last executing test programs: 34.728909318s ago: executing program 2 (id=7082): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f44948721919580684010a49e66", 0x0, 0x241, 0xfffffffe, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", 0x0}, 0x50) 34.675941652s ago: executing program 2 (id=7083): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x3c, "8cff13028f4e2a151b2e1b8afed2a3e97ed594c079df2eaf66909f479231986c021491e72534b8992e039a2e5d878ed01f7473899e914c81c87fc361"}, &(0x7f0000000000)=0x60) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 33.698470928s ago: executing program 2 (id=7086): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}]}) 33.67033691s ago: executing program 2 (id=7087): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x0, &(0x7f0000000840)) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000380)={0x0, r1}, &(0x7f00000003c0)={0x9, 0x1, 0x0, 0x9, 0xfffffffa, 0x5}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r4}, 0x10) sched_getscheduler(r1) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x4b72, &(0x7f0000000800)={0x1, 0x0, 0x15, 0x8, 0x1ed, &(0x7f0000000400)}) timer_settime(0x0, 0x1000000, 0x0, 0x0) r6 = eventfd(0x9) r7 = eventfd(0x0) r8 = eventfd(0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000100)={r8, 0x0, 0x2, r7}) socket$tipc(0x1e, 0x7, 0x0) ioctl$KVM_IRQFD(r0, 0x4020ae76, &(0x7f0000000040)={r8, 0x0, 0x2, r6}) 32.771203469s ago: executing program 2 (id=7091): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) times(0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0, 0x0) ptrace(0x10, 0x1) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) setns(0xffffffffffffffff, 0x20000000) ptrace$PTRACE_GETSIGMASK(0x420a, 0x0, 0x8, &(0x7f0000000040)) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x15, 0x1, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r3 = syz_open_pts(r2, 0x0) read(r3, 0x0, 0x2006) timer_create(0x0, &(0x7f00000012c0)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) r4 = getpid() tkill(r4, 0x13) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) getsockopt$inet_opts(r5, 0x0, 0x4, 0xfffffffffffffffe, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) 21.083744859s ago: executing program 2 (id=7118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r4, &(0x7f0000000180)='./file1\x00', r4, &(0x7f00000001c0)='./file3\x00', 0x0) openat(r4, &(0x7f0000000080)='./file3\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058b"], 0x0) 13.545869067s ago: executing program 3 (id=7138): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x75b, &(0x7f0000000800)="$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") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d00000000140002"], 0x298}}, 0x0) 12.227027412s ago: executing program 3 (id=7141): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000103c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xea6e4e}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000141007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$HIDIOCGRDESC(r5, 0x90044802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000001c0)='mm_page_alloc\x00', r1}, 0x10) ioctl$TIOCL_UNBLANKSCREEN(r5, 0x541c, &(0x7f0000000240)) socket(0x10, 0x3, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) r10 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r10, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) sendmsg$NL80211_CMD_SET_WOWLAN(0xffffffffffffffff, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000100)={0x6c, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @void, @void}}, [@NL80211_ATTR_WOWLAN_TRIGGERS={0x8, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_EAP_IDENT_REQUEST={0x4}]}, @NL80211_ATTR_WOWLAN_TRIGGERS={0x50, 0x75, 0x0, 0x1, [@NL80211_WOWLAN_TRIG_MAGIC_PKT={0x4}, @NL80211_WOWLAN_TRIG_NET_DETECT={0x40, 0x12, 0x0, 0x1, [@NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_IE={0x12, 0x2a, [@dsss={0x3, 0x1}, @dsss={0x3, 0x1}, @cf={0x4, 0x6}]}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6}]}, @NL80211_WOWLAN_TRIG_4WAY_HANDSHAKE={0x4}, @NL80211_WOWLAN_TRIG_GTK_REKEY_FAILURE={0x4}]}]}, 0x6c}}, 0x0) r11 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r11, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r11, 0x111, 0x5, 0x20002001, 0x4) 10.795469907s ago: executing program 4 (id=7144): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x3c, "8cff13028f4e2a151b2e1b8afed2a3e97ed594c079df2eaf66909f479231986c021491e72534b8992e039a2e5d878ed01f7473899e914c81c87fc361"}, &(0x7f0000000000)=0x60) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 9.265379161s ago: executing program 0 (id=7146): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r4, &(0x7f0000000180)='./file1\x00', r4, &(0x7f00000001c0)='./file3\x00', 0x0) openat(r4, &(0x7f0000000080)='./file3\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058b"], 0x0) 9.264734701s ago: executing program 1 (id=7147): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f00000079c0)="$eJzs3EtrY+UbAPAnvcz9P/8iLtzNgUFoYRKaXgbdVZ3BC3Yooy5caZqkITNJTmnStHblwqW48JuIgiuXfgYXrt2JC8WdoOScU229oTRt7PT3g5PnvG/ePHneEArPOSUBXFhzyY/fl+JmXI2I6Yi4EZGdl4ojs5aHZyLiVkRMHTlKxfyvE5ci4lpE3Bwlz3OWiqc+vjO8vfrdaz988dXlmeuffP715HYNTNqzEdHdzs/3unlMW3l8VMzXhu0sdleGRcyf6D4uxmke95qbWYa92uG6WhaXW/n6dHu3P4pbnVp9FFvtrWx+u5e/YX/YOsyTveBRbScbN5qbWWz30yy2DvK69g/yv20H/UGep1Hkey9LH4PBYcznm/vNfD/bj7NY7w2K+Txv2mjuj+KwiMXbRT3tNLI6Nk/ySf+3vd7u7e4nw+ZOv532ktVK9blK9W65upM2moPmSrnWbdxdSeZbndGy8qBZ66610rTVaVbqaXchmW/V6+VqNZm/19xs13pJtVpZriyWVxeKszvJyw/eSjqNZH4UX2z3dgftTj/ZSneS/BULyVJl+fmF5HY1eWN9I9l4eP/++sab79x7+8EL66++VCz6Q1nJ/NLi0lK5ulheqi5coP1/UBQ9xv3DiZQmXQDA+XOi/r98JJH+H/gXTq//33kYcfr9f+j/x+Jc9b8Xvf//m/1rw5gIXzwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvrm9lPX8lO5vLx9WL+f8XUU8W4FBFTEfHzn5iOS8dyThd5Zv9i/ezvaviyFFmG0XtcLo5rEbFWHD/9/7Q/BQAAAHhyffb+rY/ybj1/mJt0QZyl/KLN1I13x5SvFBGzc9+OKdvU6OHpMSXLvt8zsT+mbNkFrCtjSpZfcpsZV7Z/ZPpYuHIklPIwdablAAAAZ+J4J3C2XQgAAABn6cNJF8BklOLwVubhveDsP+9/uyF49dgIAAAAOIdKky4AAAAAOHVZ/+/3/wAAAODJlv/+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8As7d5ObNhDHAfRvGxf6paKq+16lOzhGj9BllxUH6CU4QBbkCrkAZyC7HCGCCI9DIEJKJA+2Er0nmWGs4ccMwouZkQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu6bZeza///fzfNWe76ybPaAAAAIBzNvVq3ryZpvrn9v7X9tb3tl5ERBkR5+buVXw4yazanPqp/dVx+/pZH24imoT9d4zb61NE/Gqv+2+X/hUAAADg/VovlrM0W08v06E7RJ/Sok355XemvCIi6uldprRyn/cjU1jz/x7F30xpzQLWJFNYWnIb5Up7leZxP6zaTY6KIhXl2Y8dOplt7AAAQI+qk6LfWQgAAAB9+jN0BxhGEY9bmYetwHEq2u29jyc1AAAA4A0qhu4AAAAA0FX1UoNm/t/T+X875/8BAADAMNL5fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzSpl7N14vlrGvOdtdNntEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDA/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79/MaRxUHAPzNzM7WVsU1yh4iouBBL3azra29iQclePBPEEK6rbFbf7Q52FLEXLxJzr2IHkUEJd76P/TcYC/11sMeKnhW5ld2mgRcI53ZJJ8PvHnfHYZ53zcLId95LwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAyuTdaZxkh14Rx+W5e49urWb99q4+c2fz/mLWsjhqMunD4eX6h6jfXiIAAAAcH0lV34cQHqRby1kf9/L6P62uyWr+758t4qqe3133by8VfVX7Z+23Xx++uDNQrxgnu+mltfFoaW8qnSc3y/n23L9e0cmffP7uJcm/kPiDjRcmaf48o2/v3n2vm4cnmsgWADiI01VfBtXvQ1k/bDMxAI6NTq3wrur/pNduTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABNmGyEp6s4CiEsdqZxZvvRrdX9+jub9xerdv727c3w9fSe2S3SEMKltfFoqdHZzLfrN25eWRmPR9eaD14JIbQ1+jvl9K98NMPFIRxwrN9beKqCPUFcftnzks/hCFr8oQQAwJGUli2r6x+kW8vZuWghhL9/eLz+f70Whxnr/4cfn79XH6te/w8bm+H8G6xf/Xxw/cbNN9eurlweXR59+taZ4dvDsxfOnbswyN+VDLwxAQAA4P/plq1e/8cLe9f/T9XiMGP9/8V3w6/qYyXq/31NF/3azgQAAOB4e/7Vv/6M9jkfdbvhy5X19WvD4rjz+UxxbCHV/+xE2er1f7LQdlYAAABAEyYb0WPr/xdrcZhx/f+ZH1/6uX7PJIRwslz/P7362fhic9OZa038OXHbcwQAAKBdJ8tWX/9P8/3/8c6WhziE8MZrRVz+G8CZ6v/k/W9+qo9V3/9/trkpzqW4XzyPvO+H0Om3nREAAABH2VNly4r9P9Kt5U9+OfVh1/5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKb9EwAA//+gaz5f") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = inotify_init1(0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r7, 0x0, 0x40001) fcntl$getownex(r6, 0x10, &(0x7f0000000140)={0x0, 0x0}) r9 = syz_open_procfs(r8, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r9, 0x40305839, &(0x7f0000000240)=0x28084) 9.263947531s ago: executing program 4 (id=7148): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) linkat(r4, &(0x7f0000000180)='./file1\x00', r4, &(0x7f00000001c0)='./file3\x00', 0x0) openat(r4, &(0x7f0000000080)='./file3\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058b"], 0x0) 7.619227674s ago: executing program 1 (id=7149): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = open(0x0, 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x3c, "8cff13028f4e2a151b2e1b8afed2a3e97ed594c079df2eaf66909f479231986c021491e72534b8992e039a2e5d878ed01f7473899e914c81c87fc361"}, &(0x7f0000000000)=0x60) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 7.618729294s ago: executing program 3 (id=7150): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x6, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r1, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000001780)={0x2c, 0x0, &(0x7f00000014c0)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00031200000012033f007b"], 0x0, 0x0}, 0x0) 5.830863581s ago: executing program 0 (id=7151): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x75b, &(0x7f0000000800)="$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") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d00000000140002"], 0x298}}, 0x0) 5.830149191s ago: executing program 1 (id=7152): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x1, 0x5514, &(0x7f00000079c0)="$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") mkdir(&(0x7f0000000400)='./file0\x00', 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000022008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a"], 0x50}}, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEV(r6, 0x0, 0x40001) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000140)={0x0, 0x0}) r8 = syz_open_procfs(r7, &(0x7f0000000600)='fd/4\x00') ioctl$EXT4_IOC_GROUP_EXTEND(r8, 0x40305839, &(0x7f0000000240)=0x28084) 5.829578411s ago: executing program 4 (id=7153): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents64(r0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000001e000085000000820000009500"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB], &(0x7f0000001200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = fsmount(0xffffffffffffffff, 0x1, 0x6) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000200)={r6, r7, 0x1, 0x0, @void}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) r8 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r9) setgroups(0x1, &(0x7f0000000040)=[r9]) chmod(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000100)) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 4.014428689s ago: executing program 0 (id=7154): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x3000490, &(0x7f0000000e40)={[{@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@nomblk_io_submit}, {@norecovery}, {@nouser_xattr}, {@errors_remount}, {@grpquota}, {@barrier_val}, {@noload}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') getxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=@known='user.syz\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) getitimer(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000400)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}, {&(0x7f0000000000)="5db77b776106064bfe12b679c741efe7fe4eb79c6b7f8f96ff3774e23858c1f44274f259738073cbb6f4bb38eb664dd5a34801b7", 0x34}], 0x2) syz_clone(0x53800080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 4.012850609s ago: executing program 1 (id=7155): r0 = socket$inet6(0xa, 0x3, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r4}, 0x10) select(0x40, &(0x7f0000000340)={0x1f}, 0x0, 0x0, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0x5, 0x8) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="ad3a00d84b00", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x3, 0x4) sendmmsg$inet6(r0, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}], 0x28}}], 0x2, 0x0) 4.011728679s ago: executing program 3 (id=7156): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x3000490, &(0x7f0000000e40)={[{@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@nomblk_io_submit}, {@norecovery}, {@nouser_xattr}, {@errors_remount}, {@grpquota}, {@barrier_val}, {@noload}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') getxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=@known='user.syz\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) getitimer(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000400)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}, {&(0x7f0000000000)="5db77b776106064bfe12b679c741efe7fe4eb79c6b7f8f96ff3774e23858c1f44274f259738073cbb6f4bb38eb664dd5a34801b7cac21a1fabcb", 0x3a}], 0x2) syz_clone(0x53800080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 4.0013877s ago: executing program 4 (id=7157): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x0, &(0x7f0000000840)) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000380)={0x0, r2}, &(0x7f00000003c0)={0x9, 0x1, 0x0, 0x9, 0xfffffffa, 0x5}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) sched_getscheduler(r2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000800)={0x1, 0x0, 0x15, 0x8, 0x1ed, &(0x7f0000000400)}) timer_settime(0x0, 0x1000000, 0x0, 0x0) r7 = eventfd(0x9) r8 = eventfd(0x0) r9 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r9, 0x0, 0x2, r8}) socket$tipc(0x1e, 0x7, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r9, 0x0, 0x2, r7}) 2.078476358s ago: executing program 0 (id=7158): mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.077910098s ago: executing program 1 (id=7159): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x3c, "8cff13028f4e2a151b2e1b8afed2a3e97ed594c079df2eaf66909f479231986c021491e72534b8992e039a2e5d878ed01f7473899e914c81c87fc361"}, &(0x7f0000000000)=0x60) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 2.077241448s ago: executing program 3 (id=7160): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x0, &(0x7f0000000840)) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000380)={0x0, r2}, &(0x7f00000003c0)={0x9, 0x1, 0x0, 0x9, 0xfffffffa, 0x5}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) sched_getscheduler(r2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000800)={0x1, 0x0, 0x15, 0x8, 0x1ed, &(0x7f0000000400)}) timer_settime(0x0, 0x1000000, 0x0, 0x0) r7 = eventfd(0x9) r8 = eventfd(0x0) r9 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r9, 0x0, 0x2, r8}) socket$tipc(0x1e, 0x7, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r9, 0x0, 0x2, r7}) 2.076727298s ago: executing program 4 (id=7161): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000440)='./bus\x00', 0x3000490, &(0x7f0000000e40)={[{@dioread_lock}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@nomblk_io_submit}, {@norecovery}, {@nouser_xattr}, {@errors_remount}, {@grpquota}, {@barrier_val}, {@noload}, {@jqfmt_vfsold}]}, 0x45, 0x7b1, &(0x7f00000004c0)="$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") rename(&(0x7f00000002c0)='./file2\x00', &(0x7f0000000340)='./bus\x00') getxattr(&(0x7f0000000240)='./bus\x00', &(0x7f0000000380)=@known='user.syz\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) getitimer(0x0, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f0000000080)=0x9, 0x4) bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r6 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r6, &(0x7f0000000400)=[{&(0x7f00000001c0)="580000001400add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}, {&(0x7f0000000000)="5db77b776106064bfe12b679c741efe7fe4eb79c6b7f8f96ff3774e23858c1f44274f259738073cbb6f4bb38eb664dd5a34801b7cac21a1f", 0x38}], 0x2) syz_clone(0x53800080, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) 2.05637749s ago: executing program 0 (id=7162): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) mkdir(0x0, 0x0) pipe2$9p(&(0x7f0000000240), 0x0) r5 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IPT_SO_GET_ENTRIES(r5, 0x0, 0x41, &(0x7f0000000380)={'nat\x00', 0x3c, "8cff13028f4e2a151b2e1b8afed2a3e97ed594c079df2eaf66909f479231986c021491e72534b8992e039a2e5d878ed01f7473899e914c81c87fc361"}, &(0x7f0000000000)=0x60) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00'}, 0x10) 1.82367ms ago: executing program 0 (id=7163): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008c}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@metacopy_on}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) linkat(r4, &(0x7f0000000180)='./file1\x00', r4, &(0x7f00000001c0)='./file3\x00', 0x0) openat(r4, &(0x7f0000000080)='./file3\x00', 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendto$inet6(r7, &(0x7f00000000c0), 0x0, 0x20000004, &(0x7f0000b63fe4), 0x1c) syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00001009040000022a3e740009058b"], 0x0) 1.03713ms ago: executing program 1 (id=7164): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000140)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r2, 0x0, &(0x7f0000000840)) eventfd2(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) capset(&(0x7f0000000380)={0x0, r2}, &(0x7f00000003c0)={0x9, 0x1, 0x0, 0x9, 0xfffffffa, 0x5}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000d00)='sched_switch\x00', r5}, 0x10) sched_getscheduler(r2) timer_create(0x0, 0x0, &(0x7f0000bbdffc)) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r6, 0x4b72, &(0x7f0000000800)={0x1, 0x0, 0x15, 0x8, 0x1ed, &(0x7f0000000400)}) timer_settime(0x0, 0x1000000, 0x0, 0x0) r7 = eventfd(0x9) r8 = eventfd(0x0) r9 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000100)={r9, 0x0, 0x2, r8}) socket$tipc(0x1e, 0x7, 0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r9, 0x0, 0x2, r7}) 650.089µs ago: executing program 3 (id=7165): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x2000480, &(0x7f0000000100), 0x5, 0x75b, &(0x7f0000000800)="$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") open(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$inet6_int(r4, 0x29, 0x3c, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0xea}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e00)=ANY=[@ANYBLOB="980200001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000004000000000024001280090001007866726d00000000140002"], 0x298}}, 0x0) 0s ago: executing program 4 (id=7166): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@generic={0x67, 0x0, 0x0, 0x0, 0xb005}]}, &(0x7f0000000040)='GPL\x00', 0x5, 0xd2, &(0x7f0000000080)=""/210, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) write$binfmt_elf64(r3, 0x0, 0x40) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="48000000100005f7000000000000000000000002", @ANYRES32=r4, @ANYBLOB="b100000000000000280012000c00010076657468"], 0x48}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="2000000014002101000000000000000002016800", @ANYRES32=r4, @ANYBLOB="08000200ac1414aa"], 0x20}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@ipv4_newaddr={0x20, 0x14, 0x121, 0x0, 0x0, {0x2, 0x2, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240), &(0x7f00000002c0)=0xfeeb) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRES16], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0x7) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000400)={@private0, 0x5, r8}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0xedc, 0x0}, 0xfffffdd0) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f0000000980)=@framed={{0x18, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x10000}}, &(0x7f0000000080)='GPL\x00', 0x1f, 0xfffffffffffffe65, &(0x7f0000000340)=""/182, 0x41100, 0x8, '\x00', r8, @cgroup_sockopt, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xa, 0xf25, 0x81}, 0x10, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x6, &(0x7f0000000000)=@raw=[@map_idx={0x18, 0x7, 0x5, 0x0, 0x5}, @map_fd={0x18, 0x3, 0x1, 0x0, 0x1}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}], &(0x7f0000000080)='GPL\x00', 0x400, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000100)={0x3, 0x9, 0x3f, 0x2}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000140)=[0x1], 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$bsg(0xffffffffffffff9c, &(0x7f00000002c0), 0xc1, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r11 = epoll_create1(0x0) r12 = fcntl$dupfd(r11, 0x2, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup=r12, r10, 0x11, 0x2, 0xffffffffffffffff, @void, @value}, 0x14) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@cgroup, 0xffffffffffffffff, 0x11, 0x2, 0xffffffffffffffff, @void, @value}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x9, 0x5, &(0x7f0000000500)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffffa}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}], &(0x7f0000000540)='syzkaller\x00', 0xfff, 0xb8, &(0x7f0000000640)=""/184, 0x41100, 0x17, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x8, 0x4}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0xd, 0x1, 0x200}, 0x10, r9, 0xffffffffffffffff, 0x0, &(0x7f0000000700)=[r12], 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T375] handle_bad_sector: 132221 callbacks suppressed [ 1661.646258][ T375] attempt to access beyond end of device [ 1661.646258][ T375] loop4: rw=0, want=87480, limit=40427 [ 1661.663426][ T375] attempt to access beyond end of device [ 1661.663426][ T375] loop4: rw=0, want=87488, limit=40427 [ 1661.674567][ T375] attempt to access beyond end of device [ 1661.674567][ T375] loop4: rw=0, want=87496, limit=40427 [ 1661.685943][ T375] attempt to access beyond end of device [ 1661.685943][ T375] loop4: rw=0, want=87504, limit=40427 [ 1661.697142][T26654] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1661.706355][ T375] attempt to access beyond end of device [ 1661.706355][ T375] loop4: rw=0, want=87512, limit=40427 [ 1661.709786][T26654] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1661.718466][ T375] attempt to access beyond end of device [ 1661.718466][ T375] loop4: rw=0, want=87520, limit=40427 [ 1661.727880][T26654] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1661.738682][ T375] attempt to access beyond end of device [ 1661.738682][ T375] loop4: rw=0, want=87528, limit=40427 [ 1661.761962][T26654] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1661.762306][ T375] attempt to access beyond end of device [ 1661.762306][ T375] loop4: rw=0, want=87536, limit=40427 [ 1661.771145][T26654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.788148][T18411] usb 4-1: USB disconnect, device number 2 [ 1661.796485][ T375] attempt to access beyond end of device [ 1661.796485][ T375] loop4: rw=0, want=87544, limit=40427 [ 1661.807577][ T375] attempt to access beyond end of device [ 1661.807577][ T375] loop4: rw=0, want=87552, limit=40427 [ 1661.829039][T26654] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1663.029733][T16011] usb 5-1: USB disconnect, device number 6 [ 1663.952835][T18411] usb 3-1: USB disconnect, device number 116 [ 1664.836071][T18411] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 1665.716796][T18411] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.730930][T18411] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1665.766022][T18411] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1665.796039][T18411] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1665.809839][T18411] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.876748][T18411] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1666.027568][ T7123] Bluetooth: hci0: Frame reassembly failed (-84) [ 1666.037757][ T7123] Bluetooth: hci0: Frame reassembly failed (-84) [ 1666.119575][T18411] usb 3-1: USB disconnect, device number 117 [ 1666.526180][T28195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.533025][T28195] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.540582][T28195] device bridge_slave_0 entered promiscuous mode [ 1666.550935][T28195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.557821][T28195] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.565059][T28195] device bridge_slave_1 entered promiscuous mode [ 1666.629571][T28195] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.636440][T28195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.643525][T28195] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.650331][T28195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.656004][ T375] handle_bad_sector: 194433 callbacks suppressed [ 1666.656016][ T375] attempt to access beyond end of device [ 1666.656016][ T375] loop4: rw=524288, want=86744, limit=40427 [ 1666.675266][ T375] attempt to access beyond end of device [ 1666.675266][ T375] loop4: rw=524288, want=86752, limit=40427 [ 1666.688410][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1666.695531][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1666.716464][ T375] attempt to access beyond end of device [ 1666.716464][ T375] loop4: rw=524288, want=86760, limit=40427 [ 1666.721101][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1666.728270][ T375] attempt to access beyond end of device [ 1666.728270][ T375] loop4: rw=524288, want=86768, limit=40427 [ 1666.735634][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1666.746601][ T375] attempt to access beyond end of device [ 1666.746601][ T375] loop4: rw=524288, want=86776, limit=40427 [ 1666.764449][ T375] attempt to access beyond end of device [ 1666.764449][ T375] loop4: rw=524288, want=86784, limit=40427 [ 1666.776079][ T375] attempt to access beyond end of device [ 1666.776079][ T375] loop4: rw=524288, want=86792, limit=40427 [ 1666.787638][ T375] attempt to access beyond end of device [ 1666.787638][ T375] loop4: rw=524288, want=86800, limit=40427 [ 1666.798926][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1666.799229][ T375] attempt to access beyond end of device [ 1666.799229][ T375] loop4: rw=524288, want=86808, limit=40427 [ 1666.816302][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1666.818288][ T375] attempt to access beyond end of device [ 1666.818288][ T375] loop4: rw=524288, want=86816, limit=40427 [ 1666.826255][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1666.843772][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1666.876112][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1666.896167][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1666.916113][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1666.923136][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1666.946136][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1666.955780][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1666.963677][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1666.971626][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1666.990909][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1666.999256][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1667.010886][T28195] device veth0_vlan entered promiscuous mode [ 1667.018017][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1667.025907][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1667.041094][T28195] device veth1_macvtap entered promiscuous mode [ 1667.050467][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1667.058327][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1667.065635][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1667.073706][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1667.082541][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1667.100515][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1667.109018][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1667.118030][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1667.126140][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1667.288924][T26262] device bridge_slave_1 left promiscuous mode [ 1667.315622][T26262] bridge0: port 2(bridge_slave_1) entered disabled state [ 1667.327253][T26262] device bridge_slave_0 left promiscuous mode [ 1667.333629][T26262] bridge0: port 1(bridge_slave_0) entered disabled state [ 1667.347888][T26262] device veth1_macvtap left promiscuous mode [ 1668.084009][T20346] Bluetooth: hci0: command 0x1003 tx timeout [ 1668.098356][T26093] Bluetooth: hci0: sending frame failed (-49) [ 1668.796027][T18411] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1669.476107][T18411] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1669.487973][T18411] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1669.498091][T18411] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1669.511204][T18411] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1669.520223][T18411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1669.568949][T18411] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1670.106048][T26654] Bluetooth: hci0: command 0x1001 tx timeout [ 1670.113802][T26093] Bluetooth: hci0: sending frame failed (-49) [ 1671.016063][T26654] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 1671.181429][T20346] usb 4-1: USB disconnect, device number 3 [ 1671.426423][T26654] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1671.534488][T26654] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1671.666044][ T375] handle_bad_sector: 164509 callbacks suppressed [ 1671.666058][ T375] attempt to access beyond end of device [ 1671.666058][ T375] loop4: rw=524288, want=88176, limit=40427 [ 1671.683774][T26654] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1671.696831][T26654] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1671.705769][ T375] attempt to access beyond end of device [ 1671.705769][ T375] loop4: rw=524288, want=88184, limit=40427 [ 1671.717237][T26654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1671.725208][ T375] attempt to access beyond end of device [ 1671.725208][ T375] loop4: rw=524288, want=88192, limit=40427 [ 1671.749124][T28255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1671.754063][ T375] attempt to access beyond end of device [ 1671.754063][ T375] loop4: rw=524288, want=88200, limit=40427 [ 1671.757565][T28255] bridge0: port 1(bridge_slave_0) entered disabled state [ 1671.767556][ T375] attempt to access beyond end of device [ 1671.767556][ T375] loop4: rw=524288, want=88208, limit=40427 [ 1671.774467][T28255] device bridge_slave_0 entered promiscuous mode [ 1671.787178][T26654] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1671.798316][ T375] attempt to access beyond end of device [ 1671.798316][ T375] loop4: rw=524288, want=88216, limit=40427 [ 1671.810890][ T375] attempt to access beyond end of device [ 1671.810890][ T375] loop4: rw=524288, want=88224, limit=40427 [ 1671.822280][ T375] attempt to access beyond end of device [ 1671.822280][ T375] loop4: rw=524288, want=88232, limit=40427 [ 1671.833610][ T375] attempt to access beyond end of device [ 1671.833610][ T375] loop4: rw=524288, want=88240, limit=40427 [ 1671.833909][T28255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1671.844898][ T375] attempt to access beyond end of device [ 1671.844898][ T375] loop4: rw=524288, want=88248, limit=40427 [ 1671.851712][T28255] bridge0: port 2(bridge_slave_1) entered disabled state [ 1671.870417][T28255] device bridge_slave_1 entered promiscuous mode [ 1672.038155][T28255] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.045039][T28255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.052150][T28255] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.058916][T28255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.346649][T20346] Bluetooth: hci0: command 0x1009 tx timeout [ 1672.521199][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.528821][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.536638][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1672.544071][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1672.556519][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1672.565179][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1672.572130][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1672.581201][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1672.589671][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1672.596542][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1672.617362][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1672.626568][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1672.644696][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1672.664154][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1672.673498][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1672.681132][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1672.689181][T28255] device veth0_vlan entered promiscuous mode [ 1672.702295][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1672.714947][T28255] device veth1_macvtap entered promiscuous mode [ 1672.727519][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1672.740657][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1672.750119][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1672.916899][ T9] device bridge_slave_1 left promiscuous mode [ 1672.923667][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1672.940358][ T9] device bridge_slave_0 left promiscuous mode [ 1672.947156][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1672.955234][ T9] device veth1_macvtap left promiscuous mode [ 1672.961635][ T9] device veth0_vlan left promiscuous mode [ 1673.686401][T27684] usb 3-1: USB disconnect, device number 118 [ 1674.176026][T27684] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 1674.576076][T27684] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1674.597004][T27684] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1674.616001][T27684] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1674.646011][T27684] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1674.654847][T27684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1674.708300][T27684] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1675.951094][T28287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1675.957999][T28287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1675.965293][T28287] device bridge_slave_0 entered promiscuous mode [ 1675.972513][T28287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1675.979734][T28287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1675.987341][T28287] device bridge_slave_1 entered promiscuous mode [ 1676.607752][T28287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1676.614639][T28287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1676.614728][T28287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1676.628503][T28287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1676.676034][ T375] handle_bad_sector: 219346 callbacks suppressed [ 1676.676047][ T375] attempt to access beyond end of device [ 1676.676047][ T375] loop4: rw=0, want=88744, limit=40427 [ 1676.790344][ T7142] usb 3-1: USB disconnect, device number 119 [ 1676.937494][ T375] attempt to access beyond end of device [ 1676.937494][ T375] loop4: rw=0, want=88752, limit=40427 [ 1676.955541][ T375] attempt to access beyond end of device [ 1676.955541][ T375] loop4: rw=0, want=88760, limit=40427 [ 1676.966487][ T375] attempt to access beyond end of device [ 1676.966487][ T375] loop4: rw=0, want=88768, limit=40427 [ 1676.977623][ T375] attempt to access beyond end of device [ 1676.977623][ T375] loop4: rw=0, want=88776, limit=40427 [ 1676.988608][ T375] attempt to access beyond end of device [ 1676.988608][ T375] loop4: rw=0, want=88784, limit=40427 [ 1677.000047][ T375] attempt to access beyond end of device [ 1677.000047][ T375] loop4: rw=0, want=88792, limit=40427 [ 1677.264399][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1677.300257][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1677.318475][ T375] attempt to access beyond end of device [ 1677.318475][ T375] loop4: rw=0, want=88800, limit=40427 [ 1677.602568][ T375] attempt to access beyond end of device [ 1677.602568][ T375] loop4: rw=0, want=88808, limit=40427 [ 1677.614154][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1677.631203][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1677.638612][ T375] attempt to access beyond end of device [ 1677.638612][ T375] loop4: rw=0, want=88816, limit=40427 [ 1677.668624][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1677.680027][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1677.696280][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1677.703134][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1678.353331][T28287] device veth0_vlan entered promiscuous mode [ 1678.365787][T28287] device veth1_macvtap entered promiscuous mode [ 1678.454799][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1678.463952][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1678.472504][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1678.479355][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1678.551995][ T7142] usb 3-1: new high-speed USB device number 120 using dummy_hcd [ 1678.882210][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1679.076779][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1679.148227][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1679.157246][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1679.165120][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1679.173716][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1679.189377][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1679.197558][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1679.205549][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1679.394153][ T7142] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1679.537379][ T7142] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1679.547722][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1679.555700][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1679.563097][ T7142] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1679.596282][ T7142] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1679.605123][ T7142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1679.605477][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1679.621276][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1679.630048][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1679.648053][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1679.656674][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1679.664710][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1679.676727][ T7142] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1679.916035][ T328] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 1679.956823][ T9] device bridge_slave_1 left promiscuous mode [ 1679.962835][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1679.970596][ T9] device bridge_slave_0 left promiscuous mode [ 1679.976898][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1679.984905][ T9] device veth1_macvtap left promiscuous mode [ 1679.991193][ T9] device veth0_vlan left promiscuous mode [ 1680.276354][ T328] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1680.296153][ T328] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1680.305780][ T328] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1680.320462][ T328] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1680.329512][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1680.378743][ T328] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1680.911874][ T328] usb 3-1: USB disconnect, device number 120 [ 1681.366062][ T328] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 1681.686005][ T375] handle_bad_sector: 138505 callbacks suppressed [ 1681.686018][ T375] attempt to access beyond end of device [ 1681.686018][ T375] loop4: rw=0, want=88064, limit=40427 [ 1681.703051][ T375] attempt to access beyond end of device [ 1681.703051][ T375] loop4: rw=0, want=88072, limit=40427 [ 1681.714180][ T375] attempt to access beyond end of device [ 1681.714180][ T375] loop4: rw=0, want=88080, limit=40427 [ 1681.725009][ T375] attempt to access beyond end of device [ 1681.725009][ T375] loop4: rw=0, want=88088, limit=40427 [ 1681.735740][ T375] attempt to access beyond end of device [ 1681.735740][ T375] loop4: rw=0, want=88096, limit=40427 [ 1681.736095][ T328] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1681.746652][ T375] attempt to access beyond end of device [ 1681.746652][ T375] loop4: rw=0, want=88104, limit=40427 [ 1681.756493][ T328] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1681.767535][ T375] attempt to access beyond end of device [ 1681.767535][ T375] loop4: rw=0, want=88112, limit=40427 [ 1681.777082][ T328] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1681.787927][ T375] attempt to access beyond end of device [ 1681.787927][ T375] loop4: rw=0, want=88120, limit=40427 [ 1681.800452][ T328] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1681.811239][ T375] attempt to access beyond end of device [ 1681.811239][ T375] loop4: rw=0, want=88128, limit=40427 [ 1681.819995][ T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1681.830829][ T375] attempt to access beyond end of device [ 1681.830829][ T375] loop4: rw=0, want=88136, limit=40427 [ 1681.880040][ T328] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1682.585635][ T328] usb 4-1: USB disconnect, device number 4 [ 1683.236020][ T328] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 1683.606137][ T328] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1683.617792][ T328] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1683.627814][ T328] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1683.640693][ T328] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1683.649737][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.698191][ T328] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1683.944435][T18411] usb 3-1: USB disconnect, device number 121 [ 1684.134727][T28364] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1685.630369][ T7142] usb 4-1: USB disconnect, device number 5 [ 1686.696211][ T375] handle_bad_sector: 237209 callbacks suppressed [ 1686.696235][ T375] attempt to access beyond end of device [ 1686.696235][ T375] loop4: rw=524288, want=88976, limit=40427 [ 1686.720497][ T375] attempt to access beyond end of device [ 1686.720497][ T375] loop4: rw=524288, want=88984, limit=40427 [ 1686.732852][ T375] attempt to access beyond end of device [ 1686.732852][ T375] loop4: rw=524288, want=88992, limit=40427 [ 1686.811985][ T375] attempt to access beyond end of device [ 1686.811985][ T375] loop4: rw=524288, want=89000, limit=40427 [ 1686.825401][ T375] attempt to access beyond end of device [ 1686.825401][ T375] loop4: rw=524288, want=89008, limit=40427 [ 1686.843468][ T375] attempt to access beyond end of device [ 1686.843468][ T375] loop4: rw=524288, want=89016, limit=40427 [ 1686.856493][ T375] attempt to access beyond end of device [ 1686.856493][ T375] loop4: rw=524288, want=89024, limit=40427 [ 1686.869643][ T375] attempt to access beyond end of device [ 1686.869643][ T375] loop4: rw=524288, want=89032, limit=40427 [ 1686.881295][ T375] attempt to access beyond end of device [ 1686.881295][ T375] loop4: rw=524288, want=89040, limit=40427 [ 1686.892729][ T375] attempt to access beyond end of device [ 1686.892729][ T375] loop4: rw=524288, want=89048, limit=40427 [ 1686.936029][T18411] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 1687.086025][ T328] usb 3-1: new high-speed USB device number 122 using dummy_hcd [ 1687.308131][T18411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1687.318939][T18411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1687.328526][T18411] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1687.337513][T18411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.346094][T18411] usb 4-1: config 0 descriptor?? [ 1687.526092][ T328] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.537755][ T328] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1687.547419][ T328] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1687.560213][ T328] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1687.569065][ T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.620103][ T328] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1687.833253][T18411] hid (null): bogus close delimiter [ 1688.056058][T18411] usb 4-1: language id specifier not provided by device, defaulting to English [ 1688.511472][T18411] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.007E/input/input118 [ 1688.537442][T18411] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.007E/input/input119 [ 1688.563480][T18411] uclogic 0003:256C:006D.007E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1688.741675][ T328] usb 4-1: USB disconnect, device number 6 [ 1689.596054][T18411] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 1689.647223][ T6739] usb 3-1: USB disconnect, device number 122 [ 1689.916330][T28411] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1690.032224][T28413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.039220][T28413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.047071][T28413] device bridge_slave_0 entered promiscuous mode [ 1690.058555][T28413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.065441][T28413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.073076][T28413] device bridge_slave_1 entered promiscuous mode [ 1690.086152][T18411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1690.102075][T18411] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1690.122690][T18411] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1690.124419][T28413] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.138400][T28413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.140743][T18411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1690.145491][T28413] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.160096][T28413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.167800][T18411] usb 4-1: config 0 descriptor?? [ 1690.192011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1690.202536][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.209823][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.230303][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1690.238592][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1690.245431][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1690.252876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1690.261647][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1690.268500][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1690.288477][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1690.296491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1690.312425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1690.327220][T28413] device veth0_vlan entered promiscuous mode [ 1690.335197][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1690.343706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1690.351228][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1690.369318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1690.377793][T28413] device veth1_macvtap entered promiscuous mode [ 1690.432166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1690.445504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1690.536831][ T7123] device bridge_slave_1 left promiscuous mode [ 1690.542837][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1690.550297][ T7123] device bridge_slave_0 left promiscuous mode [ 1690.556360][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1690.564309][ T7123] device veth1_macvtap left promiscuous mode [ 1690.570461][ T7123] device veth0_vlan left promiscuous mode [ 1690.658068][T18411] hid (null): bogus close delimiter [ 1691.014331][T18411] usb 4-1: language id specifier not provided by device, defaulting to English [ 1691.400356][T18411] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.007F/input/input120 [ 1691.436332][T18411] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.007F/input/input121 [ 1691.449104][T18411] uclogic 0003:256C:006D.007F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1691.866341][ T375] handle_bad_sector: 211317 callbacks suppressed [ 1691.866354][ T375] attempt to access beyond end of device [ 1691.866354][ T375] loop4: rw=0, want=88672, limit=40427 [ 1691.884021][ T375] attempt to access beyond end of device [ 1691.884021][ T375] loop4: rw=0, want=88680, limit=40427 [ 1691.896764][T13726] usb 4-1: USB disconnect, device number 7 [ 1691.899690][ T375] attempt to access beyond end of device [ 1691.899690][ T375] loop4: rw=0, want=88688, limit=40427 [ 1691.926957][ T375] attempt to access beyond end of device [ 1691.926957][ T375] loop4: rw=0, want=88696, limit=40427 [ 1691.938108][ T375] attempt to access beyond end of device [ 1691.938108][ T375] loop4: rw=0, want=88704, limit=40427 [ 1691.949293][ T375] attempt to access beyond end of device [ 1691.949293][ T375] loop4: rw=0, want=88712, limit=40427 [ 1691.961246][ T375] attempt to access beyond end of device [ 1691.961246][ T375] loop4: rw=0, want=88720, limit=40427 [ 1691.983844][ T375] attempt to access beyond end of device [ 1691.983844][ T375] loop4: rw=0, want=88728, limit=40427 [ 1691.994832][ T375] attempt to access beyond end of device [ 1691.994832][ T375] loop4: rw=0, want=88736, limit=40427 [ 1692.005799][ T375] attempt to access beyond end of device [ 1692.005799][ T375] loop4: rw=0, want=88744, limit=40427 [ 1692.987606][ T24] audit: type=1326 audit(2000001265.019:4010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28448 comm="syz.2.6887" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2327f4aef9 code=0x0 [ 1694.308093][T13726] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 1694.337512][T28471] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1694.536066][T26654] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 1694.826116][T13726] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1694.847563][T13726] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1694.864210][T13726] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1694.908204][T13726] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1694.923825][T13726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.048943][T26654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.081548][T26654] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.170643][T26654] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1695.225480][T13726] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1695.234317][T26654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.253078][T26654] usb 3-1: config 0 descriptor?? [ 1695.556001][ T6739] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 1695.746426][T26654] hid (null): bogus close delimiter [ 1695.916047][ T6739] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1695.931262][ T6739] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1695.941197][ T6739] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1695.956413][ T6739] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1695.965288][ T6739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.973349][T26654] usb 3-1: language id specifier not provided by device, defaulting to English [ 1696.031311][ T6739] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1696.264659][ T327] usb 5-1: USB disconnect, device number 7 [ 1696.479435][T26654] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0080/input/input122 [ 1696.597101][T26654] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0080/input/input123 [ 1696.623223][T26654] uclogic 0003:256C:006D.0080: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 1696.678410][T26654] usb 3-1: USB disconnect, device number 123 [ 1696.875982][ T375] handle_bad_sector: 118476 callbacks suppressed [ 1696.875994][ T375] attempt to access beyond end of device [ 1696.875994][ T375] loop4: rw=0, want=86160, limit=40427 [ 1696.892997][ T375] attempt to access beyond end of device [ 1696.892997][ T375] loop4: rw=0, want=86168, limit=40427 [ 1696.903814][ T375] attempt to access beyond end of device [ 1696.903814][ T375] loop4: rw=0, want=86176, limit=40427 [ 1696.915348][ T375] attempt to access beyond end of device [ 1696.915348][ T375] loop4: rw=0, want=86184, limit=40427 [ 1696.926506][ T375] attempt to access beyond end of device [ 1696.926506][ T375] loop4: rw=0, want=86192, limit=40427 [ 1696.937786][ T375] attempt to access beyond end of device [ 1696.937786][ T375] loop4: rw=0, want=86200, limit=40427 [ 1696.948612][ T375] attempt to access beyond end of device [ 1696.948612][ T375] loop4: rw=0, want=86208, limit=40427 [ 1696.959406][ T375] attempt to access beyond end of device [ 1696.959406][ T375] loop4: rw=0, want=86216, limit=40427 [ 1696.970210][ T375] attempt to access beyond end of device [ 1696.970210][ T375] loop4: rw=0, want=86224, limit=40427 [ 1696.980946][ T375] attempt to access beyond end of device [ 1696.980946][ T375] loop4: rw=0, want=86232, limit=40427 [ 1697.006068][ T327] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 1697.666039][ T327] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1697.682200][ T327] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1697.692098][ T327] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1697.704967][ T327] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1697.713986][ T327] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.767294][ T327] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1697.878057][T26654] usb 4-1: USB disconnect, device number 8 [ 1699.096075][T28507] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1699.296076][ T327] usb 5-1: USB disconnect, device number 8 [ 1700.499501][T28525] overlayfs: failed to resolve './file0': -2 [ 1700.581491][T28520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.596620][T28520] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.650436][T28520] device bridge_slave_0 entered promiscuous mode [ 1700.676935][T28520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.698778][T28520] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.706151][T28520] device bridge_slave_1 entered promiscuous mode [ 1700.798653][T28520] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.805509][T28520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.812626][T28520] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.819400][T28520] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.844589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1700.854228][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1700.862672][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1700.882365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1700.890409][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1700.897258][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1700.904855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1700.913264][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1700.920123][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.941330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1700.951450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1700.969588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1700.981379][T28520] device veth0_vlan entered promiscuous mode [ 1700.987705][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1701.002660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1701.012910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1701.020736][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1701.028672][T28520] device veth1_macvtap entered promiscuous mode [ 1701.048013][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1701.058412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1701.535488][ T7123] device bridge_slave_1 left promiscuous mode [ 1701.548780][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1701.610524][ T7123] device bridge_slave_0 left promiscuous mode [ 1701.656111][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1701.664233][ T7123] device veth1_macvtap left promiscuous mode [ 1701.670217][ T7123] device veth0_vlan left promiscuous mode [ 1701.786234][ T297] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 1701.886026][ T375] handle_bad_sector: 186126 callbacks suppressed [ 1701.886040][ T375] attempt to access beyond end of device [ 1701.886040][ T375] loop4: rw=0, want=86288, limit=40427 [ 1701.903127][ T375] attempt to access beyond end of device [ 1701.903127][ T375] loop4: rw=0, want=86296, limit=40427 [ 1701.914108][ T375] attempt to access beyond end of device [ 1701.914108][ T375] loop4: rw=0, want=86304, limit=40427 [ 1701.924947][ T375] attempt to access beyond end of device [ 1701.924947][ T375] loop4: rw=0, want=86312, limit=40427 [ 1701.946603][ T375] attempt to access beyond end of device [ 1701.946603][ T375] loop4: rw=0, want=86320, limit=40427 [ 1701.966153][ T375] attempt to access beyond end of device [ 1701.966153][ T375] loop4: rw=0, want=86328, limit=40427 [ 1701.979660][ T375] attempt to access beyond end of device [ 1701.979660][ T375] loop4: rw=0, want=86336, limit=40427 [ 1701.992392][ T375] attempt to access beyond end of device [ 1701.992392][ T375] loop4: rw=0, want=86344, limit=40427 [ 1702.005370][ T375] attempt to access beyond end of device [ 1702.005370][ T375] loop4: rw=0, want=86352, limit=40427 [ 1702.016291][T27684] usb 3-1: new high-speed USB device number 124 using dummy_hcd [ 1702.023941][ T375] attempt to access beyond end of device [ 1702.023941][ T375] loop4: rw=0, want=86360, limit=40427 [ 1702.146087][ T297] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.166916][ T297] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1702.198658][ T297] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1702.221710][ T297] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1702.241731][ T297] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.290314][ T297] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1702.376047][T27684] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1702.392233][T27684] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1702.412122][T27684] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1702.437053][T27684] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1702.455046][T27684] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.506778][T27684] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1703.065453][T28550] overlayfs: failed to resolve './file0': -2 [ 1704.194095][T16011] usb 5-1: USB disconnect, device number 9 [ 1704.685529][ T328] usb 3-1: USB disconnect, device number 124 [ 1705.356112][ T328] usb 3-1: new high-speed USB device number 125 using dummy_hcd [ 1705.436052][T26656] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 1705.736069][ T328] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1705.746862][ T328] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1705.756742][ T328] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1705.770776][ T328] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1705.779792][ T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.806138][T26656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1705.816902][T26656] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1705.828675][ T328] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1705.839414][T26656] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1705.848929][T26656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1705.860514][T26656] usb 5-1: config 0 descriptor?? [ 1706.054767][T28576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.061921][T28576] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.070728][T28576] device bridge_slave_0 entered promiscuous mode [ 1706.080659][T28576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.087760][T28576] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.095033][T28576] device bridge_slave_1 entered promiscuous mode [ 1706.153301][T28576] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.160174][T28576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1706.167285][T28576] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.174032][T28576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.201474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1706.213163][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.220931][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.238910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1706.247174][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1706.254005][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1706.261660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1706.270302][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1706.277249][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1706.298857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1706.306896][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1706.318484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1706.326458][T26656] hid (null): bogus close delimiter [ 1706.338608][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1706.348499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1706.363874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1706.381444][T28576] device veth0_vlan entered promiscuous mode [ 1706.393902][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1706.407895][T28576] device veth1_macvtap entered promiscuous mode [ 1706.423334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1706.437951][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1706.656426][ T7123] device bridge_slave_1 left promiscuous mode [ 1706.674452][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1706.703292][ T7123] device bridge_slave_0 left promiscuous mode [ 1706.726285][T26656] usb 5-1: language id specifier not provided by device, defaulting to English [ 1706.738500][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1706.756759][ T7123] device veth1_macvtap left promiscuous mode [ 1706.762559][ T7123] device veth0_vlan left promiscuous mode [ 1706.895995][ T375] handle_bad_sector: 173753 callbacks suppressed [ 1706.896010][ T375] attempt to access beyond end of device [ 1706.896010][ T375] loop4: rw=524288, want=86432, limit=40427 [ 1706.913637][ T375] attempt to access beyond end of device [ 1706.913637][ T375] loop4: rw=524288, want=86440, limit=40427 [ 1706.924935][ T375] attempt to access beyond end of device [ 1706.924935][ T375] loop4: rw=524288, want=86448, limit=40427 [ 1706.936204][ T375] attempt to access beyond end of device [ 1706.936204][ T375] loop4: rw=524288, want=86456, limit=40427 [ 1706.947591][ T375] attempt to access beyond end of device [ 1706.947591][ T375] loop4: rw=524288, want=86464, limit=40427 [ 1706.959071][ T375] attempt to access beyond end of device [ 1706.959071][ T375] loop4: rw=524288, want=86472, limit=40427 [ 1706.970368][ T375] attempt to access beyond end of device [ 1706.970368][ T375] loop4: rw=524288, want=86480, limit=40427 [ 1706.981705][ T375] attempt to access beyond end of device [ 1706.981705][ T375] loop4: rw=524288, want=86488, limit=40427 [ 1706.993060][ T375] attempt to access beyond end of device [ 1706.993060][ T375] loop4: rw=524288, want=86496, limit=40427 [ 1707.004567][ T375] attempt to access beyond end of device [ 1707.004567][ T375] loop4: rw=524288, want=86504, limit=40427 [ 1707.167584][T26656] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0081/input/input124 [ 1707.195859][T26656] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0081/input/input125 [ 1707.213585][T26656] uclogic 0003:256C:006D.0081: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1707.396073][ T25] usb 5-1: USB disconnect, device number 10 [ 1707.718793][ T297] usb 3-1: USB disconnect, device number 125 [ 1707.899650][T28589] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1708.161930][T28593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.169549][T28593] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.177009][T28593] device bridge_slave_0 entered promiscuous mode [ 1708.188752][T28593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.195591][T28593] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.202957][T28593] device bridge_slave_1 entered promiscuous mode [ 1708.259235][T28593] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.266111][T28593] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1708.273201][T28593] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.279995][T28593] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.309720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1708.317892][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.325059][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.343367][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1708.354838][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1708.356060][ T20] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1708.361695][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1708.377461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1708.385501][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1708.392372][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1708.399767][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1708.417875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1708.434138][T28593] device veth0_vlan entered promiscuous mode [ 1708.440966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1708.449449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1708.458231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1708.465556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1708.479690][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1708.490681][T28593] device veth1_macvtap entered promiscuous mode [ 1708.504051][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1708.524282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1708.718834][ T7123] device bridge_slave_1 left promiscuous mode [ 1708.724824][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1708.733471][ T7123] device bridge_slave_0 left promiscuous mode [ 1708.739566][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1708.746108][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1708.757489][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1708.767104][ T7123] device veth1_macvtap left promiscuous mode [ 1708.767207][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1708.776217][ T7123] device veth0_vlan left promiscuous mode [ 1708.796000][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1708.816255][ T20] usb 5-1: config 0 descriptor?? [ 1709.297230][ T20] hid (null): bogus close delimiter [ 1709.676643][ T20] usb 5-1: language id specifier not provided by device, defaulting to English [ 1709.886141][ T328] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 1710.127559][ T20] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0082/input/input126 [ 1710.158484][ T20] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0082/input/input127 [ 1710.179465][ T20] uclogic 0003:256C:006D.0082: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1710.256151][ T328] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1710.267959][ T328] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1710.277897][ T328] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1710.290859][ T328] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1710.299970][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.358296][ T328] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1710.386223][ T328] usb 5-1: USB disconnect, device number 11 [ 1711.906034][ T375] handle_bad_sector: 248553 callbacks suppressed [ 1711.906044][ T375] attempt to access beyond end of device [ 1711.906044][ T375] loop4: rw=524288, want=87016, limit=40427 [ 1711.923614][ T375] attempt to access beyond end of device [ 1711.923614][ T375] loop4: rw=524288, want=87024, limit=40427 [ 1711.934895][ T375] attempt to access beyond end of device [ 1711.934895][ T375] loop4: rw=524288, want=87032, limit=40427 [ 1711.946394][ T375] attempt to access beyond end of device [ 1711.946394][ T375] loop4: rw=524288, want=87040, limit=40427 [ 1711.957663][ T375] attempt to access beyond end of device [ 1711.957663][ T375] loop4: rw=524288, want=87048, limit=40427 [ 1711.968914][ T375] attempt to access beyond end of device [ 1711.968914][ T375] loop4: rw=524288, want=87056, limit=40427 [ 1711.980387][ T375] attempt to access beyond end of device [ 1711.980387][ T375] loop4: rw=524288, want=87064, limit=40427 [ 1711.991785][ T375] attempt to access beyond end of device [ 1711.991785][ T375] loop4: rw=524288, want=87072, limit=40427 [ 1712.003085][ T375] attempt to access beyond end of device [ 1712.003085][ T375] loop4: rw=524288, want=87080, limit=40427 [ 1712.014404][ T375] attempt to access beyond end of device [ 1712.014404][ T375] loop4: rw=524288, want=87088, limit=40427 [ 1712.422826][T18411] usb 4-1: USB disconnect, device number 9 [ 1713.443687][T18411] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 1713.814229][T28632] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1714.026194][T18411] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1714.047050][T18411] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1714.065998][T18411] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1714.078731][T18411] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1714.087552][T18411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1714.140120][T18411] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1715.461788][ T328] usb 4-1: USB disconnect, device number 10 [ 1716.066000][ T328] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 1716.164454][T28649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.171518][T28649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.181060][T28649] device bridge_slave_0 entered promiscuous mode [ 1716.190615][T28649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.197853][T28649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.205239][T28649] device bridge_slave_1 entered promiscuous mode [ 1716.316076][T28649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.322930][T28649] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.330098][T28649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.336942][T28649] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.383635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1716.392157][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.399961][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.418678][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1716.455043][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1716.461912][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1716.526247][ T328] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1716.551275][ T328] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1716.574982][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1716.605688][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1716.612550][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1716.626000][ T328] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1716.648848][ T328] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1716.657998][ T328] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.676613][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1716.695175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1716.706824][ T328] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1716.722361][T28649] device veth0_vlan entered promiscuous mode [ 1716.731134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1716.739623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1716.747671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1716.757449][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1716.772998][T28649] device veth1_macvtap entered promiscuous mode [ 1716.780384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1716.794883][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1716.806129][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1716.868508][ T7123] device bridge_slave_1 left promiscuous mode [ 1716.874574][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1716.882238][ T7123] device bridge_slave_0 left promiscuous mode [ 1716.890138][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1716.898553][ T7123] device veth1_macvtap left promiscuous mode [ 1716.904459][ T7123] device veth0_vlan left promiscuous mode [ 1716.930133][ T375] handle_bad_sector: 158759 callbacks suppressed [ 1716.930147][ T375] attempt to access beyond end of device [ 1716.930147][ T375] loop4: rw=524288, want=89968, limit=40427 [ 1716.947620][ T375] attempt to access beyond end of device [ 1716.947620][ T375] loop4: rw=524288, want=89976, limit=40427 [ 1716.958940][ T375] attempt to access beyond end of device [ 1716.958940][ T375] loop4: rw=0, want=86024, limit=40427 [ 1716.969843][ T375] attempt to access beyond end of device [ 1716.969843][ T375] loop4: rw=0, want=86032, limit=40427 [ 1716.980727][ T375] attempt to access beyond end of device [ 1716.980727][ T375] loop4: rw=0, want=86040, limit=40427 [ 1716.991569][ T375] attempt to access beyond end of device [ 1716.991569][ T375] loop4: rw=0, want=86048, limit=40427 [ 1717.002505][ T375] attempt to access beyond end of device [ 1717.002505][ T375] loop4: rw=0, want=86056, limit=40427 [ 1717.013603][ T375] attempt to access beyond end of device [ 1717.013603][ T375] loop4: rw=0, want=86064, limit=40427 [ 1717.024421][ T375] attempt to access beyond end of device [ 1717.024421][ T375] loop4: rw=0, want=86072, limit=40427 [ 1717.035220][ T375] attempt to access beyond end of device [ 1717.035220][ T375] loop4: rw=0, want=86080, limit=40427 [ 1717.229372][T28663] overlayfs: missing 'lowerdir' [ 1717.341756][T28666] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 925 (only 8 groups) [ 1718.489961][ T25] usb 4-1: USB disconnect, device number 11 [ 1719.134114][T28686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.141182][T28686] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.148669][T28686] device bridge_slave_0 entered promiscuous mode [ 1719.155652][T28686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.162565][T28686] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.170371][T28686] device bridge_slave_1 entered promiscuous mode [ 1719.240351][T28686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.247248][T28686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.254332][T28686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.261116][T28686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.289837][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1719.298203][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1719.305384][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1719.359422][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1719.368038][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1719.374895][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1719.382149][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1719.437541][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1719.444402][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1719.617884][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1719.636284][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1719.654114][T28686] device veth0_vlan entered promiscuous mode [ 1719.924577][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1719.936001][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1719.948192][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1719.955542][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1719.970736][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1719.980258][T28686] device veth1_macvtap entered promiscuous mode [ 1719.991932][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1720.011674][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1720.168909][T25005] device bridge_slave_1 left promiscuous mode [ 1720.174945][T25005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1720.182529][T25005] device bridge_slave_0 left promiscuous mode [ 1720.188685][T25005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1720.197018][T25005] device veth1_macvtap left promiscuous mode [ 1720.202919][T25005] device veth0_vlan left promiscuous mode [ 1720.622928][T28708] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1721.542922][T28719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.550494][T28719] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.557788][T28719] device bridge_slave_0 entered promiscuous mode [ 1721.565331][T28719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.572203][T28719] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.580894][T28719] device bridge_slave_1 entered promiscuous mode [ 1721.676036][ T6739] usb 3-1: new high-speed USB device number 126 using dummy_hcd [ 1721.698105][T28719] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.704950][T28719] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.712087][T28719] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.718855][T28719] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1721.787752][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1721.806604][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1721.813758][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1721.865233][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1721.886249][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1721.893192][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1721.916173][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1721.924488][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1721.931360][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1721.938846][ T375] handle_bad_sector: 99545 callbacks suppressed [ 1721.938859][ T375] attempt to access beyond end of device [ 1721.938859][ T375] loop4: rw=524288, want=86488, limit=40427 [ 1721.957433][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1721.965261][ T375] attempt to access beyond end of device [ 1721.965261][ T375] loop4: rw=524288, want=86496, limit=40427 [ 1721.981441][ T375] attempt to access beyond end of device [ 1721.981441][ T375] loop4: rw=524288, want=86504, limit=40427 [ 1721.982646][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1721.993029][ T375] attempt to access beyond end of device [ 1721.993029][ T375] loop4: rw=524288, want=86512, limit=40427 [ 1722.012841][ T375] attempt to access beyond end of device [ 1722.012841][ T375] loop4: rw=524288, want=86520, limit=40427 [ 1722.024747][ T375] attempt to access beyond end of device [ 1722.024747][ T375] loop4: rw=524288, want=86528, limit=40427 [ 1722.025393][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1722.041914][ T375] attempt to access beyond end of device [ 1722.041914][ T375] loop4: rw=524288, want=86536, limit=40427 [ 1722.051835][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1722.056058][ T6739] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1722.063634][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1722.080399][ T6739] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1722.081108][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1722.091397][ T375] attempt to access beyond end of device [ 1722.091397][ T375] loop4: rw=524288, want=86544, limit=40427 [ 1722.097846][T28719] device veth0_vlan entered promiscuous mode [ 1722.115323][ T6739] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1722.121404][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1722.134549][ T375] attempt to access beyond end of device [ 1722.134549][ T375] loop4: rw=524288, want=86552, limit=40427 [ 1722.138098][T28719] device veth1_macvtap entered promiscuous mode [ 1722.150314][ T6739] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1722.158287][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1722.166074][ T375] attempt to access beyond end of device [ 1722.166074][ T375] loop4: rw=524288, want=86560, limit=40427 [ 1722.186258][ T6739] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1722.211586][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1722.226845][ T6739] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1722.337047][T25005] device bridge_slave_1 left promiscuous mode [ 1722.343070][T25005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1722.630987][T25005] device bridge_slave_0 left promiscuous mode [ 1722.637087][T25005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1722.645067][T25005] device veth1_macvtap left promiscuous mode [ 1722.652867][T25005] device veth0_vlan left promiscuous mode [ 1722.896005][T13726] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 1723.916709][T13726] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1723.927090][T13726] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1723.940458][T13726] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1723.953598][T13726] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1723.970902][ T25] usb 3-1: USB disconnect, device number 126 [ 1723.977075][T13726] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1724.029479][T13726] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1725.758236][ T328] usb 4-1: USB disconnect, device number 12 [ 1726.946021][ T375] handle_bad_sector: 53926 callbacks suppressed [ 1726.946035][ T375] attempt to access beyond end of device [ 1726.946035][ T375] loop4: rw=0, want=86336, limit=40427 [ 1726.963703][ T375] attempt to access beyond end of device [ 1726.963703][ T375] loop4: rw=0, want=86344, limit=40427 [ 1726.974938][ T375] attempt to access beyond end of device [ 1726.974938][ T375] loop4: rw=0, want=86352, limit=40427 [ 1726.986705][ T375] attempt to access beyond end of device [ 1726.986705][ T375] loop4: rw=0, want=86360, limit=40427 [ 1726.998670][ T375] attempt to access beyond end of device [ 1726.998670][ T375] loop4: rw=0, want=86368, limit=40427 [ 1727.017078][ T375] attempt to access beyond end of device [ 1727.017078][ T375] loop4: rw=0, want=86376, limit=40427 [ 1727.028508][ T375] attempt to access beyond end of device [ 1727.028508][ T375] loop4: rw=0, want=86384, limit=40427 [ 1727.056105][ T375] attempt to access beyond end of device [ 1727.056105][ T375] loop4: rw=0, want=86392, limit=40427 [ 1727.071390][ T375] attempt to access beyond end of device [ 1727.071390][ T375] loop4: rw=0, want=86400, limit=40427 [ 1727.082622][ T375] attempt to access beyond end of device [ 1727.082622][ T375] loop4: rw=0, want=86408, limit=40427 [ 1729.096651][T28835] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1729.105663][T28835] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1729.344387][ T20] usb 3-1: new high-speed USB device number 127 using dummy_hcd [ 1730.072942][ T20] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1730.101531][ T20] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1730.111371][ T20] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1730.127273][ T20] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1730.136223][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1730.574295][ T20] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1731.336029][ T20] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 1731.684992][T28870] overlayfs: missing 'lowerdir' [ 1731.776275][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1731.834708][ T20] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1731.856279][ T20] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1731.865244][T18727] usb 3-1: USB disconnect, device number 127 [ 1731.885395][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.910346][ T20] usb 5-1: config 0 descriptor?? [ 1732.044987][T28874] overlayfs: failed to resolve './file2': -2 [ 1732.124881][ T375] handle_bad_sector: 58143 callbacks suppressed [ 1732.124996][ T375] attempt to access beyond end of device [ 1732.124996][ T375] loop4: rw=524288, want=88240, limit=40427 [ 1732.199241][ T375] attempt to access beyond end of device [ 1732.199241][ T375] loop4: rw=524288, want=88248, limit=40427 [ 1732.211375][ T375] attempt to access beyond end of device [ 1732.211375][ T375] loop4: rw=524288, want=88256, limit=40427 [ 1732.227556][ T375] attempt to access beyond end of device [ 1732.227556][ T375] loop4: rw=524288, want=88264, limit=40427 [ 1732.239004][ T375] attempt to access beyond end of device [ 1732.239004][ T375] loop4: rw=524288, want=88272, limit=40427 [ 1732.266098][ T375] attempt to access beyond end of device [ 1732.266098][ T375] loop4: rw=524288, want=88280, limit=40427 [ 1732.277831][ T375] attempt to access beyond end of device [ 1732.277831][ T375] loop4: rw=524288, want=88288, limit=40427 [ 1732.289659][ T375] attempt to access beyond end of device [ 1732.289659][ T375] loop4: rw=524288, want=88296, limit=40427 [ 1732.313816][ T375] attempt to access beyond end of device [ 1732.313816][ T375] loop4: rw=524288, want=88304, limit=40427 [ 1732.325481][ T375] attempt to access beyond end of device [ 1732.325481][ T375] loop4: rw=524288, want=88312, limit=40427 [ 1732.468865][T28883] overlayfs: missing 'lowerdir' [ 1732.640264][T28886] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6985'. [ 1732.748197][ T20] hid (null): bogus close delimiter [ 1732.775990][T18727] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 1732.976352][ T20] usb 5-1: language id specifier not provided by device, defaulting to English [ 1733.353843][T28899] overlayfs: failed to resolve './file2': -2 [ 1733.433770][ T20] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0083/input/input128 [ 1733.567131][ T20] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0083/input/input129 [ 1733.625911][ T20] uclogic 0003:256C:006D.0083: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1733.646071][T18727] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1733.656186][T18727] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1733.665824][T18727] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1733.676188][ T20] usb 5-1: USB disconnect, device number 12 [ 1733.686164][T18727] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1733.694383][T26654] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1733.694995][T18727] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1733.756853][T18727] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1734.276087][T26654] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1734.286459][T26654] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1734.296569][T26654] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1734.309513][T26654] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1734.318414][T26654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1734.369277][T26654] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1734.756003][T26654] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 1735.117044][T26654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.127941][T26654] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.138122][T26654] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1735.147252][T26654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.156698][T26654] usb 5-1: config 0 descriptor?? [ 1735.179584][T26656] usb 3-1: USB disconnect, device number 2 [ 1735.562807][T28921] overlayfs: missing 'lowerdir' [ 1735.737294][T26654] hid (null): bogus close delimiter [ 1735.956046][T26654] usb 5-1: language id specifier not provided by device, defaulting to English [ 1736.390773][T28926] overlayfs: missing 'lowerdir' [ 1736.541536][T13726] usb 4-1: USB disconnect, device number 13 [ 1736.669295][T26654] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0084/input/input130 [ 1736.684213][T26654] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0084/input/input131 [ 1736.708092][T26654] uclogic 0003:256C:006D.0084: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1737.176018][ T375] handle_bad_sector: 137666 callbacks suppressed [ 1737.176030][ T375] attempt to access beyond end of device [ 1737.176030][ T375] loop4: rw=524288, want=88768, limit=40427 [ 1737.179567][T26654] usb 5-1: USB disconnect, device number 13 [ 1737.198535][ T375] attempt to access beyond end of device [ 1737.198535][ T375] loop4: rw=524288, want=88776, limit=40427 [ 1737.211045][ T375] attempt to access beyond end of device [ 1737.211045][ T375] loop4: rw=524288, want=88784, limit=40427 [ 1737.227750][ T375] attempt to access beyond end of device [ 1737.227750][ T375] loop4: rw=524288, want=88792, limit=40427 [ 1737.239603][ T375] attempt to access beyond end of device [ 1737.239603][ T375] loop4: rw=524288, want=88800, limit=40427 [ 1737.251213][ T375] attempt to access beyond end of device [ 1737.251213][ T375] loop4: rw=524288, want=88808, limit=40427 [ 1737.263090][ T375] attempt to access beyond end of device [ 1737.263090][ T375] loop4: rw=524288, want=88816, limit=40427 [ 1737.274796][ T375] attempt to access beyond end of device [ 1737.274796][ T375] loop4: rw=524288, want=88824, limit=40427 [ 1737.286728][ T375] attempt to access beyond end of device [ 1737.286728][ T375] loop4: rw=524288, want=88832, limit=40427 [ 1737.300606][ T375] attempt to access beyond end of device [ 1737.300606][ T375] loop4: rw=524288, want=88840, limit=40427 [ 1737.747776][T28951] overlayfs: failed to resolve './file2': -2 [ 1738.962414][ T7142] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 1739.396263][ T7142] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1739.465540][ T7142] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1739.508721][ T7142] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1739.552666][ T7142] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1739.561551][ T7142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.617641][ T7142] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1739.643731][T28981] overlayfs: failed to resolve './file2': -2 [ 1739.946003][ T7142] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 1739.946025][ T297] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1740.306020][ T7142] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.320144][ T7142] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1740.340057][ T7142] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1740.356109][ T297] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1740.366063][ T7142] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1740.366076][ T7142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.383175][ T297] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1740.393159][ T297] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1740.406194][ T297] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1740.406775][ T7142] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1740.415112][ T297] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1740.486670][ T297] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1741.149578][ T7142] usb 3-1: USB disconnect, device number 3 [ 1741.356056][T28992] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1741.853781][T29001] overlayfs: missing 'lowerdir' [ 1742.089224][T18411] usb 4-1: USB disconnect, device number 14 [ 1742.185972][ T375] handle_bad_sector: 111126 callbacks suppressed [ 1742.185985][ T375] attempt to access beyond end of device [ 1742.185985][ T375] loop4: rw=0, want=86856, limit=40427 [ 1742.203546][ T375] attempt to access beyond end of device [ 1742.203546][ T375] loop4: rw=0, want=86864, limit=40427 [ 1742.226091][ T375] attempt to access beyond end of device [ 1742.226091][ T375] loop4: rw=0, want=86872, limit=40427 [ 1742.237198][ T375] attempt to access beyond end of device [ 1742.237198][ T375] loop4: rw=0, want=86880, limit=40427 [ 1742.248135][ T375] attempt to access beyond end of device [ 1742.248135][ T375] loop4: rw=0, want=86888, limit=40427 [ 1742.259057][ T375] attempt to access beyond end of device [ 1742.259057][ T375] loop4: rw=0, want=86896, limit=40427 [ 1742.269950][ T375] attempt to access beyond end of device [ 1742.269950][ T375] loop4: rw=0, want=86904, limit=40427 [ 1742.280832][ T375] attempt to access beyond end of device [ 1742.280832][ T375] loop4: rw=0, want=86912, limit=40427 [ 1742.291963][ T375] attempt to access beyond end of device [ 1742.291963][ T375] loop4: rw=0, want=86920, limit=40427 [ 1742.304393][ T375] attempt to access beyond end of device [ 1742.304393][ T375] loop4: rw=0, want=86928, limit=40427 [ 1742.546678][T18411] usb 5-1: USB disconnect, device number 14 [ 1742.792107][T29022] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1742.800783][T29022] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1744.521215][T29050] overlayfs: missing 'lowerdir' [ 1744.596098][ T7142] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1744.925992][T13726] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1745.334902][T29062] overlayfs: failed to resolve './file2': -2 [ 1745.567139][T26262] Bluetooth: hci0: Frame reassembly failed (-84) [ 1745.596331][ T7142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1745.675584][ T7142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1745.728280][ T7142] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1745.747523][ T7142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.765026][ T7142] usb 4-1: config 0 descriptor?? [ 1745.906081][T13726] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1745.916427][T13726] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1745.926340][T13726] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1746.231954][T13726] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1746.240848][T13726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1746.246920][ T7142] hid (null): bogus close delimiter [ 1746.290412][T13726] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1746.466105][ T7142] usb 4-1: language id specifier not provided by device, defaulting to English [ 1746.871653][T29076] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1746.880324][T29076] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1746.924417][ T7142] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0085/input/input132 [ 1747.047210][ T7142] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0085/input/input133 [ 1747.082332][ T7142] uclogic 0003:256C:006D.0085: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1747.129237][ T7142] usb 4-1: USB disconnect, device number 15 [ 1747.195961][ T375] handle_bad_sector: 64944 callbacks suppressed [ 1747.195974][ T375] attempt to access beyond end of device [ 1747.195974][ T375] loop4: rw=524288, want=87728, limit=40427 [ 1747.213895][ T375] attempt to access beyond end of device [ 1747.213895][ T375] loop4: rw=524288, want=87736, limit=40427 [ 1747.225177][ T375] attempt to access beyond end of device [ 1747.225177][ T375] loop4: rw=524288, want=87744, limit=40427 [ 1747.236375][ T375] attempt to access beyond end of device [ 1747.236375][ T375] loop4: rw=524288, want=87752, limit=40427 [ 1747.247573][ T375] attempt to access beyond end of device [ 1747.247573][ T375] loop4: rw=524288, want=87760, limit=40427 [ 1747.258876][ T375] attempt to access beyond end of device [ 1747.258876][ T375] loop4: rw=524288, want=87768, limit=40427 [ 1747.270125][ T375] attempt to access beyond end of device [ 1747.270125][ T375] loop4: rw=524288, want=87776, limit=40427 [ 1747.281430][ T375] attempt to access beyond end of device [ 1747.281430][ T375] loop4: rw=524288, want=87784, limit=40427 [ 1747.292722][ T375] attempt to access beyond end of device [ 1747.292722][ T375] loop4: rw=524288, want=87792, limit=40427 [ 1747.303921][ T375] attempt to access beyond end of device [ 1747.303921][ T375] loop4: rw=524288, want=87800, limit=40427 [ 1747.466301][T20346] Bluetooth: hci0: command 0x1003 tx timeout [ 1747.474102][T26093] Bluetooth: hci0: sending frame failed (-49) [ 1747.519455][ T327] usb 5-1: USB disconnect, device number 15 [ 1748.459095][T29095] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7037'. [ 1748.526013][T18411] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1748.926058][T18411] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1748.940464][T18411] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1748.960255][T18411] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1748.981205][T18411] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1748.997233][T18411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.047151][T18411] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1749.373607][T29107] overlayfs: failed to resolve './file2': -2 [ 1749.546051][ T7142] Bluetooth: hci0: command 0x1001 tx timeout [ 1749.554477][T26093] Bluetooth: hci0: sending frame failed (-49) [ 1749.705269][T26654] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1749.843313][T29111] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1749.851968][T29111] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1750.096108][T26654] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1750.106233][T26654] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1750.115857][T26654] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1750.130893][T26654] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1750.140181][T26654] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1750.190551][T26654] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1750.663915][T25570] usb 4-1: USB disconnect, device number 16 [ 1750.687345][T29117] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1750.695888][T29117] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1750.865010][T29121] overlayfs: missing 'lowerdir' [ 1750.912182][T26654] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 1751.276053][T26654] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.295997][T26654] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1751.305778][T26654] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1751.335996][T26654] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1751.344852][T26654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1751.398389][T26654] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1751.495980][T25570] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1751.625994][T26654] Bluetooth: hci0: command 0x1009 tx timeout [ 1751.885831][T29126] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1751.966867][T25570] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1751.979591][T25570] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1751.990290][T25570] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1752.017960][T25570] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1752.029263][T25570] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.200339][T25570] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1752.206020][ T375] handle_bad_sector: 168169 callbacks suppressed [ 1752.206032][ T375] attempt to access beyond end of device [ 1752.206032][ T375] loop4: rw=524288, want=86760, limit=40427 [ 1752.224611][ T375] attempt to access beyond end of device [ 1752.224611][ T375] loop4: rw=524288, want=86768, limit=40427 [ 1752.236098][ T375] attempt to access beyond end of device [ 1752.236098][ T375] loop4: rw=524288, want=86776, limit=40427 [ 1752.247412][ T375] attempt to access beyond end of device [ 1752.247412][ T375] loop4: rw=524288, want=86784, limit=40427 [ 1752.259049][ T375] attempt to access beyond end of device [ 1752.259049][ T375] loop4: rw=524288, want=86792, limit=40427 [ 1752.267905][T26656] usb 5-1: USB disconnect, device number 16 [ 1752.272298][ T375] attempt to access beyond end of device [ 1752.272298][ T375] loop4: rw=524288, want=86800, limit=40427 [ 1752.288405][ T375] attempt to access beyond end of device [ 1752.288405][ T375] loop4: rw=524288, want=86808, limit=40427 [ 1752.300017][ T375] attempt to access beyond end of device [ 1752.300017][ T375] loop4: rw=524288, want=86816, limit=40427 [ 1752.311604][ T375] attempt to access beyond end of device [ 1752.311604][ T375] loop4: rw=524288, want=86824, limit=40427 [ 1752.323334][ T375] attempt to access beyond end of device [ 1752.323334][ T375] loop4: rw=524288, want=86832, limit=40427 [ 1752.795537][T29134] overlayfs: missing 'lowerdir' [ 1753.336579][T29139] overlayfs: missing 'lowerdir' [ 1753.575868][T26654] usb 3-1: USB disconnect, device number 4 [ 1753.646002][T26656] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1753.726505][T18411] usb 4-1: USB disconnect, device number 17 [ 1753.927635][T29145] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1754.002715][T26654] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 1754.086162][T26656] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1754.106004][T26656] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1754.125770][T26656] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1754.140577][T26656] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1754.149611][T26656] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.196726][T26656] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1754.376091][T26654] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1754.386895][T26654] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1754.419020][T26654] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1754.428119][T26654] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.482193][T26654] usb 3-1: invalid MIDI out EP 0 [ 1754.487330][T26654] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 1754.708918][T18411] usb 3-1: USB disconnect, device number 5 [ 1755.198984][T29152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.207286][T29152] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.214672][T29152] device bridge_slave_0 entered promiscuous mode [ 1755.222057][T29152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.229409][T29152] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.237116][T29152] device bridge_slave_1 entered promiscuous mode [ 1755.293471][T29152] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.300442][T29152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.307647][T29152] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.314477][T29152] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.341180][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1755.352162][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1755.360390][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1755.367942][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1755.384067][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1755.392164][ T7123] bridge0: port 1(bridge_slave_0) entered blocking state [ 1755.399019][ T7123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1755.407062][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1755.415334][ T7123] bridge0: port 2(bridge_slave_1) entered blocking state [ 1755.422210][ T7123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1755.441398][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1755.449414][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1755.467176][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1755.521672][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1755.533751][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1755.549255][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1755.568147][T29152] device veth0_vlan entered promiscuous mode [ 1755.581311][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1755.591042][T29152] device veth1_macvtap entered promiscuous mode [ 1755.602598][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1755.614283][ T7123] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1755.726090][ T327] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 1755.806077][T26654] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1756.211783][ T25] usb 5-1: USB disconnect, device number 17 [ 1756.627919][T26654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1756.638944][T26654] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1756.648701][T26654] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1756.659434][T26654] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.697628][T26654] usb 4-1: config 0 descriptor?? [ 1756.756373][ T327] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1756.770512][ T327] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1756.790380][ T327] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1756.806208][ T327] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1756.815111][ T327] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1756.859084][ T327] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1757.016756][ T7123] device bridge_slave_1 left promiscuous mode [ 1757.022805][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1757.030749][ T7123] device bridge_slave_0 left promiscuous mode [ 1757.036871][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1757.047145][ T7123] device veth1_macvtap left promiscuous mode [ 1757.053022][ T7123] device veth0_vlan left promiscuous mode [ 1757.176279][T26654] hid (null): bogus close delimiter [ 1757.215996][ T375] handle_bad_sector: 141784 callbacks suppressed [ 1757.216010][ T375] attempt to access beyond end of device [ 1757.216010][ T375] loop4: rw=524288, want=88552, limit=40427 [ 1757.233636][ T375] attempt to access beyond end of device [ 1757.233636][ T375] loop4: rw=524288, want=88560, limit=40427 [ 1757.250868][ T375] attempt to access beyond end of device [ 1757.250868][ T375] loop4: rw=524288, want=88568, limit=40427 [ 1757.262708][ T375] attempt to access beyond end of device [ 1757.262708][ T375] loop4: rw=524288, want=88576, limit=40427 [ 1757.274493][ T375] attempt to access beyond end of device [ 1757.274493][ T375] loop4: rw=524288, want=88584, limit=40427 [ 1757.456159][ T375] attempt to access beyond end of device [ 1757.456159][ T375] loop4: rw=524288, want=88592, limit=40427 [ 1757.466441][T26654] usb 4-1: language id specifier not provided by device, defaulting to English [ 1757.469278][ T375] attempt to access beyond end of device [ 1757.469278][ T375] loop4: rw=524288, want=88600, limit=40427 [ 1757.487619][ T375] attempt to access beyond end of device [ 1757.487619][ T375] loop4: rw=524288, want=88608, limit=40427 [ 1757.499254][ T375] attempt to access beyond end of device [ 1757.499254][ T375] loop4: rw=524288, want=88616, limit=40427 [ 1757.511017][ T375] attempt to access beyond end of device [ 1757.511017][ T375] loop4: rw=524288, want=88624, limit=40427 [ 1757.920363][T26654] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0086/input/input134 [ 1758.168576][T26654] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0086/input/input135 [ 1758.186419][T26654] uclogic 0003:256C:006D.0086: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1758.199998][T26654] usb 4-1: USB disconnect, device number 18 [ 1758.410144][T29203] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1758.418814][T29203] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1758.577448][ T327] usb 3-1: USB disconnect, device number 6 [ 1759.707475][T29220] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1759.895551][T29219] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1760.203705][T29228] overlayfs: missing 'lowerdir' [ 1760.652247][T29236] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7074'. [ 1760.885984][T20346] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 1761.036066][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1761.246111][T20346] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.257778][T20346] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1761.267807][T20346] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1761.280792][T20346] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1761.289883][T20346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.339902][T20346] snd-usb-audio: probe of 3-1:27.0 failed with error -2 [ 1761.406082][ T25] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1761.416325][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1761.428143][ T25] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1761.441200][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1761.450229][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.496799][ T25] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1761.935996][T20346] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1762.226152][ T375] handle_bad_sector: 91593 callbacks suppressed [ 1762.227086][ T375] attempt to access beyond end of device [ 1762.227086][ T375] loop4: rw=0, want=88776, limit=40427 [ 1762.343490][ T375] attempt to access beyond end of device [ 1762.343490][ T375] loop4: rw=0, want=88784, limit=40427 [ 1762.354969][ T375] attempt to access beyond end of device [ 1762.354969][ T375] loop4: rw=0, want=88792, limit=40427 [ 1762.366543][T20346] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.379125][T20346] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1762.390062][T20346] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1762.403320][ T375] attempt to access beyond end of device [ 1762.403320][ T375] loop4: rw=0, want=88800, limit=40427 [ 1762.403737][T20346] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1762.443665][ T375] attempt to access beyond end of device [ 1762.443665][ T375] loop4: rw=0, want=88808, limit=40427 [ 1762.454846][T20346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1762.455588][ T375] attempt to access beyond end of device [ 1762.455588][ T375] loop4: rw=0, want=88816, limit=40427 [ 1762.473872][ T375] attempt to access beyond end of device [ 1762.473872][ T375] loop4: rw=0, want=88824, limit=40427 [ 1762.484931][ T375] attempt to access beyond end of device [ 1762.484931][ T375] loop4: rw=0, want=88832, limit=40427 [ 1762.495789][ T375] attempt to access beyond end of device [ 1762.495789][ T375] loop4: rw=0, want=88840, limit=40427 [ 1762.506669][ T375] attempt to access beyond end of device [ 1762.506669][ T375] loop4: rw=0, want=88848, limit=40427 [ 1762.518933][T20346] snd-usb-audio: probe of 4-1:27.0 failed with error -2 [ 1762.989680][T20346] usb 3-1: USB disconnect, device number 7 [ 1763.174504][T29261] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1763.726034][ T327] usb 5-1: USB disconnect, device number 18 [ 1764.064588][T29271] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1764.514609][ T6739] usb 4-1: USB disconnect, device number 19 [ 1764.898869][T29281] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1764.907434][T29281] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1765.676067][ T6739] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 1765.906098][ T7142] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 1765.963817][T29298] overlayfs: missing 'workdir' [ 1766.106465][ T6739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1766.117741][ T6739] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1766.127653][ T6739] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1766.136801][ T6739] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.148953][ T6739] usb 4-1: config 0 descriptor?? [ 1766.266058][ T7142] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1766.276118][ T7142] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1766.285706][ T7142] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1766.298756][ T7142] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1766.307905][ T7142] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1766.358905][ T7142] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1766.620330][ T6739] hid (null): bogus close delimiter [ 1766.826088][ T6739] usb 4-1: language id specifier not provided by device, defaulting to English [ 1767.235971][ T375] handle_bad_sector: 212429 callbacks suppressed [ 1767.235984][ T375] attempt to access beyond end of device [ 1767.235984][ T375] loop4: rw=524288, want=89448, limit=40427 [ 1767.253545][ T375] attempt to access beyond end of device [ 1767.253545][ T375] loop4: rw=524288, want=89456, limit=40427 [ 1767.265821][ T6739] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0087/input/input136 [ 1767.276066][ T375] attempt to access beyond end of device [ 1767.276066][ T375] loop4: rw=524288, want=89464, limit=40427 [ 1767.278605][ T6739] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0087/input/input137 [ 1767.295521][ T375] attempt to access beyond end of device [ 1767.295521][ T375] loop4: rw=524288, want=89472, limit=40427 [ 1767.311671][ T6739] uclogic 0003:256C:006D.0087: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1767.325342][ T375] attempt to access beyond end of device [ 1767.325342][ T375] loop4: rw=524288, want=89480, limit=40427 [ 1767.336727][ T375] attempt to access beyond end of device [ 1767.336727][ T375] loop4: rw=524288, want=89488, limit=40427 [ 1767.348315][ T375] attempt to access beyond end of device [ 1767.348315][ T375] loop4: rw=524288, want=89496, limit=40427 [ 1767.366827][ T375] attempt to access beyond end of device [ 1767.366827][ T375] loop4: rw=524288, want=89504, limit=40427 [ 1767.378283][ T375] attempt to access beyond end of device [ 1767.378283][ T375] loop4: rw=524288, want=89512, limit=40427 [ 1767.389601][ T375] attempt to access beyond end of device [ 1767.389601][ T375] loop4: rw=524288, want=89520, limit=40427 [ 1767.489677][ T327] usb 4-1: USB disconnect, device number 20 [ 1768.483221][ T327] usb 5-1: USB disconnect, device number 19 [ 1768.688064][T29313] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1769.103129][T29317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.110154][T29317] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.117906][T29317] device bridge_slave_0 entered promiscuous mode [ 1769.124987][T29317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.132814][T29317] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.141179][T29317] device bridge_slave_1 entered promiscuous mode [ 1769.221021][T29317] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.227895][T29317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.234986][T29317] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.241892][T29317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.271810][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1769.293904][T25005] bridge0: port 1(bridge_slave_0) entered disabled state [ 1769.310398][T25005] bridge0: port 2(bridge_slave_1) entered disabled state [ 1769.327880][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1769.356176][T25005] bridge0: port 1(bridge_slave_0) entered blocking state [ 1769.363022][T25005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1769.385125][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1769.436216][T25005] bridge0: port 2(bridge_slave_1) entered blocking state [ 1769.443065][T25005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1769.460629][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1769.477699][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1769.494553][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1769.518268][T29317] device veth0_vlan entered promiscuous mode [ 1769.538698][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1769.724257][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1769.740222][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1769.814326][T25005] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1770.197968][T29317] device veth1_macvtap entered promiscuous mode [ 1770.209939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1770.218391][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1770.541706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1770.563486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1770.687025][ T7123] device bridge_slave_1 left promiscuous mode [ 1770.693642][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1770.970180][ T7123] device bridge_slave_0 left promiscuous mode [ 1771.019211][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1771.037614][ T7123] device veth1_macvtap left promiscuous mode [ 1771.052804][ T7123] device veth0_vlan left promiscuous mode [ 1772.068416][ T20] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1772.206948][T29364] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1772.272368][ T375] handle_bad_sector: 94313 callbacks suppressed [ 1772.336165][ T375] attempt to access beyond end of device [ 1772.336165][ T375] loop4: rw=0, want=87672, limit=40427 [ 1772.416087][ T375] attempt to access beyond end of device [ 1772.416087][ T375] loop4: rw=0, want=87680, limit=40427 [ 1772.427749][ T375] attempt to access beyond end of device [ 1772.427749][ T375] loop4: rw=0, want=87688, limit=40427 [ 1772.439037][ T375] attempt to access beyond end of device [ 1772.439037][ T375] loop4: rw=0, want=87696, limit=40427 [ 1772.449980][ T375] attempt to access beyond end of device [ 1772.449980][ T375] loop4: rw=0, want=87704, limit=40427 [ 1772.461027][ T375] attempt to access beyond end of device [ 1772.461027][ T375] loop4: rw=0, want=87712, limit=40427 [ 1772.472287][ T375] attempt to access beyond end of device [ 1772.472287][ T375] loop4: rw=0, want=87720, limit=40427 [ 1772.483339][ T375] attempt to access beyond end of device [ 1772.483339][ T375] loop4: rw=0, want=87728, limit=40427 [ 1772.494443][ T375] attempt to access beyond end of device [ 1772.494443][ T375] loop4: rw=0, want=87736, limit=40427 [ 1772.521733][ T375] attempt to access beyond end of device [ 1772.521733][ T375] loop4: rw=0, want=87744, limit=40427 [ 1772.616197][ T20] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1772.645327][T29369] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1772.701333][ T20] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1772.732437][ T20] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1772.776000][ T20] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1772.793038][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1772.878986][ T20] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1774.335140][T29391] overlayfs: missing 'lowerdir' [ 1774.503115][ T6739] usb 5-1: USB disconnect, device number 20 [ 1776.424206][T29411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.438441][T29411] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.464331][T29411] device bridge_slave_0 entered promiscuous mode [ 1776.484395][T29411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.500495][T29411] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.536841][T29411] device bridge_slave_1 entered promiscuous mode [ 1776.698587][T29411] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.705454][T29411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1776.712589][T29411] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.719421][T29411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.915311][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1776.925812][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 1776.933123][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 1776.951427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1776.959770][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1776.966626][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1776.974277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1776.982825][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1776.989680][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1777.007121][ T7123] device bridge_slave_1 left promiscuous mode [ 1777.013061][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.020552][ T7123] device bridge_slave_0 left promiscuous mode [ 1777.026669][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.034643][ T7123] device veth1_macvtap left promiscuous mode [ 1777.040858][ T7123] device veth0_vlan left promiscuous mode [ 1777.132164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1777.140380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1777.156765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1777.165070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1777.178999][T29411] device veth0_vlan entered promiscuous mode [ 1777.187093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1777.195369][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1777.211529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1777.230975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1777.243678][T29411] device veth1_macvtap entered promiscuous mode [ 1777.251724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1777.260288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1777.268759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1777.276183][ T375] handle_bad_sector: 86083 callbacks suppressed [ 1777.276195][ T375] attempt to access beyond end of device [ 1777.276195][ T375] loop4: rw=0, want=87376, limit=40427 [ 1777.293967][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1777.294162][ T375] attempt to access beyond end of device [ 1777.294162][ T375] loop4: rw=0, want=87384, limit=40427 [ 1777.303035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1777.313134][ T375] attempt to access beyond end of device [ 1777.313134][ T375] loop4: rw=0, want=87392, limit=40427 [ 1777.322164][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1777.331804][ T375] attempt to access beyond end of device [ 1777.331804][ T375] loop4: rw=0, want=87400, limit=40427 [ 1777.340299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1777.350404][ T375] attempt to access beyond end of device [ 1777.350404][ T375] loop4: rw=0, want=87408, limit=40427 [ 1777.370710][ T375] attempt to access beyond end of device [ 1777.370710][ T375] loop4: rw=0, want=87416, limit=40427 [ 1777.382180][ T375] attempt to access beyond end of device [ 1777.382180][ T375] loop4: rw=0, want=87424, limit=40427 [ 1777.394644][ T375] attempt to access beyond end of device [ 1777.394644][ T375] loop4: rw=0, want=87432, limit=40427 [ 1777.408678][ T375] attempt to access beyond end of device [ 1777.408678][ T375] loop4: rw=0, want=87440, limit=40427 [ 1777.419873][ T375] attempt to access beyond end of device [ 1777.419873][ T375] loop4: rw=0, want=87448, limit=40427 [ 1777.637249][T29434] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1778.057481][ T7123] device bridge_slave_1 left promiscuous mode [ 1778.067634][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.075490][ T7123] device bridge_slave_0 left promiscuous mode [ 1778.081929][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.090316][ T7123] device veth1_macvtap left promiscuous mode [ 1778.096446][ T7123] device veth0_vlan left promiscuous mode [ 1779.247968][T29450] binder: 29447:29450 ioctl c0306201 0 returned -14 [ 1779.261480][T29450] netlink: 100 bytes leftover after parsing attributes in process `syz.1.7125'. [ 1781.925985][ T25] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1782.285942][ T375] handle_bad_sector: 202077 callbacks suppressed [ 1782.285956][ T375] attempt to access beyond end of device [ 1782.285956][ T375] loop4: rw=0, want=88392, limit=40427 [ 1782.286034][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1782.292252][ T375] attempt to access beyond end of device [ 1782.292252][ T375] loop4: rw=0, want=88400, limit=40427 [ 1782.303314][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1782.314322][ T375] attempt to access beyond end of device [ 1782.314322][ T375] loop4: rw=0, want=88408, limit=40427 [ 1782.324682][ T25] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1782.334446][ T375] attempt to access beyond end of device [ 1782.334446][ T375] loop4: rw=0, want=88416, limit=40427 [ 1782.344962][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1782.354025][ T375] attempt to access beyond end of device [ 1782.354025][ T375] loop4: rw=0, want=88424, limit=40427 [ 1782.365272][ T25] usb 4-1: config 0 descriptor?? [ 1782.376419][ T375] attempt to access beyond end of device [ 1782.376419][ T375] loop4: rw=0, want=88432, limit=40427 [ 1782.398821][ T375] attempt to access beyond end of device [ 1782.398821][ T375] loop4: rw=0, want=88440, limit=40427 [ 1782.410067][ T375] attempt to access beyond end of device [ 1782.410067][ T375] loop4: rw=0, want=88448, limit=40427 [ 1782.423463][ T375] attempt to access beyond end of device [ 1782.423463][ T375] loop4: rw=0, want=88456, limit=40427 [ 1782.434343][ T375] attempt to access beyond end of device [ 1782.434343][ T375] loop4: rw=0, want=88464, limit=40427 [ 1782.856276][ T25] hid (null): bogus close delimiter [ 1783.076077][ T25] usb 4-1: language id specifier not provided by device, defaulting to English [ 1783.510981][ T25] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0088/input/input138 [ 1783.534548][ T25] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0088/input/input139 [ 1783.562443][ T25] uclogic 0003:256C:006D.0088: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 1783.753104][T25570] usb 4-1: USB disconnect, device number 21 [ 1783.958786][T29493] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1784.145984][ T6739] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 1784.507980][ T6739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1784.518766][ T6739] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1784.528779][ T6739] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1784.537848][ T6739] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1784.546596][ T6739] usb 5-1: config 0 descriptor?? [ 1785.027092][ T6739] hid (null): bogus close delimiter [ 1785.452509][T29507] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7138'. [ 1785.461429][T29507] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7138'. [ 1785.526135][ T6739] usb 5-1: language id specifier not provided by device, defaulting to English [ 1785.967394][ T6739] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0089/input/input140 [ 1785.997388][ T6739] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0089/input/input141 [ 1786.027871][ T6739] uclogic 0003:256C:006D.0089: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 1786.173909][ T6739] usb 5-1: USB disconnect, device number 21 [ 1786.367744][T29515] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7140'. [ 1787.296018][ T375] handle_bad_sector: 233901 callbacks suppressed [ 1787.296031][ T375] attempt to access beyond end of device [ 1787.296031][ T375] loop4: rw=524288, want=86600, limit=40427 [ 1787.313553][ T375] attempt to access beyond end of device [ 1787.313553][ T375] loop4: rw=524288, want=86608, limit=40427 [ 1787.324889][ T375] attempt to access beyond end of device [ 1787.324889][ T375] loop4: rw=524288, want=86616, limit=40427 [ 1787.336189][ T375] attempt to access beyond end of device [ 1787.336189][ T375] loop4: rw=524288, want=86624, limit=40427 [ 1787.347438][ T375] attempt to access beyond end of device [ 1787.347438][ T375] loop4: rw=524288, want=86632, limit=40427 [ 1787.358687][ T375] attempt to access beyond end of device [ 1787.358687][ T375] loop4: rw=524288, want=86640, limit=40427 [ 1787.369932][ T375] attempt to access beyond end of device [ 1787.369932][ T375] loop4: rw=524288, want=86648, limit=40427 [ 1787.381226][ T375] attempt to access beyond end of device [ 1787.381226][ T375] loop4: rw=524288, want=86656, limit=40427 [ 1787.392485][ T375] attempt to access beyond end of device [ 1787.392485][ T375] loop4: rw=524288, want=86664, limit=40427 [ 1787.403740][ T375] attempt to access beyond end of device [ 1787.403740][ T375] loop4: rw=524288, want=86672, limit=40427 [ 1787.951127][T29532] overlayfs: missing 'workdir' [ 1788.303388][T29534] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1788.317627][T29537] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1789.686281][ T25] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1790.146635][ T25] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1790.171597][ T25] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 1790.255997][ T25] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1790.303266][ T25] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1790.312162][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1790.359971][ T25] snd-usb-audio: probe of 5-1:27.0 failed with error -2 [ 1791.162639][T29559] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1791.281636][ T7142] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1791.677952][ T7142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1791.688772][ T7142] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1791.698618][ T7142] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1791.707730][ T7142] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1791.716605][ T7142] usb 4-1: config 0 descriptor?? [ 1792.183639][ T7142] hid (null): bogus close delimiter [ 1792.305939][ T375] handle_bad_sector: 217615 callbacks suppressed [ 1792.305951][ T375] attempt to access beyond end of device [ 1792.305951][ T375] loop4: rw=0, want=89160, limit=40427 [ 1792.323190][ T375] attempt to access beyond end of device [ 1792.323190][ T375] loop4: rw=0, want=89168, limit=40427 [ 1792.338157][T18411] usb 5-1: USB disconnect, device number 22 [ 1792.344661][ T375] attempt to access beyond end of device [ 1792.344661][ T375] loop4: rw=0, want=89176, limit=40427 [ 1792.356568][ T375] attempt to access beyond end of device [ 1792.356568][ T375] loop4: rw=0, want=89184, limit=40427 [ 1792.367433][ T375] attempt to access beyond end of device [ 1792.367433][ T375] loop4: rw=0, want=89192, limit=40427 [ 1792.378282][ T375] attempt to access beyond end of device [ 1792.378282][ T375] loop4: rw=0, want=89200, limit=40427 [ 1792.389103][ T375] attempt to access beyond end of device [ 1792.389103][ T375] loop4: rw=0, want=89208, limit=40427 [ 1792.399924][ T375] attempt to access beyond end of device [ 1792.399924][ T375] loop4: rw=0, want=89216, limit=40427 [ 1792.411054][ T375] attempt to access beyond end of device [ 1792.411054][ T375] loop4: rw=0, want=89224, limit=40427 [ 1792.421973][ T375] attempt to access beyond end of device [ 1792.421973][ T375] loop4: rw=0, want=89232, limit=40427 [ 1792.933792][ T7142] uclogic 0003:256C:006D.008A: failed retrieving string descriptor #200: -71 [ 1792.942512][ T7142] uclogic 0003:256C:006D.008A: failed retrieving pen parameters: -71 [ 1793.086299][T29572] netlink: 596 bytes leftover after parsing attributes in process `syz.0.7151'. [ 1793.095145][T29572] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7151'. [ 1793.105243][ T7142] uclogic 0003:256C:006D.008A: failed probing pen v2 parameters: -71 [ 1793.113654][ T7142] uclogic 0003:256C:006D.008A: failed probing parameters: -71 [ 1793.121931][ T7142] uclogic: probe of 0003:256C:006D.008A failed with error -71 [ 1793.193592][ T7142] usb 4-1: USB disconnect, device number 22 [ 1796.707519][T29612] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1797.170980][T29609] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1797.315941][ T375] handle_bad_sector: 182598 callbacks suppressed [ 1797.315975][ T375] attempt to access beyond end of device [ 1797.315975][ T375] loop4: rw=524288, want=88784, limit=40427 [ 1797.333518][ T375] attempt to access beyond end of device [ 1797.333518][ T375] loop4: rw=524288, want=88792, limit=40427 [ 1797.345098][ T375] attempt to access beyond end of device [ 1797.345098][ T375] loop4: rw=524288, want=88800, limit=40427 [ 1797.356695][ T375] attempt to access beyond end of device [ 1797.356695][ T375] loop4: rw=524288, want=88808, limit=40427 [ 1797.368057][ T375] attempt to access beyond end of device [ 1797.368057][ T375] loop4: rw=524288, want=88816, limit=40427 [ 1797.379425][ T375] attempt to access beyond end of device [ 1797.379425][ T375] loop4: rw=524288, want=88824, limit=40427 [ 1797.406064][ T375] attempt to access beyond end of device [ 1797.406064][ T375] loop4: rw=524288, want=88832, limit=40427 [ 1797.417772][ T375] attempt to access beyond end of device [ 1797.417772][ T375] loop4: rw=524288, want=88840, limit=40427 [ 1797.433504][ T375] attempt to access beyond end of device [ 1797.433504][ T375] loop4: rw=524288, want=88848, limit=40427 [ 1797.460761][ T375] attempt to access beyond end of device [ 1797.460761][ T375] loop4: rw=524288, want=88856, limit=40427 SYZFAIL: mkdir(syz-tmp) failed (errno 28: No space left on device) loop exited with status 67 SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: failed to mkdtemp (errno 28: No space left on device) SYZFAIL: repeatedly failed to execute the program proc=2 req=7118 state=1 status=67 (errno 9: Bad file descriptor) [ 1798.604937][T29627] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7166'. [ 1798.614782][ T24] audit: type=1400 audit(2000001370.649:4011): avc: denied { write } for pid=272 comm="syz-executor" path="pipe:[2031]" dev="pipefs" ino=2031 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 1799.080006][T29633] netlink: 596 bytes leftover after parsing attributes in process `syz.3.7165'. [ 1799.088973][T29633] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7165'. [ 1799.968320][ T7] device bridge_slave_1 left promiscuous mode [ 1799.974359][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1799.982211][ T7] device bridge_slave_0 left promiscuous mode [ 1799.988245][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1799.998316][ T7] device veth1_macvtap left promiscuous mode [ 1800.004217][ T7] device veth0_vlan left promiscuous mode [ 1801.069076][ T7] device bridge_slave_1 left promiscuous mode [ 1801.075034][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.084997][ T7] device bridge_slave_0 left promiscuous mode [ 1801.091044][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.099325][ T7] device bridge_slave_1 left promiscuous mode [ 1801.105252][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.112936][ T7] device bridge_slave_0 left promiscuous mode [ 1801.118987][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.127314][ T7] device bridge_slave_1 left promiscuous mode [ 1801.133247][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 1801.140965][ T7] device bridge_slave_0 left promiscuous mode [ 1801.148993][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 1801.157696][ T7] device veth1_macvtap left promiscuous mode [ 1801.163513][ T7] device veth0_vlan left promiscuous mode [ 1801.169671][ T7] device veth1_macvtap left promiscuous mode [ 1801.175487][ T7] device veth0_vlan left promiscuous mode [ 1801.181519][ T7] device veth1_macvtap left promiscuous mode [ 1801.187456][ T7] device veth0_vlan left promiscuous mode [ 1802.325933][ T375] handle_bad_sector: 286777 callbacks suppressed [ 1802.325942][ T375] attempt to access beyond end of device [ 1802.325942][ T375] loop4: rw=524288, want=86280, limit=40427 [ 1802.343381][ T375] attempt to access beyond end of device [ 1802.343381][ T375] loop4: rw=524288, want=86288, limit=40427 [ 1802.354579][ T375] attempt to access beyond end of device [ 1802.354579][ T375] loop4: rw=524288, want=86296, limit=40427 [ 1802.365743][ T375] attempt to access beyond end of device [ 1802.365743][ T375] loop4: rw=524288, want=86304, limit=40427 [ 1802.376939][ T375] attempt to access beyond end of device [ 1802.376939][ T375] loop4: rw=524288, want=86312, limit=40427 [ 1802.388223][ T375] attempt to access beyond end of device [ 1802.388223][ T375] loop4: rw=524288, want=86320, limit=40427 [ 1802.406569][ T375] attempt to access beyond end of device [ 1802.406569][ T375] loop4: rw=524288, want=86328, limit=40427 [ 1802.417831][ T375] attempt to access beyond end of device [ 1802.417831][ T375] loop4: rw=524288, want=86336, limit=40427 [ 1802.429571][ T375] attempt to access beyond end of device [ 1802.429571][ T375] loop4: rw=524288, want=86344, limit=40427 [ 1802.440731][ T375] attempt to access beyond end of device [ 1802.440731][ T375] loop4: rw=524288, want=86352, limit=40427 [ 1807.335946][ T375] handle_bad_sector: 360649 callbacks suppressed [ 1807.335957][ T375] attempt to access beyond end of device [ 1807.335957][ T375] loop4: rw=524288, want=88672, limit=40427 [ 1807.353396][ T375] attempt to access beyond end of device [ 1807.353396][ T375] loop4: rw=524288, want=88680, limit=40427 [ 1807.364686][ T375] attempt to access beyond end of device [ 1807.364686][ T375] loop4: rw=524288, want=88688, limit=40427 [ 1807.375896][ T375] attempt to access beyond end of device [ 1807.375896][ T375] loop4: rw=524288, want=88696, limit=40427 [ 1807.387152][ T375] attempt to access beyond end of device [ 1807.387152][ T375] loop4: rw=524288, want=88704, limit=40427 [ 1807.398333][ T375] attempt to access beyond end of device [ 1807.398333][ T375] loop4: rw=524288, want=88712, limit=40427 [ 1807.409526][ T375] attempt to access beyond end of device [ 1807.409526][ T375] loop4: rw=524288, want=88720, limit=40427 [ 1807.420742][ T375] attempt to access beyond end of device [ 1807.420742][ T375] loop4: rw=524288, want=88728, limit=40427 [ 1807.431925][ T375] attempt to access beyond end of device [ 1807.431925][ T375] loop4: rw=524288, want=88736, limit=40427 [ 1807.443138][ T375] attempt to access beyond end of device [ 1807.443138][ T375] loop4: rw=524288, want=88744, limit=40427