last executing test programs: 36m0.415048989s ago: executing program 32 (id=16): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r1, 0x0, 0x0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) close(r5) 36m0.087654693s ago: executing program 33 (id=2): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f0000000040)=0x80000001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000000000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x3a) listen(r0, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) bind$l2tp(r3, &(0x7f0000000080)={0x2, 0x0, @broadcast, 0x2}, 0x10) 24m58.506708479s ago: executing program 34 (id=1095): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 24m40.948753615s ago: executing program 35 (id=1125): capset(&(0x7f0000000340)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x20000000}) setrlimit(0x40000000000008, &(0x7f0000000380)) mlockall(0x3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) getrlimit(0x5, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = eventfd2(0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{&(0x7f0000000180)=""/59, 0x3b}], 0x1) 24m5.903990894s ago: executing program 36 (id=1167): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000580)={[{@noblock_validity}, {}, {@user_xattr}, {@sb={'sb', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@dioread_lock}, {@usrjquota_path={'usrjquota', 0x3d, './file2'}}, {@dax}, {@nomblk_io_submit}]}, 0x1, 0x570, &(0x7f0000000800)="$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") chdir(0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00') 21m24.381547957s ago: executing program 37 (id=1350): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r5, &(0x7f00000001c0)={0x1d, r6}, 0x10) sendmsg$can_raw(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@can={{0x4, 0x0, 0x0, 0x1}, 0x6, 0x0, 0x0, 0x0, "0300"}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 21m12.221166216s ago: executing program 8 (id=1374): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) inotify_init1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), &(0x7f0000000000)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 21m11.387460026s ago: executing program 7 (id=1375): openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 21m10.569419174s ago: executing program 8 (id=1377): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x11, r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32={[0x2600]}}], 0xffc8) 21m9.592232297s ago: executing program 8 (id=1379): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xe, &(0x7f0000001700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 21m7.223147328s ago: executing program 7 (id=1380): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000002000000000000000018090000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000008850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000000300)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 21m7.036774642s ago: executing program 8 (id=1381): socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@perf_event={0x4}}, 0x18) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x80000000, 0x34524742, [0x1000, 0x7], [0x9, 0xfff], 0x108}}) syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4040, &(0x7f00000015c0)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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") socket$inet(0xa, 0x801, 0x84) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021940000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000006800038064000080080003400000000258000b80200001800a00010071756f7461000000100002800c000140000000000000"], 0x118}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 21m6.408224649s ago: executing program 7 (id=1382): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x840400, &(0x7f0000000080), 0x1, 0x55e, &(0x7f0000000240)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x88040, 0x100) link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') 21m5.681916432s ago: executing program 8 (id=1384): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="11000000040000000400000001"], 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[], 0x2, 0x5562, &(0x7f0000005f80)="$eJzs3M9rI1UcAPCXZLvr/rSIB287sAgtbMKmu130VnUXf2CX4o+DJ02TNGQ3yZQmTWtPgh7Fg/+JKHgSvPg3ePDsTTwo3gRl5k3VUn/skrRp3c8HJt83b16+eW8ILd/JMAF4bM0nv/xUClfC+RBCJYRwqRTydqnYcisxPBNCuBpCKP9lKxX9f3ScDSFcCCFcyZKH8PUwjskOfXp9fG35x9d+/urbc2cufvbld7NbNTBrz4YQ+puxvdOPMe3EeL/ob4y7eezfGhcxHug/KPbTGHfa63mGncb+uEYeb3bi+HRze5jFjV6jmcVOdyPv3xzEDxyOO/t58jfcb2zl+632eh67wzSPnb04r929+PdybziKeVpFvvfz9GE02o+xv73bjuvZfJDH5mBU9Me8aau9m8VxEYuPC82018rnsT7JmT7ZXu8OtneTcXtr2E0HyXKt/lytfrta30pb7VH7VrXRb92+lSx0etmw6qjd6K900rTTa9eaaX8xWeg0m9V6PVm4017vNgZJvV67WbtRXV4sWteTl++9nfRayUIWX+wOts92e8NkI91K4jsWk6XazecXk2v15M3VtWTtjbt3V9feevfOO/deWH31pWLQoWklC0s3lpaq9RvVpfriCVh/9n/3Idc/mmT9HxWTfoT1lyY7PfDvfMEAHtmh+j9Mt/6vBPU/cNhpr//DNOv/rKRS//93/VuevP6fqP49qfX/KV4/TET9DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw2Pp+7vNX8sZ83L9Y9F8uup4q9kshhHII4be/UQlnD+SsFHnm/mH83MEpZKnzDFnjXLFdCCGsFNuvTx71WQAAAID/ry8+uPpJrNbjy/ysJ8Rxihdtypfem1K+Ughhbv6HKWUrZy9PTylZ/v0+E3anlC2/gPXElJLFS25nppXtoVT2w4eX/+zMF1SKoXys0wEAAI5F5UA43ioEAACA4/TxrCfAbOT33Rf34hc38J+Lofhp8/yBYwAAAMApVJr1BAAAAIAjl9f/J+D5f+Gbkuf/AQAAwFGJz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOB3du4nV4kYDAD4NwOD+C8S496ruINjeASXLoUDeAmOgFfwApwBd+7dGDB0qr5JIO/l0WHyyO+XTKEt+doCm68DBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjTj2az+Pbl/ddL4+wPlymzGgAAAOCUXbNZpCeztv4yt7/OTW9zvYqIOiJO5e6jmHRijnKc5szrj+2pM/sekSIcx3iWrxcR8SFfv99c450AAACA27Rdredttt4Ws6EnxDW1mzb1q4+F4lUR0cx+FopWH4t3hYKl7/c4PheKlvaupoWCtVtu49N9k1KDdI06D3kl02X6EFOt7mdcAABgSN1M4EwWAgAAwA34NPQEGEb1r0j3Gf/+8v7/DcHnnRoAAADwBFVDTwAAAADoXcr/Bzv/7477zv/75W8JAAAA8Gjt+X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0addsFtvVen6uf/nAOPvDZcqtCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD/tzjwIhEMYANLv428nc/7AS0dLa5j0YCAlTfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfvfL/wlXcySZ2jbMrUeSpVPD2qlh69yw98P4+hoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgZH9eUiAEgiAK5oz/nfT9DysJegYRIqDhUUUtGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYuf+eeMmwwCAP+c7X/8AIgSUIYCKxAALTa6lpWMZQBEDHwEpSi8lcKXQZqBVBMoCE8rcBcGIEBIobP0OnRupS9k6ZAgSM8g+O3XbCz1KYl+V3096/T7+E7/P63OkPLETAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAChtvxuvJEXczhZTw7jcdntnbSnrtx7qMzc37sxmLYtbjxvo2/P7n/xke7W6cmKmsvJ1/ckAAABwOLTL+j4i7qabC1mfTOX1f1oek9X8Pzw3jMt6/uG6f2tn7Wixa7as/3//7d5LuwNNDcfJTrq8MujPP5pK54CmOPGef+wRnfzK5797aecfSPLB+ovbaX49W9/duvVeNw+P1JEtAPAkTpZ9EZQ/D2V9r8nEADg0OpXCu6z/21PN5gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh+31eKaMWxEx27kfZ7Z21pZG9Tc37syW7eyNGxvVc2anSCNieWXQT2ucy6S7eu36p4uDQf/KyCBiz13/PzgREQdz5j2CGLHrozG+POLfjyluz6hnFv8taE1GGo0GSfH5FFu69d51BxuU994+f6cAAMC+S4uW1fV3082FbFtrOuLvHx+s/9+oxDFm/X/v47O3q2NV6/9ebTOcfHOrlz6fu3rt+lsrlxYv9i/2P3v7VO+d3ulzZ86cm8uu1fzcciT9+abTBAAA4CnWLVq1/k+mH33+f7wSx5j1/xff976qjtVW/490/6Ff05kAAAAcRt3d6IXX/vqzNeKIVrcbXy6url7pDZe766eGy1rTfUJHilat/9vTTWcFAAAA1GF7vfXA8/8LlTjGfP7/7E8v/1I9ZzsijkVcjoj+yaXLgwv1TWei1fGHyvlA3aZnCgAAQFOOFa36/D/N3/9Pdl95SCLizdeHcfm/rsap/9vvf/Nzdazq+/+n65tik87vtSOZGV6PvJ+J6MzUmxgAAACHy9GiZcX+H+nmwie/Hv+w6/1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLr9EwAA///OfjLR") sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="24000000200001032abd7000000000000220000c0000000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000140), &(0x7f0000000200)=""/221, 0x1000000}, 0x20) socket$packet(0x11, 0x3, 0x300) 21m4.999749587s ago: executing program 7 (id=1385): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x50) inotify_init1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r3}, &(0x7f0000000240), &(0x7f0000000000)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c) syz_emit_ethernet(0xe, &(0x7f0000001980)={@remote, @empty, @void, {@generic={0x8884}}}, 0x0) 21m2.12794577s ago: executing program 7 (id=1387): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYBLOB], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 21m0.643540493s ago: executing program 8 (id=1388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$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") 21m0.249992497s ago: executing program 7 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001fc0)={0x2020}, 0x2020) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4802, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 20m45.253451661s ago: executing program 38 (id=1388): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000280)=@framed={{}, [@printk={@llx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@commit={'commit', 0x3d, 0x5}}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@debug}]}, 0xfe, 0x46d, &(0x7f0000000f00)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQKNbQmQohWD3g0JN6N/4XxpBejXjTxqndDQgwXUC9rZmemLMtu2aXbLnQ/n2S6zzPzdJ/nOzPP7jPz7G4APWsk+5NE/C8ifo+IoTx7a4GR/OHGtYtTf1+7OJVEpfLWX0m13PVrF6fKouX/bcszlUqR39Sg3kvvRkzOzc2cK/Jji2c+GFs4f+GF2TOTp2ZOzZydOHbs8KG9g0cnjnQkziyu67s/nt+z6/g7l9+YOnH5vZ+S/sjjjro4OmUk37sNPd3pyrpse026umOX7fvlZrrRmUA39UVEdrgGqv1/KPpiy/K2oXjts642DlhTlUqlssKr8lIF2MCS6HYLgO4o3+iz699yWaehxz3h6sv5BVAW941iybf0R5on9g3UXd920khEnFj656tsiTW6DwEAUOu7bPzzfKPxXxoP54nB7M//izmU4Yh4ICJ2RMSDEbEzIh6KqJZ9JCIebbP++hmS28c/6ZW7Dq4F2fjvpWJu69bxX1oWGe4rctur8Q8kJ2fnZg4W++RADGw6OZvMjK9Qx/ev/vZFs221479syeovx4JFO670192gm55cnFxNzLWufhqxu79R/EmU0zhJROyKiN13Wcfss/1Nt905/hU0f9qWVb6OeCY//ktRF38paTo/Of7i0YkjY5tjbubgWHlW3O7nXy+92az+VcXfAdnx39rw/F+OfzjZHLFw/sLp6nztQvt1XPrj86bXNG2e/8e3F+f/YPJ2dcVgseGjycXFc+MRg8nrt6+fuPlsZb4sn8V/YH/j/r8jbu6JxyJiT0TsjYjHs4vCou1PRMSTEbF/hfh/fOWp99uPf33mSrP4p+90/KP2+Lef6Dv9w7d3jn9zRDQ7/oerqQPFmlZe/1pt4Gr2HQAAANwv0upn4JN0dDmdpqOj+Wf4d8bWdG5+YfG5k/Mfnp3OPys/HANpeadrqOZ+6Hhxb7jMT9TlDxX3jb/s21LNj07Nz013O3jocdua9P/Mn33dbh2w5jowjwbcp/R/6F36P/SmRP+Hnqb/Q+9q1P8/aVp69Js1bQywrrz/Q+9qof8v5Q/NRwXA/cn7P/Qu/R96UtPvxqer+sr/uif+LX7P8F5pz8ZPRHpPNGPjJ/pb/jGLNhKVobz/Z2s2NSzT7VcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAzvgvAAD//w3J5b0=") 20m44.851615376s ago: executing program 39 (id=1390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock_addr=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000001fc0)={0x2020}, 0x2020) openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x4802, 0x0) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYBLOB="030704707900000000000100040004000180"], 0x18}}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) 15m30.350588844s ago: executing program 4 (id=1930): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000000)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@noquota}, {@bsdgroups}, {@usrjquota, 0x22}, {@nojournal_checksum}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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") mount(0x0, 0x0, 0x0, 0x2390024, &(0x7f0000000000)) 15m28.336162106s ago: executing program 4 (id=1935): timerfd_settime(0xffffffffffffffff, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) read(0xffffffffffffffff, &(0x7f0000000240)=""/123, 0x7b) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x3000c89c) sendmmsg(r0, 0x0, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket(0xa, 0x3, 0x3a) syz_emit_vhci(&(0x7f0000000100)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x2, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_req={{0x6, 0x58, 0x4}, {0xfff, 0x837}}}}, 0x11) 15m27.202165535s ago: executing program 4 (id=1941): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x800810, &(0x7f0000000180)={[{@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1d3) creat(0x0, 0x0) 15m23.444260444s ago: executing program 4 (id=1946): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f13608060001080006040002aaaaaaaaaaaaac1414bbaaaaaaaaaaaaac1414bbf47152c215473674074c146e65dd0e8b67b85dba37670bf70d9ae662f30db28f503e26c04c761c12ee318d64bce3e723"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071100400000000001ca00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r4, {0xc, 0x4}, {}, {0x3, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xb, 0xf, 0x3, 0x7, 0x7ae, 0x9, 0xb11, 0x65}}]}}]}, 0x44}}, 0x20040054) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x1, 0xc, 0x0, "b386e614cf608ab3ecb1c4de00ea2eccde0a51309f77d20b18807a2e04ebdf75", 0x35323645}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_emit_ethernet(0x25f, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @val={@void, {0x8100, 0x5}}, {@mpls_uc={0x8847, {[], @ipv6=@udp={0x5, 0x6, "bf9588", 0x225, 0x11, 0x1, @dev={0xfe, 0x80, '\x00', 0x15}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x2, 0x0, 0x80, 0x1, 0x0, 0x1e, 0x66}, @srh={0x2f, 0xe, 0x4, 0x7, 0x10, 0x8, 0x7fff, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0, @local, @remote, @private0={0xfc, 0x0, '\x00', 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}, @fragment={0x2e, 0x0, 0x6, 0x0, 0x0, 0x9, 0x68}, @hopopts={0x0, 0x1f, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8a, 0xe4, "c3d8121acf135731e3ac068cb85c89bae72c4fc4e2905a18570f7e3373d05e76a32b023e16ffac5b16d1216a36e45a1cd118eb5a7cc2f2258cfa79ca4f35743e0aef77b0a4307b7a1d3ca5ef0a04f2eb136110fff5b949d508790d8b5cfbe55c46f718dc73f8f6a4828fba4dd1c10bd9dc7ff1c7b742b0209b0c1d413c13c2aeaec754ae9ad0a62c37424aa392916c677bcc9d01d684c50ee25873a7d97d60ad77141cbabbc584c56648f0476ab71bdf4bd134aac27b1bb5a7713cafd166b00f42b23a832991ebf705ce1082f93283567b2f1567843721a65c76f2c05090e9d03d6b8907"}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x4f}, @ra={0x5, 0x2, 0x1000}]}, @dstopts={0x5c, 0x6, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x2, [0xa, 0x0]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x5b2}]}], {0x4e22, 0x4e20, 0x55, 0x0, @gue={{0x2, 0x0, 0x3, 0x7, 0x100, @val=0x80}, "c996ba1a5680b49e568fb107e8c94c942d9453d8a6a6eabdefc17e868a7b133cae76898f533c175212d028c423805fc22cf4734411a33f09cb56b9b8180770e18cbaf68d3b"}}}}}}}}, 0x0) 15m19.433861068s ago: executing program 4 (id=1953): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000540)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRES32=0x0, @ANYRES8=0x0], 0x1, 0x6eb, &(0x7f0000000dc0)="$eJzs3UtoHPcdB/DvrFYvFxw58SMtgYgY0lJTW7JwWvdSt5TiQyghPfQsHDkWXttBUopsSqP0ce8hh9JTetAt9FDSu6E9N6SUXHUMFHLJyTeVnZ1d7UqrXcmSJTX5fMTs/Gf+z/nNzszuDmICfG3dvJT64xS5een11ebyxvpcY2R9brzKbiQZS1JL6s1ZM30/Ze6Naso3kxRV+aLT8L97+/lg8fqbn3258XlrqV5NZfmip95wYztXrVVTppOMVPOdRndp8ePt3fe0d2vX9vZqawubAbvYDlz+fKBW4cA2d1jr5H30n/J1UPX9HLfACVW0rps7TCWnkkwkrat+dXaoHe3oDt/acQ8AAAAA9mty/1Wee5InWc3pZzEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Kqqnv9fVFOtnZ5O0X7+/1i1LlX6BBr+IMRPx1vzx89+MAAAAAAAAADwzL38JE+ymtPt5c2ivOf/Stc9/m/k3SxnIUu5nNXMZyUrWcpskqmuhsZW51dWlmbLmsnZATWv5pM+Na/uPsYbh7zNAAAAAAAAAHDCTQzJvztazv7U/X/7v83Nrfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwEhTJSGtWTmfb6anU6kkm2uXWkk+SjB3vaPel6Lfy8dGPAwAAAA5konexmNhDnefey5Os5nR7ebMov/OfL78vT+Td3M9KFrOSRhbyVvUduvmtv7axPtfYWJ+715x2tvvjL/Y19LLFtH576N9zkrV6kttZLNdczq0U2SzVqlZe3Fifa87v9R/X+80xFT+qDBjNSFe67PnCx2X6j72/ItT3tYlPqbZrzlSZO9qJyEw1tmaNM+0I9I9Ez97p9zapD+xpNrXOLz9nB/fUP+bvD97mU9tK9f3l5lhsj8TV1Dp76PzgSCTf/vtHv7zTuH/3zu3lSydnk/p6b2iJ7ZGY64rEha9QJIabKSNxrrN8Mz/LL3IpX4y/kaUs5leZz0oWptv589X7ufk6NThSn57qXnpj2Eiax+R05/zVb0zT6RlTpvPTMjWfV8p9ejqLKfIgyUJeK/+uZrZzNtjaw+f2cNTX9nCm7XLxO+WsE6ZM7l72r3tr8rA043qmK67d59ypMq97zVaUnu8bpfa1bu/Xoy71b1WJZgu/G3h9OGrbIzHbFYkXdnu/tEL6l/Jqsty4f3fpzvw7e+zv1WrePI7+cKKuEs2teT4T1cadKV+L8piaKfNe6Fxhe+M1Vt1xaantyDvXqdc6Un+eB3mr50j9fq7lWq6Xpc+XpUd3XLGaeRc6LfWew5t5LzbzOjd2uj9vPUij9XkIgJPt1HdPjU3+d/Jfkx9O/n7yzuTrEz8Z/8H4S2MZ/efoD+szI6/WXir+lg/zm63v/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNNbfvjo7nyjsbDUP1Hrn1UMrjXf2Gw/SGxAmZ5EUT0qZw+Fi+WHjzaHNjg4MV4N7ymrH2ai/Ri+4YWnB7ZTP9AwirXt+2ti+L5oP+VpD10UOwLerPzUoWv3vLVm9ATsyu2J6cNrsP2G7craz7t3tOeg78kaSdKv1pATx8jBzjvA8buycu+dK8sPH31v8d782wtvL9wfvXbt+sz1a6/NXbm92FiYab12VTiSh98CR6H740THWJKXh9cd8KBWAAAAAAAAAAAA4Bk6iv+FOO5tBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/3byU+uMUmZ25PNNc3lifazSndnqrZD1JLUnx66T4R3IjrSlTXc0Vu/XzweL1Nz/7cuPzrbbq7fK1ZG3XenuzVk2ZTjJSzQ+rvVvD2xvbSo73yS46kWkG7GI7cHDc/hcAAP//ZuzqYw==") getdents(0xffffffffffffffff, &(0x7f0000000040)=""/61, 0x3d) 15m18.185057957s ago: executing program 4 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000019, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) 15m2.097426384s ago: executing program 40 (id=1957): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x54) chdir(&(0x7f0000000140)='./bus\x00') pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0) splice(r4, 0x0, r5, 0x0, 0x10000000000019, 0x0) open(&(0x7f0000000300)='./bus\x00', 0x14103e, 0x18a) 14m15.388155046s ago: executing program 9 (id=2051): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = socket$kcm(0xa, 0x922000000003, 0x11) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000780)="f4000900062b8825fe80000000000000dc8b850f238466cc00007a000000ad6e911b51818462b4003a000001", 0x2c}], 0x1}, 0x0) 14m14.414647531s ago: executing program 9 (id=2052): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}], 0x1}}], 0x48}, 0x0) 14m13.198814797s ago: executing program 9 (id=2055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000004c0)=0x4) syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000040)='./bus\x00', 0xa18008, &(0x7f0000000280)=ANY=[], 0x1, 0x5512, &(0x7f00000087c0)="$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") r0 = semget$private(0x0, 0x4, 0x0) semop(r0, &(0x7f0000000040)=[{0x0, 0x8, 0x1800}], 0x1) syz_mount_image$squashfs(&(0x7f00000010c0), &(0x7f0000001100)='./file0\x00', 0xa10040, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x0, 0x1ae, &(0x7f0000000f00)="$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") symlink(0x0, 0x0) open(0x0, 0x60840, 0x0) open(&(0x7f0000000000)='.\x00', 0x0, 0xb) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) lchown(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 14m10.57103351s ago: executing program 9 (id=2060): r0 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x14fe, &(0x7f0000002ac0)="$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") r1 = syz_open_dev$evdev(&(0x7f0000000200), 0x200, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x40084503, &(0x7f0000ffcffc)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r2 = socket$inet6(0xa, 0x3, 0x38) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x8, 0x100105, @remote, 0xb}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_UNLINK(r3, 0x40044160, 0x3) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xf338}], 0x1) setuid(0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x545002, 0x0) pwritev2(r4, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x8000, 0x700, 0x5, 0x9, {{0x8, 0x4, 0x0, 0x31, 0x20, 0x68, 0x0, 0xc8, 0x6, 0x0, @loopback, @multicast1, {[@rr={0x7, 0xb, 0xe4, [@broadcast, @dev={0xac, 0x14, 0x14, 0xd}]}]}}}}}) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r6, 0x40345410, &(0x7f00000083c0)={{0x1}}) ptrace(0x10, r5) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r5) ptrace$peeksig(0x4209, r5, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 14m2.716656626s ago: executing program 9 (id=2068): pipe2$watch_queue(0x0, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='spmi_write_end\x00', 0xffffffffffffffff, 0x0, 0xe}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext2\x00', &(0x7f0000000c40)='./file0\x00', 0x808080, &(0x7f0000000c80)={[{@discard}, {@bh}, {@noblock_validity}]}, 0x2c, 0x52c, &(0x7f0000000640)="$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") r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002680)=ANY=[@ANYBLOB="140000001000010000000000000007000000000a60000000060a0b0400000000000000000200000034000480200001800e000100636f6e6e6c696d69740000000c000280080001400000000010000180090001006c617374000000000900010073797a30000000000900020073797a3200000000"], 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x0) 14m1.059755928s ago: executing program 9 (id=2072): socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000003c0)="45533b8eded5fb4614cf3924049596cbbf552a480932f0e9132bc1f77f27fa918bc068aa81d328d8cca5df286b89643fd1ec3ab30f1466b632c16e11cfad478a9dfb548973b5c86c71db7b9e7f5eae4186155c624e934a8265380ee710eb506f7586056632709c3a90d6af4a24bde57cb90089c6dd2520c504a93254567376b20d3416063c0da8aebc9c0898260a8e382d1d44ea363cbabcdfe594b732058453cab64f7514096fe57398fc81c69e442bd1ea1c275fff026cab186fcbe0d43a7d84", 0xc1, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="280914f0aacf407886fe4ab9f4775882e112a57d01c7943e332e2d707e6e29d0bbcf2bb957727fce4e6ac726f0ed60a466f18e731520b1edea3cafad61904b76f2f5a1521e0391bd94b296577b4bb54f46322947dc130d86e2a97d8eaa46586cc0db060c8cf05e73f9f4b6a8524f54a6", 0x70, 0x0) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r0, r2, r3}, &(0x7f0000000540)=""/108, 0x6c, &(0x7f0000000600)={&(0x7f00000005c0)={'sha512-avx2\x00'}}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dd6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d415c12e6c42021b43e26578db3f2b475ea0ebb199323d", 0xfffffda9, 0x0, &(0x7f0000000380), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000ac0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5, 0x0, 0x3}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xb47}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4008032, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) time(0x0) 13m58.705365479s ago: executing program 41 (id=2072): socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000900)=ANY=[@ANYBLOB="8c0000001000370400"/20, @ANYRES32, @ANYBLOB="00000000000000006c0012800e00010069703665727370616e0000005800028014000600200100000000000000000000000000020500160001000000140007"], 0x8c}}, 0x0) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d25a9850", 0x4, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xffffffffffffff02, 0x0) r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, &(0x7f00000003c0)="45533b8eded5fb4614cf3924049596cbbf552a480932f0e9132bc1f77f27fa918bc068aa81d328d8cca5df286b89643fd1ec3ab30f1466b632c16e11cfad478a9dfb548973b5c86c71db7b9e7f5eae4186155c624e934a8265380ee710eb506f7586056632709c3a90d6af4a24bde57cb90089c6dd2520c504a93254567376b20d3416063c0da8aebc9c0898260a8e382d1d44ea363cbabcdfe594b732058453cab64f7514096fe57398fc81c69e442bd1ea1c275fff026cab186fcbe0d43a7d84", 0xc1, 0xffffffffffffffff) r3 = add_key(&(0x7f0000000100)='id_resolver\x00', &(0x7f0000000180)={'syz', 0x1}, &(0x7f00000001c0)="280914f0aacf407886fe4ab9f4775882e112a57d01c7943e332e2d707e6e29d0bbcf2bb957727fce4e6ac726f0ed60a466f18e731520b1edea3cafad61904b76f2f5a1521e0391bd94b296577b4bb54f46322947dc130d86e2a97d8eaa46586cc0db060c8cf05e73f9f4b6a8524f54a6", 0x70, 0x0) keyctl$dh_compute(0x17, &(0x7f00000004c0)={r0, r2, r3}, &(0x7f0000000540)=""/108, 0x6c, &(0x7f0000000600)={&(0x7f00000005c0)={'sha512-avx2\x00'}}) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(r4, &(0x7f0000000d80)="5ca02049a8825024892f61601e3137d09d6e5d0e54d55be9d6d460eb78e3eb94c0b3866b091d34dc3ed67172ae1e7f390d505c084609e4491d372fe4888a3c3e660cc6fc3fd9b97c6c923389653eb074d96a3f1768e30f818adf94780feeab011de24785dd6cf88777a7806c05d0ed88fa985d77aab6996fa1af1190d1620732d9f2f9712e1182b815f0d415c12e6c42021b43e26578db3f2b475ea0ebb199323d", 0xfffffda9, 0x0, &(0x7f0000000380), 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x24, 0x24, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000000ac0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r5, 0x0, 0x3}, 0x18) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r6, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00'}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0xb47}, 0x38) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000040)) socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x4008032, 0xffffffffffffffff, 0xffffe000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) time(0x0) 9m44.50584715s ago: executing program 3 (id=2894): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) syz_fuse_handle_req(r1, 0x0, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) ioctl$mixer_OSS_GETVERSION(0xffffffffffffffff, 0x80044d76, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) socket$inet(0x2, 0x80000, 0x1) syz_usb_control_io$printer(r0, 0x0, 0x0) 9m42.845702894s ago: executing program 3 (id=2903): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xad, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000080)={0xffffffffffffffff, r0, 0x4, r0}, 0x73) 9m42.199734034s ago: executing program 3 (id=2905): syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="6d6f64653d3078303030303030303030303030303030372c6e6f6a6f6c696574006e6f6a6f6c6965742c6f76657272696465726f636b70ddcd18e60e65726d2c6d61703d6e6f726d616c2c7362736563746f723d30783030303030303066742c66736d616769633d3078303030303030303030303030303030312c6d61736b3d4d41595f52ff2244049519f209b67acc7921893895b1c01f00"/165], 0x0, 0x63f, &(0x7f0000000f80)="$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") r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000540)='./file0\x00', 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xff, 0x19c, &(0x7f0000000200)="$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") r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TUNATTACHFILTER(r2, 0x401054d5, &(0x7f0000000040)={0x2000003c, &(0x7f0000000280)}) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000040)=ANY=[], 0x6) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x1218088, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0xa, 0x2c2, &(0x7f00000008c0)="$eJzs3T+LI2UcB/DfZLOTUYuksBLhBrzC6nCvE5sscgfiVh4p1EIX7w5kE4Q7WPAPxqtsbSwsfAWC4Au5xncg2Ap2nnAwMpOZndk1xkQ2K7f7+TT72+d5vjPPMxmys0WefPjy7OhuHvcfffFLZFkSvXGM40kSo+hF46s4ZfxNAADPsidFEb8XC5vkkojItjctAGCL1vv732/Lny5kWgDAFt1597239w8Obr2TRRa3Z18fT8r/7Mufi/79+/FxTONevBbDeBpRPSjsRvW0UJa3i6KY9/PSKK7P5seTMjn74HF9/P3fIqr8XgxjVDWdPG1U+bcObu3lC538vJzH8/X5x2X+ZgzjxZPwqfzNJfmYpPHqK53534hh/PxRfBLTuFtNos1/uZfnbxbf/vH5++X0ynwyP54MqnGtYueCXxoAAAAAAAAAAAAAAAAAAAAAAC6xG/XeOYPIr8X1WdlU77+z8zTS8te8MWpTZf+iSpqm7v5ARVHMi/i+s6VgXtQD2/19+vFSv7uxIAAAAAAAAAAAAAAAAAAAAFxdDz/97OhwOr334FyKZjeAfkT8eSfivx5n3Gm5FqsHD+pzHk6nvbo8NeZx2m2JnWZMErFyGuUizumy/Fvx3Nk5N8UPP5YL3OSAWafl9eUL3N3+upq76+gwWX6uQTQtWX2TfJdGtGPSWPNc6T91FbHJ7Zcu7RpuvPb0haqYrxgTyaqJvfHr4srVLcnZVaTVVV0a362LTvzMvbHW6x7ZIv7394qk2q1jsL03IwAAAAAAAAAAAAAAAAAAuOLaT/8u6Xy0MtorfBQYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEui/f7/DYp5HV5jcBoPHv7PSwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAK+CsAAP//hipWFQ==") socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000009, 0x12, r4, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r5, 0x107, 0x15, 0x0, &(0x7f0000000000)) statx(r0, &(0x7f0000000000)='./file0\x00', 0x800, 0x80, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000bc0)={{{@in=@multicast2, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@local}}, &(0x7f0000000140)=0xe8) add_key$keyring(&(0x7f0000000500), &(0x7f0000000540)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r8 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r8, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r8, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x7, 0x1, '\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x5, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0x9, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffffffffe, 0xfe7, 0x8000000000000000, 0x2, 0x8, 0x7ff, 0x9, 0x9f3, 0x2e4c, 0xfffffffffffffff7, 0x5, 0x7, 0x3ff, 0x2, 0x2, 0xe, 0x5, 0x1, 0x106a, 0x100000000002, 0x6, 0x5, 0xffffffff, 0x0, 0x9, 0x1b9315a1, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x7, 0xffa5, 0x6, 0x3, 0x1, 0xfffffffffffff800, 0x244, 0x1, 0x20, 0x0, 0x2, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x2, 0x4, 0x4, 0xf, 0xae9, 0x3, 0x2, 0x6, 0x9, 0x7, 0x0, 0x0, 0x7ff, 0x4, 0x7, 0x4, 0x9, 0x65, 0x10000, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xffffffffffffffff, 0xfff, 0x93, 0x6, 0x3, 0x8000000000000000, 0x9, 0x20000000000002, 0x7ff, 0x7, 0x8, 0x7fff, 0x0, 0x2, 0x8, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x9, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xffffffffffffffff, 0x7]}) r9 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff8) keyctl$get_security(0x11, r9, &(0x7f00000000c0)=""/88, 0x58) lchown(&(0x7f0000000680)='./file0\x00', r7, r6) 9m41.417440588s ago: executing program 3 (id=2910): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0xfe, 0x0, &(0x7f0000000000)) msgrcv(0x0, 0x0, 0x0, 0x0, 0x1000) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xa, &(0x7f0000000000)=0x2, 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0xae2, 0x1, 0x0, 0x1}, 0x1c) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) r0 = syz_mount_image$udf(&(0x7f0000000400), &(0x7f0000000100)='./file0\x00', 0x804008, &(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES16], 0x1, 0x4b1, &(0x7f0000000740)="$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") finit_module(0xffffffffffffffff, 0x0, 0x3) openat(0xffffffffffffff9c, 0x0, 0xc440, 0x8) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file7\x00', 0x400, &(0x7f0000000540)=ANY=[@ANYRES8=r0], 0xfd, 0x2b3, &(0x7f0000000c00)="$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") r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 9m40.702496181s ago: executing program 3 (id=2916): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 9m40.099905452s ago: executing program 3 (id=2919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 9m24.131177196s ago: executing program 42 (id=2919): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) 13.60753529s ago: executing program 2 (id=4924): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0700000004000000080200000e"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000ec000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r1}, 0x18) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x54}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.042715687s ago: executing program 2 (id=4926): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xdd4, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0xb6}}, @filter_kind_options=@f_bpf={{0x8}, {0xd98, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0xd78, 0x1, [@m_simple={0x30, 0x3e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0xcd8, 0x8, 0x0, 0x0, {{0xd}, {0xac, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xce, 0x2, 0x7, 0x6, 0x40}, 0x9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xe6d, 0x1, 0x20000000, 0x7, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7fffffff, 0xfffffffd, 0x1, 0xd66, 0x2}, 0xc}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffff801, 0x7, 0x0, 0x4, 0x3}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf06, 0x2, 0x4}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x100, 0x6, 0x5, 0x8}, 0x7}}]}, {0xbff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x6c, 0x15, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x4, 0x8, 0xc, 0x8}, 0xff21}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x2, 0x20000000, 0x1, 0x6}, 0x8}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}]}}]}, 0xdd4}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 12.46777438s ago: executing program 2 (id=4927): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000940)={0x0, 0x4e55, 0x10100, 0x0, 0x339}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 11.963331336s ago: executing program 2 (id=4932): r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$usbmon(&(0x7f00000000c0), 0x34210000, 0x4040) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) unshare(0x20040400) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r2 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbcf, 0x10100, 0x0, 0x242, 0x0, r1}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r2, 0x353, 0x0, 0x0, 0x0, 0x0) signalfd(r1, &(0x7f0000002340), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104fcffffff0000000000fa0000", @ANYRES32=0x0, @ANYBLOB="00000000610006002400128009000100626f6e64000000001400028008000300030000000800070008000000"], 0x44}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r8 = syz_open_procfs(0x0, 0x0) preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/56, 0x38}], 0x1, 0x6, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@remote, 0x0, 0x56, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x33}, 0x2, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffefffff, 0x0, 0x4}}, 0xe8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000e0095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_gettime(0xffffffffffffffff, 0x0) 8.780015706s ago: executing program 2 (id=4941): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r0, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x2, 0x7, 0x0, 0x401, 0xe0, 0x1, 0xdc, 0x8, 0x0, 0x82, 0x6, 0x0, 0x730c, 0x2, 0x6f, 0x1, 0x4f, 0x3, '\x00', 0x8, 0x1}) 8.0669416s ago: executing program 2 (id=4942): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_io_uring_setup(0x24f6, &(0x7f0000000940)={0x0, 0x4e55, 0x10100, 0x0, 0x339}, &(0x7f0000000100)=0x0, &(0x7f0000000240)=0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB], 0x38}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CLOSE={0x13, 0x8}) io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 7.432913992s ago: executing program 1 (id=4946): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000010000104fcffffff8000000000000000", @ANYBLOB="0315000000000000400012800c0001006d6163766c616e00300002801000058005000400aaaaaaaaaaaa000008000300030000000a0004"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7.312619713s ago: executing program 0 (id=4947): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0500000000000000000200000000", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="05000000bf00e7f0ff0f00000000000078cd86d1b1954f11f6f832393e03017a919c60a7212fc3da31e07b77569b0def5ac696fc5ac519a58c3a071e38f6dad46a2ee64aa6adcfb7b122dfe32998bb", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000003000020010300006ee7ba2197db18bc"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x20400) fsopen(0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 6.98346301s ago: executing program 6 (id=4949): ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000040)={0x2, 0x3, @remote}, 0x10) syz_emit_ethernet(0x2a, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbbbbbbb5a01f3c2f13608060001080006040002aaaaaaaaaaaaac1414bbaaaaaaaaaaaaac1414bbf47152c215473674074c146e65dd0e8b67b85dba37670bf70d9ae662f30db28f503e26c04c761c12ee318d64bce3e723"], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071100400000000001ca00000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000080), 0xfffffffffffffffb, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0x4}, {}, {0x3, 0x5}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0xb, 0xf, 0x3, 0x7, 0x7ae, 0x9, 0xb11, 0x65}}]}}]}, 0x44}}, 0x20040054) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x1, 0xc, 0x0, "b386e614cf608ab3ecb1c4de00ea2eccde0a51309f77d20b18807a2e04ebdf75", 0x35323645}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) syz_emit_ethernet(0x247, &(0x7f0000000380)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}, @val={@void, {0x8100, 0x5}}, {@mpls_uc={0x8847, {[], @ipv6=@udp={0x5, 0x6, "bf9588", 0x20d, 0x11, 0x1, @dev={0xfe, 0x80, '\x00', 0x15}, @private0={0xfc, 0x0, '\x00', 0x1}, {[@fragment={0x2, 0x0, 0x80, 0x1, 0x0, 0x1e, 0x66}, @srh={0x2f, 0xe, 0x4, 0x7, 0x10, 0x8, 0x7fff, [@private2={0xfc, 0x2, '\x00', 0x1}, @private0, @local, @remote, @private0={0xfc, 0x0, '\x00', 0x3}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1]}, @fragment={0x2e, 0x0, 0x6, 0x0, 0x0, 0x9, 0x68}, @hopopts={0x0, 0x1f, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x8a, 0xe4, "c3d8121acf135731e3ac068cb85c89bae72c4fc4e2905a18570f7e3373d05e76a32b023e16ffac5b16d1216a36e45a1cd118eb5a7cc2f2258cfa79ca4f35743e0aef77b0a4307b7a1d3ca5ef0a04f2eb136110fff5b949d508790d8b5cfbe55c46f718dc73f8f6a4828fba4dd1c10bd9dc7ff1c7b742b0209b0c1d413c13c2aeaec754ae9ad0a62c37424aa392916c677bcc9d01d684c50ee25873a7d97d60ad77141cbabbc584c56648f0476ab71bdf4bd134aac27b1bb5a7713cafd166b00f42b23a832991ebf705ce1082f93283567b2f1567843721a65c76f2c05090e9d03d6b8907"}, @ra={0x5, 0x2, 0x9}, @enc_lim={0x4, 0x1, 0x4f}, @ra={0x5, 0x2, 0x1000}]}, @dstopts={0x5c, 0x3, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @empty}}, @ra={0x5, 0x2, 0x8}, @ra={0x5, 0x2, 0x5b2}]}], {0x4e22, 0x4e20, 0x55, 0x0, @gue={{0x2, 0x0, 0x3, 0x7, 0x100, @val=0x80}, "c996ba1a5680b49e568fb107e8c94c942d9453d8a6a6eabdefc17e868a7b133cae76898f533c175212d028c423805fc22cf4734411a33f09cb56b9b8180770e18cbaf68d3b"}}}}}}}}, 0x0) 6.912505036s ago: executing program 1 (id=4950): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000600), &(0x7f0000000640)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7f, 0x88, &(0x7f0000000340)=""/136, 0x41000, 0x4, '\x00', r3, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0xd6, 0x70b94f92}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000480)="93378e0762cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c11dbb35b448a0037ffc52007bdc5d1c546f6bd0", 0x34) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x8}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 6.798126799s ago: executing program 5 (id=4951): r0 = socket$key(0xf, 0x3, 0x2) syz_open_dev$usbmon(&(0x7f00000000c0), 0x34210000, 0x4040) sendmsg$key(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0207e80702"], 0x10}}, 0x40044) unshare(0x20040400) r1 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) r2 = syz_io_uring_setup(0xddf, &(0x7f0000000300)={0x0, 0xbbcf, 0x10100, 0x0, 0x242, 0x0, r1}, 0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r1}) write$UHID_INPUT(r1, &(0x7f0000000680)={0x8, {"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", 0x1000}}, 0x1006) io_uring_enter(r2, 0x353, 0x0, 0x0, 0x0, 0x0) signalfd(r1, &(0x7f0000002340), 0x8) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='netlink_extack\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000104fcffffff0000000000fa0000", @ANYRES32=0x0, @ANYBLOB="00000000610006002400128009000100626f6e64000000001400028008000300030000000800070008000000"], 0x44}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x84) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r7, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}, 0x0, 0x0, 0xff}, 0x20) r8 = syz_open_procfs(0x0, 0x0) preadv(r8, &(0x7f00000002c0)=[{&(0x7f0000000100)=""/56, 0x38}], 0x1, 0x6, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private2, @in6=@remote, 0x0, 0x56, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x2000000, 0x2}, {0x7, 0x0, 0x4}, 0x1, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x30}, 0x0, 0x33}, 0x2, @in=@loopback, 0x3507, 0x4, 0x0, 0x0, 0xffefffff, 0x0, 0x4}}, 0xe8) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000e0095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r9}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) timerfd_gettime(0xffffffffffffffff, 0x0) 6.310975348s ago: executing program 0 (id=4952): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x2, 0x7, 0x0, 0x401, 0xe0, 0x1, 0xdc, 0x8, 0x0, 0x82, 0x6, 0x0, 0x730c, 0x2, 0x6f, 0x1, 0x4f, 0x3, '\x00', 0x8, 0x1}) 5.434693091s ago: executing program 6 (id=4953): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x44, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0xb6}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 5.376062677s ago: executing program 0 (id=4954): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./file1\x00', 0x4d06, &(0x7f0000000180)=ANY=[], 0x1, 0x688, &(0x7f0000001340)="$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") io_setup(0x202, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 4.819500792s ago: executing program 1 (id=4955): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="8fbabae063b30ae08873445d552994ae156a0debee1f65211e8a404933122aefacbee55818fd4bb9770fe0ed5f762bcf161b65f160074d626b8ca4f01acc95cbe0d28699ae7191e4b85c414fe5ce6bd9c9", 0x51}], 0x1}, 0x20048014) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x2, 0x7, 0x0, 0x401, 0xe0, 0x1, 0xdc, 0x8, 0x0, 0x82, 0x6, 0x0, 0x730c, 0x2, 0x6f, 0x1, 0x4f, 0x3, '\x00', 0x8, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getrandom(0x0, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000400)={[], 0x23}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r4, &(0x7f0000000880)}, 0x20) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x9, 0x11, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.192048103s ago: executing program 5 (id=4956): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x1480c, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES64, @ANYRES16=0x0, @ANYRES8, @ANYBLOB="c85fb6eba7e56788375cd72fce22a1abfcd6d806077c0ace8719da9e7cc6e83ba005b48ddc42acd013bbade11c45e63987cb0b242bef8593c4bf44b1c946746cba0a85ae7b00b3698e4f445f", @ANYBLOB="108f2bbc120007171ae540810800f1d9ed7e6b556183cf5283da18c329fc2d1132e25424748c5ce2f044a26a71a4de16e74d22c6a1c791fde85bd9a764fe6fce36aa6b3fa6955e74b5b00555552570a64d455cedd37b6ad3f685ff3807c16bc31bc554aedf0b654e4fd98d6fee2d132b17cfa29e5cb8ad61cfa808973a8765ee335d3d94ed492ec65735a9789fec9e90fcf11ddc857c39ecfaeff5d28676fb5647093c8d4c7ed6ffe24515ce75f94c6e71ba05f8f7afb787856e3c7f6296f2b92894e189750940ccc0dda4db6115e9c8399bc0805eaf4cd1cd0824c2ac82d9a43f9e763a90b662", @ANYRES64=0x0, @ANYRES8, @ANYRES16], 0x1, 0xa99, &(0x7f0000000500)="$eJzs3U+MG1f9APCxd73JJukvTn8JDWlpEwq0Arrb7IbwJ4KmaiRE1FTcKlVcojQtEWlApBK0itQkJ260isIN8UeceqkKQqIXFPXEpRKNxKWnwoEDUZAicYCWxGi973ntb+yMnf3j9frzkcbPM++N35vZmdmZNzPvFcDYqjY/a83Py+9cOvKPz/19euH7E60U9ebnZNvYQupKGp8Mv/fhxGJ488a5E93CSjHX/MzjxTPXW/NuLYrifLG3uFLUiz2Xr77x3tzTxy4cvbjv/TcPXVuNZQcAgHHz7SuHDuz665/v3/HRWw8eLja1pufz83oa35bO+w+nE/98/l8tOscrbUO7qZBuMg3VkG6iS7r2fGo53ebO+WL+U+F3az3SbSrJf6JtWrflhlGWt+N6UanOdIxXqzMzi9fkRfO6fqoyc+bU6RfODqmgwIr710NFUew1GMZtaGxv7QRd4l8bevnWZmhbCwBDFe8X3uZ8rFlYntavTfaX//Unq93nhxVw5+3vwopv/3fKv9YtwRrm3zXBKudfnO8sx1rnX7b8v7ngiMPK6X9r2ryq5VhpebnyfrQtjcf7CPH5pUGPP/n3JsLvdT12dtHrPsKo3F+odv3aec9kPeu1nuN2sVF9PYV5PXwjxLfvP/FvOip/Y6C7f6+7+v/ppcINvSwDDZtHtNyGMR4awznsACMgPjfXSHJ8fK4vxm8qid9cEj9dEr+lJH5rSTyMs9+9/NPi9crSdX68pr9541xzZ+m3PizXs92Twv8bsDyxPnLQ+rj43O+glpt/fJ4Y1rM/HH/25Feef+7q4vP/ldb2fytt73vTeD3tW1dSglxfGOvVW8/+1zvzqfZId28ozz1d0je/7+xMV9m59DtF23HmtnLs7pxve690D3Smq4d002mId0Hi+cmWMF8+/8jH1by+JsPy1sJyTIVy5OPKjhSO1t0Y1qu8PfZ6/j9vn7uLWuWFU6dPPp7G83b6p4napoXp+9e43MDy9fv+z+6i8/2fba3ptWr7cWH70vRK+3GhHqbP9Zg+n8bz/7nvTkw3p8+c+P7p51d64WHMnX3l1e8dP3365A836pe3v7m4oOulPL74MhJfhn1kAlbb7Msv/WD27CuvPnbqpeMvnnzx5Jn5gwfn5+YOfnX+wGzzvH62/ewe2EiW/ukPuyQAAAAAAAAAAABAv3509MjVv7z75Q8W3/9fev8vv/+fn/zN7///JLz/H9+Tz+/B5/cAd3SJb6YJDaxOhXS1NPx/KO/OkM+uMN8nUtjqxy+9/5+zi+265vLcF6bH9ntzutCcwG3tpUyFNkhif4GfTuHFFP66gCGq/Lz75BSWtW+dt/XcPoV2KUZT/rvl9kxyOyb5/e9e7Trl4/+ONSgjK6+/9wEnlvU64bCXEejun+uu/e+NPrRdMQy9LIb1NtxsNBprmV+joRcPYH1otbfbqyHfVe7/M9d75vDMH7+1eWHIya4/2Xm8jO2XwnIMu//LoeWfKxbHdfn7zH+l+/9s9X/X9/Ev9JhXv7t8//OLax+0ZVvs6Tf/peWvNGfJ7UDvHCz/j1L+eWkeKfrLv/GrsP7jDaE+fRzy39Jn/tfD3//SoBmnDP+b8s+r7dGH+81/8Qcq1c5yxHrjfP8v1htnN8Py57Y9B13+u+2o8VbKH8bZqPQzO6hR6f+3l/gcxpfSeD4Q5ucc4mXSoOXPz1fk/wO7wu9XSv6/9dp+RqVWadz7//1aCsv2h9z/b94e613Gq23jtS7rdqMea2BUfej+n2HEh+YZzTooxygOjUaja4XSWp3/3GVt1vRKl2NcLaz/w0PMf9jXCcPOf3Vrk5cv9v8bz+Fj/78xPvb/G+Nj/78xvrmjf7zUaW+Mj/3/xvUZ+/+N8feFfGP/wLtL4j9ZEr+nJP7+kvgHSuI/VRK/ryT+wZL4h0ri7y2Jf7gk/jMl8Z+9Y3zjtaJk/kfvHD//45L5N7r8Psq4Lj+Ms/h+nv0fxke+/9Nr/99ZEg+Mrp+9tf+p5377nfri+/9TrfqQfB8v1w3V0rVzvF6K9ScTKe7dNP63EL/e6ztgnMT2M+L/90dK4oHRlZ/zsn/DGKp0b7Gn33arep3nM1o+n8IvpPCLKXwshTMpnE3h/hTOrVH5WB1Pvf37Q69Xlq73t4f4fp8nj+8DxXai5vssT6wfGPR59tiO36CWm/9dvg4GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNNXm54EDuytFcfmdS0eePXZqdmHKE60U9ebnZNtYrTVfUTyewokU/jJ9uXnj3In28FYKK8VcUSkqrenFM9dbOW0tiuJ8sbe4UtSLPZevvvHe3NPHLhy9uO/9Nw9dW701AAAAABvf/wIAAP//3RQW2g==") syz_emit_ethernet(0x6c, &(0x7f0000000000)={@broadcast, @dev, @void, {@ipv4={0x500, @gre={{0x5, 0x4, 0x3, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [0xff], "7f49"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}}}}}}, 0x0) 2.933198201s ago: executing program 6 (id=4957): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10004}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)=""/203, 0xcb}, {&(0x7f0000001b40)=""/4109, 0x100d}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x3}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x40}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000540)=""/130, 0x82}, {&(0x7f0000005080)=""/4093, 0xffd}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000000480)=""/101, 0x65}], 0x4}, 0xb0}], 0x7, 0x0, 0x0) 2.631830606s ago: executing program 0 (id=4958): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000010000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) r1 = syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xb7, 0x5ac, 0x27e, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0xfe, 0x0, 0x6, [{{0x9, 0x4, 0x0, 0x10, 0x2, 0x3, 0x1, 0x3, 0x7, {0x9, 0x21, 0x4, 0x72, 0x1, {0x22, 0x5d5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x5, 0x8, 0xa}}, [{{0x9, 0x5, 0x2, 0x3, 0x3ff, 0x10, 0x4, 0x30}}]}}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0xd, 0x1, 0x8e, 0x40, 0x4}, 0x123, &(0x7f00000007c0)={0x5, 0xf, 0x123, 0x4, [@wireless={0xb, 0x10, 0x1, 0x8, 0x40, 0x5b, 0xec, 0x81, 0x8}, @generic={0xe0, 0x10, 0xb, "2fc762347ef92cd11e70b1ea9060ea47a607bf47c9c0031ea7cffd62cceb8c92931bf90a4cca3afb81a37f01d418667473cfdccae6e97bf380180cb1cfce6f070549787330b02ed0cadf5eb5cf81894d70a17217e90c443aed48fac029f6fdfd71b3aacd6fc50a138dc30b7c94d141b6bb84a39e2e5519c79913d7a9385d10dd77440d0155ef48e686ca9018af4dddd02322211d6c9a71ea8cc7980a11d5e8b9a52f2a8b80696d00efab18cbd35507bee612e8ae4ffa92ec547f57182c4286a4944b7ee2a24aa03be6493242c7ac6d1b723ef50e176f9dab693da69c97"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x6, 0x7, 0x1, 0x3ff}, @generic={0x29, 0x10, 0x5, "89893b787227070619e31dd838fa25c2a1ce308619e138a3dda760af92f86fb1b5f8a4bd52ec"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0c}}]}) syz_usb_control_io$hid(r1, &(0x7f00000004c0)={0x24, &(0x7f00000002c0)={0x20, 0xc, 0xe, {0xe, 0xa, "159b3ece1300a1bf52685ee8"}}, &(0x7f0000000300)={0x0, 0x3, 0x83, @string={0x83, 0x3, "2590c50ed3eb53e5fcea78e6ce6612c567b242bc0ceef661531836d7c5bdb8e8e6766538081375ad209e644c8b4d35943599cf7df39f6132f2c67e8a38540185489612f3a3a12db5dcb08867708d24b2be52c147b3985461b42e61b86ee1fb5fedc0de8ec70bd9141e9a5048e4e40a406faec3b20ad5c74ecd4c3c4ce0468ae002"}}, &(0x7f0000000440)={0x0, 0x22, 0x9, {[@local=@item_012={0x1, 0x2, 0x1, '!'}, @main=@item_012={0x1, 0x0, 0x0, '\r'}, @main=@item_4={0x3, 0x0, 0xb, "280b1494"}]}}, &(0x7f0000000480)={0x0, 0x21, 0x9, {0x9, 0x21, 0x7, 0xf7, 0x1, {0x22, 0x6ca}}}}, &(0x7f0000000740)={0x2c, &(0x7f0000000500)={0x0, 0xd, 0xd5, "f9ee8b9b212e5bfb7a391e2d22381412036780281d730962c93dd0e9e74639df785462221fe6aa1c52aadef8b1af3a0ca36be8ede486c3caaf5881e093e1927dec14682b0a4e48d78765bf949440ce0d21e865d4955bcf19e1083feff26961f29fca10b8e8cf6407f4f2d5b36643131ac0178304a608354d090c912f4fcb4acc402bbd1047cb43a0495b13b9f3002d138f76e564e41782692d1966c9f4c2e078a5b231429b6af375e7e368f97dc76e13a050030ecb5ebf0fa6b7ae2a4336579bcb7fec2c433670088d442df989f12f1401ded31b37"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000680)={0x20, 0x1, 0x71, "e60d4c869909b189e84203bc0487d0d488b666a91c18d4580700206bd8e3ed3e9f22e21feca11c4c1ab70a991aa6e9cf2e8797ad3e65f5299289787035b088f0a647eec7be3d1dadf490bf880d39408fe6250e39f0a43b7ebfa7c1bb02b50e7a4a274af56fb30a69cf5904a5f41b810f28"}, &(0x7f0000000700)={0x20, 0x3, 0x1, 0x4}}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r2, &(0x7f0000009080)={0x0, 0x0, &(0x7f0000009040)={&(0x7f00000011c0)={0x28, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x1e00, 0x51}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0x800) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000780)='geneve1\x00', 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000012c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000050a03030000000000000000020000000c00024000000000000000020900010073797a30"], 0x54}}, 0x0) 2.258877637s ago: executing program 6 (id=4959): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="6800000010000104fcffffff8000000000000000", @ANYBLOB="0315000000000000400012800c0001006d6163766c616e00300002801000058005000400aaaaaaaaaaaa000008000300030000000a0004"], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 2.258389681s ago: executing program 5 (id=4960): r0 = syz_open_dev$rtc(&(0x7f0000000000), 0x4e5, 0xa81) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') r2 = syz_open_dev$video4linux(&(0x7f0000000080), 0x5, 0x121040) ioctl$VIDIOC_QUERYMENU(r2, 0xc040564a, &(0x7f0000000140)={0x0, 0x1, @value=0x1011}) pread64(r1, &(0x7f0000000480)=""/167, 0xa7, 0x1) 2.141411147s ago: executing program 1 (id=4961): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000007c0)=ANY=[@ANYBLOB="0500000000000000000200000000", @ANYRES64=0x0, @ANYRES64=0x0], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="05000000bf00e7f0ff0f00000000000078cd86d1b1954f11f6f832393e03017a919c60a7212fc3da31e07b77569b0def5ac696fc5ac519a58c3a071e38f6dad46a2ee64aa6adcfb7b122dfe32998bb", @ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000003000020010300006ee7ba2197db18bc"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8800) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) unshare(0x20400) fsopen(0x0, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'ip_vti0\x00'}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.642953062s ago: executing program 0 (id=4962): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[], 0xd0}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4276ef66ba420266b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000580)=[@text64={0x40, 0x0}], 0x1, 0x53, 0x0, 0x0) syz_usb_connect(0x5, 0x64, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000cb8be7406d04230807000102030109025200010000000009044000000e0100390a24010800", @ANYRES32], 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x7, 0xf, 0x9, '\x00', 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.577727939s ago: executing program 5 (id=4963): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) listen(r0, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000ffdbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 1.525603068s ago: executing program 6 (id=4964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000005"], 0x50) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000007c0)={{r0}, &(0x7f0000000600), &(0x7f0000000640)='%pI4 \x00'}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x13, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='syzkaller\x00', 0x7f, 0x88, &(0x7f0000000340)=""/136, 0x41000, 0x4, '\x00', r3, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000440)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000005c0)={0x1, 0x2, 0xd6, 0x70b94f92}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000880), 0x0, 0x10, 0xd, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) r5 = socket(0x10, 0x3, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000480)="93378e0762cf9b48cb59638401fcd1730172853a9fa89527996042ab60ae29f9c11dbb35b448a0037ffc52007bdc5d1c546f6bd0", 0x34) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x8}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(0x0, &(0x7f00000002c0)='ns/net\x00') socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001300)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="4400000010000304016100"/20, @ANYRES32=0x0, @ANYBLOB="d3ddd1de00000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n'], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 1.52477571s ago: executing program 1 (id=4965): unshare(0x20400) fsopen(0x0, 0x0) connect$pppoe(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a300000000030000380"], 0xe8}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 1.244857065s ago: executing program 5 (id=4966): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x44, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x9}, {0x0, 0x1}, {0x0, 0xe}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_RATE={0x6, 0x5, {0x8, 0xb6}}, @filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x44}, 0x1, 0x0, 0x0, 0x40040d1}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 689.179432ms ago: executing program 1 (id=4967): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000140)='./file1\x00', 0x4d06, &(0x7f0000000180)=ANY=[], 0x1, 0x688, &(0x7f0000001340)="$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") io_setup(0x202, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x15) remap_file_pages(&(0x7f000051c000/0x400000)=nil, 0x400d00, 0x0, 0x0, 0x0) 612.024798ms ago: executing program 0 (id=4968): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffb4, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x141000, 0x57) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x0, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004840}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x1e, &(0x7f0000000500)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030400000000008500000083000000bf090000000000005509010000000000950000000000000085200000"], &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x2, 0x9, 0x5, 0xb}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000380)=[{0x0, 0x2, 0x10, 0x1}, {0x4, 0x5, 0x4, 0x4}, {0xc21, 0x5, 0x4, 0x3}, {0x2, 0x5, 0xd}, {0x5, 0x4, 0x1, 0x8}], 0x10, 0x3ff, @void, @value}, 0x94) ioctl$KVM_RUN(r4, 0xae80, 0x0) 105.819176ms ago: executing program 5 (id=4969): r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000001800), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000001840)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f00000001c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfe, 0x0, 0x0) read$FUSE(r3, &(0x7f0000004940)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000280)={0x50, 0x0, r4, {0x7, 0x8, 0xfffffff7, 0xf2babda970eae625, 0x401, 0x1, 0xfffffff8, 0x2c0, 0xc00, 0x0, 0x20, 0x27}}, 0x50) io_uring_setup(0x6b9d, &(0x7f0000001880)) r5 = eventfd2(0x0, 0x0) pselect6(0x40, &(0x7f0000000100)={0xb, 0xe6, 0x5, 0x2, 0x74, 0x8, 0x0, 0x3ff}, &(0x7f0000000140)={0x1, 0x8, 0xf612, 0x8000000000000000, 0x0, 0x5, 0x7fffffffffffffff, 0x9}, &(0x7f0000000180)={0x8, 0x0, 0xffffffffffffffff, 0x895, 0x0, 0xb, 0xf3b3, 0xd}, &(0x7f0000000240)={0x77359400}, &(0x7f0000000340)={&(0x7f0000000300)={[0xf9]}, 0x8}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r3, &(0x7f0000000000)={0x70000008}) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000002bc0)=r5, 0x1) io_uring_register$IORING_UNREGISTER_EVENTFD(r2, 0x5, 0x0, 0x0) 0s ago: executing program 6 (id=4970): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000180)="440f20c03505000000440f22c0f26df20f38f17a64b805000000b9e10d00000f01d9d8dd0f01728eb8010000000f01d94c0fc71d000000003ef245dbed410fc7f7", 0x41}], 0x1, 0x72, 0x0, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000340)="8fbabae063b30ae08873445d552994ae156a0debee1f65211e8a404933122aefacbee55818fd4bb9770fe0ed5f762bcf161b65f160074d626b8ca4f01acc95cbe0d28699ae7191e4b85c414fe5ce6bd9c9", 0x51}], 0x1}, 0x20048014) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x4, 0x2, 0x7, 0x0, 0x401, 0xe0, 0x1, 0xdc, 0x8, 0x0, 0x82, 0x6, 0x0, 0x730c, 0x2, 0x6f, 0x1, 0x4f, 0x3, '\x00', 0x8, 0x1}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900), 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getrandom(0x0, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f0000000400)={[], 0x23}, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000013c0)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x3, 0x2}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3}}]}, {0x0, [0x0, 0x0, 0x5f, 0x2e]}}, 0x0, 0x4a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='\t\x00\x00\x00@\x00\x00\x00B\x00\x00\x00', @ANYRES32=0x1, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000140), 0x1000, r4}, 0x38) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000bc0)={r4, &(0x7f0000000880)}, 0x20) ioctl$VT_RESIZE(0xffffffffffffffff, 0x5609, &(0x7f0000000040)={0x9, 0x11, 0x2}) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): adata+0xfb/0x160 [ 1987.272881][T12533] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1987.273105][T12533] device_add+0xa70/0x1c10 [ 1987.273399][T12533] hci_conn_add_sysfs+0x15f/0x2f0 [ 1987.273630][T12533] le_conn_complete_evt+0x1b32/0x21b0 [ 1987.273879][T12533] hci_le_conn_complete_evt+0x157/0x260 [ 1987.274071][T12533] hci_le_meta_evt+0x6eb/0x960 [ 1987.274235][T12533] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1987.274434][T12533] hci_event_packet+0xcdf/0x1e40 [ 1987.274644][T12533] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1987.274854][T12533] hci_rx_work+0x9a8/0x12b0 [ 1987.275030][T12533] ? __pfx_hci_rx_work+0x10/0x10 [ 1987.275185][T12533] process_scheduled_works+0xb91/0x1d80 [ 1987.275488][T12533] worker_thread+0xedf/0x1590 [ 1987.275731][T12533] kthread+0xd5c/0xf00 [ 1987.275904][T12533] ? __pfx_worker_thread+0x10/0x10 [ 1987.276130][T12533] ? __pfx_kthread+0x10/0x10 [ 1987.276284][T12533] ret_from_fork+0x1e0/0x310 [ 1987.276467][T12533] ? __pfx_kthread+0x10/0x10 [ 1987.276617][T12533] ret_from_fork_asm+0x1a/0x30 [ 1987.276842][T12533] [ 1987.456397][T12533] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1987.472220][T12533] Bluetooth: hci2: failed to register connection device [ 1988.087178][T18021] netlink: 48 bytes leftover after parsing attributes in process `syz.5.3338'. [ 1988.575876][T18023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1988.819919][T18026] netlink: 'syz.6.3340': attribute type 3 has an invalid length. [ 1989.435360][ T30] audit: type=1326 audit(1749936962.975:1269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18034 comm="syz.5.3345" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x0 [ 1990.482391][ T42] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1990.688012][ T42] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 1990.699230][ T42] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1990.710804][ T42] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1990.724454][ T42] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1990.735373][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1990.779692][ T42] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 1990.789293][ T42] usb 7-1: invalid MIDI out EP 0 [ 1991.099709][ T42] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1991.176327][ T42] usb 7-1: USB disconnect, device number 49 [ 1991.321047][T18061] udevd[18061]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1991.381958][T12533] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 1991.392979][T12533] CPU: 0 UID: 0 PID: 12533 Comm: kworker/u9:2 Tainted: G W 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 1991.393201][T12533] Tainted: [W]=WARN [ 1991.393264][T12533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1991.393416][T12533] Workqueue: hci4 hci_rx_work [ 1991.393590][T12533] Call Trace: [ 1991.393653][T12533] [ 1991.393715][T12533] __dump_stack+0x26/0x30 [ 1991.393922][T12533] dump_stack_lvl+0x1df/0x270 [ 1991.394131][T12533] dump_stack+0x1e/0x25 [ 1991.394318][T12533] sysfs_create_dir_ns+0x46c/0x540 [ 1991.394509][T12533] kobject_add_internal+0xeed/0x1840 [ 1991.394757][T12533] kobject_add+0x2c1/0x410 [ 1991.394984][T12533] ? kmsan_get_metadata+0xfb/0x160 [ 1991.395205][T12533] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1991.395458][T12533] device_add+0xa70/0x1c10 [ 1991.395701][T12533] hci_conn_add_sysfs+0x15f/0x2f0 [ 1991.395940][T12533] le_conn_complete_evt+0x1b32/0x21b0 [ 1991.396177][T12533] hci_le_conn_complete_evt+0x157/0x260 [ 1991.396380][T12533] hci_le_meta_evt+0x6eb/0x960 [ 1991.396572][T12533] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 1991.396792][T12533] hci_event_packet+0xcdf/0x1e40 [ 1991.397025][T12533] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 1991.397245][T12533] hci_rx_work+0x9a8/0x12b0 [ 1991.397434][T12533] ? __pfx_hci_rx_work+0x10/0x10 [ 1991.397602][T12533] process_scheduled_works+0xb91/0x1d80 [ 1991.397903][T12533] worker_thread+0xedf/0x1590 [ 1991.398173][T12533] kthread+0xd5c/0xf00 [ 1991.398327][T12533] ? __pfx_worker_thread+0x10/0x10 [ 1991.398582][T12533] ? __pfx_kthread+0x10/0x10 [ 1991.398754][T12533] ret_from_fork+0x1e0/0x310 [ 1991.398923][T12533] ? __pfx_kthread+0x10/0x10 [ 1991.399086][T12533] ret_from_fork_asm+0x1a/0x30 [ 1991.399332][T12533] [ 1991.399470][T12533] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 1991.600978][T12533] Bluetooth: hci4: failed to register connection device [ 1997.794747][T12533] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1997.913337][T18124] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1998.696906][T18133] netlink: 'syz.6.3379': attribute type 1 has an invalid length. [ 1998.788679][T18133] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1999.222665][T18138] bond3: (slave gretap1): making interface the new active one [ 1999.237713][T18138] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 1999.898173][T18153] fuse: Unknown parameter '0x0000000000000003' [ 2000.028878][T18154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2000.316986][T12533] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 2000.394139][T12533] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 2000.843706][T18167] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3395'. [ 2000.853287][T18167] netlink: 5 bytes leftover after parsing attributes in process `syz.0.3395'. [ 2001.109124][T18170] overlayfs: missing 'lowerdir' [ 2001.838683][T18175] xt_TPROXY: Can be used only with -p tcp or -p udp [ 2004.062258][T12065] Bluetooth: hci5: Frame reassembly failed (-84) [ 2004.112855][T18187] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2004.270503][T18193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2004.492312][ T42] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 2004.595103][T18197] fuse: Unknown parameter '0x0000000000000003' [ 2004.701903][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 2004.726607][ T42] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 2004.735855][ T42] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 2004.746873][ T42] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2004.757137][ T42] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2004.767675][ T42] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2004.783178][ T42] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2004.793376][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2005.019512][ T42] usbtmc 7-1:16.0: bulk endpoints not found [ 2006.091785][T10518] Bluetooth: hci5: command 0x1003 tx timeout [ 2006.150880][T12533] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 2006.239810][ T42] usb 7-1: USB disconnect, device number 50 [ 2006.431939][ T30] audit: type=1326 audit(1749936979.975:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.5.3412" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f481ed8e929 code=0x0 [ 2006.725877][T18215] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2006.783209][T18216] netlink: 'syz.0.3414': attribute type 10 has an invalid length. [ 2006.791798][T18216] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3414'. [ 2006.930147][T18215] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.043829][T18215] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.183069][T18215] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2007.654780][T18215] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.678987][T18215] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.705349][T18215] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.731345][T18215] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2007.951688][T18229] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 2010.191346][T18240] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3425'. [ 2011.371880][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2011.379166][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2012.385579][T18245] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 2012.483312][T18249] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 2013.102881][T18263] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.143265][T18264] netlink: 'syz.5.3433': attribute type 10 has an invalid length. [ 2013.151717][T18264] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3433'. [ 2013.311346][T18263] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.485899][T18263] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2013.657403][T18263] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2014.715736][T18263] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.747213][T18263] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.778449][T18263] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2014.816271][T18263] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2016.202612][ T30] audit: type=1326 audit(1749936989.705:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18275 comm="syz.1.3438" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60f978e929 code=0x0 [ 2016.399258][T18282] vlan0: entered promiscuous mode [ 2016.404831][T18282] veth1: entered promiscuous mode [ 2017.031724][T18287] vlan2: entered promiscuous mode [ 2018.973760][ T30] audit: type=1326 audit(1749936992.515:1272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18291 comm="syz.2.3444" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe938f8e929 code=0x0 [ 2020.686038][T12533] Bluetooth: hci2: unexpected event for opcode 0x0419 [ 2021.015320][T18319] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2022.025017][T10518] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 2023.728168][T18334] Bluetooth: hci1: command 0x0406 tx timeout [ 2024.741721][T12533] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 2024.750429][T12533] Bluetooth: hci2: Injecting HCI hardware error event [ 2024.762742][T12533] Bluetooth: hci2: hardware error 0x00 [ 2026.098624][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3478'. [ 2026.164414][T18388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3478'. [ 2026.338556][T18392] overlayfs: failed to clone upperpath [ 2026.516476][T18394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2026.824048][T12533] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 2028.157565][ T30] audit: type=1326 audit(1749937001.685:1273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18396 comm="syz.1.3483" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f60f978e929 code=0x0 [ 2029.581104][T18431] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3493'. [ 2030.955841][T18440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2035.419578][T18465] loop6: detected capacity change from 0 to 512 [ 2035.527301][T18465] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2035.540858][T18465] ext4 filesystem being mounted at /56/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2035.565779][T18468] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3506'. [ 2035.807422][T16960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2035.834824][T18474] netlink: 'syz.2.3507': attribute type 1 has an invalid length. [ 2035.956003][T18474] 8021q: adding VLAN 0 to HW filter on device bond2 [ 2036.602182][ T42] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 2036.818595][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 2036.919201][ T42] usb 7-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 2036.931307][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2036.940386][ T42] usb 7-1: Product: syz [ 2036.945342][ T42] usb 7-1: Manufacturer: syz [ 2036.950258][ T42] usb 7-1: SerialNumber: syz [ 2037.282102][ T42] usb 7-1: config 0 descriptor?? [ 2037.303519][ T42] ssu100 7-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 2037.348782][T18488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2038.208370][ T42] ssu100 7-1:0.0: probe with driver ssu100 failed with error -71 [ 2038.303864][ T42] usb 7-1: USB disconnect, device number 51 [ 2038.506248][T18360] printk: udevd: 4 output lines suppressed due to ratelimiting [ 2039.130791][T18507] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3519'. [ 2040.496415][T18516] syz.6.3521 (18516): drop_caches: 2 [ 2041.870383][T18527] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2042.160125][T18531] 9pnet: p9_errstr2errno: server reported unknown error 18446744073 [ 2043.426458][T18545] vlan2: entered promiscuous mode [ 2043.701951][ T42] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 2043.894190][ T42] usb 7-1: Using ep0 maxpacket: 8 [ 2043.944715][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2043.957780][ T42] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2043.967402][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2044.067632][ T42] usb 7-1: config 0 descriptor?? [ 2044.327846][ T42] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2044.904637][ T7853] usb 7-1: USB disconnect, device number 52 [ 2046.672821][ T7853] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 2046.892314][ T7853] usb 7-1: Using ep0 maxpacket: 8 [ 2047.070195][ T7853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 2047.082275][ T7853] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 2047.091869][ T7853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2047.210498][ T7853] usb 7-1: config 0 descriptor?? [ 2048.196082][ T7853] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 2048.717976][ T42] usb 7-1: USB disconnect, device number 53 [ 2048.994919][T18587] overlayfs: missing 'lowerdir' [ 2051.329815][T18605] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3558'. [ 2051.852968][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3559'. [ 2052.450553][T18620] 9pnet: Could not find request transport: fd0x0000000000000003 [ 2054.095407][T18647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3572'. [ 2059.469064][T18690] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3590'. [ 2059.977775][T18697] IPVS: set_ctl: invalid protocol: 1 172.30.1.2:20003 [ 2060.623549][T18700] IPVS: set_ctl: invalid protocol: 1 172.30.1.3:20003 [ 2060.698789][T18695] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2060.734636][T18698] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2062.937122][T18720] 9pnet_fd: Insufficient options for proto=fd [ 2063.040207][T18724] IPVS: set_ctl: invalid protocol: 1 172.30.1.7:20003 [ 2063.042598][T18722] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3605'. [ 2063.299191][T18723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2066.281184][T18759] 9pnet_fd: Insufficient options for proto=fd [ 2069.724385][ C1] Unknown status report in ack skb [ 2069.734575][T18781] fuse: Unknown parameter 'group_id00000000000000000000' [ 2069.928446][T18786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2069.936460][T18786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2069.966796][T18786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2069.974887][T18786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2070.087814][T18786] batman_adv: batadv0: Interface deactivated: macsec0 [ 2070.095596][T18786] batman_adv: batadv0: Removing interface: macsec0 [ 2071.412158][T18802] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3629'. [ 2071.485932][T18801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3629'. [ 2072.768953][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2072.775939][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2072.956995][T18815] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3639'. [ 2073.385765][T18817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2073.667583][ C1] Unknown status report in ack skb [ 2075.912312][T18848] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3654'. [ 2075.954618][T18852] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3648'. [ 2076.722303][T18850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3648'. [ 2077.962962][T18855] vlan2: entered promiscuous mode [ 2081.709137][T18893] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3668'. [ 2081.749883][T18892] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3668'. [ 2083.799067][T18928] IPVS: set_ctl: invalid protocol: 1 172.30.1.3:20003 [ 2083.883129][T18927] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2084.877035][T18947] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3693'. [ 2084.907206][T18947] vlan2: entered promiscuous mode [ 2084.913180][T18947] bond0: entered promiscuous mode [ 2084.918519][T18947] bond_slave_0: entered promiscuous mode [ 2084.927478][T18947] bond_slave_1: entered promiscuous mode [ 2085.779276][T18959] 9pnet_fd: Insufficient options for proto=fd [ 2086.224455][ T30] audit: type=1800 audit(1749937059.755:1274): pid=18970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3704" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2086.314127][T18970] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3704'. [ 2086.627801][ T30] audit: type=1800 audit(1749937060.165:1275): pid=18978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3706" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2087.770038][T18997] 9pnet_fd: Insufficient options for proto=fd [ 2088.455957][ T30] audit: type=1800 audit(1749937061.995:1276): pid=19007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3719" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 2088.597314][T19009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3720'. [ 2088.625146][T19009] vlan2: entered promiscuous mode [ 2088.630477][T19009] ip6gretap0: entered promiscuous mode [ 2089.859136][T19036] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3730'. [ 2089.925982][T19036] team0: Port device team_slave_0 removed [ 2090.670090][T19046] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3735'. [ 2091.022944][ T42] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 2091.180215][T19054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3738'. [ 2091.236011][ T42] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2091.247708][ T42] usb 7-1: New USB device found, idVendor=0582, idProduct=0000, bcdDevice= 0.00 [ 2091.257353][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.349669][ T42] snd-usb-audio 7-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2091.397462][T19054] team0: Port device team_slave_0 removed [ 2091.686485][ T42] usb 7-1: USB disconnect, device number 54 [ 2091.874441][T19062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3741'. [ 2091.902536][T19062] vlan2: entered promiscuous mode [ 2092.023876][T19065] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3742'. [ 2093.477276][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 2093.488100][T19090] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3753'. [ 2093.936626][T19094] macsec2: entered promiscuous mode [ 2094.183970][T19097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3757'. [ 2094.272895][T19097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3757'. [ 2094.419468][T19097] team0: Port device team_slave_0 removed [ 2095.427409][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3766'. [ 2097.083034][T19130] bridge0: entered promiscuous mode [ 2097.088716][T19130] macsec1: entered promiscuous mode [ 2097.120307][T19130] bridge0: left promiscuous mode [ 2097.162365][T19134] mac80211_hwsim hwsim38 wlan1: left allmulticast mode [ 2099.168899][T19158] kvm: kvm [19157]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800 [ 2099.659920][T19174] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3784'. [ 2101.068080][T19188] 8021q: VLANs not supported on vcan0 [ 2104.782730][T19219] macsec1: entered promiscuous mode [ 2105.628093][T19225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2106.293495][T19228] tipc: Started in network mode [ 2106.298794][T19228] tipc: Node identity 080211000001, cluster identity 4711 [ 2106.307017][T19228] tipc: Enabled bearer , priority 0 [ 2106.778632][T19234] loop6: detected capacity change from 0 to 512 [ 2106.939888][T19234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2106.953377][T19234] ext4 filesystem being mounted at /112/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2107.301862][ T7853] tipc: Node number set to 134418688 [ 2107.615259][T16960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2108.191016][T19247] loop6: detected capacity change from 0 to 2048 [ 2108.281190][T19247] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 2108.289584][T19247] UDF-fs: Scanning with blocksize 512 failed [ 2108.462264][T19247] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2113.811735][ T7853] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 2113.996248][ T7853] usb 7-1: Using ep0 maxpacket: 32 [ 2114.033516][ T7853] usb 7-1: unable to get BOS descriptor or descriptor too short [ 2114.057156][ T7853] usb 7-1: config 7 has an invalid interface number: 187 but max is 0 [ 2114.065963][ T7853] usb 7-1: config 7 has no interface number 0 [ 2114.072644][ T7853] usb 7-1: config 7 interface 187 altsetting 6 bulk endpoint 0x4 has invalid maxpacket 947 [ 2114.083313][ T7853] usb 7-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2114.093900][ T7853] usb 7-1: config 7 interface 187 has no altsetting 0 [ 2114.136750][ T7853] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb [ 2114.146702][ T7853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2114.155432][ T7853] usb 7-1: Product: syz [ 2114.159907][ T7853] usb 7-1: Manufacturer: syz [ 2114.165007][ T7853] usb 7-1: SerialNumber: syz [ 2114.179259][T19288] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2114.452276][ T7853] usb 7-1: Unknown endpoint type found, address 0x03 [ 2114.460742][ T7853] usb 7-1: Not enough endpoints found in device, aborting! [ 2114.669418][ T42] usb 7-1: USB disconnect, device number 55 [ 2114.819936][T19308] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 2116.033293][T19323] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3846'. [ 2116.060792][T19323] vlan2: entered promiscuous mode [ 2116.068000][T19323] batadv0: entered promiscuous mode [ 2116.458042][T19329] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 2116.471945][T19329] ip6gretap0: entered promiscuous mode [ 2116.477885][T19329] macsec1: entered promiscuous mode [ 2116.497176][T19332] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3843'. [ 2116.508317][T19316] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3843'. [ 2119.594476][T19372] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3860'. [ 2119.606268][T19357] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3860'. [ 2120.025399][T19379] netlink: 'syz.2.3870': attribute type 10 has an invalid length. [ 2120.033803][T19379] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3870'. [ 2120.200011][T19385] netlink: 'syz.1.3873': attribute type 10 has an invalid length. [ 2120.208726][T19385] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3873'. [ 2120.226423][T19385] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 2120.277028][ T30] audit: type=1326 audit(1749937093.815:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19381 comm="syz.5.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2120.300746][ T30] audit: type=1326 audit(1749937093.825:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19381 comm="syz.5.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2120.323989][ T30] audit: type=1326 audit(1749937093.825:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19381 comm="syz.5.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2120.347212][ T30] audit: type=1326 audit(1749937093.825:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19381 comm="syz.5.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2120.370314][ T30] audit: type=1326 audit(1749937093.825:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19381 comm="syz.5.3872" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2121.900280][T19410] fuse: Invalid rootmode [ 2122.775450][T19415] ip6gretap0: entered promiscuous mode [ 2122.781600][T19415] macsec1: entered promiscuous mode [ 2122.816457][T19420] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3882'. [ 2122.827543][T19419] netlink: 'syz.5.3889': attribute type 10 has an invalid length. [ 2122.837855][T19419] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3889'. [ 2122.859543][T19419] batman_adv: batadv0: Adding interface: ipvlan0 [ 2122.866436][T19419] batman_adv: batadv0: The MTU of interface ipvlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2122.892513][T19419] batman_adv: batadv0: Interface activated: ipvlan0 [ 2122.903813][T19405] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3882'. [ 2123.892127][ T7853] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 2124.093714][ T7853] usb 7-1: Using ep0 maxpacket: 32 [ 2124.122492][ T7853] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 2124.131175][ T7853] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2124.146848][ T7853] usb 7-1: config 0 has no interface number 0 [ 2124.153341][ T7853] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2124.163822][ T7853] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2124.306444][ T7853] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 2124.316338][ T7853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2124.324874][ T7853] usb 7-1: Product: syz [ 2124.329355][ T7853] usb 7-1: Manufacturer: syz [ 2124.334529][ T7853] usb 7-1: SerialNumber: syz [ 2124.365753][ T7853] usb 7-1: config 0 descriptor?? [ 2124.376563][T19435] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2124.393892][ T7853] usb-storage 7-1:0.231: USB Mass Storage device detected [ 2126.299643][ T7853] usb 7-1: USB disconnect, device number 56 [ 2126.447169][T19459] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3901'. [ 2126.461301][T19456] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3901'. [ 2127.954962][T19472] tipc: Started in network mode [ 2127.961993][T19472] tipc: Node identity 080211, cluster identity 4711 [ 2127.969482][T19472] tipc: Enabled bearer , priority 0 [ 2128.256220][ T42] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 2128.436579][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3911'. [ 2128.453652][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 2128.457765][T19480] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3911'. [ 2128.513176][ T42] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 2128.522177][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2128.532772][ T42] usb 7-1: config 0 has no interface number 0 [ 2128.539176][ T42] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2128.549797][ T42] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2128.699554][ T42] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 2128.709444][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2128.717959][ T42] usb 7-1: Product: syz [ 2128.722602][ T42] usb 7-1: Manufacturer: syz [ 2128.727505][ T42] usb 7-1: SerialNumber: syz [ 2128.795220][ T42] usb 7-1: config 0 descriptor?? [ 2128.803786][T19473] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2128.841322][ T42] usb-storage 7-1:0.231: USB Mass Storage device detected [ 2129.084455][ T42] tipc: Node number set to 134353152 [ 2130.085877][T19498] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3914'. [ 2130.097593][T19493] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3914'. [ 2131.245069][T19514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3923'. [ 2131.259154][T19514] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3923'. [ 2132.037582][ T42] usb 7-1: USB disconnect, device number 57 [ 2133.535770][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3935'. [ 2133.550002][T19542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3935'. [ 2133.671719][ T7853] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 2133.903714][ T7853] usb 7-1: config 0 has an invalid interface number: 64 but max is 0 [ 2133.912427][ T7853] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2133.924381][ T7853] usb 7-1: config 0 has no interface number 0 [ 2133.968249][ T7853] usb 7-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07 [ 2133.978115][ T7853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2133.986826][ T7853] usb 7-1: Product: syz [ 2133.991279][ T7853] usb 7-1: Manufacturer: syz [ 2133.999106][ T7853] usb 7-1: SerialNumber: syz [ 2134.062703][ T7853] usb 7-1: config 0 descriptor?? [ 2134.205757][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2134.213606][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2134.293017][T19537] kvm: vcpu 0: requested 1664 ns lapic timer period limited to 200000 ns [ 2134.369004][T19558] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2134.503260][ T7853] usb 7-1: USB disconnect, device number 58 [ 2135.955522][T19574] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3947'. [ 2136.005023][T19574] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3947'. [ 2136.704067][ T42] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 2136.931777][ T42] usb 7-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=eb.c6 [ 2136.941784][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2136.950139][ T42] usb 7-1: Product: syz [ 2136.954844][ T42] usb 7-1: Manufacturer: syz [ 2136.959752][ T42] usb 7-1: SerialNumber: syz [ 2137.245866][ T42] pwc: Visionite VCS-UC300 USB webcam detected. [ 2137.261157][ T42] pwc: Failed to set LED on/off time (-71) [ 2137.270798][ T42] pwc: send_video_command error -71 [ 2137.278306][ T42] pwc: Failed to set video mode VGA@30 fps; return code = -71 [ 2137.286921][ T42] Philips webcam 7-1:5.0: probe with driver Philips webcam failed with error -71 [ 2137.354548][ T42] usb 7-1: USB disconnect, device number 59 [ 2137.619080][T19591] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2138.147997][T19603] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3959'. [ 2138.162572][T19603] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3959'. [ 2138.202955][T19604] netlink: 'syz.6.3958': attribute type 3 has an invalid length. [ 2138.211264][T19604] netlink: 100 bytes leftover after parsing attributes in process `syz.6.3958'. [ 2138.502125][ T7853] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 2138.675017][ T7853] usb 7-1: Using ep0 maxpacket: 32 [ 2138.697260][ T7853] usb 7-1: config 0 has an invalid interface number: 51 but max is 0 [ 2138.705885][ T7853] usb 7-1: config 0 has no interface number 0 [ 2138.783407][ T7853] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 2138.794161][ T7853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2138.802679][ T7853] usb 7-1: Product: syz [ 2138.807129][ T7853] usb 7-1: Manufacturer: syz [ 2138.813641][ T7853] usb 7-1: SerialNumber: syz [ 2138.872054][ T7853] usb 7-1: config 0 descriptor?? [ 2138.893759][ T7853] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 2138.906063][T19612] netlink: 'syz.0.3963': attribute type 10 has an invalid length. [ 2138.916445][T19612] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3963'. [ 2138.942274][T19612] A link change request failed with some changes committed already. Interface ipvlan0 may have been left with an inconsistent configuration, please check. [ 2139.098768][ T7853] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 2139.144176][ T7853] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 2140.743096][T19633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2140.769618][T19632] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3970'. [ 2140.810204][T19632] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3970'. [ 2141.225018][ C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 2141.230088][ T42] usb 7-1: USB disconnect, device number 60 [ 2141.299762][ T42] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 2141.368327][ T42] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 2141.383961][ T42] quatech2 7-1:0.51: device disconnected [ 2141.877851][T19648] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3977'. [ 2141.912629][T19648] vlan2: entered promiscuous mode [ 2141.918003][T19648] bond0: entered promiscuous mode [ 2141.923840][T19648] bond_slave_0: entered promiscuous mode [ 2141.931037][T19648] bond_slave_1: entered promiscuous mode [ 2142.236690][T19655] netlink: 'syz.5.3980': attribute type 10 has an invalid length. [ 2142.246541][T19655] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3980'. [ 2142.629044][T19662] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3983'. [ 2142.651038][T19662] netlink: 52 bytes leftover after parsing attributes in process `syz.6.3983'. [ 2143.037638][T19668] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2143.819033][T19680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3991'. [ 2143.830671][T19680] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3991'. [ 2143.859920][T19680] bond0: entered promiscuous mode [ 2143.865591][T19680] bond_slave_0: entered promiscuous mode [ 2143.873084][T19680] bond_slave_1: entered promiscuous mode [ 2143.896260][T19680] bond0: left promiscuous mode [ 2143.901653][T19680] bond_slave_0: left promiscuous mode [ 2143.908739][T19680] bond_slave_1: left promiscuous mode [ 2144.792599][T19691] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3996'. [ 2144.838151][T19691] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3996'. [ 2145.590802][T19693] netlink: 'syz.6.3997': attribute type 10 has an invalid length. [ 2145.599175][T19693] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3997'. [ 2145.747492][T19693] team0: Port device netdevsim1 added [ 2146.349048][T19707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2146.893619][T19717] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4008'. [ 2146.997816][T19718] netlink: 52 bytes leftover after parsing attributes in process `syz.1.4008'. [ 2147.530715][T19724] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4009'. [ 2147.582167][T19728] netlink: 'syz.2.4011': attribute type 10 has an invalid length. [ 2147.590519][T19728] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4011'. [ 2147.811818][ T7853] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 2147.996873][ T7853] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 2148.008862][ T7853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2148.020844][ T7853] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2148.032603][ T7853] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2148.046035][ T7853] usb 7-1: New USB device found, idVendor=a9cd, idProduct=cdee, bcdDevice= 5.b9 [ 2148.057190][ T7853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2148.363376][T19736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4013'. [ 2148.373605][T19736] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4013'. [ 2148.399567][T19736] bond0: entered promiscuous mode [ 2148.406863][T19736] bond_slave_0: entered promiscuous mode [ 2148.414883][T19736] bond_slave_1: entered promiscuous mode [ 2148.547480][ T7853] usb 7-1: config 0 descriptor?? [ 2148.700406][T19736] bond0: left promiscuous mode [ 2148.706062][T19736] bond_slave_0: left promiscuous mode [ 2148.713395][T19736] bond_slave_1: left promiscuous mode [ 2148.785429][ T7853] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 2148.794794][ T7853] usb 7-1: MIDIStreaming interface descriptor not found [ 2150.867031][ T7853] usb 7-1: USB disconnect, device number 61 [ 2152.108637][T19809] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2152.307509][T19812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4022'. [ 2152.317180][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4022'. [ 2152.356359][T19813] netlink: 'syz.5.4023': attribute type 10 has an invalid length. [ 2152.364922][T19813] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4023'. [ 2152.387557][T19812] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4022'. [ 2152.397295][T19812] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4022'. [ 2152.593368][ T42] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 2152.761745][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 2152.797209][T19823] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4025'. [ 2152.821597][ T42] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 2152.830144][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2152.841786][ T42] usb 7-1: config 0 has no interface number 0 [ 2152.848262][ T42] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2152.858650][ T42] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2153.120055][ T42] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 2153.130037][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2153.139075][ T42] usb 7-1: Product: syz [ 2153.143675][ T42] usb 7-1: Manufacturer: syz [ 2153.149661][ T42] usb 7-1: SerialNumber: syz [ 2153.223759][ T42] usb 7-1: config 0 descriptor?? [ 2153.233384][T19816] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2153.275296][ T42] usb-storage 7-1:0.231: USB Mass Storage device detected [ 2154.941950][ T42] usb 7-1: USB disconnect, device number 62 [ 2158.072784][T19909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4035'. [ 2158.087711][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4035'. [ 2158.166848][T19912] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4035'. [ 2158.177939][T19912] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4035'. [ 2158.183571][T19911] netlink: 'syz.6.4036': attribute type 10 has an invalid length. [ 2158.195617][T19911] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4036'. [ 2158.628879][T19917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2158.973820][T19928] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4042'. [ 2162.318631][T20007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4049'. [ 2162.328772][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'. [ 2162.349788][T20007] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4049'. [ 2162.359928][T20007] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4049'. [ 2163.462551][T20014] netlink: 'syz.6.4052': attribute type 10 has an invalid length. [ 2163.475669][T20014] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4052'. [ 2166.433599][T20023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2167.065444][T20032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4058'. [ 2167.762163][ T42] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 2168.101942][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 2168.263809][ T42] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 2168.273754][ T42] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2168.285295][ T42] usb 7-1: config 0 has no interface number 0 [ 2168.292305][ T42] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2168.303958][ T42] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2169.414080][ T42] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 2169.424601][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2169.434603][ T42] usb 7-1: Product: syz [ 2169.439048][ T42] usb 7-1: Manufacturer: syz [ 2169.445816][ T42] usb 7-1: SerialNumber: syz [ 2170.134376][T20104] netlink: 'syz.2.4064': attribute type 10 has an invalid length. [ 2170.145265][T20104] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4064'. [ 2170.164595][ T42] usb 7-1: config 0 descriptor?? [ 2170.648268][ T42] usb 7-1: can't set config #0, error -71 [ 2170.689329][ T42] usb 7-1: USB disconnect, device number 63 [ 2171.129859][T20117] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2174.927584][T20135] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4076'. [ 2176.280582][T20141] netlink: 'syz.2.4078': attribute type 10 has an invalid length. [ 2176.290562][T20141] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4078'. [ 2178.840966][T12533] Bluetooth: hci4: SCO packet for unknown connection handle 0 [ 2178.884216][T20207] overlayfs: failed to clone upperpath [ 2178.955171][T20206] netlink: 72 bytes leftover after parsing attributes in process `syz.2.4082'. [ 2180.109547][T20220] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2182.084283][T20224] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4088'. [ 2182.799931][T20233] netlink: 'syz.2.4092': attribute type 10 has an invalid length. [ 2182.809066][T20233] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4092'. [ 2183.476139][T20244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4097'. [ 2183.487115][T20244] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4097'. [ 2183.516197][T20244] team0: entered promiscuous mode [ 2183.522120][T20244] team_slave_1: entered promiscuous mode [ 2183.584261][T20244] team0: left promiscuous mode [ 2183.589450][T20244] team_slave_1: left promiscuous mode [ 2183.842529][T20249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2186.598336][T20269] netlink: 'syz.5.4108': attribute type 10 has an invalid length. [ 2186.607059][T20269] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4108'. [ 2187.327376][T20277] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4111'. [ 2187.362175][T20277] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4111'. [ 2187.831106][T20288] loop6: detected capacity change from 0 to 512 [ 2187.911201][T20288] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2187.925607][T20288] ext4 filesystem being mounted at /160/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 2187.961229][T20289] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2188.173709][T16960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2188.785269][T20303] netlink: 'syz.5.4122': attribute type 10 has an invalid length. [ 2188.794067][T20303] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4122'. [ 2189.611935][ T42] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 2189.793957][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 2189.828958][ T42] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2189.838467][ T42] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2189.847746][ T42] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2189.857510][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2189.867830][ T42] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2189.878143][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2189.892136][ T42] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2189.901748][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.927374][ T42] usb 7-1: config 0 descriptor?? [ 2190.194182][ T42] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 64 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2190.223944][ T42] usb 7-1: USB disconnect, device number 64 [ 2190.253726][ T42] usblp0: removed [ 2190.696922][ T42] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 2190.838318][T20332] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2190.892091][ T42] usb 7-1: Using ep0 maxpacket: 32 [ 2190.918231][ T42] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 2190.928140][ T42] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 2190.938397][ T42] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 2190.948010][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 2190.958229][ T42] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 2190.969444][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 2190.983252][ T42] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 2190.993065][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2191.055605][ T42] usb 7-1: config 0 descriptor?? [ 2191.418797][ T42] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 65 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 2192.752010][T20347] batadv_slave_0: entered promiscuous mode [ 2193.366980][ T7853] usb 7-1: USB disconnect, device number 65 [ 2193.452252][ T7853] usblp0: removed [ 2193.507127][T20350] overlayfs: failed to clone upperpath [ 2193.637489][T20350] overlayfs: failed to clone upperpath [ 2194.467436][T20355] loop6: detected capacity change from 0 to 164 [ 2195.094228][T20355] ISOFS: Bad logical zone size 25856 [ 2195.187448][T20355] loop6: detected capacity change from 0 to 128 [ 2195.279765][T20355] FAT-fs (loop6): Directory bread(block 32) failed [ 2195.287062][T20355] FAT-fs (loop6): Directory bread(block 33) failed [ 2195.294491][T20355] FAT-fs (loop6): Directory bread(block 34) failed [ 2195.301512][T20355] FAT-fs (loop6): Directory bread(block 35) failed [ 2195.308543][T20355] FAT-fs (loop6): Directory bread(block 36) failed [ 2195.315881][T20355] FAT-fs (loop6): Directory bread(block 37) failed [ 2195.323023][T20355] FAT-fs (loop6): Directory bread(block 38) failed [ 2195.329874][T20355] FAT-fs (loop6): Directory bread(block 39) failed [ 2195.338450][T20355] FAT-fs (loop6): Directory bread(block 40) failed [ 2195.345492][T20355] FAT-fs (loop6): Directory bread(block 41) failed [ 2195.654885][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2195.662079][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2195.995309][T20363] IPv6: syztnl0: Disabled Multicast RS [ 2196.804324][T20380] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4152'. [ 2196.999359][T20384] overlayfs: failed to clone upperpath [ 2197.156310][T20388] overlayfs: failed to clone upperpath [ 2197.497829][T20394] bridge0: entered promiscuous mode [ 2197.503699][T20394] macsec2: entered promiscuous mode [ 2197.619915][T20394] bridge0: left promiscuous mode [ 2198.167885][T20392] loop6: detected capacity change from 0 to 32768 [ 2198.184922][T20392] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4157 (20392) [ 2198.208932][T20392] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2198.219685][T20392] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm [ 2198.231453][T20392] BTRFS info (device loop6): disk space caching is enabled [ 2198.238972][T20392] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2198.485753][T20392] BTRFS info (device loop6): rebuilding free space tree [ 2198.532153][T20392] BTRFS info (device loop6): disabling free space tree [ 2198.539478][T20392] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2198.550132][T20392] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2198.601709][T20415] tipc: Enabling of bearer rejected, already enabled [ 2198.880523][T12028] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 2199.547383][T16960] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2201.698459][T20445] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4165'. [ 2201.710090][T20429] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4165'. [ 2202.316587][T20447] bridge0: entered promiscuous mode [ 2202.322644][T20447] macsec2: entered promiscuous mode [ 2202.486282][T20447] bridge0: left promiscuous mode [ 2202.636703][T20449] fuse: Bad value for 'user_id' [ 2202.642211][T20449] fuse: Bad value for 'user_id' [ 2203.338881][T20459] overlayfs: failed to clone upperpath [ 2203.966371][T20468] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4179'. [ 2204.489041][T20461] loop6: detected capacity change from 0 to 32768 [ 2204.501607][T20461] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4178 (20461) [ 2204.530641][T20461] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2204.542886][T20461] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm [ 2204.555846][T20461] BTRFS info (device loop6): disk space caching is enabled [ 2204.563580][T20461] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2204.767262][T20461] BTRFS info (device loop6): rebuilding free space tree [ 2204.841645][T20461] BTRFS info (device loop6): disabling free space tree [ 2204.849063][T20461] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2204.860760][T20461] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2205.359832][T20495] bridge0: entered promiscuous mode [ 2205.365738][T20495] macsec2: entered promiscuous mode [ 2205.550364][T20495] bridge0: left promiscuous mode [ 2205.608035][T10625] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 2207.030626][T16960] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2208.349928][T20503] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4183'. [ 2208.361251][T20475] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4183'. [ 2208.662708][T20505] IPv6: syztnl0: Disabled Multicast RS [ 2209.822849][T20511] fuse: Bad value for 'fd' [ 2213.703622][T20533] macsec2: entered promiscuous mode [ 2217.014264][T20546] syz_tun: entered allmulticast mode [ 2217.086521][T20545] syz_tun: left allmulticast mode [ 2217.179838][T20550] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4203'. [ 2217.208028][T20550] vlan2: entered promiscuous mode [ 2217.213565][T20550] bond0: entered promiscuous mode [ 2217.218864][T20550] bond_slave_0: entered promiscuous mode [ 2217.226203][T20550] bond_slave_1: entered promiscuous mode [ 2217.768182][T20558] loop6: detected capacity change from 0 to 164 [ 2217.840637][T20558] ISOFS: Bad logical zone size 25856 [ 2217.983293][T20558] loop6: detected capacity change from 0 to 128 [ 2218.190169][T20558] FAT-fs (loop6): Directory bread(block 32) failed [ 2218.197391][T20558] FAT-fs (loop6): Directory bread(block 33) failed [ 2218.205668][T20558] FAT-fs (loop6): Directory bread(block 34) failed [ 2218.212709][T20558] FAT-fs (loop6): Directory bread(block 35) failed [ 2218.219717][T20558] FAT-fs (loop6): Directory bread(block 36) failed [ 2218.226827][T20558] FAT-fs (loop6): Directory bread(block 37) failed [ 2218.234115][T20558] FAT-fs (loop6): Directory bread(block 38) failed [ 2218.240957][T20558] FAT-fs (loop6): Directory bread(block 39) failed [ 2218.248203][T20558] FAT-fs (loop6): Directory bread(block 40) failed [ 2218.255291][T20558] FAT-fs (loop6): Directory bread(block 41) failed [ 2218.730967][T20570] bridge0: entered promiscuous mode [ 2218.736781][T20570] macsec2: entered promiscuous mode [ 2218.792091][T20573] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 2218.800225][T20573] FAT-fs (loop6): Filesystem has been set read-only [ 2218.864905][T20570] bridge0: left promiscuous mode [ 2220.516499][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4221'. [ 2220.549418][T20587] vlan0: entered promiscuous mode [ 2220.555082][T20587] dummy0: entered promiscuous mode [ 2220.827079][T20590] fuse: Unknown parameter 'fd0x0000000000000003' [ 2223.036509][T20606] loop6: detected capacity change from 0 to 2048 [ 2223.115906][T20608] overlayfs: failed to clone upperpath [ 2223.156750][T20606] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 2223.165226][T20606] UDF-fs: Scanning with blocksize 512 failed [ 2223.285882][T20606] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2226.047735][T20630] fuse: Unknown parameter '0x0000000000000003' [ 2229.190272][T20649] overlayfs: failed to clone upperpath [ 2229.725169][T20655] loop6: detected capacity change from 0 to 2048 [ 2229.822231][T20655] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 2229.830318][T20655] UDF-fs: Scanning with blocksize 512 failed [ 2229.894897][T20655] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2229.964327][T20663] tipc: Enabling of bearer rejected, already enabled [ 2231.074210][T20683] overlayfs: failed to clone upperpath [ 2231.297112][T20686] overlayfs: failed to clone upperpath [ 2231.364092][T20689] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4260'. [ 2232.046099][T20694] overlayfs: failed to clone upperpath [ 2232.277867][T20697] overlayfs: failed to clone upperpath [ 2233.140312][T20715] overlayfs: failed to clone upperpath [ 2233.814391][ T30] audit: type=1326 audit(1749937207.355:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20709 comm="syz.6.4267" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86f898e929 code=0x7fc00000 [ 2236.888924][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4276'. [ 2236.976293][T20743] netlink: 'syz.0.4277': attribute type 10 has an invalid length. [ 2236.985197][T20743] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4277'. [ 2240.142928][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4285'. [ 2240.216913][T20763] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4285'. [ 2242.819038][T20785] netlink: 'syz.5.4292': attribute type 10 has an invalid length. [ 2242.827719][T20785] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4292'. [ 2244.254921][T20809] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4301'. [ 2245.904750][T20838] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4313'. [ 2245.914991][T20838] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4313'. [ 2246.580629][T20848] overlayfs: failed to clone upperpath [ 2247.000304][T20854] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 2250.682359][ T30] audit: type=1326 audit(1749937224.225:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20895 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f978e929 code=0x7ffc0000 [ 2250.768455][T20900] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 2250.805140][ T30] audit: type=1326 audit(1749937224.265:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20895 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f978e929 code=0x7ffc0000 [ 2250.828371][ T30] audit: type=1326 audit(1749937224.265:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20895 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f60f978e929 code=0x7ffc0000 [ 2250.853505][ T30] audit: type=1326 audit(1749937224.275:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20895 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f978e929 code=0x7ffc0000 [ 2250.876687][ T30] audit: type=1326 audit(1749937224.285:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20895 comm="syz.1.4336" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f60f978e929 code=0x7ffc0000 [ 2250.981783][T20898] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 2252.138072][T20916] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4342'. [ 2252.208379][T20917] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4342'. [ 2253.380881][ T30] audit: type=1326 audit(1749937226.845:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20920 comm="syz.5.4344" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x7fc00000 [ 2253.502596][T20933] loop6: detected capacity change from 0 to 512 [ 2253.526243][T20933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0002] [ 2253.535475][T20933] System zones: 0-2, 18-18, 34-34 [ 2253.542280][T20933] EXT4-fs (loop6): orphan cleanup on readonly fs [ 2253.557000][T20933] EXT4-fs error (device loop6): ext4_quota_enable:7124: inode #15: comm syz.6.4349: iget: bad i_size value: 360287970189639690 [ 2253.611830][T20933] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.4349: Bad quota inode: 15, type: 2 [ 2253.626917][T20933] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 2253.646340][T20933] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 2253.655835][T20933] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 2253.748571][T20933] EXT4-fs error (device loop6): ext4_lookup:1787: comm syz.6.4349: inode #15: comm syz.6.4349: iget: illegal inode # [ 2253.839054][T20933] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended [ 2253.864287][T20933] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856c01c, mo2=0002] [ 2253.915884][ T30] audit: type=1326 audit(1749937227.465:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.2.4350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe938f8e929 code=0x7ffc0000 [ 2253.939767][ T30] audit: type=1326 audit(1749937227.465:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.2.4350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe938f8e929 code=0x7ffc0000 [ 2253.964412][T20933] EXT4-fs error (device loop6): ext4_quota_enable:7124: inode #15: comm syz.6.4349: iget: bad i_size value: 360287970189639690 [ 2254.033337][T20933] EXT4-fs error (device loop6): ext4_quota_enable:7127: comm syz.6.4349: Bad quota inode: 15, type: 2 [ 2254.037710][ T30] audit: type=1326 audit(1749937227.545:1291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.2.4350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fe938f8e929 code=0x7ffc0000 [ 2254.067851][ T30] audit: type=1326 audit(1749937227.545:1292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20936 comm="syz.2.4350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe938f8e929 code=0x7ffc0000 [ 2254.408388][T20933] EXT4-fs warning (device loop6): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix. [ 2254.481931][T16960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2255.225982][T20958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4356'. [ 2255.250499][T20958] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4356'. [ 2255.727527][T20961] veth1_to_hsr: entered allmulticast mode [ 2255.744012][T20961] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check. [ 2256.444328][T20967] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 2257.392835][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2257.399492][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2259.153349][T18334] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2259.163324][T18334] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2259.174133][T18334] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2259.189194][T18334] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2259.201149][T18334] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2259.305890][T20981] lo speed is unknown, defaulting to 1000 [ 2259.741929][T20981] syzkaller0 speed is unknown, defaulting to 1000 [ 2261.241239][T21000] loop6: detected capacity change from 0 to 512 [ 2261.249884][T21000] EXT4-fs: Ignoring removed i_version option [ 2261.372353][T18334] Bluetooth: hci5: command tx timeout [ 2261.545637][T21000] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2261.574678][T21000] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2263.452587][T18334] Bluetooth: hci5: command tx timeout [ 2263.757409][T20981] chnl_net:caif_netlink_parms(): no params data found [ 2267.938997][T18334] Bluetooth: hci5: command tx timeout [ 2268.372215][ T7853] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 2268.565576][ T7853] usb 7-1: Using ep0 maxpacket: 32 [ 2268.596129][ T7853] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 2268.605997][ T7853] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2268.656288][ T7853] usb 7-1: config 0 descriptor?? [ 2268.677953][ T7853] gspca_main: sunplus-2.14.0 probing 041e:400b [ 2269.071174][T20981] bridge0: port 1(bridge_slave_0) entered blocking state [ 2269.079348][T20981] bridge0: port 1(bridge_slave_0) entered disabled state [ 2269.091950][T20981] bridge_slave_0: entered allmulticast mode [ 2269.102808][T20981] bridge_slave_0: entered promiscuous mode [ 2269.131130][T20981] bridge0: port 2(bridge_slave_1) entered blocking state [ 2269.140838][T20981] bridge0: port 2(bridge_slave_1) entered disabled state [ 2269.150347][T20981] bridge_slave_1: entered allmulticast mode [ 2269.161243][T20981] bridge_slave_1: entered promiscuous mode [ 2269.401040][T21019] lo speed is unknown, defaulting to 1000 [ 2269.485493][ T7853] gspca_sunplus: reg_r err -32 [ 2269.490896][ T7853] sunplus 7-1:0.0: probe with driver sunplus failed with error -32 [ 2269.848325][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 2269.848418][ T30] audit: type=1326 audit(1749937243.385:1294): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21018 comm="syz.2.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe938f8e929 code=0x7ffc0000 [ 2269.946661][T20981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2269.976268][T20981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2270.030572][T18334] Bluetooth: hci5: command tx timeout [ 2270.043674][ T30] audit: type=1326 audit(1749937243.595:1295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21018 comm="syz.2.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fe938f8e929 code=0x7ffc0000 [ 2270.136550][ T30] audit: type=1326 audit(1749937243.625:1296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21018 comm="syz.2.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe938f8e929 code=0x7ffc0000 [ 2270.160107][ T30] audit: type=1326 audit(1749937243.625:1297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21018 comm="syz.2.4375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe938f8e929 code=0x7ffc0000 [ 2270.215298][T21019] syzkaller0 speed is unknown, defaulting to 1000 [ 2270.882329][T20981] team0: Port device team_slave_0 added [ 2270.900116][T20981] team0: Port device team_slave_1 added [ 2271.656884][ T42] usb 7-1: USB disconnect, device number 66 [ 2271.925860][T21032] batadv0: entered promiscuous mode [ 2271.932826][T21032] macsec2: entered promiscuous mode [ 2271.939297][T21032] macsec2: entered allmulticast mode [ 2271.945087][T21032] batadv0: entered allmulticast mode [ 2271.960128][T21032] batadv0: left allmulticast mode [ 2271.966766][T21032] batadv0: left promiscuous mode [ 2272.163408][T21034] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 2274.368424][T20981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2274.376019][T20981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2274.404521][T20981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2275.404590][T20981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2275.413816][T20981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2275.440535][T20981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2276.276686][T20981] hsr_slave_0: entered promiscuous mode [ 2276.287520][T20981] hsr_slave_1: entered promiscuous mode [ 2276.297077][T20981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2276.305113][T20981] Cannot create hsr debugfs directory [ 2277.376328][T21085] loop6: detected capacity change from 0 to 256 [ 2278.112399][T21085] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2278.123786][T21085] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 2279.064489][T21085] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 2280.453105][T20981] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.606032][T20981] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.694826][T20981] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2280.712182][T21127] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 2280.733123][T21130] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4394'. [ 2280.769787][T21130] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4394'. [ 2280.831675][T20981] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2281.471151][T20981] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 2281.572859][T20981] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 2281.633004][T20981] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 2281.723328][T20981] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 2282.213518][ T7853] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 2282.392412][ T7853] usb 7-1: Using ep0 maxpacket: 16 [ 2282.447707][ T7853] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2282.458547][ T7853] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2282.550280][ T7853] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2282.560910][ T7853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2282.570494][ T7853] usb 7-1: Product: syz [ 2282.575051][ T7853] usb 7-1: Manufacturer: syz [ 2282.581563][ T7853] usb 7-1: SerialNumber: syz [ 2283.237673][T21154] overlayfs: failed to clone upperpath [ 2283.305391][T21155] overlayfs: missing 'lowerdir' [ 2283.622011][T21157] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 2283.758179][ T7853] usb 7-1: 0:2 : does not exist [ 2283.792258][T20981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2284.200890][T21159] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4407'. [ 2284.282447][T21162] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4407'. [ 2284.768574][ T7853] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2285.439285][T21169] EXT4-fs (loop5): VFS: Can't find ext4 filesystem [ 2285.572561][T18334] Bluetooth: hci4: unexpected event for opcode 0x2006 [ 2285.763973][T20981] 8021q: adding VLAN 0 to HW filter on device team0 [ 2286.748615][ T7853] usb 7-1: USB disconnect, device number 67 [ 2287.285613][T12008] bridge0: port 1(bridge_slave_0) entered blocking state [ 2287.293373][T12008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2287.797599][ T3578] bridge0: port 2(bridge_slave_1) entered blocking state [ 2287.805341][ T3578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2288.067701][T21183] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 2289.025926][T21187] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4419'. [ 2289.146825][T21191] netlink: 52 bytes leftover after parsing attributes in process `syz.6.4419'. [ 2290.186680][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4421'. [ 2290.538610][T21195] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4421'. [ 2291.498715][T20981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2291.572906][ T9] hid-generic 0000:0000:0000.0014: unknown main item tag 0x0 [ 2291.607176][ T9] hid-generic 0000:0000:0000.0014: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2291.650587][T21206] loop6: detected capacity change from 0 to 1024 [ 2291.674463][T21206] EXT4-fs: Ignoring removed nomblk_io_submit option [ 2291.705552][T21206] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 2291.817018][T21206] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 2291.882354][T20981] veth0_vlan: entered promiscuous mode [ 2291.921416][T20981] veth1_vlan: entered promiscuous mode [ 2292.137830][T20981] veth0_macvtap: entered promiscuous mode [ 2292.208583][T20981] veth1_macvtap: entered promiscuous mode [ 2292.285052][T21213] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 2292.340041][T16960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2292.415861][T20981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2292.463917][T20981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2292.573594][T20981] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.582843][T20981] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.592267][T20981] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.601764][T20981] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2292.942359][T21222] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4432'. [ 2292.952136][T21222] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4432'. [ 2292.961619][T21222] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4432'. [ 2292.970953][T21222] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4432'. [ 2293.001881][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4433'. [ 2293.111001][T21224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4433'. [ 2295.331797][ T9] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 2296.492213][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 2296.544080][ T9] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 2296.553123][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2296.563891][ T9] usb 7-1: config 0 has no interface number 0 [ 2296.570289][ T9] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2296.580883][ T9] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2296.624356][T21256] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 2296.700632][ T9] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 2296.710167][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2296.719735][ T9] usb 7-1: Product: syz [ 2296.724264][ T9] usb 7-1: Manufacturer: syz [ 2296.729166][ T9] usb 7-1: SerialNumber: syz [ 2296.941026][ T9] usb 7-1: config 0 descriptor?? [ 2297.024871][ T9] usb 7-1: can't set config #0, error -71 [ 2297.093706][ T9] usb 7-1: USB disconnect, device number 68 [ 2297.822612][ T42] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 2298.043251][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2298.051817][ T42] usb 7-1: can't read configurations, error -61 [ 2298.222196][ T42] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 2298.410547][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2298.418867][ T42] usb 7-1: can't read configurations, error -61 [ 2298.456588][ T42] usb usb7-port1: attempt power cycle [ 2298.902191][ T42] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 2298.999937][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2299.008337][ T42] usb 7-1: can't read configurations, error -61 [ 2299.152361][ T42] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 2299.237681][ T42] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 2299.245958][ T42] usb 7-1: can't read configurations, error -61 [ 2299.281032][ T42] usb usb7-port1: unable to enumerate USB device [ 2299.488218][T21291] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 2300.400981][T12008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2300.409607][T12008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2300.516319][T12016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2300.525045][T12016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2301.322467][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 2301.481915][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 2301.511177][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2301.523286][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2301.536142][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2301.546124][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2301.654212][ T9] usb 2-1: config 0 descriptor?? [ 2301.659031][T21319] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 2301.691159][ T9] hub 2-1:0.0: USB hub found [ 2301.894340][ T9] hub 2-1:0.0: 1 port detected [ 2302.372006][T18297] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 2302.507535][ T9] hub 2-1:0.0: activate --> -90 [ 2302.564186][T18297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2302.575240][T18297] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 2302.585042][T18297] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2302.728444][ T7853] usb 2-1: USB disconnect, device number 7 [ 2302.750758][T18297] usb 7-1: config 0 descriptor?? [ 2302.970391][T18297] pwc: Askey VC010 type 2 USB webcam detected. [ 2303.360200][T12048] bridge_slave_1: left allmulticast mode [ 2303.369810][T12048] bridge_slave_1: left promiscuous mode [ 2303.377227][T12048] bridge0: port 2(bridge_slave_1) entered disabled state [ 2303.418555][T12048] bridge_slave_0: left allmulticast mode [ 2303.425185][T12048] bridge_slave_0: left promiscuous mode [ 2303.432948][T12048] bridge0: port 1(bridge_slave_0) entered disabled state [ 2303.452321][T18297] pwc: recv_control_msg error -32 req 02 val 2b00 [ 2303.464770][T18297] pwc: recv_control_msg error -32 req 02 val 2700 [ 2303.486128][T18297] pwc: recv_control_msg error -32 req 02 val 2c00 [ 2303.499568][T18297] pwc: recv_control_msg error -32 req 04 val 1000 [ 2303.846114][T18297] pwc: recv_control_msg error -32 req 04 val 1400 [ 2303.874036][T18297] pwc: recv_control_msg error -32 req 02 val 2000 [ 2303.919545][T18297] pwc: recv_control_msg error -32 req 02 val 2100 [ 2303.947328][T18297] pwc: recv_control_msg error -71 req 04 val 1500 [ 2303.986892][T18297] pwc: recv_control_msg error -71 req 02 val 2500 [ 2304.010371][T18297] pwc: recv_control_msg error -71 req 02 val 2400 [ 2304.039662][T18297] pwc: recv_control_msg error -71 req 02 val 2600 [ 2304.075869][T18297] pwc: recv_control_msg error -71 req 02 val 2900 [ 2304.136370][T18297] pwc: recv_control_msg error -71 req 02 val 2800 [ 2304.162437][T18297] pwc: recv_control_msg error -71 req 04 val 1100 [ 2304.194856][T18297] pwc: recv_control_msg error -71 req 04 val 1200 [ 2304.230768][T18297] pwc: Registered as video103. [ 2304.239123][T18297] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input22 [ 2304.244626][T12048] bond2 (unregistering): (slave gretap1): Releasing active interface [ 2304.387560][T18297] usb 7-1: USB disconnect, device number 73 [ 2304.401963][T21343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4473'. [ 2304.411217][T21343] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4473'. [ 2304.425635][T21343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4473'. [ 2304.436393][T21343] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4473'. [ 2304.540255][T12048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2304.583354][T12048] bond_slave_0: left promiscuous mode [ 2304.629772][T12048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2304.652837][T12048] bond_slave_1: left promiscuous mode [ 2304.679713][T12048] bond0 (unregistering): Released all slaves [ 2304.708052][T12048] bond1 (unregistering): Released all slaves [ 2304.733976][T12048] bond2 (unregistering): Released all slaves [ 2304.759321][T12048] bond3 (unregistering): Released all slaves [ 2304.783853][T12048] bond4 (unregistering): Released all slaves [ 2304.810843][T12048] bond5 (unregistering): Released all slaves [ 2305.191134][T21347] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 2306.068961][T12048] tipc: Disabling bearer [ 2306.113979][T12048] tipc: Left network mode [ 2306.270726][T21363] loop6: detected capacity change from 0 to 64 [ 2307.388622][T21369] loop1: detected capacity change from 0 to 128 [ 2308.657524][T21374] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4486'. [ 2308.688165][T12048] veth1_macvtap: left promiscuous mode [ 2308.696790][T12048] veth0_macvtap: left promiscuous mode [ 2308.704504][T12048] veth1_vlan: left promiscuous mode [ 2308.710579][T12048] veth0_vlan: left promiscuous mode [ 2309.563116][T12048] team0 (unregistering): Port device team_slave_1 removed [ 2309.603575][T12048] team0 (unregistering): Port device team_slave_0 removed [ 2309.867523][ T3578] smc: removing ib device syz0 [ 2309.883158][T21374] 8021q: VLANs not supported on caif0 [ 2311.583684][T21388] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 2313.382729][ T42] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 2313.523462][T21402] netlink: 'syz.1.4498': attribute type 10 has an invalid length. [ 2313.532567][T21402] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4498'. [ 2313.625882][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 2313.652888][ T42] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2313.665228][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2313.772731][ T42] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2313.782466][ T42] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2313.790761][ T42] usb 7-1: Product: syz [ 2313.795473][ T42] usb 7-1: Manufacturer: syz [ 2313.800421][ T42] usb 7-1: SerialNumber: syz [ 2313.859661][ T42] usb 7-1: config 0 descriptor?? [ 2313.870690][T21402] team0: Port device netdevsim1 added [ 2313.939165][ T42] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2313.948998][ T42] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class) [ 2314.506572][ T42] em28xx 7-1:0.0: unknown em28xx chip ID (0) [ 2314.516933][ T42] em28xx 7-1:0.0: Config register raw data: 0x2f [ 2314.524006][ T42] em28xx 7-1:0.0: I2S Audio (1 sample rate(s)) [ 2314.532779][ T42] em28xx 7-1:0.0: No AC97 audio processor [ 2314.946235][ T42] usb 7-1: USB disconnect, device number 74 [ 2314.994415][T21411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4502'. [ 2315.005622][T21411] 8021q: VLANs not supported on caif0 [ 2315.570776][T21421] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4506'. [ 2315.598198][T21422] 9pnet: p9_errstr2errno: server reported unknown error 1844674407 [ 2315.615241][T21421] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4506'. [ 2316.328755][T21428] netlink: 'syz.1.4510': attribute type 10 has an invalid length. [ 2316.337506][T21428] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4510'. [ 2317.236954][T21438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4512'. [ 2319.265661][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2319.272745][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2320.234603][T21453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4517'. [ 2320.244493][T21453] 8021q: VLANs not supported on caif0 [ 2320.397218][T21457] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 2320.414215][T21458] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4519'. [ 2320.462613][T21458] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4519'. [ 2320.533000][T21460] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4521'. [ 2321.098082][T21466] netlink: 'syz.5.4524': attribute type 10 has an invalid length. [ 2321.108867][T21466] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4524'. [ 2321.613972][T21473] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input23 [ 2323.084343][T21488] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4529'. [ 2324.692006][T18297] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2324.712544][ T7853] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 2324.839377][T21497] 9pnet: p9_errstr2errno: server reported unknown error 184467440 [ 2324.891632][ T7853] usb 7-1: Using ep0 maxpacket: 16 [ 2324.904768][T18297] usb 2-1: Using ep0 maxpacket: 32 [ 2324.918902][T21499] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4535'. [ 2324.937013][ T7853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2324.948095][ T7853] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2324.968430][T18297] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 2324.968929][T21499] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4535'. [ 2324.979929][T18297] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2324.980075][T18297] usb 2-1: config 0 has no interface number 0 [ 2325.007315][T18297] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2325.018498][T18297] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2325.044697][ T7853] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2325.054825][ T7853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2325.063522][ T7853] usb 7-1: Product: syz [ 2325.068200][ T7853] usb 7-1: Manufacturer: syz [ 2325.073445][ T7853] usb 7-1: SerialNumber: syz [ 2325.101004][T18297] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 2325.111652][T18297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2325.120000][T18297] usb 2-1: Product: syz [ 2325.124667][T18297] usb 2-1: Manufacturer: syz [ 2325.129566][T18297] usb 2-1: SerialNumber: syz [ 2325.157694][T18297] usb 2-1: config 0 descriptor?? [ 2325.167958][T21489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2325.190029][T18297] usb-storage 2-1:0.231: USB Mass Storage device detected [ 2325.327902][ T7853] usb 7-1: 0:2 : does not exist [ 2325.369781][ T7853] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2325.503072][ T7853] usb 7-1: USB disconnect, device number 75 [ 2325.968373][T21512] netlink: 'syz.2.4540': attribute type 10 has an invalid length. [ 2325.977357][T21512] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4540'. [ 2328.684126][ T42] usb 2-1: USB disconnect, device number 8 [ 2329.293303][T21531] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4545'. [ 2330.945157][T21547] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.029765][T21547] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.114112][T21547] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.370590][T21547] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2331.929542][T21547] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.965804][T21547] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2331.997586][T21547] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2332.029248][T21547] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2333.066123][T18297] usb 7-1: new high-speed USB device number 76 using dummy_hcd [ 2333.235505][T18297] usb 7-1: Using ep0 maxpacket: 16 [ 2333.266817][T21569] loop1: detected capacity change from 0 to 256 [ 2333.282484][T21566] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4560'. [ 2333.328245][T18297] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config [ 2333.339511][T18297] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2333.398212][T21569] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x23633d53, utbl_chksum : 0xe619d30d) [ 2334.352856][T18297] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2334.362456][T18297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2334.370782][T18297] usb 7-1: Product: syz [ 2334.375534][T18297] usb 7-1: Manufacturer: syz [ 2334.380430][T18297] usb 7-1: SerialNumber: syz [ 2334.467786][T21576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4562'. [ 2336.345253][T18297] usb 7-1: 0:2 : does not exist [ 2336.440238][T18297] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2336.682375][T18297] usb 7-1: USB disconnect, device number 76 [ 2337.462138][T18297] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 2337.681897][T18297] usb 2-1: Using ep0 maxpacket: 16 [ 2337.739514][T18297] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2337.750600][T18297] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2338.146941][T18297] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2338.156679][T18297] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2338.165226][T18297] usb 2-1: Product: syz [ 2338.169704][T18297] usb 2-1: Manufacturer: syz [ 2338.174715][T18297] usb 2-1: SerialNumber: syz [ 2338.940289][T21592] loop6: detected capacity change from 0 to 128 [ 2339.291734][T21599] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.305922][T18297] usb 2-1: 0:2 : does not exist [ 2339.386355][T18297] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 2339.510274][T21599] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.562853][T18297] usb 2-1: USB disconnect, device number 9 [ 2339.644022][T21599] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2339.767953][T21599] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2340.112133][T21599] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.145693][T21599] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.174437][T21599] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2340.199802][T21599] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2341.043113][T21616] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4572'. [ 2341.059342][T21606] loop1: detected capacity change from 0 to 4096 [ 2341.088235][T21606] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512). [ 2343.175988][T21640] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4585'. [ 2343.258670][T21640] netlink: 'syz.5.4585': attribute type 5 has an invalid length. [ 2343.267208][T21640] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.4585'. [ 2343.673274][T21638] loop1: detected capacity change from 0 to 32768 [ 2343.694694][T21638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4582 (21638) [ 2343.723579][T21638] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2343.734565][T21638] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 2343.746232][T21638] BTRFS info (device loop1): disk space caching is enabled [ 2343.753843][T21638] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2343.925324][T21638] BTRFS info (device loop1): rebuilding free space tree [ 2343.973547][T21638] BTRFS info (device loop1): disabling free space tree [ 2343.980898][T21638] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2343.991493][T21638] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2344.394598][T12042] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 2345.686452][T21680] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4592'. [ 2345.799812][T20981] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2349.426085][T21755] loop1: detected capacity change from 0 to 164 [ 2349.475723][T21755] ISOFS: Bad logical zone size 25856 [ 2349.511837][ T7853] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 2349.540164][T21755] loop1: detected capacity change from 0 to 128 [ 2349.678583][T21755] FAT-fs (loop1): Directory bread(block 32) failed [ 2349.686138][T21755] FAT-fs (loop1): Directory bread(block 33) failed [ 2349.693534][T21755] FAT-fs (loop1): Directory bread(block 34) failed [ 2349.700370][T21755] FAT-fs (loop1): Directory bread(block 35) failed [ 2349.707509][T21755] FAT-fs (loop1): Directory bread(block 36) failed [ 2349.714609][T21755] FAT-fs (loop1): Directory bread(block 37) failed [ 2349.721721][T21755] FAT-fs (loop1): Directory bread(block 38) failed [ 2349.728521][T21755] FAT-fs (loop1): Directory bread(block 39) failed [ 2349.735762][T21755] FAT-fs (loop1): Directory bread(block 40) failed [ 2349.738956][ T7853] usb 7-1: Using ep0 maxpacket: 16 [ 2349.742605][T21755] FAT-fs (loop1): Directory bread(block 41) failed [ 2349.825805][ T7853] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2349.836578][ T7853] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2349.928904][ T7853] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 2349.938940][ T7853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2349.947505][ T7853] usb 7-1: Product: syz [ 2349.952125][ T7853] usb 7-1: Manufacturer: syz [ 2349.957115][ T7853] usb 7-1: SerialNumber: syz [ 2350.159042][T21755] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 2350.168859][T21755] FAT-fs (loop1): Filesystem has been set read-only [ 2350.236064][ T7853] usb 7-1: 0:2 : does not exist [ 2350.296997][ T7853] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 2350.398312][ T7853] usb 7-1: USB disconnect, device number 77 [ 2350.669128][T21769] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4607'. [ 2354.687589][T21844] loop6: detected capacity change from 0 to 32768 [ 2354.700358][T21844] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4615 (21844) [ 2354.722362][T21844] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2354.733233][T21844] BTRFS info (device loop6): using sha256 (sha256-x86_64) checksum algorithm [ 2354.747146][T21844] BTRFS info (device loop6): disk space caching is enabled [ 2354.754917][T21844] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2354.812586][ T42] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 2354.962394][T21844] BTRFS info (device loop6): rebuilding free space tree [ 2355.004694][ T42] usb 2-1: Using ep0 maxpacket: 16 [ 2355.027383][T21844] BTRFS info (device loop6): disabling free space tree [ 2355.035388][T21844] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2355.045590][T21844] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2355.058338][ T42] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 2355.071017][ T42] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 2355.149778][ T42] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 2355.159848][ T42] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2355.168352][ T42] usb 2-1: Product: syz [ 2355.172889][ T42] usb 2-1: Manufacturer: syz [ 2355.177954][ T42] usb 2-1: SerialNumber: syz [ 2355.190137][ T42] usb 2-1: config 0 descriptor?? [ 2355.208973][ T42] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 2355.218822][ T42] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 2355.526474][T12059] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared) [ 2355.560077][T21878] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4615'. [ 2355.644639][T21875] netlink: 60 bytes leftover after parsing attributes in process `syz.6.4615'. [ 2356.489067][ T42] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 2356.502427][ T42] em28xx 2-1:0.0: Config register raw data: 0x2f [ 2356.509110][ T42] em28xx 2-1:0.0: I2S Audio (1 sample rate(s)) [ 2356.517825][ T42] em28xx 2-1:0.0: No AC97 audio processor [ 2356.958135][ T42] usb 2-1: USB disconnect, device number 10 [ 2357.243704][T21887] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4624'. [ 2357.327662][T16960] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2358.056341][T21926] overlayfs: failed to clone upperpath [ 2366.999136][T21969] batadv0: entered promiscuous mode [ 2367.005222][T21969] macsec2: entered promiscuous mode [ 2367.011864][T21969] macsec2: entered allmulticast mode [ 2367.017449][T21969] batadv0: entered allmulticast mode [ 2367.066226][T21969] batadv0: left allmulticast mode [ 2367.072920][T21969] batadv0: left promiscuous mode [ 2367.840808][T21971] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 2368.374570][T21982] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4640'. [ 2368.610433][T21986] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4642'. [ 2371.767330][T22060] batadv0: entered promiscuous mode [ 2371.776216][T22060] macsec2: entered promiscuous mode [ 2371.783052][T22060] macsec2: entered allmulticast mode [ 2371.788647][T22060] batadv0: entered allmulticast mode [ 2371.806799][T22060] batadv0: left allmulticast mode [ 2371.814239][T22060] batadv0: left promiscuous mode [ 2372.284694][T22067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4652'. [ 2373.070395][T22077] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4657'. [ 2374.153977][T22085] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4659'. [ 2380.083758][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2380.090546][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2380.242525][T22159] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4667'. [ 2380.254880][T22157] netlink: 'syz.2.4666': attribute type 10 has an invalid length. [ 2380.263388][T22157] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4666'. [ 2380.738211][T22169] netlink: 72 bytes leftover after parsing attributes in process `syz.6.4670'. [ 2381.239160][T22177] loop6: detected capacity change from 0 to 1024 [ 2381.389977][T22177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2381.694326][T22190] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4676'. [ 2382.237032][T16960] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2382.451698][ T7853] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 2382.851523][ T7853] usb 2-1: Using ep0 maxpacket: 32 [ 2383.083986][ T7853] usb 2-1: config 0 has an invalid interface number: 231 but max is 0 [ 2383.093595][ T7853] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2383.105300][ T7853] usb 2-1: config 0 has no interface number 0 [ 2383.113170][ T7853] usb 2-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2383.124720][ T7853] usb 2-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2384.273696][ T7853] usb 2-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 2384.283269][ T7853] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2384.292147][ T7853] usb 2-1: Product: syz [ 2384.296614][ T7853] usb 2-1: Manufacturer: syz [ 2384.301692][ T7853] usb 2-1: SerialNumber: syz [ 2384.824048][ T7853] usb 2-1: config 0 descriptor?? [ 2385.149218][ T7853] usb 2-1: can't set config #0, error -71 [ 2385.180666][ T7853] usb 2-1: USB disconnect, device number 11 [ 2385.280874][T22266] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4683'. [ 2385.524769][T22269] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4684'. [ 2385.784405][T22275] netlink: 'syz.1.4687': attribute type 10 has an invalid length. [ 2385.793054][T22275] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4687'. [ 2386.291061][T22284] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4690'. [ 2386.581168][T22292] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4692'. [ 2387.306647][T22302] netlink: 'syz.0.4695': attribute type 6 has an invalid length. [ 2387.325439][T22299] loop1: detected capacity change from 0 to 256 [ 2389.757233][T22364] netlink: 72 bytes leftover after parsing attributes in process `syz.5.4698'. [ 2390.293130][T22376] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4701'. [ 2390.875006][T22370] loop1: detected capacity change from 0 to 32768 [ 2390.889124][T22370] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4702 (22370) [ 2390.910225][T22370] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2390.922658][T22370] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 2390.935087][T22370] BTRFS info (device loop1): disk space caching is enabled [ 2390.942717][T22370] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2391.120170][T22396] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4705'. [ 2391.200256][T22370] BTRFS info (device loop1): rebuilding free space tree [ 2391.244815][T22370] BTRFS info (device loop1): disabling free space tree [ 2391.252419][T22370] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2391.262560][T22370] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2391.620252][ T1845] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared) [ 2391.630686][T20981] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2392.397112][T18334] Bluetooth: hci1: adv larger than maximum supported [ 2392.397266][T18334] Bluetooth: hci1: Malformed LE Event: 0x0d [ 2392.432608][T22411] netlink: 'syz.5.4712': attribute type 10 has an invalid length. [ 2392.440776][T22411] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4712'. [ 2392.807232][T22414] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4713'. [ 2392.930459][T22419] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4708'. [ 2393.574544][T22432] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4717'. [ 2396.685513][T22506] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4725'. [ 2396.695008][T22506] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4725'. [ 2397.169580][T22516] program syz.6.4729 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2397.360863][T22519] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4730'. [ 2397.578746][T22521] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2397.636844][T22527] netlink: 'syz.5.4731': attribute type 10 has an invalid length. [ 2397.645870][T22527] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4731'. [ 2397.693754][T22526] netlink: 'syz.6.4733': attribute type 29 has an invalid length. [ 2397.749685][T22521] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2397.829797][T22528] netlink: 'syz.6.4733': attribute type 29 has an invalid length. [ 2397.898201][T22521] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2398.069291][T22521] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2400.810442][T22521] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2400.842454][T22521] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2400.903147][T22596] netlink: 'syz.0.4738': attribute type 29 has an invalid length. [ 2400.943598][T22521] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2400.979737][T22521] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2401.025964][T22596] netlink: 'syz.0.4738': attribute type 29 has an invalid length. [ 2401.477328][T22599] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'. [ 2401.487016][T22599] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4740'. [ 2402.170881][T22601] loop1: detected capacity change from 0 to 32768 [ 2402.192606][T22601] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.4741 (22601) [ 2402.229050][T22601] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2402.239933][T22601] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm [ 2402.250912][T22601] BTRFS info (device loop1): disk space caching is enabled [ 2402.258492][T22601] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 2402.502887][T22601] BTRFS info (device loop1): rebuilding free space tree [ 2402.546314][T22601] BTRFS info (device loop1): disabling free space tree [ 2402.554064][T22601] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2402.564631][T22601] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2402.923169][T22629] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4741'. [ 2402.983294][T22628] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4741'. [ 2408.670360][T22652] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4753'. [ 2408.724107][T22652] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4753'. [ 2408.745381][T22654] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4750'. [ 2408.758709][T22642] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4750'. [ 2409.579679][T20981] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 2410.239046][T22669] netlink: 'syz.6.4760': attribute type 3 has an invalid length. [ 2411.493142][T22682] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4765'. [ 2411.544989][T22682] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4765'. [ 2411.982531][T22686] kvm: kvm [22685]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100009011 [ 2412.066156][T22686] kvm: kvm [22685]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x100000071 [ 2412.076458][T22686] kvm: kvm [22685]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 2412.090762][T22686] kvm_intel: kvm [22685]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x2 [ 2413.008158][T22702] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.100141][T22711] netlink: 'syz.6.4771': attribute type 10 has an invalid length. [ 2413.108647][T22711] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4771'. [ 2413.269778][T22702] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.473840][T22713] loop1: detected capacity change from 0 to 1024 [ 2413.485776][T22702] team0: Port device netdevsim1 removed [ 2413.502703][T22702] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.781860][T22702] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2413.948516][T22718] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4779'. [ 2413.985776][T22718] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 2414.183053][T22721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2414.215664][T22702] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.247305][T22702] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.283517][T22702] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2414.320056][T22702] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2415.919911][T18297] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 2416.221892][T18297] usb 7-1: Using ep0 maxpacket: 32 [ 2416.456576][T18297] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 2416.466831][T18297] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2416.478426][T18297] usb 7-1: config 0 has no interface number 0 [ 2416.485528][T18297] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2416.496311][T18297] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2417.872722][T18297] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 2417.882497][T18297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2417.890818][T18297] usb 7-1: Product: syz [ 2417.895883][T18297] usb 7-1: Manufacturer: syz [ 2417.900796][T18297] usb 7-1: SerialNumber: syz [ 2418.344490][T18297] usb 7-1: config 0 descriptor?? [ 2418.359379][T18297] usb 7-1: can't set config #0, error -71 [ 2418.417831][T18297] usb 7-1: USB disconnect, device number 78 [ 2419.234340][T22826] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4797'. [ 2419.518183][T22828] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.562827][T22833] netlink: 'syz.0.4798': attribute type 10 has an invalid length. [ 2419.570968][T22833] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4798'. [ 2419.589392][T22830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4799'. [ 2419.647217][T22835] program syz.1.4801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2419.669367][T22828] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.802354][T22828] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2419.967214][T22828] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2420.476300][T22828] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.508132][T22828] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.542469][T22828] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.573978][T22828] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2420.940865][T22845] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4804'. [ 2421.254590][T22850] netlink: 60 bytes leftover after parsing attributes in process `syz.2.4802'. [ 2422.509210][ T7853] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 2422.602175][T22862] loop1: detected capacity change from 0 to 164 [ 2422.639795][T22861] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4809'. [ 2422.670510][T22861] vlan2: entered promiscuous mode [ 2422.676152][T22861] team0: entered promiscuous mode [ 2422.681742][T22861] team_slave_1: entered promiscuous mode [ 2422.704087][ T7853] usb 7-1: Using ep0 maxpacket: 32 [ 2422.723191][T22862] ISOFS: Bad logical zone size 25856 [ 2422.753307][ T7853] usb 7-1: config 0 has an invalid interface number: 231 but max is 0 [ 2422.762411][ T7853] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2422.775549][ T7853] usb 7-1: config 0 has no interface number 0 [ 2422.782475][ T7853] usb 7-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2422.792993][ T7853] usb 7-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 2422.855962][T22862] loop1: detected capacity change from 0 to 128 [ 2422.874114][ T7853] usb 7-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 2422.884078][ T7853] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2422.892650][ T7853] usb 7-1: Product: syz [ 2422.897119][ T7853] usb 7-1: Manufacturer: syz [ 2422.902140][ T7853] usb 7-1: SerialNumber: syz [ 2422.917524][ T7853] usb 7-1: config 0 descriptor?? [ 2422.926592][T22848] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 2422.942825][ T7853] usb-storage 7-1:0.231: USB Mass Storage device detected [ 2422.995154][T22862] FAT-fs (loop1): Directory bread(block 32) failed [ 2423.002671][T22862] FAT-fs (loop1): Directory bread(block 33) failed [ 2423.009676][T22862] FAT-fs (loop1): Directory bread(block 34) failed [ 2423.016708][T22862] FAT-fs (loop1): Directory bread(block 35) failed [ 2423.023806][T22862] FAT-fs (loop1): Directory bread(block 36) failed [ 2423.030715][T22862] FAT-fs (loop1): Directory bread(block 37) failed [ 2423.037912][T22862] FAT-fs (loop1): Directory bread(block 38) failed [ 2423.044862][T22862] FAT-fs (loop1): Directory bread(block 39) failed [ 2423.052193][T22862] FAT-fs (loop1): Directory bread(block 40) failed [ 2423.059027][T22862] FAT-fs (loop1): Directory bread(block 41) failed [ 2423.423650][T22862] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 2423.432091][T22862] FAT-fs (loop1): Filesystem has been set read-only [ 2423.581917][T22871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4812'. [ 2424.208630][T22879] program syz.1.4814 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2424.535807][ T30] audit: type=1326 audit(1749937398.045:1298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.4816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2424.559266][ T30] audit: type=1326 audit(1749937398.045:1299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.4816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2424.582588][ T30] audit: type=1326 audit(1749937398.055:1300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.4816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2424.605515][ T30] audit: type=1326 audit(1749937398.055:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.4816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2424.629524][ T30] audit: type=1326 audit(1749937398.055:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22880 comm="syz.5.4816" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f481ed8e929 code=0x7ffc0000 [ 2424.667791][ T7853] usb 7-1: USB disconnect, device number 79 [ 2425.265316][T22898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4822'. [ 2426.039654][T22903] 9pnet: p9_errstr2errno: server reported unknown error [ 2426.407859][T22911] program syz.6.4829 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2428.025809][T22933] 9pnet: p9_errstr2errno: server reported unknown error [ 2429.042576][T22940] overlayfs: statfs failed on './file0' [ 2429.661115][T22949] program syz.6.4843 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2430.225871][ T30] audit: type=1326 audit(1749937403.765:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.0.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672858e929 code=0x7ffc0000 [ 2430.253067][ T30] audit: type=1326 audit(1749937403.765:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.0.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672858e929 code=0x7ffc0000 [ 2430.529411][ T30] audit: type=1326 audit(1749937403.825:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.0.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7f672858e929 code=0x7ffc0000 [ 2430.553940][ T30] audit: type=1326 audit(1749937403.835:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.0.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672858e929 code=0x7ffc0000 [ 2430.577406][ T30] audit: type=1326 audit(1749937403.835:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22956 comm="syz.0.4847" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f672858e929 code=0x7ffc0000 [ 2431.079913][T22968] 9pnet: p9_errstr2errno: server reported unknown error [ 2431.451574][T22976] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4855'. [ 2431.887260][T22984] program syz.6.4858 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2437.810819][T23066] loop1: detected capacity change from 0 to 512 [ 2437.870628][T23066] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 2437.920132][T23066] EXT4-fs (loop1): 1 truncate cleaned up [ 2437.932453][T23066] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2438.214524][T23080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4896'. [ 2438.419219][T20981] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2438.733794][T23068] loop6: detected capacity change from 0 to 4096 [ 2438.820418][T23068] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 2439.373362][T23068] ntfs3(loop6): $Secure::$SDH is corrupted. [ 2439.379896][T23068] ntfs3(loop6): Failed to initialize $Secure (-22). [ 2439.905501][T23090] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 2441.490144][T23098] syz.6.4904 (23098): drop_caches: 2 [ 2441.507720][ T1285] ieee802154 phy0 wpan0: encryption failed: -22 [ 2441.514935][ T1285] ieee802154 phy1 wpan1: encryption failed: -22 [ 2443.240716][T23104] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4907'. [ 2444.126052][T23120] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4911'. [ 2444.865317][T23133] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 2446.053388][T23196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4919'. [ 2446.062777][T23196] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4919'. [ 2448.971767][T18334] Bluetooth: hci5: command 0x0406 tx timeout [ 2449.408383][T23232] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4929'. [ 2450.256960][T23247] syz.1.4936 (23247): drop_caches: 2 [ 2452.147368][ T42] hid-generic 0000:0000:0000.0015: unknown main item tag 0x0 [ 2452.481893][T20720] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 2452.585015][ T42] hid-generic 0000:0000:0000.0015: hidraw0: HID v0.00 Device [syz1] on syz0 [ 2452.801932][T20720] usb 7-1: Using ep0 maxpacket: 32 [ 2452.832690][T20720] usb 7-1: config index 0 descriptor too short (expected 8192, got 18) [ 2452.841639][T20720] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2452.852273][T20720] usb 7-1: config 0 has no interfaces? [ 2452.878492][T20720] usb 7-1: New USB device found, idVendor=047a, idProduct=0960, bcdDevice=a5.af [ 2452.888283][T20720] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2452.896957][T20720] usb 7-1: Product: syz [ 2452.901522][T20720] usb 7-1: Manufacturer: syz [ 2452.906422][T20720] usb 7-1: SerialNumber: syz [ 2452.978436][T20720] usb 7-1: config 0 descriptor?? [ 2453.257732][T23306] loop6: detected capacity change from 0 to 256 [ 2453.437680][T20720] usb 7-1: USB disconnect, device number 80 [ 2454.762644][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4949'. [ 2454.877195][T23197] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2454.887087][T23197] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2454.902737][T23197] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2454.946890][T23197] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2454.963882][T23197] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2455.047236][T23337] bond_slave_0: entered promiscuous mode [ 2455.053458][T23337] bond_slave_1: entered promiscuous mode [ 2455.059582][T23337] macsec1: entered promiscuous mode [ 2455.065335][T23337] bond0: entered promiscuous mode [ 2455.240744][T23337] bond0: left promiscuous mode [ 2455.249516][T23337] bond_slave_0: left promiscuous mode [ 2455.255550][T23337] bond_slave_1: left promiscuous mode [ 2455.483161][T23342] syzkaller0 speed is unknown, defaulting to 1000 [ 2457.101511][T18334] Bluetooth: hci2: command tx timeout [ 2458.868575][T12048] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.027614][T12048] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.125171][T12048] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.157007][T18334] Bluetooth: hci2: command tx timeout [ 2459.272096][T12048] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2459.620101][T12048] bridge_slave_1: left allmulticast mode [ 2459.632578][T12048] bridge_slave_1: left promiscuous mode [ 2459.639859][T12048] bridge0: port 2(bridge_slave_1) entered disabled state [ 2459.750956][T12048] bridge_slave_0: left allmulticast mode [ 2459.757382][T12048] bridge_slave_0: left promiscuous mode [ 2459.764583][T12048] bridge0: port 1(bridge_slave_0) entered disabled state [ 2460.559671][T12048] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2460.587666][T12048] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2460.649177][T12048] bond0 (unregistering): Released all slaves [ 2460.679026][T12048] bond1 (unregistering): Released all slaves [ 2460.798395][T12048] bond2 (unregistering): Released all slaves [ 2460.827744][T23342] chnl_net:caif_netlink_parms(): no params data found [ 2460.948760][T23441] macsec2: entered promiscuous mode [ 2461.046779][T23446] loop1: detected capacity change from 0 to 1024 [ 2461.212005][T18334] Bluetooth: hci2: command tx timeout [ 2461.339186][T23446] ===================================================== [ 2461.346992][T23446] BUG: KMSAN: uninit-value in __hfsplus_ext_cache_extent+0x7cb/0x990 [ 2461.355700][T23446] __hfsplus_ext_cache_extent+0x7cb/0x990 [ 2461.361937][T23446] hfsplus_file_extend+0x7b5/0x1df0 [ 2461.367489][T23446] hfsplus_get_block+0xfc3/0x1a20 [ 2461.374612][T23446] __block_write_begin_int+0xa76/0x3030 [ 2461.380956][T23446] cont_write_begin+0x10e1/0x1bc0 [ 2461.386410][T23446] hfsplus_write_begin+0x85/0x130 [ 2461.391864][T23446] generic_perform_write+0x3f4/0x10c0 [ 2461.397519][T23446] __generic_file_write_iter+0x213/0x460 [ 2461.403776][T23446] generic_file_write_iter+0x131/0x980 [ 2461.409495][T23446] vfs_write+0xb4b/0x1580 [ 2461.414457][T23446] __x64_sys_write+0x1fb/0x4d0 [ 2461.419519][T23446] x64_sys_call+0x38c3/0x3db0 [ 2461.424684][T23446] do_syscall_64+0xd9/0x210 [ 2461.429420][T23446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2461.435836][T23446] [ 2461.438312][T23446] Uninit was created at: [ 2461.443119][T23446] __kmalloc_noprof+0x95f/0x1310 [ 2461.448314][T23446] hfsplus_find_init+0x90/0x1d0 [ 2461.453861][T23446] hfsplus_file_extend+0x72f/0x1df0 [ 2461.459337][T23446] hfsplus_get_block+0xfc3/0x1a20 [ 2461.464925][T23446] __block_write_begin_int+0xa76/0x3030 [ 2461.470816][T23446] cont_write_begin+0x10e1/0x1bc0 [ 2461.477918][T23446] hfsplus_write_begin+0x85/0x130 [ 2461.483762][T23446] generic_perform_write+0x3f4/0x10c0 [ 2461.489403][T23446] __generic_file_write_iter+0x213/0x460 [ 2461.495546][T23446] generic_file_write_iter+0x131/0x980 [ 2461.501419][T23446] vfs_write+0xb4b/0x1580 [ 2461.506027][T23446] __x64_sys_write+0x1fb/0x4d0 [ 2461.511087][T23446] x64_sys_call+0x38c3/0x3db0 [ 2461.516325][T23446] do_syscall_64+0xd9/0x210 [ 2461.521051][T23446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2461.527501][T23446] [ 2461.530025][T23446] CPU: 1 UID: 0 PID: 23446 Comm: syz.1.4967 Tainted: G W 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 2461.544545][T23446] Tainted: [W]=WARN [ 2461.548522][T23446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2461.558953][T23446] ===================================================== [ 2461.566270][T23446] Disabling lock debugging due to kernel taint [ 2461.572732][T23446] Kernel panic - not syncing: kmsan.panic set ... [ 2461.579373][T23446] CPU: 1 UID: 0 PID: 23446 Comm: syz.1.4967 Tainted: G B W 6.16.0-rc1-syzkaller-00203-g4774cfe3543a #0 PREEMPT(undef) [ 2461.593419][T23446] Tainted: [B]=BAD_PAGE, [W]=WARN [ 2461.598596][T23446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 2461.608858][T23446] Call Trace: [ 2461.612283][T23446] [ 2461.615370][T23446] __dump_stack+0x26/0x30 [ 2461.619969][T23446] dump_stack_lvl+0x53/0x270 [ 2461.624787][T23446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2461.630896][T23446] dump_stack+0x1e/0x25 [ 2461.635307][T23446] panic+0x4bd/0xd50 [ 2461.639537][T23446] kmsan_report+0x31c/0x320 [ 2461.644298][T23446] ? __msan_warning+0x1b/0x30 [ 2461.649213][T23446] ? __hfsplus_ext_cache_extent+0x7cb/0x990 [ 2461.655365][T23446] ? hfsplus_file_extend+0x7b5/0x1df0 [ 2461.660992][T23446] ? hfsplus_get_block+0xfc3/0x1a20 [ 2461.666435][T23446] ? __block_write_begin_int+0xa76/0x3030 [ 2461.672479][T23446] ? cont_write_begin+0x10e1/0x1bc0 [ 2461.677898][T23446] ? hfsplus_write_begin+0x85/0x130 [ 2461.683337][T23446] ? generic_perform_write+0x3f4/0x10c0 [ 2461.689114][T23446] ? __generic_file_write_iter+0x213/0x460 [ 2461.695160][T23446] ? generic_file_write_iter+0x131/0x980 [ 2461.701042][T23446] ? vfs_write+0xb4b/0x1580 [ 2461.705810][T23446] ? __x64_sys_write+0x1fb/0x4d0 [ 2461.711000][T23446] ? x64_sys_call+0x38c3/0x3db0 [ 2461.716165][T23446] ? do_syscall_64+0xd9/0x210 [ 2461.721059][T23446] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2461.727374][T23446] ? stack_depot_save_flags+0x60f/0x7b0 [ 2461.733179][T23446] ? kmsan_get_metadata+0xfb/0x160 [ 2461.738640][T23446] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2461.745248][T23446] ? kmsan_get_metadata+0xfb/0x160 [ 2461.750650][T23446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2461.756730][T23446] ? hfsplus_brec_find+0x216/0x9f0 [ 2461.762099][T23446] ? __pfx_hfs_find_rec_by_key+0x10/0x10 [ 2461.768017][T23446] ? __hfsplus_ext_write_extent+0x535/0x620 [ 2461.774159][T23446] ? kmsan_get_metadata+0xfb/0x160 [ 2461.779578][T23446] __msan_warning+0x1b/0x30 [ 2461.784346][T23446] __hfsplus_ext_cache_extent+0x7cb/0x990 [ 2461.790349][T23446] hfsplus_file_extend+0x7b5/0x1df0 [ 2461.795846][T23446] hfsplus_get_block+0xfc3/0x1a20 [ 2461.801103][T23446] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2461.807745][T23446] __block_write_begin_int+0xa76/0x3030 [ 2461.813605][T23446] ? kmsan_get_metadata+0xfb/0x160 [ 2461.819004][T23446] ? __pfx_hfsplus_get_block+0x10/0x10 [ 2461.824716][T23446] cont_write_begin+0x10e1/0x1bc0 [ 2461.829946][T23446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2461.836013][T23446] ? kmsan_get_metadata+0xfb/0x160 [ 2461.841397][T23446] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 2461.847500][T23446] hfsplus_write_begin+0x85/0x130 [ 2461.852746][T23446] ? __pfx_hfsplus_get_block+0x10/0x10 [ 2461.858447][T23446] ? __pfx_hfsplus_write_begin+0x10/0x10 [ 2461.864313][T23446] generic_perform_write+0x3f4/0x10c0 [ 2461.870033][T23446] __generic_file_write_iter+0x213/0x460 [ 2461.875939][T23446] generic_file_write_iter+0x131/0x980 [ 2461.881640][T23446] ? futex_unqueue+0x22d/0x2c0 [ 2461.886673][T23446] ? kmsan_get_metadata+0xfb/0x160 [ 2461.892070][T23446] ? kmsan_get_metadata+0xfb/0x160 [ 2461.897492][T23446] ? __x64_sys_write+0x1fb/0x4d0 [ 2461.902705][T23446] ? __msan_warning+0x1b/0x30 [ 2461.907627][T23446] ? filter_irq_stacks+0x13f/0x190 [ 2461.912961][T23446] ? stack_depot_save_flags+0x35/0x7b0 [ 2461.918664][T23446] ? kmsan_get_metadata+0xfb/0x160 [ 2461.924035][T23446] ? kmsan_get_metadata+0xfb/0x160 [ 2461.929408][T23446] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 2461.936101][T23446] vfs_write+0xb4b/0x1580 [ 2461.940709][T23446] ? __pfx_generic_file_write_iter+0x10/0x10 [ 2461.946946][T23446] __x64_sys_write+0x1fb/0x4d0 [ 2461.951991][T23446] x64_sys_call+0x38c3/0x3db0 [ 2461.956916][T23446] do_syscall_64+0xd9/0x210 [ 2461.961636][T23446] ? irqentry_exit+0x16/0x60 [ 2461.966425][T23446] ? clear_bhb_loop+0x40/0x90 [ 2461.971325][T23446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2461.977442][T23446] RIP: 0033:0x7f2fdaf8e929 [ 2461.982029][T23446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2462.001898][T23446] RSP: 002b:00007f2fdbebc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2462.010630][T23446] RAX: ffffffffffffffda RBX: 00007f2fdb1b5fa0 RCX: 00007f2fdaf8e929 [ 2462.018794][T23446] RDX: 000000000208e24b RSI: 0000200000000000 RDI: 0000000000000004 [ 2462.026944][T23446] RBP: 00007f2fdb010b39 R08: 0000000000000000 R09: 0000000000000000 [ 2462.035095][T23446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2462.043242][T23446] R13: 0000000000000000 R14: 00007f2fdb1b5fa0 R15: 00007ffd551677c8 [ 2462.051430][T23446] [ 2462.054979][T23446] Kernel Offset: disabled [ 2462.059404][T23446] Rebooting in 86400 seconds..