last executing test programs: 4m20.781584724s ago: executing program 32 (id=37): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc40, &(0x7f0000000000), 0xfe, 0x27a, &(0x7f0000000980)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10000, 0x0, 0x1, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_mount_image$fuse(0x0, &(0x7f0000000300)='./file0\x00', 0x400a8, 0x0, 0x5, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f00000022c0)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYBLOB="4c07f18b4a72a428cdf1fcc6a889d51c7d395bfc15396c272d41b4a79dba0739c1c7461ae19481932aa4c03054c8b2442a4c1e4311032bebb0cb70495acfcf1f08735df868c705", @ANYRES16, @ANYRES16, @ANYRES32, @ANYBLOB="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", @ANYBLOB="4b5b40505ce4295c79dcaf712107d5772e50bc7e91c4501e03e44ce7c98e30df04de10ee861097fdc0244296b0cdb9fb091e8872149bc55fc3de32d9bc67139102c0c51604fa", @ANYRESDEC, @ANYRESOCT], 0xd, 0x0, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 4m10.13798762s ago: executing program 5 (id=39): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x7}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x2}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x5, 0x4, 0xf06, 0x0, 0x84, 0x81, 0x5}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x13f, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r1, &(0x7f0000000480)={0x15, 0xfffffffffffffe75, 0xfa00, {0xffffffffffffffff, 0xee9, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @rand_addr=0x64010102}, @in6={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x33}, 0x7}}}, 0x118) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e24, 0x5, @empty, 0xb055}}, 0xff80, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) 4m9.27915123s ago: executing program 5 (id=88): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000007100)=@newtfilter={0x68, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r5, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xcf6b}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x5, 0x7, 0x5}, {{0x4, 0x0, 0x0, 0x1}, {0x4, 0x0, 0x1, 0x1}}}}, @TCF_EM_NBYTE={0x10, 0x2, 0x0, 0x0, {{0x4, 0x2, 0x8}, {0x6, 0x0, 0x2}}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x4894}, 0x2) 4m9.043854452s ago: executing program 5 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x4848, 0x2001, 0xfffffffc, 0x3}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m8.815089573s ago: executing program 5 (id=91): socket(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(0xffffffffffffffff, 0x6, 0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1de) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x3, 0x11, r0, 0x4000) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) 4m8.429647641s ago: executing program 5 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x4, [{0x3, 0x8b39, 0x3a, 0x3d}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x3}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x8, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) 3m58.461568284s ago: executing program 33 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="2ef26f0f3566b842000f00d8b805000000b9a00000000f01c166baf80cb8b7351187ef66bafc0cb000ee0fde460b0f0130670f01c28fe868cfe20a", 0x3b}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000040)=0x8001, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000300)}], 0x1, 0x0) 3m52.484492677s ago: executing program 34 (id=92): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0xc4, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_u32={{0x8}, {0x98, 0x2, [@TCA_U32_SEL={0x94, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x4, [{0x3, 0x8b39, 0x3a, 0x3d}, {0x8, 0x3, 0x9, 0x2d}, {0xffffff8a, 0x9d2, 0x2, 0x10000}, {0x9, 0xc, 0x8, 0x8}, {0x0, 0x5, 0x3b7, 0x3}, {0x553e3387, 0x3, 0x8000, 0x2}, {0x8001, 0x4, 0x1}, {0x8, 0xa8c, 0xfffffff8, 0xd}]}}]}}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x40000) 3m45.648779352s ago: executing program 3 (id=167): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x2}) r3 = syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r2}) ioctl$DRM_IOCTL_GEM_FLINK(r3, 0xc008640a, &(0x7f0000000300)={r4}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 3m45.000451733s ago: executing program 3 (id=169): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x20) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000001c0)="b9800000c00f3235000400000f30440f20c03508000000440f22c036646665f36526f20f22a5430f01c566ba4000edc4a39979250b00000008b9800000c00f3235010000000f30f245ab48b800000000000000800f23c00f21f83500000b000f23f8c481e57dcd", 0x67}], 0x1, 0x10, 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(0xffffffffffffffff, 0x40085112, &(0x7f0000000040)=@t={0x183, 0x3, 0x4, 0x7f}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m43.879842476s ago: executing program 3 (id=171): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_sys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) sendfile(r3, r3, 0x0, 0x3) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 3m42.718100911s ago: executing program 3 (id=174): syz_mount_image$jfs(&(0x7f0000000380), &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2208088, &(0x7f0000000c80)=ANY=[@ANYBLOB="009c1b06223d15055c6d39aecad6836294e3e1fc38b80cd5eb20b39dc7dceb316fa1203f802b4368850fdef916202a989ea54a4e800c3258000000006a784c19bad386d9a72fc1de2fa7f100eae8a434158d0ed0d6a9061d60971bcf895342571bae0ea58240ebdd0f6f3dd42fa0f9754224a9c2045d2e098e01000000943549e2c2e191b7da91b8645dfdb324ceaf445cdc974884e2d5ac6dbf8b92da3a8a65176db66ca798dce71880c5e6837b5a99b6696d5003a06f62bbfb0b9ba0a6ffbfc2dd37662e077430379386d8e3abf802401b0e8382000068cf51cde62ac99470edf8c757396564c8079d89017df3182005ec9fe40000000000000000b68e41fc7ff69975649149ff4be64bd665e56a5fe9ef4d6ee02ff30ad83aa9744100d520765c83c0178534e09d2f578bd10d3bfc68d1e75d6965613448d1045b6a0298d0804f82bc984e271c346d1e30886f81feb02b8320d47dc752b2dd23b4d8e20f2bda27a9cc7ff84c57d63da96f044f8d", @ANYRES8=0x0, @ANYRES8, @ANYRESOCT=0x0, @ANYRESHEX=0x0], 0x1, 0x5eec, &(0x7f000000bcc0)="$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") creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40) creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12) symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x32957, 0x0, 0x0, 0x68245b66, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) mknod$loop(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1000, 0x1) 3m41.886286961s ago: executing program 3 (id=176): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x1a) write$binfmt_script(r0, &(0x7f0000000440)={'#! ', './mnt/file0', [], 0xa, "c2bc5dfb33c2199b3febec6003b6ac1d07388becfecc8163b0b3567218ca093586ce717188bef0bac91548ade822044f0cf1fc1a60b1a1672dde2205bb617df1f9802bec4e2d102e62a9c8df"}, 0x5b) write$RDMA_USER_CM_CMD_BIND(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./trace/trace\x00', 0x0, 0x0) read(r1, &(0x7f0000000500), 0x1000) 3m37.89313136s ago: executing program 3 (id=186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in=@private=0xa010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x70bd29, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 3m37.47810125s ago: executing program 35 (id=186): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xc4, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@dev={0xac, 0x14, 0x14, 0x25}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x0, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newsa={0x158, 0x10, 0x5, 0x1, 0x0, {{@in=@private=0xa010100, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80, 0x0, 0x0, 0x80}, {@in6=@loopback, 0x1234, 0x33}, @in6=@loopback, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, {}, 0x0, 0x0, 0xa, 0x0, 0x0, 0x80}, [@algo_auth={0x48, 0x1, {{'hmac(sha1)\x00'}}}, @replay_esn_val={0x20, 0x17, {0x1, 0x0, 0x0, 0x70bd29, 0x0, 0x20, [0x0]}}]}, 0x158}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newpolicy={0xfc, 0x13, 0x5, 0x1, 0x0, {{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80, 0x80}, {0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x1234, 0x33}, 0xa, @in6=@loopback}]}]}, 0xfc}}, 0x0) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000680)='A', 0x1}], 0x1}}], 0x1, 0x4000801) 3m10.627252354s ago: executing program 8 (id=305): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = open(&(0x7f00000000c0)='./file1\x00', 0x14927e, 0x6) fallocate(r0, 0x0, 0x0, 0x1001f0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x105042, 0x182) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4012011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000010040)) 3m9.651950931s ago: executing program 8 (id=308): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r0 = syz_open_procfs(0x0, &(0x7f00000013c0)='cmdline\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, r0, 0xe9ac0000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000300)={&(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, 0x0}, 0x68) read$FUSE(r0, &(0x7f0000001400)={0x2020}, 0x2020) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f0000000000)) 3m7.014050925s ago: executing program 8 (id=315): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r1 = syz_usb_connect(0x5, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r2, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0xa1, 0x0, 0x42}, 0x10) connect$llc(r2, &(0x7f0000000400)={0x1a, 0x110, 0x10, 0x0, 0x6, 0x20, @broadcast}, 0x10) r3 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) bind$llc(r3, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) 3m6.345711207s ago: executing program 8 (id=322): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x28}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 3m6.056147271s ago: executing program 8 (id=324): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x80001) openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c45, 0x0) 3m5.291910478s ago: executing program 8 (id=329): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 3m5.078626217s ago: executing program 36 (id=329): r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) close(r1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x891c, 0x0) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m57.527206606s ago: executing program 7 (id=375): socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) socket(0x10, 0x803, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/12], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x31}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x20) 2m57.21825323s ago: executing program 7 (id=377): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x20081e, &(0x7f0000000040)={[{@nouid32}, {@noquota}, {@nouid32}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W") r0 = creat(&(0x7f0000000080)='./file1\x00', 0x8) write$binfmt_elf64(r0, &(0x7f0000000240)=ANY=[], 0xed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0xa0c42, 0x100) r2 = open(&(0x7f0000000000)='./file1\x00', 0x20801, 0xa2) fallocate(r2, 0x10, 0x6, 0x7000000) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0xc, r0, 0x2, 0x0, 0x0, 0xfffffffffe000001}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x101042, 0x15) pwrite64(r3, &(0x7f0000000140)='2', 0xfdef, 0xe7c) 2m55.986736219s ago: executing program 7 (id=386): r0 = socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000340)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2405000005000000000000000c240000e9fffff5ffffffff092403f3", @ANYRES8=r1, @ANYRES64=r1], 0x0) close(r0) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x4000) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0x1004}], 0x1}}], 0x8, 0x34000, 0x0) 2m53.415586821s ago: executing program 7 (id=397): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f00000008c0)={[{@nodioread_nolock}, {@errors_remount}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5a}}, {@init_itable}, {@resgid}, {@acl}, {@init_itable_val={'init_itable', 0x3d, 0x3}}]}, 0x1, 0x46f, &(0x7f0000000bc0)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000300)='./file0/file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) 2m52.747419823s ago: executing program 7 (id=400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x80) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=@newtfilter={0x38, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0xffe0}, {}, {0xfff1, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x6}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000808}, 0x24000804) 2m51.935489831s ago: executing program 7 (id=408): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) 2m51.773202979s ago: executing program 37 (id=408): sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001340), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x16) 54.848084518s ago: executing program 2 (id=1107): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000009200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x9104, 0x40, 0x0, 0x6, 0x3fffff, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) io_setup(0x1ff, &(0x7f0000000200)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f0000000000)={0xfff0, 0x20000000, 0x4, 0x1, 0xc, r2, &(0x7f00000009c0)='1', 0x1, 0xf, 0x0, 0x0, r2}]) write$FUSE_DIRENT(r2, 0x0, 0x10) dup3(r2, r0, 0x80000) 54.447979587s ago: executing program 2 (id=1110): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/19, 0x13}, 0x3}], 0x1, 0x40000082, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18", 0x80) 54.212053838s ago: executing program 2 (id=1114): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0xcde, 0x4) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r1, 0xfffffffc) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r3, 0x7, 0x0, 0xff1f0000, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}, 0x1, 0x2000000}, 0x0) 53.267101143s ago: executing program 2 (id=1121): ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x57, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @rumble={0x1, 0x8}}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@bridge_dellink={0x74, 0x11, 0x20, 0x70bd2d, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0xb20, 0x3}, [@IFLA_MAP={0x24, 0xe, {0xf, 0x5, 0x4, 0x9, 0x9, 0x7}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x8}, @IFLA_PHYS_SWITCH_ID={0xb, 0x24, "d45a6b439177a7"}]}, 0x74}, 0x1, 0x0, 0x0, 0x4001}, 0x20000090) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCL_UNBLANKSCREEN(r2, 0x541c, &(0x7f0000000000)) ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f00000001c0)={0x1, 0x10, &(0x7f00000024c0)="739c17c2c2cc029eecad068741dfda99"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000340)={0x198, r4, 0x300, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0xd4, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0xea8990f85fc1e3a3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x224221845c2cd8d3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x84, 0x2, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x2}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8}]}]}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x40000}, 0x20000041) write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f) 53.035489744s ago: executing program 2 (id=1124): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2290034, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1a42028, 0x0, 0xff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 51.6558616s ago: executing program 2 (id=1132): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x10) fcntl$notify(r0, 0x402, 0x26) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r1, 0xfffffffffffffffe, 0x29) 35.547751814s ago: executing program 38 (id=1132): symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xa14000, &(0x7f0000000140)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x10) fcntl$notify(r0, 0x402, 0x26) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file7/file0\x00', 0x0, 0x2) getdents64(r1, 0xfffffffffffffffe, 0x29) 15.625055999s ago: executing program 1 (id=1354): ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x35585bc211fc9355, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket(0x10, 0x80002, 0x0) open(0x0, 0x518282, 0x78e22799f4a46e8e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) 15.624463349s ago: executing program 6 (id=1356): syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x5962, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f00000000c0), &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$rxrpc(0x21, 0x2, 0x2) listen(r2, 0x5) 13.435965733s ago: executing program 0 (id=1363): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x14e24, 0x1000}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @rand_addr, 0x7fffffd}, 0x1c) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x6) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, 0x0, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x88c1}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x58, 0x10, 0x401, 0x400000, 0x3, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81a0fa, 0xc574450d1af3b5a4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x800}, 0x4040) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.435463293s ago: executing program 1 (id=1364): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000300)={'wlan0\x00', 0x1000}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000dc0)={0x28, r1, 0x1, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x85}, 0x4c040) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000400)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="410000000000000000008100000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000000000006006600c78800001c0033"], 0x4c}}, 0x800) 13.434886693s ago: executing program 6 (id=1366): socket$inet_sctp(0x2, 0x5, 0x84) r0 = userfaultfd(0x80001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f0000c75000/0x4000)=nil, 0x4000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x90000005}) epoll_pwait(r3, &(0x7f0000000580)=[{}], 0x1, 0xf7fefffb, 0x0, 0x0) epoll_pwait(r3, &(0x7f00000000c0)=[{}], 0x1, 0x100, 0x0, 0x0) close(r1) 13.384967156s ago: executing program 0 (id=1367): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x80, 0x1000000, 0x8, 0x1}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {0x0, 0xb}, {0x7, 0xffe0}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x10, 0x200200, 0x6, 0x22ba6b0, 0x80000001, 0x5}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008881}, 0x20002010) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05", 0x1, 0x20000005, &(0x7f0000000140)={0x11, 0x7, r5}, 0x14) 13.2953402s ago: executing program 0 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r3, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) 13.205240094s ago: executing program 1 (id=1369): close(0xffffffffffffffff) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000600)={0x24, r2, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040080}, 0x80) close(0xffffffffffffffff) 13.204779414s ago: executing program 9 (id=1370): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f01c3b9800000c00f3235010000000f300f20d835080000000f22d8c49e8173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041c9ae", 0x48}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 13.182059366s ago: executing program 9 (id=1371): close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x26, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x3, @dev={0xfe, 0x80, '\x00', 0x35}}}}, 0x84) 13.06960867s ago: executing program 1 (id=1372): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r1, 0x0, r3, 0x0, 0x38f9, 0x0) fcntl$setstatus(r2, 0x4, 0x42c00) 12.981267505s ago: executing program 9 (id=1373): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x1, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x30}, [@alu={0x4, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}]}, 0x0, 0xf, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbdbdf25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd318", 0x14, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x400000, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 12.980328615s ago: executing program 6 (id=1374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40040}}], 0x1, 0x4004010) close_range(r0, 0xffffffffffffffff, 0x0) 12.87363509s ago: executing program 6 (id=1375): openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182195f51584b3"], 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000280)={0x3, 0x100, 0x0, 0x4, 0x80000}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r2 = socket(0x10, 0x803, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 12.792016413s ago: executing program 9 (id=1376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x1, 0x3, 0x8}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008004}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r3, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x24, 0x2a, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x10}, {0x0, 0xfff1}, {0x2, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0xb3538085985bbb56}, 0x0) 11.221728018s ago: executing program 0 (id=1377): openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x8) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) writev(r1, &(0x7f0000005400)=[{&(0x7f0000005440)="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", 0x1aa}], 0x1) 11.209917809s ago: executing program 1 (id=1378): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5522, &(0x7f0000000b40)="$eJzs3L1vW1UUAPDjpOk3JUIMbH1SVSmRalOnH4KtQCs+RKuqwMAEju1abm2/KHadkImBETHwnyCQmBj5GxiY2RADiA0J5HdfSgNUqhQnJsnvJz2fd6+vzzvXqiqd9yIHcGQtZr//WolzcSoi5iPibERxXimPwo0UXoqI8xEx98RRKecfTxyPiNMRcW6SPOWslG99eWl84dov7/z23Q8njp356tsfZ7drYNYuRkR/LZ1v9FPMOyk+KOcb424R+1fHZUxv9B+W4zzFjfZqkWGjsb2uUcQrnbQ+X3s0nMT7vUZzEjvd+8X82iBdcDjubOcpPvCgsV6MW+3VInaHeRE7W6muza30f9vWcJTytMp8nxTpYzTajml9e7Od9rP2sIjNwaicT3nzVntzEsdlLC8XzbzXKupY3cUX/T/3bnfwaDMbt9eH3XyQXavVX6nVr1fr63mrPWpfrTb6retXs6VOb7KsOmo3+jc6ed7ptWvNvL+cLXWazWq9ni3dbK92G4OsXq9dqV2uXlsuzy5lb975IOu1sqVJfL07eDTq9obZ/Xw9S59YzlZqV15dzi7Us/du383u3rt16/bd9z+6+eGd126//Ua56F9lZUsrl1dWqvXL1ZX68hHa/2dl0VPcP+xKZdYFABw8+n9gFi7GwuPz6fb/6/ci9r7/j2fq/9O8/v/pDlT/e/j6/42XI2a6f9gV/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJH108LXbxUni2l8ppx/rpx6oRxXImIuIv78D/NxfEfO+TLPwlPWL/yjhu8rUWSYXONEeZyOiBvl8cfze/0tAAAAwOH1zafnv0jdenpZnHVB7Kd002bu7MdTyleJiIXFn6eUbW7y8uKUkhX/vo/F5pSyFTewTk4pWbrldmxa2Z7J/I5w8olQSWFuX8sBAAD2xc5OYH+7EAAAAPbT57MugNmoxPajzO1nwcVf3v/9QPDUjhEAAABwAFVmXQAAAACw54r+3+//AQAAwOGWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4C927uc2cSCKA/CzwQv7T4tWe99W9gZlbAl73GNEAWmCAnIgLaQBaiC3lBBBhMchEHGI5LGtRN8nOZOxzI83CA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAn9ucdBUIgDMJg7/rOZO5/WGnQ1NSkCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYuZ/XOKo4AODf2d3Z2FYxRskhIgoe9GLTbW3tTTwowYN/ghDSbY3d+qMNYksRc/EmOfciehQRlHjr/9BzC73UWw85VPCsvNmZ7DQNuCqd2SafD7x5350M875vhoR8500CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABUdt6ZxN20mR/HnXLf7QfX11J/Z0+f3Ny6u5RairMmk34yvFT/kC1GxLH2kgEAAOBw6Fb1fUTcy7dXUt+ZL+r/vDom1fzfPzOOy3r+i6pk3Vv/V7V/ar/9ev+F3YHmx+Okk55fHw1PPJpK73HNcdY9+49H9IorXzx76RY3pPP+5vM7eXE9s29v3Xq3X4RzTWQLAPwXx6u+DKrfh1I/aDMxAA6NXq3wrur/7ny7OQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0YWczjlVxFhFLvUmc3HlwfW2//ubW3aWqnblxYyu+npwznSKPiPPro+GJRmcz265cvXZxdTQaXm4+eDki2hr97XL6Fz+c4uCIVq7PAQmy8vu2kUHn0j3d+6VOebNn4Wo8OUFrP5IAADig8rKl+uBevr2S9mULEX/98HD9/1otjinr//sfnbldH6te/w8am+HsW9649NnylavX3li/tHpheGH4yZsnB28NTp09ffrscvGsZNkTEwAAAP6fftnq9X9n4dH1/6O1OKas/z//bvBVfayu+n9fk0W/tjMBAAA43J575c8/sn32Z/1+fLm6sXF5MN7ufj453raQ6r82V7Z6/d9daDsrAAAAoAk7m9lD6//nanFMuf7/9I8v/lw/ZzcijpTr/8fXPh2da246M62JPydue44AAAC060jZ6uv/efH+f2f3lYdORLz+6jgu/w3gVPV/971vfqqPVX///1RzU5xJncXx9Sj6xYjeYtsZAQAAcJA9VbZU7P+eb698/MvRD/re/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABo2t8BAAD//1IGNfA=") r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000d00)=@raw={'raw\x00', 0x8, 0x3, 0x3b0, 0x0, 0x11, 0x148, 0x0, 0x0, 0x318, 0x2a8, 0x2a8, 0x318, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x8800, 0x220, 0x280, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vxcan1\x00', {0x40, 0x5, 0x8, 0x7, 0x1c, 0xa78, 0x0, 0x20, 0x8}, {0x6}}}, @common=@inet=@hashlimit3={{0x158}, {'bridge0\x00', {0x6, 0x6, 0x40, 0x6, 0x0, 0x579d, 0x5, 0x8, 0x20, 0x20}, {0x5}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x2, [0x3, 0x2, 0xa, 0x4, 0x0, 0x4], 0x3, 0x1}, {0x0, [0x7, 0x6, 0x0, 0x1, 0x1, 0x4], 0x1}}}}, {{@ip={@broadcast, @private=0xa010100, 0xffffffff, 0x0, '\x00', 'geneve0\x00', {0xff}, {}, 0x73, 0x0, 0x70}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) creat(&(0x7f00000000c0)='./file0\x00', 0xa8) prlimit64(0x0, 0xc, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) writev(0xffffffffffffffff, &(0x7f0000002240), 0x0) sched_setscheduler(0x0, 0x2, 0x0) setfsgid(0xee00) setgroups(0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffe11) 11.204577949s ago: executing program 9 (id=1379): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x67e}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 11.195903249s ago: executing program 6 (id=1380): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) listen(0xffffffffffffffff, 0x2) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1fd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x202000, 0x0) 11.095784694s ago: executing program 0 (id=1381): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) 10.705164233s ago: executing program 4 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0x3, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x14fbee}, 0x13, 0x1, 0x3, 0x7, 0x12, 0x0, 0x1b, 0x15, 0x5, 0x402, {0x3, 0x8001, 0xfffffffc, 0x3, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x1, 0xc009, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) 8.732924906s ago: executing program 0 (id=1382): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) write$binfmt_elf64(r3, &(0x7f0000000180)=ANY=[], 0x78) sendfile(r2, r3, &(0x7f00000001c0), 0x8) fcntl$addseals(r3, 0x409, 0x8) fallocate(r3, 0x3, 0x0, 0x3) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000008c0)=""/76, 0x4c}], 0x1}, 0x10000) 8.729438826s ago: executing program 1 (id=1383): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="430fc73f0f01c3b9800000c00f3235010000000f300f20d835080000000f22d8c49e8173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041c9ae", 0x48}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r5, 0xae80, 0x0) 8.717179437s ago: executing program 6 (id=1392): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x6}]}, 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x7}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x67e}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}, @NFTA_QUOTA_CONSUMED={0xc, 0x4, 0x1, 0x0, 0x2}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x108}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r1) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x54, r2, 0x1, 0x123, 0x234, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x7530, @local}}, {0x14, 0x2, @in={0x2, 0x7530, @remote}}}}]}]}, 0x54}}, 0x0) 8.708047777s ago: executing program 9 (id=1393): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x40, 0x6, 0x5, 0x8, 0x6, 0xffffff26, 0x2, 0x80, 0x8, 0x7, 0x15, 0xa, 0x4, 0x5, 0x7, 0xc5f7}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x200400dc}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x24000800) 8.400499582s ago: executing program 4 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0x3, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x14fbee}, 0x13, 0x1, 0x3, 0x7, 0x12, 0x0, 0x1b, 0x15, 0x5, 0x402, {0x3, 0x8001, 0xfffffffc, 0x3, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x1, 0xc009, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) 6.426605195s ago: executing program 4 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0x3, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x14fbee}, 0x13, 0x1, 0x3, 0x7, 0x12, 0x0, 0x1b, 0x15, 0x5, 0x402, {0x3, 0x8001, 0xfffffffc, 0x3, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x1, 0xc009, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) 4.370271513s ago: executing program 4 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0x3, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x14fbee}, 0x13, 0x1, 0x3, 0x7, 0x12, 0x0, 0x1b, 0x15, 0x5, 0x402, {0x3, 0x8001, 0xfffffffc, 0x3, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x1, 0xc009, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) 2.249912344s ago: executing program 4 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0x3, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x14fbee}, 0x13, 0x1, 0x3, 0x7, 0x12, 0x0, 0x1b, 0x15, 0x5, 0x402, {0x3, 0x8001, 0xfffffffc, 0x3, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x1, 0xc009, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) 0s ago: executing program 4 (id=1238): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x121800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000680)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x8, 0xfffd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {0x1, 0xb}, {0x3, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x6, 0x8, 0x14fbee}, 0x13, 0x1, 0x3, 0x7, 0x12, 0x0, 0x1b, 0x15, 0x5, 0x402, {0x3, 0x8001, 0xfffffffc, 0x3, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000280)="05", 0x1, 0xc009, &(0x7f00000000c0)={0x11, 0xc, r5, 0x1, 0x3, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, 0x14) kernel console output (not intermixed with test programs): mended to keep mac addresses unique to avoid problems! [ 161.021211][ T6198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.057734][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 161.088153][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 161.113787][ T6198] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.141635][ T6198] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.182647][ T6198] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.211379][ T6198] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.470176][ T5237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.488122][ T5237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.509289][ T6380] loop7: detected capacity change from 0 to 512 [ 161.531863][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.559114][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.583540][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.605891][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 161.748059][ T6380] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue. Quota mode: writeback. [ 161.806642][ T6380] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 162.085987][ T6401] FAULT_INJECTION: forcing a failure. [ 162.085987][ T6401] name failslab, interval 1, probability 0, space 0, times 0 [ 162.173613][ T6401] CPU: 1 PID: 6401 Comm: syz.0.381 Not tainted syzkaller #0 [ 162.180975][ T6401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.191106][ T6401] Call Trace: [ 162.194427][ T6401] [ 162.197818][ T6401] dump_stack_lvl+0x188/0x250 [ 162.202548][ T6401] ? show_regs_print_info+0x20/0x20 [ 162.207789][ T6401] ? load_image+0x410/0x410 [ 162.212344][ T6401] ? __might_sleep+0xf0/0xf0 [ 162.216982][ T6401] ? __lock_acquire+0x7b50/0x7b50 [ 162.222062][ T6401] ? __mutex_trylock_common+0x15c/0x260 [ 162.227650][ T6401] should_fail+0x383/0x4b0 [ 162.232108][ T6401] should_failslab+0x5/0x20 [ 162.236657][ T6401] slab_pre_alloc_hook+0x51/0xc0 [ 162.241641][ T6401] kmem_cache_alloc_trace+0x47/0x290 [ 162.246976][ T6401] ? dummy_alloc_request+0x7c/0x120 [ 162.252236][ T6401] dummy_alloc_request+0x7c/0x120 [ 162.257327][ T6401] usb_ep_alloc_request+0x5d/0x240 [ 162.262499][ T6401] gadget_bind+0xe8/0x5a0 [ 162.266882][ T6401] ? lockdep_hardirqs_on+0x94/0x140 [ 162.272130][ T6401] ? gadget_disconnect+0x10/0x10 [ 162.277123][ T6401] udc_bind_to_driver+0x203/0x5f0 [ 162.282214][ T6401] usb_gadget_probe_driver+0x1fb/0x380 [ 162.287732][ T6401] raw_ioctl+0x115e/0x3750 [ 162.292211][ T6401] ? tomoyo_path_number_perm+0x5f7/0x6b0 [ 162.297897][ T6401] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 162.303405][ T6401] ? make_qualifier+0x3b0/0x3b0 [ 162.308338][ T6401] ? bpf_lsm_file_ioctl+0x5/0x10 [ 162.313302][ T6401] ? security_file_ioctl+0x7c/0xa0 [ 162.318449][ T6401] ? make_qualifier+0x3b0/0x3b0 [ 162.323322][ T6401] __se_sys_ioctl+0xfa/0x170 [ 162.327937][ T6401] do_syscall_64+0x4c/0xa0 [ 162.332374][ T6401] ? clear_bhb_loop+0x30/0x80 [ 162.337111][ T6401] ? clear_bhb_loop+0x30/0x80 [ 162.341909][ T6401] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 162.347833][ T6401] RIP: 0033:0x7ff27d7d6deb [ 162.352284][ T6401] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 162.372801][ T6401] RSP: 002b:00007ff27ba2cf00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.381274][ T6401] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007ff27d7d6deb [ 162.391361][ T6401] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 162.399381][ T6401] RBP: 00007ff27ba2dfd0 R08: 0000000000000001 R09: 00000000ffffffff [ 162.407394][ T6401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.415402][ T6401] R13: 00002000000001c0 R14: 0000000000000002 R15: 0000000000000000 [ 162.423414][ T6401] [ 162.449618][ T6401] raw-gadget.0 gadget: usb_ep_alloc_request failed [ 162.456193][ T6401] udc dummy_udc.0: failed to start USB Raw Gadget: -12 [ 162.504610][ T6401] misc raw-gadget: fail, usb_gadget_probe_driver returned -12 [ 162.635028][ T6418] loop9: detected capacity change from 0 to 8 [ 162.755209][ T1110] Bluetooth: hci1: command 0x0419 tx timeout [ 163.013413][ T26] audit: type=1800 audit(1789410891.315:11): pid=6429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.388" name="(" dev="sda1" ino=2060 res=0 errno=0 [ 163.113429][ T5625] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 163.166580][ T6405] loop6: detected capacity change from 0 to 32768 [ 163.258804][ T6405] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.382 (6405) [ 163.464583][ T6405] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 163.477989][ T5625] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 163.499028][ T6405] BTRFS info (device loop6): setting nodatasum [ 163.505267][ T6405] BTRFS info (device loop6): enabling auto defrag [ 163.658208][ T6405] BTRFS info (device loop6): disabling tree log [ 163.981181][ T6405] BTRFS info (device loop6): using free space tree [ 164.186236][ T5625] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 164.218549][ T6405] BTRFS info (device loop6): has skinny extents [ 164.268152][ T5625] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 164.277288][ T5625] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 164.291834][ T5625] usb 8-1: SerialNumber: syz [ 164.580666][ T5625] usb 8-1: 0:2 : does not exist [ 164.597571][ T6405] BTRFS info (device loop6): enabling ssd optimizations [ 164.685914][ T5625] usb 8-1: USB disconnect, device number 3 [ 165.001141][ T4271] udevd[4271]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 165.230173][ T6497] loop7: detected capacity change from 0 to 512 [ 165.354436][ T6497] EXT4-fs error (device loop7): ext4_orphan_get:1410: inode #11: comm syz.7.397: unexpected EA_INODE flag [ 165.460407][ T6497] EXT4-fs (loop7): Remounting filesystem read-only [ 165.536139][ T6497] EXT4-fs error (device loop7): ext4_orphan_get:1415: comm syz.7.397: couldn't read orphan inode 11 (err -117) [ 165.658883][ T6497] EXT4-fs (loop7): Remounting filesystem read-only [ 165.694488][ T6497] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 165.720400][ C0] vkms_vblank_simulate: vblank timer overrun [ 165.825810][ T5099] EXT4-fs error (device loop7): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 165.858040][ T5099] EXT4-fs (loop7): Remounting filesystem read-only [ 165.875078][ T5099] EXT4-fs error (device loop7): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag [ 165.927998][ T5099] EXT4-fs (loop7): Remounting filesystem read-only [ 165.936147][ T5099] EXT4-fs error (device loop7): ext4_lookup:1860: inode #11: comm syz-executor: unexpected EA_INODE flag [ 165.996252][ T5099] EXT4-fs (loop7): Remounting filesystem read-only [ 166.394880][ T6530] binder: 6528:6530 ioctl c0306201 200000000080 returned -14 [ 166.435574][ T6530] binder: 6528:6530 ioctl c0306201 2000000003c0 returned -14 [ 166.607762][ T4860] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 166.967954][ T4860] usb 7-1: config 1 has an invalid interface number: 27 but max is 1 [ 166.976286][ T4860] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.010485][ T4860] usb 7-1: config 1 has 3 interfaces, different from the descriptor's value: 2 [ 167.043161][ T6549] loop9: detected capacity change from 0 to 512 [ 167.057834][ T4860] usb 7-1: config 1 has no interface number 2 [ 167.068677][ T4860] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 167.087739][ T4860] usb 7-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 167.128938][ T6549] EXT4-fs error (device loop9): ext4_orphan_get:1410: inode #11: comm syz.9.413: unexpected EA_INODE flag [ 167.144640][ T6551] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.175990][ T4860] usb 7-1: config 1 interface 1 has no altsetting 0 [ 167.196989][ T6549] EXT4-fs (loop9): Remounting filesystem read-only [ 167.230008][ T6549] EXT4-fs error (device loop9): ext4_orphan_get:1415: comm syz.9.413: couldn't read orphan inode 11 (err -117) [ 167.243545][ T6549] EXT4-fs (loop9): Remounting filesystem read-only [ 167.256820][ T6543] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 167.285753][ T6543] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 167.300835][ T6549] EXT4-fs (loop9): mounted filesystem without journal. Opts: nodioread_nolock,errors=remount-ro,debug_want_extra_isize=0x000000000000005a,init_itable,resgid=0x0000000000000000,acl,init_itable=0x0000000000000003,. Quota mode: none. [ 167.378100][ T4860] usb 7-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 167.388132][ T4860] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.396486][ T4860] usb 7-1: Product: syz [ 167.402028][ T4860] usb 7-1: Manufacturer: syz [ 167.406781][ T4860] usb 7-1: SerialNumber: syz [ 167.674252][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 167.855330][ T6561] loop1: detected capacity change from 0 to 2048 [ 167.868753][ T6527] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 167.890316][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.897929][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.918957][ T6553] device bridge_slave_0 entered promiscuous mode [ 167.929546][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.948488][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.956931][ T6553] device bridge_slave_1 entered promiscuous mode [ 168.017191][ T6561] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.026781][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.073468][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.089721][ T6527] udc-core: couldn't find an available UDC or it's busy [ 168.103984][ T6527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 168.135175][ T6572] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5873: Corrupt filesystem [ 168.157664][ T6572] EXT4-fs error (device loop1): ext4_dirty_inode:6087: inode #15: comm syz.1.416: mark_inode_dirty error [ 168.170828][ T6572] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 1803188595: comm syz.1.416: lblock 0 mapped to illegal pblock 1803188595 (length 1) [ 168.196907][ T6553] team0: Port device team_slave_0 added [ 168.211068][ T6553] team0: Port device team_slave_1 added [ 168.219645][ T6572] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 168.299805][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.306901][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.306925][ T6572] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.306925][ T6572] [ 168.347099][ T6527] udc-core: couldn't find an available UDC or it's busy [ 168.356184][ T6527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 168.371008][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.415872][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.426278][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.487506][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.566782][ T5297] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm kworker/u4:13: Invalid block bitmap block 2 in block_group 0 [ 168.626033][ T5297] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28 [ 168.626997][ T6553] device hsr_slave_0 entered promiscuous mode [ 168.647808][ T4860] ATM dev 0: failed to start ADSL synchronisation: -71 [ 168.678693][ C0] ATM dev 0: usbatm_complete: urb 0xffff888018796a00 failed (-71)! [ 168.687390][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880236ab600 failed (-71)! [ 168.695396][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802cb6f700 failed (-71)! [ 168.703738][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880206e6a00 failed (-71)! [ 168.712795][ T6553] device hsr_slave_1 entered promiscuous mode [ 168.751526][ T5297] EXT4-fs (loop1): This should not happen!! Data will be lost [ 168.751526][ T5297] [ 168.763929][ T6553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.768582][ T4860] speedtch 7-1:1.27: speedtch_bind: failed to claim interface 0 (-16)! [ 168.774434][ T6553] Cannot create hsr debugfs directory [ 168.780881][ T4860] speedtch 7-1:1.27: usbatm_usb_probe: bind failed: -16! [ 168.801000][ T5297] EXT4-fs (loop1): Total free blocks count 0 [ 168.807782][ C0] ATM dev 0: usbatm_complete: urb 0xffff888018796a00 failed (-71)! [ 168.816121][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880236ab600 failed (-71)! [ 168.817998][ T5297] EXT4-fs (loop1): Free/Dirty block details [ 168.824386][ C0] ATM dev 0: usbatm_complete: urb 0xffff88802cb6f700 failed (-71)! [ 168.838342][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880206e6a00 failed (-71)! [ 168.846168][ T5297] EXT4-fs (loop1): free_blocks=0 [ 168.861143][ T5297] EXT4-fs (loop1): dirty_blocks=32 [ 168.874471][ T5297] EXT4-fs (loop1): Block reservation details [ 168.882824][ T4860] speedtch: probe of 7-1:1.27 failed with error -16 [ 168.896733][ T5297] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 168.922593][ T4860] usb 7-1: USB disconnect, device number 7 [ 168.937786][ C0] ATM dev 0: usbatm_complete: urb 0xffff888018796a00 failed (-71)! [ 168.945926][ C0] ATM dev 0: usbatm_complete: urb 0xffff8880236ab600 failed (-71)! [ 168.962451][ T4474] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 169.398209][ T4474] usb 1-1: config 0 has no interfaces? [ 169.404436][ T4474] usb 1-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 169.428559][ T4474] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.482145][ T4474] usb 1-1: config 0 descriptor?? [ 170.247018][ T4474] usb 1-1: USB disconnect, device number 8 [ 171.042260][ T4860] Bluetooth: hci3: command 0x0409 tx timeout [ 171.248572][ T6616] loop1: detected capacity change from 0 to 128 [ 171.358773][ T6616] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 171.377993][ T6616] ext4 filesystem being mounted at /115/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 171.418361][ T6616] EXT4-fs (loop1): shut down requested (2) [ 171.457385][ T6622] FAULT_INJECTION: forcing a failure. [ 171.457385][ T6622] name failslab, interval 1, probability 0, space 0, times 0 [ 171.467990][ T4228] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 171.488921][ T6616] fscrypt (loop1, inode 12): Error -5 getting encryption context [ 171.538572][ T6622] CPU: 1 PID: 6622 Comm: syz.0.432 Not tainted syzkaller #0 [ 171.546032][ T6622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 171.556270][ T6622] Call Trace: [ 171.559657][ T6622] [ 171.562631][ T6622] dump_stack_lvl+0x188/0x250 [ 171.567368][ T6622] ? show_regs_print_info+0x20/0x20 [ 171.572641][ T6622] ? load_image+0x410/0x410 [ 171.577333][ T6622] ? __lock_acquire+0x7b50/0x7b50 [ 171.582605][ T6622] should_fail+0x383/0x4b0 [ 171.587096][ T6622] should_failslab+0x5/0x20 [ 171.591659][ T6622] slab_pre_alloc_hook+0x51/0xc0 [ 171.596920][ T6622] __kmalloc+0x6b/0x340 [ 171.601147][ T6622] ? x509_get_sig_params+0x35f/0x630 [ 171.606481][ T6622] ? memcpy+0x3c/0x60 [ 171.610528][ T6622] x509_get_sig_params+0x35f/0x630 [ 171.616143][ T6622] x509_cert_parse+0x4ab/0x7a0 [ 171.621005][ T6622] x509_key_preparse+0x60/0x5d0 [ 171.625932][ T6622] ? down_read+0x1aa/0x2e0 [ 171.630421][ T6622] asymmetric_key_preparse+0xa5/0x140 [ 171.635861][ T6622] key_create_or_update+0x432/0xa40 [ 171.641125][ T6622] ? security_key_permission+0x7c/0xa0 [ 171.646857][ T6622] ? key_type_put+0x20/0x20 [ 171.651597][ T6622] ? lookup_user_key_possessed+0x40/0x40 [ 171.657403][ T6622] ? __might_fault+0xb3/0x110 [ 171.662346][ T6622] __se_sys_add_key+0x34b/0x410 [ 171.667260][ T6622] ? __x64_sys_add_key+0xc0/0xc0 [ 171.672278][ T6622] ? lockdep_hardirqs_on+0x94/0x140 [ 171.677637][ T6622] ? __x64_sys_add_key+0x1c/0xc0 [ 171.682734][ T6622] do_syscall_64+0x4c/0xa0 [ 171.687350][ T6622] ? clear_bhb_loop+0x30/0x80 [ 171.692067][ T6622] ? clear_bhb_loop+0x30/0x80 [ 171.696817][ T6622] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 171.702738][ T6622] RIP: 0033:0x7ff27d7d7159 [ 171.707514][ T6622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 171.718273][ T4228] usb 7-1: Using ep0 maxpacket: 32 [ 171.727772][ T6622] RSP: 002b:00007ff27ba2f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 171.727835][ T6622] RAX: ffffffffffffffda RBX: 00007ff27da5efa0 RCX: 00007ff27d7d7159 [ 171.727852][ T6622] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 171.727868][ T6622] RBP: 00007ff27d86e03b R08: ffffffffffffffff R09: 0000000000000000 [ 171.727882][ T6622] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 171.727902][ T6622] R13: 00007ff27da5f038 R14: 00007ff27da5efa0 R15: 00007ffee550a4a8 [ 171.727935][ T6622] [ 171.931235][ T6623] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 171.964574][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.434'. [ 172.088295][ T4228] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 172.140006][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.155102][ T4228] usb 7-1: Product: syz [ 172.165025][ T4228] usb 7-1: Manufacturer: syz [ 172.182302][ T4228] usb 7-1: SerialNumber: syz [ 172.221828][ T4228] usb 7-1: config 0 descriptor?? [ 172.260593][ T4228] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 172.352408][ T6553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 172.429411][ T6553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 172.439908][ T6553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 172.453871][ T6553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 172.688405][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.765830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 172.787623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 172.810296][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.823069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 172.834069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 172.843612][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.850789][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.896817][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 172.906491][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 172.915030][ T4860] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 172.930091][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 172.957281][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.965513][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.987156][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.049656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.060778][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.083800][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.102903][ T6661] loop0: detected capacity change from 0 to 256 [ 173.109643][ T4729] Bluetooth: hci3: command 0x041b tx timeout [ 173.141831][ T6553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 173.156591][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 173.178928][ T6661] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 173.191671][ T6661] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 173.201856][ T4860] usb 10-1: Using ep0 maxpacket: 32 [ 173.211695][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.223398][ T6661] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 173.247158][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.260538][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 173.281190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 173.303605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 173.328088][ T4860] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 173.340002][ T4860] usb 10-1: config 0 has no interface number 0 [ 173.347055][ T4860] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 173.372739][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 173.382472][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 173.405576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 173.522648][ T4860] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 173.535685][ T4860] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.561549][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.577342][ T4860] usb 10-1: Product: syz [ 173.603759][ T4860] usb 10-1: Manufacturer: syz [ 173.610149][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.622481][ T4860] usb 10-1: SerialNumber: syz [ 173.638887][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.648552][ T4860] usb 10-1: config 0 descriptor?? [ 173.678243][ T6649] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 173.689982][ T6669] loop0: detected capacity change from 0 to 256 [ 173.728613][ T6669] exfat: Deprecated parameter 'utf8' [ 173.734154][ T6669] exfat: Deprecated parameter 'utf8' [ 173.753148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.762951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.794481][ T6669] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 173.890508][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 173.906484][ T6649] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 173.926440][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 173.961996][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 173.968677][ T4228] gspca_topro: Sensor cx0342 [ 174.000947][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.020540][ T6553] device veth0_vlan entered promiscuous mode [ 174.064941][ T6553] device veth1_vlan entered promiscuous mode [ 174.143759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 174.202676][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 174.222233][ T4228] usb 7-1: USB disconnect, device number 8 [ 174.223995][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 174.259556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 174.291030][ T6553] device veth0_macvtap entered promiscuous mode [ 174.319170][ T6553] device veth1_macvtap entered promiscuous mode [ 174.347544][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.366238][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.377305][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.404554][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.423886][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.437427][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.447931][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 174.458918][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.479701][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.508729][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.539378][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.560134][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.585683][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.615491][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.632788][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.645456][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 174.657100][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 174.674886][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.685365][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 174.700842][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 174.713651][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 174.722879][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 174.742819][ T6553] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.777753][ T6553] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.790455][ T6682] loop0: detected capacity change from 0 to 128 [ 174.807178][ T6553] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.844876][ T6553] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.942937][ T6682] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 174.999116][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.012948][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.105302][ T5297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 175.169988][ T6686] TC_ACT_REPEAT abuse ? [ 175.174837][ T5297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.188106][ T5625] Bluetooth: hci3: command 0x040f tx timeout [ 175.194560][ T5297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.204390][ T6682] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 175.233110][ T6682] FAT-fs (loop0): Filesystem has been set read-only [ 175.240547][ T6682] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 175.252028][ T6682] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 1) [ 175.266509][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 175.380534][ T4187] FAT-fs (loop0): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 175.739208][ T6704] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 175.829109][ T4263] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 175.897888][ T4860] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 175.925758][ T4860] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 175.989063][ T4860] asix: probe of 10-1:0.188 failed with error -71 [ 176.034974][ T4860] usb 10-1: USB disconnect, device number 2 [ 176.054827][ T6712] loop6: detected capacity change from 0 to 512 [ 176.100423][ T4263] usb 1-1: Using ep0 maxpacket: 32 [ 176.192231][ T6712] EXT4-fs error (device loop6): ext4_orphan_get:1410: inode #15: comm syz.6.453: iget: bad i_size value: 38620345925642 [ 176.228397][ T4263] usb 1-1: config 0 has an invalid interface number: 12 but max is 0 [ 176.247203][ T4263] usb 1-1: config 0 has no interface number 0 [ 176.254308][ T4263] usb 1-1: config 0 interface 12 has no altsetting 0 [ 176.288713][ T6712] EXT4-fs error (device loop6): ext4_orphan_get:1415: comm syz.6.453: couldn't read orphan inode 15 (err -117) [ 176.319501][ T6712] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 176.428192][ T4263] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 176.438818][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.478444][ T4263] usb 1-1: Product: syz [ 176.482854][ T4263] usb 1-1: Manufacturer: syz [ 176.487538][ T4263] usb 1-1: SerialNumber: syz [ 176.539458][ T4263] usb 1-1: config 0 descriptor?? [ 176.675411][ T6737] loop9: detected capacity change from 0 to 512 [ 176.746421][ T6737] EXT4-fs (loop9): Ignoring removed orlov option [ 176.763664][ T6737] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 176.812390][ T6737] EXT4-fs (loop9): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 176.846101][ T6737] EXT4-fs (loop9): group descriptors corrupted! [ 177.002291][ T6737] loop9: detected capacity change from 0 to 4096 [ 177.148340][ T6748] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 177.210442][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 177.210457][ T26] audit: type=1800 audit(1789410905.515:12): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.458" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 177.270713][ T4860] Bluetooth: hci3: command 0x0419 tx timeout [ 177.516779][ T6729] loop1: detected capacity change from 0 to 32768 [ 177.577832][ T6761] loop2: detected capacity change from 0 to 256 [ 177.675308][ T6729] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 177.821067][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 177.970648][ T6771] kvm: pic: non byte read [ 177.975253][ T6771] kvm: pic: non byte read [ 178.006047][ T6771] kvm: pic: non byte read [ 178.012444][ T6771] kvm: pic: non byte read [ 178.034559][ T6771] kvm: pic: non byte read [ 178.038390][ T4860] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 178.054356][ T6771] kvm: pic: non byte read [ 178.076680][ T6771] kvm: pic: non byte read [ 178.086661][ T6771] kvm: pic: non byte read [ 178.094839][ T6771] kvm: pic: non byte read [ 178.105026][ T6771] kvm: pic: non byte read [ 178.295553][ T4860] usb 3-1: Using ep0 maxpacket: 32 [ 178.432093][ T4860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 178.450996][ T4860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 178.465742][ T4860] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 178.483813][ T4860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.528949][ T4860] usb 3-1: config 0 descriptor?? [ 178.579269][ T4860] hub 3-1:0.0: USB hub found [ 178.747234][ T6794] loop6: detected capacity change from 0 to 128 [ 178.776661][ T6794] FAT-fs (loop6): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 178.797876][ T4860] hub 3-1:0.0: 1 port detected [ 178.918257][ T4263] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 0 failed: -71 [ 178.936147][ T4263] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71 [ 178.954948][ T4263] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 178.994107][ T4263] f81534: probe of 1-1:0.12 failed with error -71 [ 179.036831][ T4263] usb 1-1: USB disconnect, device number 9 [ 179.079069][ T6753] syz.9.458 (6753) used greatest stack depth: 20032 bytes left [ 179.403842][ T6808] loop9: detected capacity change from 0 to 512 [ 179.477967][ T1110] hub 3-1:0.0: activate --> -90 [ 179.501085][ T6808] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 179.537846][ T6808] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 179.629043][ T6808] EXT4-fs (loop9): 1 truncate cleaned up [ 179.634757][ T6808] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,mblk_io_submit,stripe=0x0000000000004000,errors=remount-ro,max_batch_time=0x0000000000000004,. Quota mode: none. [ 179.717411][ T6818] binder: 6817:6818 ioctl c0306201 200000000080 returned -14 [ 179.771877][ T6818] binder: 6817:6818 ioctl c0306201 2000000003c0 returned -14 [ 179.860014][ T6808] EXT4-fs error (device loop9): swap_inode_boot_loader:128: comm syz.9.469: inode #5: comm syz.9.469: iget: illegal inode # [ 179.916469][ T6808] EXT4-fs (loop9): Remounting filesystem read-only [ 179.924553][ T4860] usb 3-1: USB disconnect, device number 3 [ 181.973290][ T6852] loop0: detected capacity change from 0 to 65536 [ 182.047778][ T4860] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 182.111182][ T6852] XFS (loop0): Mounting V5 Filesystem [ 182.127872][ T1110] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 182.287880][ T4860] usb 3-1: Using ep0 maxpacket: 32 [ 182.293736][ T6852] XFS (loop0): Ending clean mount [ 182.435232][ T4860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.453569][ T4860] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.463917][ T4860] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 182.484157][ T4860] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.506208][ T4860] usb 3-1: config 0 descriptor?? [ 182.512747][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.530121][ T1110] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 182.543279][ T1110] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 182.568143][ T1110] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 182.577581][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.630844][ T1110] usb 2-1: config 0 descriptor?? [ 182.825325][ T4263] XFS (loop0): Metadata CRC error detected at xfs_agf_read_verify+0x192/0x250, xfs_agf block 0x1 [ 182.860236][ T4263] XFS (loop0): Unmount and run xfs_repair [ 182.866027][ T4263] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 182.892632][ T4187] XFS (loop0): Unmounting Filesystem [ 182.894414][ T4263] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 182.949035][ T4263] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 182.976952][ T4263] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 183.001443][ T4263] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 183.029921][ T4263] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 183.060405][ T4263] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.070817][ T4860] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 183.090919][ T4263] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.100283][ T4860] ft260 0003:0403:6030.0003: unknown main item tag 0x0 [ 183.111300][ T4263] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 183.135276][ T4860] ft260 0003:0403:6030.0003: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 183.149973][ T5625] XFS (loop0): metadata I/O error in "xfs_read_agf+0x239/0x4f0" at daddr 0x1 len 1 error 74 [ 183.211741][ T1110] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 183.231005][ T5625] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1540/0x1b30 (fs/xfs/libxfs/xfs_defer.c:504). Shutting down filesystem. [ 183.304055][ T5625] XFS (loop0): Please unmount the filesystem and rectify the problem(s) [ 183.313459][ T1110] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 183.358071][ T4860] ft260 0003:0403:6030.0003: chip code: 0000 0000 [ 183.456724][ T5625] usb 2-1: USB disconnect, device number 7 [ 183.540632][ T6922] fido_id[6922]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 183.735371][ T1110] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 183.787932][ T4860] ft260 0003:0403:6030.0003: failed to retrieve status: -32, no wakeup [ 183.992363][ T6935] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 184.098015][ T1110] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 184.130786][ T1110] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 184.157764][ T1110] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.219600][ T1110] usb 7-1: config 0 descriptor?? [ 184.260122][ T1110] pwc: Askey VC010 type 2 USB webcam detected. [ 184.293109][ T5251] usb 3-1: USB disconnect, device number 4 [ 184.556213][ T6950] FAULT_INJECTION: forcing a failure. [ 184.556213][ T6950] name failslab, interval 1, probability 0, space 0, times 0 [ 184.623004][ T6950] CPU: 1 PID: 6950 Comm: syz.1.492 Not tainted syzkaller #0 [ 184.630462][ T6950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 184.640749][ T6950] Call Trace: [ 184.644069][ T6950] [ 184.647036][ T6950] dump_stack_lvl+0x188/0x250 [ 184.651770][ T6950] ? show_regs_print_info+0x20/0x20 [ 184.657040][ T6950] ? load_image+0x410/0x410 [ 184.661601][ T6950] ? __might_sleep+0xf0/0xf0 [ 184.666333][ T6950] ? __lock_acquire+0x7b50/0x7b50 [ 184.671452][ T6950] should_fail+0x383/0x4b0 [ 184.675934][ T6950] should_failslab+0x5/0x20 [ 184.680688][ T6950] slab_pre_alloc_hook+0x51/0xc0 [ 184.685717][ T6950] kmem_cache_alloc_trace+0x47/0x290 [ 184.688532][ T1110] pwc: recv_control_msg error -32 req 02 val 2b00 [ 184.691049][ T6950] ? rfkill_fop_open+0x168/0x390 [ 184.702462][ T6950] rfkill_fop_open+0x168/0x390 [ 184.707285][ T6950] ? rfkill_fop_ioctl+0x230/0x230 [ 184.712359][ T6950] misc_open+0x31f/0x390 [ 184.716654][ T6950] chrdev_open+0x585/0x5f0 [ 184.721206][ T6950] ? cd_forget+0x160/0x160 [ 184.725678][ T6950] ? fsnotify_perm+0x3a7/0x560 [ 184.730495][ T6950] ? cd_forget+0x160/0x160 [ 184.735063][ T6950] do_dentry_open+0x7f7/0xf90 [ 184.739805][ T6950] ? vfs_open+0x2b/0x80 [ 184.744033][ T6950] path_openat+0x2718/0x2fb0 [ 184.748706][ T6950] ? __kasan_slab_alloc+0xa9/0xc0 [ 184.753860][ T6950] ? do_filp_open+0x400/0x400 [ 184.758608][ T6950] do_filp_open+0x1df/0x400 [ 184.759198][ T1110] pwc: recv_control_msg error -32 req 02 val 2700 [ 184.763157][ T6950] ? vfs_tmpfile+0x300/0x300 [ 184.763206][ T6950] ? _raw_spin_unlock+0x24/0x40 [ 184.763228][ T6950] ? alloc_fd+0x59e/0x650 [ 184.763265][ T6950] do_sys_openat2+0x14b/0x500 [ 184.763287][ T6950] ? __lock_acquire+0x7b50/0x7b50 [ 184.763315][ T6950] ? do_sys_open+0xe0/0xe0 [ 184.763337][ T6950] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 184.763367][ T6950] ? lock_chain_count+0x20/0x20 [ 184.763398][ T6950] __x64_sys_openat+0x135/0x160 [ 184.763425][ T6950] do_syscall_64+0x4c/0xa0 [ 184.763446][ T6950] ? clear_bhb_loop+0x30/0x80 [ 184.763467][ T6950] ? clear_bhb_loop+0x30/0x80 [ 184.763492][ T6950] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 184.763516][ T6950] RIP: 0033:0x7f8a33cbc159 [ 184.763537][ T6950] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 184.763557][ T6950] RSP: 002b:00007f8a31f14028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 184.763580][ T6950] RAX: ffffffffffffffda RBX: 00007f8a33f43fa0 RCX: 00007f8a33cbc159 [ 184.763596][ T6950] RDX: 0000000000022883 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 184.763611][ T6950] RBP: 00007f8a33d5303b R08: 0000000000000000 R09: 0000000000000000 [ 184.763625][ T6950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.763639][ T6950] R13: 00007f8a33f44038 R14: 00007f8a33f43fa0 R15: 00007ffef83a5828 [ 184.763672][ T6950] [ 184.839117][ T6955] loop9: detected capacity change from 0 to 256 [ 185.048333][ T1110] pwc: recv_control_msg error -32 req 02 val 2c00 [ 185.089322][ T1110] pwc: recv_control_msg error -32 req 04 val 1000 [ 185.138020][ T1110] pwc: recv_control_msg error -32 req 04 val 1300 [ 185.177886][ T1110] pwc: recv_control_msg error -32 req 04 val 1400 [ 185.217825][ T1110] pwc: recv_control_msg error -32 req 02 val 2000 [ 185.477954][ T1110] pwc: recv_control_msg error -71 req 04 val 1500 [ 185.497858][ T1110] pwc: recv_control_msg error -71 req 02 val 2500 [ 185.518079][ T1110] pwc: recv_control_msg error -71 req 02 val 2400 [ 185.555838][ T1110] pwc: recv_control_msg error -71 req 02 val 2600 [ 185.588364][ T1110] pwc: recv_control_msg error -71 req 02 val 2900 [ 185.617812][ T1110] pwc: recv_control_msg error -71 req 02 val 2800 [ 185.637918][ T1110] pwc: recv_control_msg error -71 req 04 val 1100 [ 185.657861][ T1110] pwc: recv_control_msg error -71 req 04 val 1200 [ 185.678653][ T1110] pwc: Registered as video103. [ 185.711125][ T1110] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input13 [ 185.761561][ T1110] usb 7-1: USB disconnect, device number 9 [ 186.243545][ T6991] loop0: detected capacity change from 0 to 2048 [ 186.312414][ T6991] UDF-fs: bad mount option "0xffffffffffffffff" or missing value [ 187.109455][ T7017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.176024][ T7019] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 187.560064][ T7028] loop2: detected capacity change from 0 to 1024 [ 187.598895][ T7028] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.688965][ T7028] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,journal_dev=0x0000000000000002,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,delalloc,nogrpid,noauto_da_alloc,dioread_nolock,,errors=continue. Quota mode: writeback. [ 187.752953][ T7041] netlink: 156 bytes leftover after parsing attributes in process `syz.0.509'. [ 187.764928][ T7041] netlink: 156 bytes leftover after parsing attributes in process `syz.0.509'. [ 187.776662][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 188.946129][ T7067] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 189.008004][ T7067] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 189.319607][ T7087] gadgetfs: bound to dummy_udc driver [ 189.608267][ T1107] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 189.657708][ C1] gadgetfs: connected [ 189.662434][ T7087] gadgetfs: suspended from state 3 [ 189.667881][ T7087] gadgetfs: disconnected [ 190.515261][ T7104] infiniband syz1: set active [ 190.567923][ T7104] infiniband syz1: added syz_tun [ 190.717221][ T7145] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.040026][ T7104] RDS/IB: syz1: added [ 191.065052][ T7104] smc: adding ib device syz1 with port count 1 [ 191.093186][ T7104] smc: ib device syz1 port 1 has pnetid [ 191.187831][ T1110] Bluetooth: hci0: command 0x0406 tx timeout [ 191.197400][ T1110] Bluetooth: hci2: command 0x0406 tx timeout [ 191.661204][ T7178] loop0: detected capacity change from 0 to 1024 [ 191.777907][ T7178] EXT4-fs (loop0): Ignoring removed orlov option [ 191.900514][ T7178] EXT4-fs (loop0): mounted filesystem without journal. Opts: block_validity,bsddf,nogrpid,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,grpjquota=,jqfmt=vfsold,min_batch_time=0x0000000000000000,,errors=continue. Quota mode: none. [ 192.338574][ T7197] binder: BINDER_SET_CONTEXT_MGR already set [ 192.345971][ T7197] binder: 7195:7197 ioctl 4018620d 2000000002c0 returned -16 [ 192.696313][ T7206] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 192.725218][ T7206] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 194.233868][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.242395][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.387924][ T21] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 195.798217][ T21] usb 3-1: config 0 has no interfaces? [ 195.803772][ T21] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 195.828382][ T21] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.842115][ T21] usb 3-1: config 0 descriptor?? [ 195.952028][ T7295] fuse: Bad value for 'fd' [ 196.195796][ T7305] kvm: pic: non byte write [ 196.215160][ T4729] usb 3-1: USB disconnect, device number 5 [ 196.501932][ T7325] overlayfs: failed to clone upperpath [ 197.229420][ T7355] loop2: detected capacity change from 0 to 4096 [ 197.266994][ T7355] EXT4-fs (loop2): Test dummy encryption mode enabled [ 197.268109][ T5251] Bluetooth: hci5: command 0x1003 tx timeout [ 197.297974][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 197.312852][ T7355] EXT4-fs (loop2): Test dummy encryption mode enabled [ 197.385624][ T7355] EXT4-fs (loop2): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000008000000,test_dummy_encryption=v1,noload,test_dummy_encryption=v1,nodiscard,data_err=ignore,usrquota,journal_ioprio=0x0000000000000000,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 197.444630][ T7346] loop6: detected capacity change from 0 to 32768 [ 197.501559][ T7346] JBD2: Ignoring recovery information on journal [ 197.679913][ T7346] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 198.196263][ T7396] binder: 7395:7396 ioctl c0306201 200000000680 returned -14 [ 198.434923][ T4986] ocfs2: Unmounting device (7,6) on (node local) [ 198.794598][ T7422] loop2: detected capacity change from 0 to 128 [ 198.877426][ T7427] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 198.902036][ T7422] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 198.910368][ T7422] System zones: 1-3, 19-19, 35-36 [ 198.942676][ T7422] EXT4-fs (loop2): mounted filesystem without journal. Opts: quota,debug,,errors=continue. Quota mode: writeback. [ 198.958168][ T7422] ext4 filesystem being mounted at /28/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 199.041520][ T7422] EXT4-fs warning (device loop2): ext4_group_extend:1823: can't shrink FS - resize aborted [ 199.073712][ T4860] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 199.307846][ T1107] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 199.349630][ T4857] Bluetooth: hci5: command 0x1001 tx timeout [ 199.363612][ T4195] Bluetooth: hci5: sending frame failed (-49) [ 199.447981][ T4860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 199.459818][ T4860] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 199.471023][ T4860] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 199.481770][ T7449] netlink: 4 bytes leftover after parsing attributes in process `syz.0.585'. [ 199.481769][ T4860] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.499299][ T4860] usb 7-1: config 0 descriptor?? [ 199.534895][ T7449] device syz_tun left promiscuous mode [ 199.570542][ T7449] bridge0: port 3(syz_tun) entered disabled state [ 199.704547][ T1107] usb 10-1: config 0 has no interfaces? [ 199.710359][ T1107] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00 [ 199.736503][ T1107] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.783966][ T1107] usb 10-1: config 0 descriptor?? [ 199.996674][ T4860] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 200.014752][ T4860] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 200.034731][ T4860] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 200.048614][ T4860] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 200.055864][ T4860] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 200.064016][ T4860] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 200.076361][ T4860] cp2112 0003:10C4:EA90.0005: unknown main item tag 0x0 [ 200.091275][ T4860] cp2112 0003:10C4:EA90.0005: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 200.218019][ T4860] cp2112 0003:10C4:EA90.0005: Part Number: 0x00 Device Version: 0x00 [ 200.399910][ T7501] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 200.849149][ T7425] cp2112 0003:10C4:EA90.0005: Error starting transaction: -38 [ 200.860013][ T4860] cp2112 0003:10C4:EA90.0005: error reading lock byte: -71 [ 200.902154][ T7530] FAULT_INJECTION: forcing a failure. [ 200.902154][ T7530] name failslab, interval 1, probability 0, space 0, times 0 [ 200.916875][ T4860] usb 7-1: USB disconnect, device number 10 [ 200.998068][ T7530] CPU: 1 PID: 7530 Comm: syz.2.599 Not tainted syzkaller #0 [ 201.005429][ T7530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 201.018551][ T7530] Call Trace: [ 201.021878][ T7530] [ 201.026081][ T7530] dump_stack_lvl+0x188/0x250 [ 201.030825][ T7530] ? show_regs_print_info+0x20/0x20 [ 201.036081][ T7530] ? load_image+0x410/0x410 [ 201.040645][ T7530] ? __might_sleep+0xf0/0xf0 [ 201.045292][ T7530] ? __lock_acquire+0x7b50/0x7b50 [ 201.050393][ T7530] should_fail+0x383/0x4b0 [ 201.054942][ T7530] should_failslab+0x5/0x20 [ 201.059527][ T7530] slab_pre_alloc_hook+0x51/0xc0 [ 201.064526][ T7530] __kmalloc_node_track_caller+0x68/0x3a0 [ 201.070315][ T7530] ? __ip_append_data+0x215b/0x3320 [ 201.075573][ T7530] ? __alloc_skb+0xf4/0x750 [ 201.080777][ T7530] ? __ip_append_data+0x215b/0x3320 [ 201.086032][ T7530] __alloc_skb+0x22c/0x750 [ 201.090508][ T7530] __ip_append_data+0x215b/0x3320 [ 201.095597][ T7530] ? verify_lock_unused+0x140/0x140 [ 201.100878][ T7530] ? raw_send_hdrinc+0x10f0/0x10f0 [ 201.106082][ T7530] ? ip_setup_cork+0x870/0x870 [ 201.110897][ T7530] ? ipv4_mtu+0x309/0x420 [ 201.115288][ T7530] ? ip_setup_cork+0x48f/0x870 [ 201.120111][ T7530] ip_append_data+0x132/0x1a0 [ 201.124839][ T7530] ? raw_send_hdrinc+0x10f0/0x10f0 [ 201.130195][ T7530] raw_sendmsg+0x1254/0x18b0 [ 201.134873][ T7530] ? compat_raw_ioctl+0x60/0x60 [ 201.139945][ T7530] ? tomoyo_socket_sendmsg_permission+0x212/0x2f0 [ 201.146456][ T7530] ? aa_sock_msg_perm+0x94/0x150 [ 201.151454][ T7530] ? sock_rps_record_flow+0x17/0x3b0 [ 201.156798][ T7530] ? inet_sendmsg+0x7a/0x2a0 [ 201.161440][ T7530] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 201.166781][ T7530] ? inet_send_prepare+0x250/0x250 [ 201.171974][ T7530] ____sys_sendmsg+0x5be/0x8f0 [ 201.177347][ T7530] ? __sys_sendmsg_sock+0x30/0x30 [ 201.182451][ T7530] ? import_iovec+0x6f/0xa0 [ 201.187005][ T7530] ___sys_sendmsg+0x236/0x2e0 [ 201.191748][ T7530] ? __sys_sendmsg+0x290/0x290 [ 201.196611][ T7530] __se_sys_sendmsg+0x1b7/0x2a0 [ 201.201602][ T7530] ? __x64_sys_sendmsg+0x80/0x80 [ 201.206760][ T7530] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 201.212810][ T7530] ? lockdep_hardirqs_on+0x94/0x140 [ 201.218073][ T7530] do_syscall_64+0x4c/0xa0 [ 201.222769][ T7530] ? clear_bhb_loop+0x30/0x80 [ 201.227890][ T7530] ? clear_bhb_loop+0x30/0x80 [ 201.232836][ T7530] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 201.239144][ T7530] RIP: 0033:0x7fe287d45159 [ 201.243736][ T7530] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 201.263867][ T7530] RSP: 002b:00007fe285f9d028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 201.272335][ T7530] RAX: ffffffffffffffda RBX: 00007fe287fccfa0 RCX: 00007fe287d45159 [ 201.280376][ T7530] RDX: 0000000000000000 RSI: 0000200000000780 RDI: 0000000000000005 [ 201.288402][ T7530] RBP: 00007fe287ddc03b R08: 0000000000000000 R09: 0000000000000000 [ 201.296419][ T7530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.304442][ T7530] R13: 00007fe287fcd038 R14: 00007fe287fccfa0 R15: 00007fffafcf3238 [ 201.312497][ T7530] [ 201.364287][ T7531] fido_id[7531]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 201.427951][ T5625] Bluetooth: hci5: command 0x1009 tx timeout [ 201.844778][ T4860] usb 10-1: USB disconnect, device number 3 [ 201.920691][ T7549] loop6: detected capacity change from 0 to 8192 [ 202.064176][ T26] audit: type=1804 audit(1789410930.365:13): pid=7549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.604" name="/newroot/77/bus/bus" dev="loop6" ino=1048619 res=1 errno=0 [ 202.164035][ T7561] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 202.182448][ T7561] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 202.745849][ T7587] loop2: detected capacity change from 0 to 128 [ 202.886782][ T7589] loop6: detected capacity change from 0 to 8192 [ 202.904579][ T7587] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 202.947189][ T7587] hpfs: filesystem error: improperly stopped [ 202.967235][ T7587] hpfs: You really don't want any checks? You are crazy... [ 202.976158][ T7587] hpfs: hpfs_map_sector(): read error [ 202.982333][ T7587] hpfs: code page support is disabled [ 202.991552][ T4271] loop6: p1 p2 p3 [ 203.002535][ T7587] hpfs: hpfs_map_4sectors(): unaligned read [ 203.003579][ T4271] loop6: partition table partially beyond EOD, [ 203.024467][ T7587] hpfs: hpfs_map_4sectors(): unaligned read [ 203.032121][ T4271] truncated [ 203.048197][ T7587] hpfs: filesystem error: unable to find root dir [ 203.071771][ T4271] loop6: p1 start 68157184 is beyond EOD, truncated [ 203.102880][ T7587] hpfs: hpfs_map_4sectors(): unaligned read [ 203.144896][ T7587] hpfs: hpfs_map_sector(): read error [ 203.166035][ T7589] loop6: p1 p2 p3 [ 203.176483][ T7589] loop6: partition table partially beyond EOD, truncated [ 203.196276][ T7587] hpfs: hpfs_map_4sectors(): unaligned read [ 203.208403][ T7589] loop6: p1 start 68157184 is beyond EOD, truncated [ 203.213488][ T7587] hpfs: hpfs_map_sector(): read error [ 203.227797][ T4860] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 203.234817][ T7587] hpfs: hpfs_map_4sectors(): unaligned read [ 203.247389][ T7587] hpfs: hpfs_map_sector(): read error [ 203.477981][ T4860] usb 10-1: Using ep0 maxpacket: 8 [ 203.598079][ T4860] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 203.617900][ T4860] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.662426][ T4860] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.690918][ T4327] udevd[4327]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 203.694230][ T4860] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.726968][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 203.771379][ T4860] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.804297][ T4271] udevd[4271]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 203.821222][ T4860] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 203.833661][ T4327] udevd[4327]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 203.844816][ T4860] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.137968][ T4860] usb 10-1: GET_CAPABILITIES returned 0 [ 204.143841][ T4860] usbtmc 10-1:16.0: can't read capabilities [ 204.568021][ T3574] usb 10-1: USB disconnect, device number 4 [ 205.369167][ T7678] loop5: detected capacity change from 0 to 4095 [ 205.431171][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 205.460124][ C1] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.471691][ C1] Buffer I/O error on dev loop5, logical block 480, async page read [ 205.510572][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 22 prio class 0 [ 205.540505][ C1] blk_update_request: I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 205.551550][ C1] Buffer I/O error on dev loop5, logical block 0, async page read [ 205.949320][ T7702] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 206.170522][ T7714] mmap: syz.9.632 (7714) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 206.216802][ C0] blk_update_request: I/O error, dev loop5, sector 3840 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 206.228049][ C0] Buffer I/O error on dev loop5, logical block 480, async page read [ 206.618795][ T7724] kvm: pic: single mode not supported [ 206.619002][ T7724] kvm: pic: single mode not supported [ 206.625488][ T7724] kvm: pic: level sensitive irq not supported [ 206.631559][ T7724] kvm: pic: level sensitive irq not supported [ 206.648075][ T7724] kvm: pic: level sensitive irq not supported [ 206.655585][ T7724] kvm: pic: level sensitive irq not supported [ 206.673429][ T7724] kvm: pic: level sensitive irq not supported [ 206.690522][ T7724] kvm: pic: level sensitive irq not supported [ 206.707148][ T7724] kvm: pic: level sensitive irq not supported [ 206.726853][ T7724] kvm: pic: level sensitive irq not supported [ 206.738244][ T7724] kvm: pic: level sensitive irq not supported [ 206.754811][ T7724] kvm: pic: level sensitive irq not supported [ 208.189566][ T7738] loop1: detected capacity change from 0 to 32768 [ 208.320570][ T7738] (syz.1.639,7738,0):ocfs2_check_set_options:1207 ERROR: User quotas were requested, but this filesystem does not have the feature enabled. [ 208.430802][ T7738] (syz.1.639,7738,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 208.504180][ T7789] FAULT_INJECTION: forcing a failure. [ 208.504180][ T7789] name fail_futex, interval 1, probability 0, space 0, times 0 [ 208.618606][ T7789] CPU: 1 PID: 7789 Comm: syz.2.648 Not tainted syzkaller #0 [ 208.625977][ T7789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 208.636221][ T7789] Call Trace: [ 208.639557][ T7789] [ 208.642536][ T7789] dump_stack_lvl+0x188/0x250 [ 208.647275][ T7789] ? show_regs_print_info+0x20/0x20 [ 208.652562][ T7789] ? load_image+0x410/0x410 [ 208.657129][ T7789] ? place_entity+0x4f0/0x4f0 [ 208.661879][ T7789] should_fail+0x383/0x4b0 [ 208.666355][ T7789] get_futex_key+0x1a1/0x12d0 [ 208.671119][ T7789] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 208.677244][ T7789] ? futex_wait_restart+0x250/0x250 [ 208.682497][ T7789] ? lock_chain_count+0x20/0x20 [ 208.688845][ T7789] futex_wait_setup+0x4b/0x520 [ 208.693681][ T7789] ? lockdep_hardirqs_on+0x94/0x140 [ 208.698937][ T7789] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 208.704894][ T7789] futex_wait+0x22f/0x680 [ 208.709315][ T7789] ? do_futex+0x12b0/0x12b0 [ 208.713889][ T7789] ? verify_lock_unused+0x140/0x140 [ 208.719129][ T7789] ? verify_lock_unused+0x140/0x140 [ 208.724553][ T7789] do_futex+0xdc2/0x12b0 [ 208.728879][ T7789] ? futex_exit_release+0x1c0/0x1c0 [ 208.734139][ T7789] ? __context_tracking_exit+0x4c/0x80 [ 208.739658][ T7789] __se_sys_futex+0x389/0x420 [ 208.744400][ T7789] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 208.750444][ T7789] ? __x64_sys_futex+0xf0/0xf0 [ 208.755270][ T7789] ? __x64_sys_futex+0x1d/0xf0 [ 208.760362][ T7789] do_syscall_64+0x4c/0xa0 [ 208.764834][ T7789] ? clear_bhb_loop+0x30/0x80 [ 208.769570][ T7789] ? clear_bhb_loop+0x30/0x80 [ 208.774334][ T7789] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 208.780286][ T7789] RIP: 0033:0x7fe287d45159 [ 208.784755][ T7789] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 208.804842][ T7789] RSP: 002b:00007fe285f9d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 208.813308][ T7789] RAX: ffffffffffffffda RBX: 00007fe287fccfa8 RCX: 00007fe287d45159 [ 208.821325][ T7789] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe287fccfa8 [ 208.829343][ T7789] RBP: 00007fe287fccfa0 R08: 0000000000000000 R09: 0000000000000000 [ 208.837366][ T7789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.845425][ T7789] R13: 00007fe287fcd038 R14: 00007fffafcf3150 R15: 00007fffafcf3238 [ 208.853461][ T7789] [ 209.458213][ T7805] loop9: detected capacity change from 0 to 512 [ 209.689628][ T7805] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 209.719965][ T7805] ext4 filesystem being mounted at /54/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 209.755563][ T7822] loop6: detected capacity change from 0 to 1024 [ 209.985184][ T7822] EXT4-fs (loop6): Ignoring removed nobh option [ 210.042762][ T7822] EXT4-fs (loop6): Mount option "data=journal" incompatible with ext2 [ 210.754905][ T7835] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 211.310718][ T7846] loop2: detected capacity change from 0 to 8192 [ 211.412657][ T26] audit: type=1804 audit(1789410939.715:14): pid=7846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.662" name="/newroot/47/bus/bus" dev="loop2" ino=1048621 res=1 errno=0 [ 212.261959][ T7870] 8021q: adding VLAN 0 to HW filter on device bond1 [ 212.352480][ T7883] loop2: detected capacity change from 0 to 256 [ 212.450082][ T7883] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011e7e, chksum : 0x06bedb5d, utbl_chksum : 0xe619d30d) [ 212.473256][ T7875] bond1 (unregistering): Released all slaves [ 212.671070][ T7892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.958338][ T7900] 9pnet: p9_errstr2errno: server reported unknown error 0xffffffffffffffff0HÇÀ_ [ 213.187882][ T4860] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 213.437876][ T4860] usb 2-1: Using ep0 maxpacket: 16 [ 213.558101][ T4860] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 213.580524][ T4860] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 213.784799][ T4860] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 213.812738][ T4860] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.841059][ T4860] usb 2-1: Product: syz [ 213.853977][ T4860] usb 2-1: Manufacturer: syz [ 213.863186][ T4860] usb 2-1: SerialNumber: syz [ 213.902215][ T4860] usb 2-1: config 0 descriptor?? [ 213.974913][ T4860] mcba_usb 2-1:0.0 can0: couldn't setup read URBs [ 214.021066][ T4860] mcba_usb 2-1:0.0 can0: couldn't start device: -90 [ 214.178091][ T4860] mcba_usb: probe of 2-1:0.0 failed with error -90 [ 214.220857][ T4860] usb 2-1: USB disconnect, device number 8 [ 214.404496][ T7930] loop9: detected capacity change from 0 to 40427 [ 214.434222][ T7930] F2FS-fs (loop9): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 214.476288][ T7930] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 214.515159][ T7930] F2FS-fs (loop9): invalid crc value [ 214.540298][ T7930] F2FS-fs (loop9): Found nat_bits in checkpoint [ 214.642676][ T7930] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 214.652508][ T7930] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5 [ 214.964302][ T7975] attempt to access beyond end of device [ 214.964302][ T7975] loop9: rw=2049, want=45104, limit=40427 [ 215.168027][ T3574] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 215.241481][ T6198] attempt to access beyond end of device [ 215.241481][ T6198] loop9: rw=2049, want=45112, limit=40427 [ 215.468296][ T3574] usb 2-1: Using ep0 maxpacket: 16 [ 215.514738][ T7995] binder: BINDER_SET_CONTEXT_MGR already set [ 215.520112][ T1107] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 215.533803][ T7995] binder: 7994:7995 ioctl 4018620d 200000000040 returned -16 [ 215.848632][ T3574] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 215.884358][ T3574] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.899011][ T3574] usb 2-1: Product: syz [ 215.903254][ T3574] usb 2-1: Manufacturer: syz [ 215.934784][ T3574] usb 2-1: SerialNumber: syz [ 215.948372][ T3574] r8152-cfgselector 2-1: config 0 descriptor?? [ 215.978427][ T1107] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 216.000263][ T8008] loop2: detected capacity change from 0 to 128 [ 216.009010][ T1107] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 216.168439][ T1107] usb 7-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice= 1.00 [ 216.193677][ T1107] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 216.207836][ T1107] usb 7-1: Product: syz [ 216.212297][ T1107] usb 7-1: Manufacturer: syz [ 216.264083][ T8011] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 216.289376][ T1107] mos7840 7-1:1.0: Moschip 7840/7820 USB Serial Driver converter detected [ 216.330414][ T8011] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 216.416215][ T8024] netlink: 'syz.2.701': attribute type 10 has an invalid length. [ 216.475048][ T8024] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 216.493419][ T7973] netlink: 32 bytes leftover after parsing attributes in process `syz.1.690'. [ 216.527964][ T3574] r8152-cfgselector 2-1: Unknown version 0x0000 [ 216.545770][ T3574] r8152-cfgselector 2-1: bad CDC descriptors [ 216.597527][ T3574] r8152-cfgselector 2-1: Unknown version 0x0000 [ 216.621272][ T3574] r8152-cfgselector 2-1: USB disconnect, device number 9 [ 216.882135][ T8039] FAULT_INJECTION: forcing a failure. [ 216.882135][ T8039] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 216.912445][ T8039] CPU: 0 PID: 8039 Comm: syz.9.704 Not tainted syzkaller #0 [ 216.919813][ T8039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 216.929915][ T8039] Call Trace: [ 216.933240][ T8039] [ 216.936286][ T8039] dump_stack_lvl+0x188/0x250 [ 216.941042][ T8039] ? show_regs_print_info+0x20/0x20 [ 216.946287][ T8039] ? load_image+0x410/0x410 [ 216.950886][ T8039] ? __lock_acquire+0x7b50/0x7b50 [ 216.956177][ T8039] ? proc_do_uuid+0x2c0/0x2c0 [ 216.960906][ T8039] ? stack_trace_save+0xa6/0xf0 [ 216.965919][ T8039] should_fail+0x383/0x4b0 [ 216.970405][ T8039] prepare_alloc_pages+0x1e3/0x5b0 [ 216.975589][ T8039] __alloc_pages+0x11b/0x480 [ 216.980246][ T8039] ? zone_statistics+0x170/0x170 [ 216.985238][ T8039] ? memset+0x1e/0x40 [ 216.989269][ T8039] ? alloc_pages+0x452/0x560 [ 216.993938][ T8039] __get_free_pages+0x8/0x30 [ 216.998837][ T8039] __genradix_ptr_alloc+0xda/0x350 [ 217.004129][ T8039] __genradix_prealloc+0x3e/0x80 [ 217.009119][ T8039] sctp_stream_init+0x10c/0x3c0 [ 217.014037][ T8039] sctp_association_new+0x10bf/0x2400 [ 217.019470][ T8039] sctp_connect_new_asoc+0x2da/0x6a0 [ 217.024829][ T8039] ? __sctp_connect+0xd80/0xd80 [ 217.029770][ T8039] ? sctp_get_af_specific+0x25/0x70 [ 217.035033][ T8039] ? sctp_endpoint_lookup_assoc+0xab/0x230 [ 217.041377][ T8039] __sctp_connect+0x5b3/0xd80 [ 217.046145][ T8039] ? sctp_send_asconf+0x170/0x170 [ 217.051229][ T8039] ? __local_bh_enable_ip+0x136/0x1c0 [ 217.056736][ T8039] ? lockdep_hardirqs_on+0x94/0x140 [ 217.061993][ T8039] ? __local_bh_enable_ip+0x136/0x1c0 [ 217.067419][ T8039] ? bpf_lsm_sctp_bind_connect+0x5/0x10 [ 217.073028][ T8039] ? security_sctp_bind_connect+0x85/0xb0 [ 217.078836][ T8039] sctp_setsockopt_connectx+0x101/0x1a0 [ 217.084473][ T8039] sctp_setsockopt+0x8eb/0xf80 [ 217.089289][ T8039] ? sock_common_recvmsg+0x1c0/0x1c0 [ 217.094628][ T8039] __sys_setsockopt+0x2bf/0x3d0 [ 217.099624][ T8039] __x64_sys_setsockopt+0xb1/0xc0 [ 217.104698][ T8039] do_syscall_64+0x4c/0xa0 [ 217.109191][ T8039] ? clear_bhb_loop+0x30/0x80 [ 217.113946][ T8039] ? clear_bhb_loop+0x30/0x80 [ 217.118833][ T8039] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 217.124865][ T8039] RIP: 0033:0x7fd9893da159 [ 217.129336][ T8039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.149914][ T8039] RSP: 002b:00007fd987611028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.159531][ T8039] RAX: ffffffffffffffda RBX: 00007fd989662090 RCX: 00007fd9893da159 [ 217.167899][ T8039] RDX: 000000000000006e RSI: 0000000000000084 RDI: 0000000000000003 [ 217.176001][ T8039] RBP: 00007fd98947103b R08: 000000000000001c R09: 0000000000000000 [ 217.184129][ T8039] R10: 00002000000008c0 R11: 0000000000000246 R12: 0000000000000000 [ 217.192244][ T8039] R13: 00007fd989662128 R14: 00007fd989662090 R15: 00007ffe72192e28 [ 217.200389][ T8039] [ 217.384841][ T8058] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.706'. [ 217.616312][ T8073] loop1: detected capacity change from 0 to 128 [ 217.655062][ T8074] capability: warning: `syz.2.711' uses 32-bit capabilities (legacy support in use) [ 217.969814][ T8088] loop5: detected capacity change from 0 to 7 [ 217.981131][ T8090] overlayfs: failed to clone upperpath [ 218.013048][ T4327] Dev loop5: unable to read RDB block 7 [ 218.019033][ T4327] loop5: AHDI p1 p2 p3 [ 218.034913][ T4327] loop5: partition table partially beyond EOD, truncated [ 218.075167][ T4327] loop5: p1 start 1818582900 is beyond EOD, truncated [ 218.115537][ T4327] loop5: p3 start 335544320 is beyond EOD, truncated [ 218.146968][ T8088] Dev loop5: unable to read RDB block 7 [ 218.156146][ T8088] loop5: AHDI p1 p2 p3 [ 218.173712][ T8088] loop5: partition table partially beyond EOD, truncated [ 218.200950][ T8088] loop5: p1 start 1818582900 is beyond EOD, truncated [ 218.220216][ T8088] loop5: p3 start 335544320 is beyond EOD, truncated [ 218.498301][ T1107] mos7840: probe of ttyUSB0 failed with error -71 [ 218.531058][ T1107] usb 7-1: USB disconnect, device number 11 [ 218.580349][ T1107] mos7840 7-1:1.0: device disconnected [ 218.588724][ T8116] netlink: 64 bytes leftover after parsing attributes in process `syz.9.725'. [ 218.618008][ T8118] input: syz1 as /devices/virtual/input/input14 [ 218.679668][ T8116] device syzkaller1 entered promiscuous mode [ 218.698368][ T8116] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 218.896315][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 218.913562][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.730'. [ 219.661984][ T8175] block device autoloading is deprecated and will be removed. [ 219.818225][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 219.847477][ T8180] netlink: 8 bytes leftover after parsing attributes in process `syz.0.739'. [ 220.292556][ T8190] loop9: detected capacity change from 0 to 128 [ 220.385904][ T8190] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 220.428026][ T8190] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 220.659369][ T8185] loop1: detected capacity change from 0 to 32768 [ 220.781667][ T8185] XFS (loop1): Mounting V5 Filesystem [ 220.802190][ T8204] netlink: 15143 bytes leftover after parsing attributes in process `syz.6.746'. [ 221.049119][ T8185] XFS (loop1): Ending clean mount [ 221.106061][ T8215] loop9: detected capacity change from 0 to 256 [ 221.114061][ T8185] XFS (loop1): Quotacheck needed: Please wait. [ 221.243196][ T8215] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 221.265174][ T8185] XFS (loop1): Quotacheck: Done. [ 221.855391][ T8185] syz.1.741 (8185): drop_caches: 2 [ 221.991555][ T4186] XFS (loop1): Unmounting Filesystem [ 222.315888][ T8246] loop6: detected capacity change from 0 to 512 [ 222.436174][ T8246] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 222.567913][ T8246] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.708341][ T26] audit: type=1326 audit(1789410951.015:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.9.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9893da159 code=0x7fc00000 [ 222.815162][ T8264] fuse: Bad value for 'fd' [ 222.930624][ T8268] loop1: detected capacity change from 0 to 16 [ 223.044934][ T8268] erofs: (device loop1): mounted with root inode @ nid 36. [ 223.110777][ T8268] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.184002][ T8277] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36 [ 223.185919][ T8240] loop2: detected capacity change from 0 to 32768 [ 223.225049][ T8279] FAULT_INJECTION: forcing a failure. [ 223.225049][ T8279] name failslab, interval 1, probability 0, space 0, times 0 [ 223.247333][ T8268] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 223.269369][ T8279] CPU: 1 PID: 8279 Comm: syz.6.760 Not tainted syzkaller #0 [ 223.276738][ T8279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 223.286837][ T8279] Call Trace: [ 223.290161][ T8279] [ 223.293135][ T8279] dump_stack_lvl+0x188/0x250 [ 223.297868][ T8279] ? show_regs_print_info+0x20/0x20 [ 223.303120][ T8279] ? load_image+0x410/0x410 [ 223.307670][ T8279] ? __might_sleep+0xf0/0xf0 [ 223.312308][ T8279] ? __lock_acquire+0x7b50/0x7b50 [ 223.317398][ T8279] should_fail+0x383/0x4b0 [ 223.321911][ T8279] should_failslab+0x5/0x20 [ 223.326645][ T8279] slab_pre_alloc_hook+0x51/0xc0 [ 223.331632][ T8279] kmem_cache_alloc_node+0x47/0x2c0 [ 223.336878][ T8279] ? dup_task_struct+0x57/0xbc0 [ 223.341778][ T8279] dup_task_struct+0x57/0xbc0 [ 223.346498][ T8279] ? _raw_spin_unlock_irq+0x1f/0x40 [ 223.351739][ T8279] ? lockdep_hardirqs_on+0x94/0x140 [ 223.356993][ T8279] copy_process+0x61f/0x3e70 [ 223.361684][ T8279] ? __mutex_trylock_common+0x15c/0x260 [ 223.367305][ T8279] ? __pidfd_prepare+0x140/0x140 [ 223.372388][ T8279] ? __lock_acquire+0x7b50/0x7b50 [ 223.377473][ T8279] ? io_fallback_req_func+0x210/0x210 [ 223.382901][ T8279] ? io_fallback_req_func+0x210/0x210 [ 223.388331][ T8279] create_io_thread+0x111/0x180 [ 223.393240][ T8279] ? __se_sys_io_uring_setup+0x19c9/0x2900 [ 223.399674][ T8279] ? copy_process+0x3e70/0x3e70 [ 223.404576][ T8279] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 223.405014][ T8277] erofs: (device loop1): z_erofs_readahead: readahead error at page 87 @ nid 36 [ 223.410255][ T8279] ? io_fallback_req_func+0x210/0x210 [ 223.410303][ T8279] __se_sys_io_uring_setup+0x1d6e/0x2900 [ 223.410341][ T8279] ? __x64_sys_io_uring_setup+0x60/0x60 [ 223.410381][ T8279] ? lockdep_hardirqs_on+0x94/0x140 [ 223.410409][ T8279] do_syscall_64+0x4c/0xa0 [ 223.445968][ T8279] ? clear_bhb_loop+0x30/0x80 [ 223.450700][ T8279] ? clear_bhb_loop+0x30/0x80 [ 223.455605][ T8279] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 223.461552][ T8279] RIP: 0033:0x7f07aa560159 [ 223.466021][ T8279] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 223.486424][ T8279] RSP: 002b:00007f07a87b7fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 223.494890][ T8279] RAX: ffffffffffffffda RBX: 00002000000005c0 RCX: 00007f07aa560159 [ 223.502912][ T8279] RDX: 0000200000000440 RSI: 00002000000005c0 RDI: 0000000000000efe [ 223.510935][ T8279] RBP: 00007f07aa5f703b R08: 0000000000000000 R09: 0000000000000000 [ 223.513111][ T26] audit: type=1326 audit(1789410951.805:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8250 comm="syz.9.756" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fd9893da159 code=0x7fc00000 [ 223.518982][ T8279] R10: 0000200000000180 R11: 0000000000000206 R12: 0000200000000440 [ 223.519005][ T8279] R13: 0000200000000180 R14: 0000200000000100 R15: 00007ffc52f1bea8 [ 223.519037][ T8279] [ 223.572076][ T8240] (syz.2.753,8240,0):ocfs2_check_set_options:1207 ERROR: User quotas were requested, but this filesystem does not have the feature enabled. [ 223.577349][ T8281] erofs: (device loop1): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 223.626925][ T8281] erofs: (device loop1): z_erofs_readpage: failed to read, err [-117] [ 223.638847][ T8277] erofs: (device loop1): z_erofs_readahead: readahead error at page 86 @ nid 36 [ 223.653293][ T8277] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 84 of nid 36 [ 223.663234][ T8277] erofs: (device loop1): z_erofs_readahead: readahead error at page 85 @ nid 36 [ 223.674208][ T8277] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 348159 of nid 36 [ 223.684510][ T8277] erofs: (device loop1): z_erofs_readahead: readahead error at page 84 @ nid 36 [ 223.695749][ T8277] attempt to access beyond end of device [ 223.695749][ T8277] loop1: rw=524288, want=32, limit=16 [ 223.708151][ T8240] (syz.2.753,8240,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 224.524416][ T8324] binder: 8321:8324 ioctl c0306201 200000000080 returned -14 [ 224.687809][ T5251] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 224.706024][ T8324] binder: 8321:8324 ioctl c0306201 2000000003c0 returned -14 [ 225.618043][ T5251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 225.645426][ T5251] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.678688][ T5251] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 225.707739][ T5625] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 225.725411][ T5251] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 225.767769][ T5251] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.808205][ T5251] usb 2-1: config 0 descriptor?? [ 225.957851][ T5625] usb 3-1: Using ep0 maxpacket: 16 [ 226.003632][ T8361] fuse: Bad value for 'fd' [ 226.088022][ T5625] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 226.109287][ T5625] usb 3-1: config 0 interface 0 has no altsetting 0 [ 226.267971][ T5625] usb 3-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 226.290777][ T5251] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 226.311917][ T5625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.332709][ T5251] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 226.356606][ T5625] usb 3-1: Product: syz [ 226.451978][ T5625] usb 3-1: Manufacturer: syz [ 226.456741][ T5625] usb 3-1: SerialNumber: syz [ 226.487055][ T5625] usb 3-1: config 0 descriptor?? [ 226.797714][ C0] imon 3-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 226.834474][ T5625] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15 [ 227.028141][ T4729] Bluetooth: hci4: command 0x0406 tx timeout [ 227.061580][ T5625] imon:send_packet: packet tx failed (-71) [ 227.081223][ T5625] imon 3-1:0.0: panel buttons/knobs setup failed [ 227.987822][ T5625] rc_core: IR keymap rc-imon-pad not found [ 227.993827][ T5625] Registered IR keymap rc-empty [ 227.999584][ T4729] usb 2-1: reset full-speed USB device number 10 using dummy_hcd [ 228.051171][ T5625] imon 3-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 228.134153][ T5625] imon 3-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 228.177793][ T5625] imon:send_packet: packet tx failed (-71) [ 228.207940][ T5625] imon 3-1:0.0: remote input dev register failed [ 228.214475][ T5625] imon 3-1:0.0: imon_init_intf0: rc device setup failed [ 228.222403][ T8401] netlink: 'syz.1.789': attribute type 27 has an invalid length. [ 228.308655][ T5625] imon 3-1:0.0: unable to initialize intf0, err 0 [ 228.325531][ T5625] imon:imon_probe: failed to initialize context! [ 228.345877][ T5625] imon 3-1:0.0: unable to register, err -19 [ 228.378195][ T5625] usb 3-1: USB disconnect, device number 6 [ 228.425317][ T8401] bond0: (slave bond_slave_0): Releasing backup interface [ 228.460692][ T8401] device bond_slave_0 left promiscuous mode [ 228.898408][ T4857] usb 2-1: USB disconnect, device number 10 [ 229.125192][ T8433] loop2: detected capacity change from 0 to 512 [ 229.260731][ T8438] tipc: Started in network mode [ 229.265686][ T8438] tipc: Node identity ac1414aa, cluster identity 4711 [ 229.277207][ T8433] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 229.294172][ T8433] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 229.405019][ T8438] tipc: New replicast peer: 172.20.20.187 [ 229.539427][ T8438] tipc: Enabled bearer , priority 10 [ 230.482582][ T4474] tipc: Node number set to 2886997162 [ 230.888308][ T8472] binder: 8464:8472 ioctl c0306201 0 returned -14 [ 230.937440][ T8472] binder: 8464:8472 ioctl c0306201 200000000680 returned -14 [ 231.745842][ T8517] tipc: Started in network mode [ 231.768108][ T8517] tipc: Node identity ba7eb24a1bc4, cluster identity 4711 [ 231.785690][ T8517] tipc: Enabled bearer , priority 0 [ 231.923943][ T8509] device syzkaller0 entered promiscuous mode [ 231.936982][ T8527] loop1: detected capacity change from 0 to 512 [ 232.012961][ T8527] EXT4-fs (loop1): Ignoring removed oldalloc option [ 232.027526][ T8530] loop6: detected capacity change from 0 to 256 [ 232.051346][ T8506] tipc: Resetting bearer [ 232.095960][ T8530] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011e7e, chksum : 0x06bedb5d, utbl_chksum : 0xe619d30d) [ 232.136662][ T8527] EXT4-fs (loop1): mounted filesystem without journal. Opts: oldalloc,grpquota,noinit_itable,,errors=continue. Quota mode: writeback. [ 232.203566][ T8527] ext4 filesystem being mounted at /174/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 232.364749][ T8506] tipc: Disabling bearer [ 232.824290][ T8559] loop6: detected capacity change from 0 to 16 [ 232.973072][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ade5000: rx timeout, send abort [ 233.490561][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062e37400: rx timeout, send abort [ 233.498881][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802ade5000: abort rx timeout. Force session deactivation [ 233.999131][ C1] vcan0: j1939_tp_rxtimer: 0xffff888062e37400: abort rx timeout. Force session deactivation [ 234.387312][ T26] audit: type=1326 audit(1789410962.685:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33cbc159 code=0x7ffc0000 [ 234.432677][ T8621] loop1: detected capacity change from 0 to 1024 [ 234.457191][ T26] audit: type=1326 audit(1789410962.715:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33cbc159 code=0x7ffc0000 [ 234.486675][ T8621] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 234.517989][ T8621] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 234.557793][ T26] audit: type=1326 audit(1789410962.715:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8a33cbc159 code=0x7ffc0000 [ 234.590670][ T8621] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 234.611578][ T8621] System zones: 0-1, 3-36 [ 234.638754][ T26] audit: type=1326 audit(1789410962.715:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f8a33cbc159 code=0x7ffc0000 [ 234.664593][ T26] audit: type=1326 audit(1789410962.715:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f8a33cbbec2 code=0x7ffc0000 [ 234.690439][ T8621] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,abort,,errors=continue. Quota mode: writeback. [ 234.709804][ T26] audit: type=1326 audit(1789410962.725:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f8a33c7c98e code=0x7ffc0000 [ 234.766662][ T26] audit: type=1326 audit(1789410962.735:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f8a33cbbf87 code=0x7ffc0000 [ 234.858580][ T26] audit: type=1326 audit(1789410962.735:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f8a33c7c98e code=0x7ffc0000 [ 234.923320][ T26] audit: type=1326 audit(1789410962.735:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8a33cbbdeb code=0x7ffc0000 [ 234.992215][ T26] audit: type=1326 audit(1789410962.755:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8620 comm="syz.1.834" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f8a33c7c98e code=0x7ffc0000 [ 236.210664][ T8690] kvm: pic: non byte write [ 236.367434][ T8699] jffs2: notice: (8699) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 238.682509][ T8762] loop1: detected capacity change from 0 to 256 [ 238.738570][ T8762] exfat: Deprecated parameter 'utf8' [ 238.771349][ T8762] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd88, chksum : 0x48202bfc, utbl_chksum : 0xe619d30d) [ 239.539190][ T26] kauditd_printk_skb: 64 callbacks suppressed [ 239.539207][ T26] audit: type=1800 audit(1789410967.835:91): pid=8768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.864" name="/" dev="fuse" ino=4 res=0 errno=0 [ 241.960536][ T8838] loop1: detected capacity change from 0 to 32768 [ 242.227658][ C1] sched: RT throttling activated [ 242.324779][ T8838] JBD2: Ignoring recovery information on journal [ 242.491044][ T8838] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 242.801503][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 243.142929][ T8852] loop6: detected capacity change from 0 to 32768 [ 243.257089][ T8829] loop2: detected capacity change from 0 to 32768 [ 243.328829][ T8852] XFS (loop6): Mounting V5 Filesystem [ 243.667126][ T8852] XFS (loop6): Ending clean mount [ 243.690013][ T8852] XFS (loop6): Quotacheck needed: Please wait. [ 243.887362][ T8852] XFS (loop6): Quotacheck: Done. [ 244.329441][ T8905] EXT4-fs warning (device sda1): ext4_group_extend:1831: need to use ext2online to resize further [ 244.431695][ T8862] loop1: detected capacity change from 0 to 32768 [ 244.471193][ T4986] XFS (loop6): Unmounting Filesystem [ 244.631032][ T8862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.887 (8862) [ 244.702219][ T8862] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 244.744813][ T8862] BTRFS info (device loop1): using free space tree [ 244.765057][ T8862] BTRFS info (device loop1): has skinny extents [ 245.430144][ T8862] BTRFS info (device loop1): enabling ssd optimizations [ 245.614887][ T8955] kAFS: No cell specified [ 245.809647][ T5296] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 245.984954][ T8971] netlink: 28 bytes leftover after parsing attributes in process `syz.0.905'. [ 246.026796][ T8973] loop6: detected capacity change from 0 to 512 [ 246.145649][ T8973] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 246.232144][ T8973] EXT4-fs (loop6): 1 truncate cleaned up [ 246.241603][ T8973] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.269426][ T8973] EXT4-fs error (device loop6): ext4_empty_dir:3179: inode #2: block 13: comm syz.6.906: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 247.911191][ T8987] loop2: detected capacity change from 0 to 32768 [ 248.071604][ T9013] loop6: detected capacity change from 0 to 136 [ 248.228099][ T9013] Attempt to read inode for relocated directory [ 248.577935][ T8987] XFS (loop2): Mounting V5 Filesystem [ 248.722348][ T9036] overlayfs: './file1' not a directory [ 248.838545][ T8987] XFS (loop2): Ending clean mount [ 248.889254][ T9047] loop6: detected capacity change from 0 to 128 [ 248.936587][ T9047] EXT4-fs (loop6): Test dummy encryption mode enabled [ 249.023364][ T9047] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none. [ 249.048570][ T9047] ext4 filesystem being mounted at /142/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 249.071175][ T26] audit: type=1800 audit(1789410977.375:92): pid=8987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.908" name="file1" dev="loop2" ino=4428 res=0 errno=0 [ 249.235891][ T6553] XFS (loop2): Unmounting Filesystem [ 249.578426][ T9059] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.677841][ T4191] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 250.078077][ T4191] usb 2-1: Using ep0 maxpacket: 32 [ 250.236690][ T4191] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 250.247879][ T4191] usb 2-1: config 0 has no interface number 0 [ 250.254261][ T4191] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 250.307784][ T4191] usb 2-1: config 0 interface 1 has no altsetting 0 [ 250.478243][ T4191] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 250.497218][ T4191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 250.531192][ T9087] loop6: detected capacity change from 0 to 128 [ 250.548826][ T4191] usb 2-1: Product: syz [ 250.553144][ T4191] usb 2-1: Manufacturer: syz [ 250.561793][ T9084] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 250.569047][ T4191] usb 2-1: SerialNumber: syz [ 250.601406][ T4191] usb 2-1: config 0 descriptor?? [ 250.632672][ T9093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 250.704241][ T9095] netlink: 4 bytes leftover after parsing attributes in process `syz.0.932'. [ 250.737346][ T9087] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 250.815801][ T9087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 251.029480][ T4191] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 251.360612][ T4191] cx231xx 2-1:0.1: Failed to read PCB config [ 251.386676][ T4191] cx231xx: probe of 2-1:0.1 failed with error -71 [ 251.405207][ T9098] overlayfs: upper fs needs to support d_type. [ 251.422851][ T4191] usb 2-1: USB disconnect, device number 11 [ 251.451648][ T9098] overlayfs: upper fs does not support tmpfile. [ 251.773590][ T9115] loop6: detected capacity change from 0 to 256 [ 251.839824][ T9115] exfat: Unknown parameter 'ÿÿÿÿ01777777777777777777777"' [ 251.879708][ T4191] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 251.903338][ T9124] overlayfs: failed to clone upperpath [ 252.138016][ T4191] usb 2-1: Using ep0 maxpacket: 32 [ 252.257858][ T4191] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 252.265105][ T4227] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 252.267821][ T4191] usb 2-1: can't read configurations, error -71 [ 252.337829][ T5252] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 252.340971][ T9146] loop1: detected capacity change from 0 to 256 [ 252.522114][ T4227] usb 7-1: Using ep0 maxpacket: 32 [ 253.538301][ T4227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 253.549766][ T4227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 253.897875][ T4191] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 253.944620][ T9166] netlink: 'syz.9.949': attribute type 13 has an invalid length. [ 253.997776][ T9166] netlink: 'syz.9.949': attribute type 17 has an invalid length. [ 254.157765][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 254.169045][ T4227] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 254.188099][ T4191] usb 2-1: Using ep0 maxpacket: 32 [ 254.215260][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 254.265396][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 254.275767][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 254.303978][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): syz_tun: link becomes ready [ 254.323086][ T9166] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.335458][ T9166] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 254.358158][ T4191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.379524][ T4191] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 254.398941][ T4191] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00 [ 254.413980][ T4191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.428348][ T4227] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 254.437458][ T4227] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.447962][ T5252] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 254.451546][ T4191] usb 2-1: config 0 descriptor?? [ 254.457136][ T5252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.457162][ T5252] usb 3-1: Product: syz [ 254.488372][ T4227] usb 7-1: Product: syz [ 254.492605][ T4227] usb 7-1: Manufacturer: syz [ 254.497585][ T4227] usb 7-1: SerialNumber: syz [ 254.507020][ T5252] usb 3-1: Manufacturer: syz [ 254.522144][ T5252] usb 3-1: SerialNumber: syz [ 254.537842][ T4227] usb 7-1: config 0 descriptor?? [ 254.544360][ T5252] usb 3-1: config 0 descriptor?? [ 254.581637][ T4227] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input17 [ 254.607655][ T3543] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 254.663097][ T3543] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 254.719411][ T3543] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 254.752079][ T3543] xpad 7-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 254.766845][ T4227] usb 7-1: USB disconnect, device number 12 [ 254.819045][ T5252] adutux 3-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 254.978672][ T9163] udc-core: couldn't find an available UDC or it's busy [ 254.986399][ T9163] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 255.033534][ T4191] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 255.049057][ T4191] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 255.056460][ T4191] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 255.069243][ T4191] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 255.076458][ T4191] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0 [ 255.102340][ T4191] koneplus 0003:1E7D:2D51.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.1-1/input0 [ 255.232250][ T9163] udc-core: couldn't find an available UDC or it's busy [ 255.242010][ T9163] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 255.257151][ T9163] udc-core: couldn't find an available UDC or it's busy [ 255.266422][ T9163] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 255.288329][ T4191] koneplus 0003:1E7D:2D51.0007: couldn't init struct koneplus_device [ 255.307832][ T4191] koneplus 0003:1E7D:2D51.0007: couldn't install mouse [ 255.322268][ T4191] koneplus: probe of 0003:1E7D:2D51.0007 failed with error -71 [ 255.334135][ T4191] usb 2-1: USB disconnect, device number 14 [ 255.436270][ T9185] fido_id[9185]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 255.624300][ T9189] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 255.673361][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.679774][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.188161][ T5252] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 256.467995][ T5252] usb 2-1: Using ep0 maxpacket: 32 [ 256.670002][ T5252] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 256.717963][ T5252] usb 2-1: config 0 has no interface number 0 [ 256.775035][ T5252] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 256.874947][ T5252] usb 2-1: config 0 interface 1 has no altsetting 0 [ 256.920755][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 256.934886][ T4227] usb 3-1: USB disconnect, device number 7 [ 256.962170][ T9215] fuse: Unknown parameter '0xffffffffffffffff00000000000000000000' [ 257.016971][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.965'. [ 257.087985][ T5252] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 257.107386][ T5252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.162685][ T5252] usb 2-1: Product: syz [ 257.166918][ T5252] usb 2-1: Manufacturer: syz [ 257.215196][ T5252] usb 2-1: SerialNumber: syz [ 257.254529][ T5252] usb 2-1: config 0 descriptor?? [ 257.570144][ T5252] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 257.627830][ T5252] cx231xx 2-1:0.1: Failed to read PCB config [ 257.658146][ T5252] cx231xx: probe of 2-1:0.1 failed with error -71 [ 257.725993][ T5252] usb 2-1: USB disconnect, device number 15 [ 258.127579][ T9245] netlink: 12 bytes leftover after parsing attributes in process `syz.0.970'. [ 258.142530][ T5252] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 258.163928][ T9245] device ip6tnl1 entered promiscuous mode [ 258.401194][ T5252] usb 2-1: Using ep0 maxpacket: 32 [ 258.518052][ T5252] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 258.528280][ T5252] usb 2-1: config 0 has no interface number 0 [ 258.589927][ T5252] usb 2-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 258.660821][ T5252] usb 2-1: config 0 interface 1 has no altsetting 0 [ 259.277841][ T5252] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 259.286961][ T5252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.403515][ T5252] usb 2-1: Product: syz [ 259.427950][ T5252] usb 2-1: Manufacturer: syz [ 259.468992][ T5252] usb 2-1: config 0 descriptor?? [ 259.500372][ T9272] loop1: detected capacity change from 0 to 128 [ 259.520307][ T9278] netlink: 100 bytes leftover after parsing attributes in process `syz.0.977'. [ 259.564400][ T5252] usb 2-1: can't set config #0, error -71 [ 259.611992][ T5252] usb 2-1: USB disconnect, device number 16 [ 259.658101][ T9272] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 1, start 0000000d) [ 259.731334][ T9290] netlink: 1320 bytes leftover after parsing attributes in process `syz.6.975'. [ 259.742298][ T9272] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 259.827921][ T9295] netlink: 4 bytes leftover after parsing attributes in process `syz.1.976'. [ 260.979898][ T144] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.131553][ T144] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.007401][ T144] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.263994][ T144] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.737904][ T4474] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 262.992332][ T9355] tipc: Enabling of bearer rejected, failed to enable media [ 263.049642][ T9314] loop6: detected capacity change from 0 to 32768 [ 263.099852][ T9314] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.985 (9314) [ 263.158067][ T4474] usb 3-1: config 0 has no interfaces? [ 263.164498][ T4474] usb 3-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b [ 263.208546][ T4474] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.255880][ T4474] usb 3-1: config 0 descriptor?? [ 263.282485][ T9314] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 263.312623][ T9314] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 263.345538][ T9314] BTRFS info (device loop6): use zstd compression, level 3 [ 263.373507][ T9314] BTRFS info (device loop6): using free space tree [ 263.396478][ T9314] BTRFS info (device loop6): has skinny extents [ 263.563920][ T4474] usb 3-1: USB disconnect, device number 8 [ 263.666341][ T9314] BTRFS info (device loop6): enabling ssd optimizations [ 263.803079][ T26] audit: type=1800 audit(1789410992.105:93): pid=9314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.985" name="bus" dev="loop6" ino=263 res=0 errno=0 [ 264.764796][ T9417] Set syz1 is full, maxelem 2 reached [ 264.840438][ T144] device hsr_slave_0 left promiscuous mode [ 264.880689][ T144] device hsr_slave_1 left promiscuous mode [ 264.918536][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.926039][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.991702][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.017840][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.042469][ T144] device bridge_slave_1 left promiscuous mode [ 265.077944][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.104397][ T144] device bridge_slave_0 left promiscuous mode [ 265.124458][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.212979][ T144] device veth1_macvtap left promiscuous mode [ 265.229561][ T144] device veth0_macvtap left promiscuous mode [ 265.247203][ T144] device veth1_vlan left promiscuous mode [ 265.268203][ T144] device veth0_vlan left promiscuous mode [ 265.452132][ T5252] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 265.763426][ T144] team0 (unregistering): Port device team_slave_1 removed [ 265.812944][ T144] team0 (unregistering): Port device team_slave_0 removed [ 265.818398][ T5252] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 265.838022][ T5297] wlan1: Trigger new scan to find an IBSS to join [ 265.848227][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 265.874844][ T5252] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 265.885335][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 265.896575][ T5252] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 265.918083][ T5252] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 265.934361][ T5252] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 265.943877][ T5252] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.965734][ T5252] usb 7-1: config 0 descriptor?? [ 266.092187][ T144] bond0 (unregistering): Released all slaves [ 266.217913][ T9432] udc-core: couldn't find an available UDC or it's busy [ 266.224922][ T9432] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 266.348028][ T5252] hdpvr 7-1:0.0: firmware version 0xff dated ¸@ [ 266.355479][ T5252] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 266.947737][ T5253] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 267.148573][ T5252] hdpvr 7-1:0.0: Could not setup controls [ 267.165142][ T5252] hdpvr 7-1:0.0: registering videodev failed [ 267.220812][ T5252] hdpvr: probe of 7-1:0.0 failed with error -71 [ 267.274307][ T5252] usb 7-1: USB disconnect, device number 13 [ 267.410038][ T9485] md: array md0 already has disks! [ 267.479564][ T5253] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 267.501696][ T5253] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.543777][ T5253] usb 2-1: Product: syz [ 267.559009][ T5253] usb 2-1: Manufacturer: syz [ 267.575960][ T5253] usb 2-1: SerialNumber: syz [ 267.600678][ T9485] block device autoloading is deprecated and will be removed. [ 267.782266][ T9489] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 267.807896][ T9489] md: pers->run() failed ... [ 268.124018][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 268.878643][ T9501] netlink: 208 bytes leftover after parsing attributes in process `syz.0.1021'. [ 269.673338][ T9521] sch_fq: defrate 53322 ignored. [ 269.838347][ T5296] wlan1: Trigger new scan to find an IBSS to join [ 269.962594][ T1225] wlan1: Creating new IBSS network, BSSID 46:2d:f1:a4:5b:c8 [ 269.997915][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 270.057864][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 270.127797][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 270.177804][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 270.222717][ T9532] netlink: 'syz.2.1030': attribute type 27 has an invalid length. [ 270.242610][ T9532] netlink: 'syz.2.1030': attribute type 4 has an invalid length. [ 270.259530][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 270.269261][ T9532] netlink: 144 bytes leftover after parsing attributes in process `syz.2.1030'. [ 270.337899][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 270.397859][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 270.468188][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 270.547904][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -71 [ 270.589228][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 270.626330][ T9538] capability: warning: `syz.9.1032' uses deprecated v2 capabilities in a way that may be insecure [ 270.661142][ T5253] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 270.700061][ T5253] lan78xx: probe of 2-1:1.0 failed with error -71 [ 270.708686][ T9544] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 270.763082][ T9554] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 270.796052][ T5253] usb 2-1: USB disconnect, device number 17 [ 272.229722][ T9592] device syzkaller0 entered promiscuous mode [ 273.176908][ T9627] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 273.236427][ T9631] device syzkaller0 entered promiscuous mode [ 273.722991][ T5252] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 274.687996][ T5252] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 274.717730][ T5252] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 274.848065][ T5252] usb 2-1: New USB device found, idVendor=08b7, idProduct=ec00, bcdDevice= 0.00 [ 274.870485][ T5252] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 274.892948][ T5252] usb 2-1: SerialNumber: syz [ 275.213219][ T5252] usb 2-1: 0:2 : does not exist [ 275.277361][ T5252] usb 2-1: USB disconnect, device number 18 [ 275.338783][ T4327] udevd[4327]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 275.458551][ T9640] loop2: detected capacity change from 0 to 32768 [ 276.501740][ T9674] loop2: detected capacity change from 0 to 131072 [ 276.573508][ T9674] F2FS-fs (loop2): Wrong secs_per_zone / total_sections (512, 24) [ 276.581777][ T9674] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock [ 276.591209][ T9674] F2FS-fs (loop2): Test dummy encryption mode enabled [ 276.604588][ T9674] F2FS-fs (loop2): invalid crc value [ 276.645955][ T9674] F2FS-fs (loop2): Found nat_bits in checkpoint [ 276.682037][ T9674] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix. [ 276.696568][ T9674] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0 [ 276.709209][ T9674] F2FS-fs (loop2): Start checkpoint disabled! [ 276.769290][ T9674] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0 [ 276.776387][ T9674] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 278.714616][ T4227] Bluetooth: hci1: command 0x0406 tx timeout [ 278.721797][ T9733] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 279.471143][ T1225] wlan1: Created IBSS using preconfigured BSSID 00:8d:8d:ff:00:00 [ 279.496348][ T1225] wlan1: Creating new IBSS network, BSSID 00:8d:8d:ff:00:00 [ 279.524579][ T9760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1084'. [ 279.552863][ T9761] loop2: detected capacity change from 0 to 2048 [ 279.720583][ T9760] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.904386][ T9763] 8021q: adding VLAN 0 to HW filter on device bond1 [ 279.973807][ T9763] bond1: (slave gre2): The slave device specified does not support setting the MAC address [ 279.995813][ T9763] bond1: (slave gre2): Error -95 calling set_mac_address [ 280.120565][ T9729] loop1: detected capacity change from 0 to 32768 [ 280.192831][ T9764] device macvlan2 entered promiscuous mode [ 280.231670][ T9764] device bond1 entered promiscuous mode [ 280.274409][ T9764] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.343904][ T9764] device bond1 left promiscuous mode [ 280.356320][ T9729] JBD2: Ignoring recovery information on journal [ 280.598042][ T9729] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 280.960618][ T9729] syz.1.1077 (9729) used greatest stack depth: 16736 bytes left [ 281.110021][ T4186] ocfs2: Unmounting device (7,1) on (node local) [ 281.498398][ T9811] md: array md0 already has disks! [ 281.528424][ T9811] md: could not open device unknown-block(1,1). [ 281.558012][ T9811] md: error, md_import_device() returned -16 [ 281.578346][ T9769] loop2: detected capacity change from 0 to 32768 [ 281.700664][ T9769] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1 [ 281.700664][ T9769] [ 281.755209][ T9811] md/raid10:md0: chunk size must be at least PAGE_SIZE(4096) and be a power of 2. [ 281.783015][ T9811] md: pers->run() failed ... [ 281.805130][ T9821] md: array md0 already has disks! [ 282.484446][ T4476] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 282.565981][ T4476] hid-generic 0000:0000:0000.0008: hidraw0: HID v0.00 Device [syz1] on syz0 [ 282.789604][ T9844] loop6: detected capacity change from 0 to 4096 [ 282.808499][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1099'. [ 283.341141][ T9844] EXT4-fs (loop6): Test dummy encryption mode enabled [ 283.391303][ T9844] EXT4-fs (loop6): Ignoring removed orlov option [ 283.485709][ T9844] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpid,bsddf,nodioread_nolock,test_dummy_encryption,lazytime,nodelalloc,minixdf,orlov,,errors=continue. Quota mode: writeback. [ 283.582631][ T9873] netlink: 'syz.1.1106': attribute type 4 has an invalid length. [ 283.657065][ T9877] netlink: 'syz.1.1106': attribute type 4 has an invalid length. [ 284.450949][ T9893] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 284.499747][ T9893] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 284.689445][ T9911] loop2: detected capacity change from 0 to 7 [ 284.709852][ T4327] Dev loop2: unable to read RDB block 7 [ 284.715575][ T4327] loop2: AHDI p1 p2 p3 [ 284.731899][ T4327] loop2: partition table partially beyond EOD, truncated [ 284.757397][ T4327] loop2: p1 start 1601398130 is beyond EOD, truncated [ 284.783327][ T4327] loop2: p2 start 1702059890 is beyond EOD, truncated [ 284.807145][ T9911] Dev loop2: unable to read RDB block 7 [ 284.813440][ T9911] loop2: AHDI p1 p2 p3 [ 284.827514][ T9911] loop2: partition table partially beyond EOD, truncated [ 284.845867][ T9911] loop2: p1 start 1601398130 is beyond EOD, truncated [ 284.867950][ T9911] loop2: p2 start 1702059890 is beyond EOD, truncated [ 284.912147][ T3558] Dev loop2: unable to read RDB block 7 [ 284.922737][ T3558] loop2: AHDI p1 p2 p3 [ 284.939678][ T3558] loop2: partition table partially beyond EOD, truncated [ 284.972733][ T3558] loop2: p1 start 1601398130 is beyond EOD, truncated [ 285.004894][ T3558] loop2: p2 start 1702059890 is beyond EOD, truncated [ 286.143212][ T9951] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 286.166511][ T9951] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 286.220088][ T9956] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none. [ 286.734368][ T9970] loop6: detected capacity change from 0 to 128 [ 286.978984][ T9970] attempt to access beyond end of device [ 286.978984][ T9970] loop6: rw=2049, want=218, limit=128 [ 287.080693][ T154] tipc: Subscription rejected, illegal request [ 287.217583][ T9986] fuse: Bad value for 'fd' [ 287.752787][T10012] netlink: 798 bytes leftover after parsing attributes in process `syz.0.1138'. [ 288.375172][T10014] netlink: 'syz.1.1142': attribute type 12 has an invalid length. [ 288.432488][T10014] netlink: 'syz.1.1142': attribute type 29 has an invalid length. [ 288.440448][T10014] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1142'. [ 288.449601][T10014] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 288.457360][T10014] netlink: 'syz.1.1142': attribute type 2 has an invalid length. [ 288.468944][T10014] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1142'. [ 288.479830][T10014] netlink: 'syz.1.1142': attribute type 12 has an invalid length. [ 288.487798][T10014] netlink: 'syz.1.1142': attribute type 29 has an invalid length. [ 288.496535][T10014] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1142'. [ 288.505737][T10014] netlink: 'syz.1.1142': attribute type 1 has an invalid length. [ 288.513625][T10014] netlink: 'syz.1.1142': attribute type 2 has an invalid length. [ 288.522109][T10014] netlink: 11 bytes leftover after parsing attributes in process `syz.1.1142'. [ 290.243649][T10059] x_tables: ip6_tables: NFQUEUE.2 target: invalid size 8 (kernel) != (user) 0 [ 290.862050][T10074] fuse: Bad value for 'fd' [ 292.904170][T10109] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1168'. [ 293.123100][T10115] netlink: 277 bytes leftover after parsing attributes in process `syz.9.1170'. [ 293.362560][T10119] kvm: pic: single mode not supported [ 293.363801][T10119] pic_ioport_write: 22 callbacks suppressed [ 293.363818][T10119] kvm: pic: level sensitive irq not supported [ 293.396330][T10119] kvm: pic: level sensitive irq not supported [ 293.591372][ T4227] Bluetooth: hci3: command 0x0406 tx timeout [ 293.657364][T10128] binder_alloc: 10127: binder_alloc_buf, no vma [ 294.382941][T10146] netlink: 'syz.9.1182': attribute type 4 has an invalid length. [ 296.197065][T10222] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1204'. [ 296.206472][T10222] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1204'. [ 296.877252][T10240] ip_tables: iptables: counters copy to user failed while replacing table [ 297.772636][T10265] device syzkaller0 entered promiscuous mode [ 297.806869][T10265] tipc: Enabled bearer , priority 0 [ 297.845727][T10264] tipc: Resetting bearer [ 297.904751][T10264] tipc: Disabling bearer [ 299.501427][T10292] loop1: detected capacity change from 0 to 1024 [ 299.648906][T10292] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,errors=continue,noblock_validity,commit=0x0000000000000005,noinit_itable,max_batch_time=0x0000000000000004,abort,auto_da_alloc,lazytime,noauto_da_alloc,debug_want_extra_isize=0x0000000000000008,,errors=continue. Quota mode: writeback. [ 302.745618][T10332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.628164][ T5252] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 303.998034][ T5252] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 304.012969][ T5252] usb 2-1: config 0 has no interface number 0 [ 304.031576][ T5252] usb 2-1: config 0 interface 41 has no altsetting 0 [ 304.210829][ T5252] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 304.221511][ T5252] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.230090][ T5252] usb 2-1: Product: syz [ 304.234427][ T5252] usb 2-1: Manufacturer: syz [ 304.239454][ T5252] usb 2-1: SerialNumber: syz [ 304.246212][ T5252] usb 2-1: config 0 descriptor?? [ 305.597824][ T5252] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 305.774228][T10420] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.784081][T10420] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.792999][T10420] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 305.802090][T10420] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.258251][ T5252] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 307.365316][ T5252] CoreChips: probe of 2-1:0.41 failed with error -71 [ 307.533118][ T5252] usb 2-1: USB disconnect, device number 19 [ 310.082614][T10483] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1280'. [ 310.128144][T10483] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.135690][T10483] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.355421][T10522] tipc: Started in network mode [ 312.422613][T10522] tipc: Node identity ac1414aa, cluster identity 4711 [ 312.462859][T10522] lo: MTU too low for tipc bearer [ 312.469023][T10522] tipc: Enabling of bearer rejected, failed to enable media [ 314.001422][T10556] loop1: detected capacity change from 0 to 40427 [ 314.101349][T10556] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 314.111848][T10556] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 314.121841][T10556] F2FS-fs (loop1): invalid crc value [ 314.133742][T10556] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 314.206012][T10556] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 314.213312][T10556] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 315.420417][T10604] netlink: 'syz.0.1318': attribute type 27 has an invalid length. [ 315.476559][T10604] bond0: (slave bond_slave_0): Releasing backup interface [ 316.556953][T10613] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1321'. [ 316.574807][T10613] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.583450][T10613] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.633471][T10613] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1321'. [ 316.664543][T10623] netlink: 'syz.0.1324': attribute type 4 has an invalid length. [ 316.694588][T10623] netlink: 'syz.0.1324': attribute type 4 has an invalid length. [ 317.115107][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.121477][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.149515][T10650] netlink: 'syz.6.1331': attribute type 27 has an invalid length. [ 319.249044][T10650] bond0: (slave bond_slave_0): Releasing backup interface [ 319.289978][T10670] device syzkaller0 entered promiscuous mode [ 319.546110][T10689] tipc: Enabling of bearer rejected, failed to enable media [ 321.054973][T10708] sctp: [Deprecated]: syz.6.1349 (pid 10708) Use of struct sctp_assoc_value in delayed_ack socket option. [ 321.054973][T10708] Use struct sctp_sack_info instead [ 325.226526][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 325.532498][T10778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1368'. [ 327.465227][T10803] tipc: New replicast peer: 172.20.20.187 [ 327.485398][T10803] tipc: Enabled bearer , priority 10 [ 327.933361][T10804] loop1: detected capacity change from 0 to 40427 [ 328.043470][T10804] F2FS-fs (loop1): Corrupted extension count (327717 + 1 > 64) [ 328.071098][T10804] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 328.102249][T10804] F2FS-fs (loop1): build fault injection attr: rate: 771, type: 0x1ffff [ 328.133308][T10804] F2FS-fs (loop1): invalid crc value [ 328.164367][T10804] F2FS-fs (loop1): Found nat_bits in checkpoint [ 328.333628][T10804] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 328.352561][T10804] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 328.502317][ T4186] attempt to access beyond end of device [ 328.502317][ T4186] loop1: rw=2049, want=45104, limit=40427 [ 328.606246][ T3574] tipc: Node number set to 2713367114 [ 329.872336][T10823] tipc: Started in network mode [ 329.877889][T10823] tipc: Node identity ac1414aa, cluster identity 4711 [ 329.884901][T10823] tipc: New replicast peer: 172.20.20.187 [ 329.901303][T10823] tipc: Enabled bearer , priority 10 [ 330.951965][ T3574] tipc: Node number set to 2886997162 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: open(/proc/self/ns/net) failed (errno 2: No such file or directory) loop exited with status 67 SYZFAIL: repeatedly failed to execute the program proc=4 req=1238 state=3 status=67 (errno 9: Bad file descriptor) [ 338.731574][ T4986] rdma_rxe: ignoring netdev event = 10 for syz_tun [ 338.813813][ T4986] infiniband syz1: set down [ 338.848106][ T4263] infiniband syz1: ib_query_port failed (-19) [ 338.920255][ T5297] smc: removing ib device syz1 [ 339.105952][ T4186] bond0: (slave syz_tun): Releasing backup interface [ 339.424906][ T4514] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.481872][ T4514] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.573430][ T4514] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.691900][ T4514] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 339.870939][ T4514] tipc: Left network mode [ 340.674845][ T4514] device hsr_slave_0 left promiscuous mode [ 340.682143][ T4514] device hsr_slave_1 left promiscuous mode [ 340.688678][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.696297][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.704262][ T4514] device bridge_slave_1 left promiscuous mode [ 340.710858][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.719558][ T4514] device bridge_slave_0 left promiscuous mode [ 340.725787][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.744614][ T4514] bond1 (unregistering): Released all slaves [ 340.869918][ T4514] team0 (unregistering): Port device team_slave_1 removed [ 340.890857][ T4514] team0 (unregistering): Port device team_slave_0 removed [ 340.903516][ T4514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.971361][ T4514] bond0 (unregistering): Released all slaves [ 342.305741][ T4514] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.353572][ T4514] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.393923][ T4514] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.442881][ T4514] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.597919][ T4514] tipc: Disabling bearer [ 342.608203][ T4514] tipc: Left network mode [ 343.299995][ T4514] device hsr_slave_0 left promiscuous mode [ 343.306692][ T4514] device hsr_slave_1 left promiscuous mode [ 343.316316][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 343.325982][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.335524][ T4514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 343.343160][ T4514] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 343.351136][ T4514] device bridge_slave_1 left promiscuous mode [ 343.357391][ T4514] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.369870][ T4514] device bridge_slave_0 left promiscuous mode [ 343.376130][ T4514] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.396439][ T4514] device veth1_macvtap left promiscuous mode [ 343.402624][ T4514] device veth0_macvtap left promiscuous mode [ 343.408950][ T4514] device veth1_vlan left promiscuous mode [ 343.414754][ T4514] device veth0_vlan left promiscuous mode [ 343.582478][ T4514] team0 (unregistering): Port device team_slave_1 removed [ 343.600348][ T4514] team0 (unregistering): Port device team_slave_0 removed [ 343.615057][ T4514] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 343.691025][ T4514] bond0 (unregistering): Released all slaves