last executing test programs: 3m38.169012389s ago: executing program 3 (id=4): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESHEX=0x0, @ANYRESOCT], 0x1, 0x22b, &(0x7f0000000600)="$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") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@delneigh={0x44, 0x1a, 0x1, 0x0, 0x800, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@NDA_CACHEINFO={0x14, 0x3, {0x7, 0x0, 0x4}}, @NDA_DST_IPV6={0x14, 0x1, @loopback}]}, 0x44}}, 0x90) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000800)=ANY=[@ANYBLOB="140100002f00010000000000ffdbdf25010100800c0022000000000000000000140001"], 0x114}], 0x1}, 0x0) 3m37.549857092s ago: executing program 3 (id=6): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x300f401, 0x0, 0x2, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') pivot_root(&(0x7f0000000140)='./bus\x00', &(0x7f0000000280)='./bus\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x3c000280) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0), 0x0) socket(0x22, 0x5, 0x0) 3m36.468812255s ago: executing program 3 (id=8): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000280)={[{@nodelalloc}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000340)='./file0\x00') r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000001400)) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffefff) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4040884}, 0x83992ac82ebfd81a) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}]}}]}, 0x3c}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r9, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) 3m35.113949998s ago: executing program 3 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0x4e, &(0x7f0000000600)=0x9, 0x4) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x21}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00318e", 0x30, 0x3a, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, {[], @time_exceed={0x2, 0x1, 0x0, 0x4, '\x00', {0x0, 0x6, "000006", 0xda34, 0x3a, 0xff, @rand_addr=' \x01\x00', @empty}}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) unshare(0x3c000280) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f00000001c0), 0x0) socket(0x22, 0x5, 0x2100) 3m34.028780932s ago: executing program 3 (id=11): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000280)={[{@nodelalloc}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000340)='./file0\x00') r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000001400)) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffefff) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4040884}, 0x83992ac82ebfd81a) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}]}}]}, 0x3c}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r9, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) 3m31.600003149s ago: executing program 3 (id=15): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x200000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xfffffffe}, {}, {0x6, 0x0, 0x0, 0x7ffffdc1}]}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$video(0x0, 0xa7, 0x2200) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) fanotify_init(0x40, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x36a00) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x87, 0x1130, &(0x7f0000002380)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 3m16.498359431s ago: executing program 32 (id=15): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x1, 0x373, &(0x7f00000006c0)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000000), 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x1000021, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x200000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x3, &(0x7f0000000140)=[{0x25, 0x0, 0x1, 0xfffffffe}, {}, {0x6, 0x0, 0x0, 0x7ffffdc1}]}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$video(0x0, 0xa7, 0x2200) preadv2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) fanotify_init(0x40, 0x800) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000580)) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x36a00) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r3, 0xc0a85352, &(0x7f0000000200)={{0x80, 0x7f}, 'port1\x00', 0x80, 0x14, 0x4, 0xfffffeff, 0x0, 0xc, 0x200000, 0x0, 0x4875c99660ff2b2d}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0, 0x35, 0x0, 0x1}, 0x28) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x3, 0x2}) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00005cf000/0x400000)=nil) syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x87, 0x1130, &(0x7f0000002380)="$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") fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xffffffd3) 12.845111312s ago: executing program 0 (id=502): r0 = socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x0, 0x0) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010ba0d0010400001020301090275000301ff1059080b010001002006090400000001012000092401ff01091500000c24030307070002080e0000090401"], 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) r5 = creat(&(0x7f0000000080)='./file0\x00', 0xa) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109025c0002010630060904000001020d0000052406000105030016000d240f01020000000800ff000306241ac031010905810340000503070904010000020d00000904010102020d000009058202ff03ff07fa090503022000fc0109"], 0x0) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) connect$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x3, {0x2, 0x1, 0x1}, 0xff}, 0x18) r7 = syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x8c00) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f0000000780)=0x4) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x7, 0xb}}}}, 0x11) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000001c10fcdbdf252c0000000800580000000000fbff02002000000047c5979c413a8a4c000073696d0000000f0002006e657c646576736988cdf67fda5e9b3f3629dddc0812e6bf6d300000bfec9dfbc12c5f51cae6cb288704e7511b532e7b"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) open(0x0, 0x0, 0x0) (async) syz_usb_connect$uac2(0x3, 0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="1201100100000010ba0d0010400001020301090275000301ff1059080b010001002006090400000001012000092401ff01091500000c24030307070002080e0000090401"], 0x0) (async) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newqdisc={0x8c, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x5b, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3df], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}, [@TCA_MQPRIO_MAX_RATE64={0x4}]}}}]}, 0x8c}}, 0x20000000) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000640), 0xffffffffffffffff) (async) creat(&(0x7f0000000080)='./file0\x00', 0xa) (async) syz_usb_connect$cdc_ncm(0x6, 0x9b, &(0x7f0000000040)=ANY=[@ANYBLOB="12015002020000002505a1a44000010203010902890002010420040904000001020d0000052406000105240006000d240f0106000000020006000606241a05ed0d0724140e00400005241500001524120004a317a88b045e4f01a607c0ffcb7e392a0c"], 0x0) (async) syz_usb_connect$cdc_ncm(0x6, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010003020000402505a1a440000102030109025c0002010630060904000001020d0000052406000105030016000d240f01020000000800ff000306241ac031010905810340000503070904010000020d00000904010102020d000009058202ff03ff07fa090503022000fc0109"], 0x0) (async) syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042402024424"], 0x0) (async) syz_usb_connect(0x3, 0xf5, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000772aed408680070bb96c010203010902e30003dc2000000904003f000e01000505a40600010524007f000d240f0104000000080000000006241a03000a05240101070424020a1524120009a317a88b045e4f01a607c0ffcb7e392a09044c03003a92a2010a240109000102010205240401050c2402"], 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) (async) connect$can_j1939(r5, &(0x7f0000000100)={0x1d, r6, 0x3, {0x2, 0x1, 0x1}, 0xff}, 0x18) (async) syz_open_dev$sndmidi(&(0x7f0000000740), 0x2, 0x8c00) (async) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r7, 0x40045730, &(0x7f0000000780)=0x4) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2) (async) syz_emit_vhci(&(0x7f00000001c0)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x1, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x6, 0x4}, {0x7, 0xb}}}}, 0x11) (async) sendmsg$DEVLINK_CMD_RATE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000001c10fcdbdf252c0000000800580000000000fbff02002000000047c5979c413a8a4c000073696d0000000f0002006e657c646576736988cdf67fda5e9b3f3629dddc0812e6bf6d300000bfec9dfbc12c5f51cae6cb288704e7511b532e7b"], 0x44}}, 0x0) (async) 9.793943881s ago: executing program 0 (id=513): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000280)={[{@nodelalloc}, {@delalloc}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@nomblk_io_submit}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") chdir(&(0x7f0000000340)='./file0\x00') r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1, 0x0, &(0x7f0000001400)) r7 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/stat\x00', 0x0, 0x0) sendfile(r7, r8, 0x0, 0x7fffefff) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000180001002cbd7000fbdbdf2502140000fc04ff09003f0000"], 0x2c}, 0x1, 0x0, 0x0, 0x4040884}, 0x83992ac82ebfd81a) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001340)=@newqdisc={0x3c, 0x24, 0xf0b, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0xc, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x6}]}}]}, 0x3c}}, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000180)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=r9, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) 8.543161466s ago: executing program 2 (id=515): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x8, 0x9}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000100)='./bus\x00', 0x800000, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,iocharset=cp1255,uni_xlate=0,check=strict,utf8=0,uni_xlate=0,utf8=0,codepage=850,check=relaxed,shortname=winnt\x00\x00hortname=lower,shortname=win95,shortname=win95,nonumtail=0,shortname=mixed,uni_xlate=1,allow_utime=00000000000000000000777,\x00'], 0xff, 0x371, &(0x7f0000000280)="$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") ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000040)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xe4, 0x7, 0x61, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x700, 0x20, 0x8, 0x7}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000680)={r1, r3, 0x25, 0xa, @val=@iter={&(0x7f0000000640)=@map_fd=r0, 0x10}}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_bytes\x00', 0x26e1, 0x0) 8.542495846s ago: executing program 0 (id=516): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) clock_gettime(0x4, &(0x7f0000000100)) ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000180)={@private1, @empty}) fcntl$setstatus(r0, 0x4, 0x6000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000340)=0xfffffffffffffffa, 0x12) io_setup(0x1ff, &(0x7f0000000440)=0x0) pipe2(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB="2c63616368653d667363616368652c63616368657461673d14e2"]) ftruncate(r0, 0x81fe) io_setup(0x0, &(0x7f0000000140)) r5 = dup3(r4, r4, 0x80000) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x0, 0xa00, 0x0, 0x0, r5}]) 7.967440666s ago: executing program 2 (id=517): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xf2}]}}]}, 0x38}}, 0x20040084) 6.843264402s ago: executing program 0 (id=519): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) r1 = fsopen(&(0x7f0000000100)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='user\x00N\xac]\x86\x8a\xa3\x7f\x00', &(0x7f0000000080)='\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f00000000c0), 0x0, 0x4f7, &(0x7f0000000b80)="$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") sendto$l2tp(0xffffffffffffffff, &(0x7f0000000280)="7f423cebaf8cbd10b05c75e748a9179fba7be80ae145fc59d7453e1c85aeb8f4245dae07fa2530a4b8c82cbbb7ee840ed20e8c14c3465ad3a30b9501c4ec03a520e00ed6e8f4ac228b1573fcd2fc6b7d34b9a00e3434833011a3489a3b249f40af9d198fd0a2b32935480bf788f4400e6f1ccd9e9d2b3bbc6a3178161a6aec40ce6a72c58546113e", 0x88, 0x2004c090, &(0x7f0000000340)={0x2, 0x0, @remote, 0x3}, 0x10) syz_mount_image$reiserfs(&(0x7f0000000540), &(0x7f0000000140)='./file0\x00', 0x10, &(0x7f00000001c0), 0x0, 0x1119, &(0x7f0000003600)="$eJzs2b9qFUEUB+Df7F5NupW1XwJaWEhIuD6AKRRua6uNSEAwVS4Iiq/hG/gWvoKmsg/ptQhYCis3e9f8IaCSG0H4Ptids2dn9uyUMxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABYmCRfS3K7StoxVyUpSdcdzI6SdGP+1qe6SsmT3dn80f708TxJfdK9PE02TrqUJO32nfV22k7b7fbBw527n+dv3r56vre3u7/8TEmXw+OVzqKMt/psrqy0BgAAAPy3+itr8v71n1S6eU31AQAAgN9Z9X4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwN/qm9O4HYMqSUm67mB2lKS7ZNyNf/R/AAAAwNWVVHnWXJYftgFO3c+XpvzKL9rvZRFv5UNzYSAAAABwzsuP5x77tWVw9nz9Rz9YrLvvZTKsy9eHdxuZZHNziJdNvu0kdZKtC7UOj9+9GK/S18na9cwJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfrIDByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAXBQAA//+XOeFM") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x3) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chdir(&(0x7f0000000240)='./file0\x00') openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000100)={0x18, 0x2, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@CTA_EXPECT_TUPLE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x80) getdents(r3, &(0x7f0000001fc0)=""/184, 0x20002078) fcntl$setflags(r3, 0x2, 0x1) 6.842649843s ago: executing program 4 (id=520): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000600)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000190000004e20000000000000000000000200", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc0000000001000000000000000080872ddd0000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700001000000000000000000000000000000400fdffffffe80a000000000000000000000a0002"], 0x128}}, 0x0) 6.125197102s ago: executing program 2 (id=522): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r1, 0xba5, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x1, {"005c434623fd4943c4385c84edc17c79"}, 0x7, 0x9, 0x8}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x2}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000700)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) syz_io_uring_setup(0x50c5, &(0x7f0000000780)={0x0, 0xfd1c, 0x80, 0x0, 0x3e1}, &(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000940)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000008c0)={0x600000, 0x168, 0x11}, &(0x7f0000000900)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}) r6 = syz_open_dev$sndctrl(&(0x7f0000000980), 0x1, 0x48000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f00000009c0)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x8842, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000ac0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e20, 0x9b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ed}, 0xffffffffffffffff, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000e40)={0xc, 0x8, 0xfa00, {&(0x7f0000000cc0)}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = accept4$phonet_pipe(r7, 0x0, &(0x7f0000000e80), 0x800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f80)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000015c0)={'syztnl0\x00', &(0x7f0000001580)={'syztnl0\x00', 0x0, 0x52c6b60ceedbfb13, 0xd8, 0x1, 0x0, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast2, @broadcast, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001600)={'wg1\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000001700)=[{{&(0x7f0000000ec0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000f00)="bb2b", 0x2}], 0x1, &(0x7f0000000fc0)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x91, [@rand_addr=0x64010102, @multicast1]}, @timestamp={0x44, 0x10, 0x1c, 0x0, 0x4, [0x69ed, 0x3, 0x0]}, @timestamp_prespec={0x44, 0x4c, 0x3d, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xfffffff7}, {@broadcast, 0x7679}, {@remote, 0x1}, {@empty, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xf}, {@remote, 0x996b}, {@rand_addr=0x64010102, 0x973c}, {@loopback, 0xffff8000}, {@multicast2, 0x40}]}, @cipso={0x86, 0x1d, 0x2, [{0x7, 0x7, "2926308658"}, {0x0, 0xd, "de88cb2bc1da1ab148d55b"}, {0x0, 0x3, 'H'}]}, @noop, @noop, @rr={0x7, 0x2b, 0xd0, [@multicast2, @loopback, @private=0xa010102, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @rand_addr=0x64010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@cipso={0x86, 0x33, 0x1, [{0x0, 0x10, "08c45c14dc962d55c037b9851643"}, {0x1, 0xe, "b0f0277eb15cf7c9eb41c9bd"}, {0x4, 0xf, "cbe7b146ac11d2c5a234310d48"}]}, @generic={0x7, 0xd, "5dfeca51ceef46a94355ba"}, @timestamp={0x44, 0x8, 0x3b, 0x0, 0x8, [0x8]}, @timestamp={0x44, 0x8, 0x9c, 0x0, 0x0, [0x57b3a92d]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x53, [@multicast2]}, @lsrr={0x83, 0x13, 0x23, [@empty, @private=0xa010102, @rand_addr=0x64010100, @broadcast]}, @ssrr={0x89, 0x1f, 0x7, [@private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010100, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf2, [@remote, @broadcast, @broadcast]}, @cipso={0x86, 0x2c, 0x2, [{0x1, 0xb, "528cc3543634f65428"}, {0x7, 0xd, "4f4f1ff0c6cce7a33a517f"}, {0x7, 0xe, "9371dadab1be61a66ab1e52e"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x80, [@local, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010102, @broadcast}}}], 0x250}}, {{&(0x7f0000001240)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001280)="5a07d10a789b1691ae70a5a8632250185cebe8fb5b0f265e3ccada488f945b98d0ce51f16ea6b6ffddd6dab9794ea4c37833ad53104a6458c5", 0x39}], 0x1}}, {{&(0x7f0000001300)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001340)="342e3c3f07836e0c4029c0339c2f4718b12fc8794d4a516b4e620f29147192fc2229717a919b9e1ded4bbc0dbe6c5582381567a396649d4399d4415c3c64706d6ab9", 0x42}, {&(0x7f00000013c0)="cdbe77ba9aaeae882e6a800c94e0976c078e5d6599d11ec31f9c8557f2feb1c2dca090805c9daab1c523dff81d13d5d5887052f7cf3f2a0a08b58a119cf8cd7dfa740833b957961a781aa56c5d2c497dff941c62ad3e0ce7de7acb274cfe89a64880f51a7a2a6e353102c2bafa874b7a07dba6573f0e884eb32075b563e96f6ee353af65d0d4c9", 0x87}], 0x2, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @multicast2}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @timestamp={0x44, 0x8, 0xf4, 0x0, 0x2, [0x0]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0xb, 0x53, [@loopback, @remote]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010102, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x88}}], 0x3, 0x98c0) r12 = dup(r2) setsockopt$inet6_opts(r12, 0x29, 0x3b, &(0x7f00000017c0)=@dstopts={0x11, 0x205, '\x00', [@jumbo={0xc2, 0x4, 0xb7e}, @ra={0x5, 0x2, 0x5}, @generic={0x4, 0x1000, "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"}, @pad1, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xde5}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x1038) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) ioctl$COMEDI_DEVCONFIG(r12, 0x40946400, &(0x7f0000002800)={'pcl724\x00', [0x335, 0x100, 0xdc2, 0x80000001, 0x4, 0x5, 0x5, 0x12, 0x6, 0x6, 0x6, 0xffffffff, 0x0, 0x3, 0x7f0d, 0x100, 0x4, 0x9, 0xffffff81, 0x7fffffff, 0x7, 0x3, 0x1, 0x1, 0x7, 0x163800, 0x7, 0x8, 0x105, 0x7, 0xffffffff, 0x81]}) connect$can_bcm(r7, &(0x7f00000028c0)={0x1d, r10}, 0x10) 6.014437469s ago: executing program 4 (id=523): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000f0000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200828500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x62, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setresuid(0xee01, 0x0, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=@ipv6_delrule={0x78, 0x21, 0x200, 0x70bd2d, 0x25dfdbfe, {0xa, 0x20, 0x80, 0xe8, 0x2, 0x0, 0x0, 0x1, 0xa}, [@FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'wg1\x00'}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3}, @FIB_RULE_POLICY=@FRA_SUPPRESS_IFGROUP={0x8, 0xd, 0x6}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x2}, @FIB_RULE_POLICY=@FRA_FWMASK={0x8, 0x10, 0x4}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FRA_SRC={0x14, 0x2, @private2}]}, 0x78}, 0x1, 0x0, 0x0, 0x20008800}, 0x4040880) prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0) syz_clone(0x44200400, 0x0, 0x0, 0x0, 0x0, 0x0) setreuid(0xee01, 0xee01) 5.391722551s ago: executing program 0 (id=526): syz_usb_connect$midi(0x3, 0x3e, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x499, 0x100c, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2c, 0x1, 0x1, 0x0, 0x40, 0x0, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x8, [], [{{0x9, 0x5, 0xd, 0x3, 0x40, 0x7, 0x6, 0xc, {0x4}}}, {{0x9, 0x5, 0xb, 0x3, 0x8, 0x3, 0x10, 0x7f, {0x4}}}]}}}}}]}}, &(0x7f0000000240)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x10, 0x40, 0x5, 0xff, 0xf}, 0x0, 0x0, 0x4, [{0x78, &(0x7f00000000c0)=@string={0x78, 0x3, "6daa2ea3fe45bd443ef52a83cdb3bc78a29a506f7b85b31b2347edff6d381b58c6c306d784aadcb8d609811e65f82d15bc0d76db471560a3e1b8f7a72c3f1a7382d4295c3cf0bf6f69f69a367e06d5bd64c811d9c0e6a8af3f02f3c3629c38c7fa7c32c7d8bd8f5dcc54a735a58ba5448a6dee92d2d0"}}, {0xe5, &(0x7f00000003c0)=@string={0xe5, 0x3, "8daa0278acd8f140a159631d89aed8b801bd18ea766d91780a6d0d727b04c562034f918b485edebf7ac34bf313a907daff2d5af4dd249224deb1ae63dc209c8340d289b6ced7536e327ce4f4d74cfb122a3d0376f6eed482ecc6e2e4f3d9f3ce86c34a95425e25c09e0884c6392e78ec0bc8ba3260b04904f6b84359c54e435296759524571b072301c6d2199e8c8e530db9b8bc67925008d8a7399bece0c0209f1040dee1ddc73687656c58902a2610baea5e4abb6cdff2b1f37ca03772c0a5b34bea8c2728b6216994fc9d36b4113be89bfd34d2a9adb40ac71045476300c6577476"}}, {0x4, &(0x7f0000000180)=@lang_id={0xfffffff1, 0x3, 0x40f}}, {0x4c, &(0x7f00000001c0)=@string={0x4c, 0x3, "09cce769606c016258d8b14e8f83a7bbbf6114e0d23d23b26b37fce4ee539c9cb613ac63960918500acd929617e9d2a4125d1ba02c5f17134d60be2d0b551124f0df4ef146461bb71193"}}]}) 5.391505951s ago: executing program 5 (id=527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) shutdown(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x2018, 0x4) 5.175749326s ago: executing program 2 (id=529): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYBLOB="99b77d5bf0e4f488f1a06d3eaadf288d1a0bc9008f6a3bcf6564a3bb5d28e7605fcd02c5b1692869cd162d8accf9c2d716b7537a34aea4d2212a59e6b6205bb2b3ec1d7f1c1521d56d697305db68aeb1f641f73293b945e4a7c4ea5eaae5e241d70c42aa26b50f699caeec0b3ae27d32208d654541c7d2b05b73441275b81e91a5610bddc43ac550a55f5d56c8cece27675c29446ee82f70d92bcac9c21953637402f90a9eb507c8b69cdb6d090cfa24e99dff71609ae03282267987feec0478b447840876084eda7a22aecf54efa457d9ab75ad861e", @ANYBLOB="be0c386e4cdc3da35edc21c83330dd2cd3675bc494b4e83934f360ff1e86d52fd7c8efe5bb669a90b583ded38147d1"], 0x5, 0x5593, &(0x7f00000061c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbaTFBAhoEgEoSJ1gIWmbmnpihAoYuBPQIpSpwRcCm0GWkWULGwoC0sXBCNCSKCw5X/o3EhdytYhQ5CYGILufJeeY5dEBc6m+f2kd+/z+Xrve+dTlc/vDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQ2HkrviniJN1Mp5uJqOf77u6uLaX99oE+tbVxby5taVyrOvHx93L5xcnZ0SUCAADA8ZEU9X1E3G9uLqR9fTqr/5vFMWnN/90zvbio5w/W/du7a5P5W3NF/f/rLw9e2B9oOsnGSU+6vNLtnBlMpfEfTXHsPXvoEY3symffvSTZB1J/b/35nWZ2PWtf37nzTisLJ6rIFgB4HKeLPg+Kv4fSvj3KxAA4Nhqlwruo/5Pp0eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIWd9XiqiGsRMdd4GKe2d9eWhvVfbtyb28rbhdu3N8rnTE/RjIjllW7nTIVzGV/F1bz58WK327l2/UbVwcmIGPLWraP98yRP/5HHtCKib8+pF4ec54MjjHXgPANBfntGtddwKp3foQfX+vbUBi7423s9o7gBqgrq+eczLvkMBpOPvo0PCYp7799PrOL/jgAAeOI185ZWovebmwvpvtpMxN73/fX/q6U4+ur+vVu9Pb3XW6X6/8GHF+6WxyrX/+2K5vd/ML965dP56zduvr5yZfFy53LnkzfOtt9sn7t4/vzF+ey7kvnlqPvGBAAAgH+glbdy/V+fGVz/P1GK42/W/8v1/2fftr8oj5Wo/4d6uOg36kwAAACOo9Z+9Nwrf/xeG3JErdWKzxdXV6+1e9v912d720rTfUwTeSvX/8nMqLMCAAAAqrCzXutb/79UiuOI6/9P//DST+VzJhExFXE1Ijqnl652L1U3nbFWxc+bs4Fao54pAAAAozKVt/L6fzN7/r++/8hDPSJeOxXxZ/4b/jhi/Z+8+9WP5bHKz/+fq3SW46c+27seWT8b0ZgddUYAAAA8ySbzlhb7vzU3Fz76+cT7Lc//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFTtrwAAAP//VDwyJg==") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000a0fb1d50584ce4800002010200000000000000000a000000300002802c00018014000300fc0000000000000000000000000000001400040000000000130000000000ffffac1414bb744b06"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket(0x10, 0x80002, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x208010, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x181042, 0x15) pwrite64(r5, &(0x7f0000000000)='2', 0x1, 0xa6c9) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r6, r5, 0x0, 0x8000) fanotify_init(0x200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x32c5, 0x8, {{0x33, 0x4, 0x3, 0x8, 0xcc, 0x66, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, {[@generic={0x82, 0xa, "afb16571e6ae76e4"}, @end, @lsrr={0x83, 0x7, 0x62, [@remote]}, @cipso={0x86, 0x54, 0x0, [{0x6, 0x6, "af807721"}, {0x0, 0x2}, {0x7, 0xf, "825ad7fff4902fbdddad200a1c"}, {0x0, 0x12, "b7fb0f58fa07d2fdf2073827d18c4159"}, {0x5, 0x3, "ff"}, {0x0, 0xe, "7e8fc9ddb31051dcb281324e"}, {0x0, 0x3, "e4"}, {0x1, 0x4, "ce09"}, {0x6, 0x7, "2400cd6572"}, {0x5, 0x6, "c626fa7f"}]}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0xec, 0x1, 0x7, [{@broadcast, 0xf9}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x9c8}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x9}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x6}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001500)=@newtclass={0xc8c, 0x28, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x1}, {0x3, 0x5}, {0xb, 0xb}}, [@tclass_kind_options=@c_htb={{0x8}, {0xc50, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x7, 0xe, 0xf, 0x3, 0xd7c, 0x200, 0x81, 0x2, 0x1, 0x3, 0x0, 0x81, 0x1b28e27f, 0x0, 0x2, 0x8f, 0xb, 0x400, 0x92, 0x3, 0x7, 0x2, 0x2, 0xa2b, 0x9, 0x7, 0x2, 0x7, 0x1fbf0ff5, 0x4, 0x5, 0x7dc6, 0x823, 0x6, 0x0, 0x4, 0x0, 0xfffffffb, 0x80000000, 0x77, 0x6, 0x4, 0x7, 0x4, 0x9d5, 0x2e, 0x5, 0x8, 0x1200, 0x6, 0x1, 0x8, 0x40, 0x3980, 0x1, 0x7, 0x400, 0x7fffffff, 0x7, 0x9, 0x1ff, 0x2, 0x4, 0x6, 0x528d, 0x6b2a, 0xc5, 0xd7a, 0x80, 0x2, 0xfff, 0x2, 0x8, 0xa00000, 0x8, 0x8, 0x4, 0x5, 0x0, 0x3ff, 0x1000, 0x9, 0xd14, 0x1, 0x4, 0x0, 0xff, 0x4, 0xff, 0x3, 0x4b95, 0x6, 0x7ff, 0x9, 0x7, 0x7, 0x1, 0x9, 0x2, 0x2, 0x7fffffff, 0x8, 0x1, 0x2, 0x1, 0x4, 0x40ca, 0xfffffffb, 0x7fff, 0x3, 0x1, 0x7, 0xd1, 0x3, 0x235e, 0x4, 0xd, 0x78, 0x5, 0x0, 0x9, 0x9, 0x4, 0x8f21, 0x200, 0x9, 0x1, 0x7, 0x9, 0x8000, 0xb709, 0x7, 0x2, 0xf17, 0x1, 0x10001, 0x4, 0x200, 0xad, 0x2, 0x2, 0x9, 0xd47, 0xfffff380, 0xfffffff3, 0x4, 0x0, 0xa, 0x2, 0x4, 0x3ee, 0x10000, 0xc, 0x0, 0xa, 0x1400, 0x8, 0xffffffff, 0x1, 0x80000000, 0x100, 0xf, 0x1, 0x9, 0x4a4f, 0x0, 0xfffffffd, 0x5, 0x3, 0xfffffffc, 0xf2, 0x7, 0x8, 0x8, 0x81, 0xa, 0xffffffff, 0x2, 0xb838, 0x7, 0x0, 0x5, 0x9, 0x5, 0x800, 0x5, 0x3ff, 0x0, 0x5, 0x8, 0x10000, 0xc, 0x7, 0x1, 0x7, 0x6, 0xffff, 0x40, 0x1, 0xf, 0x9, 0xff, 0xfffffff9, 0xa8fb, 0xfffffc00, 0x54, 0xa34, 0xfffffff1, 0x2, 0x9, 0x1, 0x2, 0x7, 0x8, 0x5, 0xe, 0x7, 0x8, 0x400, 0x7, 0x5, 0x1000, 0x8, 0x10001, 0x1, 0x445c, 0x6, 0x5, 0x4, 0x6a, 0x7ff, 0x0, 0x4000000, 0x88e, 0x4, 0xfa8c, 0x7fff, 0x7, 0x3, 0x1, 0x100, 0x800, 0xa75, 0x2, 0x10000, 0x956f, 0xd529, 0x41, 0x9, 0x4, 0x6, 0x1, 0x4, 0x6, 0xacf0, 0x1]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}, @TCA_HTB_CEIL64={0xc, 0x7, 0xf}, @TCA_HTB_RTAB={0x404, 0x4, [0xfffffffd, 0x1, 0x5, 0x3ff, 0x10ec, 0x2, 0xb, 0x7, 0x7ff, 0x2, 0x3, 0x2, 0xfffffffe, 0xb, 0x80000000, 0x1, 0x8, 0x7, 0x101, 0x4, 0x0, 0x9, 0x80000001, 0x0, 0x3, 0x9, 0x0, 0x9, 0x7, 0x5, 0x1, 0xfffffffe, 0x3, 0xffffffff, 0xfffffff8, 0x9, 0x100, 0x80000000, 0x5, 0x4, 0x0, 0x2, 0x6, 0x3, 0x800, 0x5, 0x0, 0xffff768f, 0x1, 0xa, 0x400, 0xbc9, 0x7, 0x7fff0, 0x9, 0xfff, 0x5e, 0x3, 0x10001, 0x5, 0x1ff, 0x8, 0x1000, 0xf43, 0x1, 0x81, 0xff, 0x96f, 0xf, 0x7, 0x8, 0xfff, 0xd, 0x1, 0x5, 0xbf, 0xffffffff, 0x4, 0xffffffff, 0x75, 0x9, 0xfffffff7, 0x4800, 0x0, 0xe4a, 0x8, 0x7ff, 0x7fffffff, 0x4a57be2e, 0xb, 0x24, 0x2, 0x8000, 0x7, 0x200, 0x7ff80, 0x6, 0xda1, 0xffff, 0x4, 0x3, 0x8000, 0x8, 0xcd6, 0x40, 0xff, 0x8001, 0x6, 0x5, 0x3, 0x8001, 0x1f, 0x9, 0xd, 0x2, 0xec, 0x7, 0x700000, 0x10001, 0x9, 0x9, 0x6, 0x8, 0x2, 0x800, 0x80000000, 0x49f3, 0x9, 0x2, 0x8, 0x1, 0xfff, 0xd90, 0xc, 0x2, 0x3d509855, 0xffffd12a, 0xe927, 0x8, 0x7fff, 0x41eedad4, 0x8, 0x1, 0xa, 0x3, 0x9, 0x8, 0x3, 0x10, 0x4, 0x8, 0x5, 0x8, 0x8c6c, 0xfff, 0x79a05ad8, 0x84c8afef, 0x6cca, 0x0, 0x9, 0x3, 0xfff, 0x5, 0x7, 0x7ff, 0x7ff, 0xf87, 0x8, 0xf, 0x4, 0x1, 0x4, 0x6, 0x4, 0xa, 0x9, 0x401, 0x9, 0x65, 0x40, 0x2, 0x6, 0x7, 0xa, 0x6a2f2a49, 0x0, 0x3, 0x9, 0x0, 0x5be, 0xb, 0x80, 0x6e1c, 0xfff, 0x7, 0x6, 0x8a, 0xa, 0x1193, 0x8, 0x9, 0x3, 0x1, 0x0, 0x5, 0x4, 0x7, 0x1eb, 0x1, 0xfff, 0x7c, 0x7, 0x1, 0x5f, 0xe8, 0x600, 0xf, 0x6, 0x15b, 0x0, 0x2, 0x6, 0x1ff, 0x9, 0x4, 0x0, 0x0, 0x7, 0x4, 0x2, 0xffffff62, 0x10, 0x7fffffff, 0x5bc9, 0x7, 0x9, 0x9d3, 0x10000, 0x4, 0x5, 0x6, 0xc, 0x200, 0x6, 0x3, 0xffff, 0x7, 0x2, 0x8001, 0x2, 0xfffff83a, 0xfffffffa, 0x9e, 0x1, 0x4, 0x8]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x0, 0xffffff28, 0x40, 0x100, 0x78b1, 0x2, 0x7, 0xffff, 0xffff0000, 0xffff, 0x8cf, 0x9, 0x9, 0x7, 0x400, 0x5, 0xd, 0xa, 0x9, 0x9, 0x9, 0x1, 0x0, 0x8, 0x7f1, 0xe, 0xa4c, 0x0, 0x5, 0x9, 0x9, 0x9, 0x2, 0xb5f, 0x101, 0x5, 0xac46, 0x9, 0x8, 0xb1e, 0x800, 0x5de, 0x5775f59f, 0x940a, 0x2, 0x12000, 0xfffffffb, 0x8, 0x10, 0x6, 0xfffffff7, 0x2, 0x1000, 0x6, 0x0, 0xf, 0xffff, 0x4d5, 0x4, 0x3, 0x3ff, 0xa, 0x2, 0x8000, 0x3, 0x6, 0x1, 0x6, 0x1, 0x1, 0x4, 0xe2f, 0x4, 0x8, 0x7, 0x441, 0x0, 0x4, 0x5, 0xb166, 0x5, 0x4, 0x4b9, 0xfffffff7, 0x4, 0x700, 0x6, 0x0, 0xfffffc01, 0xd7, 0x1, 0xffff8001, 0x7, 0x2, 0x0, 0xfffffff4, 0x80000001, 0x4, 0x7, 0x7, 0x20, 0x10000, 0xbfa, 0x800, 0xcad, 0x3, 0x2, 0x80, 0x244c07ba, 0x30, 0x4, 0x6, 0x7, 0x1, 0x8000, 0x6, 0xb4, 0x0, 0x3, 0x2, 0x9, 0x9, 0x5, 0xf, 0xa, 0x8, 0x3, 0x2, 0x4, 0x1, 0x10000, 0xc5, 0x7, 0x5, 0x1d, 0x2, 0x5, 0x8000, 0x9, 0x9, 0xd, 0xfffff801, 0x8, 0x80000, 0x12000, 0x20a, 0x4, 0x1, 0x913, 0x81, 0x3, 0x3, 0x3, 0x9466, 0x2, 0x5, 0x0, 0x4, 0x8, 0x3, 0x2, 0x89, 0x4, 0x8, 0x29263ccd, 0x20a2, 0x7, 0x2a, 0x7fff, 0x0, 0x80, 0x3, 0x634f, 0x3, 0xff, 0x1, 0x8, 0x6, 0x2, 0x1, 0x8, 0x0, 0xa1, 0x7fff, 0x400, 0x5, 0x1000, 0x4, 0x3, 0x5, 0x2000000, 0x9, 0x1, 0x9, 0x4, 0x6, 0xa05, 0x2c3c12c2, 0x400, 0x40, 0x6, 0xf, 0x0, 0x7fff, 0x1000, 0x2, 0x0, 0xf, 0x9, 0x0, 0x1, 0x9, 0x8000, 0x9, 0x2, 0x4, 0x6, 0x4, 0x8, 0x9, 0x9e2, 0x3, 0x8, 0x3, 0x8, 0x3, 0x2, 0x0, 0x40, 0x1ff, 0x2, 0x8, 0x1a, 0xfffeffff, 0x4, 0x6, 0x2, 0x3, 0x4, 0x1, 0xcc8, 0xfffffff7, 0x8, 0x699, 0x2, 0xfffff9a3, 0xffffffff, 0x800, 0x7ff, 0x55c, 0x4, 0x4, 0x7, 0x8, 0x2, 0x2]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0xd, 0x7}}]}, 0xc8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) 4.911622965s ago: executing program 1 (id=530): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0b00000005000000020000000400000005"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r1, 0x8910, &(0x7f0000000000)={'bridge_slave_1\x00', @ifru_mtu=0xd}) setitimer(0x2, &(0x7f0000000180)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setrlimit(0x0, &(0x7f00000003c0)={0x4001, 0xffffffffffffffff}) ioctl$sock_netdev_private(r1, 0x8943, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r1, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000040), 0x80, 0x200) ioctl$BLKSSZGET(r2, 0x1268, &(0x7f0000000300)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_int(r3, 0x1, 0x2f, 0x0, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$random(0xffffffffffffff9c, &(0x7f000000fe80), 0x40800, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$RNDADDENTROPY(r5, 0x5207, 0x0) setsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r7, 0x2, &(0x7f0000000200)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r6, 0x0}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f00000001c0)='m', 0x1}]) r8 = shmget$private(0x0, 0x13000, 0x200, &(0x7f0000feb000/0x13000)=nil) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1e8c03, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x3}) ioctl$TUNSETDEBUG(r9, 0x400454c9, 0xffffffffffffffff) ioctl$TUNSETNOCSUM(r9, 0x400454c8, 0x0) shmat(r8, &(0x7f0000fec000/0x4000)=nil, 0x600c) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) ioctl$PTP_PEROUT_REQUEST(r6, 0x40383d03, &(0x7f0000000100)={{0x4}, {0x3, 0x9}, 0x3, 0x1}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 4.419362648s ago: executing program 4 (id=531): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) shutdown(r4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x2018, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r6, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/25, 0x19}, 0x4}], 0x1, 0x40000120, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r7, 0x7}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="00007b8f93c300069500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 4.274137748s ago: executing program 5 (id=532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0xc, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0xf2}]}}]}, 0x38}}, 0x20040084) 3.787587501s ago: executing program 2 (id=533): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000d5d000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0xfffffffffffffffc, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") syz_mount_image$reiserfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x800c, &(0x7f00000000c0), 0x0, 0x111d, &(0x7f0000001480)="$eJzs2LFqFEEcBvBv9k7NobBy6RcLCwsJkbNWUyhca6uNSipT5SpFMA9jY+eDaCr7kF6LPMHK3eayCOFUkrPQ3w+Wmf3PNzsz5U4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgbph8K8lmlYyXtSpJSZrmcHqcpFnWb34eVCl5ujudPd6fPJl1sVQpz5Iyn5Xy8UGXnYwn43vj+5s7t7/M3rx9/WJvb3d/MfDyekmTo5NLPcUop3sZrAjNN7hxlgYAAID/R3th9e8t9OnGmtYHAAAAfuVybxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/lxb9/2ry06VpCRNczg9TtKcM+/KX9ofAAAAcHElVZ7X59W7a4De3Xyty1m97Tyssp0PdUaLyLBPV6sWXTkIAAAA/7z22qK5lXLQ/yaX933gToZ9fZEcZmurez9t8n0nGeRgY/vnb48eJTk6efdq/pR2sO6zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9iBYwEAAAAAYf7WaXRsAAAAAAAAAAAAAAAAAAAAAAAAAADAXgEAAP//1gXd9g==") removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@known='trusted.overlay.upper\x00') prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00002b3000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ptrace$getregset(0x4205, r0, 0x2, &(0x7f0000000080)={0x0}) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000100)={{{@in6=@local, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@loopback}}, &(0x7f0000000200)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000600)={&(0x7f00007a6000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/174, 0xae, 0x0, &(0x7f0000000540)=""/156, 0x9c}, &(0x7f0000000640)=0x40) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000300)={{}, {}, [{0x2, 0x4, r2}], {0x4, 0x2}, [{0x8, 0x1, r3}], {0x10, 0x1}}, 0x34, 0x0) 3.311161723s ago: executing program 4 (id=534): r0 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, 0x0, &(0x7f0000000080)) r1 = syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$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") r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x91, 0x3f, 0x40, 0x142}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0), &(0x7f0000000a80), 0x1007, r3}, 0x38) sendmsg$nl_xfrm(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b8000000190001000000000000000000e0000002000000000000000000000000000000000000020000000001000000004e220002ffff00000a000000870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000080000000000000000000000000000000000000000000000ac09000000000000fcffff00000000000000000000000040fbffffffffffffff000000000000000002000000000000000000000000000002e1000000000000000008"], 0xb8}}, 0x2c000010) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="b80000001900010000000000fddbdf25e0000002000000000000000000000000ff02000000000000000000000000000100000000000000000a000000290000003abaf4d4ae20de0444a96d2824621808ef500e044bb03982e0050b0c5be96718906bb02706279f4d63f476f075e386efdca3af61df4ed0a02f65014342e379c17f07c9dacab2f86f8f6b873b3fd62e1b8f10dd1b7d5ab12212c90eb8b8d4371b", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000700000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000ffffffffffffffff00"/112], 0x40}}, 0x4004) r5 = socket$nl_generic(0x11, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000100000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000c0c100000000000204e0000", 0x58}], 0x1) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0xfffd, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x22, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000010000000000000000000000000000000000000000a00000029000000b0d6b804d90864f696a9dd4033c87735fee018c7c8785ccdeb16e170f7e7b0947c953ea73d03098bf214da0a31b97f5e3825fbc2b23612", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000900000000000000000000000000000000000000000000000200000000000000ffffffffffffffff0000000000000000f8ffffffffffffff00000000000000000000000000000000ffffffffffffffff0700"/112], 0xb8}}, 0x10) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000)={'#! ', './file0', [{0x20, 'ocfs2\x00'}, {0x20, 'ocfs2\x00'}, {0x20, '[u('}, {0x20, '-.'}, {0x20, '/dev/loop'}, {0x20, '@/]#{,^\'}@[(\xef}'}, {0x20, '-'}, {}, {0x20, '/dev/loop'}, {0x20, '[(\x19&'}], 0xa, "90bd378cd7507aa42e72ec41b01f89de7d114df39bb677f6f6b6002b2e3ccc369b5dff8b02cacda2c1992b293acd8655b928a67a51b9d677ef72458564c6429cb594cf2f916ab3dbf687db90ce3594fd6f37f8405151bc68737bc60a4374183153bafd898cd897aab28820268e48bf25ace25eb0d337d9656a75bb071740269b29983aa4fa9d3da6117f6c5ec44a6c751cb084911aa2e85e60fc592f77f7029417fae7d5e66416849f143e61217e1dada2a3f1639c7d021b23d0af"}, 0x106) fcntl$dupfd(r1, 0x0, r1) time(0xfffffffffffffffc) r8 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r9 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r9, 0x6, 0x0, 0x0, 0x0) r10 = fsmount(r9, 0x0, 0x8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4048896, 0x0, 0x0) unshare(0x40400) write$cgroup_type(r10, 0x0, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x18, 0x3a, 0xb, 0x0, 0x0, {0x3}, [@nested={0x4}]}, 0x18}}, 0x0) ioctl$VIDIOC_S_CTRL(r8, 0xc008561c, &(0x7f00000000c0)={0xf0f025, 0xfb}) 3.026871273s ago: executing program 1 (id=535): ptrace$poke(0x5, 0xffffffffffffffff, &(0x7f0000000100), 0x5) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x321000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x8) sched_setaffinity(0x0, 0x62, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000300)=""/102400, 0x19000) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x0, 0x2}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000040)={0x0, 0xffffff78, 0x6, 0x8}, &(0x7f0000000080)=0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GCALLUSERDATA(r5, 0x891a, &(0x7f0000000340)={0x32, "963b77f122a5fbc3fd55d4e0819843b225bde09c13701411044cd3e19bb2a796af26123b12ed6668281ce81b4703b4604e925ada337dadac3d2dd3c90931c835f570527e4b88e383cf4c7334bd727a4f9e164765e75f5c1c69416b4c485547816ee7e6fcef3e144dc7bb13c7e38ba919e6be5f797f6001f2aaea26abb7757532"}) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r9, &(0x7f0000000000)=ANY=[@ANYBLOB="037a0000b5000000007cfe650000feff"], 0xc8) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x4}, {}, {0x1, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x0, 0x6, 0x8, 0x101, 0x4, 0xe, 0x7, 0x2}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000ac0)=ANY=[@ANYRES64=r4], &(0x7f0000000140)='syzkaller\x00', 0xa4, 0x0, 0x0, 0x0, 0x1, '\x00', r8, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={r3, 0x1}, 0x8) 3.006200414s ago: executing program 5 (id=536): r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000001c0), 0x101002, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01864c2, &(0x7f0000000200)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01864c1, &(0x7f0000000280)={r1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) getpid() syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./file0\x00') 2.227647258s ago: executing program 0 (id=537): socket$inet6(0xa, 0x3, 0x3a) r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd0000000000000109022400010000000009040000010300000009210500000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000000)={&(0x7f0000000380)=[{0x1, 0xc401, 0x4f, &(0x7f0000000780)="2fa4aaca555c80e980979899f7a2e96c76e007198cf35a3e86a08a361ab693d4b578c5ca80b3dcebae4a9ec3d2084a95f036c2dab0a8e13b7f4757b2a22bf27639286b466ddcf6b2cae2a5a1d1fe21"}], 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x80881, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r5, 0x4004743a, &(0x7f0000000300)) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x0, 0xc10}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x3c}}, 0xc000) 2.133615964s ago: executing program 5 (id=538): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1400000010000100fffffff5000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.036468341s ago: executing program 5 (id=539): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f00000000c0)={0x15, 0x110, 0xfa00, {r1, 0xba5, 0x0, 0x0, 0x0, @ib={0x1b, 0x5, 0x1, {"005c434623fd4943c4385c84edc17c79"}, 0x7, 0x9, 0x8}, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x2}}}, 0x118) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000240), 0x802, 0x0) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000700)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x40000, 0x0) syz_io_uring_setup(0x50c5, &(0x7f0000000780)={0x0, 0xfd1c, 0x80, 0x0, 0x3e1}, &(0x7f0000000800)=0x0, &(0x7f0000000840), &(0x7f0000000880)) r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000000, 0x10, 0xffffffffffffffff, 0x10000000) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, r4, &(0x7f0000000940)=@IORING_OP_OPENAT2={0x1c, 0x5, 0x0, 0xffffffffffffffff, &(0x7f00000008c0)={0x600000, 0x168, 0x11}, &(0x7f0000000900)='./file0\x00', 0x18, 0x0, 0x12345, {0x0, r5}}) r6 = syz_open_dev$sndctrl(&(0x7f0000000980), 0x1, 0x48000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r6, 0xc0045540, &(0x7f00000009c0)=0x7) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) r7 = openat$pfkey(0xffffffffffffff9c, 0x0, 0x8842, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r7, &(0x7f0000000ac0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x7}, {0xa, 0x4e20, 0x9b, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3ed}, 0xffffffffffffffff, 0x6}}, 0x48) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000e40)={0xc, 0x8, 0xfa00, {&(0x7f0000000cc0)}}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = accept4$phonet_pipe(r7, 0x0, &(0x7f0000000e80), 0x800) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000f80)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r7, 0x89f0, &(0x7f00000015c0)={'syztnl0\x00', &(0x7f0000001580)={'syztnl0\x00', 0x0, 0x52c6b60ceedbfb13, 0xd8, 0x1, 0x0, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x65, 0x0, 0x2, 0x2f, 0x0, @multicast2, @broadcast, {[@end]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000001600)={'wg1\x00', 0x0}) sendmmsg$inet(r8, &(0x7f0000001700)=[{{&(0x7f0000000ec0)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000f00)="bb2b", 0x2}], 0x1, &(0x7f0000000fc0)=[@ip_retopts={{0xc4, 0x0, 0x7, {[@lsrr={0x83, 0xb, 0x91, [@rand_addr=0x64010102, @multicast1]}, @timestamp={0x44, 0x10, 0x1c, 0x0, 0x4, [0x69ed, 0x3, 0x0]}, @timestamp_prespec={0x44, 0x4c, 0x3d, 0x3, 0xc, [{@dev={0xac, 0x14, 0x14, 0x3a}, 0xfffffff7}, {@broadcast, 0x7679}, {@remote, 0x1}, {@empty, 0x10001}, {@dev={0xac, 0x14, 0x14, 0x15}, 0xf}, {@remote, 0x996b}, {@rand_addr=0x64010102, 0x973c}, {@loopback, 0xffff8000}, {@multicast2, 0x40}]}, @cipso={0x86, 0x1d, 0x2, [{0x7, 0x7, "2926308658"}, {0x0, 0xd, "de88cb2bc1da1ab148d55b"}, {0x0, 0x3, 'H'}]}, @noop, @noop, @rr={0x7, 0x2b, 0xd0, [@multicast2, @loopback, @private=0xa010102, @broadcast, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, @rand_addr=0x64010100, @private=0xa010100, @dev={0xac, 0x14, 0x14, 0x43}]}]}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@cipso={0x86, 0x33, 0x1, [{0x0, 0x10, "08c45c14dc962d55c037b9851643"}, {0x1, 0xe, "b0f0277eb15cf7c9eb41c9bd"}, {0x4, 0xf, "cbe7b146ac11d2c5a234310d48"}]}, @generic={0x7, 0xd, "5dfeca51ceef46a94355ba"}, @timestamp={0x44, 0x8, 0x3b, 0x0, 0x8, [0x8]}, @timestamp={0x44, 0x8, 0x9c, 0x0, 0x0, [0x57b3a92d]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x7, 0x53, [@multicast2]}, @lsrr={0x83, 0x13, 0x23, [@empty, @private=0xa010102, @rand_addr=0x64010100, @broadcast]}, @ssrr={0x89, 0x1f, 0x7, [@private=0xa010101, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x38}, @dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010100, @local]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_retopts={{0x64, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0xf2, [@remote, @broadcast, @broadcast]}, @cipso={0x86, 0x2c, 0x2, [{0x1, 0xb, "528cc3543634f65428"}, {0x7, 0xd, "4f4f1ff0c6cce7a33a517f"}, {0x7, 0xe, "9371dadab1be61a66ab1e52e"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x13, 0x80, [@local, @local, @multicast1, @dev={0xac, 0x14, 0x14, 0x3a}]}, @end]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @private=0xa010102, @broadcast}}}], 0x250}}, {{&(0x7f0000001240)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001280)="5a07d10a789b1691ae70a5a8632250185cebe8fb5b0f265e3ccada488f945b98d0ce51f16ea6b6ffddd6dab9794ea4c37833ad53104a6458c5", 0x39}], 0x1}}, {{&(0x7f0000001300)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001540)=[{&(0x7f0000001340)="342e3c3f07836e0c4029c0339c2f4718b12fc8794d4a516b4e620f29147192fc2229717a919b9e1ded4bbc0dbe6c5582381567a396649d4399d4415c3c64706d6ab9", 0x42}, {&(0x7f00000013c0)="cdbe77ba9aaeae882e6a800c94e0976c078e5d6599d11ec31f9c8557f2feb1c2dca090805c9daab1c523dff81d13d5d5887052f7cf3f2a0a08b58a119cf8cd7dfa740833b957961a781aa56c5d2c497dff941c62ad3e0ce7de7acb274cfe89a64880f51a7a2a6e353102c2bafa874b7a07dba6573f0e884eb32075b563e96f6ee353af65d0d4c9", 0x87}], 0x2, &(0x7f0000001640)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @multicast1, @multicast2}}}, @ip_retopts={{0x2c, 0x0, 0x7, {[@end, @timestamp={0x44, 0x8, 0xf4, 0x0, 0x2, [0x0]}, @ra={0x94, 0x4}, @noop, @lsrr={0x83, 0xb, 0x53, [@loopback, @remote]}, @end]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @private=0xa010102, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x88}}], 0x3, 0x98c0) r12 = dup(r2) setsockopt$inet6_opts(r12, 0x29, 0x3b, &(0x7f00000017c0)=@dstopts={0x11, 0x205, '\x00', [@jumbo={0xc2, 0x4, 0xb7e}, @ra={0x5, 0x2, 0x5}, @generic={0x4, 0x1000, "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"}, @pad1, @hao={0xc9, 0x10, @loopback}, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xde5}, @padn={0x1, 0x2, [0x0, 0x0]}]}, 0x1038) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x37) ioctl$COMEDI_DEVCONFIG(r12, 0x40946400, &(0x7f0000002800)={'pcl724\x00', [0x335, 0x100, 0xdc2, 0x80000001, 0x4, 0x5, 0x5, 0x12, 0x6, 0x6, 0x6, 0xffffffff, 0x0, 0x3, 0x7f0d, 0x100, 0x4, 0x9, 0xffffff81, 0x7fffffff, 0x7, 0x3, 0x1, 0x1, 0x7, 0x163800, 0x7, 0x8, 0x105, 0x7, 0xffffffff, 0x81]}) connect$can_bcm(r7, &(0x7f00000028c0)={0x1d, r10}, 0x10) 1.939755487s ago: executing program 1 (id=540): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2000) ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000040)=""/14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000013c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) r5 = dup(r4) write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x80100, 0xfffd, 0x0, 0x2, 0x1}}, 0x50) sendmsg$TIPC_NL_BEARER_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x14, 0x0, 0x2, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40010) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)={0x50, r0, 0x801, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "88d43ab161e9013bb562ad5ecd"}]}]}, 0x50}}, 0x0) 1.678222985s ago: executing program 1 (id=541): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x42024, 0x8d85}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040014}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x2c, r2, 0x20, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x2c}}, 0x18) 1.474718319s ago: executing program 1 (id=542): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) shutdown(r4, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000040)=0x2018, 0x4) 1.195340888s ago: executing program 2 (id=543): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x1808014, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/716, @ANYRESHEX, @ANYBLOB="99b77d5bf0e4f488f1a06d3eaadf288d1a0bc9008f6a3bcf6564a3bb5d28e7605fcd02c5b1692869cd162d8accf9c2d716b7537a34aea4d2212a59e6b6205bb2b3ec1d7f1c1521d56d697305db68aeb1f641f73293b945e4a7c4ea5eaae5e241d70c42aa26b50f699caeec0b3ae27d32208d654541c7d2b05b73441275b81e91a5610bddc43ac550a55f5d56c8cece27675c29446ee82f70d92bcac9c21953637402f90a9eb507c8b69cdb6d090cfa24e99dff71609ae03282267987feec0478b447840876084eda7a22aecf54efa457d9ab75ad861e", @ANYBLOB="be0c386e4cdc3da35edc21c83330dd2cd3675bc494b4e83934f360ff1e86d52fd7c8efe5bb669a90b583ded38147d1"], 0x5, 0x5593, &(0x7f00000061c0)="$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") r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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") sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="44000000a0fb1d50584ce4800002010200000000000000000a000000300002802c00018014000300fc0000000000000000000000000000001400040000000000130000000000ffffac1414bb744b06"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r4 = socket(0x10, 0x80002, 0x0) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x208010, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2b2, &(0x7f0000000880)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x181042, 0x15) pwrite64(r5, &(0x7f0000000000)='2', 0x1, 0xa6c9) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) sendfile(r6, r5, 0x0, 0x8000) fanotify_init(0x200, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}}, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000440)={'syztnl1\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x8, 0x7, 0x32c5, 0x8, {{0x33, 0x4, 0x3, 0x8, 0xcc, 0x66, 0x0, 0x8, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}, @loopback, {[@generic={0x82, 0xa, "afb16571e6ae76e4"}, @end, @lsrr={0x83, 0x7, 0x62, [@remote]}, @cipso={0x86, 0x54, 0x0, [{0x6, 0x6, "af807721"}, {0x0, 0x2}, {0x7, 0xf, "825ad7fff4902fbdddad200a1c"}, {0x0, 0x12, "b7fb0f58fa07d2fdf2073827d18c4159"}, {0x5, 0x3, "ff"}, {0x0, 0xe, "7e8fc9ddb31051dcb281324e"}, {0x0, 0x3, "e4"}, {0x1, 0x4, "ce09"}, {0x6, 0x7, "2400cd6572"}, {0x5, 0x6, "c626fa7f"}]}, @noop, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x4c, 0xec, 0x1, 0x7, [{@broadcast, 0xf9}, {@multicast2, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80000000}, {@broadcast, 0x8}, {@rand_addr=0x64010101, 0x6}, {@broadcast, 0x9c8}, {@multicast1, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3f}, 0x9}, {@dev={0xac, 0x14, 0x14, 0xc}, 0x6}]}]}}}}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001500)=@newtclass={0xc8c, 0x28, 0x100, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0x1}, {0x3, 0x5}, {0xb, 0xb}}, [@tclass_kind_options=@c_htb={{0x8}, {0xc50, 0x2, [@TCA_HTB_CTAB={0x404, 0x3, [0x7, 0xe, 0xf, 0x3, 0xd7c, 0x200, 0x81, 0x2, 0x1, 0x3, 0x0, 0x81, 0x1b28e27f, 0x0, 0x2, 0x8f, 0xb, 0x400, 0x92, 0x3, 0x7, 0x2, 0x2, 0xa2b, 0x9, 0x7, 0x2, 0x7, 0x1fbf0ff5, 0x4, 0x5, 0x7dc6, 0x823, 0x6, 0x0, 0x4, 0x0, 0xfffffffb, 0x80000000, 0x77, 0x6, 0x4, 0x7, 0x4, 0x9d5, 0x2e, 0x5, 0x8, 0x1200, 0x6, 0x1, 0x8, 0x40, 0x3980, 0x1, 0x7, 0x400, 0x7fffffff, 0x7, 0x9, 0x1ff, 0x2, 0x4, 0x6, 0x528d, 0x6b2a, 0xc5, 0xd7a, 0x80, 0x2, 0xfff, 0x2, 0x8, 0xa00000, 0x8, 0x8, 0x4, 0x5, 0x0, 0x3ff, 0x1000, 0x9, 0xd14, 0x1, 0x4, 0x0, 0xff, 0x4, 0xff, 0x3, 0x4b95, 0x6, 0x7ff, 0x9, 0x7, 0x7, 0x1, 0x9, 0x2, 0x2, 0x7fffffff, 0x8, 0x1, 0x2, 0x1, 0x4, 0x40ca, 0xfffffffb, 0x7fff, 0x3, 0x1, 0x7, 0xd1, 0x3, 0x235e, 0x4, 0xd, 0x78, 0x5, 0x0, 0x9, 0x9, 0x4, 0x8f21, 0x200, 0x9, 0x1, 0x7, 0x9, 0x8000, 0xb709, 0x7, 0x2, 0xf17, 0x1, 0x10001, 0x4, 0x200, 0xad, 0x2, 0x2, 0x9, 0xd47, 0xfffff380, 0xfffffff3, 0x4, 0x0, 0xa, 0x2, 0x4, 0x3ee, 0x10000, 0xc, 0x0, 0xa, 0x1400, 0x8, 0xffffffff, 0x1, 0x80000000, 0x100, 0xf, 0x1, 0x9, 0x4a4f, 0x0, 0xfffffffd, 0x5, 0x3, 0xfffffffc, 0xf2, 0x7, 0x8, 0x8, 0x81, 0xa, 0xffffffff, 0x2, 0xb838, 0x7, 0x0, 0x5, 0x9, 0x5, 0x800, 0x5, 0x3ff, 0x0, 0x5, 0x8, 0x10000, 0xc, 0x7, 0x1, 0x7, 0x6, 0xffff, 0x40, 0x1, 0xf, 0x9, 0xff, 0xfffffff9, 0xa8fb, 0xfffffc00, 0x54, 0xa34, 0xfffffff1, 0x2, 0x9, 0x1, 0x2, 0x7, 0x8, 0x5, 0xe, 0x7, 0x8, 0x400, 0x7, 0x5, 0x1000, 0x8, 0x10001, 0x1, 0x445c, 0x6, 0x5, 0x4, 0x6a, 0x7ff, 0x0, 0x4000000, 0x88e, 0x4, 0xfa8c, 0x7fff, 0x7, 0x3, 0x1, 0x100, 0x800, 0xa75, 0x2, 0x10000, 0x956f, 0xd529, 0x41, 0x9, 0x4, 0x6, 0x1, 0x4, 0x6, 0xacf0, 0x1]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x2}, @TCA_HTB_CEIL64={0xc, 0x7, 0xf}, @TCA_HTB_RTAB={0x404, 0x4, [0xfffffffd, 0x1, 0x5, 0x3ff, 0x10ec, 0x2, 0xb, 0x7, 0x7ff, 0x2, 0x3, 0x2, 0xfffffffe, 0xb, 0x80000000, 0x1, 0x8, 0x7, 0x101, 0x4, 0x0, 0x9, 0x80000001, 0x0, 0x3, 0x9, 0x0, 0x9, 0x7, 0x5, 0x1, 0xfffffffe, 0x3, 0xffffffff, 0xfffffff8, 0x9, 0x100, 0x80000000, 0x5, 0x4, 0x0, 0x2, 0x6, 0x3, 0x800, 0x5, 0x0, 0xffff768f, 0x1, 0xa, 0x400, 0xbc9, 0x7, 0x7fff0, 0x9, 0xfff, 0x5e, 0x3, 0x10001, 0x5, 0x1ff, 0x8, 0x1000, 0xf43, 0x1, 0x81, 0xff, 0x96f, 0xf, 0x7, 0x8, 0xfff, 0xd, 0x1, 0x5, 0xbf, 0xffffffff, 0x4, 0xffffffff, 0x75, 0x9, 0xfffffff7, 0x4800, 0x0, 0xe4a, 0x8, 0x7ff, 0x7fffffff, 0x4a57be2e, 0xb, 0x24, 0x2, 0x8000, 0x7, 0x200, 0x7ff80, 0x6, 0xda1, 0xffff, 0x4, 0x3, 0x8000, 0x8, 0xcd6, 0x40, 0xff, 0x8001, 0x6, 0x5, 0x3, 0x8001, 0x1f, 0x9, 0xd, 0x2, 0xec, 0x7, 0x700000, 0x10001, 0x9, 0x9, 0x6, 0x8, 0x2, 0x800, 0x80000000, 0x49f3, 0x9, 0x2, 0x8, 0x1, 0xfff, 0xd90, 0xc, 0x2, 0x3d509855, 0xffffd12a, 0xe927, 0x8, 0x7fff, 0x41eedad4, 0x8, 0x1, 0xa, 0x3, 0x9, 0x8, 0x3, 0x10, 0x4, 0x8, 0x5, 0x8, 0x8c6c, 0xfff, 0x79a05ad8, 0x84c8afef, 0x6cca, 0x0, 0x9, 0x3, 0xfff, 0x5, 0x7, 0x7ff, 0x7ff, 0xf87, 0x8, 0xf, 0x4, 0x1, 0x4, 0x6, 0x4, 0xa, 0x9, 0x401, 0x9, 0x65, 0x40, 0x2, 0x6, 0x7, 0xa, 0x6a2f2a49, 0x0, 0x3, 0x9, 0x0, 0x5be, 0xb, 0x80, 0x6e1c, 0xfff, 0x7, 0x6, 0x8a, 0xa, 0x1193, 0x8, 0x9, 0x3, 0x1, 0x0, 0x5, 0x4, 0x7, 0x1eb, 0x1, 0xfff, 0x7c, 0x7, 0x1, 0x5f, 0xe8, 0x600, 0xf, 0x6, 0x15b, 0x0, 0x2, 0x6, 0x1ff, 0x9, 0x4, 0x0, 0x0, 0x7, 0x4, 0x2, 0xffffff62, 0x10, 0x7fffffff, 0x5bc9, 0x7, 0x9, 0x9d3, 0x10000, 0x4, 0x5, 0x6, 0xc, 0x200, 0x6, 0x3, 0xffff, 0x7, 0x2, 0x8001, 0x2, 0xfffff83a, 0xfffffffa, 0x9e, 0x1, 0x4, 0x8]}, @TCA_HTB_OFFLOAD={0x4}, @TCA_HTB_RTAB={0x404, 0x4, [0x0, 0xffffff28, 0x40, 0x100, 0x78b1, 0x2, 0x7, 0xffff, 0xffff0000, 0xffff, 0x8cf, 0x9, 0x9, 0x7, 0x400, 0x5, 0xd, 0xa, 0x9, 0x9, 0x9, 0x1, 0x0, 0x8, 0x7f1, 0xe, 0xa4c, 0x0, 0x5, 0x9, 0x9, 0x9, 0x2, 0xb5f, 0x101, 0x5, 0xac46, 0x9, 0x8, 0xb1e, 0x800, 0x5de, 0x5775f59f, 0x940a, 0x2, 0x12000, 0xfffffffb, 0x8, 0x10, 0x6, 0xfffffff7, 0x2, 0x1000, 0x6, 0x0, 0xf, 0xffff, 0x4d5, 0x4, 0x3, 0x3ff, 0xa, 0x2, 0x8000, 0x3, 0x6, 0x1, 0x6, 0x1, 0x1, 0x4, 0xe2f, 0x4, 0x8, 0x7, 0x441, 0x0, 0x4, 0x5, 0xb166, 0x5, 0x4, 0x4b9, 0xfffffff7, 0x4, 0x700, 0x6, 0x0, 0xfffffc01, 0xd7, 0x1, 0xffff8001, 0x7, 0x2, 0x0, 0xfffffff4, 0x80000001, 0x4, 0x7, 0x7, 0x20, 0x10000, 0xbfa, 0x800, 0xcad, 0x3, 0x2, 0x80, 0x244c07ba, 0x30, 0x4, 0x6, 0x7, 0x1, 0x8000, 0x6, 0xb4, 0x0, 0x3, 0x2, 0x9, 0x9, 0x5, 0xf, 0xa, 0x8, 0x3, 0x2, 0x4, 0x1, 0x10000, 0xc5, 0x7, 0x5, 0x1d, 0x2, 0x5, 0x8000, 0x9, 0x9, 0xd, 0xfffff801, 0x8, 0x80000, 0x12000, 0x20a, 0x4, 0x1, 0x913, 0x81, 0x3, 0x3, 0x3, 0x9466, 0x2, 0x5, 0x0, 0x4, 0x8, 0x3, 0x2, 0x89, 0x4, 0x8, 0x29263ccd, 0x20a2, 0x7, 0x2a, 0x7fff, 0x0, 0x80, 0x3, 0x634f, 0x3, 0xff, 0x1, 0x8, 0x6, 0x2, 0x1, 0x8, 0x0, 0xa1, 0x7fff, 0x400, 0x5, 0x1000, 0x4, 0x3, 0x5, 0x2000000, 0x9, 0x1, 0x9, 0x4, 0x6, 0xa05, 0x2c3c12c2, 0x400, 0x40, 0x6, 0xf, 0x0, 0x7fff, 0x1000, 0x2, 0x0, 0xf, 0x9, 0x0, 0x1, 0x9, 0x8000, 0x9, 0x2, 0x4, 0x6, 0x4, 0x8, 0x9, 0x9e2, 0x3, 0x8, 0x3, 0x8, 0x3, 0x2, 0x0, 0x40, 0x1ff, 0x2, 0x8, 0x1a, 0xfffeffff, 0x4, 0x6, 0x2, 0x3, 0x4, 0x1, 0xcc8, 0xfffffff7, 0x8, 0x699, 0x2, 0xfffff9a3, 0xffffffff, 0x800, 0x7ff, 0x55c, 0x4, 0x4, 0x7, 0x8, 0x2, 0x2]}, @TCA_HTB_CEIL64={0xc, 0x7, 0x7}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}, @TCA_HTB_RATE64={0xc, 0x6, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0x2}}, @TCA_RATE={0x6, 0x5, {0xd, 0x7}}]}, 0xc8c}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) r8 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r8, 0x4c81, 0x0) 1.139935852s ago: executing program 4 (id=544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000000000000000000000000007f180100002200000000000000002020207b1af8ff00000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={r0, 0x0, 0x0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0xa}}, 0x20) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) shutdown(r4, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000040)=0x2018, 0x4) connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) recvmmsg(r6, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)=""/232, 0xe8}], 0x1, &(0x7f00000006c0)=""/25, 0x19}, 0x4}], 0x1, 0x40000120, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000380)=[@in6={0xa, 0x4e20, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={r7, 0x7}, &(0x7f0000000140)=0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="00007b8f93c300069500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x80) 1.091656155s ago: executing program 5 (id=545): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) syz_emit_ethernet(0x72, &(0x7f0000000240)={@broadcast, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "c172f5", 0x38, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @local}, @local, {[], @param_prob={0x4, 0x0, 0x0, 0xffbf, {0x5, 0x6, "54d03a", 0x402, 0x88, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', [@hopopts={0xc}]}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000480)={0x1, 0xcbbf, 0xfffffffffffffffa}) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r6, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x1c, 0x2, [@TCA_CBS_PARMS={0x18, 0x1, {0x81, '\x00', 0xfffff000, 0x31, 0x3, 0x581}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 288.15339ms ago: executing program 1 (id=546): userfaultfd(0x80001) openat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x2000, 0x100, 0x2}, 0x18) openat$dlm_control(0xffffffffffffff9c, 0x0, 0x181000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800000, &(0x7f0000000100)={[{@ikeep}, {@inode32}]}, 0x1, 0x9874, &(0x7f0000000140)="$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") socket(0x10, 0x803, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000005c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x558, 0x0, 0xffffff80, 0x178, 0x0, 0x178, 0x488, 0x22b, 0x258, 0x488, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x300, 0x320, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x258}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x0, 0x0, 0xfd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {0x0, 0x1}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0xfd}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x8000000}}, {0x28}}}}, 0x5b8) 0s ago: executing program 4 (id=547): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000300)={0x40, 0x8}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x3, 0x1, 0x8}}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f00000005c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2a}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x5, &(0x7f0000000100)={0x17, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}}) kernel console output (not intermixed with test programs): h -22 [ 83.611294][ T4281] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 83.636770][ T4337] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 83.645604][ T4337] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 83.656715][ T4337] F2FS-fs (loop1): invalid crc value [ 83.694005][ T4337] F2FS-fs (loop1): Found nat_bits in checkpoint [ 83.751067][ T4337] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 83.760419][ T4337] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 84.605816][ T4350] netlink: 24 bytes leftover after parsing attributes in process `syz.1.17'. [ 85.645571][ T4232] vhci_hcd: vhci_device speed not set [ 85.675698][ T4282] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 85.691297][ T4282] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 85.708496][ T1325] usb 5-1: USB disconnect, device number 2 [ 86.076774][ T4358] ptrace attach of "./syz-executor exec"[4359] was attempted by "./syz-executor exec"[4358] [ 87.392442][ T1107] cfg80211: failed to load regulatory.db [ 87.688711][ T4361] loop2: detected capacity change from 0 to 32768 [ 87.859439][ T4361] XFS (loop2): Mounting V5 Filesystem [ 88.020045][ T4361] XFS (loop2): Ending clean mount [ 88.041259][ T4361] XFS (loop2): Quotacheck needed: Please wait. [ 88.249648][ T4361] XFS (loop2): Quotacheck: Done. [ 88.540742][ T4371] loop4: detected capacity change from 0 to 40427 [ 88.662034][ T4371] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 88.671824][ T4371] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 88.695741][ T4373] loop1: detected capacity change from 0 to 40427 [ 88.695856][ T4371] F2FS-fs (loop4): invalid crc value [ 88.742526][ T4373] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 88.752236][ T4373] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 88.777055][ T4373] F2FS-fs (loop1): invalid crc value [ 88.821885][ T4371] F2FS-fs (loop4): Found nat_bits in checkpoint [ 88.872738][ T4373] F2FS-fs (loop1): Found nat_bits in checkpoint [ 88.904651][ T4371] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 88.912265][ T4371] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 88.936126][ T4373] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 88.944457][ T4373] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 92.949188][ T4385] attempt to access beyond end of device [ 92.949188][ T4385] loop4: rw=2049, want=45104, limit=40427 [ 92.955316][ T4383] netlink: 40 bytes leftover after parsing attributes in process `syz.1.22'. [ 92.971081][ T4385] netlink: 40 bytes leftover after parsing attributes in process `syz.4.23'. [ 93.236038][ T682] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 93.250026][ T682] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 93.250535][ T4199] XFS (loop2): Unmounting Filesystem [ 93.260434][ T154] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 93.315184][ T154] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 93.892423][ T4389] sctp: [Deprecated]: syz.0.27 (pid 4389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 93.892423][ T4389] Use struct sctp_sack_info instead [ 94.198515][ T4393] loop2: detected capacity change from 0 to 256 [ 94.238357][ T4393] exfat: Deprecated parameter 'utf8' [ 94.244979][ T4393] exfat: Deprecated parameter 'namecase' [ 94.484724][ T4393] exfat: Unknown parameter 'zero_size_dir' [ 94.709681][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 95.140589][ T4407] netlink: 36 bytes leftover after parsing attributes in process `syz.2.29'. [ 95.191073][ T4405] netlink: 28 bytes leftover after parsing attributes in process `syz.0.28'. [ 95.294842][ T4405] netlink: 8 bytes leftover after parsing attributes in process `syz.0.28'. [ 95.304842][ T4410] loop2: detected capacity change from 0 to 1024 [ 95.305814][ T4405] netlink: 4 bytes leftover after parsing attributes in process `syz.0.28'. [ 95.388168][ T4410] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 95.405236][ T4410] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 95.443070][ T4410] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 95.476472][ T4410] System zones: 0-1, 3-36 [ 95.514788][ T4410] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 96.645824][ T4418] loop1: detected capacity change from 0 to 512 [ 96.775776][ T4418] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 96.855478][ T4418] FAT-fs (loop1): FAT read failed (blocknr 1568) [ 96.957823][ T4232] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.971435][ T4418] FAT-fs (loop1): FAT read failed (blocknr 1568) [ 97.328221][ T4422] chnl_net:caif_netlink_parms(): no params data found [ 97.420034][ T4232] usb 1-1: config 1 has an invalid descriptor of length 143, skipping remainder of the config [ 97.552582][ T4232] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 98.065314][ T4294] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.280418][ T4232] usb 1-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 98.343634][ T4232] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.397929][ T4274] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 98.413852][ T4232] usb 1-1: Product: syz [ 98.457995][ T4232] usb 1-1: can't set config #1, error -71 [ 98.492789][ T4232] usb 1-1: USB disconnect, device number 3 [ 98.605411][ T4294] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.918624][ T2277] Bluetooth: hci5: command 0x0409 tx timeout [ 99.106698][ T4294] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.129641][ T4422] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.140020][ T4422] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.150447][ T4422] device bridge_slave_0 entered promiscuous mode [ 99.163535][ T4422] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.172636][ T4422] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.182754][ T4422] device bridge_slave_1 entered promiscuous mode [ 100.718272][ T7] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 100.759703][ T4294] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.987919][ T13] Bluetooth: hci5: command 0x041b tx timeout [ 101.038582][ T4440] loop2: detected capacity change from 0 to 32768 [ 101.056890][ T4422] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.071161][ T4422] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.142812][ T4422] team0: Port device team_slave_0 added [ 101.169457][ T4422] team0: Port device team_slave_1 added [ 101.250663][ T4422] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.258620][ T4422] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.286763][ T4422] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.306736][ T4422] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.315792][ T4422] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.349657][ T4422] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.488017][ T4422] device hsr_slave_0 entered promiscuous mode [ 101.546065][ T4422] device hsr_slave_1 entered promiscuous mode [ 101.574795][ T4422] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.589912][ T4422] Cannot create hsr debugfs directory [ 101.787653][ T4463] loop1: detected capacity change from 0 to 8192 [ 101.906924][ T4463] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal [ 101.978091][ T4463] REISERFS (device loop1): using ordered data mode [ 102.030894][ T4463] reiserfs: using flush barriers [ 102.050875][ T4463] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 102.177304][ T4463] REISERFS (device loop1): checking transaction log (loop1) [ 102.199812][ T4422] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.279320][ T4463] REISERFS (device loop1): Using tea hash to sort names [ 102.352963][ T4422] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.643098][ T4422] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.773456][ T4422] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.967875][ T4487] loop2: detected capacity change from 0 to 40427 [ 103.076047][ T2277] Bluetooth: hci5: command 0x040f tx timeout [ 103.338252][ T13] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 103.660952][ T4487] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 103.669920][ T4487] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 103.690942][ T4487] F2FS-fs (loop2): invalid crc value [ 103.774118][ T4487] F2FS-fs (loop2): Found nat_bits in checkpoint [ 103.827531][ T4487] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 103.835112][ T4487] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 104.144729][ T4422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.703948][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 104.744906][ T3091] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 104.841312][ T4422] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.855908][ T4282] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 104.885036][ T4282] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 105.084211][ T682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.105483][ T682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.148345][ T1325] Bluetooth: hci5: command 0x0419 tx timeout [ 105.214806][ T682] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.223527][ T682] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.321277][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.400546][ T4510] netlink: 28 bytes leftover after parsing attributes in process `syz.1.49'. [ 105.446924][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.489311][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.541433][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.550307][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.658619][ T4512] netlink: 8 bytes leftover after parsing attributes in process `syz.1.49'. [ 105.708793][ T4512] netlink: 4 bytes leftover after parsing attributes in process `syz.1.49'. [ 105.867168][ T4510] loop1: detected capacity change from 0 to 4096 [ 105.996491][ T4518] loop4: detected capacity change from 0 to 40427 [ 106.077471][ T4518] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 106.087197][ T4518] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 106.135778][ T4518] F2FS-fs (loop4): invalid crc value [ 106.145184][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 106.169767][ T4518] F2FS-fs (loop4): Found nat_bits in checkpoint [ 106.176643][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 106.238595][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 106.250788][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 106.261986][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 106.270334][ T4518] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 106.277623][ T4518] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 106.351322][ T4294] device hsr_slave_0 left promiscuous mode [ 106.375562][ T4294] device hsr_slave_1 left promiscuous mode [ 106.398050][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.417194][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.505660][ T4294] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.572662][ T4294] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.627441][ T4294] device bridge_slave_1 left promiscuous mode [ 106.636790][ T4294] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.651767][ T4294] device bridge_slave_0 left promiscuous mode [ 106.659169][ T4294] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.001441][ T4540] attempt to access beyond end of device [ 107.001441][ T4540] loop4: rw=2049, want=45104, limit=40427 [ 107.417836][ T2277] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 107.571117][ T4280] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 107.589571][ T4294] device veth1_macvtap left promiscuous mode [ 107.612087][ T4294] device veth0_macvtap left promiscuous mode [ 107.618783][ T4280] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 107.639515][ T4294] device veth1_vlan left promiscuous mode [ 107.711086][ T4294] device veth0_vlan left promiscuous mode [ 107.807573][ T2277] usb 2-1: config 1 has an invalid descriptor of length 143, skipping remainder of the config [ 107.840859][ T2277] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.028987][ T2277] usb 2-1: New USB device found, idVendor=0e41, idProduct=3061, bcdDevice= 0.40 [ 108.039192][ T2277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.051042][ T2277] usb 2-1: Product: syz [ 108.056895][ T2277] usb 2-1: Manufacturer: syz [ 108.062136][ T2277] usb 2-1: SerialNumber: syz [ 108.949448][ T4294] team0 (unregistering): Port device team_slave_1 removed [ 108.970952][ T4294] team0 (unregistering): Port device team_slave_0 removed [ 108.986567][ T4294] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.003673][ T4294] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.085203][ T4294] bond0 (unregistering): Released all slaves [ 109.135577][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.145713][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.156161][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.165943][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.218563][ T4546] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.230402][ T4546] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.240294][ T4546] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.250247][ T4546] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 109.271847][ T4546] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.282429][ T4546] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.292550][ T4546] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.302809][ T4546] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 109.338944][ T4422] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.375455][ T4422] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.417681][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.482683][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.587813][ T4555] loop4: detected capacity change from 0 to 32768 [ 109.646830][ T4546] syz.0.52 (4546) used greatest stack depth: 20944 bytes left [ 109.658633][ T4175] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 109.674380][ T4187] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 109.751142][ T4187] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 109.777023][ T4187] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 109.790080][ T2277] usb 2-1: 0:1 : does not exist [ 109.804086][ T2277] usb 2-1: unit 4 not found! [ 110.228398][ T4227] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 110.308576][ T4175] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 110.430489][ T4175] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.550562][ T4175] usb 3-1: Product: syz [ 110.568657][ T4175] usb 3-1: Manufacturer: syz [ 110.591730][ T4175] usb 3-1: SerialNumber: syz [ 110.624478][ T4555] XFS (loop4): Mounting V5 Filesystem [ 110.648299][ T2277] usb 2-1: USB disconnect, device number 4 [ 110.657589][ T4175] usb 3-1: config 0 descriptor?? [ 110.712297][ T4175] hub 3-1:0.0: bad descriptor, ignoring hub [ 110.726683][ T4175] hub: probe of 3-1:0.0 failed with error -5 [ 110.896462][ T682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.938143][ T4175] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 110.949614][ T4555] XFS (loop4): Ending clean mount [ 110.952033][ T682] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.973459][ T4175] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 110.979641][ T4555] XFS (loop4): Quotacheck needed: Please wait. [ 111.010077][ T4175] dib0700: firmware download failed at 7 with -22 [ 111.011093][ T4422] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.128468][ T4555] XFS (loop4): Quotacheck: Done. [ 111.152252][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 111.471690][ T4194] XFS (loop4): Unmounting Filesystem [ 111.752597][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.785445][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.866819][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.904947][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.949270][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.978560][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.011041][ T4422] device veth0_vlan entered promiscuous mode [ 112.059980][ T4422] device veth1_vlan entered promiscuous mode [ 112.176064][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.203158][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.231873][ T4591] loop1: detected capacity change from 0 to 32768 [ 112.239596][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.298027][ T4281] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.323950][ T4422] device veth0_macvtap entered promiscuous mode [ 112.380772][ T4422] device veth1_macvtap entered promiscuous mode [ 112.424423][ T4591] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.437358][ T4591] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.447417][ T4591] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.458251][ T4591] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.477573][ T4591] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.488443][ T4591] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.498445][ T4591] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.508020][ T4591] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.569127][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.607681][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.637260][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.736681][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.827649][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.887553][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.913922][ T4607] loop4: detected capacity change from 0 to 40427 [ 112.937805][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 112.950630][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.969659][ T4422] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.980357][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 113.035142][ T4607] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 113.047995][ T4607] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 113.074094][ T4607] F2FS-fs (loop4): invalid crc value [ 113.085126][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 113.113641][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.135024][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.159523][ T4274] usb 3-1: reset high-speed USB device number 2 using dummy_hcd [ 113.179197][ T4607] F2FS-fs (loop4): Found nat_bits in checkpoint [ 113.242119][ T4607] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 113.250510][ T4607] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 113.260379][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.323670][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.366179][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.423362][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.466775][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.555413][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.569056][ T4422] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 113.582138][ T4422] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.597890][ T4422] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.618929][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.642251][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.987928][ T4624] attempt to access beyond end of device [ 113.987928][ T4624] loop4: rw=2049, want=45104, limit=40427 [ 114.265075][ T4422] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.285283][ T4422] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.357829][ T4422] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.377832][ T4422] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.399785][ T4624] netlink: 40 bytes leftover after parsing attributes in process `syz.4.59'. [ 114.542110][ T682] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 114.621889][ T682] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 114.704457][ T4401] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.733453][ T4401] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.783245][ T682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 115.018099][ T4400] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.077198][ T4400] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.142068][ T4400] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.030070][ T4653] loop2: detected capacity change from 0 to 1024 [ 117.038602][ T4269] usb 3-1: USB disconnect, device number 2 [ 117.178083][ T4653] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 117.247019][ T4653] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.309949][ T4657] loop1: detected capacity change from 0 to 40427 [ 117.337823][ T4654] loop4: detected capacity change from 0 to 8192 [ 117.347621][ T4653] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 117.363979][ T4657] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 117.373259][ T4657] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 117.393345][ T4657] F2FS-fs (loop1): invalid crc value [ 117.401750][ T4653] System zones: 0-1, 3-36 [ 117.470804][ T4653] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 117.514047][ T4654] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 117.531182][ T4654] REISERFS (device loop4): using ordered data mode [ 117.550860][ T4657] F2FS-fs (loop1): Found nat_bits in checkpoint [ 117.589283][ T4654] reiserfs: using flush barriers [ 117.685405][ T4654] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 117.768334][ T4654] REISERFS (device loop4): checking transaction log (loop4) [ 117.787126][ T4654] REISERFS (device loop4): Using tea hash to sort names [ 117.802877][ T4657] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 117.811274][ T4657] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 117.839547][ T4670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.69'. [ 118.085563][ T4675] netlink: 16 bytes leftover after parsing attributes in process `syz.2.65'. [ 118.483201][ T4681] loop5: detected capacity change from 0 to 128 [ 118.716639][ T4681] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 118.813471][ T144] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 118.848105][ T4681] ext4 filesystem being mounted at /2/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.866310][ T144] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 118.957251][ T4670] netlink: 12 bytes leftover after parsing attributes in process `syz.5.69'. [ 119.540108][ T4693] loop2: detected capacity change from 0 to 32768 [ 119.628793][ T4693] XFS: ikeep mount option is deprecated. [ 119.805777][ T4693] XFS (loop2): Mounting V5 Filesystem [ 119.816768][ T4705] syz.1.70 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 119.831532][ T4705] vivid-001: disconnect [ 119.841127][ T4704] vivid-001: reconnect [ 120.110375][ T4693] XFS (loop2): Ending clean mount [ 120.247969][ T4712] loop1: detected capacity change from 0 to 40427 [ 120.628623][ T4716] sctp: [Deprecated]: syz.5.73 (pid 4716) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.628623][ T4716] Use struct sctp_sack_info instead [ 120.736241][ T4712] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 120.746327][ T4712] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 120.786045][ T4712] F2FS-fs (loop1): invalid crc value [ 120.963388][ T4712] F2FS-fs (loop1): Found nat_bits in checkpoint [ 121.027233][ T4199] XFS (loop2): Unmounting Filesystem [ 121.053578][ T4712] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 121.061865][ T4712] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 121.200284][ T4731] sctp: [Deprecated]: syz.0.74 (pid 4731) Use of struct sctp_assoc_value in delayed_ack socket option. [ 121.200284][ T4731] Use struct sctp_sack_info instead [ 122.441775][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 122.496576][ T9] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 122.771458][ T4760] netlink: 36 bytes leftover after parsing attributes in process `syz.2.77'. [ 122.864424][ T4761] ptrace attach of "./syz-executor exec"[4762] was attempted by "./syz-executor exec"[4761] [ 123.973969][ T4772] loop4: detected capacity change from 0 to 256 [ 124.052214][ T4772] exfat: Deprecated parameter 'utf8' [ 124.278403][ T4772] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 124.607764][ C1] sched: RT throttling activated [ 124.784399][ T4781] sctp: [Deprecated]: syz.0.88 (pid 4781) Use of struct sctp_assoc_value in delayed_ack socket option. [ 124.784399][ T4781] Use struct sctp_sack_info instead [ 125.112388][ T4792] netlink: 56 bytes leftover after parsing attributes in process `syz.5.90'. [ 125.218296][ T4794] loop1: detected capacity change from 0 to 1024 [ 125.367651][ T4799] loop5: detected capacity change from 0 to 128 [ 125.417504][ T4794] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 125.516018][ T4794] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 125.589486][ T4799] FAT-fs (loop5): Unrecognized mount option "usefRee" or missing value [ 125.851477][ T4794] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 128.231482][ T4794] System zones: 0-1, 3-36 [ 128.236878][ T4794] EXT4-fs: error -4 creating inode table initialization thread [ 128.247132][ T4794] EXT4-fs (loop1): mount failed [ 128.675033][ T4822] ptrace attach of "./syz-executor exec"[4823] was attempted by "./syz-executor exec"[4822] [ 129.381259][ T4826] netlink: 36 bytes leftover after parsing attributes in process `syz.1.97'. [ 130.458244][ T4846] netlink: 56 bytes leftover after parsing attributes in process `syz.1.103'. [ 130.477882][ T2277] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 130.573511][ T4849] loop1: detected capacity change from 0 to 1024 [ 130.606730][ T4849] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 130.617467][ T4849] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 130.638014][ T4269] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 130.728000][ T4852] sctp: [Deprecated]: syz.5.101 (pid 4852) Use of struct sctp_assoc_value in delayed_ack socket option. [ 130.728000][ T4852] Use struct sctp_sack_info instead [ 130.823146][ T4849] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 130.903740][ T4849] System zones: 0-1, 3-36 [ 130.946380][ T4849] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 131.029554][ T4829] loop4: detected capacity change from 0 to 32768 [ 131.097844][ T2277] usb 1-1: Using ep0 maxpacket: 32 [ 131.242761][ T4269] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 131.305274][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.315847][ T4269] usb 3-1: Product: syz [ 131.320832][ T4269] usb 3-1: Manufacturer: syz [ 131.326386][ T4269] usb 3-1: SerialNumber: syz [ 131.348967][ T4829] XFS (loop4): Mounting V5 Filesystem [ 131.563220][ T4863] loop5: detected capacity change from 0 to 40427 [ 131.573868][ T4867] netlink: 16 bytes leftover after parsing attributes in process `syz.1.104'. [ 131.712695][ T4269] usb 3-1: config 0 descriptor?? [ 132.219027][ T4269] hub 3-1:0.0: bad descriptor, ignoring hub [ 132.264492][ T4269] hub: probe of 3-1:0.0 failed with error -5 [ 132.308790][ T4829] XFS (loop4): Ending clean mount [ 132.320490][ T2277] usb 1-1: device descriptor read/all, error -71 [ 132.328172][ T4863] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 132.336663][ T4863] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 132.351301][ T4863] F2FS-fs (loop5): invalid crc value [ 132.385843][ T4829] XFS (loop4): Quotacheck needed: Please wait. [ 132.411326][ T4863] F2FS-fs (loop5): Found nat_bits in checkpoint [ 132.457995][ T4269] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in cold state, will try to load a firmware [ 132.513190][ T4863] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 132.521724][ T4863] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 132.529963][ T4269] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw' [ 133.478571][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.485886][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.688420][ T4269] dib0700: firmware download failed at 7 with -22 [ 134.123829][ T4829] XFS (loop4): Quotacheck: Done. [ 134.144534][ T4280] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 134.196501][ T4280] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 134.211385][ T4194] XFS (loop4): Unmounting Filesystem [ 134.340950][ T4898] netlink: 36 bytes leftover after parsing attributes in process `syz.1.111'. [ 134.680125][ T13] usb 3-1: USB disconnect, device number 3 [ 134.912990][ T4907] loop2: detected capacity change from 0 to 32768 [ 134.958869][ T4907] XFS: ikeep mount option is deprecated. [ 135.167668][ T4907] XFS (loop2): Mounting V5 Filesystem [ 135.314768][ T4907] XFS (loop2): Ending clean mount [ 135.598319][ T4926] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 136.104107][ T4199] XFS (loop2): Unmounting Filesystem [ 136.291363][ T4938] netlink: 56 bytes leftover after parsing attributes in process `syz.0.117'. [ 136.605909][ T4940] loop5: detected capacity change from 0 to 40427 [ 136.663024][ T4949] netlink: 28 bytes leftover after parsing attributes in process `syz.0.120'. [ 136.700374][ T4940] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 136.708763][ T4940] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 136.736804][ T4940] F2FS-fs (loop5): invalid crc value [ 136.890123][ T4940] F2FS-fs (loop5): Found nat_bits in checkpoint [ 136.905743][ T4952] process 'syz.0.120' launched './file0' with NULL argv: empty string added [ 136.932667][ T4956] loop1: detected capacity change from 0 to 1024 [ 136.943019][ T4940] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 136.950405][ T4940] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 137.303726][ T4956] EXT4-fs (loop1): Ignoring removed orlov option [ 137.482308][ T4956] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 138.418917][ T4956] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 138.520638][ T4282] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 138.552222][ T4282] F2FS-fs (loop5): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 138.874935][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.209814][ T4986] loop4: detected capacity change from 0 to 32768 [ 139.448330][ T4986] XFS: ikeep mount option is deprecated. [ 139.463553][ T13] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.527923][ T4269] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 139.558067][ T13] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 139.636410][ T13] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.680639][ T13] usb 2-1: config 0 descriptor?? [ 139.736053][ T13] usb 2-1: bad CDC descriptors [ 139.762291][ T5003] loop5: detected capacity change from 0 to 64 [ 139.805925][ T4986] XFS (loop4): Mounting V5 Filesystem [ 139.913645][ T23] usb 2-1: USB disconnect, device number 5 [ 140.061848][ T5003] hfs: keylen 1794 too large [ 140.118524][ T4269] usb 3-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 140.129823][ T4986] XFS (loop4): Ending clean mount [ 140.144656][ T5012] netlink: 56 bytes leftover after parsing attributes in process `syz.1.130'. [ 140.177471][ T4269] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 140.256951][ T4269] usb 3-1: Product: syz [ 140.268642][ T4269] usb 3-1: Manufacturer: syz [ 140.287365][ T4269] usb 3-1: SerialNumber: syz [ 140.465905][ T4269] usb 3-1: config 0 descriptor?? [ 140.520534][ T4269] hub 3-1:0.0: bad descriptor, ignoring hub [ 140.580913][ T5026] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 141.065550][ T4269] hub: probe of 3-1:0.0 failed with error -5 [ 141.067626][ T5028] loop1: detected capacity change from 0 to 40427 [ 141.127428][ T5028] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 141.137130][ T5028] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 141.155709][ T4194] XFS (loop4): Unmounting Filesystem [ 141.178351][ T4269] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 141.187006][ T5028] F2FS-fs (loop1): invalid crc value [ 141.188328][ T5032] capability: warning: `syz.5.132' uses deprecated v2 capabilities in a way that may be insecure [ 141.235159][ T5028] F2FS-fs (loop1): Found nat_bits in checkpoint [ 141.240202][ T4269] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 141.298281][ T4269] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 141.318999][ T4269] usb 3-1: media controller created [ 141.349510][ T5028] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 141.357297][ T5028] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 141.363655][ T4269] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.591386][ T4269] DVB: Unable to find symbol dib7000p_attach() [ 142.191726][ T4269] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 142.197311][ T4280] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 142.287204][ T4280] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 142.357901][ T4269] rc_core: IR keymap rc-dib0700-rc5 not found [ 142.364682][ T4269] Registered IR keymap rc-empty [ 142.398768][ T4269] dvb-usb: could not initialize remote control. [ 142.405353][ T4269] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 142.548300][ T4269] usb 3-1: USB disconnect, device number 4 [ 142.562968][ T5062] netlink: 56 bytes leftover after parsing attributes in process `syz.5.141'. [ 143.098879][ T4269] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 143.341857][ T5065] netlink: 52 bytes leftover after parsing attributes in process `syz.0.140'. [ 143.452673][ T5073] netlink: 15 bytes leftover after parsing attributes in process `syz.5.143'. [ 143.510751][ T5073] netlink: 15 bytes leftover after parsing attributes in process `syz.5.143'. [ 143.560552][ T5073] netlink: 15 bytes leftover after parsing attributes in process `syz.5.143'. [ 143.888039][ T4229] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 144.320744][ T5073] netlink: 15 bytes leftover after parsing attributes in process `syz.5.143'. [ 144.347718][ T5073] netlink: 15 bytes leftover after parsing attributes in process `syz.5.143'. [ 144.418476][ T5073] netlink: 15 bytes leftover after parsing attributes in process `syz.5.143'. [ 144.467876][ T5073] netlink: 15 bytes leftover after parsing attributes in process `syz.5.143'. [ 144.511114][ T5094] loop1: detected capacity change from 0 to 64 [ 144.522674][ T5073] netlink: 15 bytes leftover after parsing attributes in process `syz.5.143'. [ 144.845404][ T5097] loop2: detected capacity change from 0 to 40427 [ 144.853728][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 144.892470][ T5097] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 144.900748][ T5097] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 144.904021][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 144.923595][ T5097] F2FS-fs (loop2): invalid crc value [ 144.948372][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 144.969955][ T5097] F2FS-fs (loop2): Found nat_bits in checkpoint [ 145.037435][ T5097] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 145.047796][ T5097] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 145.949355][ T4400] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 145.999802][ T4400] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 146.082037][ T5121] device syzkaller0 entered promiscuous mode [ 146.400094][ T5134] af_packet: tpacket_rcv: packet too big, clamped from 197 to 4294967272. macoff=96 [ 146.627665][ T5137] loop1: detected capacity change from 0 to 4096 [ 146.820141][ T5137] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 146.930309][ T5145] ptrace attach of "./syz-executor exec"[5146] was attempted by "./syz-executor exec"[5145] [ 147.828143][ T5149] loop5: detected capacity change from 0 to 32768 [ 148.157204][ T5152] loop4: detected capacity change from 0 to 40427 [ 148.629474][ T5149] XFS: ikeep mount option is deprecated. [ 148.745746][ T5152] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 148.755135][ T5152] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 148.765224][ T5137] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 148.779933][ T5152] F2FS-fs (loop4): invalid crc value [ 148.788688][ T5137] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 148.796746][ T5137] ntfs3: loop1: Failed to load $MFT. [ 148.804494][ T5137] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 148.813690][ T5137] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 148.833143][ T5149] XFS (loop5): Mounting V5 Filesystem [ 148.860354][ T5152] F2FS-fs (loop4): Found nat_bits in checkpoint [ 148.931320][ T5152] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 148.939063][ T5152] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 149.191262][ T5149] XFS (loop5): Ending clean mount [ 150.365836][ T4967] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 150.389110][ T4422] XFS (loop5): Unmounting Filesystem [ 150.481089][ T5163] loop2: detected capacity change from 0 to 32768 [ 150.487797][ T4967] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 150.539658][ T5163] (syz.2.162,5163,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options [ 150.589319][ T5194] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 150.602971][ T5163] (syz.2.162,5163,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 150.691723][ T5197] lo speed is unknown, defaulting to 1000 [ 150.843571][ T5197] lo speed is unknown, defaulting to 1000 [ 150.891053][ T5202] __nla_validate_parse: 136 callbacks suppressed [ 150.891077][ T5202] netlink: 36 bytes leftover after parsing attributes in process `syz.2.167'. [ 150.907105][ T5197] lo speed is unknown, defaulting to 1000 [ 150.945822][ T5197] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 151.099671][ T5197] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 151.296790][ T5197] lo speed is unknown, defaulting to 1000 [ 151.394588][ T5208] loop2: detected capacity change from 0 to 32768 [ 151.409058][ T5197] lo speed is unknown, defaulting to 1000 [ 151.415897][ T5197] lo speed is unknown, defaulting to 1000 [ 151.422809][ T5197] lo speed is unknown, defaulting to 1000 [ 151.429956][ T5197] lo speed is unknown, defaulting to 1000 [ 151.580686][ T5208] XFS (loop2): Mounting V5 Filesystem [ 151.736053][ T5208] XFS (loop2): Ending clean mount [ 151.747812][ T5208] XFS (loop2): Quotacheck needed: Please wait. [ 151.766936][ T5230] netlink: 56 bytes leftover after parsing attributes in process `syz.4.171'. [ 151.881924][ T5208] XFS (loop2): Quotacheck: Done. [ 152.024199][ T4199] XFS (loop2): Unmounting Filesystem [ 152.118156][ T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 152.405882][ T5240] loop4: detected capacity change from 0 to 40427 [ 152.475320][ T5240] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 152.484533][ T5240] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 152.513595][ T5240] F2FS-fs (loop4): invalid crc value [ 152.701686][ T5217] loop5: detected capacity change from 0 to 32768 [ 152.714383][ T5240] F2FS-fs (loop4): Found nat_bits in checkpoint [ 152.782739][ T5240] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 152.791013][ T5240] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 154.180186][ T5250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.174'. [ 154.269200][ T26] audit: type=1800 audit(1775455188.201:2): pid=5217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.165" name="bus" dev="loop5" ino=7 res=0 errno=0 [ 154.467636][ T4400] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 154.509745][ T4400] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 154.522711][ T5257] tipc: Enabling of bearer rejected, failed to enable media [ 154.658707][ T5261] netlink: 36 bytes leftover after parsing attributes in process `syz.2.173'. [ 154.707513][ T5260] netlink: 36 bytes leftover after parsing attributes in process `syz.2.173'. [ 154.830476][ T5270] netlink: 36 bytes leftover after parsing attributes in process `syz.2.179'. [ 155.099484][ T5276] loop5: detected capacity change from 0 to 512 [ 155.251762][ T5276] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouid32,journal_dev=0x0000000000000006,,errors=continue. Quota mode: writeback. [ 155.354823][ T5276] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 155.548932][ T5276] EXT4-fs error (device loop5): ext4_xattr_block_get:543: inode #12: comm syz.5.180: corrupted xattr block 6 [ 155.838672][ T5276] overlayfs: failed to get origin (-117) [ 156.211310][ T5276] EXT4-fs error (device loop5): ext4_xattr_block_find:1855: inode #12: comm syz.5.180: corrupted xattr block 6 [ 156.303248][ T5276] overlayfs: failed to verify origin (/, ino=2, err=-117) [ 156.321543][ T5276] overlayfs: failed to verify upper root origin [ 156.694769][ T5297] loop4: detected capacity change from 0 to 32768 [ 156.994582][ T5303] loop2: detected capacity change from 0 to 40427 [ 156.998230][ T5297] XFS (loop4): Mounting V5 Filesystem [ 157.059795][ T5316] loop5: detected capacity change from 0 to 512 [ 157.126481][ T5303] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 157.138025][ T5303] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 157.169557][ T5303] F2FS-fs (loop2): invalid crc value [ 157.194724][ T5303] F2FS-fs (loop2): Found nat_bits in checkpoint [ 157.290774][ T5303] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 157.299834][ T5303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 157.349746][ T5297] XFS (loop4): Ending clean mount [ 157.357917][ T5297] XFS (loop4): Quotacheck needed: Please wait. [ 157.420245][ T5316] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback. [ 157.528292][ T5316] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 158.124239][ T5297] XFS (loop4): Quotacheck: Done. [ 158.146375][ T4963] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 158.188073][ T4269] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 158.218351][ T4963] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 158.224367][ T4194] XFS (loop4): Unmounting Filesystem [ 158.598187][ T4269] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 158.627852][ T4269] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 158.676246][ T4269] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 158.717984][ T4269] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.821615][ T4269] hub 1-1:4.0: USB hub found [ 159.003818][ T4269] hub 1-1:4.0: config failed, can't read hub descriptor (err -22) [ 159.021654][ T5359] netlink: 36 bytes leftover after parsing attributes in process `syz.0.192'. [ 159.117159][ T4269] usb 1-1: USB disconnect, device number 8 [ 159.259331][ T5356] loop2: detected capacity change from 0 to 32768 [ 159.296974][ T5364] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 159.328678][ T5356] XFS: ikeep mount option is deprecated. [ 159.457644][ T5356] XFS (loop2): Mounting V5 Filesystem [ 159.488020][ T1107] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 160.130851][ T5356] XFS (loop2): Ending clean mount [ 160.447637][ T5386] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 160.943672][ T4199] XFS (loop2): Unmounting Filesystem [ 161.022934][ T5349] loop5: detected capacity change from 0 to 1024 [ 161.150398][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 161.214937][ T1107] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 161.257003][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.295368][ T1107] usb 5-1: config 0 descriptor?? [ 161.398227][ T2277] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 161.647856][ T2277] usb 2-1: Using ep0 maxpacket: 8 [ 161.667945][ T1107] usbhid 5-1:0.0: can't add hid device: -71 [ 161.683206][ T1107] usbhid: probe of 5-1:0.0 failed with error -71 [ 161.699879][ T5404] sctp: [Deprecated]: syz.0.197 (pid 5404) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.699879][ T5404] Use struct sctp_sack_info instead [ 161.735415][ T1107] usb 5-1: USB disconnect, device number 6 [ 162.179057][ T1107] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 162.238364][ T4269] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 162.528098][ T1107] usb 5-1: Using ep0 maxpacket: 32 [ 162.628402][ T2277] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 162.647859][ T2277] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 162.656959][ T2277] usb 2-1: Product: syz [ 162.658299][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 162.662328][ T2277] usb 2-1: Manufacturer: syz [ 162.686601][ T2277] usb 2-1: SerialNumber: syz [ 162.707456][ T2277] usb 2-1: config 0 descriptor?? [ 162.821530][ T2277] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 162.848838][ T1107] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 162.859461][ T1107] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.880145][ T1107] usb 5-1: config 0 descriptor?? [ 162.913414][ T1107] usb 5-1: can't set config #0, error -71 [ 163.420844][ T1107] usb 5-1: USB disconnect, device number 7 [ 163.629796][ T5390] sg_write: data in/out 262109/64 bytes for SCSI command 0x69-- guessing data in; [ 163.629796][ T5390] program syz.1.196 not setting count and/or reply_len properly [ 163.861394][ T5421] loop4: detected capacity change from 0 to 40427 [ 163.910097][ T2277] gspca_sonixj: reg_r err -32 [ 163.917674][ T2277] sonixj: probe of 2-1:0.0 failed with error -32 [ 163.940494][ T5421] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 163.950399][ T5421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 163.969370][ T5421] F2FS-fs (loop4): invalid crc value [ 164.125482][ T5424] loop5: detected capacity change from 0 to 32768 [ 164.189976][ T5421] F2FS-fs (loop4): Found nat_bits in checkpoint [ 164.269664][ T5421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 164.278149][ T5421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 164.287073][ T5424] XFS (loop5): Mounting V5 Filesystem [ 164.495778][ T5424] XFS (loop5): Ending clean mount [ 164.508355][ T5424] XFS (loop5): Quotacheck needed: Please wait. [ 165.066377][ T1107] usb 2-1: USB disconnect, device number 7 [ 165.219283][ T5424] XFS (loop5): Quotacheck: Done. [ 165.292323][ T5456] netlink: 36 bytes leftover after parsing attributes in process `syz.2.203'. [ 165.303856][ T4401] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 165.317310][ T4401] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 165.408746][ T4422] XFS (loop5): Unmounting Filesystem [ 165.839401][ T5462] loop2: detected capacity change from 0 to 32768 [ 165.918723][ T5462] XFS: ikeep mount option is deprecated. [ 166.530416][ T5462] XFS (loop2): Mounting V5 Filesystem [ 166.778262][ T5462] XFS (loop2): Ending clean mount [ 167.062321][ T5481] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 167.515245][ T4199] XFS (loop2): Unmounting Filesystem [ 167.569696][ T5478] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.863325][ T5478] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.992864][ T5478] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.078623][ T5505] loop4: detected capacity change from 0 to 4096 [ 168.111697][ T5507] loop2: detected capacity change from 0 to 128 [ 168.147614][ T5478] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.192613][ T5507] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 168.802045][ T5516] loop5: detected capacity change from 0 to 40427 [ 169.029899][ T5516] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 169.029974][ T5516] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 169.033618][ T5516] F2FS-fs (loop5): invalid crc value [ 169.217368][ T5516] F2FS-fs (loop5): Found nat_bits in checkpoint [ 169.451247][ T5516] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 169.451284][ T5516] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 169.493077][ T5478] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.510631][ T5478] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.729414][ T5478] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.828955][ T5526] loop2: detected capacity change from 0 to 32768 [ 169.943129][ T5478] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.068860][ T1325] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 170.190198][ T5526] XFS (loop2): Mounting V5 Filesystem [ 170.373401][ T5526] XFS (loop2): Ending clean mount [ 170.383521][ T5526] XFS (loop2): Quotacheck needed: Please wait. [ 170.754039][ T5546] ptrace attach of "./syz-executor exec"[5547] was attempted by "./syz-executor exec"[5546] [ 171.455110][ T5550] netlink: 56 bytes leftover after parsing attributes in process `syz.5.219'. [ 171.554232][ T5526] XFS (loop2): Quotacheck: Done. [ 172.115468][ T5556] loop5: detected capacity change from 0 to 32768 [ 172.258865][ T5556] XFS: ikeep mount option is deprecated. [ 172.282403][ T4199] XFS (loop2): Unmounting Filesystem [ 172.382317][ T5556] XFS (loop5): Mounting V5 Filesystem [ 172.464715][ T5537] loop1: detected capacity change from 0 to 32768 [ 172.543060][ T5556] XFS (loop5): Ending clean mount [ 172.838355][ T5568] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 173.144902][ T5537] XFS (loop1): Mounting V5 Filesystem [ 173.201792][ T5552] loop4: detected capacity change from 0 to 32768 [ 173.296351][ T4422] XFS (loop5): Unmounting Filesystem [ 173.303938][ T5537] XFS (loop1): log mount failed [ 173.469873][ T5552] [ 173.469873][ T5552] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.469873][ T5552] [ 173.568987][ T5552] [ 173.568987][ T5552] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.568987][ T5552] [ 173.686163][ T5552] [ 173.686163][ T5552] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 173.686163][ T5552] [ 174.303733][ T5585] netlink: 36 bytes leftover after parsing attributes in process `syz.5.223'. [ 175.333186][ T5607] netlink: 40 bytes leftover after parsing attributes in process `syz.0.227'. [ 176.350875][ T5606] loop5: detected capacity change from 0 to 32768 [ 176.454926][ T5619] loop4: detected capacity change from 0 to 256 [ 176.508031][ T1107] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 176.530371][ T5606] XFS (loop5): Mounting V5 Filesystem [ 176.660488][ T5600] loop2: detected capacity change from 0 to 32768 [ 176.703251][ T5600] (syz.2.230,5600,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.742881][ T5600] (syz.2.230,5600,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 176.767084][ T5606] XFS (loop5): Ending clean mount [ 176.784137][ T5606] XFS (loop5): Quotacheck needed: Please wait. [ 176.892883][ T5606] XFS (loop5): Quotacheck: Done. [ 177.034659][ T5600] JBD2: Ignoring recovery information on journal [ 177.158589][ T1107] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 177.190237][ T1107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.242796][ T5633] loop4: detected capacity change from 0 to 32768 [ 177.272114][ T1107] usb 1-1: Product: syz [ 177.288485][ T5600] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 177.288600][ T5633] XFS: ikeep mount option is deprecated. [ 177.306361][ T1107] usb 1-1: Manufacturer: syz [ 177.311743][ T1107] usb 1-1: SerialNumber: syz [ 177.369261][ T1107] usb 1-1: config 0 descriptor?? [ 177.468032][ T5633] XFS (loop4): Mounting V5 Filesystem [ 177.481871][ T1107] hub 1-1:0.0: bad descriptor, ignoring hub [ 177.507386][ T4422] XFS (loop5): Unmounting Filesystem [ 177.517975][ T1107] hub: probe of 1-1:0.0 failed with error -5 [ 177.531577][ T5641] trusted_key: encrypted_key: insufficient parameters specified [ 177.563592][ T5633] XFS (loop4): Ending clean mount [ 177.700389][ T1107] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 177.738669][ T1107] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.834259][ T1107] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 177.859364][ T5647] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 178.016885][ T1107] usb 1-1: media controller created [ 178.130703][ T1107] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 178.365997][ T4194] XFS (loop4): Unmounting Filesystem [ 178.429510][ T1107] DVB: Unable to find symbol dib7000p_attach() [ 178.470281][ T1107] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 178.684558][ T1107] rc_core: IR keymap rc-dib0700-rc5 not found [ 178.692330][ T1107] Registered IR keymap rc-empty [ 178.752158][ T1107] dvb-usb: could not initialize remote control. [ 178.762112][ T1107] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 178.815429][ T1107] usb 1-1: USB disconnect, device number 9 [ 178.861397][ T4199] ocfs2: Unmounting device (7,2) on (node local) [ 178.937255][ T1107] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 180.481494][ T5664] loop5: detected capacity change from 0 to 8192 [ 180.684180][ T5657] loop4: detected capacity change from 0 to 40427 [ 180.872264][ T5677] ptrace attach of "./syz-executor exec"[5678] was attempted by "./syz-executor exec"[5677] [ 181.498056][ T5664] REISERFS (device loop5): found reiserfs format "3.5" with non-standard journal [ 181.598018][ T5664] REISERFS (device loop5): using ordered data mode [ 181.645674][ T5664] reiserfs: using flush barriers [ 181.734293][ T5664] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 181.783887][ T5682] loop1: detected capacity change from 0 to 64 [ 181.940380][ T5664] REISERFS (device loop5): checking transaction log (loop5) [ 182.019127][ T5664] REISERFS (device loop5): Using tea hash to sort names [ 182.115801][ T5664] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage. [ 182.822346][ T5683] ubi31: attaching mtd0 [ 182.830185][ T5683] ubi31: scanning is finished [ 182.835632][ T5683] ubi31: empty MTD device detected [ 182.873978][ T4188] Bluetooth: Frame is too long (len 12, expected len 4) [ 182.954956][ T5683] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 182.963633][ T5683] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 182.972331][ T5683] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 182.980357][ T5683] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 182.988707][ T5683] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 182.996775][ T5683] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 183.006669][ T5683] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 879722765 [ 183.018460][ T5683] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 183.127963][ T5687] ubi31: background thread "ubi_bgt31d" started, PID 5687 [ 183.172026][ T5682] virtiofs: Unexpected value for 'dax' [ 184.330119][ T5693] loop4: detected capacity change from 0 to 32768 [ 184.408788][ T5693] XFS: ikeep mount option is deprecated. [ 184.636907][ T5693] XFS (loop4): Mounting V5 Filesystem [ 184.720447][ T5709] netlink: 16 bytes leftover after parsing attributes in process `syz.0.252'. [ 185.420241][ T5693] XFS (loop4): Ending clean mount [ 185.631691][ T5699] device wireguard0 entered promiscuous mode [ 185.696206][ T5721] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 186.194022][ T4194] XFS (loop4): Unmounting Filesystem [ 186.879420][ T5730] netlink: 36 bytes leftover after parsing attributes in process `syz.1.256'. [ 187.007079][ T5733] netlink: 56 bytes leftover after parsing attributes in process `syz.0.258'. [ 187.055929][ T5736] loop1: detected capacity change from 0 to 1024 [ 187.204337][ T5736] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 187.245364][ T5736] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 187.294927][ T5735] loop5: detected capacity change from 0 to 32768 [ 187.380240][ T5736] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 187.456082][ T5736] System zones: 0-1, 3-36 [ 187.484003][ T5736] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 187.517980][ T23] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 187.560018][ T5735] XFS (loop5): Mounting V5 Filesystem [ 187.589470][ T5747] device macvlan2 entered promiscuous mode [ 187.603418][ T5747] device vlan1 entered promiscuous mode [ 187.650752][ T5747] team0: Port device macvlan2 added [ 187.651721][ T5735] XFS (loop5): Ending clean mount [ 187.664762][ T5735] XFS (loop5): Quotacheck needed: Please wait. [ 187.834131][ T5735] XFS (loop5): Quotacheck: Done. [ 187.975026][ T23] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 188.008982][ T23] usb 1-1: config 0 has no interface number 0 [ 188.015876][ T23] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 188.073056][ T5755] loop2: detected capacity change from 0 to 64 [ 188.131522][ T5756] netlink: 16 bytes leftover after parsing attributes in process `syz.1.257'. [ 188.728129][ T23] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 188.742093][ T23] usb 1-1: config 0 interface 2 altsetting 2 endpoint 0x82 has invalid maxpacket 192, setting to 64 [ 188.755691][ T23] usb 1-1: config 0 interface 2 has no altsetting 0 [ 188.885838][ T4422] XFS (loop5): Unmounting Filesystem [ 188.980344][ T23] usb 1-1: New USB device found, idVendor=086a, idProduct=0003, bcdDevice=f0.3f [ 188.994666][ T5760] loop2: detected capacity change from 0 to 256 [ 189.015939][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.034834][ T5760] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 189.037439][ T23] usb 1-1: Product: syz [ 189.062889][ T23] usb 1-1: Manufacturer: syz [ 189.079683][ T23] usb 1-1: SerialNumber: syz [ 189.105063][ T23] usb 1-1: config 0 descriptor?? [ 189.111472][ T5760] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 189.154110][ T5738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.169631][ T5738] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.404468][ T5762] infiniband syz1: set active [ 189.423029][ T5762] infiniband syz1: added syz_tun [ 190.073944][ T23] usb 1-1: USB disconnect, device number 10 [ 190.289422][ T5762] RDS/IB: syz1: added [ 190.347147][ T5762] smc: adding ib device syz1 with port count 1 [ 190.377498][ T5762] smc: ib device syz1 port 1 has pnetid [ 190.379000][ T5776] netlink: 36 bytes leftover after parsing attributes in process `syz.0.268'. [ 190.514638][ T5763] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 190.613282][ T4180] udevd[4180]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.654362][ T5779] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'. [ 190.773219][ T5779] device bond1 entered promiscuous mode [ 190.826057][ T5780] device bridge1 entered promiscuous mode [ 190.838884][ T5774] loop2: detected capacity change from 0 to 32768 [ 190.920873][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 190.982662][ T5774] XFS (loop2): Mounting V5 Filesystem [ 190.995967][ T5789] loop5: detected capacity change from 0 to 2048 [ 191.004387][ T5780] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 191.019133][ T5794] loop4: detected capacity change from 0 to 128 [ 191.101881][ T5794] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c01c, mo2=0002] [ 191.122826][ T5774] XFS (loop2): Ending clean mount [ 191.149373][ T5794] System zones: 1-3, 19-19, 35-36 [ 191.161099][ T5794] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,debug,,errors=continue. Quota mode: none. [ 191.163109][ T23] usb 1-1: device descriptor read/64, error -71 [ 191.175073][ T5794] ext4 filesystem being mounted at /53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 191.239044][ T5774] XFS (loop2): Quotacheck needed: Please wait. [ 191.352141][ T5797] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 191.406911][ T5774] XFS (loop2): Quotacheck: Done. [ 191.517945][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 191.580945][ T4199] XFS (loop2): Unmounting Filesystem [ 191.751616][ T23] usb 1-1: device descriptor read/64, error -71 [ 192.001551][ T4269] Bluetooth: hci0: command 0x0406 tx timeout [ 192.009350][ T23] usb usb1-port1: attempt power cycle [ 192.016193][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 192.023767][ T4269] Bluetooth: hci3: command 0x0406 tx timeout [ 192.030952][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 192.351864][ T5804] netlink: 56 bytes leftover after parsing attributes in process `syz.2.271'. [ 192.458085][ T23] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 192.795689][ T5808] loop1: detected capacity change from 0 to 32768 [ 192.805374][ T23] usb 1-1: device descriptor read/8, error -71 [ 193.108044][ T23] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 193.160724][ T5808] XFS (loop1): Mounting V5 Filesystem [ 193.291802][ T23] usb 1-1: device descriptor read/8, error -71 [ 193.488699][ T23] usb usb1-port1: unable to enumerate USB device [ 193.814587][ T5808] XFS (loop1): Ending clean mount [ 193.822428][ T5808] XFS (loop1): Quotacheck needed: Please wait. [ 193.906447][ T5834] netlink: 12 bytes leftover after parsing attributes in process `syz.2.279'. [ 193.990151][ T5808] XFS (loop1): Quotacheck: Done. [ 194.008721][ T5836] netlink: 36 bytes leftover after parsing attributes in process `syz.4.281'. [ 194.158556][ T4187] XFS (loop1): Unmounting Filesystem [ 194.310358][ T5841] netlink: 56 bytes leftover after parsing attributes in process `syz.4.284'. [ 194.485190][ T5843] loop4: detected capacity change from 0 to 512 [ 194.621380][ T5843] EXT4-fs (loop4): Unrecognized mount option "defcontext=user_u" or missing value [ 194.648925][ T5845] sctp: [Deprecated]: syz.0.280 (pid 5845) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.648925][ T5845] Use struct sctp_sack_info instead [ 194.797219][ T5843] xt_hashlimit: max too large, truncated to 1048576 [ 194.924332][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.931099][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.069376][ T5848] loop5: detected capacity change from 0 to 512 [ 195.119977][ T5838] loop2: detected capacity change from 0 to 32768 [ 195.142685][ T5851] device syzkaller0 entered promiscuous mode [ 195.348705][ T5848] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 195.378933][ T5838] ERROR: (device loop2): xtSearch: XT_GETPAGE: xtree page corrupt [ 195.378933][ T5838] [ 195.413501][ T5848] EXT4-fs (loop5): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 195.442430][ T5843] loop4: detected capacity change from 0 to 4096 [ 195.456077][ T5838] ERROR: (device loop2): remounting filesystem as read-only [ 195.516392][ T5838] xtLookup: xtSearch returned -5 [ 195.551650][ T5838] read_mapping_page failed! [ 195.576552][ T5848] EXT4-fs (loop5): revision level too high, forcing read-only mode [ 195.596913][ T5838] jfs_mount: diMount failed w/rc = -5 [ 195.619032][ T5848] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=c040e01c, mo2=0000] [ 195.653479][ T5838] Mount JFS Failure: -5 [ 195.661155][ T5848] EXT4-fs (loop5): too many log groups per flexible block group [ 195.695617][ T5848] EXT4-fs (loop5): failed to initialize mballoc (-12) [ 195.714070][ T5848] EXT4-fs (loop5): mount failed [ 199.206723][ T21] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 199.261332][ T2277] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 199.327498][ T5881] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 199.658220][ T2277] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 199.687625][ T2277] usb 2-1: config 0 has no interface number 0 [ 199.920913][ T5886] netlink: 36 bytes leftover after parsing attributes in process `syz.0.295'. [ 199.991733][ T5884] loop4: detected capacity change from 0 to 32768 [ 200.002338][ T2277] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 200.018380][ T2277] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 200.032392][ T5888] netlink: 56 bytes leftover after parsing attributes in process `syz.0.296'. [ 200.061771][ T2277] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 200.087716][ T2277] usb 2-1: config 0 interface 1 has no altsetting 0 [ 200.107309][ T5879] loop5: detected capacity change from 0 to 32768 [ 200.111686][ T2277] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 200.137193][ T2277] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.177937][ T5884] XFS (loop4): Mounting V5 Filesystem [ 200.186601][ T2277] usb 2-1: config 0 descriptor?? [ 200.295469][ T5901] loop2: detected capacity change from 0 to 1024 [ 200.402777][ T5905] netlink: 16 bytes leftover after parsing attributes in process `syz.0.297'. [ 200.576989][ T5884] XFS (loop4): Ending clean mount [ 200.603604][ T5884] XFS (loop4): Quotacheck needed: Please wait. [ 200.794361][ T5901] EXT4-fs (loop2): Ignoring removed orlov option [ 200.952685][ T5901] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 201.062524][ T5879] XFS (loop5): Mounting V5 Filesystem [ 201.086272][ T5901] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,dioread_nolock,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none. [ 201.176091][ T5915] netlink: 20 bytes leftover after parsing attributes in process `syz.0.299'. [ 201.187295][ T2277] uclogic 0003:145F:0212.0001: failed retrieving string descriptor #100: -71 [ 201.197953][ T5884] XFS (loop4): Quotacheck: Done. [ 201.204007][ T2277] uclogic 0003:145F:0212.0001: failed retrieving pen parameters: -71 [ 201.212858][ T2277] uclogic 0003:145F:0212.0001: pen probing failed: -71 [ 201.221819][ T2277] uclogic 0003:145F:0212.0001: failed probing parameters: -71 [ 201.231670][ T2277] uclogic: probe of 0003:145F:0212.0001 failed with error -71 [ 201.263949][ T2277] usb 2-1: USB disconnect, device number 8 [ 201.309447][ T4194] XFS (loop4): Unmounting Filesystem [ 201.360868][ T4178] udevd[4178]: incorrect ext4 checksum on /dev/loop2 [ 202.357382][ T5879] XFS (loop5): Ending clean mount [ 202.558001][ T5879] XFS (loop5): Quotacheck needed: Please wait. [ 203.063610][ T4179] udevd[4179]: incorrect ext4 checksum on /dev/loop2 [ 203.169890][ T5879] XFS (loop5): Quotacheck: Done. [ 203.293512][ T5937] netlink: 36 bytes leftover after parsing attributes in process `syz.0.306'. [ 203.326662][ T4422] XFS (loop5): Unmounting Filesystem [ 203.331720][ T5941] netlink: 36 bytes leftover after parsing attributes in process `syz.1.307'. [ 203.639528][ T5943] loop2: detected capacity change from 0 to 32768 [ 203.698528][ T5952] loop1: detected capacity change from 0 to 1024 [ 203.827182][ T5951] loop4: detected capacity change from 0 to 32768 [ 203.841266][ T5943] XFS: ikeep mount option is deprecated. [ 204.215632][ T21] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 204.290234][ T5943] XFS (loop2): Mounting V5 Filesystem [ 204.545077][ T5943] XFS (loop2): Ending clean mount [ 204.546529][ T5952] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 204.559778][ T5952] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 204.702514][ T5952] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 204.735596][ T5952] System zones: 0-1, 3-36 [ 204.760528][ T5952] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 205.284705][ T5977] netlink: 16 bytes leftover after parsing attributes in process `syz.1.310'. [ 205.816937][ T4199] XFS (loop2): Unmounting Filesystem [ 205.938663][ T5951] XFS (loop4): Mounting V5 Filesystem [ 206.215457][ T5982] netlink: 56 bytes leftover after parsing attributes in process `syz.5.308'. [ 206.387293][ T5951] XFS (loop4): Ending clean mount [ 206.405962][ T5951] XFS (loop4): Quotacheck needed: Please wait. [ 206.562426][ T5986] loop5: detected capacity change from 0 to 4096 [ 207.049495][ T5986] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 207.257079][ T5951] XFS (loop4): Quotacheck: Done. [ 207.310086][ T4194] XFS (loop4): Unmounting Filesystem [ 208.235252][ T6007] netlink: 36 bytes leftover after parsing attributes in process `syz.0.320'. [ 209.146396][ T6020] ieee802154 phy0 wpan0: encryption failed: -22 [ 209.319317][ T6021] netlink: 40 bytes leftover after parsing attributes in process `syz.0.323'. [ 209.616277][ T6014] loop2: detected capacity change from 0 to 32768 [ 209.740361][ T6014] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.324 (6014) [ 209.798493][ T4269] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 209.833181][ T6014] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 209.846382][ T6014] BTRFS info (device loop2): using free space tree [ 209.854258][ T6014] BTRFS info (device loop2): has skinny extents [ 210.048172][ T4228] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 210.067937][ T4269] usb 6-1: Using ep0 maxpacket: 32 [ 210.121978][ T6014] BTRFS info (device loop2): enabling ssd optimizations [ 210.208248][ T4269] usb 6-1: config 0 has an invalid interface number: 202 but max is 1 [ 210.225722][ T4269] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.259406][ T4269] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 210.277416][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 210.302994][ T4269] usb 6-1: config 0 has no interface number 0 [ 210.317706][ T4269] usb 6-1: too many endpoints for config 0 interface 202 altsetting 87: 182, using maximum allowed: 30 [ 210.347375][ T4269] usb 6-1: config 0 interface 202 altsetting 87 endpoint 0x2 has invalid maxpacket 255, setting to 64 [ 210.371559][ T4269] usb 6-1: config 0 interface 202 altsetting 87 has 1 endpoint descriptor, different from the interface descriptor's value: 182 [ 210.395537][ T4269] usb 6-1: config 0 interface 202 has no altsetting 0 [ 210.549055][ T6052] sctp: [Deprecated]: syz.4.326 (pid 6052) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.549055][ T6052] Use struct sctp_sack_info instead [ 210.791366][ T4269] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.2b [ 210.828866][ T4269] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.847864][ T4269] usb 6-1: Product: syz [ 210.853925][ T4269] usb 6-1: Manufacturer: syz [ 210.860739][ T4269] usb 6-1: SerialNumber: syz [ 210.926251][ T6056] ptrace attach of "./syz-executor exec"[6057] was attempted by "./syz-executor exec"[6056] [ 211.568390][ T4228] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 211.606932][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.667390][ T4228] usb 1-1: Product: syz [ 211.693830][ T4228] usb 1-1: Manufacturer: syz [ 211.716782][ T4228] usb 1-1: SerialNumber: syz [ 211.751680][ T4228] usb 1-1: config 0 descriptor?? [ 211.849076][ T4228] hub 1-1:0.0: bad descriptor, ignoring hub [ 211.857273][ T4228] hub: probe of 1-1:0.0 failed with error -5 [ 212.058090][ T4228] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 212.150567][ T4228] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 212.415229][ T4228] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 212.528342][ T4228] usb 1-1: media controller created [ 212.651111][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 212.658374][ T4269] usb 6-1: config 0 descriptor?? [ 212.692794][ T4269] usb 6-1: can't set config #0, error -71 [ 212.709970][ T4269] usb 6-1: USB disconnect, device number 2 [ 212.726972][ T6070] overlayfs: missing 'lowerdir' [ 212.956041][ T4228] DVB: Unable to find symbol dib7000p_attach() [ 212.964259][ T4228] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 213.137842][ T4228] rc_core: IR keymap rc-dib0700-rc5 not found [ 213.165159][ T4228] Registered IR keymap rc-empty [ 213.181234][ T4228] dvb-usb: could not initialize remote control. [ 213.191774][ T4228] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 213.241384][ T4228] usb 1-1: USB disconnect, device number 16 [ 213.296451][ T4228] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 213.953716][ T6090] loop1: detected capacity change from 0 to 40427 [ 213.966621][ T6091] netlink: 16 bytes leftover after parsing attributes in process `syz.0.334'. [ 216.171444][ T6090] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 216.182806][ T6090] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 216.234579][ T6109] loop2: detected capacity change from 0 to 32768 [ 216.419685][ T6090] F2FS-fs (loop1): invalid crc value [ 216.431943][ T6114] netlink: 56 bytes leftover after parsing attributes in process `syz.0.340'. [ 216.480919][ T6111] loop4: detected capacity change from 0 to 32768 [ 216.515075][ T6090] F2FS-fs (loop1): Found nat_bits in checkpoint [ 216.568723][ T6111] XFS: ikeep mount option is deprecated. [ 216.600590][ T6111] XFS (loop4): Mounting V5 Filesystem [ 216.607226][ T6090] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 216.613261][ T6109] XFS (loop2): Mounting V5 Filesystem [ 216.614711][ T6090] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 216.681902][ T6111] XFS (loop4): Ending clean mount [ 216.907242][ T6109] XFS (loop2): Ending clean mount [ 216.925300][ T6109] XFS (loop2): Quotacheck needed: Please wait. [ 216.966383][ T6139] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 217.385485][ T6109] XFS (loop2): Quotacheck: Done. [ 217.392855][ T4194] XFS (loop4): Unmounting Filesystem [ 217.538686][ T4199] XFS (loop2): Unmounting Filesystem [ 217.750689][ T6144] sctp: [Deprecated]: syz.0.341 (pid 6144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.750689][ T6144] Use struct sctp_sack_info instead [ 219.008751][ T6151] loop5: detected capacity change from 0 to 1024 [ 219.048313][ T4228] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 219.204136][ T6160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.349'. [ 219.490043][ T6151] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 219.617604][ T6151] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 219.859730][ T6151] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 219.930008][ T6151] System zones: 0-1, 3-36 [ 219.962478][ T6151] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 222.046247][ T4274] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 222.671007][ T6181] netlink: 16 bytes leftover after parsing attributes in process `syz.5.347'. [ 224.091634][ T6083] Bluetooth: hci5: command 0x0406 tx timeout [ 224.529524][ T6188] netlink: 56 bytes leftover after parsing attributes in process `syz.4.354'. [ 225.314004][ T6217] loop2: detected capacity change from 0 to 4096 [ 225.881851][ T6217] ntfs: volume version 3.1. [ 227.960724][ T6245] netlink: 16 bytes leftover after parsing attributes in process `syz.0.367'. [ 228.951006][ T6247] loop5: detected capacity change from 0 to 32768 [ 229.268316][ T4269] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 229.793345][ T6247] XFS (loop5): Mounting V5 Filesystem [ 229.893554][ T6247] XFS (loop5): Ending clean mount [ 229.909736][ T6247] XFS (loop5): Quotacheck needed: Please wait. [ 230.250962][ T6267] sctp: [Deprecated]: syz.0.373 (pid 6267) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.250962][ T6267] Use struct sctp_sack_info instead [ 230.788680][ T6269] netlink: 56 bytes leftover after parsing attributes in process `syz.4.374'. [ 230.850915][ T6247] XFS (loop5): Quotacheck: Done. [ 230.940703][ T4422] XFS (loop5): Unmounting Filesystem [ 231.143854][ T6274] loop4: detected capacity change from 0 to 32768 [ 231.172076][ T6274] XFS: ikeep mount option is deprecated. [ 231.225143][ T6274] XFS (loop4): Mounting V5 Filesystem [ 231.281505][ T6274] XFS (loop4): Ending clean mount [ 231.358302][ T6279] sctp: failed to load transform for md5: -2 [ 231.440020][ T6288] sctp: failed to load transform for md5: -4 [ 231.560973][ T6304] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 232.059053][ T4194] XFS (loop4): Unmounting Filesystem [ 232.188621][ T6311] ptrace attach of "./syz-executor exec"[6312] was attempted by "./syz-executor exec"[6311] [ 232.765057][ T6309] loop2: detected capacity change from 0 to 1024 [ 232.839552][ T6309] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 232.937899][ T6309] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 233.092195][ T6309] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 233.112342][ T6309] System zones: 0-1, 3-36 [ 233.265035][ T6309] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 233.640695][ T23] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 233.775425][ T6325] netlink: 16 bytes leftover after parsing attributes in process `syz.2.381'. [ 235.649367][ T6334] netlink: 36 bytes leftover after parsing attributes in process `syz.1.387'. [ 235.707485][ T6336] netlink: 56 bytes leftover after parsing attributes in process `syz.2.386'. [ 235.798190][ T23] usb 1-1: unable to get BOS descriptor or descriptor too short [ 235.906527][ T6338] loop1: detected capacity change from 0 to 4096 [ 235.960202][ T6338] ntfs: (device loop1): parse_options(): Unrecognized mount option 000000000000000000030xffffffffffffffff0177777777777777777777718446744073709551615ÿÿÿÿ. [ 236.076105][ T6338] ntfs: (device loop1): parse_options(): Unrecognized mount option fsmagic. [ 236.098377][ T6340] loop2: detected capacity change from 0 to 32768 [ 236.338296][ T6348] loop4: detected capacity change from 0 to 32768 [ 238.852883][ T23] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 238.896965][ T23] usb 1-1: can't read configurations, error -71 [ 238.998661][ T6348] XFS: ikeep mount option is deprecated. [ 239.077713][ T6348] XFS (loop4): Mounting V5 Filesystem [ 239.175857][ T6348] XFS (loop4): Ending clean mount [ 239.328318][ T23] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 239.840461][ T5825] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 240.062303][ T4194] XFS (loop4): Unmounting Filesystem [ 240.080610][ T6382] loop2: detected capacity change from 0 to 1024 [ 240.151770][ T6386] netlink: 56 bytes leftover after parsing attributes in process `syz.5.400'. [ 240.304596][ T6382] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 240.345002][ T6382] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 240.410252][ T6382] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 240.549947][ T6382] System zones: 0-1, 3-36 [ 241.071396][ T6382] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 241.178244][ T5825] usb 2-1: config 1 interface 0 has no altsetting 0 [ 241.324543][ T6398] netlink: 36 bytes leftover after parsing attributes in process `syz.4.398'. [ 241.566844][ T6406] netlink: 16 bytes leftover after parsing attributes in process `syz.2.396'. [ 243.576619][ T5825] usb 2-1: string descriptor 0 read error: -71 [ 243.584593][ T5825] usb 2-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.40 [ 243.595640][ T5825] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.668234][ T5825] usb 2-1: can't set config #1, error -71 [ 243.701476][ T6414] FAULT_INJECTION: forcing a failure. [ 243.701476][ T6414] name failslab, interval 1, probability 0, space 0, times 1 [ 243.706829][ T6411] loop4: detected capacity change from 0 to 32768 [ 243.749917][ T6414] CPU: 0 PID: 6414 Comm: syz.0.406 Not tainted syzkaller #0 [ 243.760821][ T6414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 243.771723][ T6414] Call Trace: [ 243.776359][ T6414] [ 243.779838][ T6414] dump_stack_lvl+0x188/0x250 [ 243.785328][ T6414] ? show_regs_print_info+0x20/0x20 [ 243.791600][ T6414] ? load_image+0x400/0x400 [ 243.796493][ T6414] ? __might_sleep+0xf0/0xf0 [ 243.802839][ T6414] ? __lock_acquire+0x7d10/0x7d10 [ 243.808602][ T6414] ? mark_lock+0x94/0x320 [ 243.813772][ T6414] should_fail+0x38c/0x4c0 [ 243.819811][ T6414] should_failslab+0x5/0x20 [ 243.825798][ T6414] slab_pre_alloc_hook+0x51/0xc0 [ 243.834258][ T6414] __kmalloc+0x6b/0x330 [ 243.840153][ T6414] ? tomoyo_realpath_from_path+0x118/0x610 [ 243.840595][ T5825] usb 2-1: USB disconnect, device number 9 [ 243.848120][ T6414] tomoyo_realpath_from_path+0x118/0x610 [ 243.848185][ T6414] tomoyo_path_number_perm+0x242/0x660 [ 243.848205][ T6414] ? verify_lock_unused+0x140/0x140 [ 243.848229][ T6414] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 243.848246][ T6414] ? ksys_write+0x1c6/0x260 [ 243.848299][ T6414] security_file_ioctl+0x6c/0xa0 [ 243.894702][ T6414] __se_sys_ioctl+0x48/0x170 [ 243.901060][ T6414] do_syscall_64+0x4c/0xa0 [ 243.906885][ T6414] ? clear_bhb_loop+0x30/0x80 [ 243.912332][ T6414] ? clear_bhb_loop+0x30/0x80 [ 243.917833][ T6414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 243.926456][ T6414] RIP: 0033:0x7f164931f819 [ 243.933930][ T6414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 243.968239][ T6414] RSP: 002b:00007f1647558028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.981365][ T6414] RAX: ffffffffffffffda RBX: 00007f1649599090 RCX: 00007f164931f819 [ 243.996777][ T6414] RDX: 0000000000000000 RSI: 0000000000005000 RDI: 0000000000000003 [ 244.013554][ T6414] RBP: 00007f1647558090 R08: 0000000000000000 R09: 0000000000000000 [ 244.035810][ T6414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.049833][ T6414] R13: 00007f1649599128 R14: 00007f1649599090 R15: 00007fffa0a1f408 [ 244.064358][ T6414] [ 244.072220][ T6414] ERROR: Out of memory at tomoyo_realpath_from_path. [ 244.875358][ T6431] loop2: detected capacity change from 0 to 32768 [ 244.886720][ T6431] XFS: ikeep mount option is deprecated. [ 244.981574][ T6411] XFS (loop4): Mounting V5 Filesystem [ 245.010228][ T26] audit: type=1326 audit(1775455278.941:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6421 comm="syz.0.411" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f164931f819 code=0x0 [ 245.097518][ T6431] XFS (loop2): Mounting V5 Filesystem [ 245.318519][ T6411] XFS (loop4): Ending clean mount [ 245.939343][ T6411] XFS (loop4): Quotacheck needed: Please wait. [ 245.985072][ T6431] XFS (loop2): Ending clean mount [ 246.306683][ T6461] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 246.846962][ T6411] XFS (loop4): Quotacheck: Done. [ 246.897112][ T4199] XFS (loop2): Unmounting Filesystem [ 246.930647][ T6468] loop5: detected capacity change from 0 to 256 [ 246.995223][ T4194] XFS (loop4): Unmounting Filesystem [ 247.009298][ T6468] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 247.462676][ T6477] netlink: 16 bytes leftover after parsing attributes in process `syz.0.419'. [ 248.003504][ T6479] FAULT_INJECTION: forcing a failure. [ 248.003504][ T6479] name failslab, interval 1, probability 0, space 0, times 0 [ 248.056823][ T6479] CPU: 0 PID: 6479 Comm: syz.5.421 Not tainted syzkaller #0 [ 248.065176][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 248.076396][ T6479] Call Trace: [ 248.080433][ T6479] [ 248.083593][ T6479] dump_stack_lvl+0x188/0x250 [ 248.088700][ T6479] ? show_regs_print_info+0x20/0x20 [ 248.094829][ T6479] ? load_image+0x400/0x400 [ 248.099988][ T6479] ? __might_sleep+0xf0/0xf0 [ 248.105059][ T6479] ? __lock_acquire+0x7d10/0x7d10 [ 248.110555][ T6479] ? copy_from_kernel_nofault_allowed+0xb9/0x130 [ 248.117097][ T6479] should_fail+0x38c/0x4c0 [ 248.122050][ T6479] should_failslab+0x5/0x20 [ 248.128895][ T6479] slab_pre_alloc_hook+0x51/0xc0 [ 248.134841][ T6479] __kmalloc+0x6b/0x330 [ 248.140056][ T6479] ? tomoyo_encode+0x27e/0x540 [ 248.146494][ T6479] tomoyo_encode+0x27e/0x540 [ 248.152276][ T6479] tomoyo_realpath_from_path+0x5cd/0x610 [ 248.159892][ T6479] tomoyo_path_number_perm+0x242/0x660 [ 248.166622][ T6479] ? verify_lock_unused+0x140/0x140 [ 248.172768][ T6479] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 248.179183][ T6479] ? ksys_write+0x1c6/0x260 [ 248.184920][ T6479] security_file_ioctl+0x6c/0xa0 [ 248.191052][ T6479] __se_sys_ioctl+0x48/0x170 [ 248.195924][ T6479] do_syscall_64+0x4c/0xa0 [ 248.202447][ T6479] ? clear_bhb_loop+0x30/0x80 [ 248.208376][ T6479] ? clear_bhb_loop+0x30/0x80 [ 248.213488][ T6479] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 248.219488][ T6479] RIP: 0033:0x7f8ebde68819 [ 248.224050][ T6479] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.247134][ T6479] RSP: 002b:00007f8ebc0a1028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.257891][ T6479] RAX: ffffffffffffffda RBX: 00007f8ebe0e2090 RCX: 00007f8ebde68819 [ 248.266842][ T6479] RDX: 0000000000000000 RSI: 0000000000005000 RDI: 0000000000000003 [ 248.277956][ T6479] RBP: 00007f8ebc0a1090 R08: 0000000000000000 R09: 0000000000000000 [ 248.287798][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.298050][ T6479] R13: 00007f8ebe0e2128 R14: 00007f8ebe0e2090 R15: 00007fffc5a561a8 [ 248.308173][ T6479] [ 248.315465][ T6479] ERROR: Out of memory at tomoyo_realpath_from_path. [ 248.656949][ T6084] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 248.692785][ T6487] sctp: [Deprecated]: syz.1.422 (pid 6487) Use of struct sctp_assoc_value in delayed_ack socket option. [ 248.692785][ T6487] Use struct sctp_sack_info instead [ 249.320605][ T6084] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 249.337095][ T6084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.353588][ T6084] usb 1-1: Product: syz [ 249.360707][ T6084] usb 1-1: Manufacturer: syz [ 249.366047][ T6084] usb 1-1: SerialNumber: syz [ 249.408773][ T6084] usb 1-1: config 0 descriptor?? [ 249.478749][ T6084] hub 1-1:0.0: bad descriptor, ignoring hub [ 249.485108][ T6084] hub: probe of 1-1:0.0 failed with error -5 [ 249.989214][ T6084] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 250.196349][ T6084] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 250.257408][ T6486] loop5: detected capacity change from 0 to 40427 [ 250.258280][ T6084] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 250.283800][ T6084] usb 1-1: media controller created [ 250.304741][ T6084] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 250.528237][ T6506] loop1: detected capacity change from 0 to 32768 [ 250.528296][ T6486] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 250.557888][ T6486] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 250.598729][ T6486] F2FS-fs (loop5): invalid crc value [ 250.614664][ T6502] loop2: detected capacity change from 0 to 32768 [ 250.638721][ T6506] XFS: ikeep mount option is deprecated. [ 250.667038][ T6084] DVB: Unable to find symbol dib7000p_attach() [ 250.688764][ T6084] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 250.806908][ T6486] F2FS-fs (loop5): Found nat_bits in checkpoint [ 250.834856][ T6506] XFS (loop1): Mounting V5 Filesystem [ 250.929094][ T6522] ptrace attach of "./syz-executor exec"[6523] was attempted by "./syz-executor exec"[6522] [ 251.496894][ T6084] rc_core: IR keymap rc-dib0700-rc5 not found [ 251.506436][ T6502] ocfs2: Slot 0 on device (7,2) was already allocated to this node! [ 251.524174][ T6084] Registered IR keymap rc-empty [ 251.574317][ T6502] JBD2: Ignoring recovery information on journal [ 251.841864][ T6526] loop4: detected capacity change from 0 to 32768 [ 252.051901][ T6506] XFS (loop1): Ending clean mount [ 252.060084][ T6526] XFS (loop4): Mounting V5 Filesystem [ 252.374308][ T6538] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 252.814546][ T6084] dvb-usb: could not initialize remote control. [ 252.824992][ T6084] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 252.846997][ T4187] XFS (loop1): Unmounting Filesystem [ 252.919485][ T6084] usb 1-1: USB disconnect, device number 20 [ 252.945264][ T6084] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 253.107482][ T6526] XFS (loop4): Ending clean mount [ 253.125224][ T6526] XFS (loop4): Quotacheck needed: Please wait. [ 253.216244][ T6502] JBD2: recovery failed [ 253.280480][ T6502] (syz.2.427,6502,0):ocfs2_journal_load:1105 ERROR: Failed to load journal! [ 253.406397][ T6502] (syz.2.427,6502,0):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5 [ 253.488078][ T6502] (syz.2.427,6502,0):ocfs2_check_volume:2493 ERROR: status = -5 [ 253.547233][ T6502] (syz.2.427,6502,1):ocfs2_mount_volume:1824 ERROR: status = -5 [ 253.774473][ T6544] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.783568][ T6544] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.793508][ T6544] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.802229][ T6544] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.843457][ T6502] (syz.2.427,6502,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 254.126281][ T6526] XFS (loop4): Quotacheck: Done. [ 254.289135][ T6552] loop5: detected capacity change from 0 to 1024 [ 254.381286][ T4194] XFS (loop4): Unmounting Filesystem [ 254.394062][ T6552] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 254.468187][ T6552] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 254.628971][ T6552] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 254.674155][ T6552] System zones: 0-1, 3-36 [ 254.708437][ T6564] FAULT_INJECTION: forcing a failure. [ 254.708437][ T6564] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 254.714704][ T6552] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 254.754912][ T6564] CPU: 1 PID: 6564 Comm: syz.2.436 Not tainted syzkaller #0 [ 254.763661][ T6564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 254.776706][ T6564] Call Trace: [ 254.780183][ T6564] [ 254.783980][ T6564] dump_stack_lvl+0x188/0x250 [ 254.789010][ T6564] ? show_regs_print_info+0x20/0x20 [ 254.794502][ T6564] ? load_image+0x400/0x400 [ 254.800267][ T6564] ? __lock_acquire+0x7d10/0x7d10 [ 254.805994][ T6564] should_fail+0x38c/0x4c0 [ 254.810953][ T6564] _copy_to_user+0x2e/0x130 [ 254.816133][ T6564] simple_read_from_buffer+0xe3/0x150 [ 254.822506][ T6564] proc_fail_nth_read+0x1a6/0x220 [ 254.828029][ T6564] ? proc_fault_inject_write+0x310/0x310 [ 254.834586][ T6564] ? fsnotify_perm+0x254/0x560 [ 254.840368][ T6564] ? proc_fault_inject_write+0x310/0x310 [ 254.846557][ T6564] vfs_read+0x301/0xd60 [ 254.850746][ T6564] ? kernel_read+0x1e0/0x1e0 [ 254.855459][ T6564] ? __fget_files+0x40f/0x480 [ 254.860724][ T6564] ? mutex_lock_nested+0x17/0x20 [ 254.866103][ T6564] ? __fdget_pos+0x2bf/0x370 [ 254.870826][ T6564] ? ksys_read+0x71/0x260 [ 254.875316][ T6564] ksys_read+0x152/0x260 [ 254.879762][ T6564] ? vfs_write+0xd60/0xd60 [ 254.885231][ T6564] ? lockdep_hardirqs_on+0x94/0x140 [ 254.890975][ T6564] do_syscall_64+0x4c/0xa0 [ 254.895976][ T6564] ? clear_bhb_loop+0x30/0x80 [ 254.901068][ T6564] ? clear_bhb_loop+0x30/0x80 [ 254.906585][ T6564] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.913743][ T6564] RIP: 0033:0x7f9fbe55104e [ 254.918722][ T6564] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 254.940385][ T6564] RSP: 002b:00007f9fbc7c8fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 254.949580][ T6564] RAX: ffffffffffffffda RBX: 00007f9fbc7c96c0 RCX: 00007f9fbe55104e [ 254.958342][ T6564] RDX: 000000000000000f RSI: 00007f9fbc7c90a0 RDI: 0000000000000004 [ 254.966878][ T6564] RBP: 00007f9fbc7c9090 R08: 0000000000000000 R09: 0000000000000000 [ 254.975906][ T6564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 254.984262][ T6564] R13: 00007f9fbe80a128 R14: 00007f9fbe80a090 R15: 00007fff7b6dc008 [ 254.993699][ T6564] [ 255.258861][ T6570] netlink: 16 bytes leftover after parsing attributes in process `syz.5.433'. [ 256.351307][ T6581] ptrace attach of "./syz-executor exec"[6582] was attempted by "./syz-executor exec"[6581] [ 256.718255][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.725748][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.144444][ T6585] loop4: detected capacity change from 0 to 40427 [ 257.210319][ T6580] loop1: detected capacity change from 0 to 2048 [ 257.293981][ T6591] netlink: 36 bytes leftover after parsing attributes in process `syz.5.445'. [ 257.593782][ T6593] loop5: detected capacity change from 0 to 32768 [ 257.758000][ T6084] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 257.831087][ T6585] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 257.841485][ T6585] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 257.868852][ T6585] F2FS-fs (loop4): invalid crc value [ 257.906490][ T6580] hpfs: filesystem error: improperly stopped; already mounted read-only [ 257.920315][ T6580] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 257.979268][ T6585] F2FS-fs (loop4): Found nat_bits in checkpoint [ 258.019021][ T6593] XFS (loop5): Mounting V5 Filesystem [ 258.063100][ T6585] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 258.070737][ T6585] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 258.228098][ T6593] XFS (loop5): Ending clean mount [ 258.237072][ T6593] XFS (loop5): Quotacheck needed: Please wait. [ 258.278022][ T5825] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 258.698143][ T6084] usb 1-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69 [ 258.716823][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.979335][ T6593] XFS (loop5): Quotacheck: Done. [ 258.999689][ T6084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.009275][ T6084] usb 1-1: Product: syz [ 259.014748][ T6084] usb 1-1: Manufacturer: syz [ 259.020708][ T6084] usb 1-1: SerialNumber: syz [ 259.028019][ T5825] usb 2-1: device descriptor read/64, error -71 [ 259.029294][ T6084] usb 1-1: config 0 descriptor?? [ 259.076759][ T4282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 259.088744][ T6084] hub 1-1:0.0: bad descriptor, ignoring hub [ 259.105307][ T6084] hub: probe of 1-1:0.0 failed with error -5 [ 259.114201][ T4282] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 259.145363][ T4422] XFS (loop5): Unmounting Filesystem [ 259.328058][ T6084] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state. [ 259.384570][ T6084] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 259.415941][ T6084] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo) [ 259.443524][ T6084] usb 1-1: media controller created [ 259.461325][ T6084] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 259.525012][ T6084] DVB: Unable to find symbol dib7000p_attach() [ 259.553807][ T6084] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo' [ 259.618209][ C0] vkms_vblank_simulate: vblank timer overrun [ 259.728113][ T6084] rc_core: IR keymap rc-dib0700-rc5 not found [ 259.752784][ T6084] Registered IR keymap rc-empty [ 259.774852][ T6084] dvb-usb: could not initialize remote control. [ 259.795124][ T6615] loop4: detected capacity change from 0 to 1024 [ 259.807890][ T6084] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected. [ 259.852996][ T6611] loop1: detected capacity change from 0 to 32768 [ 259.958470][ T6619] FAULT_INJECTION: forcing a failure. [ 259.958470][ T6619] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 259.982062][ T6619] CPU: 1 PID: 6619 Comm: syz.5.448 Not tainted syzkaller #0 [ 259.992289][ T6619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 260.009055][ T6619] Call Trace: [ 260.013829][ T6619] [ 260.016977][ T6619] dump_stack_lvl+0x188/0x250 [ 260.024481][ T6619] ? show_regs_print_info+0x20/0x20 [ 260.030847][ T6619] ? load_image+0x400/0x400 [ 260.036909][ T6619] ? __lock_acquire+0x7d10/0x7d10 [ 260.044978][ T6619] should_fail+0x38c/0x4c0 [ 260.051012][ T6619] _copy_from_user+0x2e/0x170 [ 260.056944][ T6619] __copy_msghdr_from_user+0xc9/0x630 [ 260.066012][ T6619] ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30 [ 260.074121][ T6619] ? __ia32_sys_shutdown+0x1d0/0x1d0 [ 260.080781][ T6619] ___sys_sendmsg+0x19a/0x2e0 [ 260.086095][ T6619] ? __sys_sendmsg+0x2a0/0x2a0 [ 260.092478][ T6619] __se_sys_sendmsg+0x1af/0x290 [ 260.098081][ T6619] ? __x64_sys_sendmsg+0x80/0x80 [ 260.104761][ T6619] ? syscall_enter_from_user_mode+0x2a/0x70 [ 260.111499][ T6619] do_syscall_64+0x4c/0xa0 [ 260.116613][ T6619] ? clear_bhb_loop+0x30/0x80 [ 260.121702][ T6619] ? clear_bhb_loop+0x30/0x80 [ 260.126917][ T6619] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 260.134841][ T6619] RIP: 0033:0x7f8ebde68819 [ 260.140978][ T6619] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 260.165716][ T6619] RSP: 002b:00007f8ebc080028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.179841][ T6619] RAX: ffffffffffffffda RBX: 00007f8ebe0e2180 RCX: 00007f8ebde68819 [ 260.190840][ T6619] RDX: 0000000000000844 RSI: 0000200000000040 RDI: 0000000000000008 [ 260.205889][ T6619] RBP: 00007f8ebc080090 R08: 0000000000000000 R09: 0000000000000000 [ 260.217002][ T6619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 260.226747][ T6619] R13: 00007f8ebe0e2218 R14: 00007f8ebe0e2180 R15: 00007fffc5a561a8 [ 260.241089][ T6619] [ 260.672117][ T6615] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 260.815976][ T6611] XFS: attr2 mount option is deprecated. [ 260.971060][ T6611] XFS (loop1): Mounting V5 Filesystem [ 261.418369][ T5825] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 261.671825][ T6611] XFS (loop1): Ending clean mount [ 261.810158][ T6611] XFS (loop1): Quotacheck needed: Please wait. [ 261.935981][ T6611] XFS (loop1): Quotacheck: Done. [ 261.937007][ T6639] loop5: detected capacity change from 0 to 1024 [ 262.047548][ T6639] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option [ 262.076098][ T6639] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 262.101342][ T6639] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 262.119316][ T4187] XFS (loop1): Unmounting Filesystem [ 262.125248][ T6639] System zones: 0-1, 3-36 [ 262.233077][ T6639] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 262.553987][ T6642] netlink: 16 bytes leftover after parsing attributes in process `syz.5.452'. [ 263.467129][ T6650] sctp: [Deprecated]: syz.5.454 (pid 6650) Use of struct sctp_assoc_value in delayed_ack socket option. [ 263.467129][ T6650] Use struct sctp_sack_info instead [ 264.491230][ T6655] loop4: detected capacity change from 0 to 32768 [ 264.508081][ T6661] ptrace attach of "./syz-executor exec"[6664] was attempted by "./syz-executor exec"[6661] [ 264.619868][ T6663] loop5: detected capacity change from 0 to 32768 [ 264.668890][ T6655] XFS: ikeep mount option is deprecated. [ 264.990628][ T6675] loop1: detected capacity change from 0 to 4096 [ 265.045000][ T6655] XFS (loop4): Mounting V5 Filesystem [ 265.061253][ T6083] usb 1-1: USB disconnect, device number 21 [ 265.105740][ T6663] XFS (loop5): Mounting V5 Filesystem [ 265.139482][ T6675] ntfs3: Unknown parameter '' [ 265.198207][ T6083] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected. [ 265.264006][ T6675] loop1: detected capacity change from 0 to 128 [ 265.415284][ T6687] netlink: 36 bytes leftover after parsing attributes in process `syz.0.461'. [ 265.572851][ T6655] XFS (loop4): Ending clean mount [ 265.600117][ T6675] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities [ 265.746377][ T6663] XFS (loop5): Ending clean mount [ 265.758269][ T6663] XFS (loop5): Quotacheck needed: Please wait. [ 265.829300][ T6694] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 266.138742][ T6660] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 266.153636][ T4194] XFS (loop4): Unmounting Filesystem [ 266.435707][ T6699] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.463'. [ 266.520878][ T6663] XFS (loop5): Quotacheck: Done. [ 266.637539][ T6701] loop1: detected capacity change from 0 to 1024 [ 266.685777][ T6701] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 266.704427][ T6701] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 266.726224][ T4422] XFS (loop5): Unmounting Filesystem [ 266.740605][ T6701] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk [ 266.787001][ T6701] EXT4-fs (loop1): DAX unsupported by block device. [ 267.492213][ T6710] sctp: [Deprecated]: syz.0.468 (pid 6710) Use of struct sctp_assoc_value in delayed_ack socket option. [ 267.492213][ T6710] Use struct sctp_sack_info instead [ 267.853961][ T6709] loop4: detected capacity change from 0 to 1024 [ 268.058899][ T6709] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 268.067162][ T6709] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 268.130400][ T6712] netlink: 56 bytes leftover after parsing attributes in process `syz.0.471'. [ 268.181896][ T6709] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e841c01c, mo2=0003] [ 268.221741][ T6709] System zones: 0-1, 3-36 [ 268.247668][ T6709] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 268.517386][ T6721] netlink: 36 bytes leftover after parsing attributes in process `syz.0.473'. [ 268.568022][ T23] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 268.617974][ T6722] netlink: 16 bytes leftover after parsing attributes in process `syz.4.464'. [ 269.148610][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 269.237972][ T23] usb 2-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c [ 269.268094][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.299299][ T23] usb 2-1: config 0 descriptor?? [ 269.392878][ T6727] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 269.401069][ T23] usb 2-1: bad CDC descriptors [ 269.465053][ T6728] netlink: 4 bytes leftover after parsing attributes in process `syz.5.466'. [ 269.524081][ T6727] loop5: detected capacity change from 0 to 1024 [ 269.772123][ T6732] loop4: detected capacity change from 0 to 32768 [ 269.780331][ T6732] XFS: ikeep mount option is deprecated. [ 270.073564][ T6732] XFS (loop4): Mounting V5 Filesystem [ 270.118470][ T5825] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 271.789288][ T6732] XFS (loop4): Ending clean mount [ 271.851806][ T6746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.476'. [ 272.045562][ T6750] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 272.488522][ T4194] XFS (loop4): Unmounting Filesystem [ 272.617242][ T6752] overlayfs: failed to resolve './file0': -2 [ 272.833599][ T4175] usb 2-1: USB disconnect, device number 12 [ 273.179627][ T6761] sctp: [Deprecated]: syz.0.482 (pid 6761) Use of struct sctp_assoc_value in delayed_ack socket option. [ 273.179627][ T6761] Use struct sctp_sack_info instead [ 273.943353][ T6766] netlink: 56 bytes leftover after parsing attributes in process `syz.0.483'. [ 273.998221][ T6767] netlink: 36 bytes leftover after parsing attributes in process `syz.2.484'. [ 274.052335][ T6758] loop1: detected capacity change from 0 to 32768 [ 274.280274][ T6758] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.481 (6758) [ 274.368385][ T6783] netlink: 16 bytes leftover after parsing attributes in process `syz.0.485'. [ 275.211989][ T6788] loop2: detected capacity change from 0 to 32768 [ 275.224771][ T6758] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 275.374604][ T6758] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 275.587187][ T6758] BTRFS info (device loop1): trying to use backup root at mount time [ 275.598008][ T6078] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 275.743368][ T6758] BTRFS info (device loop1): setting nodatasum [ 275.874262][ T6758] BTRFS info (device loop1): enabling ssd optimizations [ 275.962820][ T6758] BTRFS info (device loop1): using spread ssd allocation scheme [ 275.972106][ T6788] XFS: ikeep mount option is deprecated. [ 275.993790][ T6797] 9pnet: Insufficient options for proto=fd [ 276.000982][ T6758] BTRFS info (device loop1): turning on flush-on-commit [ 276.018404][ T6758] BTRFS info (device loop1): force zlib compression, level 3 [ 276.053999][ T6758] BTRFS info (device loop1): using free space tree [ 276.078460][ T6758] BTRFS info (device loop1): has skinny extents [ 276.211345][ T6809] fuse: Bad value for 'fd' [ 276.933777][ T6788] XFS (loop2): Mounting V5 Filesystem [ 276.980658][ T4295] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by udevd (4295) [ 277.064912][ T6830] sctp: [Deprecated]: syz.5.493 (pid 6830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 277.064912][ T6830] Use struct sctp_sack_info instead [ 277.102037][ T6758] BTRFS error (device loop1): open_ctree failed: -12 [ 277.238789][ T4231] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 277.521848][ T6788] XFS (loop2): Ending clean mount [ 277.717876][ T4231] usb 5-1: Using ep0 maxpacket: 8 [ 277.812672][ T6841] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 277.878855][ T6839] netlink: 56 bytes leftover after parsing attributes in process `syz.1.496'. [ 278.231139][ T4199] XFS (loop2): Unmounting Filesystem [ 278.298118][ T4231] usb 5-1: config index 0 descriptor too short (expected 56829, got 36) [ 278.329406][ T4231] usb 5-1: invalid descriptor for config index 0: type = 0x2, length = 1 [ 278.502706][ T4231] usb 5-1: can't read configurations, error -22 [ 279.178012][ T6853] netlink: 16 bytes leftover after parsing attributes in process `syz.1.500'. [ 280.277996][ T4231] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 280.281704][ T6857] loop5: detected capacity change from 0 to 1024 [ 280.431672][ T6857] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 280.479289][ T6857] EXT4-fs (loop5): Ignoring removed bh option [ 280.479458][ T6857] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 280.819958][ T6857] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,mblk_io_submit,barrier=0x0000000000000002,dioread_lock,acl,dioread_nolock,data_err=ignore,grpquota,resuid=0x0000000000000000,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 280.855798][ T6078] usb 1-1: device descriptor read/64, error -71 [ 281.342676][ T6875] sctp: [Deprecated]: syz.4.505 (pid 6875) Use of struct sctp_assoc_value in delayed_ack socket option. [ 281.342676][ T6875] Use struct sctp_sack_info instead [ 281.794710][ T6877] loop1: detected capacity change from 0 to 64 [ 281.920065][ T6078] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 281.955537][ T6884] netlink: 56 bytes leftover after parsing attributes in process `syz.4.507'. [ 282.307476][ T6891] loop4: detected capacity change from 0 to 32768 [ 282.358694][ T6891] XFS: ikeep mount option is deprecated. [ 283.021965][ T6891] XFS (loop4): Mounting V5 Filesystem [ 283.070072][ T6078] usb 1-1: Using ep0 maxpacket: 16 [ 283.108803][ T6891] XFS (loop4): Ending clean mount [ 283.178114][ T4227] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 283.384735][ T6916] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 283.524188][ T6909] loop5: detected capacity change from 0 to 8192 [ 283.808191][ T6078] usb 1-1: unable to read config index 0 descriptor/all [ 283.816550][ T6078] usb 1-1: can't read configurations, error -71 [ 283.817298][ T4194] XFS (loop4): Unmounting Filesystem [ 283.826039][ T6078] usb usb1-port1: attempt power cycle [ 283.920587][ T6919] netlink: 16 bytes leftover after parsing attributes in process `syz.0.513'. [ 284.624058][ T6921] loop2: detected capacity change from 0 to 256 [ 284.772451][ T6921] FAT-fs (loop2): Directory bread(block 64) failed [ 284.798132][ T6921] FAT-fs (loop2): Directory bread(block 65) failed [ 284.806582][ T6921] FAT-fs (loop2): Directory bread(block 66) failed [ 284.815317][ T6921] FAT-fs (loop2): Directory bread(block 67) failed [ 284.834792][ T6921] FAT-fs (loop2): Directory bread(block 68) failed [ 284.845696][ T6921] FAT-fs (loop2): Directory bread(block 69) failed [ 284.858361][ T6921] FAT-fs (loop2): Directory bread(block 70) failed [ 284.865659][ T6921] FAT-fs (loop2): Directory bread(block 71) failed [ 284.878483][ T6921] FAT-fs (loop2): Directory bread(block 72) failed [ 284.885993][ T6921] FAT-fs (loop2): Directory bread(block 73) failed [ 285.415094][ T6933] ptrace attach of "./syz-executor exec"[6934] was attempted by "./syz-executor exec"[6933] [ 286.840672][ T6940] netlink: 56 bytes leftover after parsing attributes in process `syz.4.520'. [ 286.927006][ T6944] loop1: detected capacity change from 0 to 256 [ 287.284088][ T6944] FAT-fs (loop1): Directory bread(block 64) failed [ 287.325310][ T6944] FAT-fs (loop1): Directory bread(block 65) failed [ 287.388161][ T6944] FAT-fs (loop1): Directory bread(block 66) failed [ 287.407500][ T6944] FAT-fs (loop1): Directory bread(block 67) failed [ 287.415880][ T6944] FAT-fs (loop1): Directory bread(block 68) failed [ 287.428739][ T6944] FAT-fs (loop1): Directory bread(block 69) failed [ 287.436399][ T6944] FAT-fs (loop1): Directory bread(block 70) failed [ 287.448595][ T6944] FAT-fs (loop1): Directory bread(block 71) failed [ 287.457327][ T6944] FAT-fs (loop1): Directory bread(block 72) failed [ 287.465304][ T6944] FAT-fs (loop1): Directory bread(block 73) failed [ 287.556275][ T6942] netlink: 'syz.1.521': attribute type 10 has an invalid length. [ 287.587203][ T6952] overlayfs: failed to resolve './file0': -2 [ 287.609124][ T6942] netlink: 40 bytes leftover after parsing attributes in process `syz.1.521'. [ 287.643115][ T6942] device ipvlan1 entered promiscuous mode [ 287.666810][ T6942] bridge0: port 1(ipvlan1) entered blocking state [ 287.676933][ T6942] bridge0: port 1(ipvlan1) entered disabled state [ 287.723251][ T6942] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 287.754615][ T6950] lo speed is unknown, defaulting to 1000 [ 287.977844][ T2277] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 288.189507][ T6961] loop2: detected capacity change from 0 to 40427 [ 288.239229][ T2277] usb 1-1: Using ep0 maxpacket: 16 [ 288.253133][ T6961] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 288.261769][ T6961] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 288.276297][ T6961] F2FS-fs (loop2): invalid crc value [ 288.313552][ T6961] F2FS-fs (loop2): Found nat_bits in checkpoint [ 288.365699][ T6961] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 288.375330][ T6961] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 288.418191][ T2277] usb 1-1: unable to get BOS descriptor or descriptor too short [ 289.280015][ T4963] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 289.299978][ T4963] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 289.358933][ T2277] usb 1-1: New USB device found, idVendor=0499, idProduct=100c, bcdDevice= 0.40 [ 289.407685][ T2277] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.490114][ T2277] usb 1-1: Product: Ð [ 289.512328][ T2277] usb 1-1: Manufacturer: êªç ‚䃱妡ᵣ꺉룘ë´î¨˜æµ¶ç¢‘æ´ŠçˆÑ»æ‹…伃讑幈뿞ìºï‹ê¤“â·¿ï‘šâ“⒒뇞掮⃜莜퉀뚉ퟎ湓簲䳗ዻ㴪瘃苔웬컳쎆镊幂쀥࢞욄⸹젋㊺ë Ñ‰ë£¶å¥ƒä»…剃疖⒕᭗⌇ì˜á§’貞厎ë¤ë²¸é‰§à¡êŸ˜é¬¹îƒ¬âƒ€á‚Ÿã›‡æ–‡å¡¬âªá€¦îªºä©žæ²»ï‹ŸïŽ±ê¼çˆ·ê—€ä®³è³ªâ §â†¶é‘©é·¼ë¶ã¬‘鯨㓽꧒뒭윊ä”æ‡ì˜€ç‘— [ 289.695317][ T2277] usb 1-1: SerialNumber: 찉槧池æˆäº±èŽë®§æ†¿î€”㷒눣ã«î“¼å®é²œáŽ¶æŽ¬à¦–倘촊隒ꓒ崒ꀛ弬጗æⶾ唋â‘䙆뜛錑 [ 290.384854][ T6990] overlayfs: failed to resolve './file0': -2 [ 290.446750][ T2277] snd-usb-audio: probe of 1-1:1.0 failed with error -2 [ 290.474250][ T2277] usb 1-1: USB disconnect, device number 25 [ 290.873436][ T4295] udevd[4295]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 290.986079][ T6987] loop4: detected capacity change from 0 to 32768 [ 291.011795][ T6997] loop2: detected capacity change from 0 to 8192 [ 291.113095][ T6997] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal [ 291.128764][ T6987] (syz.4.534,6987,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 291.160926][ T6997] REISERFS (device loop2): using ordered data mode [ 291.169903][ T6987] (syz.4.534,6987,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 291.208485][ T6997] reiserfs: using flush barriers [ 291.216477][ T6997] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 291.242458][ T6997] REISERFS (device loop2): checking transaction log (loop2) [ 291.294657][ T6987] JBD2: Ignoring recovery information on journal [ 291.303901][ T6997] REISERFS (device loop2): Using tea hash to sort names [ 291.338283][ T2277] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 291.401665][ T6997] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage. [ 291.522335][ T6987] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 291.597961][ T2277] usb 1-1: Using ep0 maxpacket: 16 [ 291.723496][ T2277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.760946][ T2277] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.796214][ T2277] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 291.857948][ T2277] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.887377][ T2277] usb 1-1: config 0 descriptor?? [ 292.020368][ T4194] ocfs2: Unmounting device (7,4) on (node local) [ 292.586775][ T7023] loop2: detected capacity change from 0 to 40427 [ 292.852737][ T2277] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 292.894859][ T2277] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 292.909725][ T7023] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 292.918156][ T7023] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 292.930517][ T7023] F2FS-fs (loop2): invalid crc value [ 293.170762][ T7030] loop1: detected capacity change from 0 to 32768 [ 293.177975][ T2277] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 293.186591][ T2277] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 293.197414][ T2277] mcp2221 0003:04D8:00DD.0002: unknown main item tag 0x0 [ 293.209747][ T2277] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 293.251897][ T7030] XFS: ikeep mount option is deprecated. [ 293.266442][ T7023] F2FS-fs (loop2): Found nat_bits in checkpoint [ 293.369923][ T7023] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 293.377808][ T7023] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 293.400723][ T7030] XFS (loop1): Mounting V5 Filesystem [ 293.453310][ T4274] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 293.497461][ T7044] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 293.510429][ T7044] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 293.519665][ T7044] CPU: 1 PID: 7044 Comm: syz.0.537 Not tainted syzkaller #0 [ 293.527985][ T7044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 293.538961][ T7044] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 293.544739][ T7044] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 39 a4 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 19 a4 55 fa 4c 8b 33 4d 8d ae 70 [ 293.567783][ T7044] RSP: 0018:ffffc90003ed7b30 EFLAGS: 00010246 [ 293.574093][ T7044] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 293.583068][ T7044] RDX: ffffc9000e4ba000 RSI: 00000000000004b7 RDI: 00000000000004b8 [ 293.591331][ T7044] RBP: 0000000000000001 R08: ffff8881435d2697 R09: 1ffff110286ba4d2 [ 293.599853][ T7044] R10: dffffc0000000000 R11: ffffed10286ba4d3 R12: dffffc0000000000 [ 293.608557][ T7044] R13: 1ffff110286ba42b R14: dffffc0000000000 R15: ffff88807d253a00 [ 293.618404][ T7044] FS: 00007f16475586c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 293.629842][ T7044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 293.638279][ T7044] CR2: 000000110c3d7b9f CR3: 000000005eac3000 CR4: 00000000003506e0 [ 293.649223][ T7044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 293.659508][ T7044] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 293.669436][ T7044] Call Trace: [ 293.672956][ T7044] [ 293.676194][ T7044] ? mcp_gpio_get+0x260/0x260 [ 293.682158][ T7044] __i2c_transfer+0x880/0x20b0 [ 293.688138][ T7044] ? i2c_cmd+0x110/0x110 [ 293.693612][ T7044] ? __might_fault+0xb7/0x110 [ 293.704399][ T7044] i2c_transfer+0x25d/0x3a0 [ 293.713426][ T7044] ? __i2c_transfer+0x20b0/0x20b0 [ 293.723188][ T7044] ? __might_fault+0xb3/0x110 [ 293.731076][ T7044] ? _copy_from_user+0x111/0x170 [ 293.738937][ T7044] i2cdev_ioctl_rdwr+0x3dc/0x6d0 [ 293.745815][ T7044] i2cdev_ioctl+0x610/0x7b0 [ 293.753874][ T7044] ? i2cdev_write+0x120/0x120 [ 293.759461][ T7044] ? bpf_lsm_file_ioctl+0x5/0x10 [ 293.765943][ T7044] ? security_file_ioctl+0x7c/0xa0 [ 293.774829][ T7044] ? i2cdev_write+0x120/0x120 [ 293.781384][ T7044] __se_sys_ioctl+0xfa/0x170 [ 293.789436][ T7044] do_syscall_64+0x4c/0xa0 [ 293.795003][ T7044] ? clear_bhb_loop+0x30/0x80 [ 293.800636][ T7044] ? clear_bhb_loop+0x30/0x80 [ 293.805978][ T7044] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 293.814298][ T7044] RIP: 0033:0x7f164931f819 [ 293.819916][ T7044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.843815][ T7044] RSP: 002b:00007f1647558028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 293.854224][ T7044] RAX: ffffffffffffffda RBX: 00007f1649599090 RCX: 00007f164931f819 [ 293.862752][ T7044] RDX: 0000200000000000 RSI: 0000000000000707 RDI: 0000000000000005 [ 293.871461][ T7044] RBP: 00007f16493b5c91 R08: 0000000000000000 R09: 0000000000000000 [ 293.880114][ T7044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.890197][ T7044] R13: 00007f1649599128 R14: 00007f1649599090 R15: 00007fffa0a1f408 [ 293.901242][ T7044] [ 293.905431][ T7044] Modules linked in: [ 293.930759][ T7044] ---[ end trace 631fca8b1a695a8e ]--- [ 293.948708][ T7030] XFS (loop1): Ending clean mount [ 294.682965][ T7047] attempt to access beyond end of device [ 294.682965][ T7047] loop2: rw=2049, want=45104, limit=40427 [ 294.710908][ T7044] RIP: 0010:mcp_i2c_xfer+0x58/0x420 [ 294.747145][ T7044] Code: 01 00 00 48 89 d8 48 c1 e8 03 42 80 3c 30 00 74 08 48 89 df e8 39 a4 55 fa 48 8b 1b 48 89 d8 48 c1 e8 03 4d 89 f4 48 89 04 24 <42> 80 3c 30 00 74 08 48 89 df e8 19 a4 55 fa 4c 8b 33 4d 8d ae 70 [ 294.880596][ T7052] x_tables: ip6_tables: bpf.1 match: invalid size 528 (kernel) != (user) 568 [ 294.890843][ T4231] usb 1-1: reset high-speed USB device number 26 using dummy_hcd [ 295.023987][ T4281] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 295.084753][ T4187] XFS (loop1): Unmounting Filesystem [ 295.086006][ T7044] RSP: 0018:ffffc90003ed7b30 EFLAGS: 00010246 [ 295.098254][ T7044] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 295.102102][ T4281] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 295.107394][ T7044] RDX: ffffc9000e4ba000 RSI: 00000000000004b7 RDI: 00000000000004b8 [ 295.126197][ T7044] RBP: 0000000000000001 R08: ffff8881435d2697 R09: 1ffff110286ba4d2 [ 295.135979][ T7044] R10: dffffc0000000000 R11: ffffed10286ba4d3 R12: dffffc0000000000 [ 295.146124][ T7044] R13: 1ffff110286ba42b R14: dffffc0000000000 R15: ffff88807d253a00 [ 295.189006][ T7044] FS: 00007f16475586c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 295.218695][ T7044] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 295.234557][ T7044] CR2: 000000110c36b348 CR3: 000000005eac3000 CR4: 00000000003506e0 [ 295.251548][ T7044] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 295.269482][ T7044] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 295.293841][ T7044] Kernel panic - not syncing: Fatal exception [ 295.301252][ T7044] Kernel Offset: disabled [ 295.306671][ T7044] Rebooting in 86400 seconds..