last executing test programs: 22m12.391022408s ago: executing program 32 (id=243): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0x5, 0x7, 0x3, 0x7}, 0x50, [0x2, 0x9, 0x0, 0x1, 0x8, 0xea45, 0xe, 0x1, 0x63, 0x0, 0x6, 0xc, 0x3, 0x9, 0x1, 0x4, 0x1000, 0x7fffffff, 0x51, 0x8, 0x800, 0xfffffffa, 0x3ff, 0x5, 0x7, 0x10001, 0xffff, 0x0, 0x4, 0x0, 0x401, 0xc, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x3, 0x4, 0xa, 0x8, 0x3, 0x9, 0x804d7f, 0x2, 0x8c00, 0x6, 0x935, 0x5, 0x9, 0x2, 0x2, 0x4, 0xfffffff7, 0x7fff, 0x6, 0x5, 0x80000001, 0xd77, 0x5, 0x2a, 0x1000, 0x23], [0x8, 0x20009, 0x9, 0x9, 0x80000005, 0x12, 0x800, 0xc, 0x0, 0x2329, 0xfd8, 0x3, 0x7, 0x5, 0x0, 0x24e, 0x2, 0xfffffff7, 0x2, 0x3, 0x5, 0x4009, 0x80, 0xb, 0x8001, 0x40, 0xa1, 0x4, 0xffffffff, 0x5, 0x10004, 0x1, 0xffefff00, 0x7ff, 0x6, 0x7, 0x0, 0xe, 0xffff3f15, 0xc, 0x2, 0x9, 0x7, 0x5, 0x5, 0x7, 0x800, 0x5, 0xc5, 0x3, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x250, 0x1ff, 0x2a0, 0x5, 0x6, 0x6, 0x7, 0x8], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x1, 0x8001, 0x7abe, 0x5, 0x2, 0x7ffffff7, 0x8000, 0x1, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x0, 0x9, 0x5, 0x4, 0x3, 0xc92, 0xffffff3c, 0x8b2, 0x10, 0x4, 0xff, 0x140, 0x2, 0x2, 0xb, 0x4, 0x6, 0x7, 0x8007c12, 0x5, 0x1, 0x17, 0x8000, 0xe, 0xf3, 0x4, 0x8, 0x4, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x8, 0xdd, 0x1, 0x9, 0xc3, 0x6db, 0x7a0], [0x9, 0x3a8d, 0xffff9a7f, 0x200, 0x6, 0x2, 0x1, 0xfffffff3, 0xd077, 0x4, 0x3, 0x1f, 0x81, 0xa, 0x6, 0x2, 0x200, 0xfe, 0x2, 0x66608000, 0x5e82, 0x7fb, 0x6, 0x1, 0xa476, 0x5, 0x80000001, 0xffff, 0xd, 0xfffffffc, 0x6, 0x1, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x8, 0x20000000, 0x8, 0x15, 0xb32a, 0xec000000, 0x2, 0x1904, 0x4, 0xc, 0x8, 0x7ff, 0x280, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0xc, 0x9371, 0x4f89, 0x7, 0x580, 0x2d1, 0x80, 0x8]}, 0x45c) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 'syz0\x00', 0x0}) 20m26.219554785s ago: executing program 33 (id=619): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1, 0x2002) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x800, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}}) write$evdev(r0, &(0x7f0000000040)=[{{}, 0x0, 0x2}], 0x37) 18m37.467890062s ago: executing program 34 (id=1022): bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4000}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x0, 0xdf, 0x0, 0x0, 0x3, 0x10000}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x8b, 0x5, 0x9, 0x1, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000140), 0x0}, 0x20) 18m4.450908236s ago: executing program 35 (id=1159): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000280)={[{@dax}, {@data_err_abort}, {@noinit_itable}, {@noauto_da_alloc}, {@data_err_ignore}, {@norecovery}, {@user_xattr}, {@grpquota}, {@discard}, {@user_xattr}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@lazytime}]}, 0x11, 0x556, &(0x7f0000000b40)="$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") sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x1c, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="bc00000012"], 0xbc}}, 0x0) 17m37.086239893s ago: executing program 36 (id=1233): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) 16m53.334081637s ago: executing program 37 (id=1363): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f00000004c0)={0x0, 0x0, r3}) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 15m56.773817294s ago: executing program 38 (id=1541): syz_open_dev$dri(0x0, 0x1, 0x0) syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x3) r1 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x132, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) 14m15.165067859s ago: executing program 39 (id=1838): ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'team_slave_0\x00', 0x4000}) r0 = userfaultfd(0x801) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, &(0x7f0000000000), 0x0}, 0x20) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f000000c000/0x3000)=nil, &(0x7f000000d000/0x1000)=nil, 0x3000, 0x3}) 13m17.749166565s ago: executing program 40 (id=2009): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002340), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000004340)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0xfffffc4e) write$FUSE_LSEEK(r0, &(0x7f00000021c0)={0x18, 0x0, r1, {0x7}}, 0x18) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4048, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 12m45.589004816s ago: executing program 41 (id=2104): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x7}, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 10m49.991612619s ago: executing program 42 (id=2482): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x5) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f00000000c0)={0xff, 0xb, 0x81, 0x11a, 0x1, "ab5aa80d00", 0xa02, 0x7}) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xa) 8m14.981576199s ago: executing program 0 (id=2945): syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x30000d0, 0x0, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f0000000380)='./bus\x00', 0x322020, &(0x7f0000000140)=ANY=[], 0x1, 0x0, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000a40)='.pending_reads\x00', 0x842, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) 8m13.951676478s ago: executing program 0 (id=2949): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4000, &(0x7f00000012c0)=ANY=[@ANYBLOB='mode=00000000000000000000202,longad,dmode=00000000000000000077777,volume=00000000000000000002,shortad,lastblock=00000000000000000003,gid=forget,fileset=00000000000000000002,adinicb,gid=ignore,gid=forget,uid=forget,gid=ignore,iocharset=utf8,euid>', @ANYRESDEC=0x0, @ANYBLOB="2c66736d6167697aadb327cbd6b398daec78633d3078303030303030303030303030303030322c646f6e745f68", @ANYRESDEC=0x0, @ANYBLOB=',smackfstransmute=\x00,\x00'], 0x2, 0xc2d, &(0x7f00000001c0)="$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") syz_emit_ethernet(0x36, &(0x7f0000000d00)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @rand_addr=0x64010102}, {{0x0, 0x8035, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xc1}}}}}}, 0x0) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f008) truncate(&(0x7f0000000080)='./file1\x00', 0x400000f007) 8m12.302523365s ago: executing program 0 (id=2955): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) readv(r0, &(0x7f0000000040)=[{0x0}], 0x1) 8m11.48350063s ago: executing program 0 (id=2960): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f0000000140)="$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") mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='configfs\x00', 0x8000, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') umount2(&(0x7f0000000440)='./file0/../file0/../file0/../file0\x00', 0x0) 8m10.399969197s ago: executing program 0 (id=2965): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000), 0x20000328) setsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000000)=0x3, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 8m8.650653625s ago: executing program 0 (id=2970): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x1, 0x8, 0x4000040d}) 8m5.215786497s ago: executing program 43 (id=2970): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1, 0x400) setsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x40, 0x0, 0xd0060) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000040)={0x1, 0x8, 0x4000040d}) 7m59.917969888s ago: executing program 6 (id=2991): syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x18410, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRES8, @ANYRES32], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000004) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x0) syz_io_uring_setup(0x1593, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x2) 7m57.07034744s ago: executing program 6 (id=2997): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=5']) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) fstat(r0, &(0x7f0000000340)) 7m56.180986459s ago: executing program 6 (id=3000): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x18}}, 0x2, 0x1}}, 0x2e) getsockopt(r2, 0x111, 0x1, 0x0, &(0x7f0000000080)) 7m55.483329755s ago: executing program 6 (id=3001): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB], 0x1, 0x8a, &(0x7f0000000180)="$eJzszqENAkEUBNDhDKhrAEEH1wOlECQ4FISEimiFEugAgcUcYsGsxCy5vJf8n0zGzO11XaZPxksyVg7H026zLz9MUpdknmSRZNWX/FiXbvbp78/z9nut9wIAAL/rMtR5aDYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4A+9AwAA///rYCNS") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x25080, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x2000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e029a4c66810000000000d300e6d602090000000000000000000001", [0x204]}) openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) 7m54.349526836s ago: executing program 6 (id=3005): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="6e6f757365725f78617474722c666c7573685f6d657267652c6673796e635f6d6f64653d706f7369782c64697361626c655f6578745f6964656e746966792c6261636b67726f756e645f67633d73796e632c6673796e635f6d6f64653d7374726963742c6e6f626172726965722c6e6f696e6c696e655f646174612c6e6f626172726965722c71756f74612c6261636b67726f756e645f67633d6f66662c6e6f61636c2c6e6f657874656e745f63616368652c6e6f646973636172642c6163746976655f6c6f67733d342c00e62bc03000c35169ed09803fa1bee488c680f339e530b5e8ad120a2b4f078093a8e0ba2b3d1b5fe99356b80a454c1ec2f8e12392bbffe9fae2fa05e18a6b61f5eded2e484f574d2757a5fe762c770477aa3460313ee54451c6a6159eca600d6c85a8c09cef9996dc851a5f5edf1a4a22576c6dfe6b9e8dade2d3a8e6a8c7710733c1f69aabd8880291"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x2, 0x0, 0x0) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) 7m53.563313181s ago: executing program 6 (id=3009): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7m50.516611608s ago: executing program 44 (id=3009): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x5}, {0xffff, 0xffff}, {0xfff3, 0x6}}}, 0x24}}, 0x8040) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="740000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b030040000000004c0012800b00010067656e65766500003c0002800800050001000000140007000000000000000005000000000000000108000f"], 0x74}}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m28.541279597s ago: executing program 4 (id=3237): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "e907f8f9951e76c13f64323723e7eecdf40c363423eb3d259266ec9c37865c6c1a4640ce1b22bb3327ef4f8a1d34c07c3260049e4f8d3ee0878ae95bc7f52363c468b257ffb3baf7aea4fb76dcfd54f11ed2c41d078b9cf1fc8f72566153c97e4af37017ea6b16b694bb4a6e4606c3fb19d1d2bd3c8c4e97da2213f9d5c3c4891f9150d685a7d7c27df0355808390666e827d61dcc3a633bb0b1250b5a293e3877adc1a1b44b99c93d57fd720a170e7f5670e419dc64febf7ddc73fd4a5a0b6c281e05c541471d8d2a58f5edac665f7f46c7084e17c809268103a2584ab40a68e528329d97afc3612e325c1eb4a3ab2e156a97444800", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee7789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8f99424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3e81869534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb76983eabc51a348e55789e997fa25cbe6e5031bd2e33d4e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038033b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d16607cd4ede16344e60d8707357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02dff25f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264b5175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac64d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddce0236d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f600005800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea0458023953700"}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, 0x80000, 0x6, 0x0, 0x0, 0x6, 0x900066}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) recvmmsg(r0, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f00000010c0)=""/191, 0xbf}], 0x46}, 0x8000}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'vlan1\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="14042bfdd3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 6m27.768107509s ago: executing program 4 (id=3241): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f000000b480)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001080)=""/4095, 0xfff}], 0x1}, 0x7ff}], 0x1, 0x102, 0x0) 6m27.097109677s ago: executing program 4 (id=3244): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x4) 6m25.96643659s ago: executing program 4 (id=3251): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x28a5291, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300)='devpts\x00', 0x101c040, 0x0) 6m25.208662195s ago: executing program 4 (id=3255): signalfd(0xffffffffffffffff, &(0x7f00000003c0)={[0x9]}, 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x2261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x5, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x3, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, 0x0, 0x2}, 0x20) 6m13.622763562s ago: executing program 4 (id=3299): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r1, 0x0) 6m11.299748729s ago: executing program 45 (id=3299): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) close(r0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8801) fstatfs(r1, 0x0) 5m13.3966376s ago: executing program 9 (id=3499): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0xfd7, @rand_addr=' \x01\x00'}]}, &(0x7f0000000000)=0x10) shutdown(r0, 0x0) shutdown(r0, 0x1) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000100)={r1, 0xfffffffc}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000001c0)={r3, 0x1000, 0x6, 0x0, 0xffff}, 0x14) 5m12.824947693s ago: executing program 9 (id=3502): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000001c0)=0x1) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f00000000c0)=0x7) 5m12.220477109s ago: executing program 9 (id=3506): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) recvmsg$unix(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/59, 0x3b}], 0x1}, 0x330) setsockopt$sock_attach_bpf(r0, 0x1, 0x2a, &(0x7f0000000100)=r2, 0x4) sendmsg$unix(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000780)="c8ed", 0x2}], 0x1, 0x0, 0x0, 0x48000}, 0x20004011) recvmsg$unix(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x10002) sendmsg$inet(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)="8302", 0x2}], 0x1}, 0x10) 5m10.446869935s ago: executing program 9 (id=3511): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000200)={[{@noload}, {@nojournal_checksum}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@nolazytime}, {@resgid}, {@jqfmt_vfsold}, {@journal_dev={'journal_dev', 0x3d, 0x800}}, {@nobh}, {@inlinecrypt}, {}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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") symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000580)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) 5m8.126039415s ago: executing program 9 (id=3519): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40140, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="850000002f000000840000000000000095000000000000008560fc2b2062f611fc2f864ef177d634e46e8dcfe61b4fb9f600344d592fee49e176fe6ad28fbcb1f9259bfc63e9030971917e30b6f42e8f9dd6ab0ce07312a135cd363aa7e5bcef8fd0e8c7d2082584156c52ebfd69e8e13b7a8b477abc86468e11b6242133ce882f05e16b91c37b3437347f6058b4489c759783b9d4dfb55d0085a26e41201a6d8c8ced33e10048e756a40538b32bf653fa3c831a4e60599ed7a0f999d18de9984522a7cdb6fc30015633a0132c9578b7da5bd7280a5f7e28fd858ba712020b23ef8a2785b6c146c48b48ca7e232d0489661396e9303b38aa5d26d06e2e676795fd2733f95da570bab301000000ffffffff2a2792a630d8fcdc"], &(0x7f0000000180)='GPL\x00'}, 0x48) close(r0) r2 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000240)=0x0, &(0x7f0000000280)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0xdb4, 0x0, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040), 0x18082, &(0x7f00000004c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5m7.206423952s ago: executing program 9 (id=3523): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, &(0x7f0000000940)='\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='D', 0x1, r1) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x7d, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x58c, 0xf4b}) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0) 5m4.708151868s ago: executing program 46 (id=3523): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) request_key(&(0x7f00000008c0)='user\x00', &(0x7f0000000900)={'syz', 0x0}, &(0x7f0000000940)='\x00', 0x0) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000240)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) add_key$user(&(0x7f0000000080), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)='D', 0x1, r1) clock_adjtime(0x0, &(0x7f0000000680)={0x19b1, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x10000, 0xe5, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x7d, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x58c, 0xf4b}) request_key(&(0x7f0000000340)='user\x00', &(0x7f0000000680)={'syz', 0x0}, 0x0, 0x0) 3m23.082059797s ago: executing program 8 (id=3986): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x10, 0xed6, 0x8001) r1 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x10b142, 0x470e0589a70ae519) fallocate(r2, 0x10, 0xe00, 0x7fff) 3m22.087788749s ago: executing program 8 (id=3990): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x28, r2, 0xacf5e67dd0b583a1, 0xffffffff, 0x0, {{0x5}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xfff, 0x55}}}}}, 0x28}}, 0x4c044) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r1) 3m21.398568281s ago: executing program 8 (id=3995): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000240)={0xbf, 0x99, 0x9c, 0x3, 0x0, 0x5, 0xfb, 0x5, 0xec, 0xff, 0x83, 0x84, 0x8, 0x7}, 0xe) sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000080)=0x90f1, 0x4) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000)=0x4, 0x4) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) 3m20.671596427s ago: executing program 8 (id=4000): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/17], 0x1, 0x14e0, &(0x7f0000002a80)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.swap.current\x00', 0x275a, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) 3m19.398328833s ago: executing program 8 (id=4010): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x20004000) 3m18.506023337s ago: executing program 8 (id=4015): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@random={'security.', 'fuse\x00'}, &(0x7f0000000400)=""/108, 0x6c) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m16.768908449s ago: executing program 47 (id=4015): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xe0000000, 0x564b043a, 0x83, 0xffff, 0x5, 0x2, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) lgetxattr(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)=@random={'security.', 'fuse\x00'}, &(0x7f0000000400)=""/108, 0x6c) syz_fuse_handle_req(r0, &(0x7f0000006340)="7c7a6a069306f2c5ddf91f36944f207a1bd11284b4445fa3507bbc5def2e6fec4bb7c6001eafe381e277221f30085acd5d0c251f7c60c23874c04db6aa516f773dd2e57e746d1a085193c8b7664fceb1fe764d87f4395c66e5d4eee443a555692ebe80f3a11b8be74963f1a18c1d0cd71dec65e609e065e14615d2e8b283e55b4aa8b485f81ce52443d61fac9f08cf34f2997c05a63f98f988cfcea9a5650b37dff5817e5033b3912c226bd9bf68b528dec710584242fbdcf7dd0d55e394d3742039e6960bb589fb9ba18ac8e9e82cdbd08e9b584d0a8224cae3e9dd91e25699549007dc0d99165a73cda1c99fc48f6bfdb900c60e4481222505c58cc1108fbaf317d361d1f2d78f6db6e14b283ca9f1927f4f8a0f6f52818be03c7b257aec57f06a0a4279131a2bb0a13b23ab188ea50a686abb2f7e4d0f7a166f358e4cb886b7fbdf51cd9a153410dcc4cc5db7e8e94cc9ba2371a328480ad20f51d7fa012f367a0a8f9c882c47b5f714f0e1b35f72b2261989513c1428d648aa8ab8c12c87dfea38d5be0d49097fce804c9cd2ac8f61b68579853129351e3bcdbdae3371d2b12a150d94b3097161c226c50a1d2c1f8b4c10a986e21dbbb854ad1d26d0ce5d950835d14664ee8f58c537f5256b761b4707fe8d46cc1658798d285310a1cff127b1280cab3f1f633569391d5a7cc08aa1d108b93c38df397d90bbb81753930934df7dcaf8f960dff660fe239aa15cf48872668cacf4d664dc0809fe9d780ab202c3a968abb56655267c907eb3343809b2407105a5c14d53a3b17a9a1552314d27e13daf48a2bb7b2c9fc15aba9ae1d6325c11fbe8432c067efa72878ca56c6463b6cf4d29646905422908a4a1f7741d0049febed4fc2b7cc27154031e50a0ab297826383935bef6a0f968db92128e8a940509b5368146bdcacc852b9d0b4ae9624635f9e69f3a7bc8e6f3340c7de46f49feb20a46f11aef464fa6696a60865bdd0c40b1c411c9661fa9f6393a33a7eb4afaef3eb1ab4634a42baeea780ac6c0c4fc8cf7a92cf0592f993ac85bdfd6c18ba4b7cf4c4438a8330413de8365b4a080234f59edefca0c5ce9697b20cc7b71d04438c00cf3d557bd03b5e1b86e167d2d6e09714135ef720667d0f2e7ca54da419d1bf6722eda31381059216009cd8c99ba1d7f9ebc1bc021457a195fa5be2f0727a84cf4cac5e080f22c836a4955d5ed06bee2eec0d39abc5f459ac43596fee3b341dfbd7ce6f4e57ea42e1e8d4f65880b8b77d2ee27dc1efe95ff1bacf5aa14933456b68645380d0f2ef6284b9946857456d64f4cb656998e99e3e286f596b31c69a69d0ee8444ed838ca2f0ead1be9538e4e927239d0e65a3f871dcad33881f69592eed93a9fafc934aefa67bb87d582d0ae4cfbb5c50325774bbc259a277749751228d3610f95fd56e9fbccb288eca1b14c8255b6996a59c91efbb08440ed91cdd53b0aab82600906904cee2a117a06157e24fa822e1cf4f9db4c2e8a5e842cfc503e578e69002fbae194b6bc7c8b69aac7359292109b712eb49d21946f5ea2745ab77ef59950dcfd926df2aef20e85f2a14554aabb417f15c725c73edd4853926ad6c525afa2c65de213cee799c18d1ced9424d10d7076fc5862579702a5f91031381f41cb8d9899ab514cfa1c8c51437df9710271d8cf69e8900921cba296703f1a7b5234500c1625884fea594d836a930b06142a6e577cd9c2a32cae65e712624abeeffc423a5d5ed7bd75fcb1a82ecec8acd0da9918a5c7c189f14f8cdf37062f93b87f9188501556060ffc6eac435cb1624f2af688316366e03cfb869eacf83d9d45fce910c3347f810b614c2e4291e70471ca2b574241c3f3d9740c6a45c7296a2f275acbde72e513ef4e5a1123a57c2eb1bd023af716c16a7747204338f60b6e3ac514af50b21952c21592aefb6149828a5183ba581d5ee8647f374645ff941bab67bef760ce353b456c4b51c5d3a0c5372b1773b944ad67a92937dd838e1b6f550a1dca975d6230e430bcc278afed54e0621008b2f850107b0244359e3747be5282630452d432e5df0fd160795effed150f9396a7da5a1e4dce0c8f62280ff2fbfaa813859a671208b4b9f05fe450729b0efad83a790acd688a90e5fee5550de4ddeac70ecd125ad076c4e2b68652e6ea520e2b6b339b4b9dc219d853e06b9aa79d022e53607213fc254e15ec3e6b776d2b562997e0fe52b98c58e1c0316b22a4219460053da87e7baff7dc1892c2de2f324dd1169b977f3a6698d0234c78de3e46ba5824f3e373f264e8d28fbb4cc108a41fdecd4b629d92b0a65f84366bf504eb5a894ba40c89f9df854dc469fa174ac85cb8d2adfdc099ca9848a1032b2e2f375bd1544dfb69e33492e1a4b921ad7ff17c4c7e357ff69f42d2301c302ee2ed313f0e9a20ebfe028a8737d6e38bf179940179cb779b70c2276264cb4f23249db7d5f179baa842b70f5b287cf74ce1ff6b70a56be8f2fe15aeadca229804923d28a793838bc605eaf5dcd362f757577ebdac54b09fd73326720d3522d002a41a3b5f2450f48286a5ea45836b5ee77fc415f47e0716049ec2610d607737fd5a73b066b4876f9d744f6b3486b088dd3bfc3d393a27c6c799ce078e2ee348257b5ec1ba9de76da2a67ca912dc2dd5afc70834ceecbb8bd41f6e790294cacd5891bef1b4e2124dcd6dffdedee8f16b3bddc030429dcb0f98e6fe0649cb14eed3293fa4933b2ab8c0ec0ff4dbbced1e32dceb317252e715b872b00478cbd7b0275b7394a0ccfe9887410b32f1ce9266b3b83470ec982cf908507d3ad0cc366bff3759388b624701b3e0dc0e7928386b155b50b42a8e352622516beeeddfb79866a2eb1d360802cd19d62fd171267a0fece5f54e315a8cd49c41072f2a7a0baab5aadae2c1ff28e285b642f8d3869321bd18b4aed107feaa12d055b179a8ab7b50e2796d287a196e280d527b526c45c8aa98696d88a02d923d06fedf51336c0695c218e70448073921971093ea44b5352e10ce6cec26d082b93f69958165bd986f56650a62224c2d9fd044bd8fefd33544c6bd141b4cc211a087fa57c09e195c8edffe559048db738d1395f5e2625dd7cd035b8c76aad6c238fb52a7c5ff0965fc7122a5899746ca88abd699d6078623722fff92726e18613519f2b1927504fd5cb7a38ffa373c3883022f0387953530834affb5f05e0f44c24caa75561b2b63994493ab857fdc30900586fed09298d846e5936869b43d81c4b91902028e57a8f2da16355ccb7a77d29ecc8e66015e979b2f3edc5b8d77c45348dea55c9ed6b7465acf899f4bc1a7edcae0b0daf69ff85c504eea1294620b6d3dbb004575044a5ae7c110010c2cf39827fbdab3b42ac35d147fc53bb5e7de6c47091dc80c14b8da494b2e913d1a52085e29af19edc4a417346c5a896a3851cb6132511e0627d190b77623c8a3bb6085eff22ede7127f7988a1d388fb70ea20d5c1b2424c5aa83532bc5162a5d177968b4a46583f2d4b92d04a5f19145221aeaf724d92ea1d4dfb53021b47585bbe5ce35f8d09a83e13fdb1de8e52dc646d41e810879ce9c830959c3ee93f11a16d030d141863244395e3f847505fe6d9594a34009fec9a743c033b9793335684cc5c3d0eb0ad094f40a60264b02cd88c583c850d99c5b9c6c5dcef467ca3ea38f2aa42f5657cd940aeb12960efa18d571e4f958b9cd90918e069a486d84f214617ce29c0f2c26bf84f12f5036f26a8de0c8359f572654bf5ee06d38f741c464976d95ae3fdda45c2ed2d08ef71d3590e82d235e0fa357c568158791a195d4a2d9615e1edc85be64cfd169f925ffc4f636f86783cf43624a77bdb9b172228097f02f391df00668dafbd9932298b23cfadfd1b8d14a25cb408a440f930f0813de73c1eb2eb4b3c802d718a672453d0038965c6dc98db96fb4e06f1fda72782d0839d4e8b477ebdb2c73510db44f643ec7dc4fcb837806853caa35cf622aff9d44381d3f7adae00650cbb6f0334ceca14ec982dfb5817d7fd49251c203b6463a09c14885f754603291ccf0a7ceaa57284ee751774fa5ad72f9f7a32fa542947af40601e98057895f2869d4ec2db0d73930962535fc9e12ba7e6777cb458592bee505b367012ebd27b256fa0fac1452cf3b28eab573549b7c7a13752ca0189768f738d5f8030fe999f7bdc466d67bb32937ae469f1a1e21fac2ae2ab92a0a260bf0e9ce20625e82f88d0ed4d13876aed768765d77433bb9137d92d622df502aef574de82fe28063128fe5a1787ced99734c2f3f221e80d3baefd367d01d950ee1bc981b4b5ff86b2a96ab78fa3c1201303cab473103d89bb185afc77dd2cb7ac1564045036fe9fcf85af5d73a7553bc45bf5e221564540982db2f81e612e7c1715d3498b8d7851c0160146d6eaae9e30c81dedfca8e7122fcb69b26b396629b723f1e1822b8d5d8f2ac583728a5ab40010f88aa42f37f2031a3e99d8d6661e63f86f65af521066ea6af89c89e1748521b8368cd03409e895a941025ee777653f55e66cd1a0cca21308666260c3b9a306ddadb322eb1d09f7b27fd570cd35b6ec88bb391e3ae4745e17fb4dd7aef1d75b4ebb91e6e7789b241566d7c0cc97a3a126ed50b0cb621e015414f62641afd85bad78470463f86d8287aa56d331911c23c4cae8e5dfea33f3789c03d61f51c590417b5ff9f1aa35ab6a15364296c5f9399216ce565210a4075ac5e43e916850774a127f9174d95b43d839e056b4a7d679bb8804951ca171c0b59f4d6f32c4fe8f908b9a1614591f5d1e1cf3348e02317ec4655c693417a4c4e7007a8db02faa1634f8eea9c9bbe5b149ce2279953a54884392dc7251dd38670fd59d9d1da5203340909d50f779e864339014bcb545d825cdcccedc558a1d01a2784b8f499ce9fa2ddb0dd1dc0b93d1b282a96cb4ecf152474dbc4b2853b30c8e5fcea85bdab949f5eb1e98d81c102c349f680230082db5aba9e20209c35b16598507d28211b49763b598a7e60519d5b28b67c027cb2657cf2ac7c7455291fcfe63f0b43afcd3afaea934da97c209d02e5b47a686c1c284aeee5d662fd9d9be7c576259d9f1a36fc0f7fe329a1da1dbe078381233940745fc28a56db98b1a8442325168158e3f0b3cbf8a368d19dd20cdfc1c4f3893a30a49223050159b0bb8b7c59ca705ae25453988d87ca6cdd2bd2fe37847ba67cbcf7a494925a8598b7b50a741c9ced10ea08e35c422b79265561a07f40ebb89bc46069a1c1ad95949fe757a76ff6b5386a043abc967c367a9d86b54d374e573540dfc1f6d396f398abe9735f523b778fd124ac1e1eb832a66dd4b1838a50e6a4eb1b95b8a60a94f067b24d1194976c539d5ec287a261bf25904575be3ff49e7411a8dc09739649828124c14fc2b89dad1f3f5725db2e45f5a447cd3e4bdf9e1e95c5ad7c76fcf0c1021cb6c32e6985e1d113030d534eecb0dff2554183ee18da2da5d21a8b994a81f05e0e6ae89b20bffb4be333d1956270da23e9905830921b1f3d615a56a20b11d45ccd1d22b910e33f475a92c31fa5b4675ddee18336d0ee7b75c07df2a9d4ad53d83142219a00aef15e1e9dace0f039d63a530fdf671a54aba3882dad0d439632af5576726c3aa095cc1a0a03063e8a6581b78bef501acc24b05a0150d8f683c90e8e5e283a49f898906dab926e544ead48cb9bf9a6e1bf140b5273443b8cb8166b2d8a5464a3e9d9f4246ac81ea91b33a0b399dde9f5efaf792bb04cfa028f40b7c92db2d9c33e16ef58b9263350879ea94e581a1187b2d1931b1cd7606a76bd8943b7c3098a33bdf476960af7bdf2854b1336e72feb603b8bb2242df0839d157843d369a50a615068ff5d99ecebe8dc19158a6c654e853cedf860a727bf8140c062f5d307fdcd150ad0af03d2c3a913b91047858ed6382d2d2d30f5c0bd419c2cd4047f225107ea8bf4a3a69384f16b5b5bb2655bdb750db4e975794592987df95f6a90374b0a08769b2c957faa16a21270196afba76b4527f01f0c5db7fa16e2da81fc49336e20bc3ee1ccbcb62255c84513d9ceb706f03c25000517070c03b7bce838e6b6cbc7f767959fbd62e11ab7ea6d760cff674a4296e6185eb348028b472290922160f3ea36c22c8375a016f505017c0a0e041dd8e52b4f19ccfc701109a19391a059d77db239d40a06d84a6f0ccd08aaad764e53ad1da19ee825a4d25ca7cd538289bffe135486ec1614e28b3682c7081a1b0a2c7272f4e36f6d0d9e68d84209126dc59312d48eed1c63c90efeadd472259392c28746abf394c5c6c97d3fb00b70a74c313a817ee1719c33f16d58f297fc7eacbca5803df115745079c5434e851ad6c1f0e8ba0bdbb66cbb6789b89a23526b476ad0f2cea0907e72702f93d37bdfe7b39fb9b33fb1111e58f5c45db8cc38afe4e03a318aa0690afb870a67aeda7da9640fdad1e1f551dd4757c69b4f523b616e502514a2e35495916f2e5ddab1ad9534644d99ec56e818caba173773aa5e45104deb869b23063eaea5542d3bc503a6948b83779aa46879443cad02477451b46429f1f67560c31d4377f96031ab94866a73be753c4ab91cc6576c3991c3423103ebae604e887c56cbacb9e95b8b46300b62e698a6456a0d175cf682eacabbe301e0b0ea34f963daed0dc6c1b75fa5e3870959913e69e61911d9ff646e9c6bab33fe566871027e861577c4d7fdfdf94ce7ac1a3f6d29daf28d660431a89c0b56c4b95090e2ca5df62c1e5c5dbf98f067751819d4c5914aa33883b7b521aab30d14e1cfae74fcf3ad4b2cf9448009d3223ad984e0c50f92d465573a6fc2894f8a5d4e855316738ecfd6a6c157d39b5c44d80a7cba944cf9f7a701899859821cf2bc248459f7a350fefba53c1481a7197f024f2eb74251455c06f4b82dfcf3ccf3e3b98b898fa1b16c310125e5e9fd4019acccbe91b4d842ddd52ee56f6d3112dec80159d6d3ef93bca70e7afcccb223361c39addbe3c429934cd0ae35f36a8f6309f08e36b27341db1f21fd8a148b239361b31a85f53bd1ad49fadace6c64d5f4363427fb2f268e8aec6d81cdb7f1252baa4652dc55881661114bf98cdf17190379591f0e22dc97e790f53f463bbb0ad0ead78ddf7dfe2e26052acc31cfe52b822afd5ec5c75957106cb5c368c09252ff3e4f624d90e599279fb985ecdb7d8880dfe05ac2d2da83e34e2b9b88f5dd60107a4509902fcddf4a36605e5c7a2606a4aea9fd4b5b24ca6b67d6945d133869cf9276d8c30b08c2a9f4bf03f4e0b956fd5f3c80b958ac5c41e4115b6708799c3102bd8b6c7fe17ff8c3f89c7437255faf69d1e16074086dd44d038bc0211ac74743169b462dbc085d77bf45eea72bf8348308bf48feea02d739a0fee9fbf71023ef8c6828da1aec8618cc2345ff663f88bc52a990e6b9591425435b0c7900ea4068f5aa6345e94254e259a71290fa23281658a6a165d1dee10dcb355518264824665ff2c5538de9ae4487782911f79e0bb09bc2c2d8e0d91b33cbec839075c9b38c848e9d2fad7368e96c1932042c3e85fd95b7d4500e6cae9e649082e9d5ca6f2cf91fc7ecaccc1049525d4325003424cacbd6eb5b8cc30b6893bd1ef46a8e7cbcc87dc2dda5c802ef1f8bb607c7457eb161254dc0feb60ed5ed0383fdb4db91d7e41d45c8eb80c1981e801ef05703f97f8710a2e00eb0559f854f700f946937b9e68c75ad6d0015d5d79be5423d0d846bc76f92ea7ebb0302b3d3c695c0aafa83b2bf029a444709cbf2cefbdcc7eaf3dd7a16f8ca8c861e883db10d433f7fec547be45e6829962e430bb3c93e8cdfb342c1cb7e53d8a6ea625d5574c4b4303f61c4338a658e652ab2bc0029c0a78a5114f495a439956909cf42128cb4348affbecb20b7fea98e22160e9a58e7666a00e7b37fbec4bd3860d66a39d1232a57e8cc50710c5c666f7efa98f16f9a02d843c94b0842a383945d06899998ff2fd01ffb58ab53ea89b2c93634c48d0420edb9791b8e451b35b534b8b2874c4859c684cd14afb5335a2555c75ad9df018635bb7131a7ef204ccecfed33a675fc51687e3f8818406fbf58e7b5fde1ca96153817e1b632e89a78d967eb6a34af1dac0d9ffa448b7b9bac27afc305a7b47febbe0a37036c18aef6852b1b2759d67479f9edb169e796d949844a1624b1e832a2eee9be36dc5866d6fde431cfcbd4e305d322c9dd07f83b5b361daaa74bfc9fbce8b447210c327468659ecbb0a5fc20d0cb79de7d1d70bf251c81d5f38711f3f4bd4752685b077058beb465711b1359d2a7d2f59216c5a807121bb97e7ccacc46526e4072f1d6de3b487d492fed0995e2273fa3bb115bd08d32d8e57eb2aa8f9d3b81babd1b8334c3a5e69422b75502ced3793d07b9bdf38e9d9fa1d2e48c7886dfc41985e8ffc49f09c4ba58ddc3b4cbf562b591f8939ced5d18214a77cc753075334a157373cc33cbc07a731cd6342492f5e05f78108e627bc88777203c76632bbe0120924c7a51bbfc9dc789a5695b7c95ef544935032fb81d499c454a2d78727875c20bc8a48a9f23cf6595c17c9cdaa8d04bab8ac567ebd3bbcdb40e11f1893fea3970f176f75f38d17d6ee1bd4ab76c660723a776bc72319199ab82c40ac4a9f4f475e8fd4643a4be8601cb5172e112c236c7c430078601bf183a59a03885e994c1116a9d4ef275790ff2417ffd85b43274fc57654466fa394958aeb11f343c3439604af13997011af70b67df1a9dfa4cdb751a2dc3e5bbf42f7b9ebc6dcebb2dbdc57d7a2cef7409dba307b7cf6eab148a924566341d035cabc877c68d0fbfaebdd39c16304b63a1bae376fb4650708bf5695dfd7ffc01f43f0021f622de0b116ea494454497337a0ec469963de7f9d2b1d6c5a7a0a7835777a78a2b9e16eec696446981d2fea550f011419b96f7b2018d027b87fc715521b0302bd7b5b3bc5f033346029eced73df07dd1bb1f91848376b40b9e9da7233e7832edcc7b54ef6fd320d19efce78d58ea7020fbbdf77612dc8a4f3281915ac9706f346e405b9f489f8f2e9a2decb8d18bec1e5f735a4ec69bba4dc5d36c9c1cc50b92fe67b2cdd53fa671c0cbe331abdf46787e7c9912b951aa20700dba6cf5a209fe5c9c61ef62a8e2e572ec774b2d0f42d570633fc44d44826e848d47a8f386a5704e0a3eaf1d06617181aeb166334ab55d5aedccb27abf19a42a480930e25465721336c70a2ea7799d21a3659124ac9503efc99c1b13ca2b9723e3e338055f9b3cef7502017ebbb09a64b06462db353a5c562101cb7fbf29e056deeb1ff0c7bc877210c941c87401ceae52bcecc83e87655069ab931bd813c1a87d67554f5d2cf435e6dd92a515c22f5d5a9a44ebc81e9c4849104343b80824005619312a9e349d996e366d381da42edad1a560bf5e31ecd049e92ceaf42954958600a7868599fe10e9b34587368d3044250c3d1a8ba6c8dcb6d318d4f9e71c2d33fc74cb57620a8343258d072f3aa767b4b178f3f66d5a713dae2426296c12edf9ee37636869e30df64cd3855fae20bc7602c1b7e6c8246ed4be71231a5ec7b5e7a9ebb08bf8667d8f2900ecdb0a0addc14a2328eebc448db13013e6a3c1a661065e5ac0a04b5171bd84c9d9d947a6c31257ed13a966530c5e20168c100117cf82b4c00ea3ad00ea65e1af89535b3f11a1418ddad33db8cec281543732d2ff4eab54b12cc95f7d872e75bc01bf6c580540b0e26413c6c2321ddfb0447bdb6acf05ddf2bb92534a3a5f37d6da882289f6fefc6a213cdfcf34902137fa3b982b2b4c27c611f08909a18405482f1e3a2bf3635d3e970457541da16e37bb3c422cceeb484bb64c78724431a543ecf4ca851914c1555e3b785ec87bba3769927f6c29f80e7ae8632bdb9acdddf7c3b5580740d9b2bfc25086c9566844136f3fac74f429121f86c378c68c20a194b0c98b1e92991954cbf60477e217a2e25297fc7b18972e40c531ec19e1eea193bbc8893392d8528c6a0375bcb4b082d20d5c47cb330bbb4b74b91ab55d4a0d3e1dee8182c581e8e70ac30108eeb7185c6ea3f786881ad124e1404651ee95cdb0fbb0d0f4a2b43c795ec1cd4e46234a88862d57903ce878b641004fb637341e5d6bf5163f1a3467b828f6eea96c3c2bb79503687867e11eec32dec452e0fdd2eaacfc0a477ee839ef049855da734d18212142dfe2a95ab9ad9bc4f98c3bfa34134c7e6c9f8669303314d4e8c1bc5475e8fcf418cbdb3246ebf393d911cdfee8f2550dc1593ece59ced81a4ffb2484f9c8ebed0aed8d418138445c4e96b209adcc4afd70f09901662daa2c8c557d6039768d97e6b9518f0de4ac2e0187ba08a4a9128d3e632fca102137338b5e568f12c7bd28db772c800fb5f4d4e683b201840731bb7c034235cd73313cde88891bbb31597bb537696e6c987302297f9717b8053779aed447d33ef9129e84d3031fa9b453bd5731fb010ffd19a9133e0ccbec2461cdd31ba294d68c60a8535b15584bab6e6d0ce6c1cef4755bd5f7d90f4debb40af1437a19a96ef9c0709692156152091c7efb58f2d39a65b96416dc09e8091ae08d9be5235a3c1ec062862baa1aab788f28e83ba4635cecc6671f2320f42b4f711e7d0fcad89d6727d3630da1ef35e32dee39eda665946abe6224f17f2acc29e62518fd51eb7f193d9bb16c38204069098c293fdce24c1c79229fd08622a4256b581cffce12e46c20248dc902753f0e3c91f9685b3d45f984620e262b3487d67d152f1c50de3fd2067a9d3debf715f346dd2f712c55545336a9036ba82bb06cfae59a48d083c3388f77790c9639fa0a9c33f4c66c7513042bffb765c2a4b3657dddf0ea094d8d79018f66c8ef8e9df980a89906275edf4a467a5db0a623976899f0efd167aab6ff385cdde59027a95a570277cb94ebce503906c28527e3114eb9ed739d0c2f4cf82786b35c0054718f47381ed8ce9b107e1f1019be5fc877166da667036f0c1b84e2b5118b5f4babc052d997e5f1e8c4cf45eb26430b74d9e1df3735b8d5df559903143d983e974bed6cc608c2580a991bdd3628ec676d348de8752cafa80c1661f162e35c25fc0ba0198423f83214fed800f9355ac8ea67951cfeeb3736b50c1e14d45d33aa25fc72c38702bd5dd217842e54114f4799c45ff1b7cec9729382ff7fc3ff80cbe1a13d03e19eecd7de676f6791fe34143ae30c97da9623907d974a37b65d0ef5d46b718d58541c6b1902814de71218ca7396ceb5fdacdc3cf4d110862402e7cc6254f1e44e28593fd443290262db75fd482ce1d305d6bf9fd3e5e0efbedac5a4d097650b111e6e9e1b2c66a23ac5bf27ed78d25d1a54c16ca4287126736c2f17ab73e683798c29d16481775ada8e20d94b00b6b29654b18f60e2853fdc7d3ba55d7df660db90288b6f440efd19f0478047b12c7b07ab2b1c9529597e6462d20612e6c3b6d1b1d11305f8ddc811860450504b7cbf9794edd0d07c25ab6307d74afdce958355eb919dcb1fcb8038c6dd5e774ee398dc8553a9ddeb551f", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.643406246s ago: executing program 7 (id=4980): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000380)={0x20, 0x15, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f00000008c0)={0x40, 0x11, 0x4, "583c85f3"}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000900)={0x44, &(0x7f00000007c0)=ANY=[@ANYBLOB="400b9d000000fe"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.091966897s ago: executing program 5 (id=4983): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e24, 0xfffffffc, @loopback, 0x4}}}, &(0x7f0000000240)=0x84) 4.708178391s ago: executing program 5 (id=4986): r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000680)={0x0, 0x4000b0f5, 0x80, 0x1, 0x12}, &(0x7f0000000080)=0x0, &(0x7f0000000280)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r2, &(0x7f0000000200)=@IORING_OP_MKDIRAT={0x25, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xcd, 0x0, 0x0, {0x0, r3}}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000340)={0x1, &(0x7f0000000200)=[{0x2f, 0x0, 0x0, 0x1000004}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.651044868s ago: executing program 1 (id=4987): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r1, &(0x7f0000000300)="89", 0x1) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x10}], 0x1, 0x42, 0x0) 4.603855456s ago: executing program 7 (id=4989): r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) userfaultfd(0x1) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 4.294558915s ago: executing program 3 (id=4990): ptrace(0x10, 0x0) rt_sigprocmask(0x2, &(0x7f0000000200)={[0xfffffbfd]}, 0x0, 0x8) r0 = socket(0xa, 0x2400000001, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) r1 = gettid() r2 = getpid() rt_tgsigqueueinfo(r2, r1, 0x5, &(0x7f0000000400)={0x2, 0xffffffff, 0x1}) syz_open_dev$usbfs(0x0, 0xfffffffffffff459, 0x2) 3.873075763s ago: executing program 2 (id=4991): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x270}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x80801) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x145}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) 3.763280019s ago: executing program 3 (id=4992): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xa1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.69121001s ago: executing program 1 (id=4993): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 3.425545833s ago: executing program 7 (id=4994): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0x300, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x10, 0x9}, {0xf, 0x5}, {0xe, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004845}, 0x480c5) fstatfs(0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) write(r0, 0x0, 0x0) 3.098252664s ago: executing program 3 (id=4995): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000180)=0x8) open(0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x8, 0x900000b, 0x9, 0x0, 0x1, 0x0, 0x2, 0x0, 0x2, 0x0, 0x0, 0x10001, 0x3, 0x6, 0x1, 0x3], 0x0, 0x8340}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.687883467s ago: executing program 3 (id=4996): r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)=""/237, 0xed}], 0x1}, 0x18}], 0x1, 0x101, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000500)={0x0}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.636126808s ago: executing program 1 (id=4997): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="04040affffffff0f614b180080"], 0xd) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], 0x0, 0x8, 0xb3, &(0x7f0000000140)=""/179, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) 2.616960809s ago: executing program 7 (id=4998): getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000200)={@private0, 0x800, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0x1, 0x23) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@dev={0xfe, 0x80, '\x00', 0x2b}}, &(0x7f0000000040)=0x20) 2.532802132s ago: executing program 2 (id=4999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0xef, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@empty, 0x2, 0x2b}, 0x0, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r2, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @multicast1}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="2d0000008058", 0x6}], 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 2.462854427s ago: executing program 5 (id=5000): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000005"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000cd03000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0xedf0e51957efc755, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef434000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1}, &(0x7f0000000240), &(0x7f0000000380)=r2}, 0x20) 2.186532871s ago: executing program 2 (id=5001): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000002000/0x4000)=nil) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@local, 0x2}, @local, 0x0, 0x0, 0x5e, 0x200000000000, 0x5}) 2.037092574s ago: executing program 1 (id=5002): r0 = epoll_create1(0x80000) r1 = signalfd4(0xffffffffffffffff, &(0x7f00000000c0)={[0x4]}, 0x8, 0x800) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0xc000000b}) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r2 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x7, &(0x7f00000005c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000700)=[&(0x7f00000006c0)={0x0, 0x0, 0x0, 0x8, 0x4, r2, 0x0}]) epoll_pwait2(r0, &(0x7f0000000000)=[{}], 0x1, &(0x7f0000000080), 0x0, 0x0) 1.822105504s ago: executing program 3 (id=5003): setresuid(0xee01, 0xee01, 0x0) syz_usb_connect(0x2, 0x24, 0x0, 0x0) r0 = syz_io_uring_setup(0x810, &(0x7f0000000480)={0x0, 0x5c2d, 0x80, 0x2, 0x12c}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffff8, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2f, 0x28, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0xda1a0b6210925d15, 0x0, @fd=r0, 0x0, 0x0, 0x1, 0x1}) io_uring_enter(r0, 0x22d0, 0x20, 0x0, 0x0, 0x0) 1.504126852s ago: executing program 2 (id=5004): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') 1.428029456s ago: executing program 5 (id=5005): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffcffff03400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.198776015s ago: executing program 1 (id=5006): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="e4000000", @ANYRES16=r2, @ANYBLOB="07002abd5248ffdbdf2507ff000008000300", @ANYRES32=r3, @ANYBLOB="0c00990001000c0069000000140004002f6163766c616e3100000000000000000400cc00080005000a"], 0xe4}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) socket$unix(0x1, 0x1, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$evdev(&(0x7f0000000040), 0xfffffffffffffffe, 0x2) 1.195971244s ago: executing program 7 (id=5007): pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x40001043, r0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0x1, 0x0) read$FUSE(r2, &(0x7f0000000280)={0x2020}, 0x2020) write$binfmt_script(r5, &(0x7f00000000c0), 0xb) 675.386657ms ago: executing program 2 (id=5008): setns(0xffffffffffffffff, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000000), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, "614af285791a63abd0f993af8077b5cd01e03d64a831683fdc3fd440829c82ae"}, 0x3c) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/ip_mr_cache\x00') preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/20, 0x14}], 0x1, 0x10000009, 0xffffffff) 668.654072ms ago: executing program 5 (id=5009): mmap(&(0x7f0000ff4000/0xc000)=nil, 0xc000, 0x1000003, 0x20031, 0xffffffffffffffff, 0xffffe000) mremap(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f0000ffe000/0x2000)=nil) mlock(&(0x7f0000ffe000/0x2000)=nil, 0x2000) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000ff9000/0x4000)=nil) 448.687551ms ago: executing program 7 (id=5010): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000100)={0x0, 0x7ff}, 0x8) 375.15869ms ago: executing program 1 (id=5011): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x250201, 0x32) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x100, 0x0, 0x4, 0x7, 0x80000a15, 0x0, 0x0, 0x4, 0x6}}, 0x50) newfstatat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x2000) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x5, 0x272, 0x0, 0x7d692c8, {0xfffffffffffffffc, 0x0, 0xfffffffffffffffc, 0x200000000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, r2, 0xd}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 208.372415ms ago: executing program 5 (id=5012): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x4, 0x3, 0x5, 0x6, 0x3, 0x1, {0x0, 0x9, 0x20ff, 0x1, 0x89, 0xd615, 0x9, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0) 39.622173ms ago: executing program 2 (id=5013): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) unshare(0x28000600) unlinkat(0xffffffffffffff9c, 0x0, 0x200) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x183042, 0x15) fallocate(r2, 0x10, 0x37eb, 0x683) 0s ago: executing program 3 (id=5014): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="450a31e5b7c2000061117400000000001800000000000000000000000000000095a3c936e761d32832a571"], 0x0}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) kernel console output (not intermixed with test programs): out journal. Quota mode: none. [ 1148.821984][T11895] usb 6-1: USB disconnect, device number 14 [ 1149.479198][T14451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1150.557057][T16840] loop9: detected capacity change from 0 to 64 [ 1151.193292][T15881] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1151.208022][T16847] ------------[ cut here ]------------ [ 1151.213663][T16847] WARNING: fs/exec.c:119 at path_noexec+0x2ac/0x310, CPU#0: syz.7.3127/16847 [ 1151.223047][T16847] Modules linked in: [ 1151.227215][T16847] CPU: 0 UID: 0 PID: 16847 Comm: syz.7.3127 Tainted: G L syzkaller #0 PREEMPT(full) [ 1151.238572][T16847] Tainted: [L]=SOFTLOCKUP [ 1151.243088][T16847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1151.256320][T16847] RIP: 0010:path_noexec+0x2ac/0x310 [ 1151.265856][T16847] Code: 49 89 ff 8b 7d d4 e8 d3 7e e1 ff 4c 89 ff e9 c8 fe ff ff 44 89 e7 e8 c3 7e e1 ff 4d 85 ed 0f 85 a3 fe ff ff e8 55 4a 36 ff 90 <0f> 0b 90 48 8b 7d c0 4c 8b 37 e8 b5 73 e1 ff 48 8b 00 48 89 45 c8 [ 1151.287304][T16847] RSP: 0018:ffff88804dffbbc0 EFLAGS: 00010283 [ 1151.298383][T16847] RAX: ffffffff82c96e1b RBX: ffff88808920cd78 RCX: 0000000000080000 [ 1151.306565][T16847] RDX: ffffc90008fcf000 RSI: 0000000000000056 RDI: 0000000000000057 [ 1151.314985][T16847] RBP: ffff88804dffbc00 R08: ffffea000000000f R09: 0000000000000003 [ 1151.323284][T16847] R10: 0000000000000003 R11: 0000000000000002 R12: 0000000000000000 [ 1151.331678][T16847] R13: 0000000000000000 R14: ffff8881007b8920 R15: 0000000000000000 [ 1151.340039][T16847] FS: 00007f10f15866c0(0000) GS:ffff8881aa3d4000(0000) knlGS:0000000000000000 [ 1151.349320][T16847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1151.356092][T16847] CR2: 0000001b33621ff8 CR3: 0000000080fa0000 CR4: 00000000003526f0 [ 1151.367893][T16847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1151.377375][T16847] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 1151.385678][T16847] Call Trace: [ 1151.389196][T16847] [ 1151.392322][T16847] do_mmap+0x1572/0x1d70 [ 1151.396818][T16847] vm_mmap_pgoff+0x40c/0x760 [ 1151.401857][T16847] ksys_mmap_pgoff+0x51c/0x7d0 [ 1151.406854][T16847] __x64_sys_mmap+0x19c/0x260 [ 1151.412033][T16847] x64_sys_call+0x18cd/0x3ea0 [ 1151.419160][T16847] do_syscall_64+0x134/0xf80 [ 1151.423980][T16847] ? clear_bhb_loop+0x50/0xa0 [ 1151.429022][T16847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1151.435144][T16847] RIP: 0033:0x7f10f079bf79 [ 1151.439857][T16847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1151.464203][T16847] RSP: 002b:00007f10f1586028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1151.474296][T16847] RAX: ffffffffffffffda RBX: 00007f10f0a15fa0 RCX: 00007f10f079bf79 [ 1151.482750][T16847] RDX: 000000000200001a RSI: 0000000000001000 RDI: 0000200000002000 [ 1151.491046][T16847] RBP: 00007f10f08327e0 R08: 0000000000000005 R09: 00000000ffffe000 [ 1151.499377][T16847] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000000 [ 1151.507526][T16847] R13: 00007f10f0a16038 R14: 00007f10f0a15fa0 R15: 00007ffd56887c18 [ 1151.515868][T16847] [ 1151.519195][T16847] ---[ end trace 0000000000000000 ]--- [ 1151.721808][T15881] usb 6-1: Using ep0 maxpacket: 32 [ 1151.772493][T15881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.847809][T15881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1151.915609][T15881] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1151.967868][T15881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1152.036951][T15881] usb 6-1: config 0 descriptor?? [ 1152.456848][T16855] loop7: detected capacity change from 0 to 64 [ 1152.593549][T15881] savu 0003:1E7D:2D5A.0027: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 1152.802439][T11895] usb 6-1: USB disconnect, device number 15 [ 1153.232158][T14451] hfs: node 4:3 still has 1 user(s)! [ 1153.912459][T16868] fido_id[16868]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1154.483780][T16879] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3136'. [ 1156.180525][T16899] loop5: detected capacity change from 0 to 512 [ 1156.339545][T16899] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1156.568147][T16899] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 1156.735438][T16899] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1157.357373][T12568] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 1158.438542][T16925] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1158.713873][T16928] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3152'. [ 1159.889172][T16936] loop3: detected capacity change from 0 to 32768 [ 1159.900874][T16936] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.3155 (16936) [ 1159.958326][T16936] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1159.968907][T16936] BTRFS info (device loop3): using sha256 checksum algorithm [ 1160.112203][T16936] BTRFS info (device loop3): enabling ssd optimizations [ 1160.119975][T16936] BTRFS info (device loop3): turning on async discard [ 1160.129598][T16936] BTRFS info (device loop3): enabling free space tree [ 1160.686841][T16341] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1161.126579][T16964] netlink: 'syz.5.3160': attribute type 12 has an invalid length. [ 1161.203884][T15881] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 1161.213901][T16964] netlink: 'syz.5.3160': attribute type 29 has an invalid length. [ 1161.221884][T16964] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3160'. [ 1161.303372][T16964] netlink: 'syz.5.3160': attribute type 2 has an invalid length. [ 1161.373359][T16964] netlink: 'syz.5.3160': attribute type 3 has an invalid length. [ 1161.416286][T16964] netlink: 15 bytes leftover after parsing attributes in process `syz.5.3160'. [ 1161.463117][T15881] usb 5-1: Using ep0 maxpacket: 8 [ 1161.526476][T15881] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1161.553498][T15881] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1161.583433][T15881] usb 5-1: Product: syz [ 1161.587794][T15881] usb 5-1: Manufacturer: syz [ 1161.649817][T15881] usb 5-1: SerialNumber: syz [ 1161.699543][T15881] usb 5-1: config 0 descriptor?? [ 1161.811375][T15881] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1162.479172][T16986] loop5: detected capacity change from 0 to 164 [ 1162.729290][T16986] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1162.737710][T15873] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1162.944334][T15873] usb 4-1: Using ep0 maxpacket: 8 [ 1162.989952][T15873] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1163.031206][T15873] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1163.055867][T15881] gspca_sonixj: reg_w1 err -71 [ 1163.097198][T15873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1163.169540][T15873] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1163.183784][T15881] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 1163.248786][T15873] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.285055][T15881] usb 5-1: USB disconnect, device number 22 [ 1163.349323][T15873] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1163.380134][T15873] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1163.730890][T15873] usb 4-1: usb_control_msg returned -32 [ 1163.779130][T15873] usbtmc 4-1:16.0: can't read capabilities [ 1163.891642][T15881] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1164.107566][T15881] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1164.156168][T15881] usb 6-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 1164.209711][T15881] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1164.332307][ T24] usb 4-1: USB disconnect, device number 14 [ 1164.405152][T16994] usbtmc 4-1:16.0: usbtmc_ioctl_request failed -71 [ 1164.964811][T16996] loop4: detected capacity change from 0 to 32768 [ 1165.004422][T15881] usb 6-1: config 0 descriptor?? [ 1165.170993][T16996] JBD2: Ignoring recovery information on journal [ 1165.384429][T16996] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1165.517090][T16996] OCFS2: ERROR (device loop4): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bit count of 1024 [ 1165.535138][T16996] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 1165.545207][T16996] OCFS2: File system is now read-only. [ 1165.550942][T16996] (syz.4.3164,16996,0):ocfs2_search_chain:1888 ERROR: status = -30 [ 1165.559048][T16996] (syz.4.3164,16996,0):ocfs2_search_chain:2011 ERROR: status = -30 [ 1165.567318][T16996] (syz.4.3164,16996,0):ocfs2_claim_suballoc_bits:2098 ERROR: status = -30 [ 1165.576254][T16996] (syz.4.3164,16996,0):ocfs2_claim_suballoc_bits:2151 ERROR: status = -30 [ 1165.590486][T16996] (syz.4.3164,16996,0):__ocfs2_claim_clusters:2532 ERROR: status = -30 [ 1165.599137][T16996] (syz.4.3164,16996,0):__ocfs2_claim_clusters:2540 ERROR: status = -30 [ 1165.607791][T16996] (syz.4.3164,16996,0):ocfs2_block_group_alloc_contig:506 ERROR: status = -30 [ 1165.617040][T16996] (syz.4.3164,16996,0):ocfs2_block_group_alloc:780 ERROR: status = -30 [ 1165.625708][T16996] (syz.4.3164,16996,0):ocfs2_block_group_alloc:833 ERROR: status = -30 [ 1165.634685][T16996] (syz.4.3164,16996,0):ocfs2_reserve_suballoc_bits:908 ERROR: status = -30 [ 1165.645964][T16996] (syz.4.3164,16996,0):ocfs2_reserve_suballoc_bits:925 ERROR: status = -30 [ 1165.654966][T16996] (syz.4.3164,16996,0):ocfs2_reserve_new_metadata_blocks:1065 ERROR: status = -30 [ 1165.664545][T16996] (syz.4.3164,16996,0):ocfs2_reserve_new_metadata_blocks:1088 ERROR: status = -30 [ 1165.674087][T16996] (syz.4.3164,16996,0):ocfs2_lock_allocators:3065 ERROR: status = -30 [ 1165.682604][T16996] (syz.4.3164,16996,0):ocfs2_extend_allocation:593 ERROR: status = -30 [ 1165.695493][T16996] (syz.4.3164,16996,0):ocfs2_allocate_unwritten_extents:1506 ERROR: status = -30 [ 1165.704925][T16996] (syz.4.3164,16996,0):__ocfs2_change_file_space:2052 ERROR: status = -30 [ 1165.918648][T15881] holtek 0003:1241:5015.0028: hidraw0: USB HID v0.00 Device [HID 1241:5015] on usb-dummy_hcd.5-1/input0 [ 1165.968897][T12952] ocfs2: Unmounting device (7,4) on (node local) [ 1166.012586][T15881] holtek 0003:1241:5015.0028: no inputs found [ 1166.110861][T15881] usb 6-1: USB disconnect, device number 16 [ 1166.616927][T17016] loop7: detected capacity change from 0 to 1024 [ 1166.972015][T17016] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1167.071726][T17016] ext4 filesystem being mounted at /129/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1167.141898][T17009] fido_id[17009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1167.219282][T17016] EXT4-fs error (device loop7): ext4_map_blocks:818: inode #15: block 3: comm syz.7.3168: lblock 3 mapped to illegal pblock 3 (length 3) [ 1167.430585][T17016] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 1167.472470][T17016] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1167.472470][T17016] [ 1167.563210][T17029] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.3168: lblock 3 mapped to illegal pblock 3 (length 1) [ 1167.655581][T17029] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.3168: lblock 3 mapped to illegal pblock 3 (length 1) [ 1167.729932][T17011] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.3168: lblock 3 mapped to illegal pblock 3 (length 1) [ 1167.900561][T17011] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.3168: lblock 3 mapped to illegal pblock 3 (length 1) [ 1167.963831][T17011] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.3168: lblock 3 mapped to illegal pblock 3 (length 1) [ 1168.106172][T17016] EXT4-fs error (device loop7): ext4_map_blocks:776: inode #15: block 3: comm syz.7.3168: lblock 3 mapped to illegal pblock 3 (length 1) [ 1168.200335][T17023] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 1168.336137][T17039] EXT4-fs error (device loop7): ext4_ext_remove_space:2956: inode #15: comm syz.7.3168: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1168.415983][T17039] EXT4-fs error (device loop7) in ext4_setattr:5983: Corrupt filesystem [ 1168.678229][T17043] loop4: detected capacity change from 0 to 512 [ 1168.925402][T14451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1168.950576][T17043] EXT4-fs (loop4): 1 truncate cleaned up [ 1169.014462][T17043] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1169.198085][T17050] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 1169.225081][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 1169.225156][ T29] audit: type=1800 audit(1772172978.534:160): pid=17043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3176" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 1169.898617][T15881] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1169.931677][T12952] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.148859][T15881] usb 10-1: Using ep0 maxpacket: 16 [ 1170.161824][T17063] input: syz1 as /devices/virtual/input/input28 [ 1170.200244][T15881] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.245229][T15881] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1170.337806][T15881] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1170.365159][T15881] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.423637][T15881] usb 10-1: config 0 descriptor?? [ 1170.711428][T17071] macsec0: entered promiscuous mode [ 1170.764039][T17071] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3183'. [ 1170.831705][T17072] macsec0: left promiscuous mode [ 1170.893598][T17071] veth1_macvtap: left promiscuous mode [ 1171.200189][T17068] loop7: detected capacity change from 0 to 32768 [ 1171.247075][T17068] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.3184 (17068) [ 1171.283431][T17068] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1171.294236][T17068] BTRFS info (device loop7): using sha256 checksum algorithm [ 1171.320680][T15881] HID 045e:07da: Invalid code 65791 type 1 [ 1171.439249][T15881] input: HID 045e:07da as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/0003:045E:07DA.0029/input/input29 [ 1171.536344][T17068] BTRFS info (device loop7): enabling ssd optimizations [ 1171.543952][T17068] BTRFS info (device loop7): turning on async discard [ 1171.551104][T17068] BTRFS info (device loop7): enabling free space tree [ 1171.608338][T15881] microsoft 0003:045E:07DA.0029: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.9-1/input0 [ 1172.142002][T15881] usb 10-1: USB disconnect, device number 5 [ 1172.249753][T14451] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1172.909062][T17097] fido_id[17097]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 1173.017190][ T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 1173.196183][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 1173.229376][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 1173.257218][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1173.333052][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1173.386919][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1173.455393][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1173.542528][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1173.614767][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.964489][ T24] usb 4-1: usb_control_msg returned -32 [ 1174.006868][ T24] usbtmc 4-1:16.0: can't read capabilities [ 1175.303349][T17133] loop5: detected capacity change from 0 to 8 [ 1176.155783][ T24] usb 4-1: USB disconnect, device number 15 [ 1176.266397][T17142] tls_set_device_offload: netdev not found [ 1178.924686][T17183] loop5: detected capacity change from 0 to 128 [ 1179.089164][T17186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3215'. [ 1179.134670][ T29] audit: type=1800 audit(1772172988.429:161): pid=17183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3214" name="file1" dev="loop5" ino=1048787 res=0 errno=0 [ 1179.175335][T17186] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3215'. [ 1179.180351][T17183] FAT-fs (loop5): error, invalid FAT chain (i_pos 548, last_block 8) [ 1179.218161][ T29] audit: type=1800 audit(1772172988.469:162): pid=17183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3214" name="file1" dev="loop5" ino=1048787 res=0 errno=0 [ 1179.224104][T17183] FAT-fs (loop5): Filesystem has been set read-only [ 1179.287317][T17186] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 1179.367103][T17183] FAT-fs (loop5): error, corrupted file size (i_pos 548, 522) [ 1179.384533][T17186] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1179.447280][T17186] debugfs: 'hsr1' already exists in 'hsr' [ 1179.484005][T17186] Cannot create hsr debugfs directory [ 1180.209638][T17192] loop4: detected capacity change from 0 to 32768 [ 1180.370914][T17192] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 1180.477768][T17192] JBD2: Ignoring recovery information on journal [ 1180.571113][T17192] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 1180.649893][T17192] ocfs2: Unmounting device (7,4) on (node local) [ 1182.214542][T17215] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1182.257690][T17215] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 1184.950443][T17215] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1185.014533][T17299] pim6reg: entered allmulticast mode [ 1185.021496][T17215] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 1185.294362][T17304] pim6reg: left allmulticast mode [ 1185.627527][T17215] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1185.670884][T17215] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1185.759655][T17215] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1185.823106][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.828152][T17215] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1185.829666][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1185.841273][T11895] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1186.061760][T11895] usb 10-1: Using ep0 maxpacket: 8 [ 1186.079643][T11895] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1186.102765][T11895] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1186.137026][T11895] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1186.171345][T11895] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1186.183331][T11895] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1186.198935][T11895] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1186.220174][T11895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.475948][T11895] usb 10-1: GET_CAPABILITIES returned f8 [ 1186.530429][T11895] usbtmc 10-1:16.0: can't read capabilities [ 1186.807893][T11895] usb 10-1: USB disconnect, device number 6 [ 1186.845202][T17311] usbtmc 10-1:16.0: usb_control_msg returned -71 [ 1186.894946][T17324] usbtmc 10-1:16.0: send_request_dev_dep_msg_in returned -19 [ 1187.380123][T11895] usb 6-1: new full-speed USB device number 17 using dummy_hcd [ 1187.585146][T11895] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1187.625820][T11895] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.666848][T11895] usb 6-1: Product: syz [ 1187.682194][T11895] usb 6-1: Manufacturer: syz [ 1187.687002][T11895] usb 6-1: SerialNumber: syz [ 1187.753065][T11895] usb 6-1: config 0 descriptor?? [ 1188.314824][T11895] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1188.367611][T11895] gspca_sunplus: reg_w_riv err -71 [ 1188.390035][T11895] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1188.449490][T11895] usb 6-1: USB disconnect, device number 17 [ 1189.039037][T17356] loop9: detected capacity change from 0 to 512 [ 1189.137580][T17356] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002] [ 1189.221066][T17356] System zones: 1-12 [ 1189.225880][T17356] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1189.349762][T17356] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.3249: invalid indirect mapped block 8 (level 2) [ 1189.391086][T17356] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1189.398822][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1189.414818][ C0] EXT4-fs (loop9): initial error at time 1772172998: ext4_free_branches:1023: inode 11 [ 1189.424858][ C0] EXT4-fs (loop9): last error at time 1772172998: ext4_free_branches:1023: inode 11 [ 1189.475496][T17356] EXT4-fs (loop9): 1 truncate cleaned up [ 1189.484980][T17356] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1190.049065][T16200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.816626][T17388] loop6: detected capacity change from 0 to 2640 [ 1190.853912][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.896424][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1190.940373][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1191.037083][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1191.064499][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1191.074461][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1191.074548][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1191.074729][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1191.084465][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1191.084605][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 1191.086554][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1191.130634][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 1191.140941][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1191.151057][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 1191.178507][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1191.202641][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1191.258237][T17388] ldm_validate_partition_table(): Disk read failed. [ 1191.265092][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1191.398608][T17388] Buffer I/O error on dev loop6, logical block 0, async page read [ 1191.428036][T17388] Dev loop6: unable to read RDB block 0 [ 1191.454088][T17388] loop6: unable to read partition table [ 1191.499641][T17388] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 1192.032249][T17406] fuse: Bad value for 'fd' [ 1192.773278][T15881] hid-generic 0000:0000:0000.002A: unknown main item tag 0x0 [ 1192.847827][T15881] hid-generic 0000:0000:0000.002A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1193.278114][T17417] loop5: detected capacity change from 0 to 4096 [ 1193.588936][T17423] fido_id[17423]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/0000:0000:0000.002A/report_descriptor': No such file or directory [ 1194.712041][T17441] loop5: detected capacity change from 0 to 512 [ 1194.800362][T17441] EXT4-fs (loop5): invalid inodes per group: 32 [ 1194.800362][T17441] [ 1195.207639][T15881] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1195.395310][T15881] usb 8-1: Using ep0 maxpacket: 16 [ 1195.470385][T15881] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1195.527912][T15881] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1195.560789][T15881] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1195.577863][T15881] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1195.635972][T15881] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1195.686197][T15873] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1195.705446][T15881] usb 8-1: config 0 descriptor?? [ 1195.923773][T15873] usb 10-1: Using ep0 maxpacket: 8 [ 1195.964578][T15873] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 1195.997012][T15873] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1196.054270][T15873] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1196.086120][T15873] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1196.120774][T15873] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1196.165660][T15873] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1196.231193][T15873] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1196.439620][T17444] loop7: detected capacity change from 0 to 512 [ 1196.781373][T15881] usb 8-1: USB disconnect, device number 6 [ 1197.365287][T17460] loop5: detected capacity change from 0 to 32768 [ 1197.415173][T17460] JBD2: Ignoring recovery information on journal [ 1197.536542][T17460] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode. [ 1197.883210][T12568] ocfs2: Unmounting device (7,5) on (node local) [ 1198.957154][T15881] usb 10-1: USB disconnect, device number 7 [ 1200.809837][T17500] sock: sock_set_timeout: `syz.5.3297' (pid 17500) tries to set negative timeout [ 1204.507703][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1204.525103][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1204.541444][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1204.568401][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1204.603463][ T5775] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1204.814789][T10767] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1204.842493][T10767] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1204.853422][T10767] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1204.892632][T10767] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1204.932883][T10767] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1205.131417][ T6921] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1205.320955][ T6921] usb 4-1: Using ep0 maxpacket: 8 [ 1205.394165][ T6921] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 1205.442920][ T6921] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.485314][ T6921] usb 4-1: Product: syz [ 1205.489676][ T6921] usb 4-1: Manufacturer: syz [ 1205.550836][ T6921] usb 4-1: SerialNumber: syz [ 1205.603778][ T6921] usb 4-1: config 0 descriptor?? [ 1205.677314][ T6921] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 1206.795499][T17553] chnl_net:caif_netlink_parms(): no params data found [ 1206.980271][T10767] Bluetooth: hci0: command tx timeout [ 1207.162918][ T6921] gspca_sonixj: i2c_w8 err -71 [ 1207.260315][ T6921] sonixj 4-1:0.0: probe with driver sonixj failed with error -71 [ 1207.300593][ T6921] usb 4-1: USB disconnect, device number 16 [ 1207.990068][T15873] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1208.199481][T15873] usb 10-1: Using ep0 maxpacket: 32 [ 1208.274059][T15873] usb 10-1: config 0 has an invalid interface number: 188 but max is 0 [ 1208.325682][T15873] usb 10-1: config 0 has no interface number 0 [ 1208.361761][T15873] usb 10-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1208.472809][T15873] usb 10-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1208.537479][T15873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.580523][T15873] usb 10-1: Product: syz [ 1208.589903][T15873] usb 10-1: Manufacturer: syz [ 1208.594932][T15873] usb 10-1: SerialNumber: syz [ 1208.647704][T15873] usb 10-1: config 0 descriptor?? [ 1208.702235][T17594] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1208.862458][T17553] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.878635][T17553] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.933602][T17553] bridge_slave_0: entered allmulticast mode [ 1208.958804][T17553] bridge_slave_0: entered promiscuous mode [ 1209.057296][T17553] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.065215][T10767] Bluetooth: hci0: command tx timeout [ 1209.079849][T17553] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.087714][T17594] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1209.088083][T17553] bridge_slave_1: entered allmulticast mode [ 1209.132540][T17553] bridge_slave_1: entered promiscuous mode [ 1209.541529][T17553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.699918][T15873] asix 10-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32 [ 1209.776282][T15873] asix 10-1:0.188: probe with driver asix failed with error -32 [ 1210.549596][T17553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.611987][T17628] loop9: detected capacity change from 0 to 256 [ 1210.795747][T15873] kernel write not supported for file /vcs (pid: 15873 comm: kworker/0:6) [ 1210.983482][T17619] loop7: detected capacity change from 0 to 65536 [ 1211.069719][T17619] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1211.140203][T10767] Bluetooth: hci0: command tx timeout [ 1211.389884][ T5832] usb 10-1: USB disconnect, device number 8 [ 1212.178287][T17644] loop5: detected capacity change from 0 to 32768 [ 1212.188050][T17644] xfs: Deprecated parameter 'attr2' [ 1212.193438][T17644] XFS: attr2 mount option is deprecated. [ 1212.235557][T17619] XFS (loop7): Ending clean mount [ 1212.241180][T17553] team0: Port device team_slave_0 added [ 1212.262688][T17644] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1212.290978][T17619] XFS (loop7): Quotacheck needed: Please wait. [ 1212.383507][T17619] XFS (loop7): Quotacheck: Done. [ 1212.447553][T17553] team0: Port device team_slave_1 added [ 1212.634645][T17644] XFS (loop5): Ending clean mount [ 1212.683237][T17644] XFS (loop5): Quotacheck needed: Please wait. [ 1212.788248][T14451] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1212.910167][T17644] XFS (loop5): Quotacheck: Done. [ 1213.092231][T17553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1213.165704][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.227030][T10767] Bluetooth: hci0: command tx timeout [ 1213.286012][T17553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1213.332404][T17553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1213.343773][T17553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1213.382357][T17553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.454451][T12568] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1214.126202][T17553] hsr_slave_0: entered promiscuous mode [ 1214.188489][T17553] hsr_slave_1: entered promiscuous mode [ 1214.242688][T17553] debugfs: 'hsr0' already exists in 'hsr' [ 1214.276708][T17553] Cannot create hsr debugfs directory [ 1217.110121][T17690] loop3: detected capacity change from 0 to 8192 [ 1217.615562][ T5832] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1217.725188][ T29] audit: type=1800 audit(1772173283.042:163): pid=17690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3341" name="bus" dev="loop3" ino=1048788 res=0 errno=0 [ 1217.845655][ T5832] usb 6-1: Using ep0 maxpacket: 8 [ 1217.862312][ T5832] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1217.897435][ T5832] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1217.953472][ T5832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1217.981780][ T5832] usb 6-1: config 0 descriptor?? [ 1218.269271][ T5832] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 1218.775356][T17711] veth0: entered promiscuous mode [ 1218.810205][T15873] usb 6-1: USB disconnect, device number 18 [ 1218.820914][T17711] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3347'. [ 1219.391683][T17553] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1219.540179][T17553] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1219.588529][T17718] loop7: detected capacity change from 0 to 1024 [ 1219.671235][T17553] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1219.730482][T17718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1219.830225][T17553] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1219.916153][T17718] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 1220.011815][T17718] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1220.084075][T17718] EXT4-fs (loop7): This should not happen!! Data will be lost [ 1220.084075][T17718] [ 1220.123665][T17718] EXT4-fs (loop7): Total free blocks count 0 [ 1220.168485][T17718] EXT4-fs (loop7): Free/Dirty block details [ 1220.192845][T17718] EXT4-fs (loop7): free_blocks=20480 [ 1220.223549][T17718] EXT4-fs (loop7): dirty_blocks=80 [ 1220.229200][T17718] EXT4-fs (loop7): Block reservation details [ 1220.283559][T17718] EXT4-fs (loop7): i_reserved_data_blocks=5 [ 1220.501468][T17734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1220.562258][T17734] netlink: 16 bytes leftover after parsing attributes in process `syz.3.3353'. [ 1220.724797][T14369] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 67 with error 28 [ 1221.294338][T17553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1221.304859][T17743] loop7: detected capacity change from 0 to 128 [ 1221.583520][T17553] 8021q: adding VLAN 0 to HW filter on device team0 [ 1221.716926][T14373] bridge0: port 1(bridge_slave_0) entered blocking state [ 1221.724469][T14373] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1221.850252][T14373] bridge0: port 2(bridge_slave_1) entered blocking state [ 1221.857784][T14373] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1223.505032][T17752] loop3: detected capacity change from 0 to 40427 [ 1223.514661][T17752] F2FS-fs: heap/no_heap options were deprecated [ 1223.530050][T17752] F2FS-fs (loop3): build fault injection rate: 19 [ 1223.536773][T17752] F2FS-fs (loop3): build fault injection type: 0x3bfe8c [ 1223.725105][T17752] F2FS-fs (loop3): invalid crc value [ 1223.789791][T17752] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xd0b/0x1e80 [ 1224.038336][T17752] F2FS-fs (loop3): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x1d2/0x4b0 [ 1224.085993][T17752] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1224.163425][T17752] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1224.239023][T17752] F2FS-fs (loop3): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0xe65/0x15d0 [ 1224.254828][T17752] F2FS-fs (loop3): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098] [ 1224.595608][T17286] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1224.828451][T17553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.897632][T17768] netlink: 'syz.9.3365': attribute type 12 has an invalid length. [ 1225.336473][T17773] syzkaller1: entered promiscuous mode [ 1225.365657][T17773] syzkaller1: entered allmulticast mode [ 1225.861131][T17553] veth0_vlan: entered promiscuous mode [ 1226.007012][T17553] veth1_vlan: entered promiscuous mode [ 1226.301631][T17779] loop7: detected capacity change from 0 to 512 [ 1226.342666][T17779] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1226.446272][T17779] EXT4-fs (loop7): 1 truncate cleaned up [ 1226.532816][T17779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.583300][T17553] veth0_macvtap: entered promiscuous mode [ 1226.620288][ T29] audit: type=1800 audit(1772173291.937:164): pid=17779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3370" name="file1" dev="loop7" ino=15 res=0 errno=0 [ 1226.696601][T17553] veth1_macvtap: entered promiscuous mode [ 1226.997470][T17553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1227.082195][T17553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1227.254829][T14322] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.305133][T14322] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.375628][T14322] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1227.415658][T14322] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1228.195064][T14451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.729590][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1230.592779][ T6921] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1230.790445][ T6921] usb 6-1: Using ep0 maxpacket: 8 [ 1230.869813][ T6921] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1230.888189][ T6921] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1230.922521][ T6921] usb 6-1: Product: syz [ 1230.926895][ T6921] usb 6-1: Manufacturer: syz [ 1231.006973][ T6921] usb 6-1: SerialNumber: syz [ 1231.043507][ T6921] usb 6-1: config 0 descriptor?? [ 1231.109049][ T6921] gspca_main: se401-2.14.0 probing 047d:5003 [ 1231.498517][ T6921] gspca_se401: Frame size: 0x2 bayer [ 1231.503987][ T6921] gspca_se401: Frame size: 0x127 bayer [ 1231.540050][ T6921] gspca_se401: Frame size: 256x0 bayer [ 1231.566878][ T6921] gspca_se401: Frame size: 0x1 1/4th janggu [ 1231.705821][ T6921] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input30 [ 1231.820126][ T6921] usb 6-1: USB disconnect, device number 19 [ 1231.890007][ T5840] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1232.081599][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 1232.128983][ T5840] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1232.197511][ T5840] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1232.297059][ T5840] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1232.337427][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1232.377569][ T5840] usb 4-1: Product: syz [ 1232.381953][ T5840] usb 4-1: Manufacturer: syz [ 1232.386712][ T5840] usb 4-1: SerialNumber: syz [ 1232.504067][ T5840] usb 4-1: config 0 descriptor?? [ 1232.630872][ T5840] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1232.682227][ T5840] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1233.297283][ T5840] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1233.321981][ T5840] em28xx 4-1:0.0: Config register raw data: 0x73 [ 1233.364884][ T5840] em28xx 4-1:0.0: I2S Audio (3 sample rate(s)) [ 1233.389289][ T5840] em28xx 4-1:0.0: No AC97 audio processor [ 1233.976959][ T5840] usb 4-1: USB disconnect, device number 17 [ 1234.918402][T17286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.968634][T17286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.222960][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1235.257875][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1235.571105][T17878] loop9: detected capacity change from 0 to 1024 [ 1235.862513][T17884] loop3: detected capacity change from 0 to 128 [ 1235.965124][T17884] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1236.011062][T17884] hpfs: filesystem error: improperly stopped [ 1236.036590][T17884] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1236.054522][T17878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1236.109992][T17884] hpfs: You really don't want any checks? You are crazy... [ 1236.138161][T17884] hpfs: hpfs_map_sector(): read error [ 1236.170011][T17884] hpfs: code page support is disabled [ 1236.202091][T17884] hpfs: hpfs_map_4sectors(): unaligned read [ 1236.274050][T17884] hpfs: hpfs_map_4sectors(): unaligned read [ 1236.321415][T17884] hpfs: filesystem error: unable to find root dir [ 1236.968378][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1237.508534][T17878] UDF-fs: warning (device loop9): udf_truncate_tail_extent: Too long extent after EOF in inode 839: i_size: 17247272960 lbcount: 17247277056 extent 17+6656 [ 1238.264461][ T5840] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1238.482463][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 1238.527185][ T5840] usb 4-1: config 0 has an invalid interface number: 240 but max is 0 [ 1238.574369][ T5840] usb 4-1: config 0 has no interface number 0 [ 1238.606044][ T5840] usb 4-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 1238.625040][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1238.633251][ T5840] usb 4-1: Product: syz [ 1238.661628][ T5840] usb 4-1: Manufacturer: syz [ 1238.697300][ T5840] usb 4-1: SerialNumber: syz [ 1238.756584][ T5840] usb 4-1: config 0 descriptor?? [ 1238.837609][ T5840] gspca_main: spca508-2.14.0 probing 041e:4018 [ 1238.996019][ T5840] gspca_spca508: reg_read err -32 [ 1239.019962][ T5840] gspca_spca508: reg_read err -32 [ 1239.074326][ T5840] gspca_spca508: reg_read err -32 [ 1239.105779][ T5840] gspca_spca508: reg_read err -32 [ 1239.130371][ T5840] gspca_spca508: reg_read err -32 [ 1239.244223][T15873] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 1239.319306][T17927] loop9: detected capacity change from 0 to 512 [ 1239.352422][ T5840] gspca_spca508: reg write: error -71 [ 1239.382278][ T5840] spca508 4-1:0.240: probe with driver spca508 failed with error -71 [ 1239.429292][T15873] usb 8-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 1239.485413][ T5840] usb 4-1: USB disconnect, device number 18 [ 1239.544551][T17927] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.3407: inode has both inline data and extents flags [ 1239.558507][T15873] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1239.617618][T15873] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 1239.686754][T17927] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1239.687162][T15873] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1239.696625][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1239.696721][ C0] EXT4-fs (loop9): initial error at time 1772173305: ext4_orphan_get:1391: inode 15 [ 1239.696878][ C0] EXT4-fs (loop9): last error at time 1772173305: ext4_orphan_get:1391: inode 15 [ 1239.731493][T17927] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.3407: couldn't read orphan inode 15 (err -117) [ 1239.792708][T17927] loop9: lost filesystem error report for type 5 error -117 [ 1239.806631][T17933] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3410'. [ 1239.833759][T17927] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.848114][T15873] usb 8-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 1239.861705][T15873] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1239.936325][T15873] usb 8-1: config 0 descriptor?? [ 1240.445840][T15873] hid-picolcd 0003:04D8:C002.002C: ignoring exceeding usage max [ 1240.668935][T15873] hid-picolcd 0003:04D8:C002.002C: No report with id 0x11 found [ 1240.784039][T15873] usb 8-1: USB disconnect, device number 7 [ 1240.954934][T16200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1242.232567][ T6921] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1242.477701][ T6921] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1242.510232][ T6921] usb 8-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config [ 1242.672469][ T6921] usb 8-1: string descriptor 0 read error: -22 [ 1242.734366][ T6921] usb 8-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=26.db [ 1242.825621][ T6921] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1243.172503][ T6921] usb 8-1: reset high-speed USB device number 8 using dummy_hcd [ 1243.861969][ T6921] usb 8-1: device descriptor read/64, error -71 [ 1243.979387][T17988] Bluetooth: MGMT ver 1.23 [ 1244.142367][ T6921] usb 8-1: reset high-speed USB device number 8 using dummy_hcd [ 1244.362514][ T6921] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1244.395754][ T6921] usb 8-1: device firmware changed [ 1244.441367][ T6921] usb 8-1: USB disconnect, device number 8 [ 1244.521530][T11895] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1244.727020][T11895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1244.740285][T11895] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1244.769378][T11895] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1244.789461][T11895] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1244.821255][T11895] usb 6-1: Manufacturer: syz [ 1244.845265][T11895] usb 6-1: config 0 descriptor?? [ 1246.102136][T11895] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002D/input/input31 [ 1246.289105][T11895] input: syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.002D/input/input32 [ 1246.383839][T18008] loop9: detected capacity change from 0 to 4096 [ 1246.429599][T11895] uclogic 0003:256C:006D.002D: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.5-1/input0 [ 1246.524999][T11895] usb 6-1: USB disconnect, device number 20 [ 1246.863831][T18021] bridge0: the hash_elasticity option has been deprecated and is always 16 [ 1246.881497][T18021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1246.890934][T18021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1247.231957][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1247.238656][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1248.198518][T18025] fido_id[18025]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1248.675325][T18039] netlink: 'syz.9.3444': attribute type 29 has an invalid length. [ 1248.797883][T18039] netlink: 'syz.9.3444': attribute type 29 has an invalid length. [ 1248.977269][T18042] netlink: 'syz.9.3444': attribute type 32 has an invalid length. [ 1249.034452][T18042] netlink: 500 bytes leftover after parsing attributes in process `syz.9.3444'. [ 1250.307165][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3448'. [ 1250.721613][ T29] audit: type=1326 audit(1772173316.069:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18060 comm="syz.9.3452" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f540cf9bf79 code=0x0 [ 1250.870354][T18063] loop9: detected capacity change from 0 to 512 [ 1250.938684][T18063] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 1251.075681][T18063] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1251.138801][T18063] EXT4-fs error (device loop9): ext4_map_blocks:776: inode #2: block 18: comm syz.9.3452: lblock 23 mapped to illegal pblock 18 (length 1) [ 1251.842259][T16200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.955937][T18088] xt_hashlimit: size too large, truncated to 1048576 [ 1252.811238][T18095] loop9: detected capacity change from 0 to 512 [ 1252.956107][T18095] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1253.117734][T18095] EXT4-fs (loop9): 1 truncate cleaned up [ 1253.210386][T18095] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1253.226491][T18102] input: syz0 as /devices/virtual/input/input33 [ 1253.405087][ T29] audit: type=1800 audit(1772173318.750:166): pid=18095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.3461" name="file1" dev="loop9" ino=15 res=0 errno=0 [ 1253.597408][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1254.837725][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3468'. [ 1254.870691][T18122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3468'. [ 1255.086769][T16200] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.212642][T18126] loop7: detected capacity change from 0 to 4096 [ 1255.227082][T18129] loop2: detected capacity change from 0 to 256 [ 1255.238907][T18129] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1255.320232][T18129] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1255.400680][T18126] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1256.375633][T14451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1256.662341][T18153] netlink: 'syz.5.3478': attribute type 12 has an invalid length. [ 1257.376812][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3481'. [ 1257.630157][T18165] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3481'. [ 1257.640239][T14352] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 1257.671539][T14352] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 1257.733601][T14352] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 1257.749557][T18168] loop9: detected capacity change from 0 to 2048 [ 1257.784713][T14352] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 1257.848159][T18168] UDF-fs: warning (device loop9): udf_load_logicalvol: Damaged or missing LVID, forcing readonly mount [ 1259.388530][T18186] 9p: Bad value for 'wfdno' [ 1265.111749][T18309] loop9: detected capacity change from 0 to 1024 [ 1265.187672][T18309] EXT4-fs: Ignoring removed nobh option [ 1265.243447][T18309] EXT4-fs: inline encryption not supported [ 1265.500293][T18309] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1265.792667][T18309] loop9: detected capacity change from 1024 to 64 [ 1265.825142][T18323] overlayfs: failed to clone upperpath [ 1266.157821][T18329] loop7: detected capacity change from 0 to 128 [ 1266.269316][T16200] EXT4-fs error (device loop9): ext4_readdir:265: inode #2: block 16: comm syz-executor: path /68/file1: bad entry in directory: inode out of bounds - offset=0, inode=201326592, rec_len=256, size=1024 fake=0 [ 1266.403326][T18329] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1266.437399][T18329] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.821363][T14451] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1266.822244][T18048] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1266.877402][T18317] kmmpd-loop9: attempt to access beyond end of device [ 1266.877402][T18317] loop9: rw=8402945, sector=128, nr_sectors = 2 limit=64 [ 1266.948778][T18317] buffer_io_error: 11 callbacks suppressed [ 1266.948855][T18317] Buffer I/O error on dev loop9, logical block 64, lost sync page write [ 1267.503635][ T8916] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1267.845455][ T8916] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.114647][ T8916] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1268.352046][ T8916] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1269.179677][ T8916] bridge_slave_1: left allmulticast mode [ 1269.185594][ T8916] bridge_slave_1: left promiscuous mode [ 1269.220009][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1269.252600][ T8916] bridge_slave_0: left allmulticast mode [ 1269.258442][ T8916] bridge_slave_0: left promiscuous mode [ 1269.287254][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1270.070501][ T8916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1270.162265][ T8916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1270.219415][ T8916] bond0 (unregistering): Released all slaves [ 1271.076850][ T8916] hsr_slave_0: left promiscuous mode [ 1271.125865][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1271.137672][ T8916] hsr_slave_1: left promiscuous mode [ 1271.145816][ T5775] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1271.164126][ T5775] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1271.179047][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1271.193482][ T5775] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1271.234402][ T5775] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1271.239526][ T8916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1271.320261][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1271.351392][ T8916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1271.437456][ T8916] veth1_macvtap: left promiscuous mode [ 1271.443291][ T8916] veth0_macvtap: left promiscuous mode [ 1271.469013][ T8916] veth1_vlan: left promiscuous mode [ 1271.479164][ T8916] veth0_vlan: left promiscuous mode [ 1272.499849][T18406] loop5: detected capacity change from 0 to 512 [ 1272.563228][T18406] msdos: Bad value for 'uid' [ 1272.616768][T18406] msdos: Bad value for 'uid' [ 1273.347869][ T5775] Bluetooth: hci2: command tx timeout [ 1273.629275][T18413] fuse: root generation should be zero [ 1273.686886][T11895] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 1273.877531][T11895] usb 8-1: Using ep0 maxpacket: 16 [ 1273.906121][T11895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1273.987188][T11895] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1274.035985][T11895] usb 8-1: New USB device found, idVendor=05ac, idProduct=0229, bcdDevice= 0.00 [ 1274.057147][T11895] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1274.324315][T11895] usb 8-1: config 0 descriptor?? [ 1274.962406][ T8916] team0 (unregistering): Port device team_slave_1 removed [ 1275.106969][T18426] loop7: detected capacity change from 0 to 512 [ 1275.139699][ T8916] team0 (unregistering): Port device team_slave_0 removed [ 1275.220568][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.250482][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.290596][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.320850][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.336023][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.371695][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.417443][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.425896][ T5775] Bluetooth: hci2: command tx timeout [ 1275.478517][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.522417][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.575984][T11895] apple 0003:05AC:0229.002E: unknown main item tag 0x0 [ 1275.718983][T11895] apple 0003:05AC:0229.002E: hidraw0: USB HID v20.00 Device [HID 05ac:0229] on usb-dummy_hcd.7-1/input0 [ 1276.121243][T15873] usb 8-1: USB disconnect, device number 9 [ 1276.560647][T18434] fido_id[18434]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1277.371624][T18455] overlayfs: upper fs does not support file handles, falling back to index=off. [ 1277.513963][ T5775] Bluetooth: hci2: command tx timeout [ 1277.568937][ T8916] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1277.881450][T18468] loop7: detected capacity change from 0 to 512 [ 1277.983367][ T8916] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.031249][T18468] EXT4-fs (loop7): 1 truncate cleaned up [ 1278.139014][T18468] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1278.184090][ T8916] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.265328][T18385] chnl_net:caif_netlink_parms(): no params data found [ 1278.310068][T18468] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.3556: bg 0: block 465: padding at end of block bitmap is not set [ 1278.423769][T18468] EXT4-fs (loop7): Remounting filesystem read-only [ 1278.468067][ T8916] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1278.915786][T14451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1279.419461][ T8916] bridge_slave_1: left allmulticast mode [ 1279.454078][ T8916] bridge_slave_1: left promiscuous mode [ 1279.480376][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 1279.585097][ T8916] bridge_slave_0: left allmulticast mode [ 1279.611060][ T5775] Bluetooth: hci2: command tx timeout [ 1279.623725][ T8916] bridge_slave_0: left promiscuous mode [ 1279.630197][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 1281.111852][ T8916] dvmrp0 (unregistering): left allmulticast mode [ 1281.324911][ T8916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1281.434408][ T8916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1281.480076][ T8916] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1281.510652][ T8916] bond0 (unregistering): Released all slaves [ 1282.031826][T18385] bridge0: port 1(bridge_slave_0) entered blocking state [ 1282.040004][T18385] bridge0: port 1(bridge_slave_0) entered disabled state [ 1282.049353][T18385] bridge_slave_0: entered allmulticast mode [ 1282.078813][T18385] bridge_slave_0: entered promiscuous mode [ 1282.128470][T18385] bridge0: port 2(bridge_slave_1) entered blocking state [ 1282.148028][T18385] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.177996][T18385] bridge_slave_1: entered allmulticast mode [ 1282.211787][T18385] bridge_slave_1: entered promiscuous mode [ 1282.564449][ T8916] hsr_slave_0: left promiscuous mode [ 1282.591721][ T8916] hsr_slave_1: left promiscuous mode [ 1282.601410][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1282.630010][ T8916] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1282.669617][ T8916] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1282.703255][ T8916] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1282.755680][ T8916] veth0_macvtap: left promiscuous mode [ 1282.773994][ T8916] veth1_vlan: left promiscuous mode [ 1282.783033][ T8916] veth0_vlan: left promiscuous mode [ 1282.818689][T18534] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3573'. [ 1284.812767][ T8916] team0 (unregistering): Port device team_slave_1 removed [ 1284.879043][ T8916] team0 (unregistering): Port device team_slave_0 removed [ 1284.921772][T18572] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3582'. [ 1285.470072][T18385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.634517][T18572] vxlan0: entered promiscuous mode [ 1285.718196][T18385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1285.915889][T14335] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1285.956093][T14335] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1286.109188][T14335] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1286.162519][T14335] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1286.262422][T18385] team0: Port device team_slave_0 added [ 1286.323328][T18385] team0: Port device team_slave_1 added [ 1286.602196][T18385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1286.639466][T18385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.734825][T18385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1286.813157][T18385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1286.844704][T18385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1286.889611][T18385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1286.983534][T18606] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3591'. [ 1287.269615][T18385] hsr_slave_0: entered promiscuous mode [ 1287.280116][T14343] Bluetooth: hci5: Frame reassembly failed (-84) [ 1287.314858][T18385] hsr_slave_1: entered promiscuous mode [ 1287.344174][T18385] debugfs: 'hsr0' already exists in 'hsr' [ 1287.351390][T18385] Cannot create hsr debugfs directory [ 1288.151901][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 1289.340360][ T5775] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1289.392725][T18385] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1289.522426][T18385] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1289.601214][T18385] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1289.667737][T18385] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1290.815915][T18385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1291.060159][T18385] 8021q: adding VLAN 0 to HW filter on device team0 [ 1291.848805][T18664] loop7: detected capacity change from 0 to 32768 [ 1291.858620][T18664] xfs: Deprecated parameter 'noikeep' [ 1291.864186][T18664] XFS: noikeep mount option is deprecated. [ 1291.942174][T14335] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.944679][T18664] XFS (loop7): DAX unsupported by block device. Turning off DAX. [ 1291.949780][T14335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.966405][T18664] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1292.100335][T14335] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.108114][T14335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1292.327900][T18664] XFS (loop7): Ending clean mount [ 1292.349073][T18664] XFS (loop7): Quotacheck needed: Please wait. [ 1292.464788][T18664] XFS (loop7): Quotacheck: Done. [ 1292.958798][T18687] syz_tun: entered allmulticast mode [ 1293.021226][T18686] syz_tun: left allmulticast mode [ 1293.400295][T14451] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1293.849837][T18697] fuse: Bad value for 'fd' [ 1294.474031][T18385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1296.731208][T18741] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3944. macoff=96 [ 1296.819019][T18385] veth0_vlan: entered promiscuous mode [ 1297.811859][T18385] veth1_vlan: entered promiscuous mode [ 1299.313234][T18385] veth0_macvtap: entered promiscuous mode [ 1299.661788][T18385] veth1_macvtap: entered promiscuous mode [ 1300.040504][T18385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1300.112043][T18811] xt_hashlimit: size too large, truncated to 1048576 [ 1300.219454][T18385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1300.365516][T17289] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.437382][T17289] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.481456][T17289] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1300.683182][T17289] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1301.247691][T18833] fuse: Bad value for 'fd' [ 1301.899054][T18842] netlink: 'syz.7.3640': attribute type 27 has an invalid length. [ 1302.259216][T18847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3642'. [ 1303.054439][T18842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1303.099025][T18842] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1303.509312][T18842] vxlan0: left promiscuous mode [ 1303.580551][T14352] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.621044][T14352] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.648287][T14352] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.695644][T14352] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.779059][T14352] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.846299][T14352] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1303.880111][T14352] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1303.922582][T14352] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.872438][T18889] loop7: detected capacity change from 0 to 256 [ 1304.953427][T18889] exfat: Unknown parameter '00000000000000000000000' [ 1305.923879][T18914] syz_tun: entered allmulticast mode [ 1305.981335][T18912] syz_tun: left allmulticast mode [ 1306.154740][T18917] fuse: Bad value for 'fd' [ 1306.583114][T18928] fuse: Bad value for 'fd' [ 1307.929997][ T29] audit: type=1804 audit(1772173373.277:167): pid=18944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.3669" name="file1" dev="tmpfs" ino=356 res=1 errno=0 [ 1308.673880][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1308.684100][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1309.398992][T14322] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.407006][T14322] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1309.774291][T17285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1309.810299][T17285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1310.794994][T18980] loop7: detected capacity change from 0 to 512 [ 1310.886213][T18980] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1310.999342][T18980] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1311.098384][T18980] ext4 filesystem being mounted at /240/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1311.632500][T14451] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1312.380957][T19001] team0: Port device team_slave_1 removed [ 1312.912551][T19017] loop8: detected capacity change from 0 to 512 [ 1313.158391][T19017] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1313.196358][T19017] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1313.799568][T18385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1314.326461][ T5832] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 1314.496745][ T5832] usb 8-1: Using ep0 maxpacket: 32 [ 1314.524800][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.555568][ T5832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1314.598988][ T5832] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 1314.627731][ T5832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.682025][ T5832] usb 8-1: config 0 descriptor?? [ 1315.180506][ T5832] hid_parser_main: 150 callbacks suppressed [ 1315.206365][ T5832] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 1315.224158][ T5832] savu 0003:1E7D:2D5A.002F: unknown main item tag 0x0 [ 1315.323111][ T5832] savu 0003:1E7D:2D5A.002F: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.7-1/input0 [ 1315.456191][ T5832] usb 8-1: USB disconnect, device number 10 [ 1317.125413][T19064] loop8: detected capacity change from 0 to 65536 [ 1317.125583][T19062] fido_id[19062]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1317.239501][T19064] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1317.446166][T19064] XFS (loop8): Ending clean mount [ 1317.584911][T18385] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1317.991749][T19090] loop7: detected capacity change from 0 to 164 [ 1318.156480][T19090] rock: directory entry would overflow storage [ 1318.206362][T19090] rock: sig=0x4d4e, size=5, remaining=4 [ 1318.215588][T19100] isofs: isofs_export_get_parent(): child directory not normalized! [ 1318.217669][T19097] netlink: 'syz.8.3711': attribute type 4 has an invalid length. [ 1318.294627][T19090] isofs: isofs_export_get_parent(): child directory not normalized! [ 1320.997448][T15881] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1321.193600][T15881] usb 8-1: Using ep0 maxpacket: 8 [ 1321.253855][T15881] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1321.314315][T15881] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1321.322542][T15881] usb 8-1: Product: syz [ 1321.376712][T15881] usb 8-1: Manufacturer: syz [ 1321.381513][T15881] usb 8-1: SerialNumber: syz [ 1321.436699][T15881] usb 8-1: config 0 descriptor?? [ 1321.718994][T15881] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1322.775652][T15881] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1322.827823][T19161] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1322.828882][T15881] usb 8-1: USB disconnect, device number 11 [ 1322.912543][T19161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1323.413220][T19170] netlink: 'syz.8.3737': attribute type 3 has an invalid length. [ 1323.466804][T19170] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3737'. [ 1324.070283][T19184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3744'. [ 1324.887614][T19194] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1325.121072][T19194] pim6reg: entered allmulticast mode [ 1326.881919][T19223] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3759'. [ 1326.932916][T19223] netlink: 264 bytes leftover after parsing attributes in process `syz.7.3759'. [ 1327.358436][T19230] o2cb: This node has not been configured. [ 1327.392733][T19230] o2cb: Cluster check failed. Fix errors before retrying. [ 1327.423050][T19230] (syz.3.3760,19230,0):user_dlm_register:674 ERROR: status = -22 [ 1327.431114][T19230] (syz.3.3760,19230,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file1" [ 1330.572828][T19263] loop8: detected capacity change from 0 to 65536 [ 1330.691394][T19263] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1330.974724][T19263] XFS (loop8): Ending clean mount [ 1330.999934][T19263] XFS (loop8): Quotacheck needed: Please wait. [ 1331.085032][T19263] XFS (loop8): Quotacheck: Done. [ 1331.443648][T18385] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1332.123122][T10767] Bluetooth: hci0: command 0x0406 tx timeout [ 1339.946995][T19410] overlayfs: failed to resolve './file0': -2 [ 1340.259872][T19418] pimreg: entered allmulticast mode [ 1345.274936][T19504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3843'. [ 1345.573504][T19513] loop8: detected capacity change from 0 to 128 [ 1345.573604][T19504] bond0: (slave bond_slave_0): Releasing backup interface [ 1345.689584][T19513] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1345.718580][T19513] ext4 filesystem being mounted at /30/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1345.837199][T19513] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 1345.879597][T19513] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 1346.258844][T18385] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1346.729600][T19530] fuse: Bad value for 'fd' [ 1349.591814][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1349.827839][T19583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3869'. [ 1349.943227][T19585] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1349.975043][T14362] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.012747][T14362] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.263709][T14362] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.302993][T14362] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1350.433351][T19597] netlink: 'syz.7.3874': attribute type 1 has an invalid length. [ 1350.488480][T19597] netlink: 'syz.7.3874': attribute type 4 has an invalid length. [ 1350.536188][T19597] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.3874'. [ 1350.669744][T19603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3876'. [ 1351.424916][T19610] netlink: 'syz.5.3879': attribute type 7 has an invalid length. [ 1351.462738][T19610] netlink: 'syz.5.3879': attribute type 8 has an invalid length. [ 1351.752828][T13211] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 1351.997493][T13211] usb 9-1: config 0 has an invalid interface number: 41 but max is 0 [ 1352.042995][T13211] usb 9-1: config 0 has no interface number 0 [ 1352.086988][T13211] usb 9-1: config 0 interface 41 has no altsetting 0 [ 1352.111059][T13211] usb 9-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1352.168697][T13211] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1352.189726][T13211] usb 9-1: Product: syz [ 1352.205448][T13211] usb 9-1: Manufacturer: syz [ 1352.232531][T13211] usb 9-1: SerialNumber: syz [ 1352.265214][T13211] usb 9-1: config 0 descriptor?? [ 1352.325751][T19600] overlayfs: failed to clone upperpath [ 1353.160592][T13211] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1353.554140][T19641] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3889'. [ 1353.625587][T13211] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1353.680197][T13211] CoreChips 9-1:0.41 (unnamed net_device) (uninitialized): Failed to reset PHY: -71 [ 1353.741770][T13211] CoreChips 9-1:0.41: probe with driver CoreChips failed with error -71 [ 1353.870402][T13211] usb 9-1: USB disconnect, device number 7 [ 1354.649905][T19656] netlink: 'syz.8.3892': attribute type 29 has an invalid length. [ 1354.734072][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3892'. [ 1359.317920][T19729] loop8: detected capacity change from 0 to 64 [ 1359.499683][ T29] audit: type=1800 audit(1772173424.867:168): pid=19729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3914" name="file3" dev="loop8" ino=23 res=0 errno=0 [ 1359.824001][ T29] audit: type=1804 audit(1772173425.197:169): pid=19734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3917" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="ramfs" ino=58021 res=1 errno=0 [ 1363.078566][T19786] fuse: Bad value for 'fd' [ 1363.946622][T19799] overlayfs: failed to clone upperpath [ 1364.203074][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1364.459581][ T29] audit: type=1800 audit(1772173429.837:170): pid=19811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3942" name="file1" dev="tmpfs" ino=1597 res=0 errno=0 [ 1365.463312][T19826] overlayfs: failed to resolve './file0': -2 [ 1365.503428][T19831] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3948'. [ 1365.579914][T19834] fuse: Bad value for 'fd' [ 1365.587067][T19831] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3948'. [ 1366.829638][T19865] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1366.861299][T19865] block device autoloading is deprecated and will be removed. [ 1367.299781][T19877] loop8: detected capacity change from 0 to 128 [ 1367.382482][T19877] EXT4-fs: Ignoring removed nobh option [ 1367.500800][T19877] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1367.586185][T19877] ext4 filesystem being mounted at /51/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1367.633708][T19881] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3963'. [ 1368.016663][T18385] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1370.064599][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1370.071236][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1371.677039][T19950] loop8: detected capacity change from 0 to 1024 [ 1371.774785][T19950] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1371.995693][T19950] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4224: comm syz.8.3986: Allocating blocks 401-513 which overlap fs metadata [ 1372.430375][T18385] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1373.989647][T19990] xt_CT: No such helper "netbios-ns" [ 1374.257530][T20000] loop8: detected capacity change from 0 to 256 [ 1374.386757][T20000] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d) [ 1374.622682][T20000] loop8: detected capacity change from 256 to 0 [ 1374.632961][T20012] Buffer I/O error on dev loop8, logical block 136, lost sync page write [ 1374.641987][T20012] Buffer I/O error on dev loop8, logical block 136, lost sync page write [ 1374.748881][T20012] Buffer I/O error on dev loop8, logical block 136, lost sync page write [ 1374.791015][T20012] Buffer I/O error on dev loop8, logical block 136, lost sync page write [ 1375.547956][T19240] Buffer I/O error on dev loop8, logical block 0, lost sync page write [ 1376.064900][T14322] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.272114][T14322] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.497684][T14322] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.626738][T14322] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.923199][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.932660][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.941943][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1376.951053][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1377.051218][T14322] bridge_slave_1: left allmulticast mode [ 1377.065724][T14322] bridge_slave_1: left promiscuous mode [ 1377.072438][T14322] bridge0: port 2(bridge_slave_1) entered disabled state [ 1377.101761][T14322] bridge_slave_0: left allmulticast mode [ 1377.122739][T14322] bridge_slave_0: left promiscuous mode [ 1377.129268][T14322] bridge0: port 1(bridge_slave_0) entered disabled state [ 1377.988456][T14322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1378.114290][T14322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.206418][T14322] bond0 (unregistering): Released all slaves [ 1379.000103][ T5775] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1379.018389][T20074] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1379.030601][T20074] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1379.045379][T20074] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1379.056300][T20074] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1379.444438][T14322] hsr_slave_0: left promiscuous mode [ 1379.476996][T14322] hsr_slave_1: left promiscuous mode [ 1379.504428][T14322] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1379.542955][T14322] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1379.574851][T14322] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1379.587749][T14322] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1379.733595][T14322] veth1_macvtap: left promiscuous mode [ 1379.739299][T14322] veth0_macvtap: left promiscuous mode [ 1379.766468][T14322] veth1_vlan: left promiscuous mode [ 1379.772018][T14322] veth0_vlan: left promiscuous mode [ 1380.043230][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1380.052609][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1381.162997][T20074] Bluetooth: hci2: command tx timeout [ 1381.339360][T14322] team0 (unregistering): Port device team_slave_1 removed [ 1381.463517][T14322] team0 (unregistering): Port device team_slave_0 removed [ 1383.140719][T20124] xt_CT: No such helper "netbios-ns" [ 1383.163100][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.172522][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1383.243229][T20074] Bluetooth: hci2: command tx timeout [ 1383.253773][T20132] fuse: Bad value for 'fd' [ 1383.960634][T20070] chnl_net:caif_netlink_parms(): no params data found [ 1384.303450][T20160] fuse: Bad value for 'fd' [ 1385.222170][T20070] bridge0: port 1(bridge_slave_0) entered blocking state [ 1385.243785][T20070] bridge0: port 1(bridge_slave_0) entered disabled state [ 1385.271185][T20070] bridge_slave_0: entered allmulticast mode [ 1385.296449][T20070] bridge_slave_0: entered promiscuous mode [ 1385.324472][T20074] Bluetooth: hci2: command tx timeout [ 1385.361858][T20070] bridge0: port 2(bridge_slave_1) entered blocking state [ 1385.373199][T20070] bridge0: port 2(bridge_slave_1) entered disabled state [ 1385.381828][T20070] bridge_slave_1: entered allmulticast mode [ 1385.400542][T20070] bridge_slave_1: entered promiscuous mode [ 1385.703357][T20070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.773569][T20070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1386.062069][T20070] team0: Port device team_slave_0 added [ 1386.106409][T20070] team0: Port device team_slave_1 added [ 1386.233490][T20070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1386.240605][T20070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.283009][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.292145][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1386.340395][T20070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1386.381155][T20070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1386.411743][T20070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1386.475479][T20070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1387.023949][T20070] hsr_slave_0: entered promiscuous mode [ 1387.046306][T20070] hsr_slave_1: entered promiscuous mode [ 1387.069500][T20070] debugfs: 'hsr0' already exists in 'hsr' [ 1387.080677][T20070] Cannot create hsr debugfs directory [ 1387.402822][T20074] Bluetooth: hci2: command tx timeout [ 1388.245705][T20070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.263329][T20230] netlink: 304 bytes leftover after parsing attributes in process `syz.2.4076'. [ 1388.391134][T20070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.599483][T20070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1388.821978][T20070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1389.413156][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.422742][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1389.505527][T20070] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1389.576006][T20070] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1389.669796][T20070] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1389.762050][T20070] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1391.139262][T20070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1391.328419][T20070] 8021q: adding VLAN 0 to HW filter on device team0 [ 1391.416904][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.424592][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1391.536958][ T1140] bridge0: port 2(bridge_slave_1) entered blocking state [ 1391.544558][ T1140] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1392.523229][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1392.532730][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1393.599060][T20070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1394.142112][T20070] veth0_vlan: entered promiscuous mode [ 1394.283502][T20070] veth1_vlan: entered promiscuous mode [ 1394.413128][T20321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.473432][T20321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.482578][T20321] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.491777][T20323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.537191][T20323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.590892][T20070] veth0_macvtap: entered promiscuous mode [ 1394.599342][T20323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.634209][T20323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.660844][T20070] veth1_macvtap: entered promiscuous mode [ 1394.700429][T20323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.731420][T20323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.765516][T20323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.820950][T20323] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1394.959042][T20070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1395.137016][T20070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1395.300425][ T1140] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.336504][T14325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.456829][T14325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1395.506648][T14325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1397.201178][T20372] fuse: Bad value for 'fd' [ 1398.133332][T20389] overlayfs: failed to clone upperpath [ 1398.294158][T20396] fuse: Bad value for 'fd' [ 1399.283469][T20410] netlink: 'syz.7.4128': attribute type 8 has an invalid length. [ 1399.763378][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4130'. [ 1399.789035][T20421] netlink: 'syz.5.4130': attribute type 11 has an invalid length. [ 1399.937685][T20421] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4130'. [ 1399.971208][T20421] netlink: 'syz.5.4130': attribute type 11 has an invalid length. [ 1400.682056][T14362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1400.769430][T14362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.017339][T14362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1401.053465][T14362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1401.079908][T20450] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4138'. [ 1401.142013][T20450] bridge0: port 2(bridge_slave_1) entered disabled state [ 1401.150235][T20450] bridge0: port 1(bridge_slave_0) entered disabled state [ 1401.213107][T20453] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4138'. [ 1401.758589][T20465] sch_fq: defrate 7 ignored. [ 1401.882958][ C0] net_ratelimit: 15 callbacks suppressed [ 1401.883116][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1401.898319][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1404.046997][T20500] overlayfs: failed to clone upperpath [ 1405.003096][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.012383][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1405.883552][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1407.386102][T20547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4165'. [ 1408.123084][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.132436][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1408.559410][T20569] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4174'. [ 1409.146872][T20579] netlink: 'syz.1.4178': attribute type 1 has an invalid length. [ 1409.186267][T20579] netlink: 'syz.1.4178': attribute type 4 has an invalid length. [ 1409.222628][T20579] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.4178'. [ 1409.625084][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4180'. [ 1409.921473][T20586] team1: entered promiscuous mode [ 1409.940025][T20586] team1: entered allmulticast mode [ 1409.971476][T20586] 8021q: adding VLAN 0 to HW filter on device team1 [ 1411.243004][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1411.252385][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 1414.417270][T20660] loop1: detected capacity change from 0 to 2048 [ 1414.578153][T20660] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1415.862890][ T6921] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1416.066075][ T6921] usb 2-1: Using ep0 maxpacket: 16 [ 1416.109194][ T6921] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1416.131999][ T6921] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1416.171217][ T6921] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1416.184004][ T6921] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.223074][ T6921] usb 2-1: Product: syz [ 1416.227437][ T6921] usb 2-1: Manufacturer: syz [ 1416.232208][ T6921] usb 2-1: SerialNumber: syz [ 1416.286360][ T6921] usb 2-1: config 0 descriptor?? [ 1416.360255][ T6921] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1416.392654][ T6921] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1416.796492][T20701] overlayfs: failed to clone upperpath [ 1417.036020][ T6921] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1417.056637][ T6921] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1417.491025][ T6921] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1417.542734][ T6921] em28xx 2-1:0.0: No AC97 audio processor [ 1417.598628][ T6921] usb 2-1: USB disconnect, device number 16 [ 1417.632113][ T6921] em28xx 2-1:0.0: Disconnecting em28xx [ 1417.648310][ T6921] em28xx 2-1:0.0: Freeing device [ 1420.027184][T20758] netlink: 'syz.2.4239': attribute type 29 has an invalid length. [ 1421.955064][T20800] overlayfs: failed to clone upperpath [ 1424.669379][T20852] overlayfs: failed to clone upperpath [ 1425.061112][T20857] xt_hashlimit: size too large, truncated to 1048576 [ 1429.163620][T20903] loop1: detected capacity change from 0 to 128 [ 1429.485541][T20907] overlayfs: failed to clone upperpath [ 1431.515537][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1431.523095][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1432.776930][T20947] Invalid ELF header magic: != ELF [ 1432.989128][T20950] xt_hashlimit: size too large, truncated to 1048576 [ 1433.702583][T20963] fuse: Bad value for 'fd' [ 1434.044891][T20968] loop1: detected capacity change from 0 to 256 [ 1434.160567][T20968] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 1434.440702][T20968] exFAT-fs (loop1): start_clu is invalid cluster(0x0) [ 1435.298720][T13211] hid-generic 0000:0000:0000.0030: unknown main item tag 0x0 [ 1435.395984][T13211] hid-generic 0000:0000:0000.0030: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1435.457229][T20988] loop1: detected capacity change from 0 to 1024 [ 1436.100017][T14322] hfsplus: b-tree write err: -5, ino 25 [ 1436.184298][T14322] hfsplus: b-tree write err: -5, ino 4 [ 1436.190139][T14322] hfsplus: b-tree write err: -5, ino 2 [ 1437.029864][T21009] tipc: Failed to remove unknown binding: 66,1,1/0:1006445033/1006445035 [ 1437.052787][T21009] tipc: Failed to remove unknown binding: 66,1,1/0:1006445033/1006445035 [ 1437.189038][T20995] fido_id[20995]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 1438.396933][T21026] loop1: detected capacity change from 0 to 4096 [ 1438.645867][T21039] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4330'. [ 1439.331813][T14325] ntfs3(loop1): ino=5, mi_enum_attr [ 1439.369601][T21050] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1439.377162][T21050] IPv6: NLM_F_CREATE should be set when creating new route [ 1439.392858][T14325] ntfs3(loop1): ino=5, mi_enum_attr [ 1439.403764][T14325] ntfs3(loop1): ino=5, attr_set_size [ 1439.427865][T14325] ntfs3(loop1): ino=5, ntfs3_write_inode failed, -2. [ 1439.964511][T21062] netlink: 'syz.5.4339': attribute type 29 has an invalid length. [ 1440.027074][T21062] netlink: 'syz.5.4339': attribute type 29 has an invalid length. [ 1440.093626][T21062] netlink: 500 bytes leftover after parsing attributes in process `syz.5.4339'. [ 1441.078107][T21085] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 1442.740540][T21098] loop1: detected capacity change from 0 to 8192 [ 1442.848950][T21098] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1442.884459][T21098] UDF-fs: Scanning with blocksize 512 failed [ 1442.933007][T21098] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1442.940576][T21098] UDF-fs: Scanning with blocksize 1024 failed [ 1443.000122][T21098] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 1443.067832][T21098] UDF-fs: Scanning with blocksize 2048 failed [ 1443.185193][T21098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1444.127729][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4357'. [ 1444.185479][T21128] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4357'. [ 1444.653371][ T24] IPVS: starting estimator thread 0... [ 1444.697963][T21138] IPVS: sh: SCTP 127.0.0.1:0 - no destination available [ 1444.762857][T21140] IPVS: using max 240 ests per chain, 12000 per kthread [ 1445.117594][T21134] loop1: detected capacity change from 0 to 40427 [ 1445.206177][T21134] F2FS-fs (loop1): invalid crc value [ 1445.491461][T21134] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1445.505550][T21134] F2FS-fs (loop1): Start checkpoint disabled! [ 1445.519672][T21134] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 1445.532744][T21134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1446.746455][ T1140] kworker/u8:10: attempt to access beyond end of device [ 1446.746455][ T1140] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1446.802679][ T1140] CPU: 0 UID: 0 PID: 1140 Comm: kworker/u8:10 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1446.802865][ T1140] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1446.802923][ T1140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1446.803028][ T1140] Workqueue: writeback wb_workfn (flush-7:1) [ 1446.803200][ T1140] Call Trace: [ 1446.803248][ T1140] [ 1446.803301][ T1140] __dump_stack+0x26/0x30 [ 1446.803448][ T1140] dump_stack_lvl+0x14c/0x1c0 [ 1446.803611][ T1140] dump_stack+0x1e/0x25 [ 1446.803760][ T1140] f2fs_handle_critical_error+0xa6f/0xc20 [ 1446.803979][ T1140] f2fs_stop_checkpoint+0x65/0x80 [ 1446.804120][ T1140] f2fs_write_end_io+0x12e6/0x2560 [ 1446.804320][ T1140] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1446.804462][ T1140] bio_endio+0x1006/0x1160 [ 1446.804615][ T1140] submit_bio_noacct+0x533/0x2960 [ 1446.804821][ T1140] submit_bio+0x57a/0x620 [ 1446.804974][ T1140] f2fs_submit_write_bio+0x115/0x350 [ 1446.805165][ T1140] __submit_merged_bio+0x16f/0x780 [ 1446.805334][ T1140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.805506][ T1140] __submit_merged_write_cond+0x4ba/0xae0 [ 1446.805715][ T1140] f2fs_write_data_pages+0x5073/0x5e10 [ 1446.805993][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 1446.806153][ T1140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.806333][ T1140] ? __update_load_avg_cfs_rq+0xe9/0x1060 [ 1446.806507][ T1140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.806686][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 1446.806865][ T1140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.807066][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 1446.807233][ T1140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.807410][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 1446.807568][ T1140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.807744][ T1140] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1446.807892][ T1140] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1446.808039][ T1140] do_writepages+0x3f2/0x860 [ 1446.808211][ T1140] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1446.808389][ T1140] ? writeback_sb_inodes+0x1/0x1f40 [ 1446.808543][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 1446.808737][ T1140] __writeback_single_inode+0xfc/0x1440 [ 1446.808905][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 1446.809083][ T1140] writeback_sb_inodes+0xb52/0x1f40 [ 1446.809375][ T1140] wb_writeback+0x4f1/0xcd0 [ 1446.809552][ T1140] ? queue_io+0x411/0x800 [ 1446.809711][ T1140] wb_workfn+0x3b9/0x19b0 [ 1446.809842][ T1140] ? kmsan_get_metadata+0xf1/0x160 [ 1446.810032][ T1140] ? __pfx_wb_workfn+0x10/0x10 [ 1446.810159][ T1140] process_scheduled_works+0xb21/0x1e30 [ 1446.810372][ T1140] worker_thread+0xede/0x1580 [ 1446.810551][ T1140] kthread+0x53f/0x600 [ 1446.810716][ T1140] ? __pfx_worker_thread+0x10/0x10 [ 1446.810873][ T1140] ? __pfx_kthread+0x10/0x10 [ 1446.811026][ T1140] ret_from_fork+0x20f/0x910 [ 1446.811169][ T1140] ? __switch_to+0x51c/0x750 [ 1446.811339][ T1140] ? __pfx_kthread+0x10/0x10 [ 1446.811497][ T1140] ret_from_fork_asm+0x1a/0x30 [ 1446.811686][ T1140] [ 1447.143105][ T1140] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1448.425936][T21175] overlayfs: failed to clone upperpath [ 1451.173681][T21207] loop1: detected capacity change from 0 to 4096 [ 1451.370818][T21223] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1453.999611][T21254] overlayfs: failed to clone upperpath [ 1454.441748][T21258] overlayfs: missing 'lowerdir' [ 1454.720049][T21251] loop1: detected capacity change from 0 to 40427 [ 1454.815642][T21251] F2FS-fs (loop1): invalid crc value [ 1455.142788][T21251] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1455.167926][T21251] F2FS-fs (loop1): Start checkpoint disabled! [ 1455.177505][T21251] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 1455.186297][T21251] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 1455.257393][T21251] syz.1.4395: attempt to access beyond end of device [ 1455.257393][T21251] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1455.430409][T21271] batadv_slave_1: entered promiscuous mode [ 1455.495587][T21270] batadv_slave_1: left promiscuous mode [ 1455.549763][T14362] kworker/u8:28: attempt to access beyond end of device [ 1455.549763][T14362] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1455.638385][T14362] CPU: 0 UID: 0 PID: 14362 Comm: kworker/u8:28 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1455.638572][T14362] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1455.638626][T14362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1455.638730][T14362] Workqueue: writeback wb_workfn (flush-7:1) [ 1455.638888][T14362] Call Trace: [ 1455.638938][T14362] [ 1455.638985][T14362] __dump_stack+0x26/0x30 [ 1455.639128][T14362] dump_stack_lvl+0x14c/0x1c0 [ 1455.639273][T14362] dump_stack+0x1e/0x25 [ 1455.639404][T14362] f2fs_handle_critical_error+0xa6f/0xc20 [ 1455.639622][T14362] f2fs_stop_checkpoint+0x65/0x80 [ 1455.639756][T14362] f2fs_write_end_io+0x12e6/0x2560 [ 1455.639953][T14362] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1455.640088][T14362] bio_endio+0x1006/0x1160 [ 1455.640236][T14362] submit_bio_noacct+0x533/0x2960 [ 1455.640435][T14362] submit_bio+0x57a/0x620 [ 1455.640589][T14362] f2fs_submit_write_bio+0x115/0x350 [ 1455.640776][T14362] __submit_merged_bio+0x16f/0x780 [ 1455.640949][T14362] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1455.641133][T14362] __submit_merged_write_cond+0x4ba/0xae0 [ 1455.641330][T14362] f2fs_write_data_pages+0x5073/0x5e10 [ 1455.641573][T14362] ? kmsan_get_metadata+0x10/0x160 [ 1455.641766][T14362] ? kmsan_get_metadata+0xf1/0x160 [ 1455.641929][T14362] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1455.642106][T14362] ? update_load_avg+0x14eb/0x25d0 [ 1455.642272][T14362] ? update_load_avg+0x14eb/0x25d0 [ 1455.642436][T14362] ? kmsan_get_metadata+0xf1/0x160 [ 1455.642602][T14362] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1455.642768][T14362] ? kmsan_get_metadata+0xf1/0x160 [ 1455.642926][T14362] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1455.643093][T14362] ? kmsan_get_metadata+0xf1/0x160 [ 1455.643257][T14362] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1455.643426][T14362] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1455.643575][T14362] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1455.643714][T14362] do_writepages+0x3f2/0x860 [ 1455.643887][T14362] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1455.644057][T14362] ? writeback_sb_inodes+0x1/0x1f40 [ 1455.644200][T14362] ? kmsan_get_metadata+0xf1/0x160 [ 1455.644382][T14362] __writeback_single_inode+0xfc/0x1440 [ 1455.644535][T14362] ? kmsan_get_metadata+0xf1/0x160 [ 1455.644716][T14362] writeback_sb_inodes+0xb52/0x1f40 [ 1455.644991][T14362] wb_writeback+0x4f1/0xcd0 [ 1455.645157][T14362] ? queue_io+0x411/0x800 [ 1455.645297][T14362] wb_workfn+0x3b9/0x19b0 [ 1455.645425][T14362] ? kmsan_get_metadata+0xf1/0x160 [ 1455.645610][T14362] ? __pfx_wb_workfn+0x10/0x10 [ 1455.645729][T14362] process_scheduled_works+0xb21/0x1e30 [ 1455.645930][T14362] worker_thread+0xede/0x1580 [ 1455.646102][T14362] kthread+0x53f/0x600 [ 1455.646250][T14362] ? __pfx_worker_thread+0x10/0x10 [ 1455.646399][T14362] ? __pfx_kthread+0x10/0x10 [ 1455.646548][T14362] ret_from_fork+0x20f/0x910 [ 1455.646679][T14362] ? __switch_to+0x51c/0x750 [ 1455.646840][T14362] ? __pfx_kthread+0x10/0x10 [ 1455.646991][T14362] ret_from_fork_asm+0x1a/0x30 [ 1455.647174][T14362] [ 1456.047488][T14362] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 1460.563692][T21360] netlink: 132 bytes leftover after parsing attributes in process `syz.3.4431'. [ 1462.023704][ T6926] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1462.207965][ T6926] usb 2-1: Using ep0 maxpacket: 8 [ 1462.237364][ T6926] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1462.302490][ T6926] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 1462.352450][ T6926] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1462.445054][ T6926] usb 2-1: config 0 descriptor?? [ 1462.614188][ T6926] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 1464.118353][ T6926] gspca_vc032x: reg_w err -71 [ 1464.144031][ T6926] vc032x 2-1:0.0: probe with driver vc032x failed with error -71 [ 1464.180042][ T6926] usb 2-1: USB disconnect, device number 17 [ 1465.250099][T21415] loop1: detected capacity change from 0 to 512 [ 1465.853499][T21428] binder: 21427:21428 ioctl c0306201 200000000180 returned -14 [ 1466.131772][ T29] audit: type=1326 audit(1772173787.497:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21433 comm="syz.3.4457" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee8e79bf79 code=0x0 [ 1466.397495][T21441] loop1: detected capacity change from 0 to 256 [ 1466.483892][T21441] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1466.619151][T21441] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1466.891039][T21449] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4462'. [ 1469.054258][T21481] overlayfs: failed to clone upperpath [ 1469.109708][T21481] overlayfs: failed to clone upperpath [ 1470.878762][ T24] IPVS: starting estimator thread 0... [ 1470.972655][T21507] IPVS: using max 240 ests per chain, 12000 per kthread [ 1471.534105][T21519] l2tp_ppp: sess 2/0: no socket in recv [ 1472.135135][T21531] overlayfs: failed to clone upperpath [ 1474.470883][T21574] overlayfs: failed to clone upperpath [ 1476.033730][T14325] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1476.041736][T14325] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1477.683446][T21624] loop1: detected capacity change from 0 to 128 [ 1477.975466][T21632] IPVS: sed: FWM 3 0x00000003 - no destination available [ 1478.000614][T21624] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1478.039838][T21624] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 1478.415308][T21624] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 1478.859510][T20070] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1479.307006][T21649] netlink: 'syz.5.4527': attribute type 1 has an invalid length. [ 1479.965191][T21654] bond1: (slave bridge1): Enslaving as a backup interface with an up link [ 1480.700446][T21660] fuse: Bad value for 'fd' [ 1481.360555][T21670] 9p: Bad value for 'wfdno' [ 1481.863543][T21674] overlayfs: failed to clone upperpath [ 1481.904372][T21677] loop1: detected capacity change from 0 to 128 [ 1481.940218][T21677] adfs: Bad value for 'gid' [ 1481.981376][T21677] adfs: Bad value for 'gid' [ 1484.446702][T21716] overlayfs: failed to clone upperpath [ 1484.855435][T11895] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1484.897844][T21729] tipc: Failed to remove unknown binding: 66,0,0/0:3270576131/3270576132 [ 1485.076572][T11895] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1485.113316][T11895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1485.139855][T11895] usb 2-1: config 0 descriptor?? [ 1485.185835][T11895] cp210x 2-1:0.0: cp210x converter detected [ 1485.600938][T11895] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1485.880564][T11895] usb 2-1: cp210x converter now attached to ttyUSB0 [ 1486.052719][T11895] usb 2-1: USB disconnect, device number 18 [ 1486.142459][T11895] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1486.259001][T11895] cp210x 2-1:0.0: device disconnected [ 1488.498242][T21779] loop1: detected capacity change from 0 to 512 [ 1488.628461][T21779] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1488.645657][T21779] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1488.756471][T21779] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4567: Corrupt directory, running e2fsck is recommended [ 1488.870309][T21779] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -117 [ 1488.918750][T21779] EXT4-fs error (device loop1): ext4_iget_extra_inode:5025: inode #15: comm syz.1.4567: corrupted in-inode xattr: e_name out of bounds [ 1489.012460][T21779] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 1489.022402][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 1489.038368][ C0] EXT4-fs (loop1): initial error at time 1772173810: ext4_iget_extra_inode:5025: inode 15 [ 1489.048684][ C0] EXT4-fs (loop1): last error at time 1772173810: ext4_iget_extra_inode:5025: inode 15 [ 1489.059062][T21779] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.4567: couldn't read orphan inode 15 (err -117) [ 1489.103257][T21779] loop1: lost filesystem error report for type 5 error -117 [ 1489.115502][T21779] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1489.160392][T21779] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1489.173017][T21779] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1489.225883][T21779] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4567: Corrupt directory, running e2fsck is recommended [ 1489.291799][T21794] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1489.317008][T21791] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1489.412740][T21794] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1489.438079][T21791] EXT4-fs warning (device loop1): dx_probe:849: Enable large directory feature to access it [ 1489.508293][T21779] EXT4-fs warning (device loop1): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1489.543022][T21791] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4567: Corrupt directory, running e2fsck is recommended [ 1489.597203][T21794] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.4567: Corrupt directory, running e2fsck is recommended [ 1490.857470][T20070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.225076][T21818] overlayfs: failed to clone upperpath [ 1491.991740][T21832] overlayfs: failed to clone upperpath [ 1492.960866][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1492.976854][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1493.769120][T21873] fuse: Bad value for 'fd' [ 1494.948151][T21894] netlink: 6 bytes leftover after parsing attributes in process `syz.5.4605'. [ 1494.997559][T21894] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1503.097869][T22016] sock: sock_set_timeout: `syz.1.4644' (pid 22016) tries to set negative timeout [ 1503.324961][T22022] overlayfs: failed to clone upperpath [ 1503.894946][T22029] overlayfs: failed to get inode (-116) [ 1503.900906][T22029] overlayfs: failed to get inode (-116) [ 1504.870437][T22041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4653'. [ 1505.247071][T10767] Bluetooth: hci2: command 0x0406 tx timeout [ 1507.076270][T22072] overlayfs: failed to clone upperpath [ 1508.646260][T22097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4672'. [ 1509.576987][T22109] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4675'. [ 1509.654415][T22109] netlink: 'syz.3.4675': attribute type 7 has an invalid length. [ 1509.704164][T22109] netlink: 'syz.3.4675': attribute type 8 has an invalid length. [ 1509.743290][T22109] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4675'. [ 1510.980521][T22129] overlayfs: failed to clone lowerpath [ 1511.415563][T22135] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4683'. [ 1511.835348][T22135] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1511.897606][T22140] mac80211_hwsim hwsim28 wlan0: entered allmulticast mode [ 1512.014930][T22140] bond2: (slave wlan0): Enslaving as an active interface with an up link [ 1512.298629][T22146] syz_tun: entered allmulticast mode [ 1512.386026][T22145] syz_tun: left allmulticast mode [ 1513.609519][T22165] overlayfs: failed to clone upperpath [ 1518.296679][ T29] audit: type=1326 audit(1772173839.677:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22241 comm="syz.1.4715" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb03459bf79 code=0x0 [ 1519.420834][T22262] overlayfs: failed to clone upperpath [ 1520.752905][T11895] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1520.932525][T11895] usb 2-1: Using ep0 maxpacket: 8 [ 1521.016302][T11895] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1521.039151][T11895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1521.075582][T11895] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1521.134140][T11895] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1521.168873][T11895] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1521.202831][T11895] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.449033][T11895] usb 2-1: usb_control_msg returned -32 [ 1521.476272][T11895] usbtmc 2-1:16.0: can't read capabilities [ 1522.342489][T22319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4739'. [ 1522.399720][T11895] kernel write not supported for file bpf-prog (pid: 11895 comm: kworker/1:3) [ 1523.667312][T11895] usb 2-1: USB disconnect, device number 19 [ 1526.679098][ T29] audit: type=1326 audit(1772173848.057:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8e79bf79 code=0x7ffc0000 [ 1526.782967][ T29] audit: type=1326 audit(1772173848.057:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee8e73d399 code=0x7ffc0000 [ 1526.908891][ T29] audit: type=1326 audit(1772173848.057:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee8e73d399 code=0x7ffc0000 [ 1527.069472][ T29] audit: type=1326 audit(1772173848.057:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee8e73d399 code=0x7ffc0000 [ 1527.229906][ T29] audit: type=1326 audit(1772173848.057:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee8e73d399 code=0x7ffc0000 [ 1527.370910][ T29] audit: type=1326 audit(1772173848.057:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8e79bf79 code=0x7ffc0000 [ 1527.531780][ T29] audit: type=1326 audit(1772173848.127:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee8e73d399 code=0x7ffc0000 [ 1527.672863][ T29] audit: type=1326 audit(1772173848.127:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fee8e79bf79 code=0x7ffc0000 [ 1527.786364][ T29] audit: type=1326 audit(1772173848.127:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee8e73d399 code=0x7ffc0000 [ 1527.910551][ T29] audit: type=1326 audit(1772173848.127:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22396 comm="syz.3.4765" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fee8e73d399 code=0x7ffc0000 [ 1531.026893][T22452] loop1: detected capacity change from 0 to 4096 [ 1531.071408][T22452] EXT4-fs: Ignoring removed mblk_io_submit option [ 1531.160579][T22452] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1531.246497][T22452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1532.576100][T20070] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1533.145075][T22476] netlink: 'syz.5.4791': attribute type 83 has an invalid length. [ 1535.762342][ C1] hrtimer: interrupt took 211663 ns [ 1536.778349][T14325] failed while handling packet from 1:16384 [ 1538.623673][T22551] netlink: 64 bytes leftover after parsing attributes in process `syz.5.4817'. [ 1538.714485][T22551] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4817'. [ 1539.968454][T22571] xt_hashlimit: max too large, truncated to 1048576 [ 1540.798718][T22584] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4826'. [ 1543.897174][T22621] overlayfs: failed to clone upperpath [ 1544.173048][ T24] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1544.413034][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 1544.438276][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1544.504708][ T24] usb 2-1: config 0 has no interfaces? [ 1544.510432][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1544.559582][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.569628][T22635] netlink: 'syz.3.4844': attribute type 1 has an invalid length. [ 1544.622931][T22635] netlink: 482 bytes leftover after parsing attributes in process `syz.3.4844'. [ 1544.635527][ T24] usb 2-1: config 0 descriptor?? [ 1546.138959][T22659] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4853'. [ 1546.867199][T15881] usb 2-1: USB disconnect, device number 20 [ 1548.429371][T22703] loop1: detected capacity change from 0 to 8 [ 1548.525044][T22703] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1548.563716][T22703] SQUASHFS error: Failed to read block 0x91: -5 [ 1548.570143][T22703] SQUASHFS error: Unable to read metadata cache entry [8f] [ 1548.597679][T22703] SQUASHFS error: Unable to read inode 0x11f [ 1549.649800][T22722] loop1: detected capacity change from 0 to 128 [ 1549.740664][T22722] FAT-fs (loop1): bogus number of reserved sectors [ 1549.788710][T22722] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 1549.826518][T22722] FAT-fs (loop1): Can't find a valid FAT filesystem [ 1550.738784][T22737] overlayfs: failed to clone upperpath [ 1550.780970][T22735] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4879'. [ 1554.405146][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 1554.411744][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 1554.934567][T22818] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4904'. [ 1556.688448][T22836] team0: Port device team_slave_0 removed [ 1559.298999][T22873] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4923'. [ 1561.960875][T22919] overlayfs: failed to clone upperpath [ 1562.298711][T22925] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4940'. [ 1562.820575][T22936] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4943'. [ 1563.520817][T22949] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4946'. [ 1564.051677][T22958] loop1: detected capacity change from 0 to 128 [ 1564.193703][T22958] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 1564.227630][T22958] hpfs: filesystem error: improperly stopped [ 1564.253629][T22958] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 1564.312799][T22958] hpfs: You really don't want any checks? You are crazy... [ 1564.351970][T22958] hpfs: hpfs_map_sector(): read error [ 1564.376459][T22958] hpfs: code page support is disabled [ 1564.382203][T22958] hpfs: hpfs_map_4sectors(): unaligned read [ 1564.440159][T22958] hpfs: hpfs_map_4sectors(): unaligned read [ 1564.481081][T22958] hpfs: filesystem error: unable to find root dir [ 1564.576316][T22958] hpfs: hpfs_map_4sectors(): unaligned read [ 1564.624054][T22958] hpfs: hpfs_map_sector(): read error [ 1564.664041][T22958] hpfs: hpfs_map_4sectors(): unaligned read [ 1564.709770][T22958] hpfs: hpfs_map_sector(): read error [ 1564.734612][T22958] hpfs: hpfs_map_4sectors(): unaligned read [ 1564.749100][T22958] hpfs: hpfs_map_sector(): read error [ 1565.905747][T22993] tipc: Failed to remove unknown binding: 66,0,0/0:1614439013/1614439014 [ 1566.387591][T23001] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4964'. [ 1567.181251][T23017] overlayfs: failed to clone upperpath [ 1567.266662][T23021] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4972'. [ 1567.293258][T23021] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1568.589789][T23040] overlayfs: failed to clone upperpath [ 1568.941116][T23044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4979'. [ 1569.053090][T23044] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4979'. [ 1571.508782][T23087] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 1572.186132][T20074] Bluetooth: unknown link type 128 [ 1572.421808][T23107] netlink: 'syz.5.5000': attribute type 10 has an invalid length. [ 1572.482084][T23107] netlink: 55 bytes leftover after parsing attributes in process `syz.5.5000'. [ 1573.335079][T23120] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5005'. [ 1573.793883][T23124] netlink: 156 bytes leftover after parsing attributes in process `syz.1.5006'. [ 1574.202520][T20074] Bluetooth: hci2: command 0x0406 tx timeout [ 1574.484229][T23140] overlayfs: failed to clone upperpath [ 1574.591950][T23143] ===================================================== [ 1574.602592][T23143] BUG: KMSAN: uninit-value in fuse_dentry_revalidate+0x150/0x13d0 [ 1574.610592][T23143] fuse_dentry_revalidate+0x150/0x13d0 [ 1574.618315][T23143] __lookup_slow+0x2ea/0x770 [ 1574.624091][T23143] lookup_slow+0x6a/0xd0 [ 1574.628460][T23143] path_lookupat+0x7d1/0xdf0 [ 1574.633922][T23143] filename_lookup+0x2bc/0x800 [ 1574.638817][T23143] vfs_statx+0xcf/0x290 [ 1574.643269][T23143] vfs_fstatat+0x2dc/0x400 [ 1574.647843][T23143] __se_sys_newfstatat+0x64/0x870 [ 1574.653218][T23143] __x64_sys_newfstatat+0xbd/0x120 [ 1574.658520][T23143] x64_sys_call+0x3824/0x3ea0 [ 1574.663541][T23143] do_syscall_64+0x134/0xf80 [ 1574.668268][T23143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.674958][T23143] [ 1574.677350][T23143] Uninit was created at: [ 1574.681801][T23143] kmem_cache_alloc_lru_noprof+0x382/0x1280 [ 1574.688159][T23143] __d_alloc+0x55/0xa00 [ 1574.693353][T23143] d_alloc_parallel+0x99/0x2740 [ 1574.701718][T23143] __lookup_slow+0x138/0x770 [ 1574.707514][T23143] lookup_slow+0x6a/0xd0 [ 1574.711896][T23143] path_lookupat+0x7d1/0xdf0 [ 1574.716796][T23143] do_o_path+0x58/0x290 [ 1574.721109][T23143] path_openat+0x493e/0x64c0 [ 1574.726009][T23143] do_file_open+0x2aa/0x680 [ 1574.730666][T23143] do_sys_openat2+0x163/0x380 [ 1574.735729][T23143] __x64_sys_openat+0x240/0x300 [ 1574.740713][T23143] x64_sys_call+0x2445/0x3ea0 [ 1574.745707][T23143] do_syscall_64+0x134/0xf80 [ 1574.750441][T23143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1574.756640][T23143] [ 1574.759063][T23143] CPU: 1 UID: 0 PID: 23143 Comm: syz.1.5011 Tainted: G W L syzkaller #0 PREEMPT(full) [ 1574.770337][T23143] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1574.775804][T23143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1574.786127][T23143] ===================================================== [ 1574.793489][T23143] Disabling lock debugging due to kernel taint [ 1574.908283][T23143] Kernel panic - not syncing: kmsan.panic set ... [ 1574.914858][T23143] CPU: 1 UID: 0 PID: 23143 Comm: syz.1.5011 Tainted: G B W L syzkaller #0 PREEMPT(full) [ 1574.926013][T23143] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1574.932544][T23143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 1574.942726][T23143] Call Trace: [ 1574.946098][T23143] [ 1574.949125][T23143] __dump_stack+0x26/0x30 [ 1574.953641][T23143] dump_stack_lvl+0x50/0x1c0 [ 1574.958403][T23143] ? dump_stack+0x12/0x25 [ 1574.962898][T23143] dump_stack+0x1e/0x25 [ 1574.967222][T23143] vpanic+0x7b4/0x1430 [ 1574.971480][T23143] panic+0x15d/0x160 [ 1574.975591][T23143] kmsan_report+0x31a/0x320 [ 1574.980288][T23143] ? __msan_warning+0x1b/0x30 [ 1574.985130][T23143] ? fuse_dentry_revalidate+0x150/0x13d0 [ 1574.990943][T23143] ? __lookup_slow+0x2ea/0x770 [ 1574.995861][T23143] ? lookup_slow+0x6a/0xd0 [ 1575.000437][T23143] ? path_lookupat+0x7d1/0xdf0 [ 1575.005340][T23143] ? filename_lookup+0x2bc/0x800 [ 1575.010422][T23143] ? vfs_statx+0xcf/0x290 [ 1575.014930][T23143] ? vfs_fstatat+0x2dc/0x400 [ 1575.019694][T23143] ? __se_sys_newfstatat+0x64/0x870 [ 1575.025082][T23143] ? __x64_sys_newfstatat+0xbd/0x120 [ 1575.030569][T23143] ? x64_sys_call+0x3824/0x3ea0 [ 1575.035596][T23143] ? do_syscall_64+0x134/0xf80 [ 1575.040510][T23143] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.046736][T23143] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1575.053252][T23143] ? kmsan_get_metadata+0xf1/0x160 [ 1575.058554][T23143] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1575.064551][T23143] ? kmsan_get_metadata+0xf1/0x160 [ 1575.069848][T23143] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1575.076362][T23143] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1575.082617][T23143] ? _raw_spin_unlock+0x30/0x50 [ 1575.087651][T23143] ? __dentry_kill+0x9a8/0xb20 [ 1575.092588][T23143] ? kmsan_get_metadata+0xf1/0x160 [ 1575.097893][T23143] __msan_warning+0x1b/0x30 [ 1575.102562][T23143] fuse_dentry_revalidate+0x150/0x13d0 [ 1575.108211][T23143] ? d_alloc_parallel+0x2714/0x2740 [ 1575.113582][T23143] ? __pfx_default_wake_function+0x10/0x10 [ 1575.119598][T23143] ? __lookup_slow+0x31/0x770 [ 1575.124451][T23143] ? kmsan_get_metadata+0xf1/0x160 [ 1575.129742][T23143] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 1575.135826][T23143] ? __pfx_fuse_dentry_revalidate+0x10/0x10 [ 1575.141917][T23143] __lookup_slow+0x2ea/0x770 [ 1575.146671][T23143] lookup_slow+0x6a/0xd0 [ 1575.151043][T23143] path_lookupat+0x7d1/0xdf0 [ 1575.155769][T23143] ? kmsan_get_metadata+0xf1/0x160 [ 1575.161050][T23143] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1575.167043][T23143] filename_lookup+0x2bc/0x800 [ 1575.171951][T23143] ? filter_irq_stacks+0x49/0x190 [ 1575.177146][T23143] ? stack_depot_save_flags+0x35/0x790 [ 1575.182762][T23143] ? kmsan_get_metadata+0xf1/0x160 [ 1575.188033][T23143] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1575.194542][T23143] vfs_statx+0xcf/0x290 [ 1575.198867][T23143] vfs_fstatat+0x2dc/0x400 [ 1575.203443][T23143] ? __x64_sys_newfstatat+0xbd/0x120 [ 1575.208906][T23143] __se_sys_newfstatat+0x64/0x870 [ 1575.214132][T23143] ? kmsan_get_metadata+0xf1/0x160 [ 1575.219407][T23143] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1575.225388][T23143] ? kmsan_get_metadata+0xf1/0x160 [ 1575.230669][T23143] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1575.237185][T23143] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1575.243409][T23143] ? kmsan_get_metadata+0xf1/0x160 [ 1575.248680][T23143] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1575.254664][T23143] __x64_sys_newfstatat+0xbd/0x120 [ 1575.259967][T23143] x64_sys_call+0x3824/0x3ea0 [ 1575.264803][T23143] do_syscall_64+0x134/0xf80 [ 1575.269518][T23143] ? clear_bhb_loop+0x50/0xa0 [ 1575.274330][T23143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.280359][T23143] RIP: 0033:0x7fb03459bf79 [ 1575.284871][T23143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1575.304615][T23143] RSP: 002b:00007fb0354f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1575.313168][T23143] RAX: ffffffffffffffda RBX: 00007fb034816090 RCX: 00007fb03459bf79 [ 1575.321259][T23143] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 1575.329337][T23143] RBP: 00007fb0346327e0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.337406][T23143] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 1575.345467][T23143] R13: 00007fb034816128 R14: 00007fb034816090 R15: 00007fff3885b288 [ 1575.353584][T23143] [ 1575.357066][T23143] Kernel Offset: disabled [ 1575.361433][T23143] Rebooting in 86400 seconds..