last executing test programs: 2m28.558787961s ago: executing program 3 (id=24): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000180)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r1, &(0x7f00000060c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000140)='@', 0x1}, {&(0x7f00000007c0)='y', 0x1}, {&(0x7f0000000340)="b9", 0x1}, {&(0x7f0000000940)="99", 0x1}, {&(0x7f00000008c0)='z', 0x1}, {&(0x7f00000009c0)='~', 0x1}, {&(0x7f0000000a00)='x', 0x1}, {&(0x7f0000000440)="06", 0x1}, {&(0x7f0000000580)='k', 0xffffffc6}, {&(0x7f00000006c0)="1d", 0x1}, {&(0x7f0000000800)='a', 0x1}, {&(0x7f0000000280)='$', 0x1}], 0xc}}, {{0x0, 0x0, &(0x7f00000035c0)=[{&(0x7f0000001040)="fc"}, {&(0x7f0000001080)="c9", 0x1}, {&(0x7f0000002180)='-', 0x1}, {&(0x7f0000002240)='R', 0x1}, {&(0x7f00000033c0)="c4", 0x1}], 0x5}}], 0x2, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4) 2m27.925158155s ago: executing program 3 (id=27): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@acl}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4f6, &(0x7f0000001000)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r0, 0x3) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0xfffd, 0x0, 0x0, 0x1, 0x7}, 0x0) 2m26.963865059s ago: executing program 3 (id=31): r0 = socket$netlink(0x10, 0x3, 0xb) syz_mount_image$jfs(&(0x7f0000000080), &(0x7f00000000c0)='./bus\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32], 0x1, 0x6353, &(0x7f0000008480)="$eJzs3c1vHGcdB/DfvvqltDU9VKVCyE3KSylN4qSEQIC2Bzhw6QHlihK5bhWRAkoCSiuLOPKFAyf+AhASR4Q4Ig78AT1w5QYXTkSykUA9MWjt54nHm93Yru2dtZ/PR3JmfvPMrp/xd2dfMjP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3/vu95daEXH9Z2nBQsSnohPRjpgb1IsRMbe4kNfvRsQLsdUczz+I6M1EDG6/9c+zEa9HxEfPRGxsri4PFl/cZz++84e//fYHT73919/3zv/3j3fHr3fv3i//86f7h9liAAAAKE9VVVUrfcx/MX2+bzfdKQBgIvLrf5Xk5ae+/tU/3/7zNPVHrVar1eoJ1HXVaPfrRUSs1W8zeM/gcDwAnDBr8XHTXaBB8i9aNyKearoTwFRrNd0BjsXG5upyK+Xbqr8eLG6353NBduW/1np0fce46V6GzzGZ1ONrPTrx3Jj+zE2oD9Mk598ezv/6dns/rXfc+U/KuPz725c+FSfn3xnOf8jpyb89Mv9S5fy7B8q/I38AAAAAAJhi+f//Fxo+/jtz+E3Zlycd/12cUB8AAAAAAAAA4Kgdavy/+h0d6fh/navj1jP+HwAAABzc4LP6wK+f2Vk27rvYBsuvtSKeHlofKEy6WGa+6X4AAAAAAAAAAAAAQEm62+fwXmtF9CLi6fn5qqoGP3XD9UEd9vYnXenbDyVr+kkeAAC2ffTM0LX8rYjZiLiWvuuvNz8/X1Wzc/PVfDU3k9/P9mdmq7na59o8HSyb6e/jDXG3Xw3ubLZ2u7q9Pi/v1T58f4Pf1a86++jYEemlv+aY5obCBoBk+9VowyvSKVNVz4578wG72P9PoYVYaPpxxfRr+mEKAAAAHL+qqqpW+jrvF9Mx/3bTnQIAJiK//g8fFzhU3R7THnE0969Wq9VqtfoT1XXVaPfrRUSs1W8zeM9gOH4AOGHW4uOmu0CD5F+0bkS80HQngKnWaroDHIuNzdXlVsq3VX89SOO753NBduW/1tq6Xb79qOlehs8xmdTjaz068dyY/jw/oT5Mk5x/ezj/69vt/bTecec/KePy729dMleenH9nOP8hpyf/9sj8S5Xz7x4o/478AQAAAABgiuX//18o+vivKxgAAAAAAAAAONk2NleX83Wv+fj/Z0es5/rP0ynn3zpo/nNpXv4nWs6/PZT/l4bW69TmH761s///e3N1+Xd3//WZPN1v/jN5ppUeWa30iGil39Tqpulhtu5x671Of/Cbeq12p5tOc6p678bNuBUrcWHXuu3099hpX9rVPuhpb1f7xV3t3cfaL+1q76XvHajmcvu5WI4fx614Z6t90Dazx/bP7tFe7dGe8+94/i9Szr9b+xnkP5/aW0PTgYcP2o/t9/XpqN/z5s3P/eLC8W/Ontaj82jb6gbbd6aB/mz9TZ7qx0/vrNw+d+/G3bu3lyJNdi29GGlyxHL+va2fmZ3n/7Pb7fl5v76/PnzQP3D+02I9umPzP1ubH2zvKxPuWxNy/v30k/N/J7WP3v9Pav5Xz/7j0+P3/1cb6BEAAAAAAAAAAAAAAAA8SVVVW5eIvhkRl9P1P01dmwkATFZ+/a+SvFytLrqOhenqTzF1Z8r6o1afvrquGu2NehERf6nfph0RPx91ZwDANPtfRPy96U7QGPkXLH/f32D6ctOdASbqzgcf/vDGrVsrt+803RMAAAAAAAAA4JPK438u1sZ/fjkiFobW2zX+61uxeNjxP7t55tEAo0c80PcY6+1+p10bbvyl2Bqf+9y48b/PxOPjf+cxcTv17Rijt0d7f4/2mT3aZ0cu3Ulr5IUeNTn/l2rjnQ/yf3Fo+PXTMf7rk8d/Hh7zvgQ5/zO1x/Mg/y8OrVfPv/rN1OW/tt8V16O9K//zd9//yfk7H3z42s33b7y38t7Kjy4tLV24dPnylStXzr9789bKhe1/j6fXUyDnn8e+dh5oWXL+OXP5lyXn//lUy78sOf8vpFr+Zcn55/d78i9Lzj9/9pF/WXL+r6Ra/mXJ+X851fIvy8bm6swg/1dTLf+y5P3/K6mWf1ly/q+lWv5lyfmfS7X8y5LzP5/qfeTv6+FPkZx/PsJl/y9Lzn8p1fIvS87/YqrlX5ac/6VUy78sOf/XUy3/suT8v5pq+Zcl53851fIvS87/a6mWf1ly/ldSLf+y5Py/nmr5lyXn/41Uy78sOf+rqZZ/WXL+30y1/MuS8/9WquVflpz/t1Mt/7Lk/N9ItfzLsvP9/2bMmDGTZ5p+ZgIAAAAAAAAAAAAAhk3idOKmtxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgp79xoj11nfD/zM3rx2EmIgBCd/A5vEhJBssutLfOFfFxOuDVAKJDT0gu1612apb3jtEiiSTQMlEkZFFRXpi7aAUBupqrAqXtCK0lSqenlVWlX0TUVbCalRFVBARWormq3mnOd5dmZ2busdr2fP+Xwk+7czc86cZ848c3Z+u/udAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANDojjfOf7qWZVn9X/7f1iy7sf715qmt+XWvu94jBAAAANbqf/P/n785XXGoj5UalvnrV/7d15aWlpayx0Z/a/zzS0vphqksG9+UZflt0ZV/e3+tcZngiWyyNtJweaTH5kd73D7W4/bxHrdP9Lh9U4/bJ3vcvmIHrLC5+HlMfmc78i+3Frs0uyUbz2/b0WatJ2qbRkbiz3JytXydpfHj2UJ2MpvPZpuWL5at5ct/4476tt6WxW2NNGxre32G/ODjx+IYamEf72ja1vJ9Rt97Qzb1wx98/Njvn3/utna1525our9inPfcWR/nJ8M1xVhr2aa0T+I4RxrGub3NczLaNM5avl7969ZxPt/nOEeXh7muWp/zyWwk//pb+X4aa/yxXtpP28N1/3VXlmWXlofdusyKbWUj2Zama0aWn5/JYkbW76M+lV6SjTXP05HOY65/dUcf87Re53Y0z9PW10R8/u8I6411eK00Pk3f+8TEiud9tfM0qj/qTq+V1jk46NfKsMzBOC++lT/oJ9vOwR3h8X/87s5zsO0xrs0cTI+7YQ7e2W4ONt7PyMRoPub0JNTydZbn4M6m5UfzLdXy+uzd3efgzPlTZ2cWP/qx+xdOHT0xf2L+9O6dO2d37927f//+meMLJ+dni/+vcm8Pvy3ZSHoN3Bn2XXwNvKZl2capuvSlwb0OJ7u8Dre2LDvo1+FY64Orrc8LcuWcLl4bj9R3+uTlkazDayx/fu5d++swPe6G1+FYw+uw7feUNq/DsfQOrPPrsH6/Z+/t7z3LWMO/dmO4Vt8LtjbMwdb3I61zcNDvR4ZlDk6GefHP93b+XrA9jPfJ6dW+HxldMQfTww3Hnvo16f3+5P68tJuXt9dvuGEiu7A4f+6Bx4+eP39uZxbKunhpw1xpna9bGh5TtmK+jqx6vh5aeOWTt7e5fmvYV5P31/+b7Phc1ZfZ80D35yr/7tZ+fzZduysLZbD+MTzn67Y/2303r+/P1Et22Z/1ZT45s/b34qkvbTj+jnc4/sa+/4Vie+munhgdHytev6Np74w3vS9qfqrG8mNXLd/28zP9HY/Hw7/1Ph7f0uV4vK1l2UEfj8dbH1w8Htd6/bRjbVqfz8kwT07Odj8e15fZtmu1c3Ks6/H4rlBrYf+/NnQKqS9qmDud5m3a1tjYeHhcY3ELzfN0d9Py46E3q2/r6V1XN0/vuau4r9H06Jat1zydall20PM0Ha86zdNar5++XZ3W53MyzItbdnefp/Vlntmz9mPn5vhlw7FzotccHB+dqI95PE3C4ni/tDnOwQeyY9mZ7GQ2l986kc+nWr6t6Qf7m4MT4d96Hyu3dZmD97QsO+g5mL6PdZp7tbGVD34AWp/PyTAvnnqw+xysL/OmfYN973pPuCYt0/DetfXna51+5nV7y266lj/zqo/zL/d1/9lsfZmT+1fbZ3bfT/eFa25os59aX7+dXlNz2frsp21hnM/t77yf6uOpL/P5A33Op0NZll388EP5z3vD71f++MK3v9b0e5d2v9O5+OGHvn/T8b9azfgB2PheKMqW4ntdw2+m+vn9PwAAALAhxL5/JNRE/w8AAAClEfv++Ffhif4fAAAASiP2/WOhJhXp/7e96bmFFy5mKZm/FMTb0254uFguZlxnw+WppWX16x/6yvyP/vRif9seybLsxw//atvltz0cx1WYCuO88ubm61eueLGv7R95dHm5xvz6F8P9x8fT7zRoF8GdzbLsGzd/Nt/O1Psv5/WZh4/k9T2XnnyivszzB4rLcf1nX1os/zsh/Hvo+NGm9Z8N++G7oc6+vf3+iOt99fJrt+973/L24nq1O1+UP+ynPlDcb/ycnM89USwf93On8f/ZZ57+an35x1/dfvwXR9qP/+lwv18J9b9fUSzf+BzUL8f1PhXGH7cX13vgy99sO/4rny6WP/uWYrkjocbt3xMu73jLcwuN++vx2tGmx5W9tVgubn/227+R3x7vL95/6/gnD19u2h+t8+OZfyjuZ6Zl+Xh93E70Jy3br99P4/yM23/614807ede27/ynmdfUb/f1u3f17LcaMv6rZ/Y9Luf+mzb7cXxHPqjs02P59C7w+s4bP+pD4T5GG7/nyufbdpudOTdzcefuPwXt15sejzR235YbP/K60/k9d+nfvTbN9x404suvaq+77LsW+8t7q/X9k/83pmm8X/p1nvz5yPeHjP6rdvvJG7/3EemT59ZvLAw17BX88/OeUcxnk2Tm7fUx3tzOLa2Xj585vwH589NzU7NZtlUeT9C76p9OdTvF+XSate/99HwfN7+hW9sufvvPxOv/6dHiusvv734vvWasNznwvVbi+dvqbbG7T91x63567v2THG5Kcc+ANt3/Mf+vhYMj7/1fUGc72df9sF8P9Rvy79vxNf1Gsf/nbnifr4e9utS+GTmO29d3l7j8vGzES6/t3i9r3n/hcNcfF7/IDzf7/xucf9xXPHxfie8j/nmtubjXZwfX7840nr/+ad4XArHk+xScXtcKu7vy8/f2nZ48XNIsku35Zd/M93Pbat6mJ0sfnRx5uTC6QuPz5yfXzw/s/jRjx0+debC6fOH88/yPPyhXusvH5+25Menufm9e7LZzVmWnclm1+GAdW3GX/+qv/GfffTY3L7Zu+fmjx+9cPz8o2fnz504trh4bH5u8e6jx4/Pf6TX+gtzB3fuOrB7367pEwtzB/cfOLD7wPTC6TP1YRSD6mHv7C9Pnz53OF9l8eCeAzsffHDP7PSpM3PzB/fNzk5f6LV+/r1pur72r0yfmz959PzCqfnpxYWPzR/ceWDv3l09Pw3w1Nnji1Mz5y6cnrmwOH9upngsU+fzq+vf+3qtTzkt/kvxfrZVrfggvuxd9+1Nn89a95VPdLyrYpGWDxB9LnwWzd+++Oz+fi7Hvn881KQi/T8AAABUQez7J0JN9P8AAABQGrHv3xRqov8HAACA0oh9/2SoSUX6f/l/+f/+8v/F7fL/1cr/n/1wkSvd6Pn/mJ+X/6+G65z/X/P25f/l/8uX/+8/P7/Rxy//L//PSsOW/499/+Ysq2T/DwAAAFUQ+/4toSb6fwAAACiN2PffEGqi/wcAAIDSiH3/jaEmFen/5f/7yv/v6hW4Kn/+3/n/5f+zjZn/j0+O/H9lrDp//75Hmi7K/wfy//L/8v/y//L/rNl4x1uuV/4/9v03hZpUpP8HAACAKoh9/4tCTfT/AAAAUBqx77851ET/DwAAAKUR+/6toSYV6f/l/53/X/5f/r/U+f+1nv+/YTDy/xuD8/93t8b8f4zjy/+vyP9Pyv9vxPz/+GDHv575/6XWb5Y98/89hy//zzUxbOf/j33/i0NNKtL/AwAAQBXEvv8loSb6fwAAACiN2Pe/NNRE/w8AAAClEfv+W0JNKtL/y//L/w9X/v8L99f3vPx/Qf6/cC3y/5MDOf9/8ZX8/3CR/+/O+f97cP7/auX/Bzz+ap3/f/zNrevL/9POsOX/Y9//slCTivT/AAAAUAWx77811ET/DwAAAKUR+/6Xh5ro/wEAAKA0Yt+/LdSkIv2//L/8/yry/xPO/y//32gj5//7Pv9/1/x/Qf5/uMj/dyf/34P8v/y//H9/+f82b37l/2ln2PL/se+/LdSkIv0/AAAAVEHs+28PNdH/AwAAQGnEvv//hZro/wEAAKA0Yt+/PdSkIv2//L/8/3Cd/1/+/1rn/++bkP+X/y83+f/u5P97kP+X/5f/PzNXn4Q9z/+/0mry/5t63RmlMWz5/9j3vyLUpCL9PwAAAFRB7PtfGWqi/wcAAIDSiH3/q0JN9P8AAABQGrHvnwo1qUj/L/9frvz/H/75U6/K5P/l/3tsv6T5/zgN5P8rTv6/O/n/HuT/5f/l//s7/38bzv9PO8OW/499/x2hJhXp/wEAAKAKYt9/Z6iJ/h8AAABKI/b9d4Wa6P8BAACgNGLfvyPUpCL9v/x/ufL/kfy//H+37Zc0/5/I/1eb/H8bDS9S+f8e5P/l/yuf/4/vfuX/GYxhy//Hvv/VoSYV6f8BAACgCmLff3eoif4fAAAASiP2/a8JNdH/AwAAQGnEvv+eUJOK9P/y//L/8v/y//L/7bcv/78xyf93t9r8/4T8v/y//H/F8v/O/89gXf/8f/HOLV6Off9rQ00q0v8DAABAFcS+/95QE/0/AAAAlEb8+83i7171/wAAAFBGse+fDjWpSP8v/y//X6X8f03+X/5f/r/05P+7c/7/HuT/5f/bjn8yHqm7kv+X/2el65//b74c+/77Q00q0v8DAABAFcS+/4FQE/0/AAAAlEbs+2dCTfT/AAAAUBqx758NNcn7//HrNKr1M4z5/xH5f/l/5//Pyf8X5P/l/1dD/r87+f8e5P/l/8t2/v8sk//nuhq2/H/s+3eGmvj9PwAAAJRG7Pt3hZro/wEAAKA0Yt+/O9RE/w8AAAClEfv+PaEmFen/hzH/n8n/y//L/+fk/wvy//L/qyH/3538fw/y//L/Zcv/O/8/19mw5f9j3/9gqElF+n8AAACogtj37w010f8DAABAacS+f1+oSej/2/1dNwAAALCxxL5/f6hJRX7/L/8/RPn/2hry/7/2N03bLnv+fyST/8+ue/5/s/x/qPL/w2U5f5/P17Lk/1tfFldN/r8H+X/5f/n/1eT/xxsvyP/TzrDl/2PffyDUpCL9PwAAAFRB7PtfF2qi/wcAAIDSiH3//w810f8DAABAacS+/ydCTSrS/8v/D1H+3/n/c87/v7zecOf/nf9f/n84Of9/d6XK/4/I/8v/D9f4K5j/byL/Tzt95v8/cfX5//hVf/n/2PcfDDWpSP8PAAAAVRD7/p8MNdH/AwAAQGnEvv/1oSb6fwAAACiN2PcfCjWpSP8v/y//L/8v/39t8v+vz1oNY/6/Pnnk/8tF/r+7UuX/nf9f/n/Ixi//L//PSsN2/v/Y978h1KQi/T8AAABUQez7Hwo10f8DAABAacS+/42hJvp/AAAAKI3Y978p1KQi/b/8v/y//L/8v/P/t9++/P/GNMj8f61hdsv/F+T/5f+7kf+X/5f/p9Ww5f9j3//mUJOK9P8AAABQBbHvf0uoif4fAAAASiP2/W8NNdH/AwAAQGnEvv9toSYV6f/l/+X/5f/l/+X/22+/3/x/9q/y/8Okwuf/H+9noUHk/w/J/8v/dyD/L/8v/0+rYcv/x77/p0JNKtL/AwAAQBXEvv/hUBP9PwAAAJRG7PvfHmrS3P/X2v19NwAAALAxxL7/HaEm/fz+/7FrNar1I/8v/1+1/P9oNfL/f9Ft+/L/zv9fZhXO//fF+f97kP+X/5f/l/9noIYt/x/7/neGmvj7fwAAACiN2Pf/dKiJ/h8AAABKI/b97wo10f8DAADA8FrlB/XFvv9nQk0q0v/L/8v/D1f+f+li43rO/+/8/9mg8v/1leT/K0H+vzv5/x7a5P83yf/L/8v/y/9z1YYt/x/7/neHmlSk/wcAAIAqiH3/e0JN9P8AAABQGrHvf2+oif4fAAAASiP2/Y+EmlSk/5f/r2T+Pz3k4cv/X/vz/8v/VzT/7/z/lSH/3538fw/O/z+g/PyN8v/y//L/5IYt/x/7/kdDTSrS/wMAAEAVxL7/faEm+n8AAAAojdj3/2yoif4fAAAASiP2/Y/l+ffq9f8lz/+3i+XnKp7/H+Lz/5ct/z/WND+qlP+fbHg+07yU/5f/Xwfy/91tlPz/1nXJ/29aeZX8/8Y8///kcIz/muf/w2ze3GF9+X+G0bDl/x/L15rM3h9qUpH+HwAAAKog9v0/F2qi/wcAAIDSiB3/zzdd0v8DAABAmcS+/xdCTSrS/5c8/9+R/L/8f+P+cv5/5/9vt335/41J/r+7jZL/d/5/+f+NOH7n/5f/Z6Vhy//Hvv8XQ006Nn7f/88+HiYAAAAwRGLf/4FQk4r8/h8AAACqIPb9h0NN9P8AAABQGrHvPxJqUpH+X/6/Nf8fz6gq/y//L/8v/y//vxENLv//8puyTP5f/l/+X/5f/l/+n7UYtvx/7PuPhppUpP8HAACAKoh9/y+Fmuj/AQAAoDRi338s1ET/DwAAAKUR+/65UJOK9P/XMf8/Ppz5f+f/v9r8/4/l//M8fX3myP/L/7cj/78+nP+/O/n/HsJh7sfjWSb/L/8v/y//z9oNW/4/9v3zoSYV6f8BAACgxNKPg2PffzzURP8PAAAApRH7/hOhJvp/AAAAKI3Y938w1KQi/b/z/8v/O///9Tj//1jT8vL/Bfl/+f9BkP/vTv6/B+f/l/+X/5f/Z6CGLf8f+/6FUJOK9P8AAABQBbHv/1Coif4fAAD4P/bu48muM63j+JGQ1OoVLqrYsGINGy9hQZk/gS07qliCiSYHyeQMJudgTM45g8nZ5JxMxqQJnuiZGk2p+3meVve9fU63+vS957zv57N5xhqZvvK0jX+Y77xAM3L3f0TcYv8DAABAM3L3f2Tc0sn+1//r/3vv/28Mw/3d9/+nf77+/5j+/wL9/239/xT9/zj9/wT9v/5f/6//Z1ZL6/9z9z8dt3Sy/wEAAKAHufs/Km6x/wEAAKAZufs/Om6x/wEAAKAZufs/Jm7pZP/r//X/2/r/mx31/8Ne3v8//fP1/8f0/97/n8NGf39r+887Lwo/t/9/8gOe+TD9v/5/nv7/oH5b/z+rfX9+/b/+n01L6/9z939s3NLJ/gcAAIAe5O7/uLjF/gcAAIBm5O7/+LjF/gcAAIBm5O5/Jm7pZP/30f9vxp9H/f/dk8+R9P/9vf8/XL3/f6Kp/v9F/b/+f928/z9O/z/B+//6f/2//p9ZLa3/z93/CXFLJ/sfAAAAepC7/xPjFvsfAAAAmpG7/5PiFvsfAAAAmpG7/5Pjlk72fx/9/ybv/zfc/99s9f3/O97/P/Pr0f/r/7fR/4/T/09YU///4N4y+/8P0v/r//X/nFha/5+7/1Pilk72PwAAAPQgd/+nxi32PwAAADQjd/+nxS32PwAAADQjd/+nxy2d7H/9v/5/X/1//tnWwPv/O+r/d/T+v/5f/79yzw8nf03Q/2/S/0+Y6P+HYUH9/5rf/9/+y1vP5z+H/l//z6al9f+5+z8jbvngYbjzuL9IAAAAYFFy939m3NLJP/8HAACAHuTuvxe32P8AAADQjNz99+OWTva//l//39z7//p//b/+v2ve/x939f7//Z54+sPX2f9fqOtc0/v/a+7/r8m+P//8/f/D7wz9P+u2tP4/d/+zcUsn+x8AAAB6kLv/s+IW+x8AAACakbv/s+MW+x8AAACakbv/c+KWTva//r+1/v89Tv1+j/T/R7WL/n+s/39S/3/m5+n/F9P/Hwz6/wvT/4/z/v+Eo7/MHdZv6v/1/52////whx/p/8f/WzT0/2yztP4/d//nxi2d7H8AAADoQe7+z4tb7H8AAABoRu7+z49b7H8AAABoRu7+L4hbOtn/u+n/twf5+n/v/y+r//f+v/5/sf2/9/8vod/+//BCP0v/P6GV9/8f8781Yt/9/FXt+/M32P97/58rW1r/n7v/C+OWTvY/AAAA9CB3/xfFLfY/AAAANCN3/xfHLfY/AAAANCN3/5fELZ3sf+//6//X0f/nV9D/6/+vv/9P+v91mr//P/4OWX7/fzH6/wmt9P+Pad/9/No/v/5f/8+mpfX/ufu/NG7pZP8DAABAD3L3f1ncYv8DAABAM3L3f3ncYv8DAABAM3L3f0Xc0sn+1//r/9fR/3v/X//v/X/9/8X0+/7/xej/J+j/9f/6f/0/s1pa/5+7/7m4pZP9DwAAAD3I3f+VcYv9DwAAAM3I3f9VcYv9DwAAAM3I3f/VcUsn+1//r//X/+v/9f/bv77+f530/+P0/xP0//p//b/+n1ktqP9/5Pe6O3xN3NLJ/gcAAIAe5O7/2rjF/gcAAIBm5O7/urjF/gcAAIBm5O7/+rilk/2v/19M/3+U87XV/x8Ow6D/Hzrt/w8f+c+zvi/1//r/HdhV/x9Zegf9/ysvHH/nHtP/6//H6P/1//p/zlpQ/3/027n7vyFu6WT/AwAAQA9y939j3GL/AwAAQDNy939T3GL/AwAAQDNy939z3NLJ/tf/L6b/P9JW/+/9/7PfHz31/97/36T/3w3v/4/z/v+Envv/O/vv569q359f/6//Z9PS+v/c/d8SN925/di/RAAAAGBhcvd/a9zSyT//BwAAgB7k7v+2uMX+BwAAgJV6buNHcvd/e9zSyf7X/8/b/9955Mf0//r/s98f+n/9v/7/+un/x+n/J/Tc/y+gn1/759f/6//ZNHv///6nf/Cy/X/u/u+IWzrZ/wAAANCD3P3Pxy32PwAAADQjd/93xi32PwAAADQjd/8LcUsn+1//7/1//b/+X/+//evr/9dJ/z9O/z+hqf7/1qV+6cOZfv59DodB/7/z/v/g5F/q/1mDs3/XtukS/f+DBw/uTff/p/929NL9f+7+74pbOtn/AAAA0IPc/d8dt9j/AAAA0Izc/d8Tt9j/AAAA0Izc/d8bt3Sy//X/nfb/+a2+rv7//jDo//X/+n/9/zj9/zj9/4Sm+v/L23c/v/bP7/1//T+bZn///4r9f+7+74tbOtn/AAAA0IPc/d8ft9j/AAAA0Izc/T8Qt9j/AAAA0Izc/T8Yt3Sy//X/nfb/3v/X/+v/d93/vzbo/3diFf3/4flff+n9/7OL7f8P9P8z2Hc/v7rP/yEfeOo39f/6fzYtrf/P3f9DcUsn+x8AAAB6kLv/h+MW+x8AAACakbv/R+IW+x8AAACakbv/R+OmW53sf/2//l//r//X/2//+jt+///OMAz6/xmsov8fsfT+f573/8/+WX7C+//6/zV/fv2//p9NS+v/c/f/WNzSyf4HAACAHuTu//G4xf4HAACAZuTu/4m4xf4HAACAZuTu/8m4pZP9r//X/+v/5+v/b5zz/aD/j++HffX/z66i//f+/0yu1t8f6P/Ttfb/59P/6//X/Pn1//p/Lm5f/X/u/p+KWzrZ/wAAANCD3P0/HbfY/wAAANCM3P0/E7fY/wAAANCM3P0/G7d0sv/1//r/y/T/+Tn1/229/3+wuP7/7qn/eZ28/6//n4n3/8fp/yfo//X/+v/n9P/MaWnv/+fu/7m4pZP9DwAAAD3I3f/zcev/dGv/AwAAQDNy9/9C3GL/AwAAQDNy9/9i3NLJ/tf/6/+9/6//b/79f/1/V/T/4/T/E/T/19DPP/zU+v8V9f/e/2dWS+v/c/f/UtzSyf4HAACAHuTu/+W4xf4HAACAZuTu/5W4xf4HAACAZuTufzFu6WT/6//1//r/Bfb/73X87+v/j+2i/7+p/2+G/n/cbvr/Q/2//r/6+RvxZ4H+X/8/9fvTpqX1/7n7fzVu6WT/AwAAQA9y9/9a3GL/AwAAQDNy9/963GL/AwAAwCrd2vJjuft/I27pZP/r//X/+v8F9v9B/3/M+//6/8vYS/+f3xT6f+//h376//c99VtX7ed3/fnP/u8v/b/+n/ktrf/P3f+bcUsn+x8AAAB6kLv/t+IW+x8AAACakbv/t+MW+x8AAACakbv/d+KWTva//n8d/X9+Z+r/9f/6f/2//n+c9//H6f8n6P/3+n7+2j+//l//z6al9f+5+383bulk/wMAAEAPcvf/Xtxi/wMAAEAzcvf/ftxi/wMAAEAzjnZ/xmUd7n/9/zr6f+//6//1//p//f/F6P/H6f8n6P/1//p//T+zWlr//wdHv9fd4Q/jlk72PwAAAPQgd/9LcYv9DwAAAIt0/v+rwPly9/9R3GL/AwAAQDNy9/9x3NLJ/tf/6//X0f8/ePDgnv5f/3/613PS/7+s/6fo/8fp/yfo//X/+n/9P7NaWv+fu/9P4pZO9j8AAAD0IHf/n8Yt9j8AAAA0I3f/n8Ut9j8AAAA0I3f/n8ctnex//f8C+v+7+n/v/+v/B+//6/9nov8fp/+f0GL/f/fiv/x99/NXte/Pr//X/7PpdP//3vXj++r/c/f/RdzSyf4HAACAHuTu/8u4xf4HAACAZuTu/6u4xf4HAACAZuTu/+u4pZP9r//fXf//8I9dL+//Hw7bP7/+X/+v/9f/Xzf9/zj9/4QW+/9L2Hc/v/bPr//X/7PpQu//3z758evu/3P3/03ccnr43b7MrxEAAABYltz9fxu3dPLP/wEAAKAHufv/Lm6x/wEAAKAZufv/Pm7pZP/r/xfw/n+D/b/3/7d/f+j/F93/39T/t0H/P07/P0H/r//X/8/U/+d3s/6/dxfq/x/5+7vr7v9z9/9D3NLJ/gcAAIAe5O7/x7jF/gcAAIBm5O7/p7jF/gcAAIBm5O5/OW55ZP9va7tbof/X/+v/9f/6/+1fX/+/Tvr/cRft/w+Gq/X/Sf+v/9f/99r/e/+fY0vr/3P3/3Pc4p//AwAAwOrcPufHc/f/S9xi/wMAAEAzcvf/a9xi/wMAAEAzcvf/W9zy6s19faSd0v/r/1vt/+/o/8/9+vp//X/L9P/jvP8/Qf8/Rz//lP6/jf5/GPT/XMI5f7VdWv+fu//f4xb//B8AAACakbv/P+IW+x8AAADW5KWxfzN3/3/GLfY/AAAANCN3/3/FLZ3s/xvDcF//f0L/f+n+/yjNXGL/7/3/87++/l//3zL9/zj9/wT9v/f/9f/e/2dWS+v/c/e/Erd0sv8BAACgB7n7/ztusf8BAACgGbn7/ydusf8BAACgGbn7/zdu6WT/7+39//hDfdz/P7X5ua6h/3/Xiyf/Wv/f/vv/+v/zv77+X//fMv3/uMv1/3fr7wzyh/X/+v8x+n/9v/6fs5bW/+fu/7+4pZP9DwAAAD3I3f//cYv9DwAAAM3I3f+6uMX+BwAAgGbk7n993NLJ/t9b/9/M+//HgYr+//Tn1/+fpv+P7wf9v/5/B/T/47z/v139B6X/1//r//X/zGpp/X/u/jfELZ3sfwAAAOhB7v43xi32PwAAADQjd/+rcYv9DwAAAM3I3f+muKWT/a//9/6//l//r//f/vX1/+uk/x+3z/7/Q99z+st6/3/v/X9+BP2//l//zyyW1v/n7n9z3NLJ/gcAAIAe5O5/S9xi/wMAAEAzcve/NW6x/wEAAKAZufvfFrd0sv8n+v+D+olX6P+3tfGD/l//r//X/+v/64+q/n8++v9x3v+foP/3/r/+f47+/96g/ycsrf/P3f/2uKWT/Q8AAAA9yN3/Wtxi/wMAAEAzcve/I26x/wEAAKAZufvfGbd0sv+9/7+m/v8p/b/+X/+v/9f/T9D/j9P/T9D/6//1/97/Z1ZL6/9z9787AAD//7xJOzA=") openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x4c942, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) setxattr$security_capability(0x0, 0x0, 0x0, 0x0, 0x0) unlink(&(0x7f0000000080)='./file1\x00') openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close_range(r0, 0xffffffffffffffff, 0x0) 2m25.70840415s ago: executing program 3 (id=38): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x1008000, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000000b00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1ec) socket$netlink(0x10, 0x3, 0x4) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x404c2, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) 2m23.312025201s ago: executing program 3 (id=45): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x12, 0x5, 0x4, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000140)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1e, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={r5, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6fc}}, 0x40) syz_emit_ethernet(0x82, &(0x7f0000001780)={@local, @empty, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x7, 0x1, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x9, 0x6, "896df4", 0x44, 0x2f, 0xff, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x1, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x8, 0x88be, 0x1, {{0x4, 0x1, 0xfb, 0x0, 0x0, 0x3, 0x0, 0x4}, 0x1, {0x3}}}, {0x8, 0x22eb, 0x4, {{0x1, 0x2, 0x8, 0x1, 0x0, 0x0, 0x7, 0x4}, 0x2, {0x3, 0x0, 0x0, 0x1a, 0x1, 0x1, 0x3, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}, 0x0) 2m21.831506831s ago: executing program 3 (id=50): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0), 0x0, 0x800) 2m21.474329835s ago: executing program 32 (id=50): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_pidfd_open(0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x239, &(0x7f0000000380)={0x0, 0xfbc6, 0x10100, 0x8000003}, &(0x7f0000000080)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x230}}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) poll(&(0x7f00000000c0), 0x0, 0x800) 15.721347616s ago: executing program 4 (id=577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) write$tun(r1, &(0x7f00000006c0)=ANY=[], 0x16) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 14.402930365s ago: executing program 4 (id=584): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x1c, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x40000, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x3, 0xfff3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x6b7, 0x80, 0x800, 0xffffffff, 0x91b1}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000400}, 0x800) sendto$inet(r2, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 9.097137144s ago: executing program 4 (id=598): ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000040)={0x0, 0x1, 0xc000, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, &(0x7f00000000c0)="b882008ee8f3cf66b80500000066b9f10000000f01c10fc7ba8c9eba610066ed0f01f766b80500000066b90b0000000f01c1ba6100eddfdfbaa10066b80098000066ef", 0x43}], 0x1, 0x5c, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000300)={0x0, 0x18, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.296028178s ago: executing program 1 (id=599): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000000c0)=ANY=[@ANYBLOB="12"], 0x1000f) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x1, 0x2}, 0x28) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, 0x0}, 0x4048043) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x1800) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@ethernet={0x0, @remote}, &(0x7f0000000080)=0xfffffeb1) 8.25406624s ago: executing program 2 (id=600): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "d607f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f001d34c09f39c3539e4f8d3ee0878ae95bc7f52363c468b257ff3e24852548deb01efd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3b90400000000000000c279f03558083906666827d61dcc3a633bffff250b5a293e3877adc1660edbc9a0307a25720a170e7f5670e419dc44febf7ddc73fd4a5a0b6c28665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "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"}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x2, 0x0, 0xe, 0x8000000000000006}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 8.178940576s ago: executing program 1 (id=601): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x4088080, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) 8.104532743s ago: executing program 0 (id=602): r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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") fdatasync(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d440fe0000000000002900000002000000", 0xfe60) 7.276937301s ago: executing program 1 (id=603): fsopen(&(0x7f0000000100)='ramfs\x00', 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) pipe(&(0x7f00000004c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.199677207s ago: executing program 2 (id=604): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresuid(0xee01, 0xee01, 0x0) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f0000000200)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x48, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff) 6.422592395s ago: executing program 4 (id=605): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x28003, 0x0) socket(0x10, 0x803, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/power/pm_print_times', 0x20206, 0xac) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/pm_test', 0x42, 0x18) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa010101}, {0x2, 0x0, @local}, {0x2, 0x4e24, @rand_addr=0x6}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 5.775748636s ago: executing program 2 (id=606): socket$alg(0x26, 0x5, 0x0) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x3) close(0x3) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x4, 0x0, 0x2000}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x6, 0x3, 0x7ffcfffc}]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff5000/0xb000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x2000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000817000/0x3000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000140)=0x6, 0x4) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f280, 0x0, 0x399}) io_uring_enter(r2, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 5.709305864s ago: executing program 0 (id=607): getdents64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f00000012c0)={'syz', 0x2}, &(0x7f00000002c0)="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", 0x430, 0xfffffffffffffffe) keyctl$search(0x3, r3, 0x0, 0x0, 0x0) 5.183836379s ago: executing program 4 (id=608): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r4 = dup(r3) write$FUSE_BMAP(r4, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e6"], 0xb0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000200)={0x30, 0x5, 0x0, {0x0, 0x1, 0x5, 0xfffffffb}}, 0x30) write$FUSE_DIRENTPLUS(r4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b0000000000000", @ANYRES64=r3], 0xb0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',posixacl']) 5.064228046s ago: executing program 2 (id=609): socket$nl_xfrm(0x10, 0x3, 0x6) openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000000)) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200060000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 4.571490066s ago: executing program 1 (id=610): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) 4.48012171s ago: executing program 0 (id=611): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) open(&(0x7f0000000140)='./file1\x00', 0x60142, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000002400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) write$FUSE_INIT(r1, &(0x7f0000002300)={0x50, 0x0, r2, {0x7, 0x9, 0x0, 0x1030002, 0x0, 0x0, 0x2}}, 0x50) read$FUSE(r1, &(0x7f00000065c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r1, &(0x7f0000002240)={0x10, 0xffffffffffffffda, r3}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080), 0x20080, 0x0) dup3(r4, r1, 0x0) close(0x3) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) close(r0) 3.623848963s ago: executing program 1 (id=612): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}}, 0xc000) sendmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000640)="3013f93f6a23826aeaa571d88a1fc628ec108a5ce411744d4e3ae79c5374eb3bdc7564d840b7d870c0da80f54b31a033a88be722054380d9761c", 0x3a}, {&(0x7f00000006c0)="ac5bf07dfbe37df362733fa6e33fcfe007a76905029bf5f167a7418ebe47895ee8a38f7c4ae25d6ae91633bc0b5bcd5572d067fa7af73dfb4605ec2b21cbe0ca844c8033fe927cd5f154695e5c65c966e80d4a08ff27a975d2ae54226a99d873d2ad6297b9e8c1365a36ae", 0x6b}, {&(0x7f0000001400)="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", 0xff1}], 0x3, &(0x7f0000002400)=[{0xe10, 0x1, 0x8, "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"}], 0xe10}, 0x40000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.432197008s ago: executing program 2 (id=613): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000240)="800000800000210ee7decd7a0000", 0xe, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.405609163s ago: executing program 0 (id=614): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000002ac0)=[{&(0x7f0000000340)=""/1, 0x1}], 0x1}, 0xe75}], 0x3aa0, 0x60002000, 0x0) 3.33292699s ago: executing program 4 (id=615): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f00000069c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5531, &(0x7f0000006b80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000000)={0xfffffffb}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b7000000ecffffffbca30000000000002403000020feffff720af0fff8ffffff71a4f2ff000000001f030000000000002e100200000000002604fdffff02000014010000000000001d130000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a274000000000000000000000000000000000000000000000009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 1.181050846s ago: executing program 0 (id=616): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r3, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 926.147999ms ago: executing program 2 (id=617): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001000)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$unix(0x1, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56741, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {0xffe6, 0xb}, {0x8, 0xfff2}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4048080) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 94.447337ms ago: executing program 0 (id=618): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019c80)=""/102400, 0x19000) r3 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) ioctl$SNDCTL_DSP_POST(r3, 0x5008, 0x0) ioctl$SNDCTL_DSP_GETBLKSIZE(r3, 0xc0045004, 0x0) 0s ago: executing program 1 (id=619): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x0, 0x8000000000000001, 0x7, 0x6, 0x7f, 0x7fffffff}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0x10}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x80}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r6, &(0x7f0000000080)="ba", 0x1, 0x40844, &(0x7f00000001c0)={0x11, 0x2, r5, 0x1, 0xdb, 0x6, @random="b4112d397bb5"}, 0x14) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.180' (ED25519) to the list of known hosts. [ 64.594823][ T5751] cgroup: Unknown subsys name 'net' [ 64.772859][ T5751] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.128749][ T5751] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.146555][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.159279][ T5766] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.169165][ T5766] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.187400][ T5766] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.200729][ T5766] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 68.216811][ T5766] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.252183][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.259662][ T5768] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.268451][ T5775] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.275977][ T5768] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.284067][ T5775] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.291260][ T5768] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.300136][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.300432][ T5768] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.308468][ T5775] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 68.315473][ T5768] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 68.323347][ T5775] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.330138][ T5768] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.359155][ T5775] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.368072][ T5775] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.375718][ T5775] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.386572][ T5775] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.394666][ T5775] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 68.402995][ T5775] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 68.690191][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 68.820031][ T5763] chnl_net:caif_netlink_parms(): no params data found [ 68.919071][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 68.930583][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.946084][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.953548][ T5767] bridge_slave_0: entered allmulticast mode [ 68.960833][ T5767] bridge_slave_0: entered promiscuous mode [ 68.997141][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.004257][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.011760][ T5767] bridge_slave_1: entered allmulticast mode [ 69.020248][ T5767] bridge_slave_1: entered promiscuous mode [ 69.051204][ T5763] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.058522][ T5763] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.065691][ T5763] bridge_slave_0: entered allmulticast mode [ 69.072820][ T5763] bridge_slave_0: entered promiscuous mode [ 69.091419][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 69.102137][ T5763] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.109866][ T5763] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.117274][ T5763] bridge_slave_1: entered allmulticast mode [ 69.123947][ T5763] bridge_slave_1: entered promiscuous mode [ 69.167371][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.202877][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.210839][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.218163][ T5776] bridge_slave_0: entered allmulticast mode [ 69.225266][ T5776] bridge_slave_0: entered promiscuous mode [ 69.245567][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.275525][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.282935][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.290251][ T5776] bridge_slave_1: entered allmulticast mode [ 69.296981][ T5776] bridge_slave_1: entered promiscuous mode [ 69.308176][ T5763] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.351317][ T5763] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.364007][ T5767] team0: Port device team_slave_0 added [ 69.393915][ T5767] team0: Port device team_slave_1 added [ 69.412592][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.446631][ T5763] team0: Port device team_slave_0 added [ 69.462077][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.482585][ T5763] team0: Port device team_slave_1 added [ 69.491715][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.499446][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.506860][ T5772] bridge_slave_0: entered allmulticast mode [ 69.513685][ T5772] bridge_slave_0: entered promiscuous mode [ 69.521830][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.529483][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.537030][ T5772] bridge_slave_1: entered allmulticast mode [ 69.543711][ T5772] bridge_slave_1: entered promiscuous mode [ 69.559270][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.566494][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.592506][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.605407][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.612725][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.638869][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.708837][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.716049][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.742357][ T5763] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.764481][ T5776] team0: Port device team_slave_0 added [ 69.780692][ T5763] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.788964][ T5763] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.815726][ T5763] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.840840][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.853472][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.864323][ T5776] team0: Port device team_slave_1 added [ 69.874658][ T5767] hsr_slave_0: entered promiscuous mode [ 69.881027][ T5767] hsr_slave_1: entered promiscuous mode [ 69.949322][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.956721][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.983106][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.997527][ T5772] team0: Port device team_slave_0 added [ 70.006785][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.013742][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.040638][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.073414][ T5763] hsr_slave_0: entered promiscuous mode [ 70.081810][ T5763] hsr_slave_1: entered promiscuous mode [ 70.088498][ T5763] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.096822][ T5763] Cannot create hsr debugfs directory [ 70.104756][ T5772] team0: Port device team_slave_1 added [ 70.145725][ T5776] hsr_slave_0: entered promiscuous mode [ 70.152070][ T5776] hsr_slave_1: entered promiscuous mode [ 70.158543][ T5776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.166357][ T5776] Cannot create hsr debugfs directory [ 70.261194][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.268622][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.295634][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.306524][ T5775] Bluetooth: hci0: command tx timeout [ 70.338174][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.345144][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.371371][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.382013][ T5775] Bluetooth: hci2: command tx timeout [ 70.382030][ T5771] Bluetooth: hci1: command tx timeout [ 70.455976][ T5775] Bluetooth: hci3: command tx timeout [ 70.507739][ T5772] hsr_slave_0: entered promiscuous mode [ 70.513936][ T5772] hsr_slave_1: entered promiscuous mode [ 70.520518][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 70.528266][ T5772] Cannot create hsr debugfs directory [ 70.679455][ T5763] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 70.733031][ T5763] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 70.743082][ T5763] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 70.762362][ T5763] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 70.851622][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.878474][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.900810][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.930078][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.945964][ T5772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.958529][ T5772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.989513][ T5772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.000017][ T5772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.081263][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.091035][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.102167][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.113913][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.200611][ T5763] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.247138][ T5763] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.285208][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.292757][ T4687] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.323859][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.332690][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.339906][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.397618][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.441025][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.454055][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.483366][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.490567][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.512536][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.539090][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.567051][ T4438] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.574231][ T4438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.591446][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.593616][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.598695][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.606339][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.641460][ T4438] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.648588][ T4438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.673200][ T4803] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.680412][ T4803] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.761096][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.768320][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.794382][ T5772] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.907787][ T5763] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.000270][ T5763] veth0_vlan: entered promiscuous mode [ 72.043778][ T5763] veth1_vlan: entered promiscuous mode [ 72.095264][ T5763] veth0_macvtap: entered promiscuous mode [ 72.147019][ T5763] veth1_macvtap: entered promiscuous mode [ 72.220076][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.242710][ T5763] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.289706][ T5763] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.300660][ T5763] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.309888][ T5763] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.319335][ T5763] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.363600][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.378820][ T5775] Bluetooth: hci0: command tx timeout [ 72.389081][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.404400][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.457571][ T5775] Bluetooth: hci2: command tx timeout [ 72.463061][ T5775] Bluetooth: hci1: command tx timeout [ 72.531152][ T5772] veth0_vlan: entered promiscuous mode [ 72.541481][ T5775] Bluetooth: hci3: command tx timeout [ 72.580983][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.589130][ T5772] veth1_vlan: entered promiscuous mode [ 72.600887][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.629444][ T5767] veth0_vlan: entered promiscuous mode [ 72.651548][ T4438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.673103][ T4438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.685062][ T5767] veth1_vlan: entered promiscuous mode [ 72.717354][ T5776] veth0_vlan: entered promiscuous mode [ 72.743945][ T5772] veth0_macvtap: entered promiscuous mode [ 72.761942][ T5776] veth1_vlan: entered promiscuous mode [ 72.771965][ T5767] veth0_macvtap: entered promiscuous mode [ 72.811209][ T5767] veth1_macvtap: entered promiscuous mode [ 72.820830][ T5772] veth1_macvtap: entered promiscuous mode [ 72.850259][ T5776] veth0_macvtap: entered promiscuous mode [ 72.893520][ T5776] veth1_macvtap: entered promiscuous mode [ 72.909307][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.924632][ T5831] syz.3.4[5831]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 72.925717][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.953746][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.965083][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.977032][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 72.987200][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 72.997809][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.009691][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.031437][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.043313][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.056356][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.070761][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.082007][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.092056][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.103666][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.116715][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.129496][ T5772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.139517][ T5772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.148896][ T5772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.158162][ T5772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.174428][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.186302][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.196617][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.207514][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.217965][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.228875][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.240538][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.251385][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.262246][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.271263][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.280296][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.299153][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.310793][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.322014][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.332766][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.343454][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.353239][ T5831] loop3: detected capacity change from 0 to 32768 [ 73.354428][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.372183][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.400640][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.426514][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.438447][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.448346][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.594213][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.614779][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.670641][ T4803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.691122][ T4803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.712781][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.724363][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.775460][ T4687] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.790630][ T4687] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.854081][ T4687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.875982][ T4687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.956749][ T4803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.964623][ T4803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.375745][ T5843] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 74.393261][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 74.456081][ T5775] Bluetooth: hci0: command tx timeout [ 74.538421][ T5775] Bluetooth: hci2: command tx timeout [ 74.544310][ T5775] Bluetooth: hci1: command tx timeout [ 74.616272][ T5771] Bluetooth: hci3: command tx timeout [ 74.964619][ T5852] binder_alloc: 5851: binder_alloc_buf size -16 failed, no address space [ 74.994415][ T5852] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 75.396228][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.563081][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 75.828408][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.840627][ T5867] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 75.972463][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.196939][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.208187][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.216800][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.277265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.286689][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 76.535990][ T5771] Bluetooth: hci0: command tx timeout [ 76.616827][ T5771] Bluetooth: hci1: command tx timeout [ 76.617347][ T5775] Bluetooth: hci2: command tx timeout [ 76.696898][ T5775] Bluetooth: hci3: command tx timeout [ 77.229174][ T5880] loop2: detected capacity change from 0 to 4096 [ 77.473121][ T5889] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 79.014966][ T5904] loop2: detected capacity change from 0 to 32768 [ 79.136340][ T5904] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 79.298854][ T5904] XFS (loop2): Ending clean mount [ 79.325231][ T5927] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 79.334108][ T5904] XFS (loop2): Quotacheck needed: Please wait. [ 79.416407][ T5904] XFS (loop2): Quotacheck: Done. [ 79.513114][ T5929] loop3: detected capacity change from 0 to 512 [ 79.575648][ T5929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 79.667432][ T5929] EXT4-fs error (device loop3): ext4_orphan_get:1398: inode #15: comm syz.3.27: iget: bad i_size value: 38620345925642 [ 79.758850][ T5929] EXT4-fs error (device loop3): ext4_orphan_get:1403: comm syz.3.27: couldn't read orphan inode 15 (err -117) [ 79.806951][ T5776] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 79.827394][ T5929] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.043273][ T5929] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm syz.3.27: bg 0: block 5: invalid block bitmap [ 80.080178][ T5929] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 228 with error 28 [ 80.105999][ T5929] EXT4-fs (loop3): This should not happen!! Data will be lost [ 80.105999][ T5929] [ 80.140202][ T5929] EXT4-fs (loop3): Total free blocks count 0 [ 80.156097][ T5929] EXT4-fs (loop3): Free/Dirty block details [ 80.162167][ T5929] EXT4-fs (loop3): free_blocks=0 [ 80.172281][ T5929] EXT4-fs (loop3): dirty_blocks=232 [ 80.182361][ T5929] EXT4-fs (loop3): Block reservation details [ 80.196227][ T5929] EXT4-fs (loop3): i_reserved_data_blocks=232 [ 80.201318][ T5932] loop1: detected capacity change from 0 to 32768 [ 80.267660][ T5932] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 80.343628][ T5932] XFS (loop1): Ending clean mount [ 80.441184][ T5763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.473294][ T27] audit: type=1800 audit(1773270235.832:2): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.28" name="file1" dev="loop1" ino=4422 res=0 errno=0 [ 81.312753][ T5772] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 81.367819][ T5953] loop3: detected capacity change from 0 to 32768 [ 81.420829][ T27] audit: type=1800 audit(1773270236.762:3): pid=5953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.31" name="bus" dev="loop3" ino=7 res=0 errno=0 [ 81.831383][ T1187] cfg80211: failed to load regulatory.db [ 82.975872][ T5809] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 83.080012][ T5981] loop3: detected capacity change from 0 to 40427 [ 83.159383][ T5981] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 83.174475][ T5981] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 83.206513][ T5809] usb 2-1: Using ep0 maxpacket: 8 [ 83.216569][ T5809] usb 2-1: config 0 has no interfaces? [ 83.224799][ T5809] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 83.238676][ T5809] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.249327][ T5981] F2FS-fs (loop3): invalid crc value [ 83.259341][ T5809] usb 2-1: config 0 descriptor?? [ 83.485059][ T5981] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 83.503553][ T5981] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 84.048105][ T5763] syz-executor: attempt to access beyond end of device [ 84.048105][ T5763] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 84.075312][ T5763] syz-executor: attempt to access beyond end of device [ 84.075312][ T5763] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 84.146350][ T1076] kworker/u4:5: attempt to access beyond end of device [ 84.146350][ T1076] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 84.168583][ T1076] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 84.188175][ T1076] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 84.195145][ T1076] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 85.498817][ T6005] loop0: detected capacity change from 0 to 40427 [ 85.537895][ T6005] F2FS-fs (loop0): Wrong NAT boundary, start(2560) end(3584) blocks(83968) [ 85.547012][ T6005] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 85.557853][ T6005] F2FS-fs (loop0): Fix alignment : done, start(4096) end(16896) block(12288) [ 85.571865][ T6005] F2FS-fs (loop0): invalid crc value [ 85.589611][ T6005] F2FS-fs (loop0): Found nat_bits in checkpoint [ 85.666325][ T5869] usb 2-1: USB disconnect, device number 2 [ 85.765613][ T6005] F2FS-fs (loop0): Start checkpoint disabled! [ 85.874245][ T6005] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 85.906509][ T6005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 86.025608][ T6005] capability: warning: `syz.0.46' uses deprecated v2 capabilities in a way that may be insecure [ 86.060444][ T6019] loop2: detected capacity change from 0 to 4096 [ 86.073459][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.109757][ T6019] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.295235][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.415994][ T5869] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 86.441381][ T5771] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.454865][ T5771] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.489657][ T5771] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.499087][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.518548][ T5771] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.530968][ T5771] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.540934][ T5771] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.586433][ T5869] usb 1-1: device descriptor read/64, error -71 [ 86.640578][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.866403][ T5869] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 86.898880][ T6025] chnl_net:caif_netlink_parms(): no params data found [ 87.056121][ T5869] usb 1-1: device descriptor read/64, error -71 [ 87.183309][ T5869] usb usb1-port1: attempt power cycle [ 87.206722][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.460308][ T6025] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.472922][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.480574][ T6025] bridge_slave_0: entered allmulticast mode [ 87.500733][ T6048] loop2: detected capacity change from 0 to 512 [ 87.508149][ T6048] EXT4-fs: Ignoring removed bh option [ 87.514311][ T6025] bridge_slave_0: entered promiscuous mode [ 87.531405][ T6048] EXT4-fs (loop2): orphan cleanup on readonly fs [ 87.612583][ T6048] EXT4-fs error (device loop2): ext4_map_blocks:608: inode #11: block 1: comm syz.2.54: lblock 0 mapped to illegal pblock 1 (length 1) [ 87.626998][ T6025] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.627121][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.627307][ T6025] bridge_slave_1: entered allmulticast mode [ 87.628571][ T6025] bridge_slave_1: entered promiscuous mode [ 87.635323][ T5869] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 87.665022][ T6048] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 87.687096][ T5869] usb 1-1: device descriptor read/8, error -71 [ 87.691399][ T6048] EXT4-fs error (device loop2): ext4_xattr_inode_update_ref:1037: inode #11: comm syz.2.54: EA inode 11 ref wraparound: ref_count=0 ref_change=-1 [ 87.731525][ T6048] EXT4-fs warning (device loop2): ext4_xattr_inode_dec_ref_all:1231: inode #11: comm syz.2.54: ea_inode dec ref err=-117 [ 87.751642][ T6048] EXT4-fs (loop2): 1 orphan inode deleted [ 87.753689][ T6025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.771508][ T6025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.772949][ T6048] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 87.913224][ T6025] team0: Port device team_slave_0 added [ 87.929841][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.934575][ T6025] team0: Port device team_slave_1 added [ 87.978070][ T5869] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 88.022441][ T5869] usb 1-1: device descriptor read/8, error -71 [ 88.156311][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.166247][ T5869] usb usb1-port1: unable to enumerate USB device [ 88.179899][ T4687] kworker/u4:9: attempt to access beyond end of device [ 88.179899][ T4687] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 88.199458][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.228988][ T4687] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 88.242775][ T4687] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 88.251344][ T6025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.294079][ T6025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.311853][ T6025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.344444][ T6025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.436206][ T23] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.580736][ T6025] hsr_slave_0: entered promiscuous mode [ 88.591369][ T6025] hsr_slave_1: entered promiscuous mode [ 88.598159][ T6025] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.607103][ T6025] Cannot create hsr debugfs directory [ 88.616070][ T5775] Bluetooth: hci0: command tx timeout [ 88.639827][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.663515][ T23] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 88.701464][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.762508][ T23] usb 3-1: config 0 descriptor?? [ 88.805092][ T23] pwc: Askey VC010 type 2 USB webcam detected. [ 88.815038][ T12] hsr_slave_0: left promiscuous mode [ 88.829747][ T12] hsr_slave_1: left promiscuous mode [ 88.842202][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.851244][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.861152][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.869084][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.878817][ T12] bridge_slave_1: left allmulticast mode [ 88.885246][ T12] bridge_slave_1: left promiscuous mode [ 88.895670][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.911030][ T12] bridge_slave_0: left allmulticast mode [ 88.922470][ T12] bridge_slave_0: left promiscuous mode [ 88.928841][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.962880][ T12] veth1_macvtap: left promiscuous mode [ 88.969648][ T12] veth0_macvtap: left promiscuous mode [ 88.975504][ T12] veth1_vlan: left promiscuous mode [ 88.984355][ T12] veth0_vlan: left promiscuous mode [ 89.234124][ T23] pwc: recv_control_msg error -32 req 02 val 2b00 [ 89.258783][ T23] pwc: recv_control_msg error -32 req 02 val 2700 [ 89.266024][ T23] pwc: recv_control_msg error -32 req 02 val 2c00 [ 89.283149][ T23] pwc: recv_control_msg error -32 req 04 val 1000 [ 89.298808][ T23] pwc: recv_control_msg error -32 req 04 val 1300 [ 89.321407][ T23] pwc: recv_control_msg error -32 req 04 val 1400 [ 89.329447][ T23] pwc: recv_control_msg error -32 req 02 val 2000 [ 89.545319][ T23] pwc: recv_control_msg error -71 req 04 val 1500 [ 89.578388][ T23] pwc: recv_control_msg error -71 req 02 val 2500 [ 89.585287][ T23] pwc: recv_control_msg error -71 req 02 val 2400 [ 89.607139][ T23] pwc: recv_control_msg error -71 req 02 val 2600 [ 89.638503][ T23] pwc: recv_control_msg error -71 req 02 val 2900 [ 89.645515][ T23] pwc: recv_control_msg error -71 req 02 val 2800 [ 89.666349][ T23] pwc: recv_control_msg error -71 req 04 val 1100 [ 89.673517][ T23] pwc: recv_control_msg error -71 req 04 val 1200 [ 89.703779][ T23] pwc: Registered as video103. [ 89.731544][ T23] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input5 [ 89.816046][ T23] usb 3-1: USB disconnect, device number 2 [ 90.101338][ T12] team0 (unregistering): Port device team_slave_1 removed [ 90.148454][ T12] team0 (unregistering): Port device team_slave_0 removed [ 90.244105][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.302512][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.357171][ T6086] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 90.547493][ T6089] loop2: detected capacity change from 0 to 128 [ 90.559167][ T6089] ======================================================= [ 90.559167][ T6089] WARNING: The mand mount option has been deprecated and [ 90.559167][ T6089] and is ignored by this kernel. Remove the mand [ 90.559167][ T6089] option from the mount to silence this warning. [ 90.559167][ T6089] ======================================================= [ 90.622625][ T6089] FAT-fs (loop2): Unrecognized mount option "utf=1" or missing value [ 90.697407][ T5775] Bluetooth: hci0: command tx timeout [ 90.797861][ T12] bond0 (unregistering): Released all slaves [ 91.316394][ T5807] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 91.546055][ T5807] usb 1-1: Using ep0 maxpacket: 16 [ 91.567442][ T5807] usb 1-1: config 0 has no interfaces? [ 91.573087][ T5807] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.587797][ T5807] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.634342][ T5807] usb 1-1: config 0 descriptor?? [ 91.968044][ T23] usb 1-1: USB disconnect, device number 6 [ 92.051788][ T6025] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.101278][ T6025] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.129101][ T6025] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.172321][ T6025] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.384922][ T6025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.437318][ T6113] kvm: pic: non byte write [ 92.470215][ T6025] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.515764][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.523030][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.578750][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.586661][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.786467][ T5775] Bluetooth: hci0: command tx timeout [ 93.145027][ T6025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.441823][ T6152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 93.621244][ T6156] tipc: Started in network mode [ 93.637365][ T6156] tipc: Node identity d620e613f17e, cluster identity 4711 [ 93.648695][ T6156] tipc: Enabled bearer , priority 0 [ 93.791364][ T6156] syzkaller0: entered promiscuous mode [ 93.811903][ T6156] syzkaller0: entered allmulticast mode [ 93.823547][ T6156] tipc: Resetting bearer [ 93.913735][ T6025] veth0_vlan: entered promiscuous mode [ 93.928271][ T6025] veth1_vlan: entered promiscuous mode [ 93.953151][ T6155] tipc: Resetting bearer [ 94.856485][ T5775] Bluetooth: hci0: command tx timeout [ 94.888987][ T6184] loop1: detected capacity change from 0 to 32768 [ 94.974952][ T6184] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.76 (6184) [ 95.121486][ T6184] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 95.132332][ T6184] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 95.141778][ T6184] BTRFS info (device loop1): setting nodatasum [ 95.149057][ T6184] BTRFS info (device loop1): force zlib compression, level 3 [ 95.157621][ T6184] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 95.167855][ T6184] BTRFS info (device loop1): use lzo compression, level 0 [ 95.175106][ T6184] BTRFS info (device loop1): turning on flush-on-commit [ 95.182783][ T6184] BTRFS info (device loop1): enabling auto defrag [ 95.190987][ T6184] BTRFS info (device loop1): max_inline at 4096 [ 95.207623][ T6184] BTRFS info (device loop1): using free space tree [ 95.341246][ T6184] BTRFS info (device loop1): enabling ssd optimizations [ 96.900647][ T5772] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.071362][ T6155] tipc: Disabling bearer [ 97.184162][ T1187] tipc: Node number set to 660530707 [ 97.263734][ T6025] veth0_macvtap: entered promiscuous mode [ 97.387804][ T6025] veth1_macvtap: entered promiscuous mode [ 97.453620][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.515249][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.555675][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.582525][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.594361][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.612610][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.640683][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.119562][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.232011][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.256617][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.274515][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.296777][ T6025] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.308012][ T6025] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.350794][ T6025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.386441][ T6217] veth0_to_team: entered promiscuous mode [ 98.400545][ T6217] veth0_to_team: entered allmulticast mode [ 98.565475][ T6025] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.609285][ T6025] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.646323][ T6025] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.680930][ T6025] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.704910][ T6228] loop0: detected capacity change from 0 to 512 [ 98.791643][ T6228] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 98.860209][ T6228] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 98.992078][ T6228] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 99.030147][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.060196][ T6228] EXT4-fs (loop0): 1 truncate cleaned up [ 99.086975][ T6228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.094950][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.314720][ T1076] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.352213][ T1076] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.383693][ T6228] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5920: Corrupt filesystem [ 99.453528][ T6228] EXT4-fs (loop0): Remounting filesystem read-only [ 99.614942][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.420454][ T6267] Illegal XDP return value 4294967294 on prog (id 7) dev syz_tun, expect packet loss! [ 102.968054][ T5807] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 103.922181][ T6325] loop2: detected capacity change from 0 to 512 [ 103.942710][ T6325] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 104.015942][ T6325] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 104.025856][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 104.056098][ T6325] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 104.075902][ T5807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.099832][ T5807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 104.129023][ T5807] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 104.139544][ T6325] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 104.161410][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.169835][ T6325] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=e040e01c, mo2=0000] [ 104.189170][ T5807] usb 5-1: Product: syz [ 104.193384][ T5807] usb 5-1: Manufacturer: syz [ 104.200792][ T6325] EXT4-fs (loop2): failed to initialize system zone (-117) [ 104.225878][ T5807] usb 5-1: SerialNumber: syz [ 104.235155][ T6325] EXT4-fs (loop2): mount failed [ 104.481072][ T5807] usb 5-1: 0:2 : does not exist [ 104.516700][ T5807] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 104.635003][ T5807] usb 5-1: USB disconnect, device number 2 [ 104.820010][ T6235] udevd[6235]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.285054][ T6409] netlink: 'syz.2.122': attribute type 4 has an invalid length. [ 108.306967][ T6409] netlink: 152 bytes leftover after parsing attributes in process `syz.2.122'. [ 108.361546][ T6409] .`: renamed from bond0 (while UP) [ 108.482418][ T6409] syz.2.122 (6409) used greatest stack depth: 20904 bytes left [ 108.900762][ T5807] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 109.122325][ T5807] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 109.144066][ T5807] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 109.162571][ T5807] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.196332][ T5807] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 109.221725][ T5807] usb 3-1: config 0 interface 0 has no altsetting 0 [ 109.241461][ T5807] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 109.260862][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.269223][ T5811] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 109.293380][ T5807] usb 3-1: config 0 descriptor?? [ 109.514237][ T5811] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.551024][ T5811] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 109.575450][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 109.594423][ T5811] usb 2-1: config 0 descriptor?? [ 109.618904][ T5811] pwc: Askey VC010 type 2 USB webcam detected. [ 109.740932][ T5807] hid-alps 0003:044E:120C.0001: unbalanced delimiter at end of report description [ 109.768219][ T5807] hid-alps 0003:044E:120C.0001: parse failed [ 109.780981][ T5807] hid-alps: probe of 0003:044E:120C.0001 failed with error -22 [ 110.130571][ T5811] pwc: recv_control_msg error -32 req 02 val 2b00 [ 110.163014][ T5811] pwc: recv_control_msg error -32 req 02 val 2700 [ 110.180113][ T5811] pwc: recv_control_msg error -32 req 02 val 2c00 [ 110.191757][ T5811] pwc: recv_control_msg error -32 req 04 val 1000 [ 110.204688][ T5811] pwc: recv_control_msg error -32 req 04 val 1300 [ 110.207181][ T5832] usb 3-1: USB disconnect, device number 3 [ 110.212403][ T5811] pwc: recv_control_msg error -32 req 04 val 1400 [ 110.248287][ T5811] pwc: recv_control_msg error -32 req 02 val 2000 [ 110.468979][ T5811] pwc: recv_control_msg error -71 req 04 val 1500 [ 110.482505][ T5811] pwc: recv_control_msg error -71 req 02 val 2500 [ 110.516157][ T5811] pwc: recv_control_msg error -71 req 02 val 2400 [ 110.536191][ T5811] pwc: recv_control_msg error -71 req 02 val 2600 [ 110.544415][ T5811] pwc: recv_control_msg error -71 req 02 val 2900 [ 110.555525][ T5811] pwc: recv_control_msg error -71 req 02 val 2800 [ 110.585929][ T5811] pwc: recv_control_msg error -71 req 04 val 1100 [ 110.593714][ T5811] pwc: recv_control_msg error -71 req 04 val 1200 [ 110.739179][ T6465] loop0: detected capacity change from 0 to 32768 [ 110.756091][ T5811] pwc: Registered as video103. [ 110.762656][ T6465] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.135 (6465) [ 110.763023][ T5811] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 110.810168][ T6465] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 110.820469][ T6465] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 110.829259][ T6465] BTRFS info (device loop0): setting nodatacow, compression disabled [ 110.837459][ T6465] BTRFS info (device loop0): force clearing of disk cache [ 110.844604][ T6465] BTRFS info (device loop0): turning off barriers [ 110.851157][ T6465] BTRFS info (device loop0): use no compression [ 110.857591][ T6465] BTRFS info (device loop0): disabling free space tree [ 110.864484][ T6465] BTRFS info (device loop0): enabling ssd optimizations [ 110.871685][ T6465] BTRFS info (device loop0): using spread ssd allocation scheme [ 110.879428][ T6465] BTRFS info (device loop0): not using ssd optimizations [ 110.886890][ T6465] BTRFS info (device loop0): not using spread ssd allocation scheme [ 110.967703][ T5811] usb 2-1: USB disconnect, device number 3 [ 111.126362][ T6465] BTRFS info (device loop0): rebuilding free space tree [ 111.164385][ T6465] BTRFS info (device loop0): disabling free space tree [ 111.171421][ T6465] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 111.181644][ T6465] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 111.222691][ T6465] BTRFS info (device loop0): checking UUID tree [ 111.414824][ T6488] kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 111.630262][ T6488] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 111.733181][ T6488] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 111.754700][ T6488] kvm: requested 46095 ns i8254 timer period limited to 200000 ns [ 111.796203][ T6488] kvm: requested 124876 ns i8254 timer period limited to 200000 ns [ 111.845626][ T6488] kvm: requested 57828 ns i8254 timer period limited to 200000 ns [ 111.865669][ T6499] BTRFS info (device loop0): space_info DATA+METADATA (sub-group id 0) has 16384 free, is not full [ 111.877042][ T6499] BTRFS info (device loop0): space_info total=3276800, used=49152, pinned=16384, reserved=0, may_use=3194880, readonly=0 zone_unusable=0 [ 111.891399][ T6499] BTRFS info (device loop0): global_block_rsv: size 1048576 reserved 1048576 [ 111.901422][ T6499] BTRFS info (device loop0): trans_block_rsv: size 0 reserved 0 [ 111.909347][ T6499] BTRFS info (device loop0): chunk_block_rsv: size 0 reserved 0 [ 111.917573][ T6499] BTRFS info (device loop0): delayed_block_rsv: size 0 reserved 0 [ 111.925368][ T6499] BTRFS info (device loop0): delayed_refs_rsv: size 65536 reserved 65536 [ 111.964457][ T6488] kvm: requested 181866 ns i8254 timer period limited to 200000 ns [ 111.995994][ T6488] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 112.102550][ T6488] kvm: requested 198628 ns i8254 timer period limited to 200000 ns [ 112.126377][ T6488] kvm: requested 9219 ns i8254 timer period limited to 200000 ns [ 114.199684][ T5767] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 115.295942][ T5807] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 115.510340][ T5807] usb 1-1: Using ep0 maxpacket: 32 [ 115.517853][ T5807] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 115.537754][ T5807] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.547306][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.555513][ T5807] usb 1-1: Product: syz [ 115.560872][ T6559] loop4: detected capacity change from 0 to 512 [ 115.564466][ T5807] usb 1-1: Manufacturer: syz [ 115.572042][ T5807] usb 1-1: SerialNumber: syz [ 115.585553][ T5807] usb 1-1: config 0 descriptor?? [ 115.604011][ T6540] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 116.414245][ T23] usb 1-1: USB disconnect, device number 7 [ 116.549077][ T6568] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.576210][ T5807] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 116.785965][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 116.794113][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.806826][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.819377][ T5807] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.829118][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.838356][ T5807] usb 2-1: Product: syz [ 116.842771][ T5807] usb 2-1: Manufacturer: syz [ 116.849225][ T5807] usb 2-1: SerialNumber: syz [ 117.081923][ T5807] usb 2-1: 0:2 : does not exist [ 117.095253][ T5807] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 117.133576][ T5807] usb 2-1: USB disconnect, device number 4 [ 117.188866][ T6235] udevd[6235]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 119.218988][ T6614] binder: BINDER_SET_CONTEXT_MGR already set [ 119.225601][ T6614] binder: 6613:6614 ioctl 4018620d 200000000040 returned -16 [ 119.385944][ T5807] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 119.570449][ T5807] usb 2-1: config 0 has no interfaces? [ 119.590498][ T5807] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 119.625897][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.633994][ T5807] usb 2-1: Product: syz [ 119.662798][ T5807] usb 2-1: Manufacturer: syz [ 119.676394][ T5807] usb 2-1: SerialNumber: syz [ 119.694956][ T5807] usb 2-1: config 0 descriptor?? [ 119.811948][ T6637] process 'syz.0.174' launched './file0' with NULL argv: empty string added [ 120.236225][ T6606] veth0_vlan: left promiscuous mode [ 120.247998][ T6606] veth0_vlan: entered promiscuous mode [ 120.495934][ T5807] usb 2-1: USB disconnect, device number 5 [ 120.716952][ T6660] loop0: detected capacity change from 0 to 1024 [ 120.795220][ T6660] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 120.814677][ T6667] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 120.870591][ T6660] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 120.942618][ T27] audit: type=1800 audit(1773270276.302:4): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.177" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 120.945079][ T6660] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.177: bg 0: block 112: padding at end of block bitmap is not set [ 121.022105][ T6606] syz.1.168 (6606) used greatest stack depth: 20712 bytes left [ 121.044593][ T6660] EXT4-fs error (device loop0): ext4_map_blocks:718: inode #15: comm syz.0.177: lblock 0 mapped to illegal pblock 0 (length 1) [ 121.135267][ T6660] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #15: comm syz.0.177: lblock 0 mapped to illegal pblock 0 (length 1) [ 121.191004][ T6660] EXT4-fs error (device loop0): ext4_ext_remove_space:2929: inode #15: comm syz.0.177: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 121.249440][ T6676] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.273446][ T6674] EXT4-fs error (device loop0): ext4_map_blocks:608: inode #15: comm syz.0.177: lblock 0 mapped to illegal pblock 0 (length 1) [ 121.398676][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 121.404080][ T6684] Bluetooth: MGMT ver 1.22 [ 121.414424][ T6684] Bluetooth: hci0: invalid length 0, exp 2 for type 6 [ 122.769773][ T6724] loop4: detected capacity change from 0 to 256 [ 122.793617][ T6724] exfat: Deprecated parameter 'utf8' [ 122.820468][ T6724] exfat: Deprecated parameter 'utf8' [ 122.826377][ T6724] exfat: Deprecated parameter 'utf8' [ 122.892249][ T6724] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 123.514947][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.2.198'. [ 124.544788][ T6782] Dead loop on virtual device ip6_vti0, fix it urgently! [ 125.217843][ T6773] loop4: detected capacity change from 0 to 1024 [ 125.688851][ T6773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.892728][ T6771] loop1: detected capacity change from 0 to 40427 [ 125.905894][ T23] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 125.960177][ T6025] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.966145][ T6771] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x7ffff [ 125.982756][ T6771] F2FS-fs (loop1): inline encryption not supported [ 126.009038][ T6771] F2FS-fs (loop1): Image doesn't support compression [ 126.033578][ T6771] F2FS-fs (loop1): invalid crc value [ 126.041047][ T6771] F2FS-fs (loop1): Found nat_bits in checkpoint [ 126.128448][ T23] usb 1-1: too many configurations: 9, using maximum allowed: 8 [ 126.133263][ T6771] F2FS-fs (loop1): Start checkpoint disabled! [ 126.156965][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.171111][ T6771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 126.204473][ T23] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.258596][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.276556][ T6815] af_packet: tpacket_rcv: packet too big, clamped from 202 to 4294967272. macoff=96 [ 126.286931][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.325983][ T23] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.359721][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.388710][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.417701][ T23] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.482575][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.518406][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.528800][ T23] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.544781][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.565785][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.575194][ T23] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.625888][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.657111][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.686088][ T23] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.726127][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.735638][ T1076] kworker/u4:5: attempt to access beyond end of device [ 126.735638][ T1076] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 126.755789][ T1076] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 126.756901][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.773593][ T1076] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 126.781589][ T23] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.795909][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.805110][ T23] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 126.814501][ T23] usb 1-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.827892][ T23] usb 1-1: config 0 interface 0 has no altsetting 0 [ 126.837276][ T23] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 126.846662][ T23] usb 1-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 126.855111][ T23] usb 1-1: Product: syz [ 126.859451][ T23] usb 1-1: Manufacturer: syz [ 126.864304][ T23] usb 1-1: SerialNumber: syz [ 126.876983][ T23] usb 1-1: config 0 descriptor?? [ 126.899831][ T23] yurex 1-1:0.0: Could not find endpoints [ 126.924011][ T27] audit: type=1800 audit(1773270282.282:5): pid=6829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.214" name="bus" dev="overlay" ino=340 res=0 errno=0 [ 127.127692][ T5832] usb 1-1: USB disconnect, device number 8 [ 127.131550][ T6835] loop4: detected capacity change from 0 to 1024 [ 127.257294][ T6835] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 127.294108][ T6835] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 127.363666][ T27] audit: type=1800 audit(1773270282.722:6): pid=6835 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.215" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 127.385265][ T6835] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.215: bg 0: block 112: padding at end of block bitmap is not set [ 127.474725][ T6835] EXT4-fs error (device loop4): ext4_map_blocks:718: inode #15: comm syz.4.215: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.581827][ T6835] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: comm syz.4.215: lblock 0 mapped to illegal pblock 0 (length 1) [ 127.651812][ T6835] EXT4-fs error (device loop4): ext4_ext_remove_space:2929: inode #15: comm syz.4.215: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 127.704406][ T6852] netlink: 12 bytes leftover after parsing attributes in process `syz.2.218'. [ 127.719174][ T6849] EXT4-fs error (device loop4): ext4_map_blocks:608: inode #15: comm syz.4.215: lblock 0 mapped to illegal pblock 0 (length 1) [ 128.581570][ T6852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.775699][ T6857] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 128.790031][ T6025] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 129.139449][ T6874] syzkaller0: entered promiscuous mode [ 129.155936][ T6874] syzkaller0: entered allmulticast mode [ 129.333119][ T6861] loop1: detected capacity change from 0 to 32768 [ 129.444497][ T6861] JBD2: Ignoring recovery information on journal [ 129.451985][ T6880] loop2: detected capacity change from 0 to 512 [ 129.461790][ T6880] EXT4-fs: Ignoring removed i_version option [ 129.476002][ T6880] EXT4-fs: Ignoring removed bh option [ 129.572743][ T6880] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.587180][ T6861] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 129.611034][ T6880] ext4 filesystem being mounted at /61/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.767178][ T5776] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.917351][ T6890] netlink: 24 bytes leftover after parsing attributes in process `syz.2.225'. [ 130.355543][ T6861] syz.1.220 (6861) used greatest stack depth: 18480 bytes left [ 130.436099][ T5832] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 130.481561][ T5772] ocfs2: Unmounting device (7,1) on (node local) [ 130.544533][ T6904] kvm: pic: non byte write [ 130.649070][ T5832] usb 3-1: Using ep0 maxpacket: 32 [ 130.672257][ T5832] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 130.682212][ T5832] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 130.694321][ T5832] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 130.713946][ T5832] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.742957][ T5832] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.771526][ T5832] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 130.827270][ T5832] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 130.840376][ T5832] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.855681][ T5832] usb 3-1: config 0 descriptor?? [ 130.972149][ T6912] syzkaller0: entered promiscuous mode [ 130.980754][ T6912] syzkaller0: entered allmulticast mode [ 131.082348][ T1187] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 131.104827][ T5832] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 131.294002][ T1187] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 131.304553][ T1187] usb 5-1: config 0 has no interface number 0 [ 131.334087][ T1187] usb 5-1: config 0 interface 41 has no altsetting 0 [ 131.347280][ T5832] usb 3-1: USB disconnect, device number 4 [ 131.375163][ T1187] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 131.392836][ T1187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.417106][ T5832] usblp0: removed [ 131.424681][ T1187] usb 5-1: Product: syz [ 131.433782][ T1187] usb 5-1: Manufacturer: syz [ 131.441153][ T1187] usb 5-1: SerialNumber: syz [ 131.479190][ T1187] usb 5-1: config 0 descriptor?? [ 131.902785][ T6916] loop1: detected capacity change from 0 to 512 [ 131.930302][ T6916] EXT4-fs: Ignoring removed nomblk_io_submit option [ 131.994826][ T6916] EXT4-fs error (device loop1): ext4_orphan_get:1398: inode #11: comm syz.1.236: iget: bad extended attribute block 3153 [ 132.011240][ T6916] EXT4-fs error (device loop1): ext4_orphan_get:1403: comm syz.1.236: couldn't read orphan inode 11 (err -117) [ 132.025025][ T6916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 132.249850][ T5772] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.343334][ T1187] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 133.020855][ T6926] loop1: detected capacity change from 0 to 256 [ 133.027779][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.034788][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.060365][ T6926] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 133.645260][ T1187] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 133.666311][ T1187] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 133.717979][ T1187] CoreChips: probe of 5-1:0.41 failed with error -71 [ 133.759061][ T1187] usb 5-1: USB disconnect, device number 3 [ 134.748433][ T6920] netlink: 'syz.2.237': attribute type 39 has an invalid length. [ 134.977666][ T6948] binder: 6947:6948 ioctl c0306201 200000000680 returned -14 [ 135.632515][ T6959] loop0: detected capacity change from 0 to 1024 [ 137.221721][ T6959] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 137.844617][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 137.931740][ T6974] kernel profiling enabled (shift: 0) [ 139.447764][ T6974] syz.2.253: vmalloc error: size 654311424, failed to allocated page array size 1277952, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 139.479286][ T6974] CPU: 0 PID: 6974 Comm: syz.2.253 Not tainted syzkaller #0 [ 139.486693][ T6974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 139.496793][ T6974] Call Trace: [ 139.500095][ T6974] [ 139.503014][ T6974] dump_stack_lvl+0x18c/0x250 [ 139.507723][ T6974] ? show_regs_print_info+0x20/0x20 [ 139.512945][ T6974] ? load_image+0x400/0x400 [ 139.517507][ T6974] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 139.523950][ T6974] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 139.530462][ T6974] warn_alloc+0x246/0x340 [ 139.534809][ T6974] ? zone_watermark_ok_safe+0x230/0x230 [ 139.540360][ T6974] ? _raw_spin_unlock+0x28/0x40 [ 139.545209][ T6974] ? iter_file_splice_write+0x6a3/0xcb0 [ 139.550784][ T6974] __vmalloc_node_range+0x662/0x1330 [ 139.556112][ T6974] ? zone_statistics+0x170/0x170 [ 139.561046][ T6974] ? free_vm_area+0x50/0x50 [ 139.565646][ T6974] ? alloc_pages+0x2ff/0x740 [ 139.570231][ T6974] ? rcu_is_watching+0x15/0xb0 [ 139.575005][ T6974] ? profile_init+0xee/0x130 [ 139.579600][ T6974] ? sysfs_kf_read+0x310/0x310 [ 139.584359][ T6974] vzalloc+0x79/0x90 [ 139.588249][ T6974] ? profile_init+0xee/0x130 [ 139.592833][ T6974] profile_init+0xee/0x130 [ 139.597246][ T6974] profiling_store+0x5e/0xc0 [ 139.601829][ T6974] kernfs_fop_write_iter+0x3b6/0x520 [ 139.607121][ T6974] do_iter_write+0x738/0xc30 [ 139.611718][ T6974] ? vfs_iter_write+0xa0/0xa0 [ 139.616394][ T6974] ? __asan_memset+0x22/0x40 [ 139.620975][ T6974] ? iov_iter_bvec+0xd4/0x1b0 [ 139.625643][ T6974] ? vfs_iter_write+0x6e/0xa0 [ 139.630315][ T6974] iter_file_splice_write+0x6a3/0xcb0 [ 139.635711][ T6974] ? splice_from_pipe+0x180/0x180 [ 139.640740][ T6974] ? splice_shrink_spd+0xc0/0xc0 [ 139.645676][ T6974] ? common_file_perm+0x198/0x1f0 [ 139.650737][ T6974] ? splice_from_pipe+0x180/0x180 [ 139.655772][ T6974] direct_splice_actor+0xe8/0x130 [ 139.660805][ T6974] splice_direct_to_actor+0x304/0x8c0 [ 139.666207][ T6974] ? direct_file_splice_eof+0xb0/0xb0 [ 139.671583][ T6974] ? warn_unsupported+0xc0/0xc0 [ 139.676432][ T6974] ? fsnotify_perm+0x5d/0x5e0 [ 139.681105][ T6974] ? security_file_permission+0x79/0xa0 [ 139.686737][ T6974] do_splice_direct+0x1d5/0x2f0 [ 139.691589][ T6974] ? splice_direct_to_actor+0x8c0/0x8c0 [ 139.697148][ T6974] ? rcu_read_lock_any_held+0xb4/0x140 [ 139.702606][ T6974] ? do_splice_direct+0x2f0/0x2f0 [ 139.707635][ T6974] do_sendfile+0x5f2/0xef0 [ 139.712056][ T6974] ? do_pwritev+0x3a0/0x3a0 [ 139.716568][ T6974] __se_sys_sendfile64+0x145/0x1a0 [ 139.721675][ T6974] ? lock_chain_count+0x20/0x20 [ 139.726583][ T6974] ? __x64_sys_sendfile64+0xb0/0xb0 [ 139.731778][ T6974] ? lockdep_hardirqs_on+0x98/0x150 [ 139.737059][ T6974] do_syscall_64+0x55/0xa0 [ 139.741477][ T6974] ? clear_bhb_loop+0x40/0x90 [ 139.746181][ T6974] ? clear_bhb_loop+0x40/0x90 [ 139.750850][ T6974] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.756823][ T6974] RIP: 0033:0x7f2315f9c799 [ 139.761244][ T6974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.781210][ T6974] RSP: 002b:00007f2316eaa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 139.789635][ T6974] RAX: ffffffffffffffda RBX: 00007f2316215fa0 RCX: 00007f2315f9c799 [ 139.797606][ T6974] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 139.805575][ T6974] RBP: 00007f2316032c99 R08: 0000000000000000 R09: 0000000000000000 [ 139.813540][ T6974] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 139.821512][ T6974] R13: 00007f2316216038 R14: 00007f2316215fa0 R15: 00007ffdc8de2438 [ 139.829509][ T6974] [ 139.832581][ C0] vkms_vblank_simulate: vblank timer overrun [ 139.978064][ T6974] Mem-Info: [ 139.981346][ T6974] active_anon:24228 inactive_anon:0 isolated_anon:0 [ 139.981346][ T6974] active_file:13254 inactive_file:39969 isolated_file:0 [ 139.981346][ T6974] unevictable:0 dirty:210 writeback:0 [ 139.981346][ T6974] slab_reclaimable:10572 slab_unreclaimable:92694 [ 139.981346][ T6974] mapped:24795 shmem:17819 pagetables:718 [ 139.981346][ T6974] sec_pagetables:0 bounce:0 [ 139.981346][ T6974] kernel_misc_reclaimable:0 [ 139.981346][ T6974] free:1309995 free_pcp:13664 free_cma:0 [ 140.101519][ T6974] Node 0 active_anon:96108kB inactive_anon:0kB active_file:52996kB inactive_file:159676kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:99140kB dirty:864kB writeback:0kB shmem:69740kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11088kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no [ 140.182453][ T6974] Node 1 active_anon:1536kB inactive_anon:0kB active_file:20kB inactive_file:200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:20kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 140.258109][ T6974] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 140.332902][ T6974] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 140.338872][ T6974] Node 0 DMA32 free:1346268kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:93944kB inactive_anon:0kB active_file:52996kB inactive_file:158848kB unevictable:0kB writepending:864kB present:3129332kB managed:2586964kB mlocked:0kB bounce:0kB free_pcp:15392kB local_pcp:14712kB free_cma:0kB [ 140.369156][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.375585][ T6974] lowmem_reserve[]: 0 0 0 0 0 [ 140.380488][ T6974] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 140.407147][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.416617][ T6974] lowmem_reserve[]: 0 0 0 0 0 [ 140.446519][ T6974] Node 1 Normal free:3898644kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:20kB inactive_file:200kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:20064kB local_pcp:10848kB free_cma:0kB [ 140.476118][ C0] vkms_vblank_simulate: vblank timer overrun [ 140.548403][ T6974] lowmem_reserve[]: 0 0 0 0 0 [ 140.555989][ T6974] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 140.576038][ T6974] Node 0 DMA32: 561*4kB (UME) 623*8kB (UME) 340*16kB (UME) 395*32kB (UME) 216*64kB (UME) 128*128kB (UME) 68*256kB (UME) 22*512kB (M) 8*1024kB (M) 6*2048kB (UM) 303*4096kB (M) = 1345756kB [ 140.615635][ T6974] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 140.643682][ T6974] Node 1 Normal: 189*4kB (UE) 60*8kB (UME) 52*16kB (UE) 72*32kB (UME) 22*64kB (UE) 9*128kB (UME) 0*256kB 3*512kB (UME) 1*1024kB (E) 1*2048kB (E) 949*4096kB (M) = 3898644kB [ 140.695279][ T6974] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.706633][ T6974] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.716555][ T6974] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 140.726688][ T6974] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 140.736916][ T6974] 71039 total pagecache pages [ 140.741703][ T6974] 0 pages in swap cache [ 140.746284][ T6974] Free swap = 124996kB [ 140.750883][ T6974] Total swap = 124996kB [ 140.755239][ T6974] 2097051 pages RAM [ 140.762455][ T6974] 0 pages HighMem/MovableOnly [ 140.770098][ T6974] 416924 pages reserved [ 140.776205][ T6974] 0 pages cma reserved [ 142.154285][ T7014] loop0: detected capacity change from 0 to 256 [ 142.186074][ T7014] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 142.337888][ T7025] netlink: 4 bytes leftover after parsing attributes in process `syz.1.267'. [ 143.217990][ T7025] team0: Port device team_slave_0 removed [ 143.595134][ T7041] syzkaller0: entered promiscuous mode [ 143.608051][ T7041] syzkaller0: entered allmulticast mode [ 144.028073][ T7047] warning: `syz.1.277' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 144.072331][ T7047] netlink: 'syz.1.277': attribute type 10 has an invalid length. [ 144.146642][ T7047] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 144.716708][ T5832] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 144.728504][ T5807] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 144.757114][ T7067] loop2: detected capacity change from 0 to 256 [ 144.768224][ T7067] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 144.779068][ T7067] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 144.793080][ T7067] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xd916ed68, utbl_chksum : 0xe619d30d) [ 144.916431][ T5807] usb 2-1: Using ep0 maxpacket: 16 [ 144.916925][ T7054] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 144.927797][ T5807] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.930939][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 144.960594][ T5832] usb 5-1: config 0 has an invalid interface number: 196 but max is 0 [ 144.962435][ T5807] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.978026][ T5832] usb 5-1: config 0 has no interface number 0 [ 144.978075][ T5832] usb 5-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 145.006147][ T7054] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2587167807 (82789369824 ns) > initial count (42935321408 ns). Using initial count to start timer. [ 145.010015][ T5807] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 145.025380][ T5832] usb 5-1: config 0 interface 196 has no altsetting 0 [ 145.053630][ T5832] usb 5-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 145.061497][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.065677][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.080566][ T5807] usb 2-1: Product: syz [ 145.084896][ T5807] usb 2-1: Manufacturer: syz [ 145.090097][ T5807] usb 2-1: SerialNumber: syz [ 145.096521][ T5832] usb 5-1: Product: syz [ 145.107800][ T5832] usb 5-1: Manufacturer: syz [ 145.113966][ T5832] usb 5-1: SerialNumber: syz [ 145.145775][ T5832] usb 5-1: config 0 descriptor?? [ 145.151762][ T7059] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 145.353133][ T5807] usb 2-1: 0:2 : does not exist [ 145.378077][ T5807] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 145.418330][ T5807] usb 2-1: USB disconnect, device number 6 [ 145.460885][ T6235] udevd[6235]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.741153][ T7078] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 146.050720][ T7084] batadv_slave_0: entered promiscuous mode [ 146.061124][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.288'. [ 146.072628][ T7084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.164521][ T7084] batadv_slave_0 (unregistering): left promiscuous mode [ 146.171999][ T7084] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.406705][ T7090] kvm: pic: level sensitive irq not supported [ 147.458902][ T5832] ipheth 5-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 147.481995][ T5832] ipheth: probe of 5-1:0.196 failed with error -71 [ 147.503149][ T5832] usb 5-1: USB disconnect, device number 4 [ 147.633174][ T7106] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 147.655912][ T5753] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 147.839974][ T5753] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 147.861590][ T5753] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.888947][ T5753] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 147.908318][ T5753] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 147.926192][ T5753] usb 3-1: SerialNumber: syz [ 147.983626][ T7116] loop4: detected capacity change from 0 to 512 [ 147.994847][ T7116] EXT4-fs: Ignoring removed i_version option [ 148.001911][ T7116] EXT4-fs: Ignoring removed bh option [ 148.043357][ T7116] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.056474][ T7116] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 148.200510][ T5753] usb 3-1: 0:2 : does not exist [ 148.244965][ T5753] usb 3-1: USB disconnect, device number 5 [ 148.262061][ T6025] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.893406][ T7135] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 148.965942][ T5753] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 148.988283][ T7137] [U]  [ 148.991606][ T7137] [U] K{ [ 148.995523][ T7137] [U] T 1ŠFFˊ`GJǘGO/MC [ 149.006358][ T7137] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب (5OBܤ̓J [ 149.023531][ T7137] [U] K\&}66XHX Ե.`A$40|϶9ި U4ĮVBZ}WMTQΦR 4 [ 149.039502][ T7137] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_< ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ [ 149.084656][ T7137] [U] +WG?]'A: )' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿B ٜNY"VI2 [ 149.110806][ T7137] [U] T_K5TYJ9C$BRLNUL 9W|G"ʃ%ڶC؝Q 3QN^HP*$ .7Yӱ2 [ 149.123507][ T7137] [U] ? H*3͝7ɍ^#Q"0~ (OX LB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ [ 149.138418][ T7137] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)Mă‰T(Aϝ}9ڥJ*Mќġ'LQ DWظ=|Q ÆW;5Ž!DBX`ɧ/E`ƦMX"\ [ 149.242395][ T7137] [U] {; ե٘_O2)O.2W2ʲYX_ HPϱSD:]{Ƚ [ 149.253430][ T7137] [U] I,>Ӥ 51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^` ؿ [ 149.267922][ T7137] [U] 22Ʃ۩X?0;3U [ 149.277241][ T7137] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D, D~D+W; A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ ͿAET1ݯ4K.E"RS|ПS:>P R"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ [ 149.304819][ T7137] [U] [['XN' ,MR/1D=!DX91BWǻRLFK̤Z#`̑ L؛˜B~M [ 149.316485][ T7137] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y [ 149.325968][ T7137] [U] 'B6V20ķǞ׌"T8{9FW]̩ [ 149.333770][ T7137] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C [ 149.346558][ T7137] [U] EC [ 149.352109][ T7137] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP| IRIӍPM Y ڔ8TV,L, [ 149.822419][ T7132] [U] K)0~ܳʪIP'FҜZR @B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L [ 149.978688][ T5753] usb 1-1: Using ep0 maxpacket: 32 [ 149.986600][ T5753] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 149.996614][ T5753] usb 1-1: config 0 has no interface number 0 [ 150.002766][ T5753] usb 1-1: config 0 interface 184 has no altsetting 0 [ 150.043098][ T5753] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 150.076012][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.087626][ T5753] usb 1-1: Product: syz [ 150.098268][ T5753] usb 1-1: Manufacturer: syz [ 150.102902][ T5753] usb 1-1: SerialNumber: syz [ 150.136743][ T5753] usb 1-1: config 0 descriptor?? [ 150.158907][ T5753] smsc75xx v1.0.0 [ 150.267930][ T7153] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 150.340060][ T7155] kvm: pic: non byte write [ 150.414080][ T7157] (null): rxe_set_mtu: Set mtu to 1024 [ 150.525904][ T1187] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 150.628545][ T7157] infiniband syz1: set active [ 150.633839][ T7157] infiniband syz1: added syz_tun [ 150.715887][ T7157] RDS/IB: syz1: added [ 150.734073][ T7157] smc: adding ib device syz1 with port count 1 [ 150.735289][ T1187] usb 5-1: config 1 has an invalid interface descriptor of length 5, skipping [ 150.741328][ T7157] smc: ib device syz1 port 1 has pnetid [ 150.766219][ T1187] usb 5-1: config 1 has an invalid descriptor of length 122, skipping remainder of the config [ 150.781430][ T1187] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 150.792095][ T1187] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 150.807908][ T1187] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 150.817316][ T5753] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 150.834136][ T1187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.844121][ T5753] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 150.853489][ T1187] usb 5-1: Product: syz [ 150.865469][ T1187] usb 5-1: Manufacturer: syz [ 150.870352][ T1187] usb 5-1: SerialNumber: syz [ 150.887295][ T1187] usb 5-1: bad CDC descriptors [ 151.207536][ T1187] usb 5-1: USB disconnect, device number 5 [ 152.294820][ T5753] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 152.323623][ T5753] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 152.357237][ T5753] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 152.399237][ T5753] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 152.431796][ T5753] usb 1-1: USB disconnect, device number 9 [ 152.680878][ T7179] loop2: detected capacity change from 0 to 128 [ 152.711585][ T7179] FAT-fs (loop2): Directory bread(block 524322) failed [ 152.725453][ T7179] FAT-fs (loop2): Directory bread(block 524323) failed [ 152.747775][ T7179] FAT-fs (loop2): Directory bread(block 524324) failed [ 152.776077][ T7179] FAT-fs (loop2): Directory bread(block 524325) failed [ 152.783096][ T7179] FAT-fs (loop2): Directory bread(block 524326) failed [ 152.796395][ T7179] FAT-fs (loop2): Directory bread(block 524327) failed [ 152.803277][ T7179] FAT-fs (loop2): Directory bread(block 524328) failed [ 152.810987][ T7179] FAT-fs (loop2): Directory bread(block 524329) failed [ 152.999465][ T7183] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2128861522 (272494274816 ns) > initial count (149818882688 ns). Using initial count to start timer. [ 153.447185][ T7191] binder: 7189:7191 ioctl 4018620d 0 returned -22 [ 153.515706][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.322'. [ 153.605178][ T7196] netlink: 32 bytes leftover after parsing attributes in process `syz.1.322'. [ 153.619044][ T7196] Zero length message leads to an empty skb [ 153.648624][ T7200] tipc: Failed to remove unknown binding: 66,0,0/0:2378578636/2378578638 [ 153.661665][ T7200] tipc: Failed to remove unknown binding: 66,0,0/0:2378578636/2378578637 [ 153.683642][ T7200] tipc: Failed to remove unknown binding: 66,0,0/0:2378578636/2378578638 [ 153.708147][ T7200] tipc: Failed to remove unknown binding: 66,0,0/0:2378578636/2378578637 [ 155.318671][ T7236] binder: 7235:7236 ioctl c0306201 200000000180 returned -14 [ 155.823943][ T7243] create_pit_timer: 30 callbacks suppressed [ 155.823956][ T7243] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 155.858750][ T1187] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 156.021320][ T7250] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 156.070296][ T1187] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 156.088949][ T1187] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.097534][ T1187] usb 5-1: Product: syz [ 156.101727][ T1187] usb 5-1: Manufacturer: syz [ 156.106740][ T1187] usb 5-1: SerialNumber: syz [ 156.122466][ T1187] usb 5-1: config 0 descriptor?? [ 156.354824][ T1187] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 156.453071][ T7261] syzkaller0: entered promiscuous mode [ 156.459478][ T7261] syzkaller0: entered allmulticast mode [ 157.849791][ T1187] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 157.871750][ T1187] usb 5-1: USB disconnect, device number 6 [ 158.493829][ T7274] loop4: detected capacity change from 0 to 1024 [ 159.540497][ T59] hfsplus: b-tree write err: -5, ino 25 [ 159.556650][ T59] hfsplus: b-tree write err: -5, ino 4 [ 159.562385][ T59] hfsplus: b-tree write err: -5, ino 2 [ 159.717420][ T7268] tipc: Enabled bearer , priority 0 [ 159.731347][ T7277] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 159.856342][ T7269] syzkaller0: entered promiscuous mode [ 159.867737][ T7269] syzkaller0: entered allmulticast mode [ 159.873795][ T7269] tipc: Resetting bearer [ 159.890455][ T7263] tipc: Resetting bearer [ 162.459159][ T7263] tipc: Disabling bearer [ 162.512214][ T7301] loop1: detected capacity change from 0 to 256 [ 163.737419][ T5807] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 163.926705][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 163.947499][ T5807] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.967011][ T5807] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 163.996435][ T5807] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 164.026372][ T5807] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 164.044656][ T5807] usb 5-1: Product: syz [ 164.084998][ T5807] usb 5-1: Manufacturer: syz [ 164.100249][ T5807] usb 5-1: SerialNumber: syz [ 164.373002][ T5807] usb 5-1: 0:2 : does not exist [ 164.394518][ T5807] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 164.458305][ T5807] usb 5-1: USB disconnect, device number 7 [ 164.863573][ T6235] udevd[6235]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 166.554290][ T7396] syzkaller0: entered promiscuous mode [ 166.582537][ T7396] syzkaller0: entered allmulticast mode [ 167.300034][ T7415] netlink: 'syz.0.377': attribute type 4 has an invalid length. [ 169.607708][ T7443] netlink: 4 bytes leftover after parsing attributes in process `syz.0.385'. [ 169.805006][ T7443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.050541][ T7443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.227528][ T7449] netlink: 'syz.2.386': attribute type 10 has an invalid length. [ 170.271047][ T7449] wlan1: mtu less than device minimum [ 170.285986][ T7449] .`: (slave wlan1): Error -22 calling dev_set_mtu [ 171.589976][ T7469] loop0: detected capacity change from 0 to 1024 [ 171.645671][ T7469] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 171.754784][ T7469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 172.007833][ T7469] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4045: comm syz.0.391: Allocating blocks 497-513 which overlap fs metadata [ 172.042351][ T7469] EXT4-fs (loop0): pa ffff888077125cb0: logic 256, phys. 385, len 8 [ 172.051133][ T7469] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5386: group 0, free 0, pa_free 1 [ 172.988307][ T5775] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 172.998576][ T5775] CPU: 0 PID: 5775 Comm: kworker/u5:6 Not tainted syzkaller #0 [ 173.006121][ T5775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 173.016166][ T5775] Workqueue: hci3 hci_rx_work [ 173.020836][ T5775] Call Trace: [ 173.024097][ T5775] [ 173.027016][ T5775] dump_stack_lvl+0x18c/0x250 [ 173.031693][ T5775] ? show_regs_print_info+0x20/0x20 [ 173.036882][ T5775] ? load_image+0x400/0x400 [ 173.041391][ T5775] sysfs_create_dir_ns+0x26e/0x2a0 [ 173.046499][ T5775] ? sysfs_warn_dup+0xa0/0xa0 [ 173.051165][ T5775] ? do_raw_spin_unlock+0x121/0x230 [ 173.056374][ T5775] kobject_add_internal+0x61c/0xcc0 [ 173.061603][ T5775] kobject_add+0x164/0x240 [ 173.066484][ T5775] ? __rwlock_init+0x150/0x150 [ 173.071272][ T5775] ? kobject_init+0x1e0/0x1e0 [ 173.076039][ T5775] ? _raw_spin_unlock+0x28/0x40 [ 173.080877][ T5775] ? get_device_parent+0x366/0x390 [ 173.085977][ T5775] device_add+0x408/0xc20 [ 173.090299][ T5775] hci_conn_add_sysfs+0xd5/0x1e0 [ 173.095240][ T5775] le_conn_complete_evt+0xf5d/0x1540 [ 173.100520][ T5775] ? hci_event_packet+0x4cb/0x1270 [ 173.105619][ T5775] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 173.111852][ T5775] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 173.117475][ T5775] ? skb_pull_data+0xfb/0x200 [ 173.122141][ T5775] hci_le_conn_complete_evt+0x187/0x440 [ 173.127681][ T5775] ? hci_remote_host_features_evt+0x150/0x150 [ 173.133736][ T5775] hci_event_packet+0x7ba/0x1270 [ 173.138664][ T5775] ? bis_list+0x290/0x290 [ 173.142978][ T5775] ? lockdep_hardirqs_on+0x98/0x150 [ 173.148161][ T5775] ? hci_send_to_monitor+0xd7/0x4f0 [ 173.153342][ T5775] hci_rx_work+0x43a/0xd60 [ 173.158104][ T5775] ? process_scheduled_works+0x96f/0x15d0 [ 173.163817][ T5775] process_scheduled_works+0xa5d/0x15d0 [ 173.169366][ T5775] ? worker_attach_to_pool+0x380/0x380 [ 173.174814][ T5775] ? assign_work+0x3d2/0x5d0 [ 173.179404][ T5775] worker_thread+0xa55/0xfc0 [ 173.183976][ T5775] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 173.189940][ T5775] ? _raw_spin_unlock+0x40/0x40 [ 173.194772][ T5775] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 173.200656][ T5775] kthread+0x2fa/0x390 [ 173.204704][ T5775] ? pr_cont_work+0x560/0x560 [ 173.209376][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 173.213955][ T5775] ret_from_fork+0x48/0x80 [ 173.218354][ T5775] ? kthread_blkcg+0xd0/0xd0 [ 173.222922][ T5775] ret_from_fork_asm+0x11/0x20 [ 173.227680][ T5775] [ 173.233470][ T5775] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 173.247601][ T5775] Bluetooth: hci3: failed to register connection device [ 173.425722][ T5767] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.452437][ T7493] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.546076][ T23] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 173.584218][ T7493] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.701524][ T7493] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.746742][ T23] usb 5-1: config 0 has no interfaces? [ 173.761727][ T23] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 173.771357][ T23] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 173.779990][ T23] usb 5-1: Product: syz [ 173.784302][ T23] usb 5-1: Manufacturer: syz [ 173.789179][ T23] usb 5-1: SerialNumber: syz [ 173.796900][ T23] usb 5-1: config 0 descriptor?? [ 173.855268][ T7493] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.009528][ T7493] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.055307][ T7493] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.094991][ T7493] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.129132][ T7493] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.191880][ T5828] usb 5-1: USB disconnect, device number 8 [ 175.781021][ T7530] kvm: emulating exchange as write [ 176.866501][ T5828] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 177.076750][ T5828] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 177.096399][ T5828] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 177.109034][ T5828] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.140964][ T5828] usb 2-1: config 0 descriptor?? [ 177.183607][ T5828] pwc: Askey VC010 type 2 USB webcam detected. [ 177.630185][ T5828] pwc: recv_control_msg error -32 req 02 val 2b00 [ 177.635679][ T7566] input: syz0 as /devices/virtual/input/input7 [ 177.637689][ T5828] pwc: recv_control_msg error -32 req 02 val 2700 [ 177.660247][ T5828] pwc: recv_control_msg error -32 req 02 val 2c00 [ 177.667702][ T5828] pwc: recv_control_msg error -32 req 04 val 1000 [ 177.675629][ T5828] pwc: recv_control_msg error -32 req 04 val 1300 [ 177.682922][ T5828] pwc: recv_control_msg error -32 req 04 val 1400 [ 177.694888][ T5828] pwc: recv_control_msg error -32 req 02 val 2000 [ 177.702678][ T5828] pwc: recv_control_msg error -32 req 02 val 2100 [ 177.715113][ T5828] pwc: recv_control_msg error -32 req 04 val 1500 [ 178.294455][ T5828] pwc: recv_control_msg error -71 req 02 val 2400 [ 178.301935][ T5828] pwc: recv_control_msg error -71 req 02 val 2600 [ 178.308989][ T5828] pwc: recv_control_msg error -71 req 02 val 2900 [ 178.315871][ T5828] pwc: recv_control_msg error -71 req 02 val 2800 [ 178.326043][ T5828] pwc: recv_control_msg error -71 req 04 val 1100 [ 178.342476][ T5828] pwc: recv_control_msg error -71 req 04 val 1200 [ 178.353739][ T5828] pwc: Registered as video103. [ 178.371158][ T5828] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 178.394471][ T5828] usb 2-1: USB disconnect, device number 7 [ 178.733179][ T7579] Bluetooth: hci0: invalid length 0, exp 2 for type 8 [ 179.869396][ T7598] syzkaller0: entered promiscuous mode [ 179.874950][ T7598] syzkaller0: entered allmulticast mode [ 180.610889][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.445'. [ 182.421014][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.441'. [ 182.453219][ T27] audit: type=1804 audit(1773270337.812:7): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.440" name="/newroot/97/file1" dev="fuse" ino=1 res=1 errno=0 [ 182.523653][ T27] audit: type=1800 audit(1773270337.832:8): pid=7630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.440" name="/" dev="fuse" ino=1 res=0 errno=0 [ 182.572973][ T27] audit: type=1800 audit(1773270337.842:9): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.440" name="/" dev="fuse" ino=1 res=0 errno=0 [ 182.799547][ T7638] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.903631][ T7642] IPVS: rr: FWM 3 0x00000003 - no destination available [ 182.910852][ T5869] IPVS: starting estimator thread 0... [ 183.025138][ T7644] loop4: detected capacity change from 0 to 512 [ 183.218211][ T5807] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 183.237440][ T7644] EXT4-fs warning (device loop4): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 183.253858][ T7644] EXT4-fs (loop4): mount failed [ 183.417125][ T5807] usb 2-1: config 0 has no interfaces? [ 183.476630][ T5807] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 183.499797][ T5807] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 183.533973][ T5807] usb 2-1: Product: syz [ 183.542649][ T5807] usb 2-1: Manufacturer: syz [ 183.553869][ T5807] usb 2-1: SerialNumber: syz [ 183.558900][ T7643] IPVS: using max 21 ests per chain, 50400 per kthread [ 183.568757][ T7638] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.596642][ T5807] usb 2-1: config 0 descriptor?? [ 183.802298][ T7638] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.961179][ T7638] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.030032][ T7658] netlink: 12 bytes leftover after parsing attributes in process `syz.4.454'. [ 184.134956][ T7638] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.162675][ T7638] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.180802][ T7638] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.214577][ T7638] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.306071][ T42] usb 2-1: USB disconnect, device number 8 [ 184.326986][ T7663] syzkaller0: entered promiscuous mode [ 184.333340][ T7663] syzkaller0: entered allmulticast mode [ 184.344641][ T7663] tipc: Started in network mode [ 184.349741][ T7663] tipc: Node identity bee6576bfea2, cluster identity 4711 [ 184.357544][ T7663] tipc: Enabled bearer , priority 0 [ 184.367761][ T7662] tipc: Resetting bearer [ 184.398246][ T7662] tipc: Disabling bearer [ 184.648431][ T7669] unsupported nlmsg_type 40 [ 186.172655][ T7706] xt_TCPMSS: Only works on TCP SYN packets [ 187.272692][ T7716] netlink: 'syz.1.472': attribute type 1 has an invalid length. [ 187.921419][ T7719] bond1: (slave gretap1): making interface the new active one [ 187.943565][ T7719] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 188.022730][ T7720] vlan0: entered allmulticast mode [ 188.046051][ T7720] bond1: entered allmulticast mode [ 188.051418][ T7720] gretap1: entered allmulticast mode [ 188.071383][ T7720] bond1: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 188.370208][ T7731] (null): rxe_set_mtu: Set mtu to 1024 [ 188.377109][ T7731] rdma_rxe: rxe_newlink: failed to add syz_tun [ 188.397136][ T7729] syzkaller0: entered promiscuous mode [ 188.402659][ T7729] syzkaller0: entered allmulticast mode [ 189.886001][ T5753] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 190.156508][ T5753] usb 1-1: Using ep0 maxpacket: 8 [ 190.221777][ T5753] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 190.325483][ T5753] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 190.383692][ T5753] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 190.410964][ T5753] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 190.445951][ T5753] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 190.486089][ T5753] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.558806][ T7757] bond_slave_0: entered promiscuous mode [ 190.564944][ T7757] bond_slave_1: entered promiscuous mode [ 190.571063][ T7757] vlan2: entered promiscuous mode [ 190.576185][ T7757] bond0: entered promiscuous mode [ 190.727288][ T5753] usb 1-1: GET_CAPABILITIES returned 0 [ 190.744182][ T5753] usbtmc 1-1:16.0: can't read capabilities [ 191.055546][ T7761] bond1: entered promiscuous mode [ 191.100608][ T7761] ip6gretap1: entered promiscuous mode [ 191.106745][ T7761] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 191.132509][ T7761] bond1 (unregistering): (slave ip6gretap1): Releasing backup interface [ 191.141747][ T7761] ip6gretap1: left promiscuous mode [ 191.154093][ T7761] bond1 (unregistering): Released all slaves [ 191.243377][ T23] usb 1-1: USB disconnect, device number 10 [ 191.418576][ T5766] Bluetooth: hci1: command 0x0406 tx timeout [ 191.424749][ T5768] Bluetooth: hci2: command 0x0406 tx timeout [ 191.431009][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 194.341146][ T23] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 194.929478][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.936201][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.050306][ T23] usb 5-1: config 0 has no interfaces? [ 195.071278][ T23] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 195.092243][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.141878][ T23] usb 5-1: config 0 descriptor?? [ 195.311262][ T7842] tipc: Enabled bearer , priority 0 [ 195.319806][ T7842] syzkaller0: entered promiscuous mode [ 195.325313][ T7842] syzkaller0: entered allmulticast mode [ 195.402373][ T23] usb 5-1: USB disconnect, device number 9 [ 195.442628][ T7842] tipc: Resetting bearer [ 195.470553][ T7841] tipc: Resetting bearer [ 195.535485][ T7841] tipc: Disabling bearer [ 195.888521][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 196.087954][ T7863] loop0: detected capacity change from 0 to 512 [ 196.154964][ T23] usb 5-1: unable to get BOS descriptor or descriptor too short [ 196.276476][ T7863] EXT4-fs warning (device loop0): ext4_enable_quotas:7184: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 196.292623][ T7863] EXT4-fs (loop0): mount failed [ 196.376207][ T23] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 196.608380][ T23] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 196.624504][ T23] usb 5-1: string descriptor 0 read error: -22 [ 196.638414][ T23] usb 5-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 196.658195][ T23] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.704059][ T23] usb 5-1: can't set config #1, error -71 [ 196.837828][ T23] usb 5-1: USB disconnect, device number 10 [ 197.955914][ T5828] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 198.167985][ T5828] usb 1-1: config index 0 descriptor too short (expected 28317, got 36) [ 198.176736][ T5828] usb 1-1: config 254 has too many interfaces: 62, using maximum allowed: 32 [ 198.192220][ T5828] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config [ 198.209325][ T5828] usb 1-1: config 254 has 0 interfaces, different from the descriptor's value: 62 [ 198.225147][ T5828] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 198.245920][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.579987][ T5828] usb 1-1: USB disconnect, device number 11 [ 198.951129][ T7905] netlink: 'syz.2.531': attribute type 4 has an invalid length. [ 199.094804][ T7900] syz.0.525 (7900) used greatest stack depth: 16744 bytes left [ 199.109114][ T7908] loop1: detected capacity change from 0 to 256 [ 199.218331][ T7908] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 201.880682][ T4803] Bluetooth: hci4: Frame reassembly failed (-84) [ 201.939472][ T51] Bluetooth: hci4: Received unexpected HCI Event 0x00 [ 202.971556][ T7934] loop0: detected capacity change from 0 to 131072 [ 203.000971][ T7934] F2FS-fs (loop0): Test dummy encryption mode enabled [ 203.009139][ T7934] F2FS-fs (loop0): invalid crc value [ 203.023405][ T7934] F2FS-fs (loop0): Found nat_bits in checkpoint [ 203.082685][ T7934] F2FS-fs (loop0): access invalid blkaddr:0 [ 203.094781][ T7934] CPU: 1 PID: 7934 Comm: syz.0.542 Not tainted syzkaller #0 [ 203.102129][ T7934] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 203.112220][ T7934] Call Trace: [ 203.115511][ T7934] [ 203.118445][ T7934] dump_stack_lvl+0x18c/0x250 [ 203.123172][ T7934] ? show_regs_print_info+0x20/0x20 [ 203.128404][ T7934] ? __up_read+0x2b6/0x6b0 [ 203.132845][ T7934] f2fs_is_valid_blkaddr+0xef8/0x1580 [ 203.138249][ T7934] sanity_check_extent_cache+0xfc/0x1f0 [ 203.143829][ T7934] f2fs_iget+0x33c5/0x47e0 [ 203.148306][ T7934] f2fs_fill_super+0x48b3/0x6be0 [ 203.153308][ T7934] ? kill_f2fs_super+0x3d0/0x3d0 [ 203.158267][ T7934] ? down_write+0x16e/0x200 [ 203.162790][ T7934] ? down_read_killable+0x340/0x340 [ 203.168015][ T7934] ? setup_bdev_super+0x56b/0x660 [ 203.173058][ T7934] mount_bdev+0x221/0x2d0 [ 203.177402][ T7934] ? kill_f2fs_super+0x3d0/0x3d0 [ 203.182434][ T7934] ? get_tree_bdev+0x520/0x520 [ 203.187245][ T7934] ? vfs_parse_fs_param+0x420/0x420 [ 203.192477][ T7934] legacy_get_tree+0xea/0x180 [ 203.197178][ T7934] ? trace_raw_output_f2fs__rw_end+0x110/0x110 [ 203.203376][ T7934] vfs_get_tree+0x8c/0x280 [ 203.207819][ T7934] do_new_mount+0x24b/0xa40 [ 203.212369][ T7934] __se_sys_mount+0x2e7/0x3d0 [ 203.217072][ T7934] ? __x64_sys_mount+0xc0/0xc0 [ 203.221852][ T7934] ? lockdep_hardirqs_on+0x98/0x150 [ 203.227068][ T7934] ? __x64_sys_mount+0x20/0xc0 [ 203.231843][ T7934] do_syscall_64+0x55/0xa0 [ 203.236372][ T7934] ? clear_bhb_loop+0x40/0x90 [ 203.241060][ T7934] ? clear_bhb_loop+0x40/0x90 [ 203.245756][ T7934] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 203.251664][ T7934] RIP: 0033:0x7efd8379da0a [ 203.256092][ T7934] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 203.275722][ T7934] RSP: 002b:00007efd8468de58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 203.284290][ T7934] RAX: ffffffffffffffda RBX: 00007efd8468dee0 RCX: 00007efd8379da0a [ 203.292283][ T7934] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 00007efd8468dea0 [ 203.300277][ T7934] RBP: 0000200000000100 R08: 00007efd8468dee0 R09: 0000000000000010 [ 203.308269][ T7934] R10: 0000000000000010 R11: 0000000000000246 R12: 0000200000000180 [ 203.316258][ T7934] R13: 00007efd8468dea0 R14: 00000000000105e8 R15: 0000200000000280 [ 203.324353][ T7934] [ 203.355878][ T7934] F2FS-fs (loop0): sanity_check_extent_cache: inode (ino=3) extent info [0, 0, 4128768] is incorrect, run fsck to fix [ 203.373607][ T7934] F2FS-fs (loop0): Failed to read root inode [ 203.895999][ T51] Bluetooth: hci4: command 0x1003 tx timeout [ 203.903888][ T5771] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 205.625547][ T7970] netlink: 'syz.4.548': attribute type 10 has an invalid length. [ 206.573542][ T7970] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 206.637209][ T7970] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 207.203616][ T7991] syzkaller0: entered promiscuous mode [ 207.209817][ T7991] syzkaller0: entered allmulticast mode [ 207.416260][ T5807] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 207.626062][ T5807] usb 5-1: Using ep0 maxpacket: 16 [ 207.639639][ T5807] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 207.676342][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 207.695970][ T5807] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 207.710481][ T5807] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 207.760840][ T5807] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 207.792075][ T5807] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 207.805543][ T5807] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 207.814095][ T5807] usb 5-1: Manufacturer: syz [ 207.830973][ T5807] usb 5-1: config 0 descriptor?? [ 210.062766][ T5807] rc_core: IR keymap rc-hauppauge not found [ 210.091545][ T5807] Registered IR keymap rc-empty [ 210.099488][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.130339][ T8014] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.146125][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.158262][ T8014] batadv_slave_0: entered promiscuous mode [ 210.183869][ T5807] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 210.214345][ T5807] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input9 [ 210.260948][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.300654][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.336205][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.366210][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.397893][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.446465][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.483237][ T8025] loop0: detected capacity change from 0 to 256 [ 210.496074][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.536029][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.577235][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.630776][ T5807] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 210.678681][ T8025] exFAT-fs (loop0): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 210.697296][ T8025] exFAT-fs (loop0): Filesystem has been set read-only [ 210.708318][ T5807] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 210.736288][ T5807] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 210.760318][ T5807] usb 5-1: USB disconnect, device number 11 [ 211.172959][ T8035] netlink: 'syz.0.571': attribute type 1 has an invalid length. [ 211.213141][ T8035] 8021q: adding VLAN 0 to HW filter on device bond1 [ 211.249481][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.572'. [ 211.308488][ T8038] bond1: (slave geneve2): making interface the new active one [ 211.320396][ T8038] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 211.652799][ T27] audit: type=1804 audit(1773270367.012:10): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.576" name="/newroot/130/file1" dev="fuse" ino=1 res=1 errno=0 [ 211.744406][ T27] audit: type=1800 audit(1773270367.012:11): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.576" name="/" dev="fuse" ino=1 res=0 errno=0 [ 211.774011][ T27] audit: type=1800 audit(1773270367.012:12): pid=8055 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.576" name="/" dev="fuse" ino=1 res=0 errno=0 [ 211.919320][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 212.108146][ T8074] netlink: 'syz.2.581': attribute type 12 has an invalid length. [ 213.082595][ T8086] netlink: 24 bytes leftover after parsing attributes in process `syz.2.592'. serialport: Connection terminated to allow system upgrade. Please reconnect at your convenience.