last executing test programs: 1m44.182566648s ago: executing program 4 (id=399): r0 = io_uring_setup(0x7d3, &(0x7f0000000000)={0x0, 0xddf7, 0x1, 0xfffffffb, 0x181}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x400000d2, 0x4) shutdown(r1, 0x0) close_range(r0, r0, 0x0) 1m43.731090994s ago: executing program 4 (id=401): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b80)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xa, &(0x7f0000000bc0)=r0, 0x4) sendmsg$inet(r0, &(0x7f0000000c00)={&(0x7f0000000c40)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x3406c012) write$cgroup_subtree(r0, &(0x7f0000000fc0)={[{0x2d, 'freezer'}]}, 0x9) 1m43.364398632s ago: executing program 4 (id=404): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) getsockopt$IP_SET_OP_VERSION(0xffffffffffffffff, 0x1, 0x53, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000007c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a"], 0x4c}}, 0x0) 1m43.071349931s ago: executing program 4 (id=408): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc31, &(0x7f0000001ec0)="$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") open(&(0x7f00000008c0)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000000900)=@loop={'/dev/loop', 0x0}, &(0x7f0000000940)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000980)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x108) 1m42.320070947s ago: executing program 4 (id=417): r0 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x40, 0x1, 0x154}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x20fb87, 0x800, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x1, 0x15a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7d, 0x8000, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x88de, 0x8, 0x3, 0xffffffff}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x1, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0x54, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x826, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, 0x0, 0x0}, 0x94) 1m41.545128366s ago: executing program 4 (id=422): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x4005, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000001}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1m41.030309298s ago: executing program 32 (id=422): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0x0, 0x200c8084, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x4005, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80000001}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002003, 0x0) 1m37.358795431s ago: executing program 0 (id=446): r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r1, &(0x7f0000000a40)={0xa, 0x0, 0x179, @empty, 0x9, 0x3}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) 1m37.147109883s ago: executing program 0 (id=448): r0 = syz_create_resource$futex(&(0x7f0000000140)=0x1) r1 = syz_create_resource$futex(&(0x7f00000001c0)) clock_gettime(0x0, &(0x7f00000008c0)={0x0, 0x0}) futex(r0, 0xb, 0x1, &(0x7f0000000900)={r2, r3+10000000}, r1, 0x2) futex(r0, 0xc, 0x1, 0x0, r1, 0x1) exit(0x3) 1m36.115326418s ago: executing program 0 (id=453): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e22, @loopback}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x8914, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000bc0)={@link_local={0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010102, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x64, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 1m35.823975267s ago: executing program 0 (id=455): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="6c617374626c6f636b3d30303030303030303030303030303030303030302c756d61736b3d30303030303030303030303030303030303030303030302c756e64656c6574652c6c6f6e6761642c73686f727461642c7569643d666f726765742c756e64656c6574652c696f636861727365743d757466382c73686f727461642c696f636861727365743d64656661756c742c7569643d666f726765742c6e6f7374726963742c73657373696f6e3d30303030303030303030303030303030303030302c706172746974696f6e3d30303030303030303030303030303030303030362c00b2e01f5c0b5c8fb2623d8f888e41dfceb3ecf959d23d90b071660660b17884bd109d37086024cf83fa"], 0x2, 0xc31, &(0x7f0000001ec0)="$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") open(&(0x7f00000008c0)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000000900)=@loop={'/dev/loop', 0x0}, &(0x7f0000000940)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000980)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x108) 1m35.023617949s ago: executing program 0 (id=460): r0 = socket$packet(0x11, 0x2, 0x300) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000080)) 1m34.834668448s ago: executing program 1 (id=461): r0 = syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000e40)=0x81) poll(&(0x7f0000001500)=[{r0, 0x41}], 0x1, 0x80) 1m34.472128275s ago: executing program 1 (id=464): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000600)={0x3, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000640)={0x3, &(0x7f0000000680)=[{0x28, 0x0, 0xf, 0xfffff034}, {0x48, 0x3, 0x0, 0xb928}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000c80)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r1, &(0x7f0000000dc0), 0x2e9, 0x0) 1m34.047259498s ago: executing program 1 (id=465): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x8, &(0x7f0000000080), 0x1, 0x9798, &(0x7f0000002c80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000001340)='./sys\x00', 0x1ff) symlink(&(0x7f000000cc40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', &(0x7f000000cd80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0xbe, 0x0, &(0x7f000000cfc0)) rename(&(0x7f000000d000)='./file0\x00', &(0x7f000000d040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f000002ca40)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1fd) 1m33.166669647s ago: executing program 1 (id=470): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x2, 0xc31, &(0x7f0000001ec0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbckmRNi2KEmV9Pjb13Z19b/a9easZiuCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr56+qzrPwA8Vq759z8AAAAAAAAAAAAAABx0KYp4MlLMXllNY9Xzjvrldt/tO6NDw9tXO5Kqmoeq8uVX/czZc+e/9MLghW5ebk9/QP377bPx2si1S42XZ27Nzk3Oz09ONEan2+MzE5O73sNe6291sjoAjVuv3564cWO+cfb5c5tevjPwfv8TxwcuDj576plu2dGh4eGRjSL13vK1e25Ix04zPA5HEacixXPf+2lqRUQRez8W9Qc79lsdqTpxsurE6NBw1ZGpdmt6oXzxavdAFBGNnkrN7jHafiyi1vdA+7CzZsRi2fyywSfL7o3MtuZa16cmG1dbcwvthfbM9NXUaW3Zn0YUcSFFLEXESv/du+uLImqR4jvHVtP1iDjUPQ5frCYG79yOYh/7uAtlOxt9EUvFIzBmB1h/FPFqpPjZOydiPJ9nqnPNFyJeLfMHEW+V+VJEKj8Y5yPe2+ZzxKOpFkX8ZTn+F1fTRHU+6J5XLn+t8ZXpGzM9ZbvnlY94fbjrTPGQrg9HtuSDccDPTfUoolWd8VfTvX+zAwAAAAAAAAAAAAAAAMD9diSK+EykeOU//qSaVxzVvPRjFwf/cOBXe+eMP/0h+ynLPh8Ri8Xu5uQezhMDr6arKT3kucSPs3oU8ad5/t+3HnZjAAAAAAAAAAAAAAAAAAAAHmtF/CRSvPjuibQUvWuKt6dvNq61rk91VoXtrv1brZlei1hbW1trpE42c47lXMy5lHM550rOKHL9nM2cYzkXcy7lXM65kjMdyvVzNnOO5VzMuZRzOedKzvX252zmHMu5mHMp53LOlZxxQNbuBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4OCmiiF9Eim9/YzVFiohmxFh0crn/YbcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACj1pyK+Hykaf9Rc31aLiFT933Gi/ON8NA+X+cloDpb5UjQv5WxVWWt+6yG0n73pS0X8OFL0199eH/A8/n2dZ+sfg3jrmxvPPlvr5KHuiwPv9z9x/NjFweHfeHqnx2m7Bpy83J6+facxOjQ8PNKzuZbf/ZM92wby+xb3p+tExPwbb77empqanLv3B+VHYA/VH6EHqfa49NSD6kHUDkQzHk7feQyU1//3IsXvvvuf3Qt+5/pfj1/pPFu/wsfP/2zj+v/i1h3t8vpf21ovX//La/p21/8ne7a9mL8b6atF1BduzfYdj6jPv/Hmqfat1s3Jm5PT50+f/vLg4JfPne47HFG/0Z6a7Hl0Xw4XAAAAAAAAAAAAAAAAwIOTivj9SNH68WpqRMSdar7WwMXBZ089cygOVfOtNs3bfm3k2qXGyzO3Zucm5+cnJxqj0+3xmYnJ3b5dvZruNTo0vC+d+VBH9rn9R+ovz8y+Mde++ccL275+tH7p+vzCXGt8+5fjSBQRzd4tJ6sGjw4NV42earemq6pXt51M/9H1pSL+K1KMn2+kz+dtef7/1hn+m+b/L27d0T7N//9Ez7byPVMq4ueR4nf+6un4fNXOo3HXMcvl/i5SnLzwuVwuDpflum3o3FegMzOwLPt/keKffrG5bHc+5JMbZc/s+sA+IsrxPxYpvv8X343fzNs23/9h+/E/unVH+zT+T/VsO7rpfgV77jp5/E9FipeefDt+K2/7oPt/dO+9cSIXXr8/xz6N/6d6tg3k9/3t+9N1AAAAAAAAAACAR1pfKuLvI8UPh2vphbxtN7//N7F1R/v0+1+f7tk2cX/WK/rQB3s+qAAAAABwQPSlIn4SKW4uvL0+h3rz/O+e+Z+/tzH/cyhtebX6Od+vVfcNuJ8//+s1kN93bO/dBgAAAAAAAAAAAAAAAAAAgAMlpSJeyOupj1Xz+Sd2XE99OVK88j/P5XLpeFmuuw78QPVn/crM9KlLU1Mz462F1vWpycbIbGt8sqz7VKRY/dvP5bpFtb56d735zhrvG2uxz0WK4X/olu2sxd5dm/ypjbJnyrKfiBT//Y+by3bXsf7URtmzZdm/iRRf/5ftyx7fKHuuLPvdSPGjrze6ZY+WZbv3R/30Rtnnx2eKfRgVAAAAAAAAAAAAAAAAAAAAHjd9qYg/jxT/e2tpfS5/Xv+/r+dp5a1v9qz3v8Wdap3/gWr9/50e38v6/9V9BRZ3elcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh4SlHEm5Fi9spqWu4vn3fUL7enb98ZHRrevtqRVNU8VJUvv+pnzp47/6UXBi9084Pr32+fiddGrl1qvDxza3Zucn5+cqIxOt0en5mY3PUe9lp/q5PVAWjcev32xI0b842zz5/b9PKdgff7nzg+cHHw2VPPdMuODg0Pj/SUqfXd87vfJe2w/XAU8deR4rnv/TT9sD+iiL0fiw/57Oy3I1UnTladGB0arjoy1W5NL5QvXu0eiCKi0VOpWR6jtDFu+zkWe9KMWCybXzb4ZNm9kdnWXOv61GTjamtuob3Qnpm+mjqtLbvTiCIupIiliFjpv3t3fVHE65HiO8dW07/2Rxzqfla+eGXkq6fP7tyOYh/7uAtlOxt9EUvFIzBmB1h/FPHPkeJn75yIf+uPqEXnK74Q8WqZP4h4KzrjXf39OB/x3jafIx5NtSji/8vxv7ia3ukvzwfd88rlrzW+Mn1jpqds97zyyF8fHqQDfm6qRxE/qs74q+nf/b0GAAAAAAAAAAAAAAAAOECK+PVI8eK7J1I1P3h9TnF7+mbjWuv6VGdaX3fuX3fO9Nra2lojdbKZcyznYs6lnMs5V3JGkevnbJZZX1sby88Xcy7lXM65kjMO5fo5mznHci7mXMq5nHMlZ9Ry/ZzNnGM5F3Mu5VzOuZIzDsjcPQAAAAAAAAAAAAAAAAAA4OOlqP5L8e1vrKa1/s760mPRyWXrgX7s/TIAAP//YSD4sQ==") open(&(0x7f00000008c0)='./bus\x00', 0x400141042, 0x22) mount(&(0x7f0000000900)=@loop={'/dev/loop', 0x0}, &(0x7f0000000940)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000980)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x0, 0x108) 1m32.394774915s ago: executing program 0 (id=473): r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x2) fcntl$addseals(r0, 0x409, 0xc) close_range(r0, r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fcntl$setstatus(r1, 0x4, 0x40000) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 1m32.328135182s ago: executing program 1 (id=474): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x21b0840, &(0x7f0000000280)=ANY=[], 0x2, 0x274, &(0x7f0000000300)="$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") r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, &(0x7f00000000c0), 0xf00) bind$can_raw(r0, &(0x7f0000000080), 0x10) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 1m31.782270388s ago: executing program 33 (id=473): r0 = memfd_create(&(0x7f0000000440)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00uKs\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x141<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\xb7>j0S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ\x00'/1136, 0x2) fcntl$addseals(r0, 0x409, 0xc) close_range(r0, r0, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fcntl$setstatus(r1, 0x4, 0x40000) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0) 1m31.586732308s ago: executing program 1 (id=477): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000440)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000480)=0x2050, 0x4) sendmsg$can_j1939(r0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f0000000580)={&(0x7f00000005c0)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/4115, 0x1013}], 0x1) 1m30.87651959s ago: executing program 34 (id=477): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000440)={0x1d, r1, 0x0, {0x1, 0x1, 0x4}, 0x1}, 0x18) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000480)=0x2050, 0x4) sendmsg$can_j1939(r0, &(0x7f00000004c0)={&(0x7f0000000500)={0x1d, r1, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18, &(0x7f0000000580)={&(0x7f00000005c0)="5ab37158946b88213a", 0x9}, 0x1, 0x0, 0x0, 0x20008840}, 0x4000000) readv(r0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/4115, 0x1013}], 0x1) 5.197490432s ago: executing program 2 (id=1337): syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 4.024924831s ago: executing program 3 (id=1351): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x205, 0x8401) r1 = syz_open_dev$usbmon(&(0x7f00000007c0), 0x7, 0x0) r2 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000800)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000840)={0x2, 0x3, 0x0, 0x0, 0x7995}, 0xfcb5, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) readv(r1, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/4096, 0x79c5}], 0x1) 3.845553289s ago: executing program 3 (id=1353): unshare(0x64000600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x15, 0x5, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10) getsockopt(r0, 0x200000000114, 0x2716, &(0x7f0000000240)=""/1, &(0x7f0000000280)=0xf002) 3.569645857s ago: executing program 6 (id=1357): pipe2$9p(&(0x7f0000000180), 0x800) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)={0x2000000a}) epoll_wait(r1, &(0x7f0000000080)=[{}], 0x1, 0x0) 3.355420829s ago: executing program 2 (id=1360): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008011) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 3.232153621s ago: executing program 6 (id=1361): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f00000001c0)='syz1\x00', 0x1ff) write$cgroup_devices(r1, &(0x7f0000000540)={'c', ' *:* ', 'w\x00'}, 0x8) 3.091671896s ago: executing program 2 (id=1362): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000300)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r2, {0x0, 0x8}, {}, {0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}]}]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x22004868}, 0x20044044) 2.897037405s ago: executing program 6 (id=1364): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000010700)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000010740)={0x2c, &(0x7f0000010780)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000107c0)={0x24, 0x0, &(0x7f0000010800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000010840)={0x24, 0x0, &(0x7f0000010880)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000108c0)={0x2c, 0x0, &(0x7f0000010900)={0x0, 0x3, 0x12, @string={0x12, 0x3, "78168a50f400010000a6a51d67b25503"}}, 0x0, 0x0, 0x0}, 0x0) 2.843396411s ago: executing program 2 (id=1365): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty, 0x3}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) shutdown(r0, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000880)={@in6={{0xa, 0x4e24, 0xf37, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000}}, 0x0, 0x0, 0x1e, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e24740bd4c0b42a21d7214bff16d2ccd00"}, 0xd8) sendto$inet6(r0, &(0x7f0000000000)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x40, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 2.35813843s ago: executing program 3 (id=1368): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000880), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000008c0)={0x2d2, 0xeeee8000, 0x4, r2, 0x11}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000900)={0x27800000000, 0x0, 0x1, r2}) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000940)={0x9, 0x0, 0x0, r2}) 2.35687509s ago: executing program 2 (id=1369): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./bus\x00', 0x800000, &(0x7f0000005e00)=ANY=[@ANYRES16=0x0], 0x1, 0x5516, &(0x7f00000006c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j525yEojhOIB2BkbwKxLj3qu4g2N4BJcuDQfwEhwBr+AFPAPuPIIBQzsQETQmdJho3kuG0mHyS0tg0X+TAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNeq2mo6eH68d9c+aLXynjw72w9UGOuQAAAAC7zarpKL4ZpP5pff+8vnVZ94sQwnLxvmtR3wlHG5mdOqf65vnqyxieQ4gJRSwNpOskhHBTX+8XTX8LAAAA8H+9jCfDtFpPL4O2B8QhpaJNeXabKa8IIVSDt0xp5TLvKlNY/H13w32mtFjA6mcKSyW3bq60bTui4999XbXrf2qK1JQ/R2abOwAAcECdjabBVQgAAAAtu2t7ALSjCKutzPVWYC819fbe8UYPAAAA+IOKtgcAAAAANC6u/9s8/29VgHD+HwAAADQnnf8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk2bVdFSNJ8N9c+aL/eSZDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8sD/vKBACYRAGe9d3JnP/w0qDpqYmVSB8/I3BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCb3/3l/8TUOJPMvTaWnkeStVNj69TYOzeO/jC+fg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDF/rycAAjEYBiMbz0p23+vyo9agwgzIH4k5LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAn5z7/e+er/o3hsRRVWOmiSnjVlVzVoklq8Sag8SWg/bpkwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC527uc1jioOAPh3f8zGVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlbczk7zGoFtKZ5bm84E377vTx3vfNwsl35lJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjvv78W9dJgv42517tb9a2upv72vT25s3VlKLcWd6txcU4nPvlfzD53F9hIBAADg8OjV9X1E3C22V1LfnZ/U/0U9JtX8PzxfxnU9v7/ur/u69k/t99/uvby70Hy5Tpr03Pp4dPzfqfSf3C5n2wv/O6I/ufKTey+9yRfS/WjzpZ1icj073928+cFgErrJAgAz61jdV0H981Dqh20mBsCh0c8K77r+7823mxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAE3Y249k67kTEUn8vTm7fv7Z2UH9j685S3U5fv76Vz5mmKCLi3Pp4dLzBvcy6y1euXlgdj0eXmg9ei4i2Vn+v2v6FT6YYHNHK9RH8ZzA39eBu9WW3n/PjB0W1lye/Vkv/IQEA8NQqqpbq+rvF9ko611mIePDjw/X/m1kcU9b/9z49fStfK6//h43tcPYtb1z8cvnylatvr19cPT86P/r8nRPDd4cnz5w6dWZ5cq9k2R0TAAAAHs+gann9P9g3Jv3b0SyOKev/r74ffpPP01P/H2jvoV/bmQAAABxuL77+15+dA853BoP4enVj49KwPO5+PlEeW0j1kc1VLa//ewttZwUAAAA0YWez89D7/2ezOKZ8/v/cT6/8ks/Zi4gj1fP/Y2tfjM82t52Z1sSvLre9RwAAANp1pGr58/9iIdX/3d1XHroR8dYbZVz9GcCp6v/eh9/+nK+Vv/9/srktzqTuYnk9Jv1iRH+x7YwAAAB4Wv39IOKZKFsq9v8otlc++/XoxwPv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA07Z8AAAD//ylXMzw=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x2fffe) sendfile(r1, r0, 0x0, 0x7ffff000) 2.219723394s ago: executing program 5 (id=1370): mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x8, 0x32, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x80) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0xb) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0, 0xfffffffffffffea2}, {0x0}, {0x0}, {0x0, 0xfffffe73}], 0x5, &(0x7f0000000040), 0xffffffffffffff63, 0x4040}, 0x40) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01') 2.188580997s ago: executing program 3 (id=1371): syz_mount_image$vfat(&(0x7f0000000400), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840c, &(0x7f0000000440)=ANY=[], 0x1, 0x2f5, &(0x7f0000000040)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/drivers/usbhid/remove_id\x00', 0x1, 0x0) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)=ANY=[], 0x328) write$FUSE_OPEN(r0, &(0x7f0000002580)={0x20, 0x0, 0x0, {0x0, 0x21}}, 0x20) 2.032098293s ago: executing program 5 (id=1373): mknod(&(0x7f00000000c0)='./file0\x00', 0x8001420, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001240)='./file0\x00', 0x42, 0x836d9fb164f927b3) io_setup(0x3, &(0x7f0000001280)=0x0) r2 = inotify_init() inotify_add_watch(r2, &(0x7f00000012c0)='./file0\x00', 0x2000001) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f0000001340)={0x0, 0x0, 0x10, 0x7, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x2}]) 1.913199356s ago: executing program 3 (id=1374): add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$rds(0x15, 0x5, 0x0) r0 = socket(0x40000000015, 0x805, 0x0) getsockopt(r0, 0x114, 0x271f, &(0x7f0000019440)=""/102400, &(0x7f00000000c0)=0x19000) 1.86510907s ago: executing program 7 (id=1375): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25", 0x9a}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000540)=""/8, 0x8}, {&(0x7f0000000600)=""/238, 0xee}], 0x2}, 0x0) 1.679564509s ago: executing program 5 (id=1376): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys_sec\x00', &(0x7f0000000100)='securityfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000540)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000580)) 1.584157469s ago: executing program 7 (id=1377): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x4008011) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0) 1.360563301s ago: executing program 5 (id=1379): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/pids.max\x00', 0x2, 0x0) write$binfmt_format(r0, &(0x7f0000000400)='1\x00', 0x2) syz_io_uring_setup(0x315b, &(0x7f0000000440)={0x0, 0xc7ca, 0x42, 0x1000, 0x7a}, &(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)) 1.287461559s ago: executing program 7 (id=1380): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) unshare(0x8040480) socket$inet6_tcp(0xa, 0x1, 0x0) 1.143158054s ago: executing program 5 (id=1381): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x8, 0xffffffffffffffff, 0x3, 0x7ffb, 0xfffbffff, 0x2}) 498.834389ms ago: executing program 6 (id=1382): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc_mnt\x00', &(0x7f00000001c0)='proc\x00', 0x800000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc_mnt/sys/net/ipv4/conf/lo/forwarding\x00', 0x1, 0x0) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x8922, &(0x7f0000000200)={'lo\x00', {0x2, 0x0, @rand_addr=0xff}}) write$P9_RRENAMEAT(r0, 0x0, 0x0) 498.122489ms ago: executing program 7 (id=1392): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='./file0/../file0\x00') 396.36557ms ago: executing program 2 (id=1383): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000000640)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000680)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f00000006c0)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000700)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 309.579458ms ago: executing program 6 (id=1384): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000600), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000ac0)=@gcm_128={{0x304}, "629f2ad1e25e04f2", "850100", "daf9af4a", "747aaaaf941f267e"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, &(0x7f0000000240)=@gcm_256={{0x303}, "f03c46d1a5685510", "24f186288f5204f09ad91a4ab8efe97e1fc8676fd442490a59d92512920f7812", "4dca9bcc", "d4f489db88efb71a"}, 0x1) 280.440791ms ago: executing program 7 (id=1385): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000340)=0x80000000) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000380)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000003c0)=0xc) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000440)=0x10) ioctl$SNDCTL_DSP_POST(r0, 0x5008, 0x0) 112.398348ms ago: executing program 5 (id=1386): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x1, 0x4) bind$packet(r0, &(0x7f0000000200)={0x11, 0x1, 0x1, 0x1, 0xfe, 0x6, @random="ee520800"}, 0x14) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x0) write(r0, &(0x7f0000000000)="01", 0x1) 46.557725ms ago: executing program 6 (id=1387): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f0000001800)='\x00', 0x1}], 0x1, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) splice(r0, 0x0, r2, 0x0, 0x25a5, 0x4) 29.929147ms ago: executing program 7 (id=1388): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x4, 0x4, 0xff, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f00000002c0), &(0x7f0000000300)='%-010d \x00'}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0xc, &(0x7f0000000500)=@framed={{}, [@generic={0x7a, 0xa, 0x0, 0xfffffff8}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x1, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001180)={r2, 0x0, 0xe, 0x0, &(0x7f0000001200)='\x00'/14, 0x0, 0x80000004, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 3 (id=1389): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x40) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x501, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x3c}}, 0x40848c0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x12e1b, 0x1a001}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}]}}}]}, 0x3c}}, 0x20004000) kernel console output (not intermixed with test programs): -gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 135.414650][ T4355] garmin_gps 3-1:1.0: Garmin GPS usb/tty converter detected [ 135.466900][ T4355] usb 3-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 135.672825][ T5392] usb 3-1: USB disconnect, device number 3 [ 135.699354][ T5392] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 135.709935][ T5392] garmin_gps 3-1:1.0: device disconnected [ 135.942482][ T5392] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 135.972125][ T5392] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 136.091130][ T4355] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 136.278734][ T4365] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.304419][ T4355] usb 5-1: Using ep0 maxpacket: 8 [ 136.319080][ T4355] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 136.346189][ T4355] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 136.366894][ T4355] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.391731][ T4355] usb 5-1: config 0 descriptor?? [ 136.499442][ T4365] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.521285][ T4365] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 229, setting to 64 [ 136.535578][ T4365] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 136.556861][ T4365] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 136.567464][ T4365] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.626964][ T4355] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 136.755386][ T5420] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 136.871530][ T3540] usb 5-1: USB disconnect, device number 4 [ 136.976012][ T5427] bridge0: port 1(erspan0) entered blocking state [ 136.983799][ T5427] bridge0: port 1(erspan0) entered disabled state [ 137.004523][ T5427] device erspan0 entered promiscuous mode [ 137.029938][ T5427] bridge0: port 1(erspan0) entered blocking state [ 137.037902][ T5427] bridge0: port 1(erspan0) entered forwarding state [ 137.095027][ T4518] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.113895][ T5430] device erspan0 left promiscuous mode [ 137.149376][ T5430] bridge0: port 1(erspan0) entered disabled state [ 137.218607][ T4365] cxacru_cm: 28 callbacks suppressed [ 137.218630][ T4365] cxacru 4-1:1.0: send of cm 0x84 failed (-71) [ 137.252576][ T4365] ATM dev 0: cxacru_atm_start: CHIP_ADSL_LINE_START returned -71 [ 137.271989][ T4365] cxacru 4-1:1.0: send of cm 0x88 failed (-71) [ 137.296715][ T4365] ATM dev 0: poll status: error -71 [ 137.312777][ T4365] ATM dev 0: polling disabled, set adsl_state to 'start' or 'poll' to resume [ 137.353678][ T4365] ATM dev 0: usbatm_submit_urb: urb 0xffff88803188a000 submission failed (-8)! [ 137.375926][ T5434] loop1: detected capacity change from 0 to 16 [ 137.379311][ T4365] ATM dev 0: usbatm_submit_urb: urb 0xffff888030081e00 submission failed (-8)! [ 137.435251][ T4365] ATM dev 0: usbatm_submit_urb: urb 0xffff888029d2b700 submission failed (-8)! [ 137.455078][ T4365] ATM dev 0: usbatm_submit_urb: urb 0xffff88802a3a9300 submission failed (-8)! [ 137.495983][ T5434] erofs: (device loop1): mounted with root inode @ nid 36. [ 137.516936][ T4365] usb 4-1: USB disconnect, device number 4 [ 137.957577][ T5391] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 137.991520][ T4365] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 138.020390][ T4365] hid-generic 0000:0000:0000.0005: hidraw0: HID v0.00 Device [syz1] on syz0 [ 138.149205][ T5391] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 138.169663][ T5391] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 138.206770][ T5391] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 138.248559][ T5391] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 138.284024][ T5391] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 138.314143][ T5391] usb 5-1: Product: syz [ 138.324261][ T5391] usb 5-1: Manufacturer: syz [ 138.365532][ T5438] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 138.387983][ T5391] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 138.419689][ T5391] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 138.684583][ T4359] usb 5-1: USB disconnect, device number 5 [ 138.705805][ T4359] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 138.725607][ T4359] garmin_gps 5-1:1.0: device disconnected [ 138.887051][ T5457] loop1: detected capacity change from 0 to 512 [ 138.975635][ T5457] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 138.986021][ T5457] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 139.024890][ T5464] EXT4-fs warning (device sda1): ext4_resize_fs:2028: can't read last block, resize aborted [ 139.255702][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 139.481856][ T5473] loop3: detected capacity change from 0 to 4096 [ 139.580897][ T5473] ntfs3: loop3: Failed to load $Extend. [ 139.589959][ T5392] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 139.626297][ T5392] hid-generic 0000:0000:0000.0006: hidraw0: HID v0.00 Device [syz1] on syz0 [ 140.202651][ T4289] ntfs3: loop3: ino=5, mi_enum_attr [ 140.213285][ T4289] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 140.234802][ T4289] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22. [ 140.584843][ T5507] loop3: detected capacity change from 0 to 512 [ 140.634022][ T5507] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 140.677658][ T5507] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c816e018, mo2=0002] [ 140.685860][ T5507] EXT4-fs (loop3): orphan cleanup on readonly fs [ 140.695303][ T5507] EXT4-fs error (device loop3): ext4_orphan_get:1435: comm syz.3.319: bad orphan inode 3 [ 140.708860][ T5507] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 140.741561][ T5507] EXT4-fs (loop3): ext4_remount: Checksum for group 0 failed (17031!=33349) [ 140.766266][ T5517] loop2: detected capacity change from 0 to 512 [ 140.842100][ T4289] EXT4-fs (loop3): unmounting filesystem. [ 140.901135][ T5517] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 140.946360][ T5517] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.348888][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 141.411133][ T5536] loop4: detected capacity change from 0 to 736 [ 142.430412][ T5562] loop3: detected capacity change from 0 to 7 [ 142.470285][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.479702][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.497174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 142.520079][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.529384][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.546456][ T5545] loop1: detected capacity change from 0 to 32768 [ 142.561042][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.570360][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.621802][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.621828][ T5566] loop0: detected capacity change from 0 to 16 [ 142.637386][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.638001][ T5545] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.332 (5545) [ 142.672964][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.676948][ T5566] erofs: (device loop0): mounted with root inode @ nid 36. [ 142.682260][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.717759][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.727030][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.748034][ T5545] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 142.762954][ T5545] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 142.776828][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.786125][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.786125][ T5545] BTRFS info (device loop1): setting nodatasum [ 142.798012][ T5562] ldm_validate_partition_table(): Disk read failed. [ 142.826783][ T5545] BTRFS info (device loop1): force zlib compression, level 3 [ 142.833309][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.843532][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.864334][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.873593][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.884130][ T5545] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 142.887357][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 142.894858][ T5545] BTRFS info (device loop1): use lzo compression, level 0 [ 142.903243][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 142.907229][ T0] NOHZ tick-stop error: local softirq work is pending, handler #302!!! [ 142.921874][ T5562] Dev loop3: unable to read RDB block 0 [ 142.940986][ T5545] BTRFS info (device loop1): turning on flush-on-commit [ 142.947232][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 142.952585][ T5545] BTRFS info (device loop1): enabling auto defrag [ 142.964570][ T5545] BTRFS info (device loop1): max_inline at 4096 [ 142.977181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!! [ 142.993868][ T5545] BTRFS info (device loop1): using free space tree [ 142.997241][ T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!! [ 143.017174][ T0] NOHZ tick-stop error: local softirq work is pending, handler #392!!! [ 143.041612][ T5562] loop3: unable to read partition table [ 143.047225][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 143.061708][ T5562] loop3: partition table beyond EOD, truncated [ 143.093082][ T5562] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %֐ȵ4FLQk݊5) failed (rc=-5) [ 143.393095][ T5545] BTRFS info (device loop1): enabling ssd optimizations [ 143.905976][ T4285] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.629274][ T5614] loop4: detected capacity change from 0 to 1024 [ 144.662622][ T5614] EXT4-fs: Ignoring removed oldalloc option [ 144.680762][ T5614] EXT4-fs: Ignoring removed oldalloc option [ 144.731445][ T5614] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 144.825207][ T5614] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.117871][ T5626] loop3: detected capacity change from 0 to 128 [ 145.185550][ T5626] EXT4-fs error (device loop3): __ext4_fill_super:5473: inode #2: comm syz.3.352: iget: checksum invalid [ 145.215849][ T5626] EXT4-fs (loop3): get root inode failed [ 145.227321][ T5626] EXT4-fs (loop3): mount failed [ 145.377357][ T5391] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 145.391087][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 145.599611][ T5391] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 145.601128][ T5637] loop4: detected capacity change from 0 to 2048 [ 145.655286][ T5637] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 145.664043][ T5391] usb 2-1: config 0 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 145.664075][ T5391] usb 2-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 145.664105][ T5391] usb 2-1: config 0 interface 0 has no altsetting 0 [ 145.697290][ T5391] usb 2-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 145.707975][ T5391] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.718224][ T5391] usb 2-1: config 0 descriptor?? [ 145.844472][ T4292] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 145.885222][ T4292] EXT4-fs (loop4): unmounting filesystem. [ 146.133484][ T5391] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 146.151194][ T5391] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0 [ 146.167347][ T5391] lenovo 0003:17EF:6047.0007: unbalanced collection at end of report description [ 146.195372][ T5391] lenovo 0003:17EF:6047.0007: hid_parse failed [ 146.219917][ T5391] lenovo: probe of 0003:17EF:6047.0007 failed with error -22 [ 146.336026][ T4359] usb 2-1: USB disconnect, device number 5 [ 147.412843][ T5667] loop3: detected capacity change from 0 to 32768 [ 147.445762][ T5667] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.366 (5667) [ 147.492744][ T5667] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 147.507653][ T5678] md/raid1:md4: active with 1 out of 2 mirrors [ 147.537100][ T5678] md4: detected capacity change from 0 to 4096 [ 147.542701][ T5667] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 147.586647][ T5667] BTRFS info (device loop3): enabling auto defrag [ 147.614976][ T5667] BTRFS info (device loop3): use no compression [ 147.634805][ T5667] BTRFS info (device loop3): force clearing of disk cache [ 147.658859][ T5667] BTRFS info (device loop3): max_inline at 4096 [ 147.685391][ T5667] BTRFS info (device loop3): disabling free space tree [ 147.895875][ T5667] BTRFS info (device loop3): enabling ssd optimizations [ 147.916509][ T5667] BTRFS info (device loop3): rebuilding free space tree [ 148.096222][ T5667] BTRFS info (device loop3): disabling free space tree [ 148.117443][ T5667] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 148.147537][ T5667] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 148.163223][ T5717] loop4: detected capacity change from 0 to 4096 [ 148.309221][ T5717] ntfs3: loop4: Failed to load $Extend. [ 149.375606][ T4292] ntfs3: loop4: ino=5, mi_enum_attr [ 149.397256][ T4292] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 149.428821][ T4292] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22. [ 149.471771][ T4289] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 150.173425][ T5750] netlink: 4 bytes leftover after parsing attributes in process `syz.1.387'. [ 150.336814][ T5735] loop2: detected capacity change from 0 to 32768 [ 150.454187][ T5735] XFS (loop2): Mounting V5 Filesystem [ 150.635454][ T5735] XFS (loop2): Ending clean mount [ 150.892061][ T5780] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 151.156471][ T4276] XFS (loop2): Unmounting Filesystem [ 151.212066][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'. [ 152.421752][ T5817] loop4: detected capacity change from 0 to 2048 [ 152.492495][ T5817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 152.562645][ T5821] loop1: detected capacity change from 0 to 512 [ 152.591015][ T5821] EXT4-fs: Ignoring removed i_version option [ 152.630723][ T5825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.412'. [ 152.681146][ T5821] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.727511][ T5817] loop4: detected capacity change from 2048 to 64 [ 152.764384][ T5829] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=1347, location=35 [ 152.793153][ T5821] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.409: invalid indirect mapped block 4294967295 (level 1) [ 152.828203][ T5829] UDF-fs: error (device loop4): udf_read_inode: (ino 1347) failed !bh [ 152.866706][ T5821] EXT4-fs (loop1): Remounting filesystem read-only [ 152.899685][ T5821] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.409: invalid indirect mapped block 4294967295 (level 1) [ 152.955536][ T5821] EXT4-fs (loop1): Remounting filesystem read-only [ 153.005596][ T5821] EXT4-fs (loop1): 2 truncates cleaned up [ 153.018671][ T5821] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 153.039089][ T4292] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=1345, location=33 [ 153.056814][ T4292] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 153.077701][ T5831] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 153.081221][ T4292] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=1345, location=33 [ 153.108762][ T5831] EXT4-fs (loop1): Remounting filesystem read-only [ 153.117651][ T5821] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.409: bg 0: block 5: invalid block bitmap [ 153.142753][ T4292] UDF-fs: error (device loop4): udf_read_inode: (ino 1345) failed !bh [ 153.197247][ T5821] EXT4-fs (loop1): Remounting filesystem read-only [ 153.224791][ T5821] EXT4-fs error (device loop1) in ext4_setattr:5728: Corrupt filesystem [ 153.254550][ T5821] EXT4-fs (loop1): Remounting filesystem read-only [ 153.306775][ T4285] EXT4-fs (loop1): unmounting filesystem. [ 153.612851][ T4292] syz-executor: attempt to access beyond end of device [ 153.612851][ T4292] loop4: rw=2049, sector=128, nr_sectors = 1 limit=64 [ 153.685224][ T4292] buffer_io_error: 9 callbacks suppressed [ 153.685242][ T4292] Buffer I/O error on dev loop4, logical block 128, lost sync page write [ 153.839131][ T4527] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.058319][ T5850] tls_set_device_offload: netdev not found [ 154.136413][ T4527] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.279171][ T4527] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.446341][ T4527] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.541322][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 155.552525][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 155.572887][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 155.581380][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 155.590722][ T50] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 155.610539][ T4287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 155.715431][ T5878] rxe_eth0 speed is unknown, defaulting to 1000 [ 157.326430][ T5878] chnl_net:caif_netlink_parms(): no params data found [ 157.707906][ T4287] Bluetooth: hci4: command 0x0409 tx timeout [ 157.717087][ T5878] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.724667][ T5878] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.757792][ T5878] device bridge_slave_0 entered promiscuous mode [ 157.843176][ T5878] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.861743][ T5878] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.873927][ T5878] device bridge_slave_1 entered promiscuous mode [ 157.888246][ T26] audit: type=1326 audit(1793510777.880:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5948 comm="syz.3.442" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c2319f559 code=0x0 [ 158.299086][ T5878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.326600][ T5878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.420909][ T5878] team0: Port device team_slave_0 added [ 158.580749][ T5878] team0: Port device team_slave_1 added [ 158.622560][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.629920][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.679196][ T5878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.730394][ T5878] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.744174][ T5878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.810149][ T5878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.980084][ T5878] device hsr_slave_0 entered promiscuous mode [ 159.002483][ T5980] loop3: detected capacity change from 0 to 512 [ 159.010164][ T5878] device hsr_slave_1 entered promiscuous mode [ 159.032482][ T5878] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.047237][ T5878] Cannot create hsr debugfs directory [ 159.070532][ T5980] EXT4-fs: Ignoring removed i_version option [ 159.077762][ T5980] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 159.112291][ T4527] device hsr_slave_0 left promiscuous mode [ 159.142480][ T4527] device hsr_slave_1 left promiscuous mode [ 159.158436][ T5980] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.451: invalid indirect mapped block 4294967295 (level 1) [ 159.193023][ T5980] EXT4-fs (loop3): Remounting filesystem read-only [ 159.233759][ T5980] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.451: invalid indirect mapped block 4294967295 (level 1) [ 159.280594][ T5980] EXT4-fs (loop3): Remounting filesystem read-only [ 159.291860][ T4527] device veth1_macvtap left promiscuous mode [ 159.317752][ T4527] device veth0_macvtap left promiscuous mode [ 159.324237][ T5980] EXT4-fs (loop3): 2 truncates cleaned up [ 159.338796][ T4527] device veth1_vlan left promiscuous mode [ 159.350105][ T5980] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 159.374089][ T4527] device veth0_vlan left promiscuous mode [ 159.434049][ T5980] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz.3.451: bg 0: block 5: invalid block bitmap [ 159.462940][ T5972] loop2: detected capacity change from 0 to 32768 [ 159.491543][ T5980] EXT4-fs (loop3): Remounting filesystem read-only [ 159.505022][ T5980] EXT4-fs error (device loop3) in ext4_setattr:5728: error 28 [ 159.517579][ T5972] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.449 (5972) [ 159.568977][ T5980] EXT4-fs (loop3): Remounting filesystem read-only [ 159.584814][ T5972] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.632853][ T5972] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 159.682470][ T5972] BTRFS info (device loop2): setting nodatasum [ 159.715617][ T5972] BTRFS info (device loop2): force zlib compression, level 3 [ 159.729694][ T5993] loop0: detected capacity change from 0 to 2048 [ 159.756809][ T5972] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 159.775761][ T4289] EXT4-fs (loop3): unmounting filesystem. [ 159.797676][ T4287] Bluetooth: hci4: command 0x041b tx timeout [ 159.850910][ T5972] BTRFS info (device loop2): use lzo compression, level 0 [ 159.877582][ T5972] BTRFS info (device loop2): turning on flush-on-commit [ 159.884628][ T5972] BTRFS info (device loop2): enabling auto defrag [ 159.892677][ T5993] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 159.903327][ T5972] BTRFS info (device loop2): max_inline at 4096 [ 159.937289][ T5972] BTRFS info (device loop2): using free space tree [ 160.108564][ T5993] loop0: detected capacity change from 2048 to 64 [ 160.119395][ T6008] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=1347, location=35 [ 160.132219][ T6008] UDF-fs: error (device loop0): udf_read_inode: (ino 1347) failed !bh [ 160.348318][ T5972] BTRFS info (device loop2): enabling ssd optimizations [ 160.423337][ T4278] syz-executor: attempt to access beyond end of device [ 160.423337][ T4278] loop0: rw=2049, sector=128, nr_sectors = 1 limit=64 [ 160.479516][ T4278] Buffer I/O error on dev loop0, logical block 128, lost sync page write [ 160.633913][ T4276] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 161.788030][ T6033] loop1: detected capacity change from 0 to 32768 [ 161.869023][ T4287] Bluetooth: hci4: command 0x040f tx timeout [ 161.881617][ T6033] XFS (loop1): Mounting V5 Filesystem [ 161.962054][ T6033] XFS (loop1): Ending clean mount [ 162.186897][ T4285] XFS (loop1): Unmounting Filesystem [ 162.466306][ T4527] bond0 (unregistering): Released all slaves [ 162.640607][ T6056] loop1: detected capacity change from 0 to 2048 [ 162.725262][ T6056] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 162.828269][ T6056] loop1: detected capacity change from 2048 to 64 [ 163.201282][ T4285] syz-executor: attempt to access beyond end of device [ 163.201282][ T4285] loop1: rw=2049, sector=128, nr_sectors = 1 limit=64 [ 163.275662][ T4285] Buffer I/O error on dev loop1, logical block 128, lost sync page write [ 163.310417][ T5878] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.384701][ T5878] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.479083][ T5878] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.606610][ T5878] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 163.897503][ T5878] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.947425][ T4287] Bluetooth: hci4: command 0x0419 tx timeout [ 163.968658][ T6060] loop3: detected capacity change from 0 to 32768 [ 163.989835][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.018894][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.037653][ T5878] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.077618][ T6060] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.472 (6060) [ 164.155716][ T6060] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 164.176059][ T4527] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.195244][ T6060] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 164.229088][ T6060] BTRFS info (device loop3): setting nodatasum [ 164.235340][ T6060] BTRFS info (device loop3): force zlib compression, level 3 [ 164.265996][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.284840][ T6060] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 164.295948][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.317384][ T6060] BTRFS info (device loop3): use lzo compression, level 0 [ 164.324593][ T6060] BTRFS info (device loop3): turning on flush-on-commit [ 164.332789][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.340175][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.367313][ T6060] BTRFS info (device loop3): enabling auto defrag [ 164.373859][ T6060] BTRFS info (device loop3): max_inline at 4096 [ 164.437358][ T6060] BTRFS info (device loop3): using free space tree [ 164.455457][ T4527] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.484836][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.493952][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.503572][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.518939][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.526115][ T4520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.628407][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.694326][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.714266][ T6060] BTRFS info (device loop3): enabling ssd optimizations [ 164.769953][ T4286] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 164.782696][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 164.797265][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 164.813999][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 164.828497][ T50] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 164.837324][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 164.886437][ T4527] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.974216][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.047795][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.098137][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 165.114888][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 165.155278][ T4289] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 165.155584][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 165.249675][ T6107] process 'syz.2.482' launched './file0' with NULL argv: empty string added [ 165.271815][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 165.293336][ T4287] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 165.301877][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 165.317550][ T4287] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 165.332506][ T4287] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 165.340768][ T4287] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 165.350588][ T4287] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 165.367466][ T4287] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 165.383090][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 165.537776][ T5878] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 165.545722][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 165.635853][ T4527] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.705085][ T6106] rxe_eth0 speed is unknown, defaulting to 1000 [ 165.759014][ T26] audit: type=1326 audit(1793510785.760:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6114 comm="syz.2.484" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f553499f559 code=0x0 [ 166.131627][ T4527] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.215625][ T6098] rxe_eth0 speed is unknown, defaulting to 1000 [ 166.356412][ T4527] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.535091][ T4527] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.746221][ T4527] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.798564][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 166.822238][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 166.890227][ T5878] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.907649][ T50] Bluetooth: hci1: command 0x0409 tx timeout [ 167.235251][ T6106] chnl_net:caif_netlink_parms(): no params data found [ 167.387735][ T50] Bluetooth: hci2: command 0x0409 tx timeout [ 167.607718][ T6106] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.615070][ T6106] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.639729][ T6106] device bridge_slave_0 entered promiscuous mode [ 167.662719][ T6098] chnl_net:caif_netlink_parms(): no params data found [ 167.708361][ T6106] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.715543][ T6106] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.747087][ T6106] device bridge_slave_1 entered promiscuous mode [ 168.078877][ T6106] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.100434][ T6106] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.157016][ T6168] loop2: detected capacity change from 0 to 8192 [ 168.217971][ T6168] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 168.233587][ T6168] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal [ 168.244414][ T6168] REISERFS (device loop2): using ordered data mode [ 168.251625][ T6168] reiserfs: using flush barriers [ 168.295577][ T6168] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 168.314586][ T6168] REISERFS (device loop2): checking transaction log (loop2) [ 168.416349][ T6106] team0: Port device team_slave_0 added [ 168.548894][ T6168] REISERFS (device loop2): Using tea hash to sort names [ 168.570018][ T6168] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 168.592671][ T6098] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.602693][ T6098] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.623105][ T6098] device bridge_slave_0 entered promiscuous mode [ 168.640458][ T6106] team0: Port device team_slave_1 added [ 168.788820][ T6098] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.796173][ T6098] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.805528][ T6098] device bridge_slave_1 entered promiscuous mode [ 168.820136][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 168.833654][ T6168] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [2 5 0x0 SD] (nlink == 1) not found (pos 2) [ 168.838676][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 168.976992][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 168.985787][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 168.993841][ T50] Bluetooth: hci1: command 0x041b tx timeout [ 169.015110][ T6098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.056997][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.080513][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.099709][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.106763][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.136353][ T6106] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.186255][ T6106] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.207182][ T6106] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.266667][ T6106] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.356020][ T5878] device veth0_vlan entered promiscuous mode [ 169.370670][ T6098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.468228][ T50] Bluetooth: hci2: command 0x041b tx timeout [ 169.531844][ T5878] device veth1_vlan entered promiscuous mode [ 169.576458][ T6098] team0: Port device team_slave_0 added [ 169.592523][ T6106] device hsr_slave_0 entered promiscuous mode [ 169.600706][ T6106] device hsr_slave_1 entered promiscuous mode [ 169.672652][ T6098] team0: Port device team_slave_1 added [ 169.690525][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.711674][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.729818][ T5878] device veth0_macvtap entered promiscuous mode [ 169.866779][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.881398][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.916807][ T6098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.936701][ T6098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.944083][ T6098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.977207][ T6098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.073170][ T5878] device veth1_macvtap entered promiscuous mode [ 170.320247][ T6098] device hsr_slave_0 entered promiscuous mode [ 170.337597][ T6098] device hsr_slave_1 entered promiscuous mode [ 170.352665][ T6098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.363275][ T6098] Cannot create hsr debugfs directory [ 170.370900][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.424763][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 170.452981][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 170.474913][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.485834][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.506519][ T5878] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.663187][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.672780][ T4492] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.708102][ T6204] netlink: 8 bytes leftover after parsing attributes in process `syz.2.503'. [ 170.727401][ T6204] netlink: 'syz.2.503': attribute type 1 has an invalid length. [ 170.742645][ T6204] netlink: 'syz.2.503': attribute type 2 has an invalid length. [ 170.802990][ T5878] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.829187][ T5878] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.847220][ T5878] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.877270][ T5878] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.067380][ T50] Bluetooth: hci1: command 0x040f tx timeout [ 171.174753][ T6216] netlink: 104 bytes leftover after parsing attributes in process `syz.2.507'. [ 171.381989][ T4520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.412933][ T4520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.444022][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.548560][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 171.600658][ T4520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.612657][ T6106] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 171.623801][ T4520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.661567][ T6106] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 171.696308][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.769163][ T6106] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 171.859799][ T6106] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 171.948153][ T4527] device hsr_slave_0 left promiscuous mode [ 171.990105][ T4527] device hsr_slave_1 left promiscuous mode [ 172.061665][ T4527] device hsr_slave_0 left promiscuous mode [ 172.092107][ T6233] loop5: detected capacity change from 0 to 2048 [ 172.099522][ T4527] device hsr_slave_1 left promiscuous mode [ 172.149481][ T6233] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 172.174365][ T6233] EXT4-fs error (device loop5): ext4_iget_extra_inode:4766: inode #12: comm syz.5.424: corrupted in-inode xattr [ 172.313633][ T4527] device veth1_macvtap left promiscuous mode [ 172.328103][ T4527] device veth0_macvtap left promiscuous mode [ 172.338012][ T4527] device veth1_vlan left promiscuous mode [ 172.354880][ T4527] device veth0_vlan left promiscuous mode [ 172.368705][ T5878] EXT4-fs (loop5): unmounting filesystem. [ 172.384332][ T4527] device veth1_macvtap left promiscuous mode [ 172.407963][ T4527] device veth0_macvtap left promiscuous mode [ 172.414471][ T4527] device veth1_vlan left promiscuous mode [ 172.423472][ T4527] device veth0_vlan left promiscuous mode [ 173.150950][ T50] Bluetooth: hci1: command 0x0419 tx timeout [ 173.634033][ T4287] Bluetooth: hci2: command 0x0419 tx timeout [ 173.943293][ T4527] bond0 (unregistering): Released all slaves [ 174.998796][ T4527] bond0 (unregistering): Released all slaves [ 175.168156][ T6098] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.211026][ T6098] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 175.240032][ T6098] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 175.297381][ T6098] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 175.510439][ T6106] 8021q: adding VLAN 0 to HW filter on device bond0 [ 175.586828][ T6106] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.619747][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 175.649284][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 175.702803][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 175.757827][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 175.772348][ T4520] bridge0: port 1(bridge_slave_0) entered blocking state [ 175.779615][ T4520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.817873][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 175.837438][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 175.865994][ T4520] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.873399][ T4520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.914343][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 175.931716][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 175.948675][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.013623][ T6098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.026656][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.045056][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.060446][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.080798][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.133623][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.143137][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.153227][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.162253][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 176.172146][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 176.186512][ T6106] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 176.218972][ T6098] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.226172][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.240699][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.276434][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.314125][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.344081][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.351318][ T4533] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.415323][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.441169][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.451458][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.505503][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.512789][ T4533] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.522304][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.539723][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.573172][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.619319][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.685206][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.780990][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.803229][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.860182][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.899579][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 176.936256][ T6098] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 176.975064][ T6098] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.019202][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.035885][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.146784][ T6311] loop5: detected capacity change from 0 to 128 [ 177.291376][ T6311] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 177.300588][ T6311] ext4 filesystem being mounted at /6/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 177.333202][ T6311] syz.5.527 (pid 6311) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 177.486137][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.507695][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.533894][ T5878] EXT4-fs (loop5): unmounting filesystem. [ 177.551913][ T6106] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.009100][ T6112] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 178.137541][ T6332] IPVS: Scheduler module ip_vs_ not found [ 178.195532][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 178.222357][ T4533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 178.249051][ T6112] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 178.280085][ T6098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.287188][ T6112] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.324221][ T6112] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 178.357563][ T6112] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 178.381096][ T6112] usb 4-1: Product: syz [ 178.393276][ T6112] usb 4-1: Manufacturer: syz [ 178.436575][ T6112] hub 4-1:4.0: USB hub found [ 178.613784][ T6344] netlink: 20 bytes leftover after parsing attributes in process `syz.5.534'. [ 178.638122][ T6112] hub 4-1:4.0: config failed, hub has too many ports! (err -19) [ 178.944263][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 178.967885][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 178.987728][ T6112] usb 4-1: USB disconnect, device number 5 [ 179.025886][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.038637][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.076377][ T6106] device veth0_vlan entered promiscuous mode [ 179.084632][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.098450][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.122514][ T6106] device veth1_vlan entered promiscuous mode [ 179.180940][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.196659][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.216925][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.229439][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.242080][ T6106] device veth0_macvtap entered promiscuous mode [ 179.251678][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.274311][ T6106] device veth1_macvtap entered promiscuous mode [ 179.313292][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.332713][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.352114][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.363868][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.381894][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.397602][ T6106] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.420159][ T6106] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.459743][ T6106] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.484670][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.517620][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.555918][ T6106] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.587971][ T6106] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.613841][ T6106] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.627521][ T6106] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.693784][ T26] audit: type=1326 audit(1793510799.690:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6349 comm="syz.5.535" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60cb39f559 code=0x7fc00000 [ 179.812545][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.842075][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.928383][ T4527] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.945645][ T4527] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.983077][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.999170][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 180.033577][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 180.057082][ T6098] device veth0_vlan entered promiscuous mode [ 180.077680][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 180.100394][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 180.144432][ T6098] device veth1_vlan entered promiscuous mode [ 180.150745][ T4508] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.175309][ T4508] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.205566][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 180.219395][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 180.233360][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 180.305771][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 180.318205][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 180.346236][ T6098] device veth0_macvtap entered promiscuous mode [ 180.386313][ T6098] device veth1_macvtap entered promiscuous mode [ 180.495940][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.533337][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.553199][ T6394] input: syz0 as /devices/virtual/input/input9 [ 180.579057][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.611519][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.642916][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.669202][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 180.681112][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 180.711433][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.741318][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.784122][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.817065][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.856206][ T6098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.874258][ T6399] loop3: detected capacity change from 0 to 24 [ 180.916376][ T6399] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 180.931776][ T6098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.961377][ T6399] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 180.973360][ T6098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.991945][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.015494][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.072569][ T6098] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.114846][ T6098] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.157570][ T6098] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.200692][ T6098] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.447358][ T4520] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.455270][ T4520] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.523026][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.584295][ T4527] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.612167][ T4527] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.643063][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.707231][ T6112] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.811439][ T6454] overlayfs: failed to clone upperpath [ 182.897218][ T6112] usb 3-1: Using ep0 maxpacket: 8 [ 182.904514][ T6112] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 182.948259][ T6112] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 183.009053][ T6112] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 183.044854][ T6112] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 183.092030][ T6112] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 183.111248][ T6466] fuse: Bad value for 'fd' [ 183.132332][ T6112] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 183.141596][ T6466] capability: warning: `syz.3.565' uses deprecated v2 capabilities in a way that may be insecure [ 183.173312][ T6112] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 183.318412][ T6469] loop7: detected capacity change from 0 to 2048 [ 183.405880][ T6469] UDF-fs: error (device loop7): udf_process_sequence: Primary Volume Descriptor not found! [ 183.417017][ T6112] usb 3-1: usb_control_msg returned -32 [ 183.423104][ T6112] usbtmc 3-1:16.0: can't read capabilities [ 183.521385][ T6469] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 184.262048][ T6490] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 184.400187][ T4365] usb 3-1: USB disconnect, device number 4 [ 184.404829][ T6472] loop6: detected capacity change from 0 to 40427 [ 184.490736][ T6472] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (262145, 24) [ 184.513495][ T6472] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 184.555826][ T6472] F2FS-fs (loop6): invalid crc value [ 184.579570][ T6472] F2FS-fs (loop6): invalid crc value [ 184.600860][ T6472] F2FS-fs (loop6): Failed to get valid F2FS checkpoint [ 184.766193][ T6508] netlink: 4 bytes leftover after parsing attributes in process `syz.3.574'. [ 186.543892][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.5.590'. [ 186.823469][ T6577] FAULT_INJECTION: forcing a failure. [ 186.823469][ T6577] name failslab, interval 1, probability 0, space 0, times 0 [ 186.921048][ T6577] CPU: 0 PID: 6577 Comm: syz.5.594 Not tainted syzkaller #0 [ 186.928437][ T6577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 186.938607][ T6577] Call Trace: [ 186.941970][ T6577] [ 186.944958][ T6577] dump_stack_lvl+0x188/0x24e [ 186.949756][ T6577] ? show_regs_print_info+0x12/0x12 [ 186.955048][ T6577] ? load_image+0x410/0x410 [ 186.959621][ T6577] ? __might_sleep+0xd0/0xd0 [ 186.964274][ T6577] ? __lock_acquire+0x7ea0/0x7ea0 [ 186.969371][ T6577] ? mark_lock+0x94/0x320 [ 186.973786][ T6577] should_fail_ex+0x390/0x4c0 [ 186.978539][ T6577] should_failslab+0x5/0x20 [ 186.983099][ T6577] slab_pre_alloc_hook+0x59/0x300 [ 186.988189][ T6577] ? snd_pcm_hw_param_near+0x82/0x460 [ 186.993621][ T6577] __kmem_cache_alloc_node+0x4f/0x270 [ 186.999061][ T6577] ? snd_pcm_hw_param_near+0x82/0x460 [ 187.004967][ T6577] kmalloc_trace+0x26/0xe0 [ 187.009443][ T6577] snd_pcm_hw_param_near+0x82/0x460 [ 187.014700][ T6577] ? __kmem_cache_free+0xb6/0x200 [ 187.019804][ T6577] snd_pcm_oss_change_params_locked+0xf04/0x3bd0 [ 187.026227][ T6577] ? __lock_acquire+0x7ea0/0x7ea0 [ 187.031332][ T6577] ? snd_pcm_oss_make_ready+0xbc/0x330 [ 187.036851][ T6577] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 187.042053][ T6577] ? mutex_lock_nested+0x10/0x10 [ 187.047137][ T6577] ? __mutex_lock+0x1ab/0xb40 [ 187.051888][ T6577] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 187.057626][ T6577] snd_pcm_oss_make_ready+0x117/0x330 [ 187.063048][ T6577] snd_pcm_oss_set_trigger+0x95/0x740 [ 187.068464][ T6577] ? _raw_spin_unlock_irq+0x1f/0x40 [ 187.073728][ T6577] ? lockdep_hardirqs_on+0x94/0x140 [ 187.078972][ T6577] snd_pcm_oss_poll+0x5fd/0x860 [ 187.083870][ T6577] ? snd_pcm_oss_write+0xb70/0xb70 [ 187.089015][ T6577] do_sys_poll+0x8d3/0x12e0 [ 187.093551][ T6577] ? read_lock_is_recursive+0x10/0x10 [ 187.098974][ T6577] ? poll_select_finish+0x640/0x640 [ 187.104210][ T6577] ? __schedule+0x1091/0x4140 [ 187.109028][ T6577] ? poll_initwait+0x150/0x150 [ 187.113866][ T6577] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 187.120250][ T6577] ? set_user_sigmask+0xca/0x1c0 [ 187.125224][ T6577] ? sigprocmask+0x190/0x190 [ 187.129854][ T6577] __se_sys_ppoll+0x206/0x2a0 [ 187.134570][ T6577] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 187.140600][ T6577] ? __x64_sys_ppoll+0xc0/0xc0 [ 187.145404][ T6577] ? lockdep_hardirqs_on+0x94/0x140 [ 187.150644][ T6577] ? __x64_sys_ppoll+0x1c/0xc0 [ 187.155452][ T6577] do_syscall_64+0x4c/0xa0 [ 187.159907][ T6577] ? clear_bhb_loop+0x60/0xb0 [ 187.164620][ T6577] ? clear_bhb_loop+0x60/0xb0 [ 187.169340][ T6577] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.175279][ T6577] RIP: 0033:0x7f60cb39f559 [ 187.179740][ T6577] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.199378][ T6577] RSP: 002b:00007f60cc1cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 187.207829][ T6577] RAX: ffffffffffffffda RBX: 00007f60cb625fa0 RCX: 00007f60cb39f559 [ 187.215840][ T6577] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 187.223842][ T6577] RBP: 00007f60cb436b50 R08: 0000000000000000 R09: 0000000000000000 [ 187.231844][ T6577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.239852][ T6577] R13: 00007f60cb626038 R14: 00007f60cb625fa0 R15: 00007fff26d5b208 [ 187.247875][ T6577] [ 187.544977][ T6585] FAULT_INJECTION: forcing a failure. [ 187.544977][ T6585] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 187.595056][ T6585] CPU: 0 PID: 6585 Comm: syz.7.597 Not tainted syzkaller #0 [ 187.602445][ T6585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 187.612563][ T6585] Call Trace: [ 187.615893][ T6585] [ 187.618871][ T6585] dump_stack_lvl+0x188/0x24e [ 187.623624][ T6585] ? show_regs_print_info+0x12/0x12 [ 187.628903][ T6585] ? load_image+0x410/0x410 [ 187.633492][ T6585] ? __lock_acquire+0x7ea0/0x7ea0 [ 187.638613][ T6585] should_fail_ex+0x390/0x4c0 [ 187.643389][ T6585] _copy_to_user+0x2c/0x130 [ 187.647992][ T6585] bpf_verifier_vlog+0x172/0x3a0 [ 187.653001][ T6585] __btf_verifier_log+0xdf/0x130 [ 187.658023][ T6585] ? btf_check_sec_info+0x350/0x350 [ 187.663285][ T6585] ? btf_parse_hdr+0x1dd/0x7d0 [ 187.668104][ T6585] btf_parse_hdr+0x456/0x7d0 [ 187.672834][ T6585] btf_new_fd+0x367/0x760 [ 187.677219][ T6585] __sys_bpf+0x612/0x780 [ 187.681512][ T6585] ? bpf_link_show_fdinfo+0x550/0x550 [ 187.687024][ T6585] ? lock_chain_count+0x20/0x20 [ 187.691930][ T6585] __x64_sys_bpf+0x78/0x90 [ 187.696394][ T6585] do_syscall_64+0x4c/0xa0 [ 187.700894][ T6585] ? clear_bhb_loop+0x60/0xb0 [ 187.705616][ T6585] ? clear_bhb_loop+0x60/0xb0 [ 187.710362][ T6585] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 187.716301][ T6585] RIP: 0033:0x7f983719f559 [ 187.720760][ T6585] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 187.740399][ T6585] RSP: 002b:00007f98353f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 187.748870][ T6585] RAX: ffffffffffffffda RBX: 00007f9837425fa0 RCX: 00007f983719f559 [ 187.756899][ T6585] RDX: 0000000000000028 RSI: 0000200000000940 RDI: 0000000000000012 [ 187.764904][ T6585] RBP: 00007f9837236b50 R08: 0000000000000000 R09: 0000000000000000 [ 187.772905][ T6585] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.780915][ T6585] R13: 00007f9837426038 R14: 00007f9837425fa0 R15: 00007fff86076bb8 [ 187.788955][ T6585] [ 187.844633][ T6562] loop2: detected capacity change from 0 to 40427 [ 187.890621][ T6562] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (262145, 24) [ 187.921344][ T6562] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.955781][ T6562] F2FS-fs (loop2): invalid crc value [ 187.991537][ T6562] F2FS-fs (loop2): invalid crc value [ 188.007528][ T6562] F2FS-fs (loop2): Failed to get valid F2FS checkpoint [ 188.465227][ T6607] rxe_eth0 speed is unknown, defaulting to 1000 [ 188.622425][ T6615] FAULT_INJECTION: forcing a failure. [ 188.622425][ T6615] name failslab, interval 1, probability 0, space 0, times 0 [ 188.665206][ T6615] CPU: 0 PID: 6615 Comm: syz.2.607 Not tainted syzkaller #0 [ 188.672603][ T6615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 188.682732][ T6615] Call Trace: [ 188.686071][ T6615] [ 188.689190][ T6615] dump_stack_lvl+0x188/0x24e [ 188.694173][ T6615] ? show_regs_print_info+0x12/0x12 [ 188.699449][ T6615] ? load_image+0x410/0x410 [ 188.704126][ T6615] ? __might_sleep+0xd0/0xd0 [ 188.709212][ T6615] ? __lock_acquire+0x7ea0/0x7ea0 [ 188.714509][ T6615] should_fail_ex+0x390/0x4c0 [ 188.719258][ T6615] should_failslab+0x5/0x20 [ 188.723812][ T6615] slab_pre_alloc_hook+0x59/0x300 [ 188.728893][ T6615] ? __netlink_kernel_create+0x1ee/0x7b0 [ 188.734685][ T6615] __kmem_cache_alloc_node+0x4f/0x270 [ 188.740117][ T6615] ? __init_waitqueue_head+0xa4/0x140 [ 188.745533][ T6615] ? __netlink_kernel_create+0x1ee/0x7b0 [ 188.751292][ T6615] __kmalloc+0xa3/0x240 [ 188.755482][ T6615] __netlink_kernel_create+0x1ee/0x7b0 [ 188.761024][ T6615] ? netlink_set_err+0x3b0/0x3b0 [ 188.766004][ T6615] ? lockdep_softirqs_off+0x430/0x430 [ 188.771419][ T6615] ? rtnetlink_net_init+0xa1/0x140 [ 188.776584][ T6615] rtnetlink_net_init+0xb0/0x140 [ 188.781582][ T6615] ? nlmsg_populate_fdb_fill+0x620/0x620 [ 188.787266][ T6615] ? rtnetlink_net_exit+0x60/0x60 [ 188.792337][ T6615] ? rtnetlink_rcv+0x20/0x20 [ 188.796969][ T6615] ops_init+0x360/0x5e0 [ 188.801172][ T6615] setup_net+0x4f2/0xbd0 [ 188.805538][ T6615] ? copy_net_ns+0x5b0/0x5b0 [ 188.810176][ T6615] ? copy_net_ns+0x324/0x5b0 [ 188.814805][ T6615] ? down_read_killable+0x1cc/0x340 [ 188.820058][ T6615] copy_net_ns+0x33e/0x5b0 [ 188.824516][ T6615] create_new_namespaces+0x3ce/0x700 [ 188.829940][ T6615] unshare_nsproxy_namespaces+0x116/0x160 [ 188.835704][ T6615] ksys_unshare+0x4f6/0x8e0 [ 188.840268][ T6615] ? sighand_ctor+0x40/0x40 [ 188.844809][ T6615] ? lock_chain_count+0x20/0x20 [ 188.849733][ T6615] ? syscall_enter_from_user_mode+0x21/0x80 [ 188.855669][ T6615] __x64_sys_unshare+0x34/0x40 [ 188.860478][ T6615] do_syscall_64+0x4c/0xa0 [ 188.864950][ T6615] ? clear_bhb_loop+0x60/0xb0 [ 188.869668][ T6615] ? clear_bhb_loop+0x60/0xb0 [ 188.874390][ T6615] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 188.880331][ T6615] RIP: 0033:0x7f553499f559 [ 188.884808][ T6615] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 188.904452][ T6615] RSP: 002b:00007f5532bf6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 188.912907][ T6615] RAX: ffffffffffffffda RBX: 00007f5534c25fa0 RCX: 00007f553499f559 [ 188.920916][ T6615] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 188.928938][ T6615] RBP: 00007f5534a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 188.936962][ T6615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.944971][ T6615] R13: 00007f5534c26038 R14: 00007f5534c25fa0 R15: 00007ffc0e2b1c18 [ 188.952992][ T6615] [ 189.170037][ T6624] loop7: detected capacity change from 0 to 128 [ 189.259453][ T6624] syz.7.608: attempt to access beyond end of device [ 189.259453][ T6624] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 189.289556][ T6624] syz.7.608: attempt to access beyond end of device [ 189.289556][ T6624] loop7: rw=2049, sector=169, nr_sectors = 6 limit=128 [ 189.387406][ T128] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 189.579330][ T6634] netlink: 3568 bytes leftover after parsing attributes in process `syz.7.613'. [ 189.590687][ T128] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 189.615273][ T128] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 189.651075][ T128] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 189.690458][ T128] usb 7-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00 [ 189.721055][ T128] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.753839][ T6625] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 189.763863][ T6625] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 189.792415][ T128] pl2303 7-1:1.0: pl2303 converter detected [ 189.817791][ T128] usb 7-1: pl2303 converter now attached to ttyUSB0 [ 190.117560][ T6625] pl2303 7-1:1.0: pl2303_vendor_write - failed to write [0007]: -110 [ 190.153258][ T6625] pl2303 ttyUSB0: pl2303_get_line_request - failed: -32 [ 190.190769][ T6625] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32 [ 190.207366][ T6625] pl2303 7-1:1.0: pl2303_vendor_read - failed to read [000a]: -32 [ 190.228613][ T6625] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32 [ 190.264209][ T4358] usb 7-1: USB disconnect, device number 2 [ 190.264956][ C0] pl2303 ttyUSB0: pl2303_read_int_callback - usb_submit_urb failed with result -19 [ 190.497286][ T6625] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -19 [ 190.514487][ T6625] pl2303 ttyUSB0: error sending break = -19 [ 190.545173][ T4358] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0 [ 190.568008][ T4358] pl2303 7-1:1.0: device disconnected [ 191.271176][ T4287] Bluetooth: Wrong link type (-22) [ 191.292281][ T6660] loop2: detected capacity change from 0 to 40427 [ 191.312703][ T6660] F2FS-fs (loop2): invalid crc value [ 191.342899][ T6660] F2FS-fs (loop2): Found nat_bits in checkpoint [ 191.561997][ T6660] F2FS-fs (loop2): Start checkpoint disabled! [ 191.635448][ T6660] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 191.775056][ T6660] syz.2.623: attempt to access beyond end of device [ 191.775056][ T6660] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 191.824638][ T6660] syz.2.623: attempt to access beyond end of device [ 191.824638][ T6660] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 192.227071][ T4527] kworker/u4:22: attempt to access beyond end of device [ 192.227071][ T4527] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 192.282287][ T4527] kworker/u4:22: attempt to access beyond end of device [ 192.282287][ T4527] loop2: rw=2049, sector=40976, nr_sectors = 8 limit=40427 [ 192.764630][ T6725] netlink: 202920 bytes leftover after parsing attributes in process `syz.7.643'. [ 193.271788][ T6737] IPVS: Scheduler module ip_vs_ not found [ 193.832818][ T6769] FAULT_INJECTION: forcing a failure. [ 193.832818][ T6769] name failslab, interval 1, probability 0, space 0, times 0 [ 193.882665][ T6769] CPU: 1 PID: 6769 Comm: syz.7.654 Not tainted syzkaller #0 [ 193.890073][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 193.900190][ T6769] Call Trace: [ 193.903523][ T6769] [ 193.906507][ T6769] dump_stack_lvl+0x188/0x24e [ 193.911262][ T6769] ? show_regs_print_info+0x12/0x12 [ 193.916532][ T6769] ? load_image+0x410/0x410 [ 193.921155][ T6769] ? __might_sleep+0xd0/0xd0 [ 193.925810][ T6769] ? __lock_acquire+0x7ea0/0x7ea0 [ 193.930918][ T6769] should_fail_ex+0x390/0x4c0 [ 193.935663][ T6769] should_failslab+0x5/0x20 [ 193.940232][ T6769] slab_pre_alloc_hook+0x59/0x300 [ 193.945412][ T6769] ? security_sk_alloc+0x47/0x130 [ 193.950506][ T6769] __kmem_cache_alloc_node+0x4f/0x270 [ 193.955952][ T6769] ? security_sk_alloc+0x47/0x130 [ 193.961061][ T6769] __kmalloc+0xa3/0x240 [ 193.965299][ T6769] ? sk_prot_alloc+0xe7/0x210 [ 193.970059][ T6769] security_sk_alloc+0x47/0x130 [ 193.974995][ T6769] sk_prot_alloc+0x101/0x210 [ 193.979698][ T6769] ? sk_alloc+0x20/0x330 [ 193.984021][ T6769] sk_alloc+0x36/0x330 [ 193.988171][ T6769] __netlink_create+0x6b/0x2d0 [ 193.993039][ T6769] __netlink_kernel_create+0x144/0x7b0 [ 193.998587][ T6769] ? netlink_set_err+0x3b0/0x3b0 [ 194.003596][ T6769] ? lockdep_softirqs_off+0x430/0x430 [ 194.009034][ T6769] ? rtnetlink_net_init+0xa1/0x140 [ 194.014210][ T6769] rtnetlink_net_init+0xb0/0x140 [ 194.019208][ T6769] ? nlmsg_populate_fdb_fill+0x620/0x620 [ 194.024900][ T6769] ? rtnetlink_net_exit+0x60/0x60 [ 194.029973][ T6769] ? rtnetlink_rcv+0x20/0x20 [ 194.034803][ T6769] ops_init+0x360/0x5e0 [ 194.039028][ T6769] setup_net+0x4f2/0xbd0 [ 194.043328][ T6769] ? copy_net_ns+0x5b0/0x5b0 [ 194.047975][ T6769] ? copy_net_ns+0x324/0x5b0 [ 194.052623][ T6769] ? down_read_killable+0x1cc/0x340 [ 194.057871][ T6769] copy_net_ns+0x33e/0x5b0 [ 194.062335][ T6769] create_new_namespaces+0x3ce/0x700 [ 194.067673][ T6769] unshare_nsproxy_namespaces+0x116/0x160 [ 194.073433][ T6769] ksys_unshare+0x4f6/0x8e0 [ 194.077983][ T6769] ? sighand_ctor+0x40/0x40 [ 194.082572][ T6769] ? lock_chain_count+0x20/0x20 [ 194.087478][ T6769] ? syscall_enter_from_user_mode+0x21/0x80 [ 194.093409][ T6769] __x64_sys_unshare+0x34/0x40 [ 194.098211][ T6769] do_syscall_64+0x4c/0xa0 [ 194.102686][ T6769] ? clear_bhb_loop+0x60/0xb0 [ 194.107400][ T6769] ? clear_bhb_loop+0x60/0xb0 [ 194.112125][ T6769] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 194.118055][ T6769] RIP: 0033:0x7f983719f559 [ 194.122587][ T6769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 194.142234][ T6769] RSP: 002b:00007f98353f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 194.150689][ T6769] RAX: ffffffffffffffda RBX: 00007f9837425fa0 RCX: 00007f983719f559 [ 194.158726][ T6769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 194.166730][ T6769] RBP: 00007f9837236b50 R08: 0000000000000000 R09: 0000000000000000 [ 194.174830][ T6769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.182843][ T6769] R13: 00007f9837426038 R14: 00007f9837425fa0 R15: 00007fff86076bb8 [ 194.190960][ T6769] [ 194.194115][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.273126][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.279547][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.289313][ T4358] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 194.487005][ T6777] "syz.6.668" (6777) uses obsolete ecb(arc4) skcipher [ 194.502383][ T4358] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 194.522390][ T6777] syz.6.668 sent an empty control message without MSG_MORE. [ 194.527315][ T4358] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.557417][ T4358] usb 3-1: Product: syz [ 194.574497][ T4358] usb 3-1: Manufacturer: syz [ 194.587337][ T4358] usb 3-1: SerialNumber: syz [ 194.721612][ T26] audit: type=1326 audit(1793510814.720:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 194.745656][ C1] vkms_vblank_simulate: vblank timer overrun [ 194.776118][ T6781] loop7: detected capacity change from 0 to 1024 [ 194.844708][ T26] audit: type=1326 audit(1793510814.720:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 194.871796][ T4358] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 194.902825][ T6781] hfsplus: walked past end of dir [ 194.937555][ T4358] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 194.947049][ T26] audit: type=1326 audit(1793510814.720:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 194.974079][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.117303][ T26] audit: type=1326 audit(1793510814.720:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 195.141190][ C1] vkms_vblank_simulate: vblank timer overrun [ 195.230368][ T26] audit: type=1326 audit(1793510814.720:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f983719f2c2 code=0x7ffc0000 [ 195.343516][ T26] audit: type=1326 audit(1793510814.750:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f983715fd8e code=0x7ffc0000 [ 195.394432][ T26] audit: type=1326 audit(1793510814.770:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f983719f387 code=0x7ffc0000 [ 195.432537][ T4358] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 195.465112][ T4358] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 195.480371][ T6793] loop7: detected capacity change from 0 to 512 [ 195.507602][ T26] audit: type=1326 audit(1793510814.770:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f983715fd8e code=0x7ffc0000 [ 195.542893][ T6793] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 195.560385][ T4358] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 195.607175][ T26] audit: type=1326 audit(1793510814.770:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f983719f1eb code=0x7ffc0000 [ 195.624743][ T6793] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 195.642313][ T4358] lan78xx: probe of 3-1:1.0 failed with error -71 [ 195.675370][ T4358] usb 3-1: USB disconnect, device number 5 [ 195.727312][ T26] audit: type=1326 audit(1793510814.800:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6780 comm="syz.7.657" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f983715fd8e code=0x7ffc0000 [ 195.787733][ T6793] EXT4-fs (loop7): 1 truncate cleaned up [ 195.824553][ T6793] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 196.018094][ T6793] EXT4-fs (loop7): shut down requested (2) [ 196.231382][ T6106] EXT4-fs (loop7): unmounting filesystem. [ 196.241082][ T6818] FAULT_INJECTION: forcing a failure. [ 196.241082][ T6818] name failslab, interval 1, probability 0, space 0, times 0 [ 196.269009][ T6818] CPU: 0 PID: 6818 Comm: syz.2.670 Not tainted syzkaller #0 [ 196.276388][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 196.286587][ T6818] Call Trace: [ 196.289924][ T6818] [ 196.292907][ T6818] dump_stack_lvl+0x188/0x24e [ 196.297658][ T6818] ? show_regs_print_info+0x12/0x12 [ 196.302925][ T6818] ? load_image+0x410/0x410 [ 196.307487][ T6818] ? __might_sleep+0xd0/0xd0 [ 196.312135][ T6818] ? __lock_acquire+0x7ea0/0x7ea0 [ 196.317221][ T6818] ? mark_lock+0x94/0x320 [ 196.321620][ T6818] should_fail_ex+0x390/0x4c0 [ 196.326357][ T6818] should_failslab+0x5/0x20 [ 196.330916][ T6818] slab_pre_alloc_hook+0x59/0x300 [ 196.335998][ T6818] ? snd_pcm_hw_param_near+0x82/0x460 [ 196.341441][ T6818] __kmem_cache_alloc_node+0x4f/0x270 [ 196.346907][ T6818] ? snd_pcm_hw_param_near+0x82/0x460 [ 196.352365][ T6818] kmalloc_trace+0x26/0xe0 [ 196.356970][ T6818] snd_pcm_hw_param_near+0x82/0x460 [ 196.362241][ T6818] ? __kmem_cache_free+0xb6/0x200 [ 196.367348][ T6818] snd_pcm_oss_change_params_locked+0xf04/0x3bd0 [ 196.373773][ T6818] ? __lock_acquire+0x7ea0/0x7ea0 [ 196.375996][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.378845][ T6818] ? snd_pcm_oss_make_ready+0xbc/0x330 [ 196.390409][ T6818] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 196.395586][ T6818] ? mutex_lock_nested+0x10/0x10 [ 196.400584][ T6818] ? __mutex_lock+0x1ab/0xb40 [ 196.405325][ T6818] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 196.411024][ T6818] snd_pcm_oss_make_ready+0x117/0x330 [ 196.416453][ T6818] snd_pcm_oss_set_trigger+0x95/0x740 [ 196.421867][ T6818] ? _raw_spin_unlock_irq+0x1f/0x40 [ 196.427107][ T6818] ? lockdep_hardirqs_on+0x94/0x140 [ 196.432391][ T6818] snd_pcm_oss_poll+0x5fd/0x860 [ 196.437302][ T6818] ? snd_pcm_oss_write+0xb70/0xb70 [ 196.442590][ T6818] do_sys_poll+0x8d3/0x12e0 [ 196.447148][ T6818] ? read_lock_is_recursive+0x10/0x10 [ 196.452587][ T6818] ? poll_select_finish+0x640/0x640 [ 196.457830][ T6818] ? __schedule+0x1091/0x4140 [ 196.462559][ T6818] ? poll_initwait+0x150/0x150 [ 196.467371][ T6818] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 196.473759][ T6818] ? set_user_sigmask+0xca/0x1c0 [ 196.478735][ T6818] ? sigprocmask+0x190/0x190 [ 196.483370][ T6818] __se_sys_ppoll+0x206/0x2a0 [ 196.488084][ T6818] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 196.494132][ T6818] ? __x64_sys_ppoll+0xc0/0xc0 [ 196.498936][ T6818] ? lockdep_hardirqs_on+0x94/0x140 [ 196.504165][ T6818] ? __x64_sys_ppoll+0x1c/0xc0 [ 196.509069][ T6818] do_syscall_64+0x4c/0xa0 [ 196.513528][ T6818] ? clear_bhb_loop+0x60/0xb0 [ 196.518243][ T6818] ? clear_bhb_loop+0x60/0xb0 [ 196.522965][ T6818] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 196.528899][ T6818] RIP: 0033:0x7f553499f559 [ 196.533360][ T6818] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 196.553021][ T6818] RSP: 002b:00007f5532bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 196.561541][ T6818] RAX: ffffffffffffffda RBX: 00007f5534c25fa0 RCX: 00007f553499f559 [ 196.569561][ T6818] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 196.577571][ T6818] RBP: 00007f5534a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 196.585582][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.593607][ T6818] R13: 00007f5534c26038 R14: 00007f5534c25fa0 R15: 00007ffc0e2b1c18 [ 196.601631][ T6818] [ 197.705315][ T6856] netlink: 'syz.2.684': attribute type 1 has an invalid length. [ 198.269333][ T6871] FAULT_INJECTION: forcing a failure. [ 198.269333][ T6871] name failslab, interval 1, probability 0, space 0, times 0 [ 198.337451][ T6871] CPU: 0 PID: 6871 Comm: syz.7.688 Not tainted syzkaller #0 [ 198.344838][ T6871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 198.354972][ T6871] Call Trace: [ 198.358306][ T6871] [ 198.361294][ T6871] dump_stack_lvl+0x188/0x24e [ 198.366082][ T6871] ? show_regs_print_info+0x12/0x12 [ 198.371442][ T6871] ? load_image+0x410/0x410 [ 198.376293][ T6871] ? __might_sleep+0xd0/0xd0 [ 198.380987][ T6871] ? __lock_acquire+0x7ea0/0x7ea0 [ 198.386085][ T6871] ? mark_lock+0x94/0x320 [ 198.390524][ T6871] should_fail_ex+0x390/0x4c0 [ 198.395271][ T6871] should_failslab+0x5/0x20 [ 198.399826][ T6871] slab_pre_alloc_hook+0x59/0x300 [ 198.404906][ T6871] ? snd_pcm_hw_param_near+0x82/0x460 [ 198.410378][ T6871] __kmem_cache_alloc_node+0x4f/0x270 [ 198.415825][ T6871] ? snd_pcm_hw_param_near+0x82/0x460 [ 198.421254][ T6871] kmalloc_trace+0x26/0xe0 [ 198.425734][ T6871] snd_pcm_hw_param_near+0x82/0x460 [ 198.430997][ T6871] ? __kmem_cache_free+0xb6/0x200 [ 198.436082][ T6871] snd_pcm_oss_change_params_locked+0xf04/0x3bd0 [ 198.442496][ T6871] ? __lock_acquire+0x7ea0/0x7ea0 [ 198.447581][ T6871] ? snd_pcm_oss_make_ready+0xbc/0x330 [ 198.453099][ T6871] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 198.458268][ T6871] ? mutex_lock_nested+0x10/0x10 [ 198.463263][ T6871] ? __mutex_lock+0x1ab/0xb40 [ 198.468005][ T6871] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 198.473705][ T6871] snd_pcm_oss_make_ready+0x117/0x330 [ 198.479148][ T6871] snd_pcm_oss_set_trigger+0x95/0x740 [ 198.484582][ T6871] ? _raw_spin_unlock_irq+0x1f/0x40 [ 198.489848][ T6871] ? lockdep_hardirqs_on+0x94/0x140 [ 198.495113][ T6871] snd_pcm_oss_poll+0x5fd/0x860 [ 198.500033][ T6871] ? snd_pcm_oss_write+0xb70/0xb70 [ 198.505203][ T6871] do_sys_poll+0x8d3/0x12e0 [ 198.509771][ T6871] ? read_lock_is_recursive+0x10/0x10 [ 198.515227][ T6871] ? poll_select_finish+0x640/0x640 [ 198.520498][ T6871] ? __schedule+0x1091/0x4140 [ 198.525247][ T6871] ? poll_initwait+0x150/0x150 [ 198.530084][ T6871] ? __ia32_compat_sys_ppoll_time64+0x320/0x320 [ 198.536548][ T6871] ? set_user_sigmask+0xca/0x1c0 [ 198.541553][ T6871] ? sigprocmask+0x190/0x190 [ 198.546220][ T6871] __se_sys_ppoll+0x206/0x2a0 [ 198.550962][ T6871] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 198.557018][ T6871] ? __x64_sys_ppoll+0xc0/0xc0 [ 198.561846][ T6871] ? lockdep_hardirqs_on+0x94/0x140 [ 198.567109][ T6871] ? __x64_sys_ppoll+0x1c/0xc0 [ 198.571956][ T6871] do_syscall_64+0x4c/0xa0 [ 198.576444][ T6871] ? clear_bhb_loop+0x60/0xb0 [ 198.581271][ T6871] ? clear_bhb_loop+0x60/0xb0 [ 198.586024][ T6871] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 198.592485][ T6871] RIP: 0033:0x7f983719f559 [ 198.596972][ T6871] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 198.616637][ T6871] RSP: 002b:00007f98353f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 198.625122][ T6871] RAX: ffffffffffffffda RBX: 00007f9837425fa0 RCX: 00007f983719f559 [ 198.633162][ T6871] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000200000000040 [ 198.641204][ T6871] RBP: 00007f9837236b50 R08: 0000000000000000 R09: 0000000000000000 [ 198.649276][ T6871] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.657316][ T6871] R13: 00007f9837426038 R14: 00007f9837425fa0 R15: 00007fff86076bb8 [ 198.665479][ T6871] [ 199.262518][ T6900] netlink: 27 bytes leftover after parsing attributes in process `syz.3.694'. [ 199.666784][ T6916] loop6: detected capacity change from 0 to 1024 [ 199.739821][ T6921] netlink: 12 bytes leftover after parsing attributes in process `syz.3.703'. [ 199.752865][ T26] kauditd_printk_skb: 35 callbacks suppressed [ 199.752881][ T26] audit: type=1326 audit(1793510819.750:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd09615fd8e code=0x7ffc0000 [ 199.810180][ T6916] hfsplus: walked past end of dir [ 199.863259][ T26] audit: type=1326 audit(1793510819.750:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7fd09619d997 code=0x7ffc0000 [ 199.999285][ T26] audit: type=1326 audit(1793510819.750:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd09615fd8e code=0x7ffc0000 [ 200.124624][ T26] audit: type=1326 audit(1793510819.750:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd09619f1eb code=0x7ffc0000 [ 200.234476][ T26] audit: type=1326 audit(1793510819.750:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fd09615fd8e code=0x7ffc0000 [ 200.315894][ T26] audit: type=1326 audit(1793510819.780:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09619f559 code=0x7ffc0000 [ 200.380028][ T26] audit: type=1326 audit(1793510819.800:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09619f559 code=0x7ffc0000 [ 200.472635][ T26] audit: type=1326 audit(1793510819.800:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09619f559 code=0x7ffc0000 [ 200.559235][ T26] audit: type=1326 audit(1793510819.800:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd09619f559 code=0x7ffc0000 [ 200.647639][ T26] audit: type=1326 audit(1793510819.800:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6914 comm="syz.6.700" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd09619f559 code=0x7ffc0000 [ 200.898654][ T6929] capability: warning: `syz.2.706' uses 32-bit capabilities (legacy support in use) [ 201.591069][ T6971] loop5: detected capacity change from 0 to 1024 [ 201.703472][ T6971] hfsplus: walked past end of dir [ 202.178355][ T6991] ip_tables: iptables: counters copy to user failed while replacing table [ 202.320129][ T6996] FAULT_INJECTION: forcing a failure. [ 202.320129][ T6996] name failslab, interval 1, probability 0, space 0, times 0 [ 202.356004][ T6996] CPU: 0 PID: 6996 Comm: syz.5.727 Not tainted syzkaller #0 [ 202.363398][ T6996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 202.373557][ T6996] Call Trace: [ 202.376889][ T6996] [ 202.379881][ T6996] dump_stack_lvl+0x188/0x24e [ 202.384679][ T6996] ? show_regs_print_info+0x12/0x12 [ 202.390056][ T6996] ? load_image+0x410/0x410 [ 202.394629][ T6996] ? __lock_acquire+0x7ea0/0x7ea0 [ 202.399736][ T6996] should_fail_ex+0x390/0x4c0 [ 202.404486][ T6996] should_failslab+0x5/0x20 [ 202.409058][ T6996] slab_pre_alloc_hook+0x59/0x300 [ 202.414148][ T6996] ? __split_vma+0x4f0/0x4f0 [ 202.418809][ T6996] ? vma_merge+0x883/0xa50 [ 202.423304][ T6996] kmem_cache_alloc+0x56/0x2f0 [ 202.428125][ T6996] ? vm_area_dup+0x23/0x1a0 [ 202.432699][ T6996] vm_area_dup+0x23/0x1a0 [ 202.437107][ T6996] __split_vma+0xb9/0x4f0 [ 202.441518][ T6996] ? split_vma+0x70/0xf0 [ 202.445847][ T6996] mprotect_fixup+0x52d/0x840 [ 202.450890][ T6996] ? change_protection+0x3980/0x3980 [ 202.456408][ T6996] ? mas_walk+0x15f/0x180 [ 202.460837][ T6996] ? apparmor_file_mprotect+0xf4/0x110 [ 202.466376][ T6996] ? bpf_lsm_file_mprotect+0x5/0x10 [ 202.471744][ T6996] ? security_file_mprotect+0x7e/0xb0 [ 202.477216][ T6996] do_mprotect_pkey+0x7ff/0xba0 [ 202.482142][ T6996] ? do_futex+0x310/0x320 [ 202.486554][ T6996] ? prot_none_test+0x10/0x10 [ 202.491317][ T6996] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 202.497496][ T6996] __x64_sys_mprotect+0x7c/0x90 [ 202.502433][ T6996] do_syscall_64+0x4c/0xa0 [ 202.506930][ T6996] ? clear_bhb_loop+0x60/0xb0 [ 202.511737][ T6996] ? clear_bhb_loop+0x60/0xb0 [ 202.516522][ T6996] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 202.522490][ T6996] RIP: 0033:0x7f60cb39f559 [ 202.526974][ T6996] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 202.546649][ T6996] RSP: 002b:00007f60cc1cb028 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 202.555151][ T6996] RAX: ffffffffffffffda RBX: 00007f60cb625fa0 RCX: 00007f60cb39f559 [ 202.563200][ T6996] RDX: 0000000000000005 RSI: 0000000000002000 RDI: 0000200000002000 [ 202.571248][ T6996] RBP: 00007f60cb436b50 R08: 0000000000000000 R09: 0000000000000000 [ 202.579294][ T6996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 202.587335][ T6996] R13: 00007f60cb626038 R14: 00007f60cb625fa0 R15: 00007fff26d5b208 [ 202.595404][ T6996] [ 203.351922][ T7035] 9pnet: p9_errstr2errno: server reported unknown error  [ 203.714732][ T7042] netlink: 'syz.7.739': attribute type 1 has an invalid length. [ 204.817296][ T4365] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 205.002225][ T7081] EXT4-fs (sda1): shut down requested (2) [ 205.009992][ T4365] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 205.025041][ T7081] Aborting journal on device sda1-8. [ 205.032917][ T4365] usb 8-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 205.057270][ T4365] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 205.092451][ T4365] usb 8-1: Product: syz [ 205.099800][ T4365] usb 8-1: Manufacturer: syz [ 205.159474][ T4365] navman 8-1:1.0: navman converter detected [ 205.227735][ T4365] usb 8-1: navman converter now attached to ttyUSB0 [ 205.368308][ T4365] usb 8-1: USB disconnect, device number 2 [ 205.398134][ T4365] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 205.458474][ T4365] navman 8-1:1.0: device disconnected [ 205.649966][ T7121] netlink: 'syz.2.759': attribute type 1 has an invalid length. [ 205.707649][ T7121] 8021q: adding VLAN 0 to HW filter on device bond2 [ 205.740650][ T7124] bond2: (slave ip6erspan0): making interface the new active one [ 205.752132][ T7124] bond2: (slave ip6erspan0): Enslaving as an active interface with an up link [ 205.769382][ T4539] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 205.875430][ T7129] loop2: detected capacity change from 0 to 2048 [ 205.959189][ T7129] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 206.000923][ T7129] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 206.587183][ T4287] Bluetooth: hci0: command 0x0406 tx timeout [ 206.887554][ T7181] loop5: detected capacity change from 0 to 2048 [ 206.931295][ T7181] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 207.223183][ T7164] ceph: No mds server is up or the cluster is laggy [ 207.244425][ T7150] ceph: No mds server is up or the cluster is laggy [ 208.371716][ T7241] gadgetfs: bound to dummy_udc driver [ 208.883423][ T7269] FAULT_INJECTION: forcing a failure. [ 208.883423][ T7269] name failslab, interval 1, probability 0, space 0, times 0 [ 208.927066][ T7269] CPU: 1 PID: 7269 Comm: syz.2.794 Not tainted syzkaller #0 [ 208.934457][ T7269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 208.944574][ T7269] Call Trace: [ 208.947904][ T7269] [ 208.950881][ T7269] dump_stack_lvl+0x188/0x24e [ 208.955634][ T7269] ? show_regs_print_info+0x12/0x12 [ 208.960905][ T7269] ? load_image+0x410/0x410 [ 208.965564][ T7269] ? __might_sleep+0xd0/0xd0 [ 208.970234][ T7269] ? __lock_acquire+0x7ea0/0x7ea0 [ 208.975326][ T7269] should_fail_ex+0x390/0x4c0 [ 208.980067][ T7269] should_failslab+0x5/0x20 [ 208.984618][ T7269] slab_pre_alloc_hook+0x59/0x300 [ 208.989702][ T7269] ? resv_map_alloc+0x84/0x2b0 [ 208.994520][ T7269] __kmem_cache_alloc_node+0x4f/0x270 [ 208.999948][ T7269] ? resv_map_alloc+0x84/0x2b0 [ 209.004771][ T7269] kmalloc_trace+0x26/0xe0 [ 209.009242][ T7269] resv_map_alloc+0x84/0x2b0 [ 209.013909][ T7269] hugetlbfs_get_inode+0x64/0x510 [ 209.018998][ T7269] hugetlb_file_setup+0x27b/0x610 [ 209.024118][ T7269] newseg+0x412/0xb00 [ 209.028158][ T7269] ? rwsem_write_trylock+0x135/0x1c0 [ 209.033495][ T7269] ? ksys_shmget+0x140/0x140 [ 209.038130][ T7269] ipcget+0x1cd/0xe10 [ 209.042157][ T7269] ? do_futex+0x310/0x320 [ 209.046530][ T7269] ? __ia32_sys_get_robust_list+0x100/0x100 [ 209.052464][ T7269] ? ipc_obtain_object_check+0x1a0/0x1a0 [ 209.058159][ T7269] __x64_sys_shmget+0x13d/0x180 [ 209.063057][ T7269] ? lock_chain_count+0x20/0x20 [ 209.067946][ T7269] ? shm_more_checks+0x80/0x80 [ 209.072753][ T7269] ? lockdep_hardirqs_on+0x94/0x140 [ 209.077992][ T7269] do_syscall_64+0x4c/0xa0 [ 209.082457][ T7269] ? clear_bhb_loop+0x60/0xb0 [ 209.087180][ T7269] ? clear_bhb_loop+0x60/0xb0 [ 209.091901][ T7269] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 209.097831][ T7269] RIP: 0033:0x7f553499f559 [ 209.102366][ T7269] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 209.122001][ T7269] RSP: 002b:00007f5532bf6028 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 209.130452][ T7269] RAX: ffffffffffffffda RBX: 00007f5534c25fa0 RCX: 00007f553499f559 [ 209.138455][ T7269] RDX: 0000000000000880 RSI: 0000000000003000 RDI: 0000000000000000 [ 209.146454][ T7269] RBP: 00007f5534a36b50 R08: 0000000000000000 R09: 0000000000000000 [ 209.154483][ T7269] R10: 0000200000ffa000 R11: 0000000000000246 R12: 0000000000000000 [ 209.162494][ T7269] R13: 00007f5534c26038 R14: 00007f5534c25fa0 R15: 00007ffc0e2b1c18 [ 209.170514][ T7269] [ 209.540452][ T7281] loop2: detected capacity change from 0 to 2048 [ 209.575417][ T7281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 209.801451][ T7287] gadgetfs: bound to dummy_udc driver [ 210.069522][ T7292] loop6: detected capacity change from 0 to 2048 [ 210.140615][ T7292] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 210.246858][ T7292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 211.240119][ T7324] loop7: detected capacity change from 0 to 128 [ 211.467479][ T5746] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 211.670776][ T5746] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.693619][ T5746] usb 6-1: New USB device found, idVendor=0a99, idProduct=0001, bcdDevice= 0.00 [ 211.715577][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 211.745731][ T5746] usb 6-1: Product: syz [ 211.756590][ T5746] usb 6-1: Manufacturer: syz [ 211.800735][ T5746] navman 6-1:1.0: navman converter detected [ 211.819993][ T5746] usb 6-1: navman converter now attached to ttyUSB0 [ 212.046401][ T5746] usb 6-1: USB disconnect, device number 2 [ 212.076349][ T5746] navman ttyUSB0: navman converter now disconnected from ttyUSB0 [ 212.091238][ T5746] navman 6-1:1.0: device disconnected [ 212.135596][ T7353] Bluetooth: MGMT ver 1.22 [ 212.651894][ T7340] ceph: No mds server is up or the cluster is laggy [ 212.662829][ T7346] ceph: No mds server is up or the cluster is laggy [ 213.440076][ T7411] loop6: detected capacity change from 0 to 2048 [ 213.503268][ T7411] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 213.583467][ T7411] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 214.064309][ T4365] libceph: connect (1)[c::]:6789 error -101 [ 214.075164][ T4365] libceph: mon0 (1)[c::]:6789 connect error [ 214.110825][ T4358] libceph: connect (1)[c::]:6789 error -101 [ 214.117062][ T4358] libceph: mon0 (1)[c::]:6789 connect error [ 214.340764][ T4365] libceph: connect (1)[c::]:6789 error -101 [ 214.348167][ T4365] libceph: mon0 (1)[c::]:6789 connect error [ 214.395579][ T7460] loop2: detected capacity change from 0 to 512 [ 214.409733][ T128] libceph: connect (1)[c::]:6789 error -101 [ 214.415978][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 214.439755][ T7460] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 214.589235][ T7465] jffs2: notice: (7465) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 214.845621][ T7437] ceph: No mds server is up or the cluster is laggy [ 214.866054][ T7444] ceph: No mds server is up or the cluster is laggy [ 214.869165][ T4365] libceph: connect (1)[c::]:6789 error -101 [ 214.888967][ T4365] libceph: mon0 (1)[c::]:6789 connect error [ 214.967836][ T128] libceph: connect (1)[c::]:6789 error -101 [ 214.973992][ T128] libceph: mon0 (1)[c::]:6789 connect error [ 216.358559][ T7532] loop5: detected capacity change from 0 to 512 [ 216.415282][ T7532] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 216.802504][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz.7.889'. [ 216.905306][ T7552] fuse: Bad value for 'fd' [ 217.466982][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.900'. [ 217.525223][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.7.900'. [ 217.867394][ T5745] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 217.911952][ T7598] jffs2: notice: (7598) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 218.067351][ T5745] usb 6-1: Using ep0 maxpacket: 16 [ 218.074427][ T5745] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.116314][ T5745] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 218.156272][ T5745] usb 6-1: config 0 interface 0 has no altsetting 0 [ 218.173815][ T5745] usb 6-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 218.186953][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.209267][ T5745] usb 6-1: config 0 descriptor?? [ 218.663060][ T5745] logitech-djreceiver 0003:046D:C53A.0008: hiddev0,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.5-1/input0 [ 218.739840][ T7630] loop6: detected capacity change from 0 to 8192 [ 218.783512][ T7640] netlink: 27 bytes leftover after parsing attributes in process `syz.3.922'. [ 218.838068][ T7630] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 218.882938][ T7646] udevd[7646]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 218.963968][ T7647] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.158775][ T7655] jffs2: notice: (7655) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 219.194412][ T5600] usb 6-1: USB disconnect, device number 3 [ 219.257845][ T7659] overlayfs: failed to clone upperpath [ 219.625991][ T26] kauditd_printk_skb: 444 callbacks suppressed [ 219.626008][ T26] audit: type=1326 audit(1793510839.620:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7680 comm="syz.3.934" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c2319f559 code=0x0 [ 219.885377][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 219.923921][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.5.936'. [ 220.091600][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 220.122944][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.2.939'. [ 220.661788][ T7721] loop6: detected capacity change from 0 to 1024 [ 220.811399][ T4539] hfsplus: b-tree write err: -5, ino 3 [ 221.382085][ T26] audit: type=1326 audit(1793510841.380:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7744 comm="syz.6.959" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd09619f559 code=0x0 [ 221.597992][ T5745] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 221.795103][ T5745] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.815041][ T5745] usb 6-1: New USB device found, idVendor=1ba6, idProduct=0001, bcdDevice= 0.01 [ 221.825345][ T5745] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.856173][ T5745] as10x_usb: device has been detected [ 221.875338][ T5745] dvbdev: DVB: registering new adapter (Abilis Systems DVB-Titan) [ 221.971693][ T5745] usb 6-1: DVB: registering adapter 1 frontend 0 (Abilis Systems DVB-Titan)... [ 222.054497][ T5745] usb 6-1: loading /lib/firmware/as102_data1_st.hex failed with error -5 [ 222.072458][ T5745] usb 6-1: Direct firmware load for as102_data1_st.hex failed with error -5 [ 222.083833][ T5745] usb 6-1: Falling back to sysfs fallback for: as102_data1_st.hex [ 222.347285][ T50] Bluetooth: hci2: command 0x0411 tx timeout [ 222.453869][ T7785] device gretap1 entered promiscuous mode [ 222.460536][ T7785] batman_adv: batadv0: Adding interface: gretap1 [ 222.473125][ T7785] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1560. [ 222.508414][ T7785] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 222.544505][ T7787] netlink: 64 bytes leftover after parsing attributes in process `syz.7.976'. [ 222.689333][ T7794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 222.711900][ T7794] batman_adv: batadv0: Adding interface: ipvlan2 [ 222.718823][ T7794] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.745732][ T7794] batman_adv: batadv0: Interface activated: ipvlan2 [ 222.772091][ T7799] fuse: Bad value for 'fd' [ 222.782935][ T7798] netlink: 4 bytes leftover after parsing attributes in process `syz.2.980'. [ 222.857521][ T7798] batman_adv: The newly added mac address (da:40:a4:49:ef:7f) already exists on: ipvlan2 [ 222.912925][ T7798] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.926382][ T7798] batman_adv: batadv0: Adding interface: ipvlan3 [ 222.935440][ T7798] batman_adv: batadv0: The MTU of interface ipvlan3 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.994066][ T7798] batman_adv: batadv0: Interface activated: ipvlan3 [ 223.834721][ T7832] netlink: 4 bytes leftover after parsing attributes in process `syz.7.992'. [ 223.862528][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.983721][ T7832] device bridge_slave_1 left promiscuous mode [ 223.990325][ T7832] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.262185][ T7844] netlink: 64 bytes leftover after parsing attributes in process `syz.2.997'. [ 224.925684][ T7870] block device autoloading is deprecated and will be removed. [ 225.143265][ T7883] loop2: detected capacity change from 0 to 2048 [ 225.168556][ T7883] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 225.231567][ T7883] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 226.580138][ T7917] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1027'. [ 227.167328][ T5602] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 227.347244][ T5602] usb 7-1: Using ep0 maxpacket: 16 [ 227.354802][ T5602] usb 7-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.365957][ T5602] usb 7-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 227.379158][ T5602] usb 7-1: config 0 interface 0 has no altsetting 0 [ 227.387027][ T5602] usb 7-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.00 [ 227.396407][ T5602] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.415237][ T5602] usb 7-1: config 0 descriptor?? [ 227.891543][ T5602] logitech-djreceiver 0003:046D:C53A.0009: hiddev1,hidraw0: USB HID vff.fc Device [HID 046d:c53a] on usb-dummy_hcd.6-1/input0 [ 227.960134][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056fc3000: rx timeout, send abort [ 227.972229][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888056fc3000: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 228.099103][ T7946] udevd[7946]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 228.183703][ T7950] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1039'. [ 228.823835][ T7976] ip_tables: iptables: counters copy to user failed while replacing table [ 229.932630][ T4800] usb 7-1: USB disconnect, device number 3 [ 230.895416][ T8025] loop2: detected capacity change from 0 to 32768 [ 230.956308][ T8025] JBD2: Ignoring recovery information on journal [ 230.994163][ T8025] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 231.113950][ T4276] ocfs2: Unmounting device (7,2) on (node local) [ 232.519459][ T8094] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1101'. [ 232.553682][ T8095] IPVS: rr: UDP [::1]:8080 - no destination available [ 232.824156][ T8105] loop5: detected capacity change from 0 to 512 [ 232.858361][ T8105] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 232.954150][ T8105] EXT4-fs (loop5): 1 truncate cleaned up [ 232.963816][ T8105] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 233.095806][ T8105] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2805: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 233.153778][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1108'. [ 233.419077][ T5878] EXT4-fs (loop5): unmounting filesystem. [ 233.839217][ T8137] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1115'. [ 235.685437][ T8214] tls_set_device_offload_rx: netdev not found [ 236.841929][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1163'. [ 236.851298][ T8266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.861288][ T8268] futex_wake_op: syz.3.1161 tries to shift op by 144; fix this program [ 237.178809][ T8266] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.222656][ T8316] device batadv_slave_0 entered promiscuous mode [ 238.230448][ T8316] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1189'. [ 238.240893][ T8316] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.373355][ T8317] loop2: detected capacity change from 0 to 4096 [ 238.551822][ T8316] device batadv_slave_0 left promiscuous mode [ 238.566296][ T8316] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.715574][ T8320] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1181'. [ 239.017306][ T4539] ntfs3: loop2: ino=5, mi_enum_attr [ 239.695419][ T8356] netlink: 'syz.2.1198': attribute type 1 has an invalid length. [ 239.716889][ T8356] netlink: 16150 bytes leftover after parsing attributes in process `syz.2.1198'. [ 241.803401][ T8426] cpuidle: using governor haltpoll [ 242.471101][ T8444] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1237'. [ 242.546999][ T8447] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1237'. [ 242.840981][ T8457] rxe_eth0 speed is unknown, defaulting to 1000 [ 243.397816][ T8480] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1252'. [ 244.036410][ T8500] netlink: 'syz.5.1261': attribute type 25 has an invalid length. [ 244.049851][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1261'. [ 244.103077][ T8500] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.113342][ T8500] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.122171][ T8500] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.130992][ T8500] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 244.151998][ T8500] netlink: 'syz.5.1261': attribute type 25 has an invalid length. [ 244.197781][ T8500] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1261'. [ 244.293714][ T8506] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 244.293714][ T8506] Q&|x [ 245.131494][ T26] audit: type=1326 audit(1793510865.130:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 245.144093][ T8540] syz.7.1280 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 245.217210][ T26] audit: type=1326 audit(1793510865.130:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 245.278525][ T8545] netlink: 'syz.5.1282': attribute type 1 has an invalid length. [ 245.291844][ T26] audit: type=1326 audit(1793510865.130:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 245.336413][ T8543] 9pnet: p9_errstr2errno: server reported unknown error n$[ [ 245.336413][ T8543] Q&|x [ 245.354278][ T8545] device bond1 entered promiscuous mode [ 245.367249][ T26] audit: type=1326 audit(1793510865.130:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 245.397604][ T8545] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.441425][ T8549] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.448777][ T8549] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 245.460013][ T8549] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 245.482935][ T8549] bond1: (slave wireguard0): making interface the new active one [ 245.493537][ T8549] device wireguard0 entered promiscuous mode [ 245.505038][ T8549] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 245.517697][ T26] audit: type=1326 audit(1793510865.130:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=38 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 245.542768][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 245.633069][ T26] audit: type=1326 audit(1793510865.210:550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f983719f559 code=0x7ffc0000 [ 245.706549][ T26] audit: type=1326 audit(1793510865.210:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f983719f2c2 code=0x7ffc0000 [ 245.794182][ T26] audit: type=1326 audit(1793510865.210:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f983719f357 code=0x7ffc0000 [ 245.839979][ T26] audit: type=1326 audit(1793510865.210:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f983715c251 code=0x7ffc0000 [ 245.865424][ T26] audit: type=1326 audit(1793510865.210:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8539 comm="syz.7.1280" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f98371a0349 code=0x7ffc0000 [ 246.487634][ T8582] overlayfs: failed to clone lowerpath [ 246.504017][ T8584] netlink: 'syz.7.1296': attribute type 1 has an invalid length. [ 246.537066][ T8584] device bond2 entered promiscuous mode [ 246.565791][ T8584] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.594378][ T8588] loop2: detected capacity change from 0 to 256 [ 246.638577][ T8588] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 246.660568][ T8586] 8021q: adding VLAN 0 to HW filter on device bond2 [ 246.668823][ T8586] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 246.679699][ T8586] bond2: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 246.703795][ T8591] loop6: detected capacity change from 0 to 512 [ 246.726973][ T8586] bond2: (slave wireguard0): making interface the new active one [ 246.787291][ T8586] device wireguard0 entered promiscuous mode [ 246.805586][ T8586] bond2: (slave wireguard0): Enslaving as an active interface with an up link [ 246.841413][ T8591] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 246.848476][ T4523] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 246.879591][ T8591] ext4 filesystem being mounted at /142/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 247.119379][ T6098] EXT4-fs (loop6): unmounting filesystem. [ 247.360186][ T8611] FAULT_INJECTION: forcing a failure. [ 247.360186][ T8611] name failslab, interval 1, probability 0, space 0, times 0 [ 247.408409][ T8611] CPU: 1 PID: 8611 Comm: syz.5.1305 Not tainted syzkaller #0 [ 247.415884][ T8611] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 247.425994][ T8611] Call Trace: [ 247.429324][ T8611] [ 247.432311][ T8611] dump_stack_lvl+0x188/0x24e [ 247.437094][ T8611] ? show_regs_print_info+0x12/0x12 [ 247.442712][ T8611] ? load_image+0x410/0x410 [ 247.447285][ T8611] ? __lock_acquire+0x7ea0/0x7ea0 [ 247.452393][ T8611] should_fail_ex+0x390/0x4c0 [ 247.457164][ T8611] should_failslab+0x5/0x20 [ 247.461728][ T8611] slab_pre_alloc_hook+0x59/0x300 [ 247.466821][ T8611] kmem_cache_alloc+0x56/0x2f0 [ 247.471647][ T8611] ? create_new_namespaces+0x34/0x700 [ 247.477087][ T8611] create_new_namespaces+0x34/0x700 [ 247.482372][ T8611] ? __fget_files+0x3fc/0x460 [ 247.487119][ T8611] __se_sys_setns+0x2c8/0x1600 [ 247.491955][ T8611] ? __x64_sys_setns+0x60/0x60 [ 247.496868][ T8611] ? lockdep_hardirqs_on+0x94/0x140 [ 247.502141][ T8611] do_syscall_64+0x4c/0xa0 [ 247.506626][ T8611] ? clear_bhb_loop+0x60/0xb0 [ 247.511371][ T8611] ? clear_bhb_loop+0x60/0xb0 [ 247.516129][ T8611] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 247.522110][ T8611] RIP: 0033:0x7f60cb39f559 [ 247.526578][ T8611] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.546269][ T8611] RSP: 002b:00007f60cc1cb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000134 [ 247.554756][ T8611] RAX: ffffffffffffffda RBX: 00007f60cb625fa0 RCX: 00007f60cb39f559 [ 247.562813][ T8611] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000000000c9 [ 247.570874][ T8611] RBP: 00007f60cb436b50 R08: 0000000000000000 R09: 0000000000000000 [ 247.578898][ T8611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.586924][ T8611] R13: 00007f60cb626038 R14: 00007f60cb625fa0 R15: 00007fff26d5b208 [ 247.594974][ T8611] [ 248.707402][ T8640] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1317'. [ 248.723480][ T8640] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.731328][ T8640] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.875612][ T8644] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1317'. [ 248.907480][ T8642] futex_wake_op: syz.5.1318 tries to shift op by 144; fix this program [ 248.942388][ T8642] futex_wake_op: syz.5.1318 tries to shift op by 144; fix this program [ 249.512543][ T8671] rxe_eth0 speed is unknown, defaulting to 1000 [ 249.713561][ T8677] loop6: detected capacity change from 0 to 2048 [ 249.749467][ T8677] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 249.842501][ T8677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 250.713822][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 250.751395][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 250.795008][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 250.825625][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 250.861832][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 250.888529][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 250.923360][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 250.953309][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 250.977066][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 250.995400][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 251.005916][ T8693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 251.074100][ T8693] bond2: (slave ip6erspan0): Releasing active interface [ 251.125685][ T8693] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 251.135608][ T8693] batman_adv: batadv0: Removing interface: ipvlan2 [ 251.154546][ T8693] batman_adv: batadv0: Interface deactivated: ipvlan3 [ 251.165388][ T8693] batman_adv: batadv0: Removing interface: ipvlan3 [ 251.272144][ T8696] team0: Port device xfrm0 added [ 251.629418][ T8733] rxe_eth0 speed is unknown, defaulting to 1000 [ 252.071666][ T8748] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1359'. [ 252.099053][ T8748] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.106661][ T8748] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.165408][ T8752] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1359'. [ 252.737313][ T6112] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 252.929179][ T6112] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.947250][ T6112] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 252.967201][ T6112] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 252.976371][ T6112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.996415][ T6112] usb 7-1: config 0 descriptor?? [ 253.269348][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1372'. [ 253.623449][ T6112] usb 7-1: language id specifier not provided by device, defaulting to English [ 253.682195][ T8786] rxe_eth0 speed is unknown, defaulting to 1000 [ 253.880296][ T8773] loop2: detected capacity change from 0 to 40427 [ 253.942953][ T8773] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 253.957238][ T8773] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 253.981659][ T8773] F2FS-fs (loop2): invalid crc value [ 254.035256][ T8773] F2FS-fs (loop2): Found nat_bits in checkpoint [ 254.042222][ T6112] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000A/input/input10 [ 254.079831][ T8799] cgroup: fork rejected by pids controller in /syz5 [ 254.175181][ T6112] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000A/input/input11 [ 254.187484][ T8802] FAULT_INJECTION: forcing a failure. [ 254.187484][ T8802] name failslab, interval 1, probability 0, space 0, times 0 [ 254.234958][ T6112] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000A/input/input12 [ 254.252429][ T8802] CPU: 0 PID: 8802 Comm: syz.7.1380 Not tainted syzkaller #0 [ 254.259893][ T8802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 254.270007][ T8802] Call Trace: [ 254.273329][ T8802] [ 254.276297][ T8802] dump_stack_lvl+0x188/0x24e [ 254.281045][ T8802] ? show_regs_print_info+0x12/0x12 [ 254.286316][ T8802] ? load_image+0x410/0x410 [ 254.290923][ T8802] ? __might_sleep+0xd0/0xd0 [ 254.295571][ T8802] ? __lock_acquire+0x7ea0/0x7ea0 [ 254.300668][ T8802] should_fail_ex+0x390/0x4c0 [ 254.305410][ T8802] should_failslab+0x5/0x20 [ 254.309961][ T8802] slab_pre_alloc_hook+0x59/0x300 [ 254.315048][ T8802] kmem_cache_alloc+0x56/0x2f0 [ 254.317813][ T6112] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:256C:006D.000A/input/input13 [ 254.319856][ T8802] ? dup_fd+0x52/0xa20 [ 254.335824][ T8802] dup_fd+0x52/0xa20 [ 254.339805][ T8802] ? __ia32_sys_get_robust_list+0x100/0x100 [ 254.345769][ T8802] ksys_unshare+0x458/0x8e0 [ 254.350350][ T8802] ? sighand_ctor+0x40/0x40 [ 254.354915][ T8802] ? lock_chain_count+0x20/0x20 [ 254.359830][ T8802] ? syscall_enter_from_user_mode+0x21/0x80 [ 254.365799][ T8802] __x64_sys_unshare+0x34/0x40 [ 254.370623][ T8802] do_syscall_64+0x4c/0xa0 [ 254.375124][ T8802] ? clear_bhb_loop+0x60/0xb0 [ 254.379863][ T8802] ? clear_bhb_loop+0x60/0xb0 [ 254.384624][ T8802] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 254.390627][ T8802] RIP: 0033:0x7f983719f559 [ 254.395099][ T8802] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.414852][ T8802] RSP: 002b:00007f98353f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 254.423338][ T8802] RAX: ffffffffffffffda RBX: 00007f9837425fa0 RCX: 00007f983719f559 [ 254.431378][ T8802] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008040480 [ 254.433843][ T6112] uclogic 0003:256C:006D.000A: input,hiddev1,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.6-1/input0 [ 254.439404][ T8802] RBP: 00007f9837236b50 R08: 0000000000000000 R09: 0000000000000000 [ 254.439424][ T8802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 254.439438][ T8802] R13: 00007f9837426038 R14: 00007f9837425fa0 R15: 00007fff86076bb8 [ 254.439471][ T8802] [ 254.490202][ T8773] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 254.504856][ T8773] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 254.564114][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 254.564129][ T26] audit: type=1804 audit(1793510874.560:579): pid=8773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1369" name="/newroot/278/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 254.631360][ T6112] usb 7-1: USB disconnect, device number 4 [ 255.008749][ T4276] syz-executor: attempt to access beyond end of device [ 255.008749][ T4276] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 255.226296][ T8816] udevd[8816]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 255.711182][ T1282] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.717611][ T1282] ieee802154 phy1 wpan1: encryption failed: -22 SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 257.116083][ T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.381772][ T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.459349][ T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.537162][ T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.142538][ T9] team0: Port device xfrm0 removed [ 258.849070][ T9] device hsr_slave_0 left promiscuous mode [ 258.859644][ T9] device hsr_slave_1 left promiscuous mode [ 258.885348][ T9] device veth1_macvtap left promiscuous mode [ 258.891877][ T9] device veth0_macvtap left promiscuous mode [ 258.898099][ T9] device veth1_vlan left promiscuous mode [ 258.903983][ T9] device veth0_vlan left promiscuous mode [ 259.211835][ T9] bond2 (unregistering): Released all slaves [ 259.224778][ T9] bond1 (unregistering): Released all slaves [ 260.406072][ T9] bond0 (unregistering): Released all slaves [ 260.975241][ T9] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.081413][ T9] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.145331][ T9] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.247280][ T9] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.416577][ T9] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.503632][ T9] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.580137][ T9] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.648979][ T9] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.506131][ T9] device hsr_slave_0 left promiscuous mode [ 263.512998][ T9] device hsr_slave_1 left promiscuous mode [ 263.519586][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.527063][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.535765][ T9] device bridge_slave_1 left promiscuous mode [ 263.545476][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.567531][ T9] device bridge_slave_0 left promiscuous mode [ 263.573795][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.586346][ T9] device hsr_slave_0 left promiscuous mode [ 263.592862][ T9] device hsr_slave_1 left promiscuous mode [ 263.600677][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.608803][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.616618][ T9] device bridge_slave_0 left promiscuous mode [ 263.623250][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.672380][ T9] device veth1_macvtap left promiscuous mode [ 263.678679][ T9] device veth0_macvtap left promiscuous mode [ 263.684770][ T9] device veth1_vlan left promiscuous mode [ 263.691328][ T9] device veth0_vlan left promiscuous mode [ 263.698992][ T9] device veth1_macvtap left promiscuous mode [ 263.705050][ T9] device veth0_macvtap left promiscuous mode [ 263.713355][ T9] device veth1_vlan left promiscuous mode [ 263.719271][ T9] device veth0_vlan left promiscuous mode [ 264.571144][ T9] team0 (unregistering): Port device team_slave_1 removed [ 264.625536][ T9] team0 (unregistering): Port device team_slave_0 removed [ 264.687181][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.766164][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.178207][ T9] bond0 (unregistering): Released all slaves [ 265.254042][ T9] bond3 (unregistering): Released all slaves [ 265.275816][ T9] bond2 (unregistering): (slave wireguard0): Releasing backup interface [ 265.284560][ T9] device wireguard0 left promiscuous mode [ 265.455549][ T9] bond2 (unregistering): Released all slaves [ 265.470118][ T9] bond1 (unregistering): Released all slaves