.012796][ T7723] Code: 41 5c 41 5d 41 5e 41 5f 5d c3 e8 35 89 8e f7 48 c7 c7 a0 97 ad 8b 44 89 f6 e8 76 10 5a f7 0f 0b e9 45 ff ff ff e8 1a 89 8e f7 <0f> 0b 41 bd c3 ff ff ff e9 39 ff ff ff e8 08 89 8e f7 0f 0b 41 bd [ 555.032391][ T7723] RSP: 0018:ffffc9000cae76c0 EFLAGS: 00010293 [ 555.038449][ T7723] RAX: ffffffff89f3b876 RBX: dffffc0000000000 RCX: ffff88807dc78000 [ 555.046414][ T7723] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 555.054376][ T7723] RBP: ffffc9000cae7bb8 R08: 0000000000000000 R09: 0000000000000002 [ 555.062336][ T7723] R10: 0000000000000006 R11: 0000000000000000 R12: fffff5200195cf24 [ 555.070309][ T7723] R13: 1ffff1100466a0e7 R14: 0000000000000000 R15: ffff8880233506c0 [ 555.078290][ T7723] ? ceph_con_v2_try_read+0x71c6/0x7330 [ 555.083887][ T7723] ? prepare_write_message_footer+0x4b0/0x4b0 [ 555.089964][ T7723] ? __mutex_trylock_common+0x15c/0x260 [ 555.095512][ T7723] ? trace_raw_output_contention_end+0xd0/0xd0 [ 555.101669][ T7723] ? rcu_is_watching+0x11/0xa0 [ 555.106435][ T7723] ? trace_contention_end+0x5f/0x170 [ 555.111732][ T7723] ? __mutex_lock+0x1ab/0xae0 [ 555.116431][ T7723] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 555.122413][ T7723] ? __lock_acquire+0x7c40/0x7c40 [ 555.127441][ T7723] ceph_con_workfn+0x1ed/0x1110 [ 555.132312][ T7723] ? _raw_spin_unlock_irq+0x1f/0x40 [ 555.137513][ T7723] ? process_one_work+0x7b4/0x1160 [ 555.142620][ T7723] process_one_work+0x8ab/0x1160 [ 555.147560][ T7723] ? worker_detach_from_pool+0x240/0x240 [ 555.153190][ T7723] ? _raw_spin_lock_irq+0xb7/0xf0 [ 555.158225][ T7723] ? _raw_spin_lock_irqsave+0x100/0x100 [ 555.163767][ T7723] ? wq_worker_running+0x97/0x190 [ 555.168788][ T7723] worker_thread+0xaf5/0x12a0 [ 555.173481][ T7723] kthread+0x29d/0x330 [ 555.177558][ T7723] ? worker_clr_flags+0x1a0/0x1a0 [ 555.182601][ T7723] ? kthread_blkcg+0xd0/0xd0 [ 555.187196][ T7723] ret_from_fork+0x1f/0x30 [ 555.191626][ T7723] [ 555.194877][ T7723] Kernel Offset: disabled [ 555.199265][ T7723] Rebooting in 86400 seconds..