last executing test programs: 12m15.944369042s ago: executing program 32 (id=248): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) socket$packet(0x11, 0x3, 0x300) syz_open_dev$vcsu(0x0, 0x1, 0x800) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000001, 0x13, r0, 0x8cee000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2d}}, 0x6}, 0x1c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendmmsg$inet(r1, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000004c0)="cce63b152f4f235135cd164df5cbec6929499dd14d101c2ebfea774d7fc9c6352470a4041e7eefa0af59e82c6cc79a432584707b31324753e034b9e62156ef937610325daa0c7a215ed52b9418c16d0ffd7be7f9e66e8b069e1c06085244d4444b42b6371837677a7caca2aeba263a67f228fb9be53428b7de8d165754f5fd2a4192a22ffd351f3336edbe0cf7dc299385e9593d5c7f0714378cf083f72e26a5bd1e8a8d08ee0bec243ceacf2582908a00cac0d83ce3062b1e0752126a1bd945ce2680f3c9519795d9876988f2a32943d1ab821b69b1cbcb2b9e0edb3a3368abaefd34103585f5a2ea10867a73354246e2d44a1c358c73b260d1f57f0cd5e4b0cc2e3de70e388c201cd23d0a59e44d031604895b81d25c9ca35c2837e83a0d89e7d8735029566a933ad82c49993843767ec4856d48c12df87ba099c9b7e77b211a277a8e8d3def4fe7e2b1c6e5fa7bdde283881faedbca089d0156cbcc70cd365547d1a917d73c145b6f3ab45ab5ed187a15b6b86e8d6d1f4a637f2aea028d46e4148e4c70803b367c0435fb5f3d450e3eb93e1c752ab28ce7baa89d309341ed1e3767b9bc082cbc8a024d16e5538a3612432a9864198d7a20e45c67460b3ea869cf667fc48614925104ce05bcc5260cd3e2fdb8ee9bbeb69db6aedb22b31cfb808e7147af7ac7e4c41918645ac9e0d3e9aa6ecdd957bef547e8d4fc1329e9494308b2739cf4d7926bfce3474de8795844a2d61ad43af119c0ae2b7e0dfd0077720f364cdd46d21722e87fecb5c2c0e0d93325d7d3e8f7dc8373ac493fd5119f3d0760951b0b2fa4ac7fa2e8f56af2cb20fc7cbe57c7166ca4c15aeae7ec8348c41d98b76fd12cffd5b34f4b97b9daf780f3191eba3306fcfed2bcba7e21ea12881f1ad4365d2e1c783290ecf18545b2ca5490bf7eb7d41c6b35ea56524fd1bb1e7116e828ef4b1062124ec15e9ea23f6905314d27480fcbd9900aa05aba98d679c97a43d0cb940927c292178e817330d0656b4cb4ed3df31f685b23fab9ef679f7512fbed0dcef4a35cc3a6b84c46a2e5dacccdc7b78ffe71b49c1093816f9df2743777bbe443e33132b7f97ea4b4ea1404e1ef56a220f699be0e4e63272e477ec4969f6c6cd0cba029361d223640d123f42b9ffda812feb630c3b91f1d6e6fdd0e435a5cc88ae2ed0aed207e811bf374872496218ebe8f76a1feafbdda1bbefa5ee48bf6e4e7323ee2cbb4ce35ef994c4e781a89cb6ed05cfeeb3885a443c1d0f344427524c640d42b1b56f2c19869d60d8c63956456aabd12fc47d46ca660d945e31dfd6e07bbfe1cfbd051ce2db33ea691c5c4f3f8e912b8de1b312bd5f7873aaf4924645c6a3b1445655548d212ec3081e8d13eebdf6da7ed7c191bc758455fb1dbccef24baf75564bb603fc72e21dd9187259f9ab6ae4cf9f439f93a65da4c9389d6f3731901beca82631eb781e01c0d9c91495f63c78e99fe05bc4c1eb97a84a5756b3572fa68c3cb148933012a7c7c853b2a226d814f0559d13f32c060943cda1ac58cd617cf951e83fff0581a4cdc1db11bbdd2cac106004968cb5ffc26fac08af9212a8c59e94c9736325f61d179b9c5e8fea7e06a61d8b1cfad62a9839a56615be390b9dceaa0fa46841df5f5cb172a6c014ab380745a2b0461d57137a2a86ec508022960faf2b2c638c75c56043be513daab7d5907e3bcd416f1d0d75e0096f1f3ce9c620375d40b2355eaa059697c2a615b3cf8cec387405a5a320605b846ff5b6311fd93df025ece92add51e3092a10b8ff0e1abb60b32fae6a037c6ba7771b0fdc8fd0d5792db39a36b0b99bbd1e5bf4caa0c5e253cfbf4314b5b60dd682653862659a5277f79ed1d8324c63893b35e55da568bbe8404f1d2763c776a930a1fc6c945f5bda517e1179a2c610392a9c4fe8bb3df289ff29de2cc52c49701f4feef0481bb84a5fd52df64dd165163aaefbae89ba84d73c57eb123f771e52596b49ed11687830ff1a1d056d42298fe73599ac07c950abe68b6622c394f27e0b54eee55a1a0f3dc47f8d55d95cdc4372d547ea3280fb7cccd85332541e1fb20cc45198e480ed518ac6e634049f2e7cb05c150cc889a891a18cdf3492fe2ce8d436b3586584ec0851faa3168be699b1c9caa18760e45674ca8bea7d891f31b9e995c0aacecb2fd8439e5398d31fc8aae6f5ac2b5a6183f8368d3c0de1a55be202e4ffa60ef71b46e0e0ee061cc43311c5305c02d14d6be4347d2327c35ff9328b76d55aa3f11ecfd4c3213b008c49d0a2dc0ce12c2392eb6df7cbc632db538f706c3c5bc5635434657747dffd9ee56e16058c67e9e80c141f11b0b5ae8838cbc981ce923ac66bcd6a6c7a92d9f7cad10480336edd67058c241b2016592af3c5e8b4a7069559b190aafc0d0af085601439e8819b05ba2ea5ba8a7f4fc585657bd5857e1d88d74a7eeff2ce6049efaa7e41e742583ef20c0a5c60e18e6da9f5342ae957a2cb62994cf9f35c3e914460d3b8e8e1fb6fbb37ac5e6f51b680a67d760259ed3797001f72e85701bfedcccd82e7945da63b3cf6ed19b2bb611eb31937ca13df724b81cec4ba6bdbe603783d1e9818a8cf22fb2f9f4c96940e667848a3177b617bec1f3d81d11da80079b65923434475e3756f51d1ef833d24a77c33b0eba2a89cb2019cc0af083e7c8fde8871db6536dd11b7c713f3a88c0d85fb7567d34e77e1f23c5ff3b2e0f9f302021163f1aeef73faf6bebc0c8783ee5a50a0fb72f0ecc7be3931570a4584c2ec79642e62289d524497e3a0ca7928d2273a057f6428d8c9b6ce047e8ad880bd212a9b902ac13407c80dae76d6db04fde7584203d98bd453c0b722fb2469665ed09739dc79c4856f7c2c1e7fd860161fc393b26c38a7de3c056ef8fc1bdbb53b136cf9e04b5a342fb8828cec4b3b8955cdfd8eda47492d4227289e81a40ff6bff03d3fc983df2097fbe413605189a06ed4305101555b611e541f037189ffad1ff5002a126db8f2d2504294081dbb9b211fbb6042c913ff34ae9537a560432c104470271aa687de030e3609c34ddb061011dbc08b66db1b45c43cfea804d1bea8c1c91d3a982f51593f5e209470d618cd430b44acead709936519b6937f3db2946a942153d78fe218eb4114af5ed60bc79e4ff8d48a9e8462b598cc4918124926711ca81b84e080b2a1b2d213904b9e2f3559f66521f9636ede23db18e3416ddef5a22956840ceab1bac6435716448fcf89d45d129120cb2ac92dbcb97be56b169523a7fc44ba32d3f62414b3868b1b8ab078d8cf65c967bcf702f16cdf099bd345787bc0b189a15c343322eae2958e6469f5715ab2eb81ec0a85311d53adb831a3350419ea4746c0d98bbb51d0eba63db662762c6c4af089d26fb57c5f1f7b78fded3e57d726ba3a61a57241681ba43ac35da7e13e860a1984cd0ab43f29b119885eea68941faa4e30f3cc4b3e98e015111a6c24a609ab4d686ceff1b218d68273ac3e87f150ca7ef2c6fba616bc626a009e551cf6801c942a8801c3a78d428ba626c1d449c17b962a7cbccff1a41fdf21e6847b6a0cd272ff01b685048a3ea03156bdf804016d6e558cdfd790772fc82f96adac5770d4a8eafc2d4d9cab076c38edf2cf4b3e830fb2acde872294b79250aaa30c152d83e991faa29f9c07483cb54c08f39099c12fca9579d847e3f7733b978c454c85ed6213673e475458e45f0b93d1eb1f484b0e181905097d79cd8bc565a14cb1c8835c3fc287d72d9616b99aa042c186a06aa91c5f4c00a7d86549767cb785a0f468d153003726516ecba477f3173bb05f2df60da83d5c4ddf889549e9504fb4052dfe5d3465563aeba8e5253b3cc9eda8dc0b8ffc74fdbd4d49e64de3eef79be08569042a7c5bf942cca6da27b90ba4c4832ada245b4f9ebdad645776b238af65073fd31924c1a1a04cd1a83f212caabb5601d11fa6375b1d4781ab75f398cf1d94d2881c105f15530b9a5c50fa852c3999cfea0f9b7c13a862a5bc21c28d6dcf9148a88ef5e6997bbb28aef8b637fc95e0359c741e32db2a267d96aba13aed03f89f5395ae5d19a5c2fd2564ee10523737a83856be448bd4186e2368b6631bea63142bc4d270fee89062bf7d61e5f6e49c798054760e624910c732737fb89aee6d51ac1dcc2b0a43bbbac1e23d691f42509d1475fb29cbdfd32599e95dda27424b288b3ec59109f6113bca5df34a870ad5f78a18864641e1196f47ab679914de32be7b4568c40d28c637c37c4bc61e561af71e867bd477ad8d8ff48208e781aeee17f7e4e89a795fc725b341df564859a33823af64535a81c56dfc0463d7264608be7eb101584031afcb2dd9fde4e9898c979973c2370b87cd0c28b16de10548ddc457fbc34309663418dc7df60c4ed965bbc5655ee79aa95aed1f33742034cf18df47530912cd19da57d44493b54c5a625e2c237d4ec4496df293d301359126d0129465a45aef9340515c2627f1919efa25c0fa5bf515a67ae10d527977138ade3e7422e41215aa75d6133b7710426c1e27f725e6040f01c6e7524e3789fefcb4640442cd4f72a03edec97bd47d12624053419048431ac781e6a17b9ab5030a5705ca11efb3dc58aaa41f9a6cfe397f774f0dc74610ac72624ca48af1ecba87376df745bccd434351f5831bcdc946bfa4ebb025412679f1e5011f1391935b6648007c98f5af3f0366eaa928de4180024188bae3aecea59a27edaf0cd199c57ef290c205dfbb89c82e9733d1bd12b59863a7f8a34b51f0a6da8b8f8ea6a571460938d4ea26f097e78af31c40501eeb8ad0f9feed8a6430149b85cdd7ed62c2e12cfa6a3c7292a1dfd3ca438e583d7f3af6ca123fe1c80352490c831ea385b132d792b4b6e0e570d0df29d9b39a761cf3b07ab29255cf4c3c281c71c47654144b0b61cda5830fa9d1feec4c305e89b12694fccab28759239b1e52377fdee05785867c281411372bab2a315403519199af83e75a402051fcfd2fdd179f4307ec96d1236cd9e24054582d242ed1e4113f1b244be3e26f78ad1668fbeee0e5e51b81d8302a85c64b2c8b3dbf6f126e289e216dd22902df37905872be8610c1e31fb2b0bcce23b7bbe76bc1eb69fac2ffffe06601273dda4769075823293cc94eb1a3a06b8cd13db4b1c7dc9ddd6ed4eeff148e3cd8494d81826d4586f780177664e4495fbb0045da95dfdfb96fcbbcd6ec5f78b66e2c738e1a6edc0c7bb17f5d764cff4eb5d572fb2e376b258a891ae25f16ee9d0803ae7b9ecbbdfe6d5de3cf4535d2f7cdbbb522d91693fc511589b2be769927954ae4574917c492bf4d75ffb0914939526f1d76fc73fc6a785f71707f41bb4766741926eda68c2783dd8a651c67edf80a4e5235fc72c343189eaf9563faced85942ddf1521b3f8f72565bd30de38f289ea131e228dbe53267b35e08575bd529c062c8d102ae61ef2af9c76132f53727e418c6bb903b0c8258f30f0b629701ce741434542e59a866766bd78d77274e6d56d40b2d8abb0cdb4ee7060ffe569f6080ddf7a7b696d8fba17ef2305547250ad5cde88c94f957febfd5c1a788b67d044369ceeb64bdcd8ec631658245eee03acc3de7fd4649060fde28c424f5e9f4f7f2013773a208c2faa4212e8c38685fc3773f04466329beca3ebd6ccf4a162fc1e5481fe537649c61c44e784c93db71036417dd96271cd21811178af52aa76b5b69342710c935707f792be532a346e47ffe576999f7ccd065eb1e439768cce2908a600d9e62148f4", 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="8b", 0x1}], 0x1}}], 0x2, 0x4001) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff2000/0xd000)=nil, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff34, 0x0, 0x0}, &(0x7f00000002c0)=0x40) 12m15.303525527s ago: executing program 1 (id=256): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1, &(0x7f0000000400)=ANY=[], 0xfd, 0x347, &(0x7f0000000080)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) statx(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file1\x00', 0x1000, 0x100, 0x0) syz_fuse_handle_req(r0, &(0x7f0000004200)="aa8e9df36226466e888b39901e75023156b5530e75c1e203314842ea78a6048cdec3383c60dcd8fa24f6928f6e02ab1090989c59ae38dceda05af132af4546a298837c63ea70975feb0919d7f7766791d530b90d522b23c58776ac7a4035383c5a0dd90d8b766c96816631f1742a0da0ce6ddd053a05966f6b6ec22dd28a0a2636d07696a307496b0b0d8bb370227dca3c96838e556681409be388f1dfbf500f1aee82b374f4473aecbdb77cf567fece7f8ec733fa91aa92a186f9768d16d0257ef826959fb3a73e4976a019bde8a82e9bb0a0443cbb1ab2c6e8f8748489948710294efb79d70edec2271491bc1cddc9c9d2713cc3063761f2bea07f5577bbe5224302ef23adcc96cb5ecee406c7977c97d7000000006e28198954bba79006fd58b2a2b43047e7f3ead143ccb6b27043d7a7512e9d3bad0138554f4b465ab6d1cec9b40cb301ac6491ee7fcdc0588e53eb2510471de91e3e73c98f0a3cc9929eac63f477a1208a80f8c75d0a1d9edb895d675d036a1863dddea98b18c846ac253b2470324b21eaaa6e69389b91bcd470995cd6835c6fac80d5ca41b66562c910f893124cf0f20dc65d90aa0f9cd1a7c88f755aaf33875d7639ae1b7413834636de57f44302b723646257ee7456bdfee10f2eaf0c05f2cf01a115ed8ac2908827af3d85da2f1bcf53d87ee830dc5e98fcfc1a22e547ce57508f606945a7599d8e1cc0268987cb7b3d00a6bfacea7bd05430255bc8b473a071b83695783944ef856fc89906e0b44a13166309bc8cc1dbae68399e1e8e4a2ea265c1a104dd862563cdaeee2b37e72fbda323cc72360b6d4fad2fd2409397f90422bbe6e9068aaf38e18918736e6357a6caac59ae803ffbe853ff716a388423bbc93bb2d6b1222bb94c96a3bddf421288d47039fa1b73573dbed87e1f6b280f8b045f9be8e0d85f6cf416bfc0f3f4ce988aefa2382cccf39e40b2a1657814b7953d0a0aea45d50d02d66982e5269f1ededd6a9f8f9e212314a4bb5c2f4898278fd3a585c1ff60e435b186c552134e5ddb0f2cc95dac405bc4bd32ccda41b05c6a376070c8ef2d6eb3ea7fce97da8f09440d47dc5faca6271d1ce4f4201b315d1cc3fa1d4cc2baa14e4c57bafb7b5bb2e9e859505360e1738a36100dd6c2fb6610fc0ed88e452148ecd8b73517f69c28f0c979525d21ba4fef353eebb2326f48217c44a322e9f1f08f92af1ff5ee5f2dc563f1a0edb09d0646105be0c46ddc8b71301e68013e863d539af5b3a2b11f770d8c0c086988216602619ec440f98d434add23bc7f54d145260773e53121188ca179832d5c406f2b4a91045edca91232416219fade02bf6ba002352943850294b05d9a142889205e6b69336cecfe8a7cfc88688368d54b475f3915eea851334395f80b41177ed4d17d91880a22c1c0cf33a550e32fbf76505458d07ebccc4e77bafae1700c9997f6fe28452f011e370642f228bbf0e2f3dc05741127f6d73e96c073b26e730ac19cb17dfc63c0ed4b5d53ffd6e312e3e80822c8bbea3cf2914f3f8ee53fb4edde1d4507fa9d7de54eecb75132befab6bf486cb05bc8727dadac49c83bf08d9eb94621b42241f9eb8fd1e6fbf969d932a023760faa62c178b7f0a1d43adbf5c21a35a58d381442ecdfc2dcce2d11e5efae8433b14fc9fc28294ae76eaa95f38ac121f255d9b478c81a1caf5c606c34e6efa80dd3aa77cc4001b9fceebcc77a1efea7bf9f749f62c7a8bd5deb0f70c54ab5daab010cf14b2f1012516dc1639edb2d890638b73559d060be47f594f322efdd40c5945148fe1690585923488910fcb3159006f935f7d184e4b4c404ccb6e2a799cc67aa2b56a13c16e3ad92b85a12060881c1d140708ffece6965f9746ed4eef74d37424e760f4b266c80c93390523eadc65494962bed4efc86a0fead2fe25c9108c5d591770cee92f9ff2d916ba0dedc6551a47ce3a4dbc97043e588b3483f0793786fe9f32f1b79ba3f4c4ccabba52a59861c8024bcdfc8ecb0acc821160b060d5dc24f0ade14d08b56218a32a03f9eba729c02fc6b714bc72b11cc7fe47b51b3a174cfa2d8f5df80a0fd4d1dd2ed36b868b46ee5a8cc72e91b57bd05005b5142b5531650813fb5496af379f9e7b1b73c49c64dead9725af0742a41b770205390791de856715c0138ca22f134911a28d2caf22ef21049d1ba721d278bcf675317c5303cbaf96535414fd92c55d741120200d49729e01e399e4c30fa8da659654196af7991a3d294c775a610f242a56c88d542641036de7eccbd64f9f306a3920596d350637a6409f667110b46c6d85ab94df4d7b0af12318522ba1e745e7de45176789a53213b9b3d23b2599275e4f1858fdb2fd63f8c6f7990235e2fb3c4c8f215715973b60b1e56d1f061b6ff33510d08fa403559cbcc21bd141b41f1e9ab4e163a0f80a918ba13031c483931a9dcdb790ad77fbdf5634662cb75e79d986e4724f64c80203600df7ac9950330431b83777bd968a86be5698b13c37513235ac89a0a1dcb799112a86a2d96b1708e0c5e983756d8243927fc7d42be6ff4c946c0763a9745897726f38b65920363b7c32051bf9e770ab1ec140ff11fc639f36fa760afcfd6ba2f609df8cb0949f26119895b69c8ffd0836a01da1e407ba08f37a1144674f5a71b3499ffcccb21e75f19cdfb33c7eded5fa5c264784a78edc5f6de17da15317a66fea522b6e92a52efa5013797212d816c3229c7dd523e2165f9f042c3b3b16e608a1d87ab9c46c2b291bf547e1f4312913b16e39a714c24ebc5cb4f4f80bb20ce4efdf2921db45b7389fef98bd0e8aa40be16758b0d7755ab631b27c5d49225e84fea63e3f031c665851ef4ed18628b26445da2cad4741800cf72a401ad79a7462657068e0f2ee65eeb86da66890247cb45b31d3ad06ea7500eac5be65528c55bf190b0ec27673b67b36117344097a0dbb9db47a2b5144218002d14cbb98629c2ed35db5cdcf93994e3e3d1a1673ff60ec0d9bae1217ba6f39ae4ac4c9e5a19f85634f3091150c4724aaabe3bd1445cfa33fac93b86c5871ca168a728899e2e0062a596fba22b962764420f1268bb8ae0a894559c488cfce6b71aa8478964d2eef5086b2cee891ca031b6543bb7ba55006621f1d80e17abcba9f9d05fc5e61c6c4a890aba4b205f5570e7866ec4de380420c4758de63ff0f7b1acb0521e45cd9bc54df1a4614c04c524f43e86f58757eddb645bbc56a63de5bb560f56a31796dc344d58e2ff2d3fe5228d87c0439e6353943c92160fb847a172eea37ad0c22de5d1e7cd66730218832c87b73366131e29a1545b26d4c500a9afd75864b460cea1ba33a5dca6e5585e9c78a8ee3361f20e2b79489ed2ef1c935d7deeef6de0d009b72a0751929209b351331c0225c29341f5d476b278061a0a33c1e455815bbb83eebf5f5c3fe97c4b3df32846a094501a157196b6c1db1e05cec4f2dee823ebea7da05f5ee63aee1670128471465ae83defcf26aba78f18544146fcc9305ed5899965edbcf9f677c499a52d984db346c12faf02553338e6553488c29c9f3f4537a9437b5eb7382f95f9e844d27fa0b1ffc48d2b44e383b1fdb567b7f23863e8e10b6210f8031859cea410d52f99b5a8d2f218e7c92e231904b171dc077c636db15087cfb0ca6a2cd09f6b7973627a03ebfb4772daddc8ad7c9e534d8bc58cfc6d1305374b589a2a85c8a3c471c7408712ff5cfd7a50bee627d0417a5667dba71866320857cdb84e071a37e477f1b5ac16bdd464d8bf3ae31860ad19722bea1d85d1a5c09e1ab36dcd6c4bf524ed2137745e3562147081027d7852bee1ccc9563e4ff0ce72affa7002e9a066591ddf31abc4388281d98d2d88fa1c5f22cb60523e72e3d838fc6b0163fe0082ce0d8d59098363a174818113182d40cdb6367cb4a867c5aaa480c95f4a98439a2b58291fedcbfedfc3ebb41fe6b0a12fce36518ea6082fb919cdff23e3b40aa26eac8d634e03fc3a1e0fafe402c875709b15b622f35bfdd233ea8d7989ec38dfa1e5b5688d76c615b5efba62dd7d50be97b92f16c838edecd426e18dd270ddda42121d7ad8d26ec28df29580e6dcd7f968885d1cbc5f573efda890a408b45701bdf5cb2e3c54f8481710145ac1f5bdb1b53a1e9a7efd8a3ad7dad7bd0fa017e080854913beda2ccc95631a5c1da5c5afaa84bcc3f1a7041208fac9e09ef52140f142bed882b8988ea062cc8ecd7fd78fd33aeee8e8d5cc891514e3407fbb171e84e45fa14713e995513e16763424e356032ac81047c8e2bfe05dfecc510b55866d4a8696c91afd7b6b809fcf2e0f8a21834f43149d8e2b5dc5fddacb8ff9341376281e8f7d762fdb61a8e6536529b0d4d3cd8217fdb4f0b8341587737da7f50dbe4e5b7851a25d52066bd0e3ad11aed47ee02bec11d0f125cdee1f505cc5c1223d386b2fda556331cf57d8df433927cf12a5fbff853be266c5a64b6424f7b106931d312f0fd447206d21c1945579915e7e21627c7fc423a813823ce5fa2c6f3114303d0995c5706418a088535c62eda2a60c82b727c31177252f8ea025c16a3676ea0ccec24ea57e68c7e0f1b0e06f78a8ccead63eb4c0ef5c59b1d3a805644f8089e604a5bd3aa4494ff7fca02dd5894a6f02e572edd487af04ace3e37f19074325613d6f7d2af73062607b45a3c9365337a1c5e6bae9702a65f0a1b9ce75e43f6381efd9d610ad37532b62c6ab5957ded77a5d01604f67d7ccaa495266ab7fe161268b9a6156643ab6289fa0be75ac433a0204df164c02d3d0cb1b7bf0acd92ca8ff19b710b0b511820d0500fdf58f598fc611380a0f7dffce7bbc934edc967ba0094a0281750176748a4e2c99684c1c4a40258b0da77a0bfb9a4b808d5932443389f0f346dad998cee519624aeb07ea4446064282b1448bfa2e5ac3393d30b5c3865a8995869f69bab0747cfcbbd2bfd407c82e198da326f36be9a508e12d6d73fb262b37fcd7ff70b372c966b7198a9f2364012ff8127f200c079cb70d550f9483c1bf9fba69ebc961c989a82fc38cffe853e4738f33f1fa42fe7167e4bb79110f237d7e4989d2f6f4bd21905e491e2d4b6ac5a66025c11a93ab1eddcade3c3e78c270eaf6a0a6ed43df6e35bcaea9aa716d547d2136c2388379abf645e3f7cad1cc1fdc92b882729ff92b0612302970bd9ca7e36d76b2eb4d9dfe35116bb7771e448867e57026e622e1e54422b064fdb707fef339aa16fde808f622a7269b77c292c7e85fade6dcde475c2f61d71370209bc0e46ba7c7b71e41df246d283f5574205ca6b4819c63d97193eb084fd6b0c20b956cfc4b45b51fd46b2e034ff0f003179c7539fbc4e888c0633767604ed0f07beb4fe00f5a3b56ad9f3997cb49c7a8b92a719411b20874686a8a5ab462914baa85d016df99796a868af3dfa6ad98ceaaa18af2f2fad2ebf3dee1df8c8863e84ed83d6da5e283ca9cc385e0ded20531f127ff4aa974b91634d8f367154d3e23ebb04571a5a453d1265e873d00d40be7e1eb7e74529822b4c81d742c981a988fb786084cbd1e721358c7a1ea5293aa609773b890a5c9de4d1349588def4232d41fa5d7cfbc3dd130754891c304118a895268555874613e9c89c66bceea609e7ca1a914ea327db1f85a3809098e801289d8ab71997c2ad5bd1f3fd4b3c6b80667ac2b6b23b35018206dbf708284f0e0fac58d0b6d72c0d0034b6ed37b1f9931158f2443f045f65e33084ebc6aac93d8c0e3c1c52878dd3f54b9f88a40821090cdeb3bdbb61f0be16338a2a7ba0f77e9ecd5400b6f809a49eee78346c69e7ab560fcc32f2d19e665bb91fbc00e4c00838a1385d5156d1696f694027a9e6a7ef66933202012caca81c1b3ebe64976a9d000e28a6aae5d6f061c5acf8e4bca00bc5ecc547ab1664cdb2125300130a5a92abc0d36cf911fb3123034e925ea097fde14253dd3de52bf5c8a6bf01436c92dbbf5450a9b7775a981b09eab05406dae83f8ddcf898b1bace4b8487f0b4ec5b5316a9b7e3bcd6da41caa23604b3932ff3daf31bb19e74c687773bb54503f6b3ed74aef1410dc4a9a72fa05b1e120e682a7e7f9b8c7b6836fa9d8f96d16fa17975bc3dd7784f0d621d5a69038b0947d1cb47381c82c6df030fc8033dd66b380d884b12991ef5d5283e552f723aaf791bf3af581423c57b536b91e5a158695b68f7eccfd72fd2af1016e261ec863215d1df0fe756366e56fa86c4495cd9a45e83227af93a5b431c5d33fea2b3d469aab08f57b85b3a14a47d7da8ca74dae34f963cf660057466dac3937ce00060f8db8099178944aa37474a37eaef3b9ca04bd0eb1d03c25887d530cd690625f5829830851a6a58a7b411bc87aa70f26e80514799664e35c44db243d61add5bcaba3695e45e9f1a3cbf8ebdfb87571c44b9dcddc5fd422e94cbeb02bb58abd14e140829e12f7f0c7e3cc1a1bcae8429775e531710bfa504e103b17c20c329f653c015ab514fd6cf162b96d871930de99413e148fa58c1ff262a997c6ed1bc008912c6b864031dc95b5a3ad6aa3521167a62fe771baff828cafaf178539048d2e91a62ee7a50df04062422150347774db320fb535ddd4c03a8cdfc3affd253c200e1d5678ff12eb6f5bd43da636778cd2f8551295f4cbbc902322e491c5c10fee144daeaec4cc2a2f855f5312f4c8cac1155c8d3b93a5fe6a60118a0a9912b16d583582b478e4f05c375247d4cd897c49a8cfd2540833311039d9b121e5d5779d71b206d0d862b95e0eab28005f86ddd6ec514d931a521fc035eaacfd10ec5f97af541cabf08512f6c79e7e0db5217bd14aab6d3e9458018c3e59769bcb689347d7e394b469e9c9d9da2be8fc7a54b1aab301b68c1faf7ba7bfd05b8a313c902ad3733e523fd64739d9af110e39a96f1048fd6a43d13045ec71ff3d1f64a904f3878cb18f58b3b84942331ec05d3372a328a83e8aab828574313964f6f6c5af246faf2c69a95e9ceca77c0fbf303103a2d38ef6da2929a3dbccae5823f82d9a37c989154c8a760df8e7d8589daf1fd69683cadd2c7ac13e285a7661c23913912ee272797e3a0808654fd0b9f74f2fe04cb34167aa630b8aa58efc2586bef8c7c2e354d7c8d08de7d25a80b08bae8d2326d16a15d537d8baffcbbae460ce608ded63a45bdf0caf9dc335aa8d2aac03a62a9c6c62ce7c2caa9a731baa549d1880d3facdb4bee43ae27ccd5a22f143da8e7b4deb5c2a194d450eb5ff6949a950115d4e1d60fc75115346a0aaaf1400a301dcc8a04f9d2762c093f88adac799f6bd5150ca9c7d3ac1f728b88b1b0807a7407ad9b8febd89a801c9845af62bf2fc98aea4835d52871774e72b9fc07d26d55ef163833fd2f5c951ff963f43fcdaf03995cf3f14360b05be587e7a19fb760a944166b1fbd04c0d02bda8ff5d92a23c4e683db1b2823a6b02a16a7bc7963aaeeec43d97a85752fa439544127fb71d8b4fee6a09b966bc4e7be67acca35bfe4acabf18f6e9cc938c1e0af43e11754cbe7b37738019d9a162083f5f1fcdd9299921a349f1e0ee840b19fed4c0b5273d5e71ff5f1f20dbb36c89e1edbbef78de1a6229a2cd22bcf2164a1b567f7c08c6ba78ff2e53bc348dd2ab53b9deffc9cf8726feaf9cb07b4f94d189314da8c0005f3bb031e44c402339588832779790e814c707fdbe0830d53b4d35812f27e7709bee185d6d6d67a65382dcf56d567180a4a74cb05b0f7d0202bf33b88729f2bab7003264a2d67ea93d022baea74d7ca54a0081923a82e56750f22f58bc997ea57afe1bce18405383055745f0c6bfbbc514df76107b3c5d04bfe033dace72bd5bead25e736a0052b6efe7eb1153d1afe9202e227d60e4e38f5f294894d2ef9b89998194492e427442a18506e24ddcc1952354fe0250ad949be08a63b6c0e206ecbac70415c36f1bf78d7068ce8eb804561eab2540c6c984e63d1217de1242ae70a5dd457d7a96f24ad9e8a59c060a2a95e9e04a6a4429f40d47d2770e9d3ece295d748aa30a7bbd2aec570733be7855c3a789d71d94b3c86ccdd3cca3ddcb35a969e8c2d5b17ded6ab8b81b90a4206ac2ff163c04ba9886b5ec6138db5eb6ffc19201f66a1057858e564960de679b2996bb93c8d2b440fde169d1fbb5886fe673639c514c2eb8bca75f79abbb73c4a125e5f4d7d4ccd5c9fc85cedc9fe6f2b2b75ec384fa6ecec37579a70bd29b4c9893badb36e1b33cf61b07ee7d2a5550ac9f23b5fe629297efe94eb8a8c2adce65a61ddae84544fe8f81455e2d053fdf7efde38b92b0b4d3e7ff9d81f5de7d571cb4db7e059cbe1ac2153b22b57b4d45d58fa50d152efa2d85d262238ce4816e40f93b65f53b6646297f69e3dde4ae7c57e9112054cb831eca5716863196db7667674b00be7c83f900c944ea2bc8e8e6b6b335a6e9f63e6f6635f6afc0889355aa4f0b928b90f76e6f03b5d40e9a0cace6243aff4590c0ef255860401b16da288687e890b1921b8ba63860df7aad86279c89d16cc4ad1ef4633639f203724c1958fb3b6a990f555e8df8f494fbdae25b353c14fe524541347c1d7f61c349f55773575fab73df09ebd1c635ad5f93fc8e075093ec3fd8b832e5331e329c2578d1f6f7a0a44838e578fe40db7d11645c2c73e0a438a80085988294d98a4ef4c5faa593dd5a9b0dec12d8a6dfd15cc4503bb2078739f26f9c10d0b1fc2634094cfd2ff6bec88a7513debde5fcabb85fd31df8d97bcfaf247edb89cb056fc52bc06f117a3e1022a57817b9abe1793cf279e163212f501681eb9ef08e39adb9ba80ec3cd45f5ae7afc0c256a3470e8ed3ca41c5502c510f0526eab848ec5a7115a53741cf05846989b9b5fc6d2ad74fb855a852e3fc7234bb0ed8b6937167133925dbeb4313a9895860e761300a0695e03e81c2c1e3fe3f4b8c42c946b010259ffa4c1d345350020cddc8e9697fb83c22fff5190558551584368e7a270f958bc72e2624c3e45bbef318b5134f0419e725945e445993f2f176f0a21f5dba86398529fe5159d57c0d75d64f950763b52935e778b20356615409dcb088514eeba3f811e9ce6ce2bd1ba6ac932bd79f7a518959f99d52acbc2a1d0c02c70b9ea46d662d39c315b36315f4220e5dce293275050a3e6df506d0c1d7786017572cd758ba4995963fa034ecd49cadb42bb1ee280600557ce2e17488e1dd4595b8c7d4f20f420a3a01b6228d764c5069222cc93e2091fd2053f05a50eda7840c13f45c6e2a2fbc0f9de4baefb7b40ea1fb7e9d30fb1fdb8f20eafca0c7c8c61c57dfcb8e2836e8d0ce546e8e37b9fc467e1bbeab314be171573398e0c2fb032049a99acf174a857c019609e83010dda8da078a4311efcaaff62fa908dde87cec4d41078c343eec5a80c42d0146d57e9a14f2b5611be05e3b665728c14ea9536d146926fe1e8d5acf12afca415ef5ad77bdfead7ea087183962592296d3d892c64a0a3b9fc95b50f03df7f4f50f950b43a289af09ca92a01a684e5c649b8da4a3365878273a00afd14b4fa2ddaeea5007f728899ba9f5fc9d1d7893a489e56c5fb152e5f775042f4b3bab6cea9cbf9a2b91647fe3c62d3ae4b5d065460b51d51b6e91f2f4fe90a3775e6312ffc805612fee8c314ee70c92de3feefb3cda56a59ddba83757b0e85cb0ee7ad1ac608a1e6a64656d9f586afc38fd1f6474b521724532d88cd351688db077dc9d229a78f8704b21f85324bf9c697874cac5f709c6701a421ac368edda0ec3a0b90268c449acf753d7e8cab501ae3d7e04788e899ec54a2517545b68fd928fb659349e1692bdeccca648fd13a7602868c44e77ed6fd587538a74adc6acdb1ebd1816af88ece2ca64f2603428a0aa842fe86be6b2b568fd29c23433c9e3f9f0e45bd13beb22ac06eb82ae0eb2b3b328aca4abba5e72a155e2cc82ac92c4697fdb9439511c1144fe2ba36f516fa181f7f8d58af69f87a6c936d1e561fff0509819e65a681aaea445a106f8ff3dfd987e2e24e977281cb85cc5e5eb987da2d17e73dacfd9880bd14ecad13d5705643f926303b389a61fd63139577de263a5fdef1facdac0068a9471fc17ac654e88e0a0d12c8aca1e850b64a88f2382e0cf3a4e3363827a06abc1eeb87216e3447dfbf8c04080ca2fe1a08cc2e2001eb386cf02ac0d3b328bcf1de009d048a03cd955c628971c30a137dc66879cbe938390a8f63251f55e559549dd11969b637876a20bc7c6f5fe2b753923d2f0269f2082206eb2312f40654cc95bb38add159104495018a5aa7b8f5836162de9a03b6981c662f2ee02a168d530a002616c09c4cc26c2a2726711e3e25b4e3acb6dcba25fde78ecede51f01e22a2f79409c77011a599ff57d81e70dbde5fcbdc841f9af0e49e8200cd2d3c73013e0e5608ee1951ac04a111864b545e7bc2434c2474286519feaff4da07324d1b13bb16d1daa1d485bcd5466b82c9622f92664f1153d08c6e644b3d0f5902b4d749895f7763015bf0e2849703ed920a3866a260f22fe40f46c76ca6ca10ae8994505fa613a6b1aec84ee6620c25ca4d002f56ddd21b12eed5132634a3194281283fe5fdac07d2fec091dc0f748fe25c6b08cf8d4ff893e863a43c4c92fba47d86c8dfbbabbdca0cec09f732bc0b8df2a97ee7208e64512249300aa4c44c10d4c4503bd76e7b4e2c9aa2e274166ef103d5c832a760f33b5a0eae4dab922f0fec5adbf409bff956b4ce40e6157d498d46ae053f1ad73655bfb0a3dfac6b96c09bac4d07e6bd7f3ac6337f58cccc631466985f6ad680d21a5fe9a9bde4b6980c689e6e8c7a413b6e3084997c089443ffaca9be80c96ce1d9b6de074b4aecfd2db3b679a2d5cf0523aa14414699d481eace4aa397d818ff4d3e73d82031849c7e4f1f1503b636728637f87cf7a7df5472abfcb7e5d77439e1018dba49a41e1c8e63942fe0d1a426f390e8e225fee14501a34762b8d835ca14d6a3a3d8042724ea9e6b568fe0eb84306397ffa8345935e9be8642e6ffbd96e636fd16cacae5d4b88fd0aa0bfbba8221f68eabc98c67de6f9eab2cca07b096b458bbfdc7f1da0bb845a1a6e19c6da87a958acb1aad0b74d6537e97fb0673a20178cbb963f909839e49ec593ddcfc3046aa54c22e3a54148c440d1f2ba1fa7417572c629e48e6d2e07760a87581971d1edccc03c0e465d4d6321d820b3346fb516c1813585a6a8462124f91428a90ed037f40cd6f23596dc90c03825636e55a061838964213c70104ec0c5909a0c62240e93314f9b67ce8fafa115251282a6ee7a036a861d1af11919dbfa7ceb7b2260e66be6300a536e78ebdf60a6f022574b35205341f3557e409d8ecc0c2304b372605c9284aebe1b92f13051db78210df83873b0496625507cf8e1ee5e90aa66f45be75e388d6e0a021b8af3787ee06cd710719b4d06ca5ba5f87de812a660f939584ea880d3c71bc58135e612431850180ee39b707bd98aff26d2c5e4396b43daefd82b2ec1004978637b8d389cc415d628fea6f66f28664f9409448e68a2d48a0a00", 0x2000, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x90, 0x0, 0x7fffffff, {0x5, 0x3, 0xdc, 0x5, 0x2, 0x6, {0x4, 0x638, 0xfffffffffffffff8, 0x8, 0x3ff, 0x79, 0xfffffffe, 0x7, 0x1, 0x8000, 0x4, r2, r3, 0x7, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x4, {0x5, 0x3, 0x0, 0x4000000000008, 0x0, 0x6, {0x2, 0x6, 0x8, 0x100000000000, 0x7, 0x81, 0x8, 0x6, 0x2008, 0x8000, 0xe44, r2, r3, 0x53fb, 0x5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file1\x00', 0x86) 12m14.77859052s ago: executing program 1 (id=261): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x111, 0x8}}, 0x20) pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x800, 0x200000000000027, 0x0, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x1, 0x5}, 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x800) dup3(r2, r0, 0x80000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000540)={0x4, 0x6, 0x0, 0x4, 0x15, "1c702ac6c98ad9decfa06e24b787a55737a502"}) read(r0, &(0x7f00000005c0)=""/228, 0xe4) 12m13.778127295s ago: executing program 1 (id=268): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x80000, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {0x2, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x6}, @empty, @private=0xa010101, 0xff000000, 0x3}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079ca4e62ef067", 0x14}], 0x2) 12m8.737926387s ago: executing program 1 (id=286): syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") gettid() syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) creat(&(0x7f0000000040)='./file0/file1\x00', 0x8) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file1\x00', 0x2) 12m7.163419326s ago: executing program 1 (id=299): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) r2 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000cf8bed20d90f250040290000000109021200"], 0x0) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) syz_usb_control_io$uac3(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x3, 0xf06, 0x4, 0x94, 0xfffffffd, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfffffff2, @empty}}, 0xffffec47, 0x9, 0xffff1896, 0x100, 0x25, 0x7fff}, 0x9c) 12m5.044039868s ago: executing program 1 (id=309): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x329180) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x15000002) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$evdev(0x0, 0xffffffffffffff7c, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) socket(0x10, 0x803, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 12m4.596534379s ago: executing program 33 (id=309): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x329180) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0x15000002) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b030000000000010902220001010080320904000001030000000921110100012217000705810340"], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$evdev(0x0, 0xffffffffffffff7c, 0x0) syz_usb_ep_write(r1, 0x81, 0x0, 0x0) socket(0x10, 0x803, 0x0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 11m59.156023731s ago: executing program 3 (id=336): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0xdc, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000440)='asymmetric\x00', 0x0, 0x0, 0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a90000000060a0b0400000000000000000200000064000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800b0001007470726f787900001400028008000140000000020800024000000003180001800d00010073796e70726f787900000000040002900900010073797a30000000000900020073797a320001000014000000"], 0xb8}, 0x1, 0x0, 0x0, 0x991}, 0x40880) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1f, 0x0, 0x0, &(0x7f0000000600)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) syz_emit_ethernet(0x0, 0x0, 0x0) 11m58.067170238s ago: executing program 3 (id=339): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x34) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000200)={@broadcast, @empty, @void, {@can={0xc, {{0x0, 0x1, 0x0, 0x1}, 0x8, 0x0, 0x0, 0x0, "84384be0a4202d24"}}}}, 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup_subtree(r2, &(0x7f00000006c0), 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) write$cgroup_subtree(r3, &(0x7f0000000040), 0x0) 11m53.441934531s ago: executing program 3 (id=349): socket$inet6(0xa, 0x3, 0xff) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0xd54895b78f604514) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x80, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000180)={0x0, 0x1, 0x0, 0xfffffffe, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x800, 0x2100, 0x2d8, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x4, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x80, 0x0, 0x371, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x587e, 0x8200, 0x2, 0x367, 0x0, r5}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xe0b, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x6, 0x0, &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 11m50.226131409s ago: executing program 3 (id=359): syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") gettid() syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) creat(&(0x7f0000000040)='./file0/file1\x00', 0x8) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file1\x00', 0x2) 11m48.354854845s ago: executing program 3 (id=364): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$USERFAULTFD_IOC_NEW(r3, 0xaa00) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000240)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000001080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x0, 0x20, 0x3, 0x0, 0x106c, 0x80000001, 0x8000000000000, 0x80000004000080, 0x0, 0x8, 0x0, 0x4, 0x9, 0x8001], 0xfec00000, 0x3c4210}) ioctl$KVM_RUN(r5, 0xae80, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 11m45.415252137s ago: executing program 3 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 11m42.952617387s ago: executing program 34 (id=375): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001000)=@delchain={0x34, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4040004) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r5) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, r6, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 11m33.343250761s ago: executing program 6 (id=412): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 11m30.745963294s ago: executing program 6 (id=426): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r1, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x6}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x7, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000280)={0x1, 0x0, 0x2c, 0x9}) fcntl$lock(r2, 0x7, &(0x7f0000000140)={0x0, 0x2, 0x1, 0xc}) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x3, 0x20132, 0xffffffffffffffff, 0xb299b000) 11m29.27512352s ago: executing program 6 (id=423): openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000002c0)={0x79, 0x0, 0xc53}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001140)=ANY=[], 0x48}, 0x20040010) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0x70003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x2, 0xffffffffefffff15, 0x3, 0x4, 0x1, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m28.913899929s ago: executing program 6 (id=425): syz_mount_image$f2fs(&(0x7f0000002100), &(0x7f00000000c0)='./bus\x00', 0x2, &(0x7f0000002000)=ANY=[@ANYBLOB='nodiscard,alloc_mode=default,acl,alloc_mode=reuse,mode=fragment:block,disable_roll_forward,background_gc=on,nouser_xattr,checkpoint=disable,fsync_mode=strict,nobarrier,jqfmt=vfsold,mode=fragment:block,\x00'], 0x1, 0x5505, &(0x7f0000002480)="$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") gettid() syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x210a055, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./bus\x00', 0x3000408, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2) mount$overlay(0x0, &(0x7f0000000400)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) creat(&(0x7f0000000040)='./file0/file1\x00', 0x8) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0x42, 0x80) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file0/file1\x00', 0x2) 11m26.685975984s ago: executing program 6 (id=433): getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000002480), &(0x7f0000002500)=0x8) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xfff3, 0xfff2}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffd, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r0) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0500000003f01f00660000007f00000001000000", @ANYRES32, @ANYRES32], 0x48) ioctl$SIOCSIFHWADDR(r0, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 11m24.78669227s ago: executing program 6 (id=442): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000480)=ANY=[@ANYBLOB="696f636861727365743d63703733372c6e6f696e746567726974792c696f636861727365743d69736f383835392d322c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f71756f74612c696f636861727365743d63703836392c6572726f72733d636f6e74696e75652c67727071756f74612c00b7b5c85fd673808550e32e51a59133ec4f5f689edcb4070f7bcbd738e05986111cdb11c1ab6afe0f4b610d8aa9ffe540c2f97fbf970bda40883f0c7f627763a62d54a62be0c00d48"], 0x24, 0x628f, &(0x7f00000065c0)="$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") 11m24.39841432s ago: executing program 35 (id=442): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0cc5640, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000480)=ANY=[@ANYBLOB="696f636861727365743d63703733372c6e6f696e746567726974792c696f636861727365743d69736f383835392d322c6572726f72733d636f6e74696e75652c646973636172642c6572726f72733d72656d6f756e742d726f2c696e746567726974792c6e6f71756f74612c696f636861727365743d63703836392c6572726f72733d636f6e74696e75652c67727071756f74612c00b7b5c85fd673808550e32e51a59133ec4f5f689edcb4070f7bcbd738e05986111cdb11c1ab6afe0f4b610d8aa9ffe540c2f97fbf970bda40883f0c7f627763a62d54a62be0c00d48"], 0x24, 0x628f, &(0x7f00000065c0)="$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") 8m17.959043029s ago: executing program 5 (id=884): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='3', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/syz_tun/brport/multicast_fast_leave\x00', 0x1, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x48, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e65"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000090601020000000000000000030000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0c00148008000140ac1414bb0c0002800800014064"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000070601"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) write(r4, &(0x7f00000005c0)='1', 0x1) syz_emit_ethernet(0x36, &(0x7f0000000800)={@multicast, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x1, 0x2, 0x0, @rand_addr=0x20202c8, @multicast1}, "2200334f0000000106000001e1010203c0a80101"}}}}, 0x0) 8m15.917227699s ago: executing program 5 (id=890): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x800, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000180), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000200)=@gcm_128={{0x303}, "1234567812345678", "12345678123456781234567812345678", "12345678", "1234567812345678"}, 0x28) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1000, 0x40, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x4000, 0x40, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000400), 0x4000, 0x0, 0x0, 0x0) 8m15.030544461s ago: executing program 5 (id=892): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$usbfs(0x0, 0x76, 0x101b01) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(0xffffffffffffffff, 0x0, 0x0, 0x20000090, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x1, 0x12) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80045510, 0x0) 8m13.155384047s ago: executing program 5 (id=896): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x20003) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x4400, &(0x7f00000003c0)=ANY=[], 0x82, 0x22e, &(0x7f0000000940)="$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") r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x183902, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff) sendfile(r4, r3, 0x0, 0xfffa83) 8m11.595650464s ago: executing program 5 (id=898): r0 = openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x450001, 0x4c) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setrlimit(0x0, &(0x7f0000000280)={0xc800, 0xfffffffe}) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000300)='\x00', &(0x7f0000000340)='\x00', 0x0) listen(r0, 0xfffffff7) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) mount$tmpfs(0x0, 0x0, &(0x7f0000000100), 0x80, 0x0) r2 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r2, 0xfffffffffffffffe, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x4}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r3, &(0x7f0000000640)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}}], 0x1, 0x20008050) fsetxattr$security_ima(r3, &(0x7f0000000100), &(0x7f0000000140)=@sha1={0x1, "77d2f65b8b80751448be9757f6a4adfd0c3e66f5"}, 0x15, 0x3) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x79, &(0x7f0000000240)={0x0, 0x964, 0x89f8}, 0x8) 8m3.651170038s ago: executing program 5 (id=912): io_uring_setup(0x4a88, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8001002, 0x3d6}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x6ea001, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0x4, 0x2, 0xe9b, 0x4, 0xd, 0xd, 0x44233, 0xe9e, 0x5, 0x5a3b8cc9, 0x8001, 0x1005, 0xffffffffffffffa6, 0xfffffffffffffffe, 0x0, 0xfffffdfffffffffd], 0x70000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m3.220116919s ago: executing program 36 (id=912): io_uring_setup(0x4a88, &(0x7f0000000300)={0x0, 0x4178, 0x400, 0x8001002, 0x3d6}) openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x6ea001, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000680)={[0x4, 0x2, 0xe9b, 0x4, 0xd, 0xd, 0x44233, 0xe9e, 0x5, 0x5a3b8cc9, 0x8001, 0x1005, 0xffffffffffffffa6, 0xfffffffffffffffe, 0x0, 0xfffffdfffffffffd], 0x70000, 0x84340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x52, 0x6, 0x40, '\x00', 0x10000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m49.89518262s ago: executing program 9 (id=2473): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x7a, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, &(0x7f0000000540)) ioctl$KVM_RUN(r2, 0xae80, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) 3m49.868856851s ago: executing program 9 (id=2474): ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000001680)) eventfd2(0x80, 0x800) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x10, 0x2e, 0x503, 0x40000}, 0x10}], 0x1}, 0x0) ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, 0x0) socket$inet_udp(0x2, 0x2, 0x0) setpriority(0x2, 0x0, 0xd2f4) 3m49.822247222s ago: executing program 9 (id=2475): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="c40000001900674c2cbd70000000000000000000000000000000000000000000ac1eff0100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000020000000000000000000000000000000000000000000008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000000000000000000000000000000400000000000000000002000000000a00100001"], 0xc4}}, 0x4c050) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newpolicy={0x17c, 0x13, 0x101, 0x0, 0x0, {{@in=@rand_addr=0x64010102, @in6=@ipv4={'\x00', '\xff\xff', @loopback}, 0x100, 0xd, 0x400, 0x9, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x3}, {0x0, 0x1, 0x0, 0x100}, 0xfffffffe}, [@tmpl={0xc4, 0x5, [{{@in=@remote, 0x4d4, 0x2b}, 0xa, @in6=@empty, 0x0, 0x1, 0x1, 0x1, 0x5, 0x2, 0x80000001}, {{@in6=@mcast1, 0x4d5, 0x32}, 0xa, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x2, 0x48, 0x4, 0xffff, 0x5}, {{@in=@dev={0xac, 0x14, 0x14, 0x18}, 0x4d4, 0x2b}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x1e}, 0x0, 0x0, 0x1, 0x3, 0x2, 0x2, 0x6}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x20048000}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="034886dd010000000000140000006000000003082f00fe88a43de1a400000000000000007d01ff020000000000000000000000000001"], 0xfdef) 3m49.699528515s ago: executing program 9 (id=2476): syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000f00)='./file1\x00', 0x800, &(0x7f0000000180), 0x1, 0x27e, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r2 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000001c0)=0x10) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 3m49.610934597s ago: executing program 9 (id=2477): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0xa2) write$FUSE_INIT(r1, &(0x7f0000000140)={0x5e}, 0xffd3) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f00000002c0)=ANY=[], 0x1001) 3m49.229403707s ago: executing program 9 (id=2482): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) 3m48.874228205s ago: executing program 37 (id=2482): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000340)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000020c0), 0xffffffffffffffff) 21.554114114s ago: executing program 7 (id=3194): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="08000000040000000400000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000070000008500000021000000b7000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x38, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 17.946665823s ago: executing program 7 (id=3199): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000001c0)={0x7992, 0x4, 0xf0}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='cdg', 0x3) shutdown(r3, 0x1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close(0x3) 17.485364343s ago: executing program 7 (id=3200): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) 13.712386696s ago: executing program 7 (id=3204): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000001c0)={0x7992, 0x4, 0xf0}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r3, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) shutdown(r3, 0x1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close(0x3) 13.397116383s ago: executing program 8 (id=3207): syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r2, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000f00)=""/4096, &(0x7f0000001f00)=0x1000) 12.673168911s ago: executing program 8 (id=3208): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000001c0)={0x7992, 0x4, 0xf0}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000300)='cdg', 0x3) shutdown(r3, 0x1) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close(0x3) 12.081470115s ago: executing program 0 (id=3209): socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2003}, 0xfffffffffffffd14) fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x1}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x1, 0x73}, 0x9c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r4, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 11.802422752s ago: executing program 8 (id=3211): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000005c0)={{0x80000000, 0x0, 0x7, [0x4, 0x4936bda7]}, {0x80000000, 0x0, 0x4, [0xc1, 0x85]}, 0x10000000, [0xff00, 0x1000]}) 10.63966132s ago: executing program 8 (id=3214): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000ef2000/0x4000)=nil, 0x4000, 0x0, 0x3fa, 0x1000) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x480}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) syz_open_dev$sndctrl(0x0, 0x0, 0x200) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = getpid() timer_gettime(0x0, &(0x7f0000000000)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) timer_create(0x7, &(0x7f0000000100)={0x0, 0x1, 0x2, @tid=r2}, &(0x7f0000000140)) close(0x3) write(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 10.611442951s ago: executing program 0 (id=3215): close(0x3) 10.307111538s ago: executing program 0 (id=3216): socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x11e) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2003}, 0xfffffffffffffd14) fspick(0xffffffffffffffff, &(0x7f00000000c0)='.\x00', 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, &(0x7f0000000280)={0xffffffffffffffff, r0, 0x1}) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in6={{0xa, 0x2010, 0x0, @empty}}, 0x0, 0x800, 0xfffffffd, 0x0, 0x8a, 0x200}, 0x9c) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @remote}}, 0x100, 0x0, 0x0, 0x0, 0x54, 0x1, 0x73}, 0x9c) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r4, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) 9.499696228s ago: executing program 7 (id=3218): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) getsockopt$netlink(0xffffffffffffffff, 0x10e, 0x4, &(0x7f0000000f00)=""/4096, &(0x7f0000001f00)=0x1000) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) 9.469520369s ago: executing program 4 (id=3219): setns(0xc9, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 8.818413265s ago: executing program 7 (id=3221): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0xfffffffc, @loopback, 0xe}, {0xa, 0xce1e, 0x800000d, @mcast1}, 0xffffffffffffffff, 0x1005}}, 0x48) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x18, &(0x7f0000000100)=0xc, 0x4) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xe, 0xc, 0x0, &(0x7f0000000b80)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x1e, &(0x7f00000000c0)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x11962000) userfaultfd(0x80801) r3 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r3, 0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r3, 0x40085400, 0x0) unshare(0xe060400) io_uring_setup(0x1b56, &(0x7f0000000100)={0x0, 0x836a, 0x40, 0x3, 0x402c1}) fspick(0xffffffffffffffff, 0x0, 0x0) 8.810989075s ago: executing program 0 (id=3222): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) 7.891848378s ago: executing program 0 (id=3223): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) r4 = socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, 0x0, 0x0) sendmmsg$inet(r4, 0x0, 0x0, 0x0) 7.890503138s ago: executing program 4 (id=3224): setns(0xc9, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet(r1, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) 7.545037546s ago: executing program 4 (id=3225): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) 6.720096696s ago: executing program 2 (id=3226): setns(0xc9, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 6.57467885s ago: executing program 4 (id=3227): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r5 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r5, 0x40186f40, &(0x7f0000000440)=0x20000) setsockopt$bt_hci_HCI_FILTER(r0, 0x0, 0x2, 0x0, 0x0) ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f00000005c0)={{0x80000000, 0x0, 0x7, [0x4, 0x4936bda7]}, {0x80000000, 0x0, 0x4, [0xc1, 0x85]}, 0x10000000, [0xff00, 0x1000]}) 5.648912012s ago: executing program 2 (id=3228): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) write(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(r4, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f000006b000)={{0x0, 0x989680}}, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='3', 0x1}, {&(0x7f0000000340)="2009f5", 0x3}], 0x2) 5.481036447s ago: executing program 2 (id=3229): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000180)='./file1\x00', 0x1218088, &(0x7f0000000b00)=ANY=[@ANYBLOB="7379735f696d6d757461626c652c757466383d312c696f636861727365743d61736369692c73686f72746e616d653d77696e39352c73686f77657865632c6e66732c636865636b3d7374726963742c756e695f786c6174653d302c757466383d312c73686f72746e616d653d6c6f7765722c73686f72746e616d653d6c6f7765722c726f6469722c726f6469722c64656275672c757466383d302c726f6469722c71756965742c6572726f72733d72656d6f756e742d726f2c009c8a8fc4f74784ad79ec08fb556262ebc972ef94821f3565ef5f75f11e30ef1f72a065c510b17cae356940538b7b2c5d72f4627c25306b2479725add28f511a68f5f6f47f9facdd0cc574286d00ab52d6b9374b6a58eac694336ebe971f41860d01084c1a0fa6b51d80fa9f9d2c1a2e7a5284f93296217ef8f28e0a36e573296a0bfb38b94191f4b82873563f3759b5e193ecfab6ed7892542364757e47d656ad6a0fbb6e8bf138bddae620a3602991821d4844f628e6bdd8b62cca73744332f0185a54b52a0352a82c794995bbb97c82fcde79d14fb20e5127150de", @ANYRESDEC], 0x4a, 0x2df, &(0x7f0000000f80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000001c0)=0x5, &(0x7f0000000200)=0x2) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000002060500000000000000000000000000140007800800064020000000080013400000000005000100060000000900020073797a32000000000500040000000000050005000a00000011000300686173683a6970"], 0x60}}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 3.734175039s ago: executing program 2 (id=3230): r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10) r1 = syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000040)={"dfff00", 0x0, 0x5, 0x6, 0xfffffff9, 0xe, "00000000020000000000002100", "00000001", "0052008f", "0000f807", ["fdd5c01000", "0000000000000400", "00f638000000007c0300", "ffe9ff00"]}) ioctl$CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0xfffffffffffffbf7, 0x1, 0x2, 0x0, 0x4, 0x7ffe, "7f2c00", 0x1, 0x56, 0x1, 0xfa, 0x9, 0x1}) ioctl$CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f0000000140)={"4497acf4", 0xb, 0x4, 0x0, 0x3, 0x1000006, "5500578ea5f4ffffffeb00001000", "1575b859", '\x00', '\'q6O', ["aabe8459c62224475793e8a7", "7f9ce2d2c4f439ff80e1d1c8", "fa0700f22b42a3023be516d1"]}) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000001c0)={0x7992, 0x4, 0xf0}, 0xc) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_MAX_VCPU_ID(r3, 0x4068aea3, &(0x7f0000000240)={0x80, 0x0, 0x3ff}) r4 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) bind$tipc(r4, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, 0x0, 0x0) close(0x3) 2.979142797s ago: executing program 8 (id=3231): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat2(0xffffffffffffff9c, 0x0, &(0x7f00000000c0)={0x280, 0x100, 0x14}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x17, 0x81, 0x5}, {@multicast1, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x20000) 2.793862342s ago: executing program 0 (id=3232): setns(0xc9, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setreuid(0x0, 0xee00) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 2.272405965s ago: executing program 2 (id=3233): setns(0xc9, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40e02, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e24, 0x8}, 0x1c) listen(0xffffffffffffffff, 0x0) sendto$inet(r3, 0x0, 0x0, 0x2000073d, &(0x7f0000e68000)={0x2, 0x4e24, @empty}, 0x10) r4 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r4, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94acc000000000000000000000051d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) 1.852954745s ago: executing program 8 (id=3234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) 1.63576145s ago: executing program 4 (id=3235): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_get$pid(0x2, r0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000)=0x2eb4, 0x2000007ff) mount(0x0, &(0x7f0000000000)='./tracefs\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./tracefs/instances/foo\x00', 0x1ff) socket(0x1d, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) 920.849758ms ago: executing program 2 (id=3236): mount(0x0, &(0x7f0000000100)='sys_mnt\x00', 0x0, 0x0, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r1, 0x0) ioctl$COMEDI_SETRSUBD(0xffffffffffffffff, 0x6410) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$vsock_stream(r2, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r4 = accept4(r1, 0x0, 0x0, 0x0) sendto(r4, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000280)={0x339, @tick=0x3ff, 0x6, {0x8, 0x80}, 0x6, 0x1}) sendmsg$802154_raw(r0, 0x0, 0x20004081) openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) 0s ago: executing program 4 (id=3237): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) kernel console output (not intermixed with test programs): 848 comm="syz.0.821" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7f9e0d9 code=0x7ffc0000 [ 318.850117][ T26] audit: type=1326 audit(3935346529.099:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.0.821" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7f9e0d9 code=0x7ffc0000 [ 318.884474][ T26] audit: type=1326 audit(3935346529.099:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.0.821" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f5db7f9e0d9 code=0x7ffc0000 [ 319.668620][ T26] audit: type=1326 audit(3935346529.099:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.0.821" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7f9e0d9 code=0x7ffc0000 [ 319.716576][ T26] audit: type=1326 audit(3935346529.099:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7848 comm="syz.0.821" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5db7f9e0d9 code=0x7ffc0000 [ 320.184350][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 320.191654][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.740877][ C0] bridge0: port 3(syz_tun) entered learning state [ 325.107858][ T7825] tipc: Resetting bearer [ 325.114992][ T7804] tipc: Disabling bearer [ 325.123279][ T27] tipc: Node number set to 1813456026 [ 325.350732][ T7898] bridge0: port 3(syz_tun) entered blocking state [ 325.357334][ T7898] bridge0: port 3(syz_tun) entered disabled state [ 325.381721][ T7898] device syz_tun entered promiscuous mode [ 325.387903][ T7898] bridge0: port 3(syz_tun) entered blocking state [ 325.394483][ T7898] bridge0: port 3(syz_tun) entered forwarding state [ 326.151854][ T7902] overlayfs: failed to clone upperpath [ 327.215510][ T7916] logitech-hidpp-device 0005:046D:B012.0005: received hid++ report of bad size (4096) [ 327.272851][ T7917] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 327.335470][ T4322] logitech-hidpp-device 0005:046D:B012.0005: Device not connected [ 327.395349][ T7898] Can't find ip_set type hash:net,ne [ 327.756817][ T7926] loop7: detected capacity change from 0 to 64 [ 327.779887][ T1182] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 327.798419][ T7926] minix filesystem being mounted at /66/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 328.741858][ T1182] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.762078][ T1182] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.790766][ T1182] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.815567][ T1182] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.839460][ T1182] usb 6-1: Product: syz [ 328.854177][ T1182] usb 6-1: Manufacturer: syz [ 328.868496][ T1182] usb 6-1: SerialNumber: syz [ 330.290849][ T1182] usb 6-1: 0:2 : does not exist [ 330.312854][ T1182] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 330.398575][ T1182] usb 6-1: USB disconnect, device number 12 [ 331.460673][ T7893] udevd[7893]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.571432][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.850'. [ 335.221578][ T7989] tipc: Enabling of bearer rejected, failed to enable media [ 335.906019][ T8001] Cannot find add_set index 0 as target [ 335.979930][ T4323] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 336.180520][ T4323] usb 9-1: Using ep0 maxpacket: 32 [ 336.229638][ T4323] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 336.299866][ T4323] usb 9-1: config 0 has no interfaces? [ 336.319990][ T4323] usb 9-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 336.379875][ T4323] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 336.419049][ T4323] usb 9-1: config 0 descriptor?? [ 338.102425][ C0] bridge0: port 3(syz_tun) entered forwarding state [ 338.109142][ C0] bridge0: topology change detected, propagating [ 338.311851][ T8028] loop5: detected capacity change from 0 to 128 [ 339.079651][ T8028] vfat filesystem being mounted at /105/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 339.165160][ T4322] usb 9-1: USB disconnect, device number 4 [ 340.341537][ T8044] loop8: detected capacity change from 0 to 64 [ 341.911118][ T8044] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 342.348943][ T8044] bfs filesystem being mounted at /61/bus supports timestamps until 2106-02-07 (0xffffffff) [ 344.336735][ T33] nvme nvme0: long keepalive RTT (1270 ms) [ 347.774770][ T8094] device syzkaller0 entered promiscuous mode [ 349.113617][ T8109] program syz.7.875 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 349.124795][ T8109] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 352.654566][ T8137] bridge0: port 3(syz_tun) entered blocking state [ 352.680723][ T8137] bridge0: port 3(syz_tun) entered disabled state [ 352.697450][ T8137] device syz_tun entered promiscuous mode [ 355.561711][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.568440][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.574665][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.580877][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.587045][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.593266][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.599430][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.605626][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.611838][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.618004][ T8168] tc action pedit 'at' offset 49 out of bounds [ 355.624226][ T8168] 0: reclassify loop, rule prio 0, protocol 800 [ 358.452028][ T8202] loop5: detected capacity change from 0 to 128 [ 358.498698][ T8202] vfat filesystem being mounted at /115/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 358.606155][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 358.606218][ T26] audit: type=1800 audit(3935346570.099:48): pid=8202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.896" name="file1" dev="loop5" ino=1048609 res=0 errno=0 [ 360.684908][ T5159] device syz_tun left promiscuous mode [ 360.701071][ T5159] bridge0: port 3(syz_tun) entered disabled state [ 361.544601][ T8212] 9pnet_fd: Insufficient options for proto=fd [ 361.755259][ T5650] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.356411][ T5650] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.287712][ T5650] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.548056][ T5650] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.738404][ T5650] tipc: Left network mode [ 372.560889][ T8283] mmap: syz.2.922 (8283) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 372.725745][ T4291] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 372.779978][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 372.794808][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 372.803551][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 372.811227][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 372.818564][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 373.096676][ T8288] netlink: 28 bytes leftover after parsing attributes in process `syz.8.916'. [ 373.363803][ T8288] team0: Port device team_slave_0 removed [ 375.078542][ T4279] Bluetooth: hci4: command 0x0409 tx timeout [ 377.407867][ T4279] Bluetooth: hci4: command 0x041b tx timeout [ 377.535183][ T5650] device hsr_slave_0 left promiscuous mode [ 377.550839][ T5650] device hsr_slave_1 left promiscuous mode [ 377.568944][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.586803][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.607867][ T5650] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.642150][ T5650] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.660655][ T5650] device bridge_slave_1 left promiscuous mode [ 377.666915][ T5650] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.691361][ T5650] device bridge_slave_0 left promiscuous mode [ 377.697596][ T5650] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.727857][ T5650] device veth1_macvtap left promiscuous mode [ 377.734037][ T5650] device veth0_macvtap left promiscuous mode [ 377.743753][ T5650] device veth1_vlan left promiscuous mode [ 377.751503][ T5650] device veth0_vlan left promiscuous mode [ 378.088185][ T8328] CIFS: Attempting to mount \\127.0.0.1\share [ 378.807500][ T8328] CIFS: VFS: Error connecting to socket. Aborting operation. [ 378.835195][ T8328] CIFS: VFS: cifs_mount failed w/return code = -4 [ 379.460271][ T4279] Bluetooth: hci4: command 0x040f tx timeout [ 380.731964][ T8338] sctp_transport_update_pmtu: 138 callbacks suppressed [ 380.731977][ T8338] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 380.761971][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 380.772630][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 380.782668][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 380.792683][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 380.802704][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 380.812762][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 380.822849][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 380.832958][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 380.843041][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 382.452788][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 382.459196][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.725330][ T4279] Bluetooth: hci4: command 0x0419 tx timeout [ 383.045125][ T5650] team0 (unregistering): Port device team_slave_1 removed [ 383.089400][ T5650] team0 (unregistering): Port device team_slave_0 removed [ 383.130252][ T5650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 383.174630][ T5650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 383.470394][ T5650] bond0 (unregistering): Released all slaves [ 383.576250][ T8284] chnl_net:caif_netlink_parms(): no params data found [ 383.776125][ T8284] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.793872][ T8284] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.802845][ T8284] device bridge_slave_0 entered promiscuous mode [ 383.811945][ T8284] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.819055][ T8284] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.827593][ T8284] device bridge_slave_1 entered promiscuous mode [ 386.064682][ T8284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.188169][ T8284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.199154][ T26] audit: type=1800 audit(3935346597.749:49): pid=8371 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.942" name="zone_nr_conv" dev="configfs" ino=48487 res=0 errno=0 [ 389.047993][ T8284] team0: Port device team_slave_0 added [ 389.124330][ T8284] team0: Port device team_slave_1 added [ 389.496111][ T4279] Bluetooth: hci5: command 0xfc11 tx timeout [ 389.502734][ T4287] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 389.571376][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.609178][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.283111][ T8284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.317669][ T8284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.328758][ T8284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.281909][ T8284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.126053][ T8284] device hsr_slave_0 entered promiscuous mode [ 392.354993][ T8284] device hsr_slave_1 entered promiscuous mode [ 392.423991][ T8412] netlink: 28 bytes leftover after parsing attributes in process `syz.7.953'. [ 392.656196][ T8412] team0: Port device team_slave_0 removed [ 393.611116][ T8420] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 394.351376][ T26] audit: type=1800 audit(3935346605.899:50): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.952" name="addr_trtype" dev="configfs" ino=47846 res=0 errno=0 [ 394.375450][ T8436] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 394.391374][ T26] audit: type=1800 audit(3935346605.919:51): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.952" name="addr_adrfam" dev="configfs" ino=47847 res=0 errno=0 [ 394.542716][ T8438] overlayfs: unrecognized mount option "posixacl" or missing value [ 394.662188][ T26] audit: type=1800 audit(3935346606.109:52): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.952" name="addr_traddr" dev="configfs" ino=48703 res=0 errno=0 [ 394.905585][ T26] audit: type=1800 audit(3935346606.289:53): pid=8436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.952" name="addr_trsvcid" dev="configfs" ino=48705 res=0 errno=0 [ 394.941336][ T8284] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 394.975257][ T8284] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 395.050014][ T8284] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 395.294350][ T8284] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 397.197347][ T8457] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 397.278026][ T8463] tmpfs: Unknown parameter 'usrquota' [ 397.968474][ T8284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.037099][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 398.078296][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 398.144114][ T8284] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.205800][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 398.962276][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 399.030856][ T5298] bridge0: port 1(bridge_slave_0) entered blocking state [ 399.038020][ T5298] bridge0: port 1(bridge_slave_0) entered forwarding state [ 399.038549][ T8474] loop7: detected capacity change from 0 to 256 [ 399.046590][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 399.112492][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 399.130253][ T8474] vfat filesystem being mounted at /89/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 399.165044][ T5298] bridge0: port 2(bridge_slave_1) entered blocking state [ 399.172207][ T5298] bridge0: port 2(bridge_slave_1) entered forwarding state [ 399.378462][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 399.435207][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 399.547480][ T5298] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 400.049906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 400.159868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 400.168548][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 400.255616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 402.010732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 402.091438][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 402.134616][ T8284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.180625][ T8284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 402.331551][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 402.350308][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 402.358795][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 403.287226][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 403.311641][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 403.347632][ T8284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.172565][ T8532] loop8: detected capacity change from 0 to 8 [ 407.600114][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 408.313487][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 408.349668][ T8284] device veth0_vlan entered promiscuous mode [ 408.375707][ T8284] device veth1_vlan entered promiscuous mode [ 409.299984][ T4279] Bluetooth: hci2: command 0x0406 tx timeout [ 409.831806][ T8549] loop7: detected capacity change from 0 to 256 [ 409.870460][ T8549] vfat filesystem being mounted at /93/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 409.955749][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 410.563130][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 410.783145][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 410.812824][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 410.821461][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 410.841375][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 410.851644][ T4910] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 410.869342][ T8284] device veth0_macvtap entered promiscuous mode [ 410.887965][ T8284] device veth1_macvtap entered promiscuous mode [ 410.982716][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 411.012893][ T5650] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 412.348835][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.294440][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.369871][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.407785][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.417724][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.435799][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.445777][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 413.461474][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.483239][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 413.495814][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.509505][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.519886][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.530717][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.541564][ T8284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 413.561897][ T8284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 413.611369][ T8284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 413.646245][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 413.670814][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 413.700704][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 413.718011][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 413.729706][ T8284] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.753377][ T8284] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.775907][ T8284] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.787858][ T8284] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.877456][ T5286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.898530][ T5286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.558076][ T8598] bridge0: port 4(vlan2) entered blocking state [ 416.564772][ T8598] bridge0: port 4(vlan2) entered disabled state [ 416.576521][ T8598] device vlan2 entered promiscuous mode [ 416.582269][ T8598] device dummy0 entered promiscuous mode [ 416.639982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 416.826102][ T5286] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.976722][ T8610] usb usb8: usbfs: process 8610 (syz.7.997) did not claim interface 0 before use [ 417.651425][ T5286] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 417.662651][ T5286] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 421.840760][ T8654] overlayfs: unrecognized mount option "posixacl" or missing value [ 426.976998][ T8683] ceph: No mds server is up or the cluster is laggy [ 427.145948][ T4317] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 427.401076][ T4317] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 427.445974][ T4317] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 427.480188][ T4317] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 427.746588][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.279085][ T8686] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 429.028214][ T8686] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 430.084806][ T8590] usb 9-1: USB disconnect, device number 5 [ 430.769988][ T8739] loop9: detected capacity change from 0 to 8 [ 433.235428][ T8762] loop9: detected capacity change from 0 to 512 [ 433.278286][ T8762] EXT4-fs: Ignoring removed i_version option [ 433.285516][ T8762] EXT4-fs: Ignoring removed nobh option [ 433.292617][ T8762] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 433.306081][ T8762] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 433.354560][ T8763] capability: warning: `syz.2.1027' uses 32-bit capabilities (legacy support in use) [ 433.571620][ T8762] EXT4-fs (loop9): 1 truncate cleaned up [ 433.599107][ T8762] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none. [ 434.431112][ T8284] EXT4-fs (loop9): unmounting filesystem. [ 441.002083][ T8851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 442.648990][ T8865] xt_CT: You must specify a L4 protocol and not use inversions on it [ 443.069603][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.079495][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.984596][ T8869] Device name cannot be null; rc = [-22] [ 443.997420][ T26] audit: type=1800 audit(3935346654.540:54): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1048" name="addr_trtype" dev="configfs" ino=49689 res=0 errno=0 [ 444.022908][ T8873] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store [ 444.026697][ T26] audit: type=1800 audit(3935346654.560:55): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1048" name="addr_adrfam" dev="configfs" ino=50959 res=0 errno=0 [ 444.501710][ T8873] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store [ 444.549972][ T26] audit: type=1800 audit(3935346655.040:56): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1048" name="addr_traddr" dev="configfs" ino=49693 res=0 errno=0 [ 444.674839][ T26] audit: type=1800 audit(3935346655.050:57): pid=8873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1048" name="addr_trsvcid" dev="configfs" ino=49694 res=0 errno=0 [ 445.227817][ T8891] xt_CT: You must specify a L4 protocol and not use inversions on it [ 445.330570][ T4322] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 445.406117][ T8888] loop5: detected capacity change from 0 to 7 [ 446.150421][ T8888] Dev loop5: unable to read RDB block 7 [ 446.167132][ T8888] loop5: unable to read partition table [ 446.176506][ T8888] loop5: partition table beyond EOD, truncated [ 446.182847][ T8888] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.224856][ T8286] Dev loop5: unable to read RDB block 7 [ 446.238661][ T8286] loop5: unable to read partition table [ 446.305137][ T8286] loop5: partition table beyond EOD, truncated [ 446.312211][ T8885] Dev loop5: unable to read RDB block 7 [ 446.317777][ T8885] loop5: unable to read partition table [ 446.323631][ T8885] loop5: partition table beyond EOD, truncated [ 446.329892][ T8885] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 446.352616][ T4322] usb 8-1: config 0 descriptor has 1 excess byte, ignoring [ 446.409902][ T4322] usb 8-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 446.490689][ T4322] usb 8-1: config 0 interface 0 has no altsetting 0 [ 446.531462][ T4322] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 446.581762][ T4322] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 446.599315][ T4322] usb 8-1: Product: syz [ 446.616930][ T8902] loop8: detected capacity change from 0 to 512 [ 446.624322][ T4322] usb 8-1: Manufacturer: syz [ 446.628948][ T4322] usb 8-1: SerialNumber: syz [ 446.664490][ T8902] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 446.699468][ T4322] usb 8-1: config 0 descriptor?? [ 446.729438][ T8902] EXT4-fs (loop8): 1 truncate cleaned up [ 446.769978][ T8902] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 446.790550][ T4322] snd-usb-audio: probe of 8-1:0.0 failed with error -22 [ 446.815492][ T8274] udevd[8274]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 447.212581][ T8911] netlink: 'syz.8.1056': attribute type 21 has an invalid length. [ 447.220950][ T8911] netlink: 132 bytes leftover after parsing attributes in process `syz.8.1056'. [ 447.851196][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 448.500772][ T8903] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1055'. [ 449.308180][ T5280] Bluetooth: (null): Invalid header checksum [ 449.329211][ T5280] Bluetooth: (null): Invalid header checksum [ 450.544064][ T4319] usb 8-1: USB disconnect, device number 6 [ 451.551089][ T8936] netlink: 72 bytes leftover after parsing attributes in process `syz.7.1058'. [ 451.780887][ T8939] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1061'. [ 452.549275][ T8946] loop7: detected capacity change from 0 to 512 [ 452.727645][ T8946] EXT4-fs: Ignoring removed i_version option [ 452.908475][ T8946] EXT4-fs: Ignoring removed nobh option [ 453.034498][ T8946] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 453.218850][ T8946] EXT4-fs (loop7): 1 truncate cleaned up [ 453.247820][ T8946] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 454.157442][ T5794] EXT4-fs (loop7): unmounting filesystem. [ 454.301011][ T8969] netlink: 'syz.8.1066': attribute type 4 has an invalid length. [ 454.364306][ T8969] netlink: 'syz.8.1066': attribute type 4 has an invalid length. [ 454.389502][ T8969] netlink: 116 bytes leftover after parsing attributes in process `syz.8.1066'. [ 455.047331][ T8975] tmpfs: Unknown parameter 'quota' [ 456.526522][ T8996] tmpfs: Unknown parameter 'usrquota' [ 456.817338][ T4317] libceph: connect (1)[c::]:6789 error -101 [ 456.866138][ T4317] libceph: mon0 (1)[c::]:6789 connect error [ 457.242513][ T9001] loop8: detected capacity change from 0 to 16 [ 457.274249][ T8996] ceph: No mds server is up or the cluster is laggy [ 457.459035][ T9001] erofs: (device loop8): mounted with root inode @ nid 36. [ 457.499129][ T9001] syz.8.1073: attempt to access beyond end of device [ 457.499129][ T9001] loop8: rw=0, sector=8, nr_sectors = 32 limit=16 [ 457.536359][ T9001] syz.8.1073: attempt to access beyond end of device [ 457.536359][ T9001] loop8: rw=524288, sector=16, nr_sectors = 32 limit=16 [ 457.551091][ T9001] syz.8.1073: attempt to access beyond end of device [ 457.551091][ T9001] loop8: rw=524288, sector=8, nr_sectors = 32 limit=16 [ 457.908514][ T4353] libceph: connect (1)[c::]:6789 error -101 [ 457.917795][ T4353] libceph: mon0 (1)[c::]:6789 connect error [ 458.027256][ T9006] ceph: No mds server is up or the cluster is laggy [ 458.492069][ T4353] libceph: connect (1)[c::]:6789 error -101 [ 458.498254][ T4353] libceph: mon0 (1)[c::]:6789 connect error [ 458.655892][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1079'. [ 459.197610][ T9034] PKCS7: Unknown OID: [4] 0.0 [ 459.203093][ T9034] PKCS7: Only support pkcs7_signedData type [ 459.425046][ T9032] xt_policy: output policy not valid in PREROUTING and INPUT [ 459.449269][ T9038] IPVS: rr: FWM 3 0x00000003 - no destination available [ 459.918690][ T9043] tipc: Started in network mode [ 459.957553][ T9043] tipc: Node identity , cluster identity 4711 [ 460.065515][ T9043] tipc: Failed to obtain node identity [ 460.071166][ T9043] tipc: Enabling of bearer rejected, failed to enable media [ 461.396118][ T9055] loop8: detected capacity change from 0 to 8 [ 463.879875][ T4353] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 464.969773][ T4353] usb 9-1: Using ep0 maxpacket: 16 [ 464.976721][ T4353] usb 9-1: config 253 has an invalid interface number: 184 but max is 0 [ 464.999848][ T4353] usb 9-1: config 253 has no interface number 0 [ 465.006148][ T4353] usb 9-1: config 253 interface 184 has no altsetting 0 [ 465.652155][ T4353] usb 9-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.00 [ 465.661273][ T4353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 465.669324][ T4353] usb 9-1: Product: syz [ 465.673906][ T4353] usb 9-1: Manufacturer: syz [ 465.678526][ T4353] usb 9-1: SerialNumber: syz [ 465.785191][ T4353] go7007: probe of 9-1:253.184 failed with error -12 [ 465.989278][ T4353] usb 9-1: USB disconnect, device number 6 [ 467.685280][ T9142] loop9: detected capacity change from 0 to 512 [ 467.941912][ T9142] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback. [ 467.965837][ T26] audit: type=1326 audit(3935346677.508:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9154 comm="syz.2.1117" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2433f9e0d9 code=0x0 [ 467.989224][ C0] vkms_vblank_simulate: vblank timer overrun [ 468.009910][ T9142] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 468.760049][ T4353] usb 9-1: new low-speed USB device number 7 using dummy_hcd [ 469.502814][ T4353] usb 9-1: config 7 has no interfaces? [ 469.511791][ T4353] usb 9-1: string descriptor 0 read error: -22 [ 469.518095][ T4353] usb 9-1: New USB device found, idVendor=10c4, idProduct=8664, bcdDevice=42.26 [ 469.629202][ T4353] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.933185][ T4353] usb 9-1: USB disconnect, device number 7 [ 472.939273][ T8284] EXT4-fs (loop9): unmounting filesystem. [ 473.206648][ T9227] loop8: detected capacity change from 0 to 512 [ 473.309956][ T9227] EXT4-fs (loop8): bad s_min_extra_isize: 544 [ 473.935879][ T9254] tmpfs: Unknown parameter 'quota' [ 475.769446][ T9272] loop9: detected capacity change from 0 to 2048 [ 476.252674][ T9285] overlayfs: failed to clone upperpath [ 476.872584][ T9287] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 477.290011][ T4323] usb 9-1: new full-speed USB device number 8 using dummy_hcd [ 477.494369][ T4323] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.526568][ T4323] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 477.562458][ T4323] usb 9-1: config 0 interface 0 has no altsetting 0 [ 477.845827][ T4323] usb 9-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 477.869944][ T4323] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 477.878086][ T4323] usb 9-1: Manufacturer: syz [ 477.892511][ T4323] usb 9-1: SerialNumber: syz [ 477.901147][ T9344] netlink: 'syz.7.1172': attribute type 7 has an invalid length. [ 477.908936][ T9344] netlink: 'syz.7.1172': attribute type 8 has an invalid length. [ 477.918937][ T4323] usb 9-1: config 0 descriptor?? [ 477.924868][ T9296] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 478.169937][ T4323] plusb: probe of 9-1:0.0 failed with error -71 [ 478.218515][ T4323] usb 9-1: USB disconnect, device number 8 [ 478.486037][ T9370] netlink: 132 bytes leftover after parsing attributes in process `syz.7.1181'. [ 479.228126][ T9407] netlink: 16186 bytes leftover after parsing attributes in process `syz.7.1195'. [ 479.476651][ T9420] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1202'. [ 480.571622][ T9428] loop8: detected capacity change from 0 to 32768 [ 480.654388][ T9428] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 scanned by syz.8.1204 (9428) [ 480.785263][ T9428] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 480.828690][ T9428] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm [ 480.858137][ T9428] BTRFS info (device loop8): force zlib compression, level 3 [ 480.872491][ T9428] BTRFS info (device loop8): force clearing of disk cache [ 480.896823][ T9428] BTRFS info (device loop8): allowing degraded mounts [ 480.917873][ T9428] BTRFS info (device loop8): using free space tree [ 481.297735][ T9508] batman_adv: batadv0: Adding interface: macvtap1 [ 481.324521][ T9428] BTRFS info (device loop8): enabling ssd optimizations [ 481.360380][ T9428] BTRFS info (device loop8): rebuilding free space tree [ 481.360988][ T9508] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.509903][ T9508] batman_adv: batadv0: Not using interface macvtap1 (retrying later): interface not active [ 482.068726][ T9553] x_tables: duplicate underflow at hook 2 [ 482.094405][ T6073] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 482.399298][ T8286] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 10 /dev/loop8 scanned by udevd (8286) [ 482.401831][ T9560] loop9: detected capacity change from 0 to 256 [ 482.634951][ T9560] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 482.686056][ T9560] exFAT-fs (loop9): Medium has reported failures. Some data may be lost. [ 482.802780][ T9560] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 482.851259][ T9560] exFAT-fs (loop9): failed to load alloc-bitmap [ 482.867831][ T9560] exFAT-fs (loop9): failed to recognize exfat type [ 484.874876][ T9656] loop8: detected capacity change from 0 to 2048 [ 485.006403][ T9656] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 485.273533][ T9674] loop9: detected capacity change from 0 to 512 [ 485.340739][ T9674] journal_path: Non-blockdev passed as '' [ 485.381303][ T9674] EXT4-fs: error: could not find journal device path [ 486.115179][ T9713] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1290'. [ 486.362897][ T9724] netlink: 'syz.7.1295': attribute type 21 has an invalid length. [ 486.399486][ T9724] netlink: 164 bytes leftover after parsing attributes in process `syz.7.1295'. [ 486.478353][ T9732] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1298'. [ 486.518247][ T9732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1298'. [ 486.588379][ T9735] loop9: detected capacity change from 0 to 256 [ 486.697077][ T9735] vfat filesystem being mounted at /58/file2 supports timestamps until 2107-12-31 (0x10391447e) [ 486.778169][ T9735] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 486.833037][ T9735] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 486.863693][ T9735] FAT-fs (loop9): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 486.897344][ T26] audit: type=1800 audit(3935346696.438:59): pid=9735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1299" name="file1" dev="loop9" ino=1048621 res=0 errno=0 [ 487.002369][ T9752] loop8: detected capacity change from 0 to 64 [ 487.055305][ T9752] minix filesystem being mounted at /135/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 487.086619][ T9752] Bad inode number on dev loop8: 2 is out of range [ 487.773627][ T9787] loop9: detected capacity change from 0 to 64 [ 487.833034][ T9787] minix filesystem being mounted at /62/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 488.018643][ T26] audit: type=1326 audit(3935346697.558:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.7.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 488.069116][ T26] audit: type=1326 audit(3935346697.558:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.7.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 488.093060][ C1] vkms_vblank_simulate: vblank timer overrun [ 488.133646][ T9767] loop8: detected capacity change from 0 to 32768 [ 488.151581][ T26] audit: type=1326 audit(3935346697.558:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.7.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=238 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 488.195329][ T9767] jfs filesystem being mounted at /136/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 488.245130][ T26] audit: type=1326 audit(3935346697.558:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.7.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 488.302642][ T9767] ERROR: (device loop8): dbAlloc: the hint is outside the map [ 488.302642][ T9767] [ 488.383548][ T9767] ERROR: (device loop8): remounting filesystem as read-only [ 488.384383][ T26] audit: type=1326 audit(3935346697.558:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9795 comm="syz.7.1326" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 488.414853][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.000068][ T9575] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 489.048985][ T9837] loop8: detected capacity change from 0 to 128 [ 489.114872][ T9837] vfat filesystem being mounted at /138/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 489.140977][ T9843] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1344'. [ 489.191703][ T9575] usb 10-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 489.223160][ T9575] usb 10-1: config 1 interface 0 has no altsetting 0 [ 489.255849][ T9575] usb 10-1: New USB device found, idVendor=04b3, idProduct=3103, bcdDevice= 0.40 [ 489.295706][ T9575] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 489.330187][ T9575] usb 10-1: Product: syz [ 489.334485][ T9575] usb 10-1: Manufacturer: syz [ 489.363772][ T9575] usb 10-1: SerialNumber: syz [ 489.400046][ T9823] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 489.647288][ T9856] netlink: 'syz.2.1350': attribute type 11 has an invalid length. [ 489.841210][ T9575] usbhid 10-1:1.0: can't add hid device: -71 [ 489.847317][ T9575] usbhid: probe of 10-1:1.0 failed with error -71 [ 489.910214][ T9575] usb 10-1: USB disconnect, device number 2 [ 489.996489][ T9870] loop8: detected capacity change from 0 to 1024 [ 490.068036][ T26] audit: type=1800 audit(3935346699.608:65): pid=9870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1354" name="file1" dev="loop8" ino=20 res=0 errno=0 [ 490.257370][ T9878] tmpfs: Bad value for 'mpol' [ 490.814698][ T9902] Flash size not aligned to erasesize, reducing to 124KiB [ 490.846193][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000000: 0xb100 instead [ 490.920564][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00000004: 0xffe4 instead [ 490.984707][ T9902] jffs2: Empty flash at 0x00000008 ends at 0x00000ff8 [ 491.032459][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001000: 0xb100 instead [ 491.092156][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00001004: 0xffe4 instead [ 491.107258][ T9902] jffs2: Empty flash at 0x00001008 ends at 0x00001ff8 [ 491.151718][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002000: 0xb100 instead [ 491.162414][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00002004: 0xffe4 instead [ 491.173071][ T9902] jffs2: Empty flash at 0x00002008 ends at 0x00002ff8 [ 491.180314][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003000: 0xb100 instead [ 491.190860][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00003004: 0xffe4 instead [ 491.201293][ T9902] jffs2: Empty flash at 0x00003008 ends at 0x00003ff8 [ 491.208093][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004000: 0xb100 instead [ 491.218696][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00004004: 0xffe4 instead [ 491.229187][ T9902] jffs2: Empty flash at 0x00004008 ends at 0x00004ff8 [ 491.245006][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005000: 0xb100 instead [ 491.269817][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00005004: 0xffe4 instead [ 491.289984][ T9902] jffs2: Empty flash at 0x00005008 ends at 0x00005ff8 [ 491.296811][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006000: 0xb100 instead [ 491.366559][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00006004: 0xffe4 instead [ 491.409761][ T9902] jffs2: Empty flash at 0x00006008 ends at 0x00006ff8 [ 491.416878][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007000: 0xb100 instead [ 491.484872][ T9920] devpts: called with bogus options [ 491.499779][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00007004: 0xffe4 instead [ 491.525080][ T9902] jffs2: Empty flash at 0x00007008 ends at 0x00007ff8 [ 491.535208][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008000: 0xb100 instead [ 491.620247][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00008004: 0xffe4 instead [ 491.650943][ T9925] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1377'. [ 491.665287][ T9902] jffs2: Empty flash at 0x00008008 ends at 0x00008ff8 [ 491.678091][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 491.697658][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009000: 0xb100 instead [ 491.708687][ T9925] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 491.746374][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00009004: 0xffe4 instead [ 491.810164][ T9902] jffs2: Empty flash at 0x00009008 ends at 0x00009ff8 [ 491.817008][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a000: 0xb100 instead [ 491.890765][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000a004: 0xffe4 instead [ 491.914640][ T9902] jffs2: Empty flash at 0x0000a008 ends at 0x0000aff8 [ 491.926943][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b000: 0xb100 instead [ 492.006995][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000b004: 0xffe4 instead [ 492.007098][ T9902] jffs2: Empty flash at 0x0000b008 ends at 0x0000bff8 [ 492.007132][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c000: 0xb100 instead [ 492.007152][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000c004: 0xffe4 instead [ 492.007185][ T9902] jffs2: Empty flash at 0x0000c008 ends at 0x0000cff8 [ 492.007207][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d000: 0xb100 instead [ 492.007225][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000d004: 0xffe4 instead [ 492.007255][ T9902] jffs2: Empty flash at 0x0000d008 ends at 0x0000dff8 [ 492.007277][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e000: 0xb100 instead [ 492.007295][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000e004: 0xffe4 instead [ 492.007327][ T9902] jffs2: Empty flash at 0x0000e008 ends at 0x0000eff8 [ 492.007414][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f000: 0xb100 instead [ 492.007433][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0000f004: 0xffe4 instead [ 492.007466][ T9902] jffs2: Empty flash at 0x0000f008 ends at 0x0000fff8 [ 492.007486][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010000: 0xb100 instead [ 492.007505][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00010004: 0xffe4 instead [ 492.007538][ T9902] jffs2: Empty flash at 0x00010008 ends at 0x00010ff8 [ 492.007559][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011000: 0xb100 instead [ 492.007577][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00011004: 0xffe4 instead [ 492.007607][ T9902] jffs2: Empty flash at 0x00011008 ends at 0x00011ff8 [ 492.007628][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012000: 0xb100 instead [ 492.007646][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00012004: 0xffe4 instead [ 492.007679][ T9902] jffs2: Empty flash at 0x00012008 ends at 0x00012ff8 [ 492.007700][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013000: 0xb100 instead [ 492.007718][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00013004: 0xffe4 instead [ 492.007759][ T9902] jffs2: Empty flash at 0x00013008 ends at 0x00013ff8 [ 492.007780][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014000: 0xb100 instead [ 492.007798][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00014004: 0xffe4 instead [ 492.007830][ T9902] jffs2: Empty flash at 0x00014008 ends at 0x00014ff8 [ 492.007852][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015000: 0xb100 instead [ 492.007871][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00015004: 0xffe4 instead [ 492.007903][ T9902] jffs2: Empty flash at 0x00015008 ends at 0x00015ff8 [ 492.007928][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016000: 0xb100 instead [ 492.007946][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00016004: 0xffe4 instead [ 492.007976][ T9902] jffs2: Empty flash at 0x00016008 ends at 0x00016ff8 [ 492.007998][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017000: 0xb100 instead [ 492.008016][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00017004: 0xffe4 instead [ 492.008048][ T9902] jffs2: Empty flash at 0x00017008 ends at 0x00017ff8 [ 492.008069][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018000: 0xb100 instead [ 492.008089][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00018004: 0xffe4 instead [ 492.008122][ T9902] jffs2: Empty flash at 0x00018008 ends at 0x00018ff8 [ 492.008144][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019000: 0xb100 instead [ 492.008163][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x00019004: 0xffe4 instead [ 492.008196][ T9902] jffs2: Empty flash at 0x00019008 ends at 0x00019ff8 [ 492.008217][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a000: 0xb100 instead [ 492.008236][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001a004: 0xffe4 instead [ 492.008268][ T9902] jffs2: Empty flash at 0x0001a008 ends at 0x0001aff8 [ 492.008289][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b000: 0xb100 instead [ 492.008307][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001b004: 0xffe4 instead [ 492.008337][ T9902] jffs2: Empty flash at 0x0001b008 ends at 0x0001bff8 [ 492.008358][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c000: 0xb100 instead [ 492.008377][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001c004: 0xffe4 instead [ 492.008416][ T9902] jffs2: Empty flash at 0x0001c008 ends at 0x0001cff8 [ 492.008437][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d000: 0xb100 instead [ 492.008456][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001d004: 0xffe4 instead [ 492.008488][ T9902] jffs2: Empty flash at 0x0001d008 ends at 0x0001dff8 [ 492.008547][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e000: 0xb100 instead [ 492.008566][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e004: 0x85e4 instead [ 492.008584][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e008: 0x44e0 instead [ 492.008602][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e00c: 0x1d00 instead [ 492.008620][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e010: 0x0298 instead [ 492.008638][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e014: 0x0100 instead [ 492.008656][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e018: 0xc000 instead [ 492.008675][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e024: 0x7f00 instead [ 492.008692][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e028: 0x7f6a instead [ 492.008711][ T9902] jffs2: jffs2_scan_eraseblock(): Magic bitmask 0x1985 not found at 0x0001e02c: 0x7f6a instead [ 492.008738][ T9902] jffs2: Further such events for this erase block will not be printed [ 492.008917][ T9902] jffs2: Empty flash at 0x0001e658 ends at 0x0001eff8 [ 492.008931][ T9902] jffs2: Cowardly refusing to erase blocks on filesystem with no valid JFFS2 nodes [ 492.008941][ T9902] jffs2: empty_blocks 0, bad_blocks 0, c->nr_blocks 31 [ 492.917549][ T9948] capability: warning: `syz.0.1385' uses deprecated v2 capabilities in a way that may be insecure [ 493.992258][ T9986] 9pnet_fd: Insufficient options for proto=fd [ 494.327778][T10000] loop9: detected capacity change from 0 to 64 [ 494.368802][T10000] minix filesystem being mounted at /71/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 494.734922][T10019] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1412'. [ 495.224803][T10038] usb usb8: usbfs: process 10038 (syz.9.1418) did not claim interface 0 before use [ 495.504424][T10041] netlink: 'syz.2.1417': attribute type 21 has an invalid length. [ 495.512580][T10041] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1417'. [ 496.695686][T10053] netlink: 60 bytes leftover after parsing attributes in process `syz.9.1424'. [ 497.752434][T10065] loop8: detected capacity change from 0 to 4096 [ 497.768113][T10065] ntfs3: loop8: Different NTFS' sector size (1024) and media sector size (512) [ 497.829136][T10065] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 498.540165][ T8590] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 498.735999][ T8590] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 498.875784][ T8590] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 499.107692][ T8590] usb 10-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 499.306428][ T8590] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 499.334952][ T8590] usb 10-1: SerialNumber: syz [ 499.634212][ T8590] usb 10-1: 0:2 : does not exist [ 499.671390][ T8590] usb 10-1: USB disconnect, device number 3 [ 499.803169][T10082] loop8: detected capacity change from 0 to 32768 [ 499.827899][T10082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.1434 (10082) [ 499.908905][T10082] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 499.948842][T10082] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 499.960110][ T8286] udevd[8286]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 500.019843][T10082] BTRFS info (device loop8): using free space tree [ 500.379614][T10082] BTRFS info (device loop8): enabling ssd optimizations [ 500.537881][ T6073] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 500.794849][ T8286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 9 /dev/loop8 scanned by udevd (8286) [ 501.334510][T10153] loop9: detected capacity change from 0 to 4096 [ 501.359864][T10161] ucma_write: process 506 (syz.8.1456) changed security contexts after opening file descriptor, this is not allowed. [ 501.419330][T10153] ntfs3: loop9: Different NTFS' sector size (1024) and media sector size (512) [ 501.467996][T10153] ntfs3: loop9: Mark volume as dirty due to NTFS errors [ 503.505005][T10209] overlayfs: failed to clone upperpath [ 504.844272][T10234] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1471'. [ 504.861868][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 504.868229][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 505.128216][T10245] tmpfs: Unknown parameter 'quota' [ 506.110819][T10254] loop8: detected capacity change from 0 to 256 [ 506.172535][T10254] vfat filesystem being mounted at /160/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 506.482761][T10263] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 506.909518][T10276] tipc: Enabling of bearer rejected, failed to enable media [ 508.099447][T10295] tmpfs: Unknown parameter 'quota' [ 508.165476][T10298] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1490'. [ 509.026664][T10331] loop8: detected capacity change from 0 to 1024 [ 510.875323][T10350] tmpfs: Unknown parameter 'quota' [ 513.875584][T10400] loop8: detected capacity change from 0 to 128 [ 514.874080][T10400] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 514.886916][T10400] hpfs: filesystem error: improperly stopped [ 514.893206][T10400] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 514.901055][T10400] hpfs: You really don't want any checks? You are crazy... [ 514.909916][T10400] hpfs: hpfs_map_sector(): read error [ 514.915338][T10400] hpfs: code page support is disabled [ 514.922250][T10400] hpfs: hpfs_map_4sectors(): unaligned read [ 514.928547][T10400] hpfs: hpfs_map_4sectors(): unaligned read [ 514.934499][T10400] hpfs: filesystem error: unable to find root dir [ 517.686238][T10454] PKCS7: Unknown OID: [4] 0.0 [ 517.691050][T10454] PKCS7: Only support pkcs7_signedData type [ 517.736129][T10454] xt_policy: output policy not valid in PREROUTING and INPUT [ 519.141121][T10503] IPVS: rr: FWM 3 0x00000003 - no destination available [ 520.162946][T10518] PKCS7: Unknown OID: [4] 0.0 [ 520.167726][T10518] PKCS7: Only support pkcs7_signedData type [ 520.183397][T10518] xt_policy: output policy not valid in PREROUTING and INPUT [ 521.534461][T10557] IPVS: rr: FWM 3 0x00000003 - no destination available [ 522.404074][T10567] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1561'. [ 522.851121][T10571] ip_tables: iptables: counters copy to user failed while replacing table [ 525.139833][ T4279] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 525.139866][ T4291] Bluetooth: hci5: command 0xfc11 tx timeout [ 526.298145][T10588] jffs2: notice: (10588) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 526.332690][T10588] jffs2 filesystem being mounted at /378/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 527.399181][T10616] IPVS: rr: FWM 3 0x00000003 - no destination available [ 528.446924][T10642] loop8: detected capacity change from 0 to 512 [ 528.530217][T10649] netlink: 'syz.0.1587': attribute type 4 has an invalid length. [ 528.672590][T10650] netlink: 'syz.0.1587': attribute type 4 has an invalid length. [ 528.711445][T10649] netlink: 116 bytes leftover after parsing attributes in process `syz.0.1587'. [ 529.017375][T10642] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 529.159305][T10642] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 530.294664][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 530.312098][T10671] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.148153][T10681] 9pnet_fd: Insufficient options for proto=fd [ 532.415384][T10708] netlink: 'syz.7.1603': attribute type 4 has an invalid length. [ 532.612969][T10712] loop8: detected capacity change from 0 to 256 [ 532.680470][T10712] vfat filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2107-12-31 (0x10391447e) [ 532.996341][T10709] netlink: 'syz.7.1603': attribute type 4 has an invalid length. [ 533.014455][T10711] netlink: 116 bytes leftover after parsing attributes in process `syz.7.1603'. [ 534.821198][T10751] IPv6: NLM_F_CREATE should be specified when creating new route [ 535.787325][T10768] netlink: 'syz.2.1620': attribute type 4 has an invalid length. [ 536.574958][T10769] netlink: 'syz.2.1620': attribute type 4 has an invalid length. [ 536.584545][T10770] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1620'. [ 538.899295][T10808] loop8: detected capacity change from 0 to 512 [ 538.925732][T10808] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 539.229211][T10808] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802e028, mo2=0002] [ 539.322427][T10808] System zones: 0-2, 18-18, 34-35 [ 539.600280][T10808] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 539.669843][T10808] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.822483][T10820] tipc: Failed to obtain node identity [ 539.842641][T10820] tipc: Enabling of bearer rejected, failed to enable media [ 540.236117][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 541.291528][T10850] IPVS: rr: FWM 3 0x00000003 - no destination available [ 541.722547][T10856] 9pnet_fd: Insufficient options for proto=fd [ 542.156187][T10862] loop8: detected capacity change from 0 to 64 [ 542.233340][T10867] Driver unsupported XDP return value 0 on prog (id 95) dev N/A, expect packet loss! [ 542.304412][T10871] netlink: 'syz.9.1651': attribute type 4 has an invalid length. [ 542.336859][T10871] netlink: 'syz.9.1651': attribute type 4 has an invalid length. [ 542.372043][T10871] netlink: 116 bytes leftover after parsing attributes in process `syz.9.1651'. [ 543.113838][ T5288] kworker/u4:21: attempt to access beyond end of device [ 543.113838][ T5288] loop8: rw=1, sector=161, nr_sectors = 1 limit=64 [ 543.180529][ T5288] Buffer I/O error on dev loop8, logical block 161, lost async page write [ 543.189206][ T5288] kworker/u4:21: attempt to access beyond end of device [ 543.189206][ T5288] loop8: rw=1, sector=162, nr_sectors = 1 limit=64 [ 543.239811][ T5288] Buffer I/O error on dev loop8, logical block 162, lost async page write [ 543.248415][ T5288] kworker/u4:21: attempt to access beyond end of device [ 543.248415][ T5288] loop8: rw=1, sector=163, nr_sectors = 1 limit=64 [ 543.315098][ T5288] Buffer I/O error on dev loop8, logical block 163, lost async page write [ 543.350096][ T5288] kworker/u4:21: attempt to access beyond end of device [ 543.350096][ T5288] loop8: rw=1, sector=167, nr_sectors = 1 limit=64 [ 543.382441][ T5288] Buffer I/O error on dev loop8, logical block 167, lost async page write [ 543.408232][ T5288] kworker/u4:21: attempt to access beyond end of device [ 543.408232][ T5288] loop8: rw=1, sector=169, nr_sectors = 1 limit=64 [ 543.458571][ T5288] Buffer I/O error on dev loop8, logical block 169, lost async page write [ 543.575595][ T5288] kworker/u4:21: attempt to access beyond end of device [ 543.575595][ T5288] loop8: rw=1, sector=171, nr_sectors = 1 limit=64 [ 543.693788][ T5288] Buffer I/O error on dev loop8, logical block 171, lost async page write [ 543.715464][ T5288] kworker/u4:21: attempt to access beyond end of device [ 543.715464][ T5288] loop8: rw=1, sector=172, nr_sectors = 1 limit=64 [ 543.813425][T10902] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1662'. [ 544.054798][ T5288] Buffer I/O error on dev loop8, logical block 172, lost async page write [ 544.287660][ T5288] kworker/u4:21: attempt to access beyond end of device [ 544.287660][ T5288] loop8: rw=1, sector=173, nr_sectors = 1 limit=64 [ 544.335857][ T5288] Buffer I/O error on dev loop8, logical block 173, lost async page write [ 544.396288][ T5288] kworker/u4:21: attempt to access beyond end of device [ 544.396288][ T5288] loop8: rw=1, sector=174, nr_sectors = 1 limit=64 [ 544.498097][ T5288] Buffer I/O error on dev loop8, logical block 174, lost async page write [ 544.538256][ T5288] kworker/u4:21: attempt to access beyond end of device [ 544.538256][ T5288] loop8: rw=1, sector=175, nr_sectors = 1 limit=64 [ 544.635525][T10914] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 544.731311][T10915] netlink: 'syz.2.1670': attribute type 4 has an invalid length. [ 544.790978][T10914] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1670'. [ 544.880918][ T5288] Buffer I/O error on dev loop8, logical block 175, lost async page write [ 546.124676][T10946] loop8: detected capacity change from 0 to 512 [ 546.221478][T10955] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1681'. [ 546.819542][T10946] EXT4-fs (loop8): invalid journal inode [ 546.839361][T10946] EXT4-fs (loop8): can't get journal size [ 546.932963][T10946] EXT4-fs (loop8): 1 truncate cleaned up [ 546.938789][T10946] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 547.017050][T10963] device macvtap2 entered promiscuous mode [ 547.049924][T10963] device vlan0 entered promiscuous mode [ 547.112216][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 547.926832][T11004] netlink: 72 bytes leftover after parsing attributes in process `syz.8.1698'. [ 549.771694][T11036] loop8: detected capacity change from 0 to 16 [ 549.922928][T11036] erofs: (device loop8): mounted with root inode @ nid 36. [ 549.997868][ T26] audit: type=1800 audit(3935346759.538:66): pid=11036 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1714" name="file1" dev="loop8" ino=86 res=0 errno=0 [ 550.453711][T11049] loop8: detected capacity change from 0 to 256 [ 550.549626][T11049] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 550.659526][T11049] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 550.742703][T11049] vfat filesystem being mounted at /199/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 550.988192][T11060] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1723'. [ 552.555693][T11131] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1747'. [ 553.644328][ T4319] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 553.839767][ T4319] usb 9-1: Using ep0 maxpacket: 8 [ 553.846689][ T4319] usb 9-1: too many endpoints for config 0 interface 0 altsetting 251: 223, using maximum allowed: 30 [ 553.889778][ T4319] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 553.918428][ T4319] usb 9-1: config 0 interface 0 altsetting 251 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 553.959797][ T4319] usb 9-1: config 0 interface 0 has no altsetting 0 [ 553.966840][ T4319] usb 9-1: New USB device found, idVendor=6666, idProduct=8802, bcdDevice= 0.00 [ 554.002624][ T4319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 554.042421][ T4319] usb 9-1: config 0 descriptor?? [ 554.461204][ T4319] smartjoyplus 0003:6666:8802.0006: unknown main item tag 0x0 [ 554.480242][ T4319] smartjoyplus 0003:6666:8802.0006: collection stack underflow [ 554.510184][ T4319] smartjoyplus 0003:6666:8802.0006: item 0 2 0 12 parsing failed [ 554.528746][ T4319] smartjoyplus 0003:6666:8802.0006: parse failed [ 554.548504][ T4319] smartjoyplus: probe of 0003:6666:8802.0006 failed with error -22 [ 554.660680][ T4319] usb 9-1: USB disconnect, device number 9 [ 555.486252][T11204] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1767'. [ 555.619796][ T9575] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 555.809811][ T9575] usb 9-1: Using ep0 maxpacket: 32 [ 555.819304][ T9575] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 555.845132][ T9575] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 556.017906][ T9575] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 556.035758][ T9575] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 556.044327][ T9575] usb 9-1: Product: syz [ 556.048523][ T9575] usb 9-1: Manufacturer: syz [ 556.053317][ T9575] usb 9-1: SerialNumber: syz [ 556.068704][ T9575] usb 9-1: config 0 descriptor?? [ 556.083235][ T9575] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 556.180115][T11223] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1771'. [ 556.819848][ T9575] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 556.831136][ T9575] usb 9-1: USB disconnect, device number 10 [ 556.842873][ T9575] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 560.050422][T11309] loop8: detected capacity change from 0 to 32768 [ 560.098263][T11309] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1805 (11309) [ 560.176052][T11309] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.220248][T11309] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 560.261043][T11309] BTRFS info (device loop8): setting nodatasum [ 560.267306][T11309] BTRFS info (device loop8): force zlib compression, level 3 [ 560.311842][T11309] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 560.350004][T11309] BTRFS info (device loop8): use lzo compression, level 0 [ 560.369917][T11309] BTRFS info (device loop8): turning on flush-on-commit [ 560.404810][T11309] BTRFS info (device loop8): enabling auto defrag [ 560.442527][T11349] netlink: 'syz.0.1818': attribute type 1 has an invalid length. [ 560.444631][T11309] BTRFS info (device loop8): max_inline at 4096 [ 560.473554][T11349] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1818'. [ 560.483202][T11309] BTRFS info (device loop8): using free space tree [ 560.807783][T11309] BTRFS info (device loop8): enabling ssd optimizations [ 561.821019][ T6073] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 565.289802][ T4319] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 565.502202][ T4319] usb 9-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 565.516802][ T4319] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.547890][ T4319] usb 9-1: config 0 descriptor?? [ 565.589047][ T4319] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 565.946345][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 565.952759][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 566.393103][ T4319] gspca_sunplus: reg_w_riv err -71 [ 566.405147][ T4319] sunplus: probe of 9-1:0.0 failed with error -71 [ 566.462669][ T4319] usb 9-1: USB disconnect, device number 11 [ 566.854346][T11566] jffs2: notice: (11566) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 566.947292][T11566] jffs2 filesystem being mounted at /462/mnt supports timestamps until 2106-02-07 (0xffffffff) [ 568.857454][T11668] loop8: detected capacity change from 0 to 256 [ 568.982820][T11668] FAT-fs (loop8): Directory bread(block 1285) failed [ 569.000197][T11668] FAT-fs (loop8): Directory bread(block 1286) failed [ 569.027372][T11668] FAT-fs (loop8): Directory bread(block 1287) failed [ 569.057788][T11668] FAT-fs (loop8): Directory bread(block 1288) failed [ 569.084647][T11668] vfat filesystem being mounted at /230/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 569.144461][T11668] FAT-fs (loop8): Directory bread(block 1285) failed [ 569.178096][T11668] FAT-fs (loop8): Directory bread(block 1286) failed [ 569.221199][T11668] FAT-fs (loop8): Directory bread(block 1287) failed [ 569.253221][T11668] FAT-fs (loop8): Directory bread(block 1288) failed [ 569.551040][T11695] loop8: detected capacity change from 0 to 2048 [ 569.639809][T11695] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 569.747023][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 570.087349][T11725] loop8: detected capacity change from 0 to 64 [ 570.198456][T11725] minix filesystem being mounted at /233/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 572.981205][T11841] jffs2: notice: (11841) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 4 orphan) and 4 of xref (1 dead, 3 orphan) found. [ 573.058252][T11841] jffs2 filesystem being mounted at /195/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 575.884542][T11913] loop8: detected capacity change from 0 to 64 [ 576.015092][T11913] minix filesystem being mounted at /243/file1 supports timestamps until 2106-02-07 (0xffffffff) [ 578.697903][T12005] loop8: detected capacity change from 0 to 32768 [ 578.837664][T12005] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 579.249236][ T6073] ocfs2: Unmounting device (7,8) on (node local) [ 579.489163][T12059] xt_hashlimit: size too large, truncated to 1048576 [ 579.566127][T12060] xt_hashlimit: size too large, truncated to 1048576 [ 582.331003][T12111] device bridge0 entered promiscuous mode [ 582.351459][T12111] device bridge0 left promiscuous mode [ 582.651845][T12120] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 582.921497][T12132] netlink: 'syz.2.2068': attribute type 1 has an invalid length. [ 582.992746][T12132] 8021q: adding VLAN 0 to HW filter on device bond1 [ 583.088373][T12137] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 583.145395][T12137] bond1: (slave batadv1): making interface the new active one [ 583.167031][T12137] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 583.186259][ T4437] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 583.616453][T12157] ip_tables: iptables: counters copy to user failed while replacing table [ 583.935331][T12167] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 584.011510][T12169] loop8: detected capacity change from 0 to 4096 [ 584.057524][T12169] ntfs: (device loop8): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 584.200817][T12169] ntfs: volume version 3.1. [ 585.212872][T12201] ip_tables: iptables: counters copy to user failed while replacing table [ 586.019205][T12231] xt_hashlimit: size too large, truncated to 1048576 [ 586.102685][T12232] xt_hashlimit: size too large, truncated to 1048576 [ 586.141569][T12236] ip_tables: iptables: counters copy to user failed while replacing table [ 588.413596][T12304] netlink: 'syz.7.2119': attribute type 1 has an invalid length. [ 588.457668][T12304] 8021q: adding VLAN 0 to HW filter on device bond1 [ 588.558539][ T26] audit: type=1326 audit(3935346798.098:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12310 comm="syz.0.2120" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5db7f9e0d9 code=0x0 [ 589.470928][T12304] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 589.491793][T12304] bond1: (slave batadv1): making interface the new active one [ 589.531700][T12304] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 589.940917][T12317] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.948368][T12317] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.432737][T12317] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 590.553148][T12317] device batadv_slave_1 left promiscuous mode [ 590.974096][T12341] overlayfs: failed to clone upperpath [ 591.024858][T12317] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.044245][T12317] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.077424][T12317] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.116990][T12317] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.173139][T12343] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 591.366498][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 591.774158][T12364] loop8: detected capacity change from 0 to 512 [ 591.805438][T12364] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 591.902442][T12364] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.2139: invalid indirect mapped block 4294967295 (level 0) [ 591.927788][T12364] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #16: comm syz.8.2139: invalid indirect mapped block 4294967295 (level 1) [ 591.958447][T12364] EXT4-fs (loop8): 1 orphan inode deleted [ 591.964618][T12364] EXT4-fs (loop8): 1 truncate cleaned up [ 591.970455][T12364] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 592.010482][T12364] EXT4-fs error (device loop8): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.8.2139: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 592.117778][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 593.595175][T12428] overlayfs: failed to clone upperpath [ 594.729359][ T26] audit: type=1326 audit(3935346804.268:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12468 comm="syz.7.2176" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f75fe79e0d9 code=0x0 [ 596.723751][ T26] audit: type=1326 audit(3935346806.268:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12544 comm="syz.8.2196" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdc8159e0d9 code=0x0 [ 597.227145][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2198'. [ 598.892214][T12626] loop8: detected capacity change from 0 to 256 [ 598.987681][T12626] vfat filesystem being mounted at /273/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 599.471751][T12650] netlink: 'syz.8.2228': attribute type 7 has an invalid length. [ 599.530371][T12650] netlink: 'syz.8.2228': attribute type 7 has an invalid length. [ 599.814195][T12674] loop8: detected capacity change from 0 to 2048 [ 599.863340][T12674] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 600.996408][T12710] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2244'. [ 601.012278][T12718] netlink: 48 bytes leftover after parsing attributes in process `syz.9.2245'. [ 601.236825][T12727] tipc: New replicast peer: 172.20.20.187 [ 601.270095][T12727] tipc: Enabled bearer , priority 10 [ 603.571850][ T26] audit: type=1326 audit(3935346813.111:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12767 comm="syz.2.2262" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2433f9e0d9 code=0x0 [ 604.874805][T12860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2288'. [ 606.491201][T12913] netlink: 'syz.0.2301': attribute type 7 has an invalid length. [ 606.499435][T12913] netlink: 'syz.0.2301': attribute type 7 has an invalid length. [ 608.865484][T12990] overlayfs: failed to clone lowerpath [ 609.176869][T12969] loop8: detected capacity change from 0 to 32768 [ 609.346042][T12969] XFS (loop8): Mounting V5 Filesystem [ 609.623791][T12969] XFS (loop8): Ending clean mount [ 609.753500][T12969] XFS (loop8): Quotacheck needed: Please wait. [ 609.917012][T12969] XFS (loop8): Quotacheck: Done. [ 610.286540][ T6073] XFS (loop8): Unmounting Filesystem [ 610.510346][T13049] overlayfs: failed to clone lowerpath [ 612.380411][T13122] loop8: detected capacity change from 0 to 8192 [ 612.414002][T13122] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 612.427840][T13122] REISERFS (device loop8): found reiserfs format "3.6" with non-standard journal [ 612.457483][T13122] REISERFS (device loop8): using ordered data mode [ 612.464586][T13122] reiserfs: using flush barriers [ 612.520162][T13122] REISERFS (device loop8): journal params: device loop8, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 612.537590][T13122] REISERFS (device loop8): checking transaction log (loop8) [ 612.807753][T13122] REISERFS (device loop8): Using tea hash to sort names [ 612.862965][T13122] REISERFS (device loop8): Created .reiserfs_priv - reserved for xattr storage. [ 612.897091][T13122] reiserfs filesystem being mounted at /298/file6 supports timestamps until 2106-02-07 (0xffffffff) [ 613.200705][T13122] REISERFS warning (device loop8): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 2) not found (pos 4) [ 613.473358][T13166] netlink: 63503 bytes leftover after parsing attributes in process `syz.9.2372'. [ 613.773527][T13176] overlayfs: failed to clone upperpath [ 613.940455][T13184] loop8: detected capacity change from 0 to 512 [ 613.981136][T13184] EXT4-fs error (device loop8): ext4_orphan_get:1405: inode #15: comm syz.8.2375: inode has both inline data and extents flags [ 614.009246][T13184] EXT4-fs error (device loop8): ext4_orphan_get:1410: comm syz.8.2375: couldn't read orphan inode 15 (err -117) [ 614.047236][T13184] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 614.216172][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 614.884884][T13222] ip_tables: iptables: counters copy to user failed while replacing table [ 614.910808][T13224] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 614.941318][T13224] tipc: Started in network mode [ 614.959564][T13224] tipc: Node identity ac14140f, cluster identity 4711 [ 614.980860][T13224] tipc: Enabled bearer , priority 10 [ 615.479082][T13242] tipc: Enabling of bearer rejected, failed to enable media [ 616.092494][T10156] tipc: Node number set to 2886997007 [ 616.938694][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2418'. [ 617.454166][T13304] overlayfs: failed to clone upperpath [ 617.604201][T13301] loop8: detected capacity change from 0 to 32768 [ 617.615492][T13301] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.2424 (13301) [ 617.636683][T13301] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 617.646967][T13301] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 617.655913][T13301] BTRFS info (device loop8): using free space tree [ 617.829352][T13301] BTRFS info (device loop8): enabling ssd optimizations [ 618.322655][ T6073] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 618.793094][T13357] overlayfs: failed to clone upperpath [ 618.895702][T13359] loop8: detected capacity change from 0 to 1024 [ 618.926041][T13359] EXT4-fs: Ignoring removed nomblk_io_submit option [ 619.014768][T13359] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 619.310740][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 619.529780][T13381] netlink: 'syz.2.2450': attribute type 4 has an invalid length. [ 620.216239][T13413] loop8: detected capacity change from 0 to 64 [ 620.268940][T13413] bfs filesystem being mounted at /315/bus supports timestamps until 2106-02-07 (0xffffffff) [ 621.493039][T11756] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.603969][T11756] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.721886][T11756] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.904306][T11756] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.686018][ T4287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 622.695962][T13481] loop8: detected capacity change from 0 to 8192 [ 622.702807][ T4291] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 622.727279][ T4291] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 622.751567][ T4291] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 622.759439][ T4291] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 622.770366][ T4291] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 622.791353][T13481] vfat filesystem being mounted at /321/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 623.530516][ T26] audit: type=1326 audit(3935346833.081:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 623.661568][ T26] audit: type=1326 audit(3935346833.131:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 623.770415][ T26] audit: type=1326 audit(3935346833.131:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 623.904892][ T26] audit: type=1326 audit(3935346833.141:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 623.975501][ T26] audit: type=1326 audit(3935346833.141:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f75fe79de42 code=0x7ffc0000 [ 624.138157][ T26] audit: type=1326 audit(3935346833.141:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f75fe75e90e code=0x7ffc0000 [ 624.249279][ T26] audit: type=1326 audit(3935346833.141:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f75fe79df07 code=0x7ffc0000 [ 624.344065][T13485] chnl_net:caif_netlink_parms(): no params data found [ 624.379855][ T26] audit: type=1326 audit(3935346833.141:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f75fe75e90e code=0x7ffc0000 [ 624.455719][ T26] audit: type=1326 audit(3935346833.141:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f75fe75e90e code=0x7ffc0000 [ 624.545637][ T26] audit: type=1326 audit(3935346833.141:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13509 comm="syz.7.2502" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 624.819986][ T4291] Bluetooth: hci4: command 0x0409 tx timeout [ 624.997490][T13485] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.005211][T13485] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.014296][T13485] device bridge_slave_0 entered promiscuous mode [ 625.132251][T11756] device hsr_slave_0 left promiscuous mode [ 625.189084][T11756] device hsr_slave_1 left promiscuous mode [ 625.214412][T11756] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 625.230623][T11756] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 625.248897][T11756] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 625.256518][T11756] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 625.272943][T13569] loop8: detected capacity change from 0 to 2048 [ 625.280253][T11756] device bridge_slave_1 left promiscuous mode [ 625.286509][T11756] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.319013][T11756] device bridge_slave_0 left promiscuous mode [ 625.340837][T11756] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.351102][T13569] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 625.454523][T11756] device veth1_macvtap left promiscuous mode [ 625.462798][T11756] device veth0_macvtap left promiscuous mode [ 625.469046][T11756] device veth1_vlan left promiscuous mode [ 625.475824][T11756] device veth0_vlan left promiscuous mode [ 626.904403][ T4291] Bluetooth: hci4: command 0x041b tx timeout [ 627.067915][T11756] team0 (unregistering): Port device team_slave_1 removed [ 627.126156][T11756] team0 (unregistering): Port device team_slave_0 removed [ 627.191030][T11756] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 627.260906][T11756] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 627.395106][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 627.401546][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.119388][T11756] bond0 (unregistering): Released all slaves [ 628.243215][T13485] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.250531][T13485] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.258532][T13485] device bridge_slave_1 entered promiscuous mode [ 628.386407][T13485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.418648][T13485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.619882][T13485] team0: Port device team_slave_0 added [ 628.660745][T13485] team0: Port device team_slave_1 added [ 628.751363][T13485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 628.771811][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.855500][T13485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 628.917016][T13485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 628.938700][T13485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 628.973273][T13485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 628.987409][ T4291] Bluetooth: hci4: command 0x040f tx timeout [ 629.074451][T13485] device hsr_slave_0 entered promiscuous mode [ 629.091689][T13485] device hsr_slave_1 entered promiscuous mode [ 630.027441][T13659] netlink: 76 bytes leftover after parsing attributes in process `syz.8.2534'. [ 630.534695][T13686] overlayfs: failed to clone upperpath [ 631.158195][ T4291] Bluetooth: hci4: command 0x0419 tx timeout [ 631.168691][T13698] loop8: detected capacity change from 0 to 32768 [ 631.180347][T13698] (syz.8.2541,13698,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 631.194326][T13698] (syz.8.2541,13698,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 631.236819][T13702] overlayfs: failed to clone upperpath [ 631.248250][T13698] JBD2: Ignoring recovery information on journal [ 631.311520][T13698] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode. [ 631.512301][T13700] process 'newroot/608/bus/file0' started with executable stack [ 632.129274][T13710] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 632.194284][T13710] tipc: Started in network mode [ 632.199214][T13710] tipc: Node identity ac14140f, cluster identity 4711 [ 632.226755][ T6073] ocfs2: Unmounting device (7,8) on (node local) [ 632.270510][T13710] tipc: Enabled bearer , priority 10 [ 632.868012][T13485] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 632.985499][T13485] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 633.083372][T13485] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 633.117933][T13485] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 633.222596][ T9572] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 633.327088][ T14] tipc: Node number set to 2886997007 [ 633.430217][ T9572] usb 9-1: Using ep0 maxpacket: 32 [ 633.437409][ T9572] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 633.466669][ T9572] usb 9-1: config 0 has no interface number 0 [ 633.507225][ T9572] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 633.526938][T13485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 633.561888][ T9572] usb 9-1: config 0 interface 1 has no altsetting 0 [ 633.593100][ T9572] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 633.623531][ T9572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.626147][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 633.652934][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 633.669709][ T9572] usb 9-1: Product: syz [ 633.686025][ T9572] usb 9-1: Manufacturer: syz [ 633.699435][T13485] 8021q: adding VLAN 0 to HW filter on device team0 [ 633.705857][ T9572] usb 9-1: SerialNumber: syz [ 633.742002][ T9572] usb 9-1: config 0 descriptor?? [ 633.802589][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 633.822012][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 633.958900][ T9572] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 633.996158][ T9572] cx231xx 9-1:0.1: Failed to read PCB config [ 634.017828][ T9572] cx231xx: probe of 9-1:0.1 failed with error -71 [ 634.034842][T11756] bridge0: port 1(bridge_slave_0) entered blocking state [ 634.042069][T11756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 634.068823][ T9572] usb 9-1: USB disconnect, device number 12 [ 634.122827][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 634.189929][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 634.198518][T11756] bridge0: port 2(bridge_slave_1) entered blocking state [ 634.205720][T11756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 634.290174][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 634.334850][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 634.360871][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 634.393992][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 634.445280][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 634.473790][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 634.494284][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 634.551803][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 634.589766][ T9572] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 634.624233][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 634.662107][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 634.681288][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 634.710452][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 634.733245][T13485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 634.799990][ T9572] usb 9-1: Using ep0 maxpacket: 32 [ 634.807655][ T9572] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 634.850005][ T9572] usb 9-1: config 0 has no interface number 0 [ 634.881891][ T9572] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 634.930355][ T9572] usb 9-1: config 0 interface 1 has no altsetting 0 [ 634.979228][ T9572] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 635.034025][ T9572] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.062553][ T9572] usb 9-1: Product: syz [ 635.086830][ T9572] usb 9-1: Manufacturer: syz [ 635.118684][ T9572] usb 9-1: SerialNumber: syz [ 635.148060][ T9572] usb 9-1: config 0 descriptor?? [ 635.376556][ T9572] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 635.419077][ T9572] cx231xx 9-1:0.1: Identified as Conexant Hybrid TV - RDU253S (card=4) [ 635.580237][ T9572] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --110 [ 635.600512][ T9572] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 635.630155][ T9572] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --32 [ 635.660933][ T9572] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 635.690156][ T9572] cx231xx 9-1:0.1: cx231xx_send_gpio_cmd: failed with status --71 [ 635.698036][ T9572] cx231xx 9-1:0.1: Failed to set devmode to analog: error: -71 [ 635.712310][T13485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 635.735675][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 635.758763][ T5652] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 635.781198][ T9572] i2c i2c-2: Added multiplexed i2c bus 4 [ 635.793301][ T9572] i2c i2c-2: Added multiplexed i2c bus 5 [ 635.811735][ T9572] cx231xx 9-1:0.1: cx231xx_dev_init: Failed to set Power - errCode [-71]! [ 635.832648][ T9572] cx231xx 9-1:0.1: cx231xx_init_dev: cx231xx_i2c_register - errCode [-71]! [ 635.894156][ T9572] cx231xx: probe of 9-1:0.1 failed with error -71 [ 635.955672][ T9572] usb 9-1: USB disconnect, device number 13 [ 636.316264][T13844] netlink: 100 bytes leftover after parsing attributes in process `syz.2.2569'. [ 637.313252][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 637.357715][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 637.454713][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 637.476263][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 637.520743][T13485] device veth0_vlan entered promiscuous mode [ 637.532783][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 637.562064][T11756] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 637.614260][T13485] device veth1_vlan entered promiscuous mode [ 637.698225][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 637.749421][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 637.793968][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 637.842988][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 637.904319][T13485] device veth0_macvtap entered promiscuous mode [ 637.935623][T13485] device veth1_macvtap entered promiscuous mode [ 638.037280][T13485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.100993][T13485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.154188][T13485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.200915][T13485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.226419][T13485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 638.243134][T13892] zram0: detected capacity change from 0 to 20480 [ 638.266132][T13485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.321256][T13485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 638.329816][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 638.372340][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 638.430829][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 638.472025][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 638.505964][T13485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.538536][T13485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.570753][T13485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.601775][T13485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.625294][T13485] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 638.661150][T13485] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 638.689752][T13485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 638.716418][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 638.751236][ T5280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 638.771462][T13485] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.797694][T13485] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.839530][T13485] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.879219][T13485] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.139603][ T5288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.147547][ T5288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.190332][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 639.293054][ T5280] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 639.307142][ T5280] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 639.363721][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 639.418069][T13926] 9p filesystem being mounted at /621/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 639.451964][T13929] overlayfs: failed to clone lowerpath [ 639.551916][T13931] overlayfs: failed to clone lowerpath [ 639.986777][T13950] cgroup: noprefix used incorrectly [ 640.133046][T13950] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2594'. [ 640.267208][T13959] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2596'. [ 641.087010][ T126] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 641.289865][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 641.296837][ T126] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 641.357749][ T126] usb 5-1: config 0 interface 0 has no altsetting 0 [ 641.396203][ T126] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 641.449803][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.506165][ T126] usb 5-1: Product: syz [ 641.530932][ T126] usb 5-1: Manufacturer: syz [ 641.564005][ T126] usb 5-1: SerialNumber: syz [ 641.597577][ T126] usb 5-1: config 0 descriptor?? [ 641.861078][ C0] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 641.920410][ T126] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input8 [ 642.044541][ T126] imon:send_packet: packet tx failed (-71) [ 642.093183][ T126] imon 5-1:0.0: panel buttons/knobs setup failed [ 642.559941][ T126] rc_core: IR keymap rc-imon-pad not found [ 642.566240][ T126] Registered IR keymap rc-empty [ 642.587333][ T126] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 642.635554][ T126] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 642.689377][ T126] imon:send_packet: packet tx failed (-71) [ 642.730381][ T126] imon 5-1:0.0: remote input dev register failed [ 642.736867][ T126] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 642.855759][ T126] imon 5-1:0.0: unable to initialize intf0, err 0 [ 642.878113][ T126] imon:imon_probe: failed to initialize context! [ 643.087871][ T126] imon 5-1:0.0: unable to register, err -19 [ 643.162979][ T126] usb 5-1: USB disconnect, device number 4 [ 643.579957][ T126] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 643.787247][ T126] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 643.885421][ T126] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 644.088474][ T126] usb 5-1: config 0 interface 0 has no altsetting 0 [ 644.448301][ T126] usb 5-1: string descriptor 0 read error: -71 [ 644.455226][ T126] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 644.580067][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.621231][ T126] usb 5-1: config 0 descriptor?? [ 644.656095][ T126] usb 5-1: can't set config #0, error -71 [ 644.697461][ T126] usb 5-1: USB disconnect, device number 5 [ 645.567641][T14105] TC_ACT_REPEAT abuse ? [ 647.298068][T14139] 9p filesystem being mounted at /346/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 647.344283][T14141] netlink: 'syz.2.2644': attribute type 1 has an invalid length. [ 647.436278][T14141] 8021q: adding VLAN 0 to HW filter on device bond2 [ 647.449068][T14148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.467571][T14148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.476924][T14148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.486220][T14148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.499750][T14148] bond2: (slave geneve3): making interface the new active one [ 647.512396][T14148] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 647.521402][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 648.095189][T14158] binder: 14157:14158 ioctl c0306201 2000000006c0 returned -14 [ 648.374522][T14171] loop8: detected capacity change from 0 to 1024 [ 648.616662][T14171] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 649.496206][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 649.560306][T14194] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 649.568553][T14194] IPv6: NLM_F_CREATE should be set when creating new route [ 651.653358][T14227] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 653.424393][ T26] kauditd_printk_skb: 50 callbacks suppressed [ 653.424409][ T26] audit: type=1326 audit(3935346862.971:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 653.533114][ T26] audit: type=1326 audit(3935346863.021:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 653.829765][ T126] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 653.977803][ T26] audit: type=1326 audit(3935346863.111:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 654.029985][ T26] audit: type=1326 audit(3935346863.111:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 654.138138][ T26] audit: type=1326 audit(3935346863.111:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 654.209708][ T126] usb 5-1: Using ep0 maxpacket: 16 [ 654.218574][ T126] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 654.276032][ T126] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 654.300364][ T26] audit: type=1326 audit(3935346863.111:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 654.344803][ T126] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 654.387257][ T126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.440236][ T126] usb 5-1: Product: syz [ 654.452386][ T26] audit: type=1326 audit(3935346863.111:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 654.467713][ T126] usb 5-1: Manufacturer: syz [ 654.540171][ T126] usb 5-1: SerialNumber: syz [ 654.549116][ T26] audit: type=1326 audit(3935346863.111:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 654.671544][ T26] audit: type=1326 audit(3935346863.111:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 654.758787][ T26] audit: type=1326 audit(3935346863.111:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14257 comm="syz.4.2672" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff762f9e0d9 code=0x7ffc0000 [ 655.789896][ T4319] usb 5-1: USB disconnect, device number 6 [ 656.181407][T14340] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 656.846321][T14371] netlink: 'syz.7.2695': attribute type 39 has an invalid length. [ 656.962069][T14371] bridge0: port 3(syz_tun) entered disabled state [ 658.149166][T14385] loop8: detected capacity change from 0 to 512 [ 658.242454][T14371] device syz_tun left promiscuous mode [ 658.253571][T14371] bridge0: port 3(syz_tun) entered disabled state [ 658.303569][T14385] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 658.365896][T14385] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2699: invalid indirect mapped block 256 (level 1) [ 658.450589][T14385] EXT4-fs error (device loop8): ext4_free_branches:1030: inode #13: comm syz.8.2699: invalid indirect mapped block 2683928664 (level 1) [ 658.480736][T14385] EXT4-fs (loop8): 1 truncate cleaned up [ 658.516946][T14385] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 659.022787][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 660.995980][T14458] kvm: pic: non byte write [ 667.849077][T14602] IPVS: Unknown mcast interface: pim6reg [ 668.499931][T14620] tipc: Enabling of bearer rejected, failed to enable media [ 671.494587][T14683] device syzkaller0 entered promiscuous mode [ 674.690858][T14727] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2776'. [ 674.707035][T14727] netlink: 84 bytes leftover after parsing attributes in process `syz.8.2776'. [ 674.749816][T10157] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 674.962705][T10157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 675.019693][T10157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 675.637010][T10157] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 675.707210][T10157] usb 5-1: New USB device found, idVendor=056a, idProduct=003a, bcdDevice= 0.00 [ 675.727466][T10157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.766466][T10157] usb 5-1: config 0 descriptor?? [ 676.710621][T10157] wacom 0003:056A:003A.0007: ignoring exceeding usage max [ 676.728162][T10157] wacom 0003:056A:003A.0007: Unknown device_type for 'HID 056a:003a'. Ignoring. [ 676.999047][ T4323] usb 5-1: USB disconnect, device number 7 [ 677.024510][T14770] overlayfs: './file0' not a directory [ 677.197387][T14774] input: syz0 as /devices/virtual/input/input13 [ 677.383029][T14784] loop8: detected capacity change from 0 to 8 [ 678.031290][ T4323] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 678.240366][ T4323] usb 5-1: Using ep0 maxpacket: 32 [ 678.835687][ T4323] usb 5-1: unable to get BOS descriptor or descriptor too short [ 678.854703][ T4323] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 678.909853][ T4323] usb 5-1: can't read configurations, error -71 [ 680.164225][T14822] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2799'. [ 684.279749][ T4353] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 685.219805][ T4353] usb 5-1: Using ep0 maxpacket: 32 [ 686.655764][ T4353] usb 5-1: unable to read config index 0 descriptor/all [ 686.669718][ T4353] usb 5-1: can't read configurations, error -71 [ 688.883781][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 688.890166][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 690.077283][T14963] device syzkaller0 entered promiscuous mode [ 690.093198][T14963] tipc: Enabled bearer , priority 0 [ 690.118851][T14962] tipc: Resetting bearer [ 691.453253][T14962] tipc: Disabling bearer [ 693.251316][T14998] device syzkaller0 entered promiscuous mode [ 693.299355][T14998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2839'. [ 695.338550][T15016] netlink: 'syz.0.2852': attribute type 4 has an invalid length. [ 695.411658][T15018] netlink: 'syz.0.2852': attribute type 4 has an invalid length. [ 695.451606][T15016] netlink: 'syz.0.2852': attribute type 4 has an invalid length. [ 702.400408][T15114] device syzkaller0 entered promiscuous mode [ 703.130425][T15111] overlayfs: failed to clone upperpath [ 703.678376][T15140] loop8: detected capacity change from 0 to 2048 [ 703.709126][T15140] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 703.790322][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 703.816845][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 703.875846][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 703.996441][T15140] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 704.083786][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 704.170629][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 704.207182][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 704.238126][T15140] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 704.285347][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 704.306983][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 704.339119][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 704.358492][T15140] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=4294967169, location=4294967169 [ 704.393401][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 704.421766][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 704.436076][T15140] UDF-fs: error (device loop8): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0 [ 704.447392][T15140] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1) [ 711.632108][ T26] kauditd_printk_skb: 279 callbacks suppressed [ 711.632124][ T26] audit: type=1326 audit(3935346921.181:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 712.450017][ T26] audit: type=1326 audit(3935346921.181:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 712.599127][ T26] audit: type=1326 audit(3935346921.181:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 712.873948][ T26] audit: type=1326 audit(3935346921.181:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 713.425135][ T26] audit: type=1326 audit(3935346921.181:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 713.594198][ T26] audit: type=1326 audit(3935346921.181:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 713.671784][ T26] audit: type=1326 audit(3935346921.181:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 714.840469][ T26] audit: type=1326 audit(3935346921.181:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 715.141119][ T26] audit: type=1326 audit(3935346921.181:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 715.619292][ T26] audit: type=1326 audit(3935346921.181:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15260 comm="syz.7.2898" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f75fe79e0d9 code=0x7ffc0000 [ 715.643216][T15320] tipc: Enabling of bearer rejected, failed to enable media [ 716.807830][T15299] loop8: detected capacity change from 0 to 40427 [ 716.926398][T15299] F2FS-fs (loop8): invalid crc value [ 716.960756][T15299] F2FS-fs (loop8): Failed to initialize F2FS segment manager (-4) [ 718.742392][T15377] ptrace attach of "ci2-linux-6-1-kasan/syz-executor exec"[6073] was attempted by "ci2-linux-6-1-kasan/syz-executor exec"[15377] [ 725.147556][T15435] loop8: detected capacity change from 0 to 64 [ 725.209225][T15435] MINIX-fs: bad superblock [ 728.537100][T15467] loop8: detected capacity change from 0 to 256 [ 728.633386][T15467] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 728.820726][T15467] exfat filesystem being mounted at /396/file0 supports timestamps until 2107-12-31 (0x10391447f) [ 729.871225][T15491] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 731.963519][T15528] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2958'. [ 738.223371][T15584] loop8: detected capacity change from 0 to 32768 [ 738.240302][T15584] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 scanned by syz.8.2968 (15584) [ 738.315149][T15584] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 738.325472][T15584] BTRFS info (device loop8): using sha256 (sha256-avx2) checksum algorithm [ 738.334521][T15584] BTRFS info (device loop8): turning on sync discard [ 738.341388][T15584] BTRFS info (device loop8): using free space tree [ 738.705929][T15584] BTRFS info (device loop8): enabling ssd optimizations [ 738.743119][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 738.743135][ T26] audit: type=1800 audit(3935346948.291:454): pid=15584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2968" name="file1" dev="loop8" ino=260 res=0 errno=0 [ 740.668145][ T6073] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 744.127704][T15385] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop8 scanned by udevd (15385) [ 745.953070][T15677] tipc: Enabled bearer , priority 10 [ 747.280060][ T4291] Bluetooth: hci4: command 0x0406 tx timeout [ 747.516888][T15690] using random self ethernet address [ 747.525117][T15690] using random host ethernet address [ 747.535785][ T26] audit: type=1800 audit(3935346957.081:455): pid=15690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2987" name="host_addr" dev="configfs" ino=67097 res=0 errno=0 [ 749.289342][ T26] audit: type=1800 audit(3935346958.561:456): pid=15707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.2992" name="host_addr" dev="configfs" ino=66445 res=0 errno=0 [ 750.290154][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 750.296566][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 753.530195][T15746] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3002'. [ 760.171240][ T26] audit: type=1800 audit(3935346969.715:457): pid=15848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.3020" name="host_addr" dev="configfs" ino=67617 res=0 errno=0 [ 763.221100][T15874] Device name cannot be null; rc = [-22] [ 768.411226][ T14] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 769.117802][ T14] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 769.138319][ T14] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 769.969393][ T14] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 769.990372][ T14] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 770.050038][ T14] usb 9-1: Product: syz [ 770.054266][ T14] usb 9-1: Manufacturer: syz [ 770.058897][ T14] usb 9-1: SerialNumber: syz [ 770.353667][ T14] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 770.406252][ T14] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 770.917011][T15932] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 770.960527][ T14] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 772.665984][ T14] usb 9-1: USB disconnect, device number 14 [ 772.683190][ T14] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 773.932187][ T14] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 773.944480][ T14] ti_usb_3410_5052 9-1:2.0: device disconnected [ 788.219914][ T9572] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 788.487164][ T9572] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 788.548034][ T9572] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 788.763469][ T9572] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.239436][ T9572] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 790.048328][ T9572] usb 9-1: SerialNumber: syz [ 790.245636][ T9572] usb 9-1: can't set config #1, error -71 [ 790.258562][ T9572] usb 9-1: USB disconnect, device number 15 [ 810.691934][T16370] tipc: Started in network mode [ 810.720276][T16370] tipc: Node identity , cluster identity 4711 [ 810.811358][T16370] tipc: Failed to obtain node identity [ 810.816908][T16370] tipc: Enabling of bearer rejected, failed to enable media [ 812.212315][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 812.218651][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 818.208597][T16457] loop8: detected capacity change from 0 to 128 [ 818.318917][T16457] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 818.388804][T16457] ext4 filesystem being mounted at /432/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 820.430864][ T6073] EXT4-fs (loop8): unmounting filesystem. [ 839.184830][T16651] ubi0: attaching mtd0 [ 839.205671][T16651] ubi0: scanning is finished [ 839.396279][T16651] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 839.762515][T16651] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 848.042803][T16736] ubi0: attaching mtd0 [ 848.052627][T16736] ubi0: scanning is finished [ 848.057410][T16736] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 848.542022][T16736] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 851.912304][T16744] ------------[ cut here ]------------ [ 851.918355][T16744] failed to allocate ring buffer on CPU 1 [ 851.924700][T16744] WARNING: CPU: 0 PID: 16744 at kernel/trace/ring_buffer.c:5860 trace_rb_cpu_prepare+0x349/0x3c0 [ 851.935506][T16744] Modules linked in: [ 851.939431][T16744] CPU: 0 PID: 16744 Comm: syz.8.3234 Not tainted syzkaller #0 [ 851.946978][T16744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 851.957129][T16744] RIP: 0010:trace_rb_cpu_prepare+0x349/0x3c0 [ 851.963192][T16744] Code: f0 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d6 01 fd ff 48 c7 c7 e0 72 90 8a 44 89 f6 e8 17 89 c8 ff <0f> 0b b8 f4 ff ff ff eb d4 e8 b9 01 fd ff 0f 0b e9 07 fd ff ff e8 [ 851.982890][T16744] RSP: 0018:ffffc900153afa98 EFLAGS: 00010246 [ 851.989052][T16744] RAX: 04ccb0e518e45700 RBX: dffffc0000000000 RCX: 0000000000080000 [ 851.997101][T16744] RDX: ffffc900156ed000 RSI: 0000000000048381 RDI: 0000000000048382 [ 852.005128][T16744] RBP: ffff8880245f8988 R08: ffffc900153af727 R09: 1ffff92002a75ee4 [ 852.013175][T16744] R10: dffffc0000000000 R11: fffff52002a75ee5 R12: ffff8880575d48b0 [ 852.021221][T16744] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880245f8988 [ 852.029307][T16744] FS: 00007fdc824a16c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 852.038357][T16744] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 852.045011][T16744] CR2: 0000001b2fd14ff8 CR3: 0000000034b93000 CR4: 00000000003506f0 [ 852.053078][T16744] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 852.061117][T16744] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 852.069125][T16744] Call Trace: [ 852.072509][T16744] [ 852.075495][T16744] ? rb_get_reader_page+0xcd0/0xcd0 [ 852.080798][T16744] cpuhp_invoke_callback+0x481/0x7e0 [ 852.086164][T16744] ? __cpuhp_state_add_instance_cpuslocked+0x10b/0x600 [ 852.093125][T16744] ? rb_get_reader_page+0xcd0/0xcd0 [ 852.098358][T16744] ? mutex_lock_nested+0x10/0x10 [ 852.103488][T16744] cpuhp_issue_call+0x452/0x7f0 [ 852.108379][T16744] ? _find_next_bit+0x87/0x130 [ 852.113293][T16744] __cpuhp_state_add_instance_cpuslocked+0x229/0x600 [ 852.120043][T16744] __cpuhp_state_add_instance+0x21/0x30 [ 852.125633][T16744] __ring_buffer_alloc+0x336/0x5d0 [ 852.130842][T16744] allocate_trace_buffers+0x70/0x2b0 [ 852.136198][T16744] trace_array_create+0x2d6/0xcb0 [ 852.141325][T16744] ? instance_mkdir+0xb9/0x120 [ 852.146139][T16744] instance_mkdir+0xc8/0x120 [ 852.150823][T16744] tracefs_syscall_mkdir+0xb7/0x110 [ 852.156091][T16744] vfs_mkdir+0x386/0x570 [ 852.160467][T16744] do_mkdirat+0x1d8/0x440 [ 852.164834][T16744] ? vfs_mkdir+0x570/0x570 [ 852.169296][T16744] __x64_sys_mkdirat+0x85/0x90 [ 852.174153][T16744] do_syscall_64+0x4c/0xa0 [ 852.178655][T16744] ? clear_bhb_loop+0x60/0xb0 [ 852.183478][T16744] ? clear_bhb_loop+0x60/0xb0 [ 852.188192][T16744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.194169][T16744] RIP: 0033:0x7fdc8159e0d9 [ 852.198620][T16744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.218315][T16744] RSP: 002b:00007fdc824a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 852.226797][T16744] RAX: ffffffffffffffda RBX: 00007fdc81826090 RCX: 00007fdc8159e0d9 [ 852.234851][T16744] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 852.242883][T16744] RBP: 00007fdc81635024 R08: 0000000000000000 R09: 0000000000000000 [ 852.250926][T16744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.258919][T16744] R13: 00007fdc81826128 R14: 00007fdc81826090 R15: 00007ffe48518d88 [ 852.267003][T16744] [ 852.270094][T16744] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 852.277394][T16744] CPU: 0 PID: 16744 Comm: syz.8.3234 Not tainted syzkaller #0 [ 852.284881][T16744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 852.295045][T16744] Call Trace: [ 852.298339][T16744] [ 852.301287][T16744] dump_stack_lvl+0x188/0x24e [ 852.305999][T16744] ? memcpy+0x3c/0x60 [ 852.310033][T16744] ? show_regs_print_info+0x12/0x12 [ 852.315267][T16744] ? load_image+0x410/0x410 [ 852.319848][T16744] panic+0x2d3/0x710 [ 852.323778][T16744] ? bpf_jit_dump+0xd0/0xd0 [ 852.328327][T16744] __warn+0x2f8/0x4f0 [ 852.332330][T16744] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 852.337734][T16744] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 852.343133][T16744] report_bug+0x2ba/0x4f0 [ 852.347499][T16744] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 852.352903][T16744] handle_bug+0x3a/0x70 [ 852.357131][T16744] exc_invalid_op+0x16/0x40 [ 852.361665][T16744] asm_exc_invalid_op+0x16/0x20 [ 852.366551][T16744] RIP: 0010:trace_rb_cpu_prepare+0x349/0x3c0 [ 852.372558][T16744] Code: f0 48 0f ab 08 31 c0 48 83 c4 30 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 d6 01 fd ff 48 c7 c7 e0 72 90 8a 44 89 f6 e8 17 89 c8 ff <0f> 0b b8 f4 ff ff ff eb d4 e8 b9 01 fd ff 0f 0b e9 07 fd ff ff e8 [ 852.392194][T16744] RSP: 0018:ffffc900153afa98 EFLAGS: 00010246 [ 852.398288][T16744] RAX: 04ccb0e518e45700 RBX: dffffc0000000000 RCX: 0000000000080000 [ 852.406287][T16744] RDX: ffffc900156ed000 RSI: 0000000000048381 RDI: 0000000000048382 [ 852.414285][T16744] RBP: ffff8880245f8988 R08: ffffc900153af727 R09: 1ffff92002a75ee4 [ 852.422289][T16744] R10: dffffc0000000000 R11: fffff52002a75ee5 R12: ffff8880575d48b0 [ 852.430289][T16744] R13: 0000000000000000 R14: 0000000000000001 R15: ffff8880245f8988 [ 852.438304][T16744] ? trace_rb_cpu_prepare+0x349/0x3c0 [ 852.443717][T16744] ? rb_get_reader_page+0xcd0/0xcd0 [ 852.448952][T16744] cpuhp_invoke_callback+0x481/0x7e0 [ 852.454273][T16744] ? __cpuhp_state_add_instance_cpuslocked+0x10b/0x600 [ 852.461156][T16744] ? rb_get_reader_page+0xcd0/0xcd0 [ 852.466384][T16744] ? mutex_lock_nested+0x10/0x10 [ 852.471353][T16744] cpuhp_issue_call+0x452/0x7f0 [ 852.476253][T16744] ? _find_next_bit+0x87/0x130 [ 852.481053][T16744] __cpuhp_state_add_instance_cpuslocked+0x229/0x600 [ 852.487766][T16744] __cpuhp_state_add_instance+0x21/0x30 [ 852.493347][T16744] __ring_buffer_alloc+0x336/0x5d0 [ 852.498488][T16744] allocate_trace_buffers+0x70/0x2b0 [ 852.503809][T16744] trace_array_create+0x2d6/0xcb0 [ 852.508863][T16744] ? instance_mkdir+0xb9/0x120 [ 852.513659][T16744] instance_mkdir+0xc8/0x120 [ 852.518279][T16744] tracefs_syscall_mkdir+0xb7/0x110 [ 852.523507][T16744] vfs_mkdir+0x386/0x570 [ 852.527780][T16744] do_mkdirat+0x1d8/0x440 [ 852.532135][T16744] ? vfs_mkdir+0x570/0x570 [ 852.536607][T16744] __x64_sys_mkdirat+0x85/0x90 [ 852.541396][T16744] do_syscall_64+0x4c/0xa0 [ 852.545840][T16744] ? clear_bhb_loop+0x60/0xb0 [ 852.550546][T16744] ? clear_bhb_loop+0x60/0xb0 [ 852.555254][T16744] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 852.561180][T16744] RIP: 0033:0x7fdc8159e0d9 [ 852.565623][T16744] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 852.585260][T16744] RSP: 002b:00007fdc824a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 852.593706][T16744] RAX: ffffffffffffffda RBX: 00007fdc81826090 RCX: 00007fdc8159e0d9 [ 852.601704][T16744] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c [ 852.609708][T16744] RBP: 00007fdc81635024 R08: 0000000000000000 R09: 0000000000000000 [ 852.617705][T16744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 852.625705][T16744] R13: 00007fdc81826128 R14: 00007fdc81826090 R15: 00007ffe48518d88 [ 852.633718][T16744] [ 852.637084][T16744] Kernel Offset: disabled [ 852.641638][T16744] Rebooting in 86400 seconds..