last executing test programs: 13m27.913303543s ago: executing program 32 (id=375): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="2e1221b23bb601c477d3df163e75963d86ddf06712e90020118db0049d90491c3248040000dbb8a10000", 0x2a}, {&(0x7f0000000d40)='$\x00\x00\x00\x00\x00', 0x6}, {&(0x7f0000000c80)="a43b2eaab40000000000f294601e8cde77cf", 0x12}], 0x3) 12m29.970130015s ago: executing program 33 (id=728): mlockall(0x7) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000f, 0x38011, r1, 0x0) syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000200)='./bus\x00', 0x4000, &(0x7f0000000240)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',codepage=cp862,file_umask=0000000041,iocharset=iso8859-5,\x00'], 0x4, 0x362, &(0x7f00000002c0)="$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") ioctl$FS_IOC_SETFLAGS(r0, 0x125f, 0x0) 12m25.979421177s ago: executing program 34 (id=742): syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000040)='./file1\x00', 0x800810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatasum}, {@compress_force}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@flushoncommit}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x30, 0x37, 0x65]}}, {@nodiscard}]}, 0xfb, 0x510a, &(0x7f000000d000)="$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") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x143040, 0x30) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x109142, 0x84) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r0}}) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000100)) 8m45.398280049s ago: executing program 35 (id=2342): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) syz_read_part_table(0x1054, &(0x7f0000002100)="$eJzsz7utAjEUBNDZz3u7G21LUASdkFMKEQlVICGRUAQhZYAwWFSAENI5gT321QQ3fFXT1TSWsz43WSQ5znXa5jTmNk+1NuWvzyHJ/+6a4fHTlEGf9ZxziZchWU7tq9E/r233zslq/+H1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAn3AMAAP//EFEKIw==") wait4(r0, 0x0, 0x2, 0x0) getpgid(r0) 7m59.840940937s ago: executing program 36 (id=2611): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0xc, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) lseek(r0, 0x0, 0x1) 6m47.868993563s ago: executing program 9 (id=3098): r0 = socket(0x1e, 0x4, 0x0) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000008840)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)=""/4096, 0x1000}], 0x1}, 0x1}], 0x1, 0x40000001, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x90, &(0x7f0000000300)=@string={0x90, 0x3, "8c9956f8968df0842981b61ba554dc06123f6b75457549427320417b31e48de3c34b31908d12559f6c141c14d7fbad8fd45ce97eead8bec3fac06843bc7748977a139d5b052df983e5cc9278ebf7f931e69e1b53291dfc9fc12c51a6fb8952b9aa0e06daa82fbe82ed85f770883fc4c2f9a7da42d3e0f3db0d3254634a1a3567d2e8e4013398430a6509764deade"}}]}) 6m46.801058564s ago: executing program 9 (id=3109): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000020601"], 0x30}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2501000000080001", @ANYBLOB="7400028038000100240001006e6f746966795f65656572735f696e74657276616c000000000000000000000005"], 0x90}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000040)='./bus\x00', 0x810, &(0x7f0000000240)={[{@autodefrag}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@ssd_spread}, {@compress_force}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) write$binfmt_aout(r0, &(0x7f0000000180)=ANY=[], 0x29f) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f00000000c0)={{r0}, 0x0, 0x0, 0x100000}) 6m46.299325869s ago: executing program 9 (id=3112): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x100000040, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) 6m45.971305084s ago: executing program 9 (id=3116): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1fe) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) 6m45.712380707s ago: executing program 9 (id=3119): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x0, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000600), &(0x7f00000006c0)=0x8) 6m43.618704867s ago: executing program 9 (id=3136): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0x6) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 6m43.013404926s ago: executing program 37 (id=3136): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x3731, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) creat(&(0x7f0000000000)='./file0\x00', 0x6) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 6m4.722649995s ago: executing program 1 (id=3337): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c082", 0x61}], 0x1}}], 0x1, 0x2090) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x4, 0x0, 0x0, 0x1, 0x1f, &(0x7f0000000180)=""/31, 0xd455d0f2adb9ba32, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc}, 0x94) write$binfmt_register(0xffffffffffffffff, &(0x7f0000000300)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x8000011000000009, 0x3a, 'B\xd4GGI\x82\\4\xbb\xbb\xbb\xb3\xd4)\xed\x8f\xaa\xf4\xd2{\xc5\t\xa9\xed\xf8e\xaa\xb9\xf5\r\xe3T\x0e\x8a\xd6\x9a_?G\x05\x00\x00\x00\x00\x00\x00\x00\x1e\x9a\xce\xac&x3\x15\x14y\xbf\xc6)\xa8\b/\x01\x00\x00\f\x8e1\xc4\xa1\xb2]I\xa5\x13}9\x1b0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m4.434706869s ago: executing program 1 (id=3338): r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x80000009}}}, 0x10, 0x0}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 6m4.213783549s ago: executing program 1 (id=3340): unshare(0x22020600) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x80) openat$cgroup_subtree(r1, &(0x7f0000000040), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) unshare(0x2040600) close_range(r2, 0xffffffffffffffff, 0x0) 6m3.847577397s ago: executing program 1 (id=3341): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./mnt\x00', 0x2000c10, &(0x7f00000000c0)={[{@i_version}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$eJzs3T1oLFUYBuB3Zne95t5FrtoI4g+IiAbCtRNsYqMQkBBEBBUiIjZKIsQEu8TKxkJrlVQ2QeyMlpIm2CiCVdQUsRE0WBgstFiZnURisuLPxh1xngdmZ2b3nPnOMPOe3WbYAK11Nclskk6S6SS9JMXpBnfWy9Xj3c2p3cVkMHjsh2LYrt6vnfS7kmQjyQNJdsoiL3STte2nDn7ae+Se11d7d7+7/eTURE/y2OHB/qNH78y/9sHc/WufffHdfJHZ9H93XhevGPFet0hu+jeK/UcU3aZHwF+x8Mr7X1a5vznJXcP891KmvnhvrFy308t9b/9R3ze///zWSY4VuHiDQa/6DtwYAK1TJumnKGeS1NtlOTNT/4b/qnO5fHF55eXp55dXl55reqYCLko/2X/4o0sfXjmT/287df6B/68q/48vbH1dbR91mh4NMBG31asq/9PPrN8b+YfWkX9oL/mH9pJ/aC/5h/aSf2gv+Yf2kn9oL/mH9pJ/aK/T+QcA2mVwqeknkIGmND3/AAAAAAAAAAAAAAAAAAAA521O7S6eLJOq+clbyeFDSbqj6neG/0ecXD98vfxjUTX7TVF3G8vTd4x5gDG91/DT1zd802z9T29vtv76UrLxapJr3e75+684vv/+uRv/5PPes2MW+JuKM/sPPjHZ+mf9stVs/bm95ONq/rk2av4pc8twPXr+6VfXb8z6L/085gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYmF8DAAD//xFQbUc=") creat(0x0, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0x0, 0x1001f0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000680)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780800d1cbf7966d61f53dc17769048b0000fd0c000000000000000000000000000000000200000000000000000000000000008000", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) write$cgroup_devices(r0, &(0x7f0000000100)={'b', ' *:* ', 'wm\x00'}, 0x9) 6m3.093648593s ago: executing program 1 (id=3344): r0 = syz_clone(0x2000400, 0x0, 0xfffffebf, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0xb4) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1, 0x12) 5m54.84320638s ago: executing program 1 (id=3360): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = dup(r1) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800000b, r2, 0x0) r4 = dup(r0) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e0003000000c9030000000000004000000000000000eb02000000000000000001000400380001000600ad0600040300000081000000ff00000000000000f50f0000000000000500000000000000c6"], 0x178) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m54.325725994s ago: executing program 38 (id=3360): r0 = memfd_create(&(0x7f0000000500)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x1c\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\x83\x11\v}k+\xeb\xc3\xc0O\xae\xd2\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb901nEy\x82\x83\x80\xd3O\x00|hP\x00\x00\x00\x00\x00\x00\x00\x05\x86\xfe\xd9\xa5\xc6\nSy\xa3N\xba-]\'q\xc6\xfb\x02\x9a\xa9Z\xa8\x80Bx\xbd74\xcf\"\xa5\xea$\x95\xfd\x06T\xef\x89\xe4j\x06\xdc\x15\xe7\xc3\xb5H\xf7\xdc\xee\x182\xab\xe2?\"\xbewm\x9d\xd8x\xd92\xeeS/\xd2\xcd[\x9dcO1\xcb\x12lZ$\xa7\x9d\xf8b\xf6}\xc5``\xfe0\x8a\'v-\x99`?\x97\x8c\xdd\xd6\xfa\xa2\x06>\xf3\xe2uI\xe65C\xdb\x84\xe6eU\xe8RK\xd6=s\xcd\x9d\x1f#3\xc5\x16\xd0\xbbD\xc5\xde\xc8/\v\xa5W\xbep\x87\x15\x10\xcdm\xa7\x93\x01\x1c,9V8\xdc\xfd\xb7\xc0\xfc\x04\x00p\xad\x12\xb2\xbf\xfbFZ\x1a\f\x99\x05\xe4\x1eP\xed\x87\x89\xbeo\xfbv\xb6\x8a\xee\xf6Oc8\xaf\x11[\xc3\x98w-\xf0\xb2z\xc7\xaf;\x92\xad4\x1b\x92L\x97<\xbdh\x80\xf2\xc0\xd0n)K\xf2#Ncp\xe4\xb4\xfb\x94\x18\xc2-TWA\x13\xfe\xea\xad\v\xc4\xa5\x02\xf9\xed]\xf4\\\x01\xab\xdc\xb6\xcdP\x93\xf2\xc3\x96\xf2\xc0\xd6-x\xd5\xd6\xc7\x9d\xa5\x1f\xd2t\xd7\x8f}b\x9749\xd4a7\x18\xe0\x91KV7[\xb8\x8dL\xc8\xc8\x8f>sbE\xf5\xa7\xdb|\xb0m\x16c\x84\r\"\xf2\x92s\xeb\xaf\x1c\x00\xf4\x8dL\xa5\x10\x89FB\xfb8\xf9\x9d\xcbm\x1c\x91\xe9fd$5\xdc\xad\xec\xef\x90\xd9\xefX\xd2m\x9e\xec\x94w\xb3\xf9\xd9\x0eu-z\x81\xbb\xa6\xc0\x00\xa1\xd9\xcbI\xda\xa3\b\x9e@\xb8\xc8k\xdeQ/\xb8X\x9c\xff4Np~\xc4\xc1_\x1c#zX\a\xd41\x1c\x7fH\x91\xd9k\x05\x1f\n\b\b\x88\xd6\xcf4i\xa0B\xe7\x9c\x9c\xe6\xcax\xca\xa1E#6\xe9\xf31W\xd0\x1bY3/\x00I#\xfa\xb0\f\xd5!\x9fR[\x0e\xdb`\xdb\x82M\'k\x16(\xfa\xc2\xec\x96e\\Q\xe9\x19\xe1u\x86\xcb\xc3\xb0\xb8\x19\xb9l\x1fk!R\xb1P\x8b\xda\xffE\x89\x97\n\x17m\xd10\x1a\xe7Qz\xd8\bi\x8dRw+\xa1^N\xaf\x1b\x1dg\x8f$\xbe\x93\x8d\x8b\xfd\r\xee<\x84\x95\x82)TH\xcac9\x98\x13WW@;\xb4\xd5\x0f\xa1\xb3xX(\x80\xe8\x89\xed e.\xe04\xba\x9c=\xc6\x04\f\xbf\x06\xce5\xf99GD8@\xd2\r\xd0\xdf@\xe3\xbe\"qq#]\x86W\tA\xa7\x91\x85\xae\x9c\x8dO\xa6\xa3\xf9i\x83\xc5\xa8C\x164\xef\xa4\\\a\xaa%\x94!3k]\xd5\xbe\'U\xf17', 0x1) r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r2 = dup(r1) r3 = fanotify_init(0x200, 0x0) fanotify_mark(r3, 0x1, 0x4800000b, r2, 0x0) r4 = dup(r0) write$binfmt_elf64(r4, &(0x7f0000000800)=ANY=[@ANYBLOB="7f454c4606ff78a33e0200000000000002003e0003000000c9030000000000004000000000000000eb02000000000000000001000400380001000600ad0600040300000081000000ff00000000000000f50f0000000000000500000000000000c6"], 0x178) execveat(r4, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 5m29.542634855s ago: executing program 0 (id=3525): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create1(0x0) unshare(0x400) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000600)={0xa0000013}) 5m29.320412806s ago: executing program 0 (id=3527): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x80000) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f00000005c0)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x37}}}, [0x3, 0x4, 0xffffffffffffffff, 0x3, 0x77, 0x5, 0x87bd, 0x6, 0x6e65, 0x7, 0x80000000, 0x93ed, 0xf, 0x8, 0x80]}, &(0x7f00000000c0)=0x100) 5m28.726613864s ago: executing program 0 (id=3532): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x90, 0x0, 0x2, {0x2, 0x0, 0x0, 0x3, 0x4000, 0x265, {0x3, 0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3ff, 0x6000, 0x0, 0x0, 0x0, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83520, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd) ioctl$FIBMAP(r2, 0x401070ca, &(0x7f0000000000)) 5m28.408104949s ago: executing program 0 (id=3537): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000000300)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d", @ANYRES32], 0xfd, 0xc2d, &(0x7f0000001100)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 5m27.818950307s ago: executing program 0 (id=3543): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000021c0)={[{@grpquota}, {@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x400}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@resgid}, {@debug}]}, 0x1, 0x507, &(0x7f0000002780)="$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") 5m27.185624597s ago: executing program 0 (id=3549): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) memfd_secret(0x0) 5m26.675561312s ago: executing program 39 (id=3549): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) memfd_secret(0x0) 4m14.805769613s ago: executing program 2 (id=4067): r0 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @mcast1={0xff, 0x2}}, @IFA_FLAGS={0x8, 0x8, 0x702}]}, 0x34}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[], 0x3c}}, 0x0) 4m14.494845969s ago: executing program 2 (id=4069): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') fsmount(r1, 0x1, 0x70) getdents64(r1, &(0x7f0000003440)=""/92, 0x5c) 4m11.313131581s ago: executing program 2 (id=4086): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r0, 0x0, r3, 0x0, 0xf, 0x8) close(0x3) socket$inet_udp(0x2, 0x2, 0x0) 4m10.278883101s ago: executing program 2 (id=4091): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000002c0)=0x20) renameat2(r0, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000002c0)='./file0\x00', 0x2) 4m9.989371715s ago: executing program 2 (id=4095): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=""/94, 0x5e}, 0x2}], 0x1, 0x820b, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000040)=0x7, 0x4) setsockopt$inet6_int(r0, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x40814, 0x0, 0x0) 4m9.202854862s ago: executing program 2 (id=4098): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xa6, &(0x7f0000000880)={@local, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x84, 0x0, @opaque="f74c2f03c1bcfabab97ea519bd18ca962b072bdd9ef9592723471b55f8b58d6d74073800249f21060b3a94b92b15706baf4eb90bbcaa8e604a4bbce1c4465928edbdefdb274d116a196bcd4e28fdb9fdc1fa9ed7c055310ddc5c29f9c87a3e4196e840346ccc1055d8dfe9a706620be1e8dbf6a9294f94c055bfdeda"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x2, 0x0) 4m8.62947292s ago: executing program 40 (id=4098): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x2}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0xa6, &(0x7f0000000880)={@local, @random="fa34db48716e", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x98, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x84, 0x0, @opaque="f74c2f03c1bcfabab97ea519bd18ca962b072bdd9ef9592723471b55f8b58d6d74073800249f21060b3a94b92b15706baf4eb90bbcaa8e604a4bbce1c4465928edbdefdb274d116a196bcd4e28fdb9fdc1fa9ed7c055310ddc5c29f9c87a3e4196e840346ccc1055d8dfe9a706620be1e8dbf6a9294f94c055bfdeda"}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000009c0)=""/4096, 0x1000}], 0x1}, 0x4}], 0x1, 0x2, 0x0) 2m35.111023901s ago: executing program 7 (id=4700): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x9, 0x0, 0x2, 0x180, 0x5, 0x4, 0xf1, 0x50, 0x12, 0x2, 0x0, 0x7, 0x0, 0x6, 0x0, 0x8000000bdb], 0xd000, 0x43102}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x4, 0x1000000000, 0x0, 0x10043, 0x2000001, 0x3, 0x2004cb, 0x0, 0x1000007, 0xd2, 0x2, 0x9, 0x3, 0x0, 0x7, 0x400000], 0xeeee8000, 0x202}) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x60000, 0xeeee0000, 0xa, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x3, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x5, 0x2, 0x89}, {0xfec00000, 0xeeee0000, 0xe, 0x5, 0x3, 0x7, 0x1, 0x7, 0x3, 0x5, 0x5, 0x5}, {0x1, 0xf000, 0xb, 0x6, 0x4, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xa8, 0x8, 0xfd, 0x3, 0xf7, 0x83}, {0x1000, 0xc000, 0x9, 0xa0, 0xb1, 0x8, 0x2, 0xa0, 0x82, 0xf, 0x5, 0x7}, {0xeeef0000, 0xeeef0000, 0x4, 0x5, 0x7, 0xd1, 0x7, 0x3, 0x9, 0x81, 0x40, 0x70}, {0x41000, 0x4000, 0x14, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x2, 0x9, 0xba, 0x9}, {0xffff2000, 0x30}, {0xe000, 0x7}, 0x80010000, 0x0, 0x0, 0x2024, 0x0, 0xf401, 0x3000, [0x9, 0x100000000000204, 0x5b, 0x8]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m34.626833314s ago: executing program 7 (id=4703): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xffffffffffffffff, 0x0, 0x0, {0x40, 0x8, 0xe, 0xfffc, 0x0, 0x1, 0x0, 0x0, 0x121, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x40084d02, &(0x7f0000000580)={0x1, 0x1ffff, 0x0, 0x0}) 2m34.323998209s ago: executing program 7 (id=4705): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x17d) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x804019, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) llistxattr(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x21, 0x3, 0x8000000}}, 0x50) read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INTERRUPT(r0, &(0x7f0000000080)={0x10, 0xffffffffffffffda, r2}, 0x10) llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) 2m33.989206655s ago: executing program 7 (id=4709): syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x1, 0x267, &(0x7f0000000740)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x2, 0x0, 0x0, 0x2) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x24ffffff) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a409080000d1ce5d29c2ee0000070000000fc6ea110ff4118039c2eb4b87c660d577df701905b9aafab4afaaf755e376a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f78359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xa0242, 0x0) 2m32.147237404s ago: executing program 7 (id=4721): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) 2m31.108052623s ago: executing program 7 (id=4725): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0x18a7cc26, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) getdents64(r2, 0x0, 0x2e) 2m30.602672538s ago: executing program 41 (id=4725): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0x18a7cc26, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) set_mempolicy(0x4005, &(0x7f0000000080)=0x4, 0x8) getdents64(r2, 0x0, 0x2e) 8.539848869s ago: executing program 4 (id=5629): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x80) 7.253529321s ago: executing program 4 (id=5633): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x10005, 0x6031}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.922525755s ago: executing program 6 (id=5638): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a0101000000dd000000000a0000070900010073797a31000000000900030073597a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0x2c, 0xd, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x40000140) 5.61890728s ago: executing program 6 (id=5641): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000a40)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f00000008c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691de", 0x2d}], 0x2}}, {{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000001e00)="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", 0x369}], 0x1}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.357104312s ago: executing program 6 (id=5643): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000a40)={0x2c, &(0x7f0000000840)={0x20, 0x8}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000600)={0x44, &(0x7f0000000800)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000080)={0x1c, &(0x7f00000000c0)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000180)={0x40, 0x13}, 0x0, 0x0, 0x0, 0x0}) 4.971878861s ago: executing program 3 (id=5646): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r2, @in={{0x2, 0x4e23, @empty}}, 0x6, 0x6}, &(0x7f00000000c0)=0x90) 4.746542341s ago: executing program 3 (id=5648): r0 = socket(0x80000000000000a, 0x2, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) writev(r2, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x20000081}], 0x2) writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="cd", 0x1}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 4.606743288s ago: executing program 6 (id=5649): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000390426bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000400001c0012800b00010062726964676500000c000280080002"], 0x3c}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000300)="ad", 0x1) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x21, 0x301, 0x270bd24, 0x25dfdbfd, {0x1}}, 0x14}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x8, 0x1, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.36623144s ago: executing program 3 (id=5652): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000001c0)=""/62, 0xfeb5, 0x10120, 0x0, 0x0) 4.340586771s ago: executing program 6 (id=5653): sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000800)=[{0x0}, {&(0x7f0000000380)=""/128, 0x80}, {&(0x7f0000000080)=""/53, 0x35}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000480)=""/119, 0x77}, {&(0x7f0000000700)=""/229, 0xe5}, {&(0x7f000000bc40)=""/4092, 0xffc}], 0x7}, 0x100}], 0x1, 0x2, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) sendmmsg$unix(r1, &(0x7f0000000680), 0x4924924924925c6, 0x0) 4.239918906s ago: executing program 4 (id=5654): fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000080)='syz1\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440100000102010100000000000000000100000a0c000280060003400000000008000440000000070a000b00512e393331000000340001801400018008000100640101000800020064010100060003400004000006000340000100000c000280050001002f000000080008400000000388000a80640002800c00028005000100880000000c00028005000100fe80000000000000000000000000003c14000400fe80000000000000000000000000002706000340000300001400018008000100ac1414bb08000200ac1e010108000140000000001800028014000180080001000000000008000200000000000600074000000000440003802c00018014000300fe8000000000000000000000000000bb14000400fe80000000000000000000000000003306000340000200000c0002800500"], 0x144}, 0x1, 0x0, 0x0, 0x40080c4}, 0x40090) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.926900751s ago: executing program 8 (id=5657): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2400, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, 0x0}) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000200)={{0x2, 0x4, 0x4, 0xd, 0x8, 0x9, 0x7, 0x1, 0x0, 0x7, 0x5, 0xeb}, {0xe000, 0x8000000, 0xa, 0xe, 0x5, 0x7, 0x4, 0x20, 0x3, 0x5, 0x0, 0x2}, {0xeeee8000, 0x8000000, 0xb, 0x0, 0x4, 0x9, 0x81, 0x7, 0x10, 0xfe, 0x2, 0x72}, {0x5000, 0x10000, 0x0, 0xfe, 0x6, 0xaa, 0x21, 0x0, 0x0, 0x4, 0x84, 0x12}, {0xf000, 0x60000, 0xc, 0xff, 0x1, 0xc, 0x6, 0x7, 0x4, 0x6, 0x8, 0x7}, {0xdddd1000, 0x3000, 0x9, 0xb9, 0x9, 0x5, 0x4, 0x4, 0x64, 0x5, 0x7, 0x7f}, {0x40000, 0x0, 0x0, 0x1, 0xc, 0x40, 0x4, 0x64, 0xe4, 0x1, 0x8, 0xe}, {0xffff1000, 0xd000, 0xa, 0x25, 0x5, 0x8, 0x8, 0xc7, 0x9e, 0x0, 0x41, 0x3}, {0xd000, 0x5}, {0x1, 0x7}, 0x40000000, 0x0, 0x6000, 0x40738, 0x8, 0xa801, 0xeeee0c00, [0x3, 0x5, 0x4, 0xc]}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000740)={"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"}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000b40)={"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"}) 3.837211745s ago: executing program 4 (id=5658): socket$netlink(0x10, 0x3, 0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x40, 0x972, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0xa, 0x0) mq_timedreceive(r0, &(0x7f0000000340)=""/200, 0xc8, 0x0, 0x0) 3.485647372s ago: executing program 8 (id=5660): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000140)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000000080)=[{r2, 0x5588}], 0x1, 0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000640)) io_getevents(r1, 0x1, 0x1, &(0x7f0000000600)=[{}], 0x0) shutdown(r0, 0x0) 3.385089977s ago: executing program 3 (id=5661): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x395e000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) madvise(&(0x7f00006e5000/0x3000)=nil, 0x3000, 0xa) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) 2.737728478s ago: executing program 5 (id=5663): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='westwood', 0x8) getsockopt$inet_tcp_buf(r0, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) r1 = socket(0x11, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f00000000c0)={0x28, 0x0, 0x2710, @local}, 0x10) getpeername$packet(r1, &(0x7f0000001040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001080)=0x14) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @private0}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e1f}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 2.297015909s ago: executing program 5 (id=5664): r0 = gettid() timer_create(0x0, &(0x7f00000001c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000100)=@gcm_128={{0x303}, "cfc85eb51b0ace6a", "4617a9f6040839230fb7fead776dd8dc", "3f4051c4", "a44a889722b66244"}, 0x28) recvmmsg(r1, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000b00)=""/81, 0x51}], 0x1}}], 0x1, 0x0, 0x0) 2.135846677s ago: executing program 6 (id=5665): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r1, &(0x7f0000000440), &(0x7f0000000040)=@udp=r0}, 0x20) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000740)=""/221, 0xdd}], 0x1}, 0x1ff}], 0x1, 0x4, 0x0) 1.950899176s ago: executing program 3 (id=5666): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x709) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) close(0x3) 1.814885782s ago: executing program 8 (id=5667): connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfb}}, 0x2}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="af0ac95ab194f93f8e795a9b29420fa62d", 0x11}], 0x1}}], 0x1, 0x24088000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xf, &(0x7f0000000200)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x14, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d960001000000000000000000007efff100004000", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c527d3d458dd4992861ac00", "f4bd000000801900", [0x8, 0xffffffff9673e35d]}}) 1.814710082s ago: executing program 5 (id=5668): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000004c0), 0xce, r1}, 0x38) 1.573876494s ago: executing program 5 (id=5669): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40102, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x1, 0x0, &(0x7f0000001600)=""/118, 0x0, 0x3332f000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000000)) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2}) ioctl$VHOST_NET_SET_BACKEND(r0, 0xaf02, 0x0) 1.498912737s ago: executing program 4 (id=5670): bind$inet6(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0xfffffffffffffffe, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="280000001000010025bd7000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="380904000300000008001b"], 0x28}, 0x1, 0x0, 0x0, 0x68010}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 1.435035891s ago: executing program 8 (id=5671): sigaltstack(&(0x7f0000000040)={0x0, 0x0, 0xfffffffffffffed8}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) readv(r1, &(0x7f0000000040)=[{0x0}], 0x1) 1.302948457s ago: executing program 5 (id=5672): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file1'}, 0xb) mount_setattr(0xffffffffffffffff, 0x0, 0x9800, &(0x7f0000000040)={0x0, 0x0, 0x120000}, 0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, r1, 0x600, 0x50bd2a, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40e1) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_pwait2(r0, &(0x7f0000000180)=[{}, {}], 0x2, &(0x7f00000001c0)={0x77359400}, &(0x7f0000000200)={[0x401]}, 0x8) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130001002dbd7000fbdbdf2500000000", @ANYRES32=r2, @ANYBLOB="8c280000288000000c001a8008000280040001ee140003006970"], 0x40}, 0x1, 0x0, 0x0, 0x4090}, 0x10) 257.186087ms ago: executing program 8 (id=5673): creat(&(0x7f0000000100)='./file0\x00', 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000300)={0x18, 0x0, 0x0, {0xfffffffffffffffa}}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000"], 0xb0) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="10"], 0x10) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@posixacl}]}}) 122.715604ms ago: executing program 5 (id=5674): socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) connect$rose(r0, &(0x7f0000000240)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c) 98.106415ms ago: executing program 3 (id=5675): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000240)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000001540), 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x12, &(0x7f0000000480)=@conn_svc_rsp={0x0, 0x0, 0xa, "f147a7e9", {0x3, 0x1, 0x0, 0x5, 0xd, 0x7, 0x1}}) ioctl$EVIOCGLED(r0, 0x5452, &(0x7f0000000240)=""/77) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xc38, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000180)={0x57, 0x0, 0x0, {0xfffe, 0x1}, {0x74, 0x2}, @const={0x6, {0x7f, 0x0, 0x8000, 0xfffd}}}) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x78, 0x822b01) write$char_usb(r1, &(0x7f0000000040)="e2", 0x1068) 59.199756ms ago: executing program 4 (id=5676): rseq(&(0x7f0000001080)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4001af84, &(0x7f0000000040)={0x2}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x5, 0x5, 0x17, 0x0, 0x6, 0xf9, 0x2, 0x79, 0xff, 0xa, 0x8, 0x1, 0x0, 0x8, 0x5, 0x8, 0x72, 0x7, 0xba, '\x00', 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 0s ago: executing program 8 (id=5677): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = inotify_init() r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x34d}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r0, 0xffffffffffffffff, 0x0) kernel console output (not intermixed with test programs): high-speed USB device number 11 using dummy_hcd [ 656.885692][T16782] netlink: 'syz.5.3819': attribute type 4 has an invalid length. [ 656.932721][T16782] netlink: 'syz.5.3819': attribute type 4 has an invalid length. [ 656.959702][ T4592] usb 5-1: Using ep0 maxpacket: 32 [ 656.969237][ T4592] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 657.003349][ T4592] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 657.038740][ T4592] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 657.064652][ T4592] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 657.096772][ T4592] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 657.127568][ T4592] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 657.161131][ T4592] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 657.188112][ T4592] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 657.231872][ T4592] usb 5-1: config 0 descriptor?? [ 657.469886][ T4592] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 11 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 657.761310][ T4592] usb 5-1: USB disconnect, device number 11 [ 657.817798][ T4592] usblp0: removed [ 657.833174][T16810] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 658.165081][T16819] loop3: detected capacity change from 0 to 256 [ 658.191124][T16819] exfat: Deprecated parameter 'namecase' [ 658.211301][T16819] exfat: Deprecated parameter 'namecase' [ 658.273373][T16819] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 659.407786][T16855] overlayfs: failed to clone upperpath [ 660.778086][ T27] audit: type=1326 audit(2000000182.180:766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 660.869664][ T27] audit: type=1326 audit(2000000182.190:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 660.959661][ T27] audit: type=1326 audit(2000000182.190:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 661.026579][ T27] audit: type=1326 audit(2000000182.190:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 661.084266][ T27] audit: type=1326 audit(2000000182.190:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 661.165934][ T27] audit: type=1326 audit(2000000182.190:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 661.222582][ T27] audit: type=1326 audit(2000000182.190:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 661.285397][ T27] audit: type=1326 audit(2000000182.190:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 661.365627][ T27] audit: type=1326 audit(2000000182.190:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 661.414927][T16929] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3861'. [ 661.466200][ T27] audit: type=1326 audit(2000000182.190:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16914 comm="syz.2.3857" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f73a139c799 code=0x7ffc0000 [ 662.053898][T16921] loop3: detected capacity change from 0 to 40427 [ 662.108501][T16921] F2FS-fs (loop3): invalid crc value [ 662.157720][T16921] F2FS-fs (loop3): Found nat_bits in checkpoint [ 662.339786][T16921] F2FS-fs (loop3): Start checkpoint disabled! [ 662.381196][T16921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 662.767998][T16921] bio_check_eod: 47 callbacks suppressed [ 662.768024][T16921] syz.3.3860: attempt to access beyond end of device [ 662.768024][T16921] loop3: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 662.813436][T16961] syz.3.3860: attempt to access beyond end of device [ 662.813436][T16961] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 662.993152][T16921] syz.3.3860: attempt to access beyond end of device [ 662.993152][T16921] loop3: rw=2049, sector=77848, nr_sectors = 32 limit=40427 [ 663.090345][T16921] syz.3.3860: attempt to access beyond end of device [ 663.090345][T16921] loop3: rw=2049, sector=77888, nr_sectors = 32 limit=40427 [ 663.119257][T16921] syz.3.3860: attempt to access beyond end of device [ 663.119257][T16921] loop3: rw=2049, sector=77944, nr_sectors = 8 limit=40427 [ 663.202097][T16921] syz.3.3860: attempt to access beyond end of device [ 663.202097][T16921] loop3: rw=2049, sector=77976, nr_sectors = 16 limit=40427 [ 663.258300][T16921] syz.3.3860: attempt to access beyond end of device [ 663.258300][T16921] loop3: rw=2049, sector=78024, nr_sectors = 8 limit=40427 [ 663.309198][T16970] input: syz0 as /devices/virtual/input/input20 [ 663.317030][T16921] syz.3.3860: attempt to access beyond end of device [ 663.317030][T16921] loop3: rw=2049, sector=78064, nr_sectors = 32 limit=40427 [ 663.390230][T16921] syz.3.3860: attempt to access beyond end of device [ 663.390230][T16921] loop3: rw=2049, sector=78112, nr_sectors = 16 limit=40427 [ 663.448539][T16921] syz.3.3860: attempt to access beyond end of device [ 663.448539][T16921] loop3: rw=2049, sector=78136, nr_sectors = 24 limit=40427 [ 664.292780][T16996] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3878'. [ 664.343702][T16996] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3878'. [ 665.255192][T17032] overlayfs: failed to clone upperpath [ 665.829693][T17045] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3893'. [ 666.766525][T17070] input: syz0 as /devices/virtual/input/input21 [ 667.309517][ C0] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 669.199976][T17126] loop4: detected capacity change from 0 to 32768 [ 669.246185][T17126] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 669.591082][T15379] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10 [ 673.765848][T17241] netlink: 3 bytes leftover after parsing attributes in process `syz.3.3949'. [ 674.038951][T17248] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3951'. [ 676.674776][T17317] gre0 speed is unknown, defaulting to 1000 [ 676.912313][T17329] overlayfs: failed to clone upperpath [ 676.927245][T17327] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3974'. [ 677.475485][T17320] gre0 speed is unknown, defaulting to 1000 [ 678.589668][ C0] icmp: detected local route for 172.20.20.23 during ICMP sending, src 172.20.20.187 [ 679.928165][T17399] netlink: 'syz.2.3998': attribute type 1 has an invalid length. [ 679.967020][T17399] netlink: 'syz.2.3998': attribute type 4 has an invalid length. [ 679.999275][T17399] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3998'. [ 680.049581][T17404] netlink: 'syz.2.3998': attribute type 1 has an invalid length. [ 680.079656][T17404] netlink: 'syz.2.3998': attribute type 4 has an invalid length. [ 680.149527][T17404] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.3998'. [ 682.197085][T17426] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 682.255298][T17426] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 682.670546][T17426] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.680627][T17426] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.690881][T17426] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.700602][T17426] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 682.815922][T17426] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.826975][T17426] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.836223][T17426] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 682.845986][T17426] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 683.873715][T17495] input: syz0 as /devices/virtual/input/input22 [ 683.947034][ T27] kauditd_printk_skb: 18 callbacks suppressed [ 683.947053][ T27] audit: type=1326 audit(2000000205.340:794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17494 comm="syz.4.4022" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f72d9b9c799 code=0x0 [ 684.231792][T17511] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 684.659839][ T4592] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 684.876994][ T4592] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.909576][ T4592] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 684.941350][ T4592] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.985077][ T4592] usb 4-1: config 0 descriptor?? [ 685.017701][ T4592] pwc: Askey VC010 type 2 USB webcam detected. [ 685.352816][ T27] audit: type=1326 audit(2000000206.750:795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.6.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 685.420862][ T4592] pwc: recv_control_msg error -32 req 02 val 2b00 [ 685.441385][ T4592] pwc: recv_control_msg error -32 req 02 val 2700 [ 685.468376][ T27] audit: type=1326 audit(2000000206.790:796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.6.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 685.494679][ T4592] pwc: recv_control_msg error -32 req 02 val 2c00 [ 685.521068][ T4592] pwc: recv_control_msg error -32 req 04 val 1000 [ 685.545943][ T4592] pwc: recv_control_msg error -32 req 04 val 1300 [ 685.574237][ T27] audit: type=1326 audit(2000000206.790:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.6.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 685.627985][ T27] audit: type=1326 audit(2000000206.790:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.6.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 685.776284][ T4592] pwc: recv_control_msg error -71 req 02 val 2000 [ 685.791154][ T4592] pwc: recv_control_msg error -71 req 02 val 2100 [ 685.808089][ T27] audit: type=1326 audit(2000000206.790:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.6.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 685.823927][ T4592] pwc: recv_control_msg error -71 req 04 val 1500 [ 685.880579][ T4592] pwc: recv_control_msg error -71 req 02 val 2500 [ 685.889572][ T4592] pwc: recv_control_msg error -71 req 02 val 2400 [ 685.902945][ T27] audit: type=1326 audit(2000000206.790:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.6.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 685.912538][ T4592] pwc: recv_control_msg error -71 req 02 val 2600 [ 685.995505][ T4592] pwc: recv_control_msg error -71 req 02 val 2900 [ 686.026109][ T4592] pwc: recv_control_msg error -71 req 02 val 2800 [ 686.029424][ T27] audit: type=1326 audit(2000000206.790:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.6.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 686.062094][ T4592] pwc: recv_control_msg error -71 req 04 val 1100 [ 686.090793][ T4592] pwc: recv_control_msg error -71 req 04 val 1200 [ 686.170116][ T27] audit: type=1326 audit(2000000206.790:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.6.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 686.269304][ T4592] pwc: Registered as video103. [ 686.273691][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.286976][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.295187][ T27] audit: type=1326 audit(2000000206.800:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17528 comm="syz.6.4033" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 686.359983][ T4592] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23 [ 686.433970][ T4592] usb 4-1: USB disconnect, device number 20 [ 686.919754][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.187 [ 687.856503][T17573] netlink: 'syz.3.4043': attribute type 5 has an invalid length. [ 687.875328][T17573] netlink: 1132 bytes leftover after parsing attributes in process `syz.3.4043'. [ 687.908655][T17573] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4043'. [ 688.307161][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4046'. [ 688.342066][T17588] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.351350][T17588] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.360563][T17588] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.369757][T17588] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 688.416540][T17588] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4046'. [ 689.268988][T17594] loop4: detected capacity change from 0 to 32768 [ 689.344896][T17594] JBD2: Ignoring recovery information on journal [ 689.411366][T17594] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 689.429572][ T4348] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 689.629892][ T4348] usb 4-1: Using ep0 maxpacket: 16 [ 689.638521][ T4348] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 689.664705][ T4348] usb 4-1: config 0 has no interface number 0 [ 689.691771][ T4348] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 689.731723][ T4348] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 689.772370][ T4348] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 689.805070][ T4348] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.844205][ T4348] usb 4-1: Product: syz [ 689.863488][ T4348] usb 4-1: Manufacturer: syz [ 689.883034][ T4348] usb 4-1: SerialNumber: syz [ 689.906342][ T4348] usb 4-1: config 0 descriptor?? [ 689.932779][T17613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 689.946772][T17613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 690.218985][T17613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 690.237416][T15886] ocfs2: Unmounting device (7,4) on (node local) [ 690.249700][T17613] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 690.521915][T17650] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4065'. [ 690.773907][T17661] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4068'. [ 690.871848][ T4348] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 690.900263][ T4348] asix 4-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffe0 [ 690.924783][ T4348] asix: probe of 4-1:0.251 failed with error -32 [ 690.980498][ T4348] usb 4-1: USB disconnect, device number 21 [ 691.379653][ T27] kauditd_printk_skb: 20 callbacks suppressed [ 691.379675][ T27] audit: type=1326 audit(2000000212.770:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 691.655866][ T27] audit: type=1326 audit(2000000212.770:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 691.829926][ T27] audit: type=1326 audit(2000000212.780:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 692.007871][ T27] audit: type=1326 audit(2000000212.780:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 692.222884][ T27] audit: type=1326 audit(2000000212.780:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 692.405572][ T27] audit: type=1326 audit(2000000212.780:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 692.502686][ T27] audit: type=1326 audit(2000000212.780:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 692.617301][ T27] audit: type=1326 audit(2000000212.780:831): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 692.729462][ T27] audit: type=1326 audit(2000000212.860:832): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 692.849554][ T27] audit: type=1326 audit(2000000212.860:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17672 comm="syz.5.4072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 693.238608][T17709] loop3: detected capacity change from 0 to 128 [ 693.288854][T17709] EXT4-fs (loop3): Test dummy encryption mode enabled [ 693.381111][T17709] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 693.498079][T17709] ext4 filesystem being mounted at /754/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 694.149852][T17709] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 694.314415][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 695.291089][T17761] netlink: 'syz.3.4093': attribute type 10 has an invalid length. [ 695.410148][T17761] 8021q: adding VLAN 0 to HW filter on device team0 [ 695.445024][T17761] bond0: (slave team0): Enslaving as an active interface with an up link [ 695.489651][ T4311] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 695.711406][ T4311] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 695.730881][ T4311] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 695.772003][ T4311] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.810392][ T4311] usb 5-1: config 0 descriptor?? [ 695.866270][ T4311] pwc: Askey VC010 type 2 USB webcam detected. [ 696.276825][ T4311] pwc: recv_control_msg error -32 req 02 val 2b00 [ 696.286398][ T4311] pwc: recv_control_msg error -32 req 02 val 2700 [ 696.290285][T17777] overlayfs: failed to clone upperpath [ 696.340701][ T4311] pwc: recv_control_msg error -32 req 02 val 2c00 [ 696.371786][ T4311] pwc: recv_control_msg error -32 req 04 val 1000 [ 696.402202][ T4311] pwc: recv_control_msg error -32 req 04 val 1300 [ 696.611807][ T4311] pwc: recv_control_msg error -71 req 02 val 2000 [ 696.625331][ T4311] pwc: recv_control_msg error -71 req 02 val 2100 [ 696.634991][ T4311] pwc: recv_control_msg error -71 req 04 val 1500 [ 696.662372][ T4311] pwc: recv_control_msg error -71 req 02 val 2500 [ 696.672203][ T4311] pwc: recv_control_msg error -71 req 02 val 2400 [ 696.685916][ T4311] pwc: recv_control_msg error -71 req 02 val 2600 [ 696.729062][ T4311] pwc: recv_control_msg error -71 req 02 val 2900 [ 696.773166][ T4311] pwc: recv_control_msg error -71 req 02 val 2800 [ 696.785251][T17793] loop3: detected capacity change from 0 to 512 [ 696.791998][ T4311] pwc: recv_control_msg error -71 req 04 val 1100 [ 696.817949][ T4311] pwc: recv_control_msg error -71 req 04 val 1200 [ 696.877888][ T4311] pwc: Registered as video103. [ 696.894042][T17793] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 696.914128][ T4311] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 696.949764][T17793] ext4 filesystem being mounted at /760/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 696.997190][ T4311] usb 5-1: USB disconnect, device number 12 [ 697.262759][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 697.882052][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 697.925271][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 697.943456][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 697.956516][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 697.964622][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 697.973049][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 698.011039][T17822] overlayfs: failed to clone upperpath [ 698.160090][T17819] gre0 speed is unknown, defaulting to 1000 [ 698.607019][T17810] loop3: detected capacity change from 0 to 32768 [ 698.674957][T17819] chnl_net:caif_netlink_parms(): no params data found [ 698.822932][T17810] XFS (loop3): Mounting V5 Filesystem [ 698.852890][T17819] bridge0: port 1(bridge_slave_0) entered blocking state [ 698.904638][T17819] bridge0: port 1(bridge_slave_0) entered disabled state [ 698.924899][T17819] device bridge_slave_0 entered promiscuous mode [ 698.935918][T17819] bridge0: port 2(bridge_slave_1) entered blocking state [ 698.944195][T17819] bridge0: port 2(bridge_slave_1) entered disabled state [ 698.960175][T17819] device bridge_slave_1 entered promiscuous mode [ 698.995227][T17810] XFS (loop3): Starting recovery (logdev: internal) [ 699.049707][T17810] XFS (loop3): Ending recovery (logdev: internal) [ 699.058980][T17819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 699.112401][T17819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 699.281169][T17819] team0: Port device team_slave_0 added [ 699.314089][T17859] tipc: Enabling of bearer rejected, failed to enable media [ 699.355326][T17819] team0: Port device team_slave_1 added [ 699.431693][T17810] XFS (loop3): User initiated shutdown received. [ 699.458618][T17810] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x101/0x150 (fs/xfs/xfs_fsops.c:489). Shutting down filesystem. [ 699.484462][T17819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 699.516114][T17819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.524882][T17810] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 699.565309][T17864] overlayfs: failed to clone upperpath [ 699.625223][T17819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 699.716859][T17819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 699.730283][T17819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 699.827803][ T4282] XFS (loop3): Unmounting Filesystem [ 699.847259][T17819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 700.029760][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 700.059721][T17819] device hsr_slave_0 entered promiscuous mode [ 700.081355][T17819] device hsr_slave_1 entered promiscuous mode [ 700.088609][T17819] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 700.097425][T17819] Cannot create hsr debugfs directory [ 701.316803][T17904] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4125'. [ 701.670297][T17904] bond0 (unregistering): (slave team0): Releasing backup interface [ 701.757768][T17904] bond0 (unregistering): Released all slaves [ 702.109451][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 703.394026][T17923] bridge0: port 2(bridge_slave_1) entered disabled state [ 703.401791][T17923] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.200338][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 704.365863][T17923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 704.426076][T17923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 704.996767][T17923] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.007104][T17923] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.018231][T17923] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 705.028350][T17923] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 706.044833][T17819] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 706.097798][T17819] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 706.160870][T17819] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 706.188112][T17819] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 706.270685][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 706.584616][T17819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 706.700526][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 706.720185][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 706.773124][T17819] 8021q: adding VLAN 0 to HW filter on device team0 [ 706.804227][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 706.823942][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 706.860084][ T4745] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.867290][ T4745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 706.931744][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 706.971949][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 707.068569][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 707.118510][ T4745] bridge0: port 2(bridge_slave_1) entered blocking state [ 707.125803][ T4745] bridge0: port 2(bridge_slave_1) entered forwarding state [ 707.186023][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 707.251130][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 707.298644][T18016] tipc: Enabling of bearer rejected, failed to enable media [ 707.329530][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 707.347391][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 707.393248][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 707.420043][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 707.457140][T17819] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 707.528911][T17819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 707.581336][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 707.602009][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 707.657171][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 707.668881][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 707.722735][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 707.765256][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 708.056644][T18047] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4163'. [ 708.895762][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 708.914514][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 708.965311][T17819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.051451][T18078] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4172'. [ 709.425051][T18092] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4174'. [ 710.138511][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 710.151717][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 710.197397][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 710.227567][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 710.262056][T17819] device veth0_vlan entered promiscuous mode [ 710.289929][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 710.298673][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 710.332205][T17819] device veth1_vlan entered promiscuous mode [ 710.431689][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 710.441001][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 710.480765][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 710.511671][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 710.533684][T17819] device veth0_macvtap entered promiscuous mode [ 710.581362][T17819] device veth1_macvtap entered promiscuous mode [ 710.741961][T17819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 710.802286][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 710.830651][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 710.871244][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 710.900770][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 710.937513][T17819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 710.974083][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 710.994468][ T4765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 711.027919][T17819] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.051806][T17819] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.073319][T17819] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.103753][T17819] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 711.302608][ T4767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.322866][ T4767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.362530][ T4767] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 711.443262][ T4767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 711.481126][ T4767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 711.509159][ T4742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 712.840994][T18184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 712.871067][T18184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 713.263597][ T27] kauditd_printk_skb: 10 callbacks suppressed [ 713.263614][ T27] audit: type=1326 audit(2000000234.670:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 713.340285][T18200] loop4: detected capacity change from 0 to 1024 [ 713.353763][ T27] audit: type=1326 audit(2000000234.710:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 713.473419][ T27] audit: type=1326 audit(2000000234.710:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 713.617182][ T27] audit: type=1326 audit(2000000234.710:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 713.739553][ T27] audit: type=1326 audit(2000000234.710:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 713.750933][T18208] Invalid ELF header magic: != ELF [ 713.846635][ T27] audit: type=1326 audit(2000000234.710:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 713.915481][ T27] audit: type=1326 audit(2000000234.710:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 714.027483][ T27] audit: type=1326 audit(2000000234.710:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 714.176077][ T27] audit: type=1326 audit(2000000234.720:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 714.236457][T18222] gre0 speed is unknown, defaulting to 1000 [ 714.269815][ T27] audit: type=1326 audit(2000000234.720:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18199 comm="syz.4.4202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f72d9b9c799 code=0x7ffc0000 [ 714.591919][T18230] loop4: detected capacity change from 0 to 8192 [ 714.684148][T18230] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 714.699017][T18230] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal [ 714.709062][T18230] REISERFS (device loop4): using ordered data mode [ 714.717231][T18230] reiserfs: using flush barriers [ 714.726177][T18230] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 714.744829][T18230] REISERFS (device loop4): checking transaction log (loop4) [ 714.956447][T18230] REISERFS (device loop4): Using tea hash to sort names [ 714.964697][T18230] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 717.356504][T18272] team0 (unregistering): Port device team_slave_0 removed [ 717.356629][T18256] loop3: detected capacity change from 0 to 32768 [ 717.402901][T18272] team0 (unregistering): Failed to send options change via netlink (err -105) [ 717.427130][T18256] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.4221 (18256) [ 717.433508][T18272] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 717.462672][T18272] team0 (unregistering): Port device team_slave_1 removed [ 717.520872][T18272] team0 (unregistering): Failed to send options change via netlink (err -105) [ 717.540625][T18256] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 717.550136][T18272] team0 (unregistering): Failed to send port change of device dummy0 via netlink (err -105) [ 717.579825][T18256] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 717.646070][T18256] BTRFS info (device loop3): setting nodatacow, compression disabled [ 717.671682][T18272] team0 (unregistering): Port device dummy0 removed [ 717.710279][T18256] BTRFS info (device loop3): force clearing of disk cache [ 717.750532][T18256] BTRFS info (device loop3): enabling ssd optimizations [ 717.763795][T18256] BTRFS info (device loop3): using spread ssd allocation scheme [ 717.798591][T18256] BTRFS info (device loop3): turning off barriers [ 717.829936][T18256] BTRFS info (device loop3): disabling free space tree [ 717.873352][T18256] BTRFS info (device loop3): not using ssd optimizations [ 717.943901][T18256] BTRFS info (device loop3): not using spread ssd allocation scheme [ 718.114719][T18307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4233'. [ 718.448277][T18256] BTRFS info (device loop3): rebuilding free space tree [ 718.542903][T18256] BTRFS info (device loop3): disabling free space tree [ 718.570941][T18256] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 718.642460][T18256] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 718.818189][ T27] kauditd_printk_skb: 22 callbacks suppressed [ 718.818208][ T27] audit: type=1800 audit(2000000240.220:876): pid=18256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4221" name="file1" dev="loop3" ino=260 res=0 errno=0 [ 719.110185][T18343] sctp: [Deprecated]: syz.6.4241 (pid 18343) Use of int in max_burst socket option. [ 719.110185][T18343] Use struct sctp_assoc_value instead [ 719.415637][ T4282] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 719.855395][T18364] loop4: detected capacity change from 0 to 128 [ 720.047364][T18364] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 720.112846][T18364] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 720.857922][T15886] EXT4-fs (loop4): unmounting filesystem. [ 721.871345][T18424] Invalid ELF header magic: != ELF [ 722.341022][T18432] overlayfs: failed to clone upperpath [ 722.997706][T18421] loop4: detected capacity change from 0 to 40427 [ 723.050707][T18421] F2FS-fs (loop4): Invalid SB checksum offset: 0 [ 723.075861][T18421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 723.130661][T18421] F2FS-fs (loop4): invalid crc value [ 723.183941][T18421] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 723.425921][T18461] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4280'. [ 723.443063][T18421] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 723.460106][T18421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 725.509592][ T4314] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 725.719486][ T4314] usb 4-1: Using ep0 maxpacket: 32 [ 725.729116][ T4314] usb 4-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 725.759097][ T4314] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.786413][ T4314] usb 4-1: Product: syz [ 725.802139][ T4314] usb 4-1: Manufacturer: syz [ 725.817005][ T4314] usb 4-1: SerialNumber: syz [ 725.838808][ T4314] usb 4-1: config 0 descriptor?? [ 725.866729][ T4314] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 727.284789][ T4314] gspca_topro: Sensor cx0342 [ 727.527218][ T4314] usb 4-1: USB disconnect, device number 22 [ 727.672486][T18555] netlink: 168 bytes leftover after parsing attributes in process `syz.5.4302'. [ 729.228697][T18606] netlink: 'syz.5.4317': attribute type 1 has an invalid length. [ 729.319196][T18608] 8021q: adding VLAN 0 to HW filter on device bond4 [ 729.399743][T18374] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 729.420475][T18608] bond3: (slave bond4): making interface the new active one [ 729.428585][T18608] bond3: (slave bond4): Enslaving as an active interface with an up link [ 729.479974][T18606] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4317'. [ 729.558343][T18606] 8021q: adding VLAN 0 to HW filter on device bond3 [ 729.609623][T18374] usb 4-1: Using ep0 maxpacket: 32 [ 729.629110][T18374] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 729.658892][T18374] usb 4-1: config 0 has no interface number 0 [ 729.678846][T18374] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 729.729567][T18374] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 729.764440][T18374] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.794620][T18374] usb 4-1: Product: syz [ 729.809058][T18374] usb 4-1: Manufacturer: syz [ 729.825687][T18374] usb 4-1: SerialNumber: syz [ 729.855748][T18374] usb 4-1: config 0 descriptor?? [ 729.872216][T18602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 730.088870][T18602] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 730.396319][ T4754] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 730.867108][T18651] loop7: detected capacity change from 0 to 136 [ 731.537568][T18374] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 731.573004][T18374] asix: probe of 4-1:0.188 failed with error -71 [ 731.669245][T18374] usb 4-1: USB disconnect, device number 23 [ 732.729961][ T4314] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 732.932519][ T4314] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 732.961369][ T4314] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 733.002762][ T4314] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 733.032611][ T4314] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.065942][ T4314] usb 8-1: config 0 descriptor?? [ 733.111323][ T4314] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 734.121518][T18708] loop4: detected capacity change from 0 to 32768 [ 734.265339][T18708] XFS (loop4): Mounting V5 Filesystem [ 734.367737][T18708] XFS (loop4): Ending clean mount [ 734.587946][T15886] XFS (loop4): Unmounting Filesystem [ 734.758379][T18764] tipc: Enabling of bearer rejected, failed to enable media [ 735.511892][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4368'. [ 735.550728][ T4314] usb 8-1: USB disconnect, device number 17 [ 735.701886][T18775] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4368'. [ 736.460328][T18807] overlayfs: failed to clone upperpath [ 737.821921][T18852] MPTCP: kernel_bind error, err=-99 [ 740.766538][T18935] loop4: detected capacity change from 0 to 256 [ 740.857708][ T27] audit: type=1326 audit(2000000262.260:877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18931 comm="syz.3.4412" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd1e3d9c799 code=0x0 [ 740.934996][T18935] FAT-fs (loop4): Directory bread(block 64) failed [ 740.966855][T18935] FAT-fs (loop4): Directory bread(block 65) failed [ 740.991664][T18935] FAT-fs (loop4): Directory bread(block 66) failed [ 741.008857][T18935] FAT-fs (loop4): Directory bread(block 67) failed [ 741.035743][T18935] FAT-fs (loop4): Directory bread(block 68) failed [ 741.062133][T18935] FAT-fs (loop4): Directory bread(block 69) failed [ 741.086197][T18935] FAT-fs (loop4): Directory bread(block 70) failed [ 741.113969][T18935] FAT-fs (loop4): Directory bread(block 71) failed [ 741.139019][T18935] FAT-fs (loop4): Directory bread(block 72) failed [ 741.149534][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 741.167002][T18935] FAT-fs (loop4): Directory bread(block 73) failed [ 742.317310][T18957] loop4: detected capacity change from 0 to 1024 [ 742.340375][T18957] EXT4-fs: inline encryption not supported [ 742.470455][T18957] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 742.688383][T18956] EXT4-fs (loop4): unmounting filesystem. [ 743.045782][T18837] Set syz1 is full, maxelem 65536 reached [ 744.669744][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 745.268980][T19030] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 746.769274][T19069] loop7: detected capacity change from 0 to 2048 [ 746.948537][T19071] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 747.380677][T19069] syz.7.4447 (19069) used greatest stack depth: 19728 bytes left [ 747.621065][T19087] overlayfs: failed to clone upperpath [ 747.722820][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.729507][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.279484][ T14] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 748.489696][ T14] usb 5-1: Using ep0 maxpacket: 32 [ 748.498428][ T14] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 748.545266][ T14] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 748.562102][T19109] loop3: detected capacity change from 0 to 2048 [ 748.569531][ T14] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 748.596251][ T14] usb 5-1: Product: syz [ 748.608083][ T14] usb 5-1: Manufacturer: syz [ 748.617505][T19109] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 748.631132][ T14] usb 5-1: SerialNumber: syz [ 748.659035][ T14] usb 5-1: config 0 descriptor?? [ 748.687848][T19098] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 748.710598][ T14] hub 5-1:0.0: bad descriptor, ignoring hub [ 748.717612][ T14] hub: probe of 5-1:0.0 failed with error -5 [ 748.800933][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 749.144069][T19124] MPTCP: kernel_bind error, err=-99 [ 752.189559][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 752.572903][ T4592] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 752.771415][ T4592] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 752.804320][ T4592] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 752.845027][ T4592] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 752.865469][ T4592] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 752.886369][ T4592] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 752.921896][ T4592] usb 8-1: config 0 descriptor?? [ 753.338273][ T4592] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving [ 753.390498][ T4592] plantronics 0003:047F:FFFF.0010: hiddev1,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.7-1/input0 [ 753.744716][T19181] gre0 speed is unknown, defaulting to 1000 [ 753.816458][T19223] MPTCP: kernel_bind error, err=-99 [ 754.298301][T19236] overlayfs: failed to clone lowerpath [ 754.351902][T19243] overlayfs: failed to clone lowerpath [ 754.548481][ T4592] usb 8-1: USB disconnect, device number 18 [ 754.659991][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4500'. [ 754.817034][ T4314] usb 5-1: USB disconnect, device number 13 [ 755.753164][T19276] tipc: Started in network mode [ 755.795724][T19276] tipc: Node identity ac1414aa, cluster identity 4711 [ 755.834970][T19276] tipc: Enabling of bearer rejected, failed to enable media [ 755.848921][T19281] loop3: detected capacity change from 0 to 1024 [ 755.927335][T19281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 756.179733][T19281] EXT4-fs error (device loop3): ext4_map_blocks:635: inode #2: block 16: comm syz.3.4505: lblock 0 mapped to illegal pblock 16 (length 1) [ 756.424282][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 756.658505][T19312] loop3: detected capacity change from 0 to 1024 [ 756.760795][T19312] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 756.838396][ T27] audit: type=1800 audit(2000000278.240:878): pid=19312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4513" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 756.943087][ T27] audit: type=1800 audit(2000000278.240:879): pid=19312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.4513" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 757.178895][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 757.220444][T19325] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4519'. [ 757.530596][T19329] kvm: pic: non byte write [ 757.536766][T19329] kvm: pic: single mode not supported [ 757.537093][T19329] kvm: pic: level sensitive irq not supported [ 759.566318][T19388] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4538'. [ 760.697591][T19405] netlink: 14 bytes leftover after parsing attributes in process `syz.5.4541'. [ 761.026396][T19405] bond0 (unregistering): Released all slaves [ 761.566384][T19427] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4559'. [ 764.185399][T19498] infiniband syz1: set down [ 764.567990][ T27] audit: type=1326 audit(2000000285.970:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 764.637058][ T27] audit: type=1326 audit(2000000285.970:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 764.711919][ T27] audit: type=1326 audit(2000000285.970:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 764.859685][ T27] audit: type=1326 audit(2000000285.970:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 764.947857][ T27] audit: type=1326 audit(2000000285.970:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 765.006224][T19510] sd 0:0:1:0: PR command failed: 1026 [ 765.015909][T19510] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 765.034717][T19510] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 765.079441][ T27] audit: type=1326 audit(2000000285.970:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 765.174082][ T27] audit: type=1326 audit(2000000285.970:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 765.258687][ T27] audit: type=1326 audit(2000000285.970:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 765.327354][ T27] audit: type=1326 audit(2000000285.970:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 765.494240][ T27] audit: type=1326 audit(2000000285.970:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19505 comm="syz.5.4572" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f2381b9c799 code=0x7ffc0000 [ 765.818314][T19529] loop4: detected capacity change from 0 to 1024 [ 765.910062][T19529] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 766.177905][T15886] EXT4-fs (loop4): unmounting filesystem. [ 766.619510][ T4592] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 766.819467][ T4592] usb 5-1: Using ep0 maxpacket: 8 [ 766.830128][ T4592] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 766.844617][ T4592] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.853606][ T4592] usb 5-1: Product: syz [ 766.866398][ T4592] usb 5-1: Manufacturer: syz [ 766.872007][ T4592] usb 5-1: SerialNumber: syz [ 766.882715][ T4592] usb 5-1: config 0 descriptor?? [ 766.989110][T19498] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.998558][T19498] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.008298][T19498] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.024193][T19498] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 767.112529][ T4592] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 767.763364][T19551] sctp: [Deprecated]: syz.5.4583 (pid 19551) Use of int in max_burst socket option. [ 767.763364][T19551] Use struct sctp_assoc_value instead [ 767.873659][T19498] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.882671][T19498] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.891406][T19498] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 767.900293][T19498] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 768.330460][ T4592] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -32 [ 768.356634][ T4592] usb 5-1: USB disconnect, device number 14 [ 768.659667][ T4314] gre0 speed is unknown, defaulting to 1000 [ 768.747839][T19576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 768.874929][T19576] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 769.277155][T19571] team0 (unregistering): Port device team_slave_0 removed [ 769.344776][T19571] team0 (unregistering): Failed to send options change via netlink (err -105) [ 769.370527][T19571] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 769.416654][T19571] team0 (unregistering): Port device team_slave_1 removed [ 769.654077][ T14] gre0 speed is unknown, defaulting to 1000 [ 769.765609][T19560] gre0 speed is unknown, defaulting to 1000 [ 769.810312][T19600] sctp: [Deprecated]: syz.4.4598 (pid 19600) Use of int in max_burst socket option. [ 769.810312][T19600] Use struct sctp_assoc_value instead [ 772.432761][T19624] bridge0: port 2(bridge_slave_1) entered disabled state [ 772.441067][T19624] bridge0: port 1(bridge_slave_0) entered disabled state [ 773.325763][T19624] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 773.413888][T19624] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 774.460634][T19624] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.479753][T19624] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.499821][T19624] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.519576][T19624] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 774.916513][T19651] device syzkaller0 entered promiscuous mode [ 775.632246][T19727] mtd partition "" doesn't have enough space: 0x20003 < 0x20004, disabled [ 775.888796][ C1] icmp: detected local route for 172.20.20.11 during ICMP sending, src 172.20.20.170 [ 775.949085][T19727] ftl_cs: FTL header not found. [ 778.598308][T19770] binder: 19769:19770 ioctl c0306201 0 returned -14 [ 778.854870][T19771] binder: 19769:19771 ioctl c0306201 0 returned -14 [ 780.820436][T19781] loop4: detected capacity change from 0 to 136 [ 784.068206][T19754] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.077889][T19754] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.087783][T19754] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.097286][T19754] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 784.727380][T19824] mtd partition "" doesn't have enough space: 0x20003 < 0x20004, disabled [ 784.830450][T19824] ftl_cs: FTL header not found. [ 785.768152][T19860] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 785.779259][T19833] loop4: detected capacity change from 0 to 32768 [ 785.888668][T19833] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 785.942566][T19833] JBD2: Ignoring recovery information on journal [ 786.170078][T19833] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 786.858646][T19880] loop7: detected capacity change from 0 to 2048 [ 787.072354][T19880] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none. [ 787.096514][T15886] ocfs2: Unmounting device (7,4) on (node local) [ 787.251176][T19880] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1111: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 787.398594][T19880] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 787.494104][T19880] EXT4-fs (loop7): This should not happen!! Data will be lost [ 787.494104][T19880] [ 787.538320][T19880] EXT4-fs (loop7): Total free blocks count 0 [ 787.584046][T19880] EXT4-fs (loop7): Free/Dirty block details [ 787.629473][T19880] EXT4-fs (loop7): free_blocks=2415919504 [ 787.656737][T19880] EXT4-fs (loop7): dirty_blocks=64 [ 787.688781][T19880] EXT4-fs (loop7): Block reservation details [ 787.709402][T19880] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 787.753683][T19894] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 788.534591][ T27] kauditd_printk_skb: 17 callbacks suppressed [ 788.534612][ T27] audit: type=1804 audit(2000000309.930:907): pid=19934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4687" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="hugetlbfs" ino=84619 res=1 errno=0 [ 788.989637][T19945] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 789.055909][ T4314] libceph: connect (1)[c::]:6789 error -101 [ 789.063322][ T4314] libceph: mon0 (1)[c::]:6789 connect error [ 789.123038][T19940] ceph: No mds server is up or the cluster is laggy [ 789.838375][T19964] 9pnet: p9_errstr2errno: server reported unknown error @c0x0000000000000006 [ 791.094502][T19993] Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 791.423057][T20004] loop3: detected capacity change from 0 to 256 [ 791.456947][T20006] loop7: detected capacity change from 0 to 256 [ 791.490562][T20004] FAT-fs (loop3): Unrecognized mount option "d" or missing value [ 791.643101][T20006] FAT-fs (loop7): Directory bread(block 64) failed [ 791.662286][T20006] FAT-fs (loop7): Directory bread(block 65) failed [ 791.669227][T20006] FAT-fs (loop7): Directory bread(block 66) failed [ 791.712050][T20006] FAT-fs (loop7): Directory bread(block 67) failed [ 791.718931][T20006] FAT-fs (loop7): Directory bread(block 68) failed [ 791.789791][T20006] FAT-fs (loop7): Directory bread(block 69) failed [ 791.807574][T20006] FAT-fs (loop7): Directory bread(block 70) failed [ 791.835380][T20006] FAT-fs (loop7): Directory bread(block 71) failed [ 791.853929][T20006] FAT-fs (loop7): Directory bread(block 72) failed [ 791.884310][T20006] FAT-fs (loop7): Directory bread(block 73) failed [ 792.042555][T20006] bio_check_eod: 41 callbacks suppressed [ 792.042574][T20006] syz.7.4709: attempt to access beyond end of device [ 792.042574][T20006] loop7: rw=524288, sector=1768, nr_sectors = 4 limit=256 [ 792.138400][T20006] syz.7.4709: attempt to access beyond end of device [ 792.138400][T20006] loop7: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 792.245059][ T27] audit: type=1800 audit(2000000313.650:908): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4709" name="file1" dev="loop7" ino=1048654 res=0 errno=0 [ 792.633712][T19998] loop4: detected capacity change from 0 to 40427 [ 792.647350][T20006] syz.7.4709: attempt to access beyond end of device [ 792.647350][T20006] loop7: rw=0, sector=1768, nr_sectors = 4 limit=256 [ 792.683119][T19998] F2FS-fs (loop4): Unrecognized mount option "nouser_xattrheckpoint=disable" or missing value [ 792.749866][ T27] audit: type=1800 audit(2000000314.150:909): pid=20006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.4709" name="file1" dev="loop7" ino=1048654 res=0 errno=0 [ 792.961180][T20039] netlink: 'syz.5.4719': attribute type 10 has an invalid length. [ 793.266126][T17819] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 793.306628][T17819] FAT-fs (loop7): Filesystem has been set read-only [ 793.333621][T17819] FAT-fs (loop7): error, corrupted directory (invalid entries) [ 793.474214][T20039] team0: Device veth1_vlan failed to register rx_handler [ 795.434435][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 795.459683][ T4281] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 795.475499][ T4281] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 795.492372][ T4281] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 795.500727][ T4281] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 795.508492][ T4281] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 795.588852][T20088] gre0 speed is unknown, defaulting to 1000 [ 796.493442][T20088] chnl_net:caif_netlink_parms(): no params data found [ 796.724412][T20088] bridge0: port 1(bridge_slave_0) entered blocking state [ 796.765863][T20088] bridge0: port 1(bridge_slave_0) entered disabled state [ 796.795112][T20088] device bridge_slave_0 entered promiscuous mode [ 796.830492][T20088] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.869753][T20088] bridge0: port 2(bridge_slave_1) entered disabled state [ 796.905455][T20088] device bridge_slave_1 entered promiscuous mode [ 797.010272][T20088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.042992][T20088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.147512][T20088] team0: Port device team_slave_0 added [ 797.220850][T20088] team0: Port device team_slave_1 added [ 797.308570][T20088] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.367754][T20088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.449613][T20088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 797.513102][T20134] netlink: 'syz.6.4743': attribute type 4 has an invalid length. [ 797.537677][T20136] netlink: 'syz.6.4743': attribute type 4 has an invalid length. [ 797.567409][T20088] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 797.585526][T20088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 797.639662][ T4281] Bluetooth: hci1: command 0x0409 tx timeout [ 797.753320][T20088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 797.900958][T20088] device hsr_slave_0 entered promiscuous mode [ 797.919451][ T129] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 797.952181][T20088] device hsr_slave_1 entered promiscuous mode [ 797.969780][T20088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 798.021635][T20088] Cannot create hsr debugfs directory [ 798.139614][ T129] usb 5-1: Using ep0 maxpacket: 8 [ 798.189023][ T129] usb 5-1: unable to get BOS descriptor or descriptor too short [ 798.202191][ T129] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 798.202231][ T129] usb 5-1: can't read configurations, error -71 [ 799.779480][ T4281] Bluetooth: hci1: command 0x041b tx timeout [ 800.101512][T20191] overlayfs: failed to clone upperpath [ 801.038274][T20205] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 801.634172][T20088] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 801.683634][T20088] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 801.733151][T20088] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 801.765942][T20088] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 801.790228][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 801.921032][T20088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 801.976409][T20088] 8021q: adding VLAN 0 to HW filter on device team0 [ 802.000682][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 802.014144][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 802.069907][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 802.080030][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 802.110052][ T4747] bridge0: port 1(bridge_slave_0) entered blocking state [ 802.117519][ T4747] bridge0: port 1(bridge_slave_0) entered forwarding state [ 802.143093][T20210] loop4: detected capacity change from 0 to 32768 [ 802.158080][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 802.190391][T20210] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.4766 (20210) [ 802.217724][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 802.249367][ T4747] bridge0: port 2(bridge_slave_1) entered blocking state [ 802.256775][ T4747] bridge0: port 2(bridge_slave_1) entered forwarding state [ 802.277644][T20210] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 802.297598][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 802.340355][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 802.362941][T20210] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 802.389883][ T4747] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 802.420057][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 802.428642][T20210] BTRFS info (device loop4): force clearing of disk cache [ 802.457758][T20210] BTRFS info (device loop4): force zlib compression, level 3 [ 802.486101][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 802.501255][T20210] BTRFS info (device loop4): enabling auto defrag [ 802.527353][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 802.541969][T20210] BTRFS info (device loop4): max_inline at 0 [ 802.567102][T20210] BTRFS info (device loop4): turning on async discard [ 802.578323][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 802.602335][T20210] BTRFS info (device loop4): using free space tree [ 802.630258][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 802.671742][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 802.701737][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 802.736552][T20088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 802.750470][T20088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 802.766685][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 802.775957][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 802.971871][T20210] BTRFS info (device loop4): enabling ssd optimizations [ 803.000234][T20210] BTRFS info (device loop4): rebuilding free space tree [ 803.084206][T20270] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4777'. [ 803.121877][T20271] loop3: detected capacity change from 0 to 736 [ 803.233974][T15380] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 803.861352][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 803.870700][ T4281] Bluetooth: hci1: command 0x0419 tx timeout [ 803.878434][ T4753] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 803.958914][T20088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 804.122160][ T4749] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared) [ 804.356836][T20210] syz.4.4766 (20210) used greatest stack depth: 19064 bytes left [ 804.503013][T15886] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 805.667053][T19599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 805.740690][T19599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 805.852866][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 805.870642][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 805.941727][T20088] device veth0_vlan entered promiscuous mode [ 805.961110][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 805.977162][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 806.026429][T20088] device veth1_vlan entered promiscuous mode [ 806.112416][T19599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 806.168948][T19599] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 806.200512][T19599] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 806.238368][T19599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 806.287328][T20347] device vlan2 entered promiscuous mode [ 806.357183][T20088] device veth0_macvtap entered promiscuous mode [ 806.388153][T20088] device veth1_macvtap entered promiscuous mode [ 806.450474][T20088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.474735][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 806.494387][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 806.519906][T20326] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 806.543207][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 806.600837][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 806.635022][T20088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 806.653596][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 806.674786][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 806.711744][T20326] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 806.729766][T20088] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.753154][T20326] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 806.778910][T20088] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.788562][T20326] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 806.815114][T20326] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.819599][T20088] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.869265][T20088] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 806.900024][T20349] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 807.363411][ T4757] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.463399][ T4314] usb 5-1: USB disconnect, device number 17 [ 807.473348][ T4757] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.556077][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 807.601572][ T4749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 807.632684][ T4749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 807.653019][T19599] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 808.981961][T20428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4813'. [ 809.152920][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.160039][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.220148][T20438] netlink: 'syz.5.4817': attribute type 4 has an invalid length. [ 809.828434][T20457] tipc: Failed to remove unknown binding: 66,1,1/0:3948306230/3948306232 [ 810.739675][ T4317] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 811.280985][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.308348][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 811.354797][ T4317] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 811.379661][ T4317] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 811.402756][ T4317] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.442234][ T4317] usb 4-1: config 0 descriptor?? [ 811.874577][ T4317] plantronics 0003:047F:FFFF.0011: No inputs registered, leaving [ 811.932551][ T4317] plantronics 0003:047F:FFFF.0011: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 812.824988][T20512] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 813.281290][ T4348] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 813.489517][ T4348] usb 4-1: device descriptor read/64, error -32 [ 813.769574][ T4348] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 813.940272][ T4348] usb 4-1: device descriptor read/64, error -32 [ 814.189605][ T4281] Bluetooth: hci1: command 0x0411 tx timeout [ 814.229436][ T4348] usb 4-1: reset high-speed USB device number 24 using dummy_hcd [ 814.299878][ T4348] usb 4-1: device descriptor read/8, error -71 [ 815.323070][ T4344] usb 4-1: USB disconnect, device number 24 [ 816.452648][ T4344] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 816.623280][T20599] netlink: 'syz.5.4862': attribute type 10 has an invalid length. [ 816.651231][ T4344] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 816.682619][ T4344] usb 9-1: config 0 interface 0 has no altsetting 0 [ 816.709351][ T4344] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 816.737869][ T4344] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 816.771350][ T4344] usb 9-1: Product: syz [ 816.791324][T20596] gre0 speed is unknown, defaulting to 1000 [ 816.792122][ T4344] usb 9-1: Manufacturer: syz [ 816.829097][ T4344] usb 9-1: SerialNumber: syz [ 816.860941][ T4344] usb 9-1: config 0 descriptor?? [ 816.873538][ T4344] usb 9-1: selecting invalid altsetting 0 [ 817.193777][T20324] usb 9-1: USB disconnect, device number 3 [ 817.238542][T20610] overlayfs: failed to clone upperpath [ 819.180818][T20653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4876'. [ 819.223273][T20653] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4876'. [ 819.894137][T20671] loop3: detected capacity change from 0 to 256 [ 821.949553][ T4317] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 822.169409][ T4317] usb 9-1: Using ep0 maxpacket: 32 [ 822.176847][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.237152][ T4317] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 822.288928][ T4317] usb 9-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 822.340959][ T4317] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.392779][ T4317] usb 9-1: config 0 descriptor?? [ 822.432583][ T4317] hub 9-1:0.0: USB hub found [ 822.638011][ T4317] hub 9-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 823.043710][ T4317] hid-generic 0003:046D:C31C.0012: unknown main item tag 0x0 [ 823.135473][ T4317] hid-generic 0003:046D:C31C.0012: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.8-1/input0 [ 823.342572][T20744] overlayfs: failed to clone upperpath [ 824.079980][T20698] usb 9-1: reset high-speed USB device number 4 using dummy_hcd [ 824.259465][ T4317] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 824.450725][ T4317] usb 5-1: Using ep0 maxpacket: 32 [ 824.462469][ T4317] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.519504][T20698] usbhid 9-1:0.0: reset_resume error -1 [ 824.549722][ T4317] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.621861][ T4317] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 824.653031][ T4317] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 824.682034][ T4317] usb 5-1: Product: syz [ 824.697328][ T4317] usb 5-1: Manufacturer: syz [ 824.743054][ T4317] hub 5-1:4.0: USB hub found [ 824.782066][ T4314] usb 9-1: USB disconnect, device number 4 [ 824.947948][ T4317] hub 5-1:4.0: 2 ports detected [ 826.562711][T20810] netlink: 'syz.3.4919': attribute type 4 has an invalid length. [ 827.037616][ T4317] hub 5-1:4.0: activate --> -90 [ 827.440920][ T4317] hub 5-1:4.0: hub_ext_port_status failed (err = -71) [ 827.461775][ T4348] usb 5-1: USB disconnect, device number 18 [ 827.492911][ T4317] usb 5-1-port2: attempt power cycle [ 827.569530][ T4344] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 827.769424][ T4344] usb 9-1: Using ep0 maxpacket: 32 [ 827.777209][ T4344] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 827.826327][ T4344] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 827.851321][ T4344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 827.895250][ T4344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 827.917154][ T4344] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 827.932786][T20821] loop3: detected capacity change from 0 to 32768 [ 827.969167][ T4344] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 828.029502][ T4344] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 828.039183][ T4344] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 828.079066][ T4344] usb 9-1: config 0 descriptor?? [ 828.325929][ T4344] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 5 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 828.338186][T20857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4932'. [ 828.400564][ T4344] usb 9-1: USB disconnect, device number 5 [ 828.436181][ T4344] usblp0: removed [ 828.939526][ T4344] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 828.976826][T20868] input: syz1 as /devices/virtual/input/input25 [ 829.149646][ T4344] usb 9-1: Using ep0 maxpacket: 32 [ 829.160496][ T4344] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 829.197697][ T4344] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 829.253144][ T4344] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 829.296721][ T4344] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 829.331469][ T4344] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 829.357555][ T4344] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 829.409794][ T4344] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 829.440318][ T4344] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 829.469668][ T4344] usb 9-1: config 0 descriptor?? [ 829.715282][ T4344] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 829.985918][ C1] usblp0: nonzero read bulk status received: -71 [ 829.986257][T20324] usb 9-1: USB disconnect, device number 6 [ 829.996269][T20830] usblp0: error -71 reading from printer [ 830.022377][T20324] usblp0: removed [ 832.473207][T20943] loop4: detected capacity change from 0 to 1024 [ 832.551912][T20943] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 833.363953][T15886] EXT4-fs (loop4): unmounting filesystem. [ 833.824587][T20931] loop8: detected capacity change from 0 to 32768 [ 833.861528][T20931] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 834.328302][T15379] BTRFS error: device /dev/loop8 already registered with a higher generation, found 8 expect 10 [ 834.385643][T20975] cgroup: fork rejected by pids controller in /syz6 [ 835.920536][T21065] gre0 speed is unknown, defaulting to 1000 [ 837.076608][T21110] [U]  [ 837.080718][T21110] [U] K{‘ [ 837.085105][T21110] [U] ÄT Ž1ÊÀŠªFÌÇÄFËŠÎ`GÊJǘÜGÖÆ¯¹¬¡—ÞÈOÕÑ/ÜMCÇ [ 837.096902][T21110] [U] TžØ–/,~ˆÄœ­‹JÕßÊ}8ÎÊÞ'O1Ü"™7-΂JQœK—¤WºÏQÉ5C%"¬H12–¦Y“„‰ž€ÊXÍ`ˆ‚Íȼ`+³Û(·Â¿!(ÉÛÉZ'ÀTXLN»I®GÅJ– °ÜÝ­·PÅ~÷7Í!‘ÕÒ"بÎ ¾ª(È5ˆOBܤ‡ÍƒJÖ [ 837.114560][T21110] [U] ±K\&—}6£6œXÎHX ¥Ôµ„ÌÞ.`¸A“$Û40|϶¿9°ØÞ¨„¯À ÏU‚Ò4ÔÄ®VBZÃÐ}ÌWÔM”TºŽÍQŸÝΦR’ 4”ß [ 837.132670][T21110] [U] ".H6ØÞ"ÖKÇ[›‰¤ŒJÁ4ÇØIN¨™[Z(•„C|TË]Z{Â3ŸC=»¨XÎԞ˅Î4¿W‰)\T‘XJØSH{Q;̹¢…ÖTÔÇ+‹¦÷GÍÈß®D„.Ë‚³>Yž÷ÉWUH„FN—ŽÇHL]SÔ2ŠÇÙ\G%ŠO¼&Z)µК'¨PUL‚_<à ¢Ø°‰Ò®ÔÅ`Ò±TÔÁÞœÐËÞ;_Ô"(‘U{7Jœ¿2X ‘/€'ÝÙCÑÌÕIº©ÀÏH¿CÕ³žV¦=‘AIÇ%W¼ESž RšŸJŠÎœƒÚ”GÂ÷RÁ¹Í¡HI˜¢œAÏÌ6-ÚDÚV¨Á I"ØÅNƨ ÞÚASC~4Áª¹8CØ*­OO5/ßœJš~º§¡W—VK+¬®‰Œ3ÈÇY)޹M°¸ÆV¶ÌYQƽ€DTR¯OTPEM%F×ÊEJÍA5ÆÔT_-X~ ^AAÛ‚Ò˜½QÖÅ [ 837.183122][T21110] [U] +W‰G?]£Ó'A: »Ú)ÕÏÓ™“' B>T¢ ¡F/™÷<'ÈUÓ'–¼H§IÉ.+]EŸ.½-ɿ߿Ò%÷È>2`¶^Uß8F.Š6¤Å3ÓØ+ËA¾Â««„°G3ÓPÂÓ6:^0ÀTÉÈV÷'EÕT¼€ÛÂYC‰N¾ÞRÏ©ÞNÈPJ× ;ÆZ†ÊÔÑÛ‘8!¯È\Ù…¸AØÊ–2Á£$е™Â­WI.ÍÇ#ŠÈ/BAI¼Ä`ÐÁ4J’ÔDÎY@ÓZ„ÜGW÷5Ë¿BÄ µÙœ NÓY"VI2ÛÌ [ 837.211442][T21110] [U] ÔT¦_K5¸T¬YJÐÞÎ9ÐÕCÊ$BRŸLÚNUL ¶Ü9WÈÝÍ|žGÅ"ʃÆ%ÇÚ¶ÊCªØ°¶ºQÎÙ ŸÇ3‹ÆQ¯ÔN^HP*½Ü$ µ.Î7YÓ±œ2³ [ 837.224758][T21110] [U] ½?©ß HÜÄ*ÙÁ”Î3Í7Üɾ^#Q"0~‡ ‚Ð(ÉOÏX LŒB£,'VÎÓ=‹ÝËCÌS«…’G‚S¶Þ0•Ö‚‹Ù`˜›žÙ‡Ÿ†=1(÷ξ™÷P#Ò2DO*Ƀ [ 837.243367][T21110] [U] ©S¹“Gžµ²¶“˜GUÐÔD-{¸™Â|&“®ŸŸÑ2µ›LÞC_©œ!`¨ÍOZÖ¥¢B¶³%>ÊRѶÖWχݎSSÂH"£YA4£O.šYÙÛÄ„RTÔ¶ŒBÚ[+/<>—¡{Q¢Ú×_²ÕLX8ÊU„ÇØÎ{ÐZ³ÍØ)ßÒ7?ËRR;ßC¿R HײڣÁ»¨È1Å>)©Mă‰ÏT§²Ú(ÌÇAÏ„}9·Ú¥ÃJ*MÑœ¥Ä¡«'L¹£Q ÌDWŸÒظ=ؽ|Q¬ ÏÆ™W;5ÆÙŽª!ÑDB¸X`ɧÖ/÷ÂE`ƦM¢XÎÂ"Ä\ [ 837.373889][T21110] [U] {;Ž Õ¥ÂÙ˜_ˆO2«Ñ)ÎO®›.2ÐW2ʲ¨ÐYÙÃÃX_ HPϱœSªD­¦Ø:]‚{Ë©ÔÝÆÈ½ [ 837.387083][T21110] [U] I,Ç>ÇÓ¤ ÎÙ51Ñ÷^1ÒN4¯OǶÞ'0Ý?Ö’IÙ9W.Ï_.¶WŠA¼ŠVˆ±`)ÑZ¬ÏÆC6GIÓ¹²A»¬XL[¢›½¡FÜ*ÀÑO‰W)+‡Ç'\NÆ[K@ÑËÄÜ2ÇǬ–®¡P"^`Á‰Í Ø¿ [ 837.403482][T21110] [U] 22½“Æ©ÐÛ©X?0;3U± [ 837.413003][T21110] [U] ÞœÕÆÓSOBX 8”Wˆ4Á‘(Ð~/§¿ÍKÇUžÃÔ–OQËE+·G®-YµGY_•>V¢ÜÈË—3.HÁÓ™]Í„²2‘”)™DË, ‘Ä ÞD~×D©£¡+ÃW; A\˜FPÉÞȘ|$ºØ)KØI³ÉÐÉ¿KÑYT^RÍÜÙÇ™µ“ËA=±#–Üœ ÝÍ¿ËAE©TÅ1·Îݯ4K¯.E"RÚS|ПÀSÖ’Á:•Ù>P ™…RÐ"Z‰Ú­ÛÚÉ#P!˜KY"›}ÃÆF¿N84ܳƒÅHÞ±£O•ÈS¿™Ì«%DLWÙMÆ²Ç [ 837.441251][T21110] [U] [ª['XN€'²÷ Á¿Ü,MR¦«/žšœÂ1D=!DŽX91BÙWÇ»R—LF…ƒÆK̤ZÕÊ# `Ì‘ LØ›§Ëœ»×B~ÅMÒÔÖ [ 837.453166][T21110] [U] ™LÖ>ÑD+ˆD¯§—®Ì"5ŽÊH3<ª¨ÅIR=F^”FNÕÓÜÀ‰¿Û­VÛ÷œDÁOIOÚ:UÖ>ÖY [ 837.464131][T21110] [U] 'B—6VÝ20³Ä·Çž¥·×ŒÏ"T8Ñ{9ÆFW]ÔÊÄÌ© [ 837.474705][T21110] [U] Ù72Þ‰ÏÂÃUÞC6™ÎÜÔÏ„I]8Cª£TÛ¨QSKYÞÎIÒÀ¹ ¿|V'ÛTV/ÙÅG•$[ 9KH`Ú"Ü‘ÚÕ}€Ñ[^=ˆÚ0Á]½Ã%ÆÌ‚T“Šž¹ØFÌ_VÖ4C¸ÒÅ [ 837.491479][T21110] [U] ¹ EC [ 837.497927][T21110] [U] —”|‚ÊÌ<ÄÎ:^Ü3$7NK~Ø-™@÷¦?Ÿ–/MTL·Û¾©IˆWȬ@G~TØ{ÊÜP¿+Æ$ªJP|µ ŽÇIÛRIÓPMÐ Õ·YÓ Ú”8ÌTÉÐÞVžÙ߯Ë,ÎLÂ,Õ [ 837.817201][T21104] [U] ˆKÌÚÛÕ‰)0ÄÄÝ~ܳʪÁIP'ÍFÓÒœZÚÞR¬™ß @BÓ]Â5ÝÊ{­©Ê¼Ô'À8ÅÆ¥F‡¹UTQUDÇ©¤K;7ͪ0C[„ÃY–¼ÈYC¦¶»Ø°Mª™LÒ8’T…ÍšÎ5³ÝÝRX™¶ÐWÍ X¤²ÓOQHVI'8œ¥Î…Lµ [ 838.548856][T21130] loop4: detected capacity change from 0 to 256 [ 838.624919][T15379] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 838.627807][T21130] loop2: detected capacity change from 0 to 7 [ 838.710353][T15380] loop2: [ 838.713923][T15380] loop2: partition table partially beyond EOD, truncated [ 838.743757][T21130] loop2: [ 838.757843][T21130] loop2: partition table partially beyond EOD, truncated [ 839.299543][T20323] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 839.386637][T21142] gre0 speed is unknown, defaulting to 1000 [ 839.509419][T20323] usb 4-1: Using ep0 maxpacket: 32 [ 839.526895][T20323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 839.580514][T20323] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 839.594151][T20323] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 839.609852][T20323] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 839.663445][T20323] usb 4-1: config 0 descriptor?? [ 840.121665][T20323] savu 0003:1E7D:2D5A.0013: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0 [ 840.371064][T21170] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 840.382967][T20323] usb 4-1: USB disconnect, device number 25 [ 841.077647][T21169] fido_id[21169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 841.162818][T21147] gre0 speed is unknown, defaulting to 1000 [ 841.919538][ T4344] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 842.121575][ T4344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.157838][ T4344] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 842.206108][ T4344] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 842.279656][ T4344] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 842.340526][T21200] netlink: 'syz.6.5007': attribute type 4 has an invalid length. [ 842.355762][ T4344] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.378098][ T4344] usb 5-1: config 0 descriptor?? [ 842.815809][ T4344] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving [ 842.939611][ T4344] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 844.219474][ T4348] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 844.384860][ T4348] usb 5-1: device descriptor read/64, error -32 [ 844.709609][ T4348] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 844.899562][ T4348] usb 5-1: device descriptor read/64, error -32 [ 844.900290][T21253] overlayfs: statfs failed on './file0' [ 845.169402][ T4348] usb 5-1: reset high-speed USB device number 23 using dummy_hcd [ 845.219985][ T4348] usb 5-1: device descriptor read/8, error -71 [ 846.016490][T21203] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.033295][T21203] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.053508][T21203] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.078056][T21203] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.209945][ T4317] usb 5-1: USB disconnect, device number 23 [ 846.670875][T21203] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.681535][T21203] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.691070][T21203] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 846.700442][T21203] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 847.097849][T21248] gre0 speed is unknown, defaulting to 1000 [ 848.183020][T21331] loop8: detected capacity change from 0 to 1024 [ 848.285641][T21331] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none. [ 849.029940][T20088] EXT4-fs (loop8): unmounting filesystem. [ 849.061877][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.146322][T21341] loop3: detected capacity change from 0 to 512 [ 849.221799][ C0] vkms_vblank_simulate: vblank timer overrun [ 849.272087][T21341] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 849.314877][T21341] ext4 filesystem being mounted at /919/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 849.846779][T21365] loop4: detected capacity change from 0 to 1024 [ 849.941189][T21365] EXT4-fs: inline encryption not supported [ 849.995108][T21365] EXT4-fs: Ignoring removed nobh option [ 850.045103][T21365] EXT4-fs: Ignoring removed nobh option [ 850.088795][T21365] EXT4-fs: Ignoring removed bh option [ 850.135348][T21365] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 850.284791][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 850.412339][T21365] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 850.644691][T21386] loop3: detected capacity change from 0 to 512 [ 850.716083][T21386] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 850.823847][T21386] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 850.953104][T21386] ext4 filesystem being mounted at /920/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 851.126656][T21386] EXT4-fs warning (device loop3): dx_probe:833: inode #2: comm syz.3.5051: Unrecognised inode hash code 20 [ 851.199411][T21386] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.5051: Corrupt directory, running e2fsck is recommended [ 851.238872][T15886] EXT4-fs (loop4): unmounting filesystem. [ 851.480496][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 851.551218][T15379] udevd[15379]: incorrect ext4 checksum on /dev/loop3 [ 851.605102][ C0] vkms_vblank_simulate: vblank timer overrun [ 851.788544][T21413] loop8: detected capacity change from 0 to 512 [ 851.955717][T21413] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 852.046209][T21413] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 852.392341][T20088] EXT4-fs (loop8): unmounting filesystem. [ 852.419469][T20088] EXT4-fs error (device loop8): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 2839219765 in block_group 0 [ 852.559616][T20088] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 852.605490][T20088] EXT4-fs error (device loop8): ext4_quota_off:7141: inode #3: comm syz-executor: mark_inode_dirty error [ 852.646516][T20088] EXT4-fs error (device loop8): __ext4_get_inode_loc:4513: comm syz-executor: Invalid inode table block 2839219765 in block_group 0 [ 852.716092][T20088] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 852.792883][T20088] EXT4-fs error (device loop8): ext4_quota_off:7141: inode #4: comm syz-executor: mark_inode_dirty error [ 853.369141][T21444] netlink: 2048 bytes leftover after parsing attributes in process `syz.3.5071'. [ 853.412355][T21444] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5071'. [ 854.467744][T21435] loop4: detected capacity change from 0 to 40427 [ 854.535831][T21435] F2FS-fs (loop4): invalid crc value [ 854.587413][T21467] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5080'. [ 854.613754][T21435] F2FS-fs (loop4): Found nat_bits in checkpoint [ 854.818253][T21435] F2FS-fs (loop4): Start checkpoint disabled! [ 854.833781][T21435] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 855.340726][ T4749] kworker/u4:17: attempt to access beyond end of device [ 855.340726][ T4749] loop4: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 855.721933][T21499] overlayfs: failed to clone upperpath [ 855.836129][T21504] loop3: detected capacity change from 0 to 512 [ 855.922450][T21504] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.5087: inode has both inline data and extents flags [ 856.030038][T21504] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.5087: couldn't read orphan inode 15 (err -117) [ 856.120407][T21504] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 856.688751][T21522] gre0 speed is unknown, defaulting to 1000 [ 856.768351][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 857.311843][T20326] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 857.499581][T20326] usb 4-1: Using ep0 maxpacket: 32 [ 857.510032][T20326] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 857.546821][T20326] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.580726][T20326] usb 4-1: Product: syz [ 857.599488][T20326] usb 4-1: Manufacturer: syz [ 857.614648][T20326] usb 4-1: SerialNumber: syz [ 857.628503][T21529] loop8: detected capacity change from 0 to 32768 [ 857.686663][T20326] usb 4-1: config 0 descriptor?? [ 857.708004][T20326] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 857.930681][T21529] XFS (loop8): Mounting V5 Filesystem [ 858.146124][T21529] XFS (loop8): Ending clean mount [ 858.501222][T20088] XFS (loop8): Unmounting Filesystem [ 858.609988][T21579] netlink: 44 bytes leftover after parsing attributes in process `syz.5.5107'. [ 858.645609][T21579] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5107'. [ 858.686062][T21579] netlink: 'syz.5.5107': attribute type 6 has an invalid length. [ 858.699504][T21579] netlink: 'syz.5.5107': attribute type 5 has an invalid length. [ 858.748641][T21579] netlink: 43 bytes leftover after parsing attributes in process `syz.5.5107'. [ 859.550143][T20326] gspca_ov534_9: reg_w failed -71 [ 859.869504][T20326] gspca_ov534_9: Unknown sensor 0000 [ 859.869568][T20326] ov534_9: probe of 4-1:0.0 failed with error -22 [ 859.959595][T20326] usb 4-1: USB disconnect, device number 26 [ 861.135442][T21639] loop8: detected capacity change from 0 to 256 [ 861.198291][T21642] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5126'. [ 861.300415][T21642] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5126'. [ 861.329930][T21642] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5126'. [ 861.343413][T21642] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5126'. [ 861.343456][T21639] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 861.982206][T21653] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 862.399456][T19508] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 862.599692][T19508] usb 5-1: Using ep0 maxpacket: 16 [ 862.617792][T19508] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 862.662228][T19508] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 862.690561][T19508] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.716301][T19508] usb 5-1: Product: syz [ 862.732084][T19508] usb 5-1: Manufacturer: syz [ 862.751494][T19508] usb 5-1: SerialNumber: syz [ 862.774495][T19508] usb 5-1: config 0 descriptor?? [ 862.808247][T19508] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 862.841605][T19508] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 863.412917][T19508] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 863.446759][T21696] loop8: detected capacity change from 0 to 512 [ 863.553768][T21696] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -2 [ 863.589744][T21696] EXT4-fs (loop8): Cannot turn on journaled quota: type 1: error -2 [ 863.699890][T21696] EXT4-fs (loop8): 1 truncate cleaned up [ 863.705717][T21696] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 864.257873][T19508] em28xx 5-1:0.0: writing to i2c device at 0xa0 failed (error=-5) [ 864.276974][T19508] em28xx 5-1:0.0: failed to read eeprom (err=-5) [ 864.297236][T19508] em28xx 5-1:0.0: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 864.310654][T20088] EXT4-fs (loop8): unmounting filesystem. [ 864.409963][T19508] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 864.422006][T19508] em28xx 5-1:0.0: dvb set to bulk mode. [ 864.450132][T20326] em28xx 5-1:0.0: Binding DVB extension [ 864.489164][T19508] usb 5-1: USB disconnect, device number 24 [ 864.530550][T19508] em28xx 5-1:0.0: Disconnecting em28xx [ 864.719842][T20326] em28xx 5-1:0.0: Registering input extension [ 864.740958][T19508] em28xx 5-1:0.0: Closing input extension [ 864.762662][T21729] device bond1 entered promiscuous mode [ 864.810610][T19508] em28xx 5-1:0.0: Freeing device [ 866.952161][T21791] device bond5 left promiscuous mode [ 867.012669][T21791] device team1 left promiscuous mode [ 867.018280][T21791] device team2 left promiscuous mode [ 867.069749][T21791] device xfrm1 left promiscuous mode [ 867.832365][T21809] loop8: detected capacity change from 0 to 2048 [ 867.889754][T21809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 868.308052][T21808] UDF-fs: warning (device loop8): udf_truncate_tail_extent: Too long extent after EOF in inode 1438: i_size: 45056 lbcount: 49152 extent 129+48640 [ 868.373870][T21822] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 868.849009][T21834] overlayfs: failed to clone upperpath [ 869.533643][T21854] overlayfs: failed to clone upperpath [ 870.341309][T19508] libceph: connect (1)[c::]:6789 error -101 [ 870.348151][T19508] libceph: mon0 (1)[c::]:6789 connect error [ 870.390101][T21867] ceph: No mds server is up or the cluster is laggy [ 870.603043][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.609931][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.660672][ T4315] libceph: connect (1)[c::]:6789 error -101 [ 870.667024][ T4315] libceph: mon0 (1)[c::]:6789 connect error [ 870.870716][T21852] loop4: detected capacity change from 0 to 40427 [ 871.066310][T21852] F2FS-fs (loop4): Found nat_bits in checkpoint [ 871.349909][T21852] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 872.170738][ T27] audit: type=1326 audit(2000000393.580:910): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 872.303684][ T27] audit: type=1326 audit(2000000393.610:911): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 872.433647][T21924] loop3: detected capacity change from 0 to 1024 [ 872.444088][ T27] audit: type=1326 audit(2000000393.610:912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 872.571714][T21924] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 872.580566][ T27] audit: type=1326 audit(2000000393.610:913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 872.677190][T21924] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3850: comm syz.3.5201: Allocating blocks 385-513 which overlap fs metadata [ 872.734094][ T27] audit: type=1326 audit(2000000393.610:914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 872.784106][T21924] EXT4-fs (loop3): shut down requested (0) [ 872.909176][ T27] audit: type=1326 audit(2000000393.610:915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 872.999695][ T27] audit: type=1326 audit(2000000393.610:916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 873.079424][ T27] audit: type=1326 audit(2000000393.610:917): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 873.192842][ T27] audit: type=1326 audit(2000000393.610:918): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 873.309901][ T27] audit: type=1326 audit(2000000393.610:919): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21908 comm="syz.6.5198" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f51e3d9c799 code=0x7ffc0000 [ 873.424283][T21924] EXT4-fs (loop3): pa ffff888073f63700: logic 16, phys. 129, len 24 [ 873.490681][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 873.839801][ T4315] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 874.069634][ T4315] usb 5-1: Using ep0 maxpacket: 16 [ 874.121059][ T4315] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.291600][ T4315] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 874.484313][T21967] netlink: 'syz.3.5211': attribute type 10 has an invalid length. [ 874.501162][ T4315] usb 5-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.00 [ 874.562214][ T4315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.573152][T21967] team0: Port device vxcan1 added [ 874.657288][ T4315] usb 5-1: config 0 descriptor?? [ 875.075894][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.099488][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.117295][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.148005][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.176116][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.199370][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.218221][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.269065][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.299824][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.307612][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.370593][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.378144][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.389737][ T4767] wlan1: Trigger new scan to find an IBSS to join [ 875.416949][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.427078][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.463326][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.480819][T22003] overlayfs: failed to clone upperpath [ 875.492127][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.509720][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.527840][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.543034][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.561328][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.578449][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.595254][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.615701][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.634950][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.653494][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.677884][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.698072][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.714192][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.722975][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.739967][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.755776][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.773136][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.790697][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.798778][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.806441][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.814738][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.829155][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.844596][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.859228][ T4315] chicony 0003:04F2:1123.0015: unknown main item tag 0x0 [ 875.928849][ T4315] chicony 0003:04F2:1123.0015: hidraw0: USB HID v0.0c Device [HID 04f2:1123] on usb-dummy_hcd.4-1/input0 [ 875.999521][ T4315] usb 5-1: USB disconnect, device number 25 [ 876.103230][ T4767] Bluetooth: hci5: Frame reassembly failed (-84) [ 876.335584][T22027] fido_id[22027]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 878.109721][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 878.420728][T22080] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5246'. [ 879.846975][T22136] loop8: detected capacity change from 0 to 512 [ 879.965144][T22136] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback. [ 879.999965][T22136] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 880.349420][ T4767] wlan1: Trigger new scan to find an IBSS to join [ 880.371129][T22149] tipc: Started in network mode [ 880.376443][T22149] tipc: Node identity 8a809b4051de, cluster identity 4711 [ 880.421250][T22149] tipc: Enabled bearer , priority 0 [ 880.467993][T22134] tipc: Disabling bearer [ 880.604076][T20088] EXT4-fs (loop8): unmounting filesystem. [ 881.342956][ T4767] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 882.710044][T22188] loop3: detected capacity change from 0 to 128 [ 882.759419][T22188] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 882.772479][T22188] hpfs: filesystem error: improperly stopped [ 882.778755][T22188] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 882.787352][T22188] hpfs: You really don't want any checks? You are crazy... [ 882.802115][T22188] hpfs: hpfs_map_sector(): read error [ 882.809567][T22188] hpfs: code page support is disabled [ 882.828213][T22188] hpfs: hpfs_map_4sectors(): unaligned read [ 882.838770][T22188] hpfs: hpfs_map_4sectors(): unaligned read [ 882.846514][T22188] hpfs: filesystem error: unable to find root dir [ 883.626077][T22195] syz.5.5275 (22195): attempted to duplicate a private mapping with mremap. This is not supported. [ 884.162465][T22207] loop8: detected capacity change from 0 to 1024 [ 884.250305][T22212] vivid-002: disconnect [ 884.436192][T22203] vivid-002: reconnect [ 884.529978][ T4312] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 884.779628][ T4312] usb 9-1: Using ep0 maxpacket: 8 [ 884.809409][ T4312] usb 9-1: config 2 has an invalid interface number: 73 but max is 0 [ 884.943807][ T4312] usb 9-1: config 2 has no interface number 0 [ 885.032325][ T4312] usb 9-1: config 2 interface 73 has no altsetting 0 [ 885.167943][ T4312] usb 9-1: New USB device found, idVendor=0abf, idProduct=3370, bcdDevice=c6.a5 [ 885.332335][ T4312] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.493662][ T4312] usb 9-1: Product: syz [ 885.498283][ T4312] usb 9-1: Manufacturer: syz [ 885.550842][ T4312] usb 9-1: SerialNumber: syz [ 885.814881][T22207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.895667][T22207] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 886.097134][ T4312] usb 9-1: USB disconnect, device number 7 [ 886.219420][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.528417][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.948930][T22259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 886.992733][T22259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 887.292114][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.539765][ C1] vkms_vblank_simulate: vblank timer overrun [ 887.558729][T22270] overlayfs: failed to clone upperpath [ 888.102429][T22284] program syz.8.5302 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 888.634426][T22294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5305'. [ 889.159702][T22294] team0: Port device vxcan1 removed [ 891.042009][T22348] overlayfs: failed to clone upperpath [ 894.693760][ T4765] device hsr_slave_0 left promiscuous mode [ 894.731239][ T4765] device hsr_slave_1 left promiscuous mode [ 894.816047][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 894.945301][ T4765] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 895.052920][ T4765] device bridge_slave_1 left promiscuous mode [ 895.102315][ T4765] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.192333][ T4765] device bridge_slave_0 left promiscuous mode [ 895.466233][ T4765] bridge0: port 1(bridge_slave_0) entered disabled state [ 899.101371][ T4765] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 899.453597][ T4765] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 900.614005][ T4765] bond0 (unregistering): Released all slaves [ 901.181256][T22526] overlayfs: failed to clone upperpath [ 901.594690][T22539] overlayfs: failed to clone upperpath [ 901.667357][T22542] batman_adv: batadv0: Adding interface: dummy0 [ 901.684291][T22542] batman_adv: batadv0: The MTU of interface dummy0 is too small (1536) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 901.721025][T22542] batman_adv: batadv0: Interface activated: dummy0 [ 901.732425][T22544] batadv0: mtu less than device minimum [ 901.741190][T22544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.754685][T22544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.767734][T22544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.780970][T22544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.794325][T22544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.806580][T22544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.821429][T22544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.834041][T22544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 901.847529][T22544] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 902.426613][T22554] fuse: Bad value for 'fd' [ 904.137641][T22631] netlink: 76 bytes leftover after parsing attributes in process `syz.6.5395'. [ 905.800120][T22661] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 905.856640][T22661] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 905.919729][T22664] Cannot find del_set index 2 as target [ 906.979465][T20326] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 907.179418][T20326] usb 5-1: Using ep0 maxpacket: 16 [ 907.187218][T20326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 907.219425][T20326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 907.254978][T20326] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 907.292298][T20326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 907.324079][T20326] usb 5-1: Product: syz [ 907.328468][T20326] usb 5-1: Manufacturer: syz [ 907.364214][T20326] usb 5-1: SerialNumber: syz [ 907.598169][T20326] usb 5-1: 0:2 : does not exist [ 907.633089][T20326] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 907.694320][T22706] block device autoloading is deprecated and will be removed. [ 907.716090][T20326] usb 5-1: USB disconnect, device number 26 [ 907.994040][T15379] udevd[15379]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 908.493224][T22741] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5420'. [ 909.219506][T19508] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 909.419659][T19508] usb 4-1: Using ep0 maxpacket: 32 [ 909.429785][T19508] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 909.448643][T19508] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 909.472017][T19508] usb 4-1: config 0 has no interface number 0 [ 909.486357][T19508] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 909.509099][T19508] usb 4-1: config 0 interface 67 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 909.532478][T19508] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 909.558240][T19508] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 909.583034][T19508] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.597164][T19508] usb 4-1: Product: syz [ 909.607642][T19508] usb 4-1: Manufacturer: syz [ 909.619615][T19508] usb 4-1: SerialNumber: syz [ 909.636876][T19508] usb 4-1: config 0 descriptor?? [ 909.648769][T19508] smsc95xx v2.0.0 [ 909.660315][T19508] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 909.697786][T19508] smsc95xx: probe of 4-1:0.67 failed with error -22 [ 909.971531][T22755] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 910.028566][T22755] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.100200][T22802] loop4: detected capacity change from 0 to 512 [ 911.151699][T22802] EXT4-fs: Ignoring removed mblk_io_submit option [ 911.201348][T22802] EXT4-fs: journaled quota format not specified [ 911.426206][ T4295] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 912.176869][T22811] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5441'. [ 912.281686][T22811] 8021q: adding VLAN 0 to HW filter on device bond1 [ 912.347489][T22813] device ipip0 entered promiscuous mode [ 912.494240][T22813] 8021q: adding VLAN 0 to HW filter on device bond1 [ 912.551573][T22813] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 912.612693][T22813] bond1: (slave ipip0): Error -95 calling set_mac_address [ 912.748153][T22824] netlink: 63 bytes leftover after parsing attributes in process `syz.6.5444'. [ 912.984762][ T4344] usb 4-1: USB disconnect, device number 27 [ 913.325563][T22845] loop3: detected capacity change from 0 to 128 [ 913.371175][T15379] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 913.932099][T22864] loop2: detected capacity change from 0 to 7 [ 913.940594][T15379] Dev loop2: unable to read RDB block 7 [ 913.948051][T15379] loop2: AHDI p1 p2 p3 [ 913.959949][T15379] loop2: partition table partially beyond EOD, truncated [ 913.987307][T15379] loop2: p1 start 1818582900 is beyond EOD, truncated [ 913.998146][T15379] loop2: p3 start 335544320 is beyond EOD, truncated [ 914.027545][T22864] Dev loop2: unable to read RDB block 7 [ 914.034323][T22864] loop2: AHDI p1 p2 p3 [ 914.038918][T22864] loop2: partition table partially beyond EOD, truncated [ 914.079712][T22864] loop2: p1 start 1818582900 is beyond EOD, truncated [ 914.086919][T22864] loop2: p3 start 335544320 is beyond EOD, truncated [ 914.336506][T22877] loop8: detected capacity change from 0 to 1024 [ 914.625367][T22877] hfsplus: bad catalog folder entry [ 914.721346][ T4745] hfsplus: bad catalog file entry [ 914.728126][ T4745] hfsplus: b-tree write err: -5, ino 3 [ 916.172279][T22942] netlink: 'syz.4.5477': attribute type 1 has an invalid length. [ 916.342927][T22945] 8021q: adding VLAN 0 to HW filter on device bond3 [ 916.392017][T22945] bond2: (slave bond3): making interface the new active one [ 916.435827][T22945] bond2: (slave bond3): Enslaving as an active interface with an up link [ 916.560791][T22942] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 917.482614][T22989] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5493'. [ 917.755613][T23001] netlink: 'syz.3.5498': attribute type 1 has an invalid length. [ 917.848111][T23001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 917.854248][T22970] loop4: detected capacity change from 0 to 40427 [ 917.889593][T22970] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 917.897982][T22970] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 917.915686][T22970] F2FS-fs (loop4): invalid crc value [ 917.932252][T22970] F2FS-fs (loop4): Found nat_bits in checkpoint [ 917.961461][T23004] bond0: (slave dummy0): making interface the new active one [ 918.004866][T22970] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 918.014836][T22970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 918.024432][T23004] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 918.036315][T23006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5498'. [ 918.059608][T23006] net_ratelimit: 10 callbacks suppressed [ 918.059627][T23006] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 918.123883][ T4745] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 918.278894][ T4765] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 918.385241][ T4765] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 918.953196][T23040] overlayfs: failed to clone upperpath [ 919.904174][T23069] xt_hashlimit: size too large, truncated to 1048576 [ 922.657878][T23132] device gretap0 entered promiscuous mode [ 923.191532][T23140] loop4: detected capacity change from 0 to 8192 [ 923.998808][T23122] overlayfs: failed to resolve './file0': -2 [ 924.757098][T23175] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 925.378059][T23179] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 925.403498][T23179] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 925.432217][T23179] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 925.635586][T23179] Bluetooth: hci3: Suspend notifier action (1) failed: -4 [ 925.683241][T23179] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 925.717669][T23179] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 925.752604][T23179] Bluetooth: hci2: Suspend notifier action (1) failed: -4 [ 925.773624][T23179] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 925.789401][T23179] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 925.802447][T23179] Bluetooth: hci1: Suspend notifier action (1) failed: -4 [ 926.303619][T23212] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5557'. [ 926.477472][T23212] 8021q: adding VLAN 0 to HW filter on device bond2 [ 926.531398][T23215] device macvlan2 entered promiscuous mode [ 926.567956][T23215] device bond2 entered promiscuous mode [ 926.591061][T23215] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 926.641580][T23215] device bond2 left promiscuous mode [ 927.479585][ T4281] Bluetooth: hci3: command 0x0c1a tx timeout [ 927.709753][ T48] Bluetooth: hci2: command 0x0c1a tx timeout [ 927.789415][ T48] Bluetooth: hci1: command 0x0c1a tx timeout [ 928.037692][T23259] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5571'. [ 928.218577][T23261] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5571'. [ 929.549386][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 929.680902][T23300] loop4: detected capacity change from 0 to 4096 [ 929.789485][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 929.862914][T23302] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 929.874898][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 930.766643][T23319] syz.5.5587 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 931.589610][ T4344] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 931.791211][ T4344] usb 5-1: config index 0 descriptor too short (expected 64882, got 72) [ 931.825815][ T4344] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 931.873828][ T4344] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.907379][ T4344] usb 5-1: Product: syz [ 932.032806][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.045948][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.246435][ T4344] usb 5-1: Manufacturer: syz [ 932.268884][ T4344] usb 5-1: SerialNumber: syz [ 932.473471][ T4344] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 933.319373][ T4344] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 933.537188][T19507] usb 5-1: USB disconnect, device number 27 [ 934.518528][ T4344] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 934.544981][ T4344] ath9k_htc: Failed to initialize the device [ 934.587025][T19507] usb 5-1: ath9k_htc: USB layer deinitialized [ 935.278559][T23407] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5613'. [ 935.346255][T23407] 8021q: adding VLAN 0 to HW filter on device bond0 [ 935.500457][T23409] bond0: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 935.589642][ T4767] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 935.610907][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 935.839595][ T4757] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 936.610936][T23444] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5624'. [ 938.105991][T23467] netlink: 165 bytes leftover after parsing attributes in process `syz.8.5631'. [ 939.157681][T23483] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5636'. [ 939.262667][T23483] netlink: 36 bytes leftover after parsing attributes in process `syz.8.5636'. [ 939.381845][T23483] netlink: 19 bytes leftover after parsing attributes in process `syz.8.5636'. [ 940.137040][T23513] sctp: [Deprecated]: syz.3.5644 (pid 23513) Use of struct sctp_assoc_value in delayed_ack socket option. [ 940.137040][T23513] Use struct sctp_sack_info instead [ 940.144472][T23514] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5645'. [ 940.551514][T23521] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5647'. [ 940.978502][T23534] overlayfs: failed to clone lowerpath [ 941.593753][T23551] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=4057583773 (32460670184 ns) > initial count (12316663096 ns). Using initial count to start timer. [ 942.453345][ T4767] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 943.562255][T23591] loop2: detected capacity change from 0 to 7 [ 943.595753][T15379] loop2: [ 943.598791][T15379] loop2: partition table partially beyond EOD, truncated [ 943.616396][T23591] loop2: [ 943.665449][T23591] loop2: partition table partially beyond EOD, truncated [ 944.231398][T23602] ip: renamed from gretap0 [ 945.379047][T23619] [ 945.381647][T23619] ===================================================== [ 945.388872][T23619] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 945.397230][T23619] syzkaller #0 Not tainted [ 945.401892][T23619] ----------------------------------------------------- [ 945.409569][T23619] syz.3.5675/23619 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 945.417771][T23619] ffff88807e67d7f8 (&new->fa_lock){....}-{2:2}, at: kill_fasync+0x18e/0x4b0 [ 945.427232][T23619] [ 945.427232][T23619] and this task is already holding: [ 945.435068][T23619] ffff888058c22028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 945.445397][T23619] which would create a new lock dependency: [ 945.451573][T23619] (&client->buffer_lock){....}-{2:2} -> (&new->fa_lock){....}-{2:2} [ 945.460139][T23619] [ 945.460139][T23619] but this new dependency connects a HARDIRQ-irq-safe lock: [ 945.470315][T23619] (&dev->event_lock#2){-.-.}-{2:2} [ 945.470353][T23619] [ 945.470353][T23619] ... which became HARDIRQ-irq-safe at: [ 945.483808][T23619] lock_acquire+0x1bb/0x4a0 [ 945.488507][T23619] _raw_spin_lock_irqsave+0xb0/0x100 [ 945.494290][T23619] input_event+0x76/0xb0 [ 945.498719][T23619] psmouse_report_standard_packet+0x4f/0x200 [ 945.505412][T23619] psmouse_process_byte+0x42b/0x620 [ 945.510964][T23619] psmouse_handle_byte+0x43/0x490 [ 945.516198][T23619] psmouse_interrupt+0x699/0x1130 [ 945.521498][T23619] serio_interrupt+0x87/0x130 [ 945.526586][T23619] i8042_interrupt+0x365/0x710 [ 945.531638][T23619] __handle_irq_event_percpu+0x293/0xa50 [ 945.537720][T23619] handle_irq_event+0x87/0x1e0 [ 945.542924][T23619] handle_edge_irq+0x243/0xb20 [ 945.547968][T23619] __common_interrupt+0xd7/0x1e0 [ 945.553967][T23619] common_interrupt+0xb0/0xd0 [ 945.558880][T23619] asm_common_interrupt+0x22/0x40 [ 945.564389][T23619] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 945.570661][T23619] i8042_aux_write+0x105/0x170 [ 945.576376][T23619] ps2_do_sendbyte+0x1f9/0x6e0 [ 945.582312][T23619] ps2_sendbyte+0x5b/0x110 [ 945.587021][T23619] cypress_send_ext_cmd+0x240/0x930 [ 945.592775][T23619] cypress_detect+0x8f/0x1a0 [ 945.597725][T23619] psmouse_extensions+0xcb2/0x1570 [ 945.603305][T23619] psmouse_switch_protocol+0x2fc/0x870 [ 945.609030][T23619] psmouse_connect+0x8f8/0x1500 [ 945.614186][T23619] serio_driver_probe+0x76/0x90 [ 945.620038][T23619] really_probe+0x2aa/0xc70 [ 945.624878][T23619] __driver_probe_device+0x18c/0x330 [ 945.630786][T23619] driver_probe_device+0x4f/0x420 [ 945.636177][T23619] __driver_attach+0x44a/0x6e0 [ 945.641392][T23619] bus_for_each_dev+0x182/0x1f0 [ 945.646770][T23619] serio_handle_event+0x29c/0x840 [ 945.652419][T23619] process_one_work+0x8a2/0x1160 [ 945.657820][T23619] worker_thread+0xaa2/0x1270 [ 945.662941][T23619] kthread+0x29d/0x330 [ 945.667412][T23619] ret_from_fork+0x1f/0x30 [ 945.672456][T23619] [ 945.672456][T23619] to a HARDIRQ-irq-unsafe lock: [ 945.680013][T23619] (tasklist_lock){.+.+}-{2:2} [ 945.680041][T23619] [ 945.680041][T23619] ... which became HARDIRQ-irq-unsafe at: [ 945.693575][T23619] ... [ 945.693582][T23619] lock_acquire+0x1bb/0x4a0 [ 945.701591][T23619] _raw_read_lock+0x32/0x40 [ 945.706563][T23619] do_wait+0x2b6/0xb60 [ 945.711008][T23619] kernel_wait+0xd3/0x1c0 [ 945.715565][T23619] call_usermodehelper_exec_work+0xb5/0x220 [ 945.721667][T23619] process_one_work+0x8a2/0x1160 [ 945.726795][T23619] worker_thread+0xaa2/0x1270 [ 945.732242][T23619] kthread+0x29d/0x330 [ 945.736490][T23619] ret_from_fork+0x1f/0x30 [ 945.741502][T23619] [ 945.741502][T23619] other info that might help us debug this: [ 945.741502][T23619] [ 945.751921][T23619] Chain exists of: [ 945.751921][T23619] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 945.751921][T23619] [ 945.766240][T23619] Possible interrupt unsafe locking scenario: [ 945.766240][T23619] [ 945.775039][T23619] CPU0 CPU1 [ 945.780517][T23619] ---- ---- [ 945.786158][T23619] lock(tasklist_lock); [ 945.790729][T23619] local_irq_disable(); [ 945.797768][T23619] lock(&dev->event_lock#2); [ 945.805452][T23619] lock(&client->buffer_lock); [ 945.812947][T23619] [ 945.816754][T23619] lock(&dev->event_lock#2); [ 945.822359][T23619] [ 945.822359][T23619] *** DEADLOCK *** [ 945.822359][T23619] [ 945.831602][T23619] 7 locks held by syz.3.5675/23619: [ 945.837810][T23619] #0: ffff8880294c0110 (&evdev->mutex){+.+.}-{3:3}, at: evdev_write+0x17c/0x490 [ 945.848489][T23619] #1: ffff88801a793230 (&dev->event_lock#2){-.-.}-{2:2}, at: input_inject_event+0xa7/0x310 [ 945.859192][T23619] #2: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: input_inject_event+0xb8/0x310 [ 945.869566][T23619] #3: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: input_pass_values+0xa3/0x12f0 [ 945.879337][T23619] #4: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: evdev_events+0x75/0x320 [ 945.888493][T23619] #5: ffff888058c22028 (&client->buffer_lock){....}-{2:2}, at: evdev_pass_values+0xcb/0xab0 [ 945.899132][T23619] #6: ffffffff8cb2d620 (rcu_read_lock){....}-{1:2}, at: kill_fasync+0x4f/0x4b0 [ 945.908920][T23619] [ 945.908920][T23619] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 945.919539][T23619] -> (&dev->event_lock#2){-.-.}-{2:2} { [ 945.925665][T23619] IN-HARDIRQ-W at: [ 945.929824][T23619] lock_acquire+0x1bb/0x4a0 [ 945.936457][T23619] _raw_spin_lock_irqsave+0xb0/0x100 [ 945.943821][T23619] input_event+0x76/0xb0 [ 945.950099][T23619] psmouse_report_standard_packet+0x4f/0x200 [ 945.958093][T23619] psmouse_process_byte+0x42b/0x620 [ 945.965663][T23619] psmouse_handle_byte+0x43/0x490 [ 945.973688][T23619] psmouse_interrupt+0x699/0x1130 [ 945.981373][T23619] serio_interrupt+0x87/0x130 [ 945.988935][T23619] i8042_interrupt+0x365/0x710 [ 945.995890][T23619] __handle_irq_event_percpu+0x293/0xa50 [ 946.004637][T23619] handle_irq_event+0x87/0x1e0 [ 946.011626][T23619] handle_edge_irq+0x243/0xb20 [ 946.018503][T23619] __common_interrupt+0xd7/0x1e0 [ 946.025937][T23619] common_interrupt+0xb0/0xd0 [ 946.033084][T23619] asm_common_interrupt+0x22/0x40 [ 946.040978][T23619] _raw_spin_unlock_irqrestore+0xbc/0x120 [ 946.048922][T23619] i8042_aux_write+0x105/0x170 [ 946.056369][T23619] ps2_do_sendbyte+0x1f9/0x6e0 [ 946.063431][T23619] ps2_sendbyte+0x5b/0x110 [ 946.070299][T23619] cypress_send_ext_cmd+0x240/0x930 [ 946.077635][T23619] cypress_detect+0x8f/0x1a0 [ 946.084452][T23619] psmouse_extensions+0xcb2/0x1570 [ 946.091807][T23619] psmouse_switch_protocol+0x2fc/0x870 [ 946.099576][T23619] psmouse_connect+0x8f8/0x1500 [ 946.107016][T23619] serio_driver_probe+0x76/0x90 [ 946.114475][T23619] really_probe+0x2aa/0xc70 [ 946.120946][T23619] __driver_probe_device+0x18c/0x330 [ 946.128606][T23619] driver_probe_device+0x4f/0x420 [ 946.135770][T23619] __driver_attach+0x44a/0x6e0 [ 946.142761][T23619] bus_for_each_dev+0x182/0x1f0 [ 946.149973][T23619] serio_handle_event+0x29c/0x840 [ 946.156865][T23619] process_one_work+0x8a2/0x1160 [ 946.163935][T23619] worker_thread+0xaa2/0x1270 [ 946.170840][T23619] kthread+0x29d/0x330 [ 946.177157][T23619] ret_from_fork+0x1f/0x30 [ 946.184392][T23619] IN-SOFTIRQ-W at: [ 946.188973][T23619] lock_acquire+0x1bb/0x4a0 [ 946.195798][T23619] _raw_spin_lock_irqsave+0xb0/0x100 [ 946.203166][T23619] input_event+0x76/0xb0 [ 946.210197][T23619] xpad360_process_packet+0x1fe/0xb30 [ 946.218399][T23619] xpad_irq_in+0x151a/0x24f0 [ 946.225733][T23619] __usb_hcd_giveback_urb+0x35f/0x520 [ 946.233875][T23619] dummy_timer+0xbf6/0x3090 [ 946.241550][T23619] __hrtimer_run_queues+0x54a/0xd50 [ 946.249523][T23619] hrtimer_run_softirq+0x183/0x2a0 [ 946.257228][T23619] handle_softirqs+0x2a1/0x930 [ 946.264377][T23619] do_softirq+0x142/0x210 [ 946.270630][T23619] __local_bh_enable_ip+0x180/0x1c0 [ 946.278004][T23619] batadv_tt_local_purge+0x2a7/0x340 [ 946.285799][T23619] batadv_tt_purge+0x31/0x9f0 [ 946.292600][T23619] process_one_work+0x8a2/0x1160 [ 946.300285][T23619] worker_thread+0xaa2/0x1270 [ 946.307720][T23619] kthread+0x29d/0x330 [ 946.315453][T23619] ret_from_fork+0x1f/0x30 [ 946.323774][T23619] INITIAL USE at: [ 946.328680][T23619] lock_acquire+0x1bb/0x4a0 [ 946.336466][T23619] _raw_spin_lock_irqsave+0xb0/0x100 [ 946.344928][T23619] input_inject_event+0xa7/0x310 [ 946.352076][T23619] led_trigger_event+0x12f/0x210 [ 946.359826][T23619] kbd_led_trigger_activate+0xb9/0x100 [ 946.367559][T23619] led_trigger_set+0x50c/0x910 [ 946.374241][T23619] led_trigger_set_default+0x19c/0x1e0 [ 946.381551][T23619] led_classdev_register_ext+0x625/0x860 [ 946.389292][T23619] input_leds_connect+0x4e7/0x6b0 [ 946.396538][T23619] input_register_device+0xdfd/0x1310 [ 946.403879][T23619] atkbd_connect+0x6f8/0x9a0 [ 946.410605][T23619] serio_driver_probe+0x76/0x90 [ 946.417271][T23619] really_probe+0x2aa/0xc70 [ 946.423805][T23619] __driver_probe_device+0x18c/0x330 [ 946.431283][T23619] driver_probe_device+0x4f/0x420 [ 946.438435][T23619] __driver_attach+0x44a/0x6e0 [ 946.445345][T23619] bus_for_each_dev+0x182/0x1f0 [ 946.452193][T23619] serio_handle_event+0x29c/0x840 [ 946.459113][T23619] process_one_work+0x8a2/0x1160 [ 946.466065][T23619] worker_thread+0xaa2/0x1270 [ 946.472750][T23619] kthread+0x29d/0x330 [ 946.478920][T23619] ret_from_fork+0x1f/0x30 [ 946.485958][T23619] } [ 946.488550][T23619] ... key at: [] input_allocate_device.__key.5+0x0/0x20 [ 946.497858][T23619] -> (&client->buffer_lock){....}-{2:2} { [ 946.503691][T23619] INITIAL USE at: [ 946.507683][T23619] lock_acquire+0x1bb/0x4a0 [ 946.514035][T23619] _raw_spin_lock_irqsave+0xb0/0x100 [ 946.520991][T23619] evdev_ioctl_handler+0x198b/0x1ed0 [ 946.528413][T23619] __se_sys_ioctl+0xfa/0x170 [ 946.535327][T23619] do_syscall_64+0x4c/0xa0 [ 946.541435][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.549702][T23619] } [ 946.552674][T23619] ... key at: [] evdev_open.__key.29+0x0/0x20 [ 946.561859][T23619] ... acquired at: [ 946.565935][T23619] _raw_spin_lock+0x2a/0x40 [ 946.571013][T23619] evdev_pass_values+0xcb/0xab0 [ 946.576439][T23619] evdev_events+0x1d4/0x320 [ 946.581268][T23619] input_pass_values+0x905/0x12f0 [ 946.587443][T23619] input_event_dispose+0x346/0x6c0 [ 946.593138][T23619] input_inject_event+0x1f5/0x310 [ 946.598807][T23619] evdev_write+0x35b/0x490 [ 946.604025][T23619] vfs_write+0x2e6/0xa30 [ 946.608716][T23619] ksys_write+0x14c/0x250 [ 946.613778][T23619] do_syscall_64+0x4c/0xa0 [ 946.618742][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.625533][T23619] [ 946.628034][T23619] [ 946.628034][T23619] the dependencies between the lock to be acquired [ 946.628043][T23619] and HARDIRQ-irq-unsafe lock: [ 946.642434][T23619] -> (tasklist_lock){.+.+}-{2:2} { [ 946.647870][T23619] HARDIRQ-ON-R at: [ 946.652265][T23619] lock_acquire+0x1bb/0x4a0 [ 946.659148][T23619] _raw_read_lock+0x32/0x40 [ 946.665874][T23619] do_wait+0x2b6/0xb60 [ 946.672325][T23619] kernel_wait+0xd3/0x1c0 [ 946.679211][T23619] call_usermodehelper_exec_work+0xb5/0x220 [ 946.687476][T23619] process_one_work+0x8a2/0x1160 [ 946.694782][T23619] worker_thread+0xaa2/0x1270 [ 946.701731][T23619] kthread+0x29d/0x330 [ 946.707804][T23619] ret_from_fork+0x1f/0x30 [ 946.714410][T23619] SOFTIRQ-ON-R at: [ 946.719014][T23619] lock_acquire+0x1bb/0x4a0 [ 946.725635][T23619] _raw_read_lock+0x32/0x40 [ 946.732348][T23619] do_wait+0x2b6/0xb60 [ 946.738781][T23619] kernel_wait+0xd3/0x1c0 [ 946.745645][T23619] call_usermodehelper_exec_work+0xb5/0x220 [ 946.754366][T23619] process_one_work+0x8a2/0x1160 [ 946.761774][T23619] worker_thread+0xaa2/0x1270 [ 946.769074][T23619] kthread+0x29d/0x330 [ 946.775416][T23619] ret_from_fork+0x1f/0x30 [ 946.782201][T23619] INITIAL USE at: [ 946.786402][T23619] lock_acquire+0x1bb/0x4a0 [ 946.793489][T23619] _raw_write_lock_irq+0xab/0xf0 [ 946.800665][T23619] copy_process+0x2557/0x4030 [ 946.807824][T23619] kernel_clone+0x24b/0x900 [ 946.814643][T23619] user_mode_thread+0x10d/0x180 [ 946.822065][T23619] rest_init+0x23/0x300 [ 946.828749][T23619] start_kernel+0x0/0x53c [ 946.835676][T23619] start_kernel+0x493/0x53c [ 946.842739][T23619] secondary_startup_64_no_verify+0xcf/0xdb [ 946.851266][T23619] INITIAL READ USE at: [ 946.855872][T23619] lock_acquire+0x1bb/0x4a0 [ 946.863228][T23619] _raw_read_lock+0x32/0x40 [ 946.870472][T23619] do_wait+0x2b6/0xb60 [ 946.877618][T23619] kernel_wait+0xd3/0x1c0 [ 946.884844][T23619] call_usermodehelper_exec_work+0xb5/0x220 [ 946.893538][T23619] process_one_work+0x8a2/0x1160 [ 946.901104][T23619] worker_thread+0xaa2/0x1270 [ 946.908478][T23619] kthread+0x29d/0x330 [ 946.915258][T23619] ret_from_fork+0x1f/0x30 [ 946.923040][T23619] } [ 946.925999][T23619] ... key at: [] tasklist_lock+0x18/0x40 [ 946.934088][T23619] ... acquired at: [ 946.938427][T23619] _raw_read_lock+0x32/0x40 [ 946.943313][T23619] send_sigio+0xf5/0x360 [ 946.947913][T23619] dnotify_handle_event+0x14f/0x420 [ 946.953735][T23619] fsnotify+0x168c/0x1d00 [ 946.958685][T23619] __fsnotify_parent+0x683/0x820 [ 946.964157][T23619] vfs_read+0x800/0xa00 [ 946.968586][T23619] ksys_read+0x14c/0x250 [ 946.973271][T23619] do_syscall_64+0x4c/0xa0 [ 946.977957][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 946.984844][T23619] [ 946.987346][T23619] -> (&f->f_owner.lock){...-}-{2:2} { [ 946.993019][T23619] IN-SOFTIRQ-R at: [ 946.997362][T23619] lock_acquire+0x1bb/0x4a0 [ 947.003970][T23619] _raw_read_lock_irqsave+0xb8/0x100 [ 947.011698][T23619] send_sigurg+0x25/0x3c0 [ 947.018155][T23619] sk_send_sigurg+0x6b/0xc0 [ 947.025010][T23619] tcp_check_urg+0x200/0x750 [ 947.031801][T23619] tcp_urg+0x160/0x400 [ 947.037790][T23619] tcp_rcv_established+0xdef/0x1d50 [ 947.045090][T23619] tcp_v6_do_rcv+0x588/0x1320 [ 947.052079][T23619] tcp_v6_rcv+0x21d9/0x2840 [ 947.058422][T23619] ip6_protocol_deliver_rcu+0x900/0x13a0 [ 947.066876][T23619] ip6_input_finish+0x181/0x2c0 [ 947.073735][T23619] NF_HOOK+0x329/0x3b0 [ 947.080180][T23619] NF_HOOK+0x329/0x3b0 [ 947.086461][T23619] __netif_receive_skb+0xcc/0x290 [ 947.093850][T23619] process_backlog+0x38d/0x6f0 [ 947.101150][T23619] __napi_poll+0xc0/0x460 [ 947.107323][T23619] net_rx_action+0x5dd/0xb20 [ 947.114014][T23619] handle_softirqs+0x2a1/0x930 [ 947.120840][T23619] run_ksoftirqd+0xa4/0x100 [ 947.127716][T23619] smpboot_thread_fn+0x64a/0xa40 [ 947.134769][T23619] kthread+0x29d/0x330 [ 947.140781][T23619] ret_from_fork+0x1f/0x30 [ 947.147396][T23619] INITIAL USE at: [ 947.151829][T23619] lock_acquire+0x1bb/0x4a0 [ 947.158350][T23619] _raw_write_lock_irq+0xab/0xf0 [ 947.165119][T23619] __f_setown+0x37/0x330 [ 947.171198][T23619] generic_setlease+0xf6a/0x1400 [ 947.178637][T23619] fcntl_setlease+0x262/0x330 [ 947.185777][T23619] do_fcntl+0x117/0x1270 [ 947.192124][T23619] __se_sys_fcntl+0xc9/0x190 [ 947.198471][T23619] do_syscall_64+0x4c/0xa0 [ 947.204984][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.213455][T23619] INITIAL READ USE at: [ 947.217990][T23619] lock_acquire+0x1bb/0x4a0 [ 947.224964][T23619] _raw_read_lock_irqsave+0xb8/0x100 [ 947.232897][T23619] send_sigio+0x2f/0x360 [ 947.239973][T23619] kill_fasync+0x224/0x4b0 [ 947.246870][T23619] lease_break_callback+0x22/0x30 [ 947.255264][T23619] __break_lease+0x4a6/0x1430 [ 947.263385][T23619] do_dentry_open+0x74f/0x10d0 [ 947.270768][T23619] path_openat+0x2635/0x2ee0 [ 947.278274][T23619] do_filp_open+0x1f1/0x430 [ 947.285790][T23619] do_sys_openat2+0x150/0x4b0 [ 947.293045][T23619] __x64_sys_creat+0x8c/0xb0 [ 947.300360][T23619] do_syscall_64+0x4c/0xa0 [ 947.307538][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.316855][T23619] } [ 947.319724][T23619] ... key at: [] __alloc_file.__key+0x0/0x10 [ 947.328778][T23619] ... acquired at: [ 947.332827][T23619] _raw_read_lock_irqsave+0xb8/0x100 [ 947.338562][T23619] send_sigio+0x2f/0x360 [ 947.343508][T23619] kill_fasync+0x224/0x4b0 [ 947.348107][T23619] lease_break_callback+0x22/0x30 [ 947.353330][T23619] __break_lease+0x4a6/0x1430 [ 947.358454][T23619] do_dentry_open+0x74f/0x10d0 [ 947.364200][T23619] path_openat+0x2635/0x2ee0 [ 947.369123][T23619] do_filp_open+0x1f1/0x430 [ 947.374070][T23619] do_sys_openat2+0x150/0x4b0 [ 947.379201][T23619] __x64_sys_creat+0x8c/0xb0 [ 947.384078][T23619] do_syscall_64+0x4c/0xa0 [ 947.389029][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.395629][T23619] [ 947.398158][T23619] -> (&new->fa_lock){....}-{2:2} { [ 947.403563][T23619] INITIAL USE at: [ 947.407545][T23619] lock_acquire+0x1bb/0x4a0 [ 947.413891][T23619] _raw_write_lock_irq+0xab/0xf0 [ 947.420579][T23619] fasync_remove_entry+0xf0/0x1c0 [ 947.427527][T23619] lease_modify+0x1a2/0x390 [ 947.433865][T23619] locks_remove_file+0x52f/0xec0 [ 947.440720][T23619] __fput+0x188/0x920 [ 947.446358][T23619] task_work_run+0x1d0/0x260 [ 947.453744][T23619] exit_to_user_mode_loop+0xe6/0x110 [ 947.460784][T23619] exit_to_user_mode_prepare+0xee/0x180 [ 947.468239][T23619] syscall_exit_to_user_mode+0x16/0x40 [ 947.475616][T23619] do_syscall_64+0x58/0xa0 [ 947.481800][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.489597][T23619] INITIAL READ USE at: [ 947.494376][T23619] lock_acquire+0x1bb/0x4a0 [ 947.501266][T23619] _raw_read_lock_irqsave+0xb8/0x100 [ 947.510060][T23619] kill_fasync+0x18e/0x4b0 [ 947.516883][T23619] lease_break_callback+0x22/0x30 [ 947.524524][T23619] __break_lease+0x4a6/0x1430 [ 947.532127][T23619] do_dentry_open+0x74f/0x10d0 [ 947.539522][T23619] path_openat+0x2635/0x2ee0 [ 947.546834][T23619] do_filp_open+0x1f1/0x430 [ 947.553622][T23619] do_sys_openat2+0x150/0x4b0 [ 947.560901][T23619] __x64_sys_creat+0x8c/0xb0 [ 947.568099][T23619] do_syscall_64+0x4c/0xa0 [ 947.575118][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.583991][T23619] } [ 947.586761][T23619] ... key at: [] fasync_insert_entry.__key+0x0/0x20 [ 947.595969][T23619] ... acquired at: [ 947.600305][T23619] _raw_read_lock_irqsave+0xb8/0x100 [ 947.606118][T23619] kill_fasync+0x18e/0x4b0 [ 947.610810][T23619] evdev_pass_values+0x54b/0xab0 [ 947.616038][T23619] evdev_events+0x1d4/0x320 [ 947.621109][T23619] input_pass_values+0x905/0x12f0 [ 947.626668][T23619] input_event_dispose+0x346/0x6c0 [ 947.632147][T23619] input_inject_event+0x1f5/0x310 [ 947.637451][T23619] evdev_write+0x35b/0x490 [ 947.642677][T23619] vfs_write+0x2e6/0xa30 [ 947.647459][T23619] ksys_write+0x14c/0x250 [ 947.652339][T23619] do_syscall_64+0x4c/0xa0 [ 947.657473][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.663896][T23619] [ 947.666322][T23619] [ 947.666322][T23619] stack backtrace: [ 947.672733][T23619] CPU: 0 PID: 23619 Comm: syz.3.5675 Not tainted syzkaller #0 [ 947.680557][T23619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 947.691313][T23619] Call Trace: [ 947.694727][T23619] [ 947.697765][T23619] dump_stack_lvl+0x188/0x24e [ 947.702728][T23619] ? load_image+0x400/0x400 [ 947.707358][T23619] ? show_regs_print_info+0x12/0x12 [ 947.712849][T23619] ? load_image+0x400/0x400 [ 947.717669][T23619] ? print_shortest_lock_dependencies+0xf0/0x160 [ 947.724757][T23619] __lock_acquire+0x66c8/0x7d10 [ 947.730059][T23619] ? cpufreq_update_util+0x91/0x230 [ 947.735476][T23619] ? verify_lock_unused+0x140/0x140 [ 947.740956][T23619] ? verify_lock_unused+0x140/0x140 [ 947.746550][T23619] ? do_raw_spin_unlock+0x11d/0x230 [ 947.752212][T23619] lock_acquire+0x1bb/0x4a0 [ 947.756887][T23619] ? kill_fasync+0x18e/0x4b0 [ 947.761604][T23619] ? read_lock_is_recursive+0x10/0x10 [ 947.767387][T23619] _raw_read_lock_irqsave+0xb8/0x100 [ 947.772882][T23619] ? kill_fasync+0x18e/0x4b0 [ 947.777774][T23619] ? _raw_read_lock+0x40/0x40 [ 947.782864][T23619] kill_fasync+0x18e/0x4b0 [ 947.787656][T23619] ? kill_fasync+0x4f/0x4b0 [ 947.792625][T23619] evdev_pass_values+0x54b/0xab0 [ 947.797891][T23619] ? evdev_pass_values+0x511/0xab0 [ 947.803346][T23619] evdev_events+0x1d4/0x320 [ 947.808047][T23619] ? evdev_events+0x75/0x320 [ 947.813096][T23619] ? evdev_event+0xe0/0xe0 [ 947.817913][T23619] input_pass_values+0x905/0x12f0 [ 947.823772][T23619] ? input_pass_values+0xa3/0x12f0 [ 947.829191][T23619] input_event_dispose+0x346/0x6c0 [ 947.834598][T23619] input_inject_event+0x1f5/0x310 [ 947.840069][T23619] ? input_inject_event+0xb8/0x310 [ 947.845475][T23619] evdev_write+0x35b/0x490 [ 947.850280][T23619] ? evdev_read+0xb90/0xb90 [ 947.854802][T23619] ? end_current_label_crit_section+0x14b/0x170 [ 947.861064][T23619] ? common_file_perm+0x171/0x1c0 [ 947.866094][T23619] ? fsnotify_perm+0x5a/0x550 [ 947.870802][T23619] ? security_file_permission+0x75/0xa0 [ 947.876391][T23619] ? evdev_read+0xb90/0xb90 [ 947.881141][T23619] vfs_write+0x2e6/0xa30 [ 947.885779][T23619] ? file_end_write+0x250/0x250 [ 947.890817][T23619] ? __fget_files+0x28/0x4b0 [ 947.895592][T23619] ? __fget_files+0x28/0x4b0 [ 947.900373][T23619] ? __fget_files+0x43d/0x4b0 [ 947.905080][T23619] ? __fdget_pos+0x1d4/0x360 [ 947.909904][T23619] ? ksys_write+0x71/0x250 [ 947.914773][T23619] ksys_write+0x14c/0x250 [ 947.919388][T23619] ? __ia32_sys_read+0x80/0x80 [ 947.924934][T23619] ? lockdep_hardirqs_on+0x94/0x140 [ 947.930618][T23619] do_syscall_64+0x4c/0xa0 [ 947.935345][T23619] ? clear_bhb_loop+0x60/0xb0 [ 947.940493][T23619] ? clear_bhb_loop+0x60/0xb0 [ 947.945451][T23619] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 947.951463][T23619] RIP: 0033:0x7fd1e3d9c799 [ 947.956701][T23619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 947.978108][T23619] RSP: 002b:00007fd1e4bfe028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 947.989773][T23619] RAX: ffffffffffffffda RBX: 00007fd1e4015fa0 RCX: 00007fd1e3d9c799 [ 947.998938][T23619] RDX: 0000000000001068 RSI: 0000200000000040 RDI: 0000000000000004 [ 948.008263][T23619] RBP: 00007fd1e3e32c99 R08: 0000000000000000 R09: 0000000000000000 [ 948.018112][T23619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 948.026552][T23619] R13: 00007fd1e4016038 R14: 00007fd1e4015fa0 R15: 00007ffeaaf673c8 [ 948.034934][T23619]