last executing test programs: 3m38.904653124s ago: executing program 0 (id=64): ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0xaaa, &(0x7f0000000240), 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x3, 0x8, 0x10, 0x3, 0x7, 0x0, 0x8, 0x8}, {0x10000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0x0, 0x47, 0xff}, {0x2000, 0x8080000, 0xc, 0x0, 0x7, 0xc6, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x0, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x80a0000, 0xfec00000, 0xb, 0x0, 0x7, 0x22, 0x0, 0x0, 0x0, 0x3f}, {0x100000, 0x0, 0x0, 0x78, 0x2, 0x1, 0x2, 0x80, 0x0, 0xff, 0x6}, {0x25000, 0xeeee0000, 0xa, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x9, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x1}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x110, 0x0, 0xf801, 0x0, [0x80000001, 0x9, 0x1, 0xffffffffffffffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m38.674489507s ago: executing program 0 (id=65): socket$nl_generic(0x10, 0x3, 0x10) openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x200000, 0x0) socket$alg(0x26, 0x5, 0x0) r0 = socket$kcm(0xa, 0x1, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000000000e8ffffffffffff05000000", @ANYRES32=r0], 0x48) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r1}) r2 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x8916, &(0x7f0000000000)={r2}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)={r1}) 3m38.538182035s ago: executing program 0 (id=66): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pwritev(r0, &(0x7f0000000480)=[{0x0}, {0x0}, {&(0x7f00000003c0)="77cccb0deedbb94f1afd3ccb469a6721cc637e9cbc7f0685c4ab02897a615638b1ba209474e485e5c676dab2f779fc45e14a15eb8cab8dce71eaea08ea87db5609774523b75431043e4a32f82c5b61bea2b9b0eff207d81c7b175cfcb3e448d7fcac8844402e9401582eeb4a08d247096e183b9b7de727a818150a153b9397c4cc61a6bd461f30fb84b679bca11d47c56904a9d359442a5c3693048b8aa179cf9385", 0xa2}, {0x0}, {&(0x7f0000000180)}], 0x5, 0xc, 0x5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x0, 0xde, 0xd, '\x00', 0x7}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m38.346363276s ago: executing program 0 (id=67): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") chdir(&(0x7f0000000240)='./file0\x00') syz_usb_connect$cdc_ncm(0x4, 0x6e, 0x0, 0x0) open$dir(&(0x7f0000000480)='./file1\x00', 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0xffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) syz_clone(0x8c001000, &(0x7f0000000100), 0x0, &(0x7f0000000180), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000008c0)='.\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r0, 0x50009417, &(0x7f0000002480)={{r0}, 0x0, 0x0, @unused, @subvolid=0x3}) 3m36.107036477s ago: executing program 0 (id=79): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SYNC_IOC_FILE_INFO(0xffffffffffffffff, 0xc0383e04, &(0x7f0000000040)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000019300)=[{}]}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0xb) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x1) 3m34.161160859s ago: executing program 0 (id=93): socket$kcm(0x2, 0x3, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 3m34.051065926s ago: executing program 32 (id=93): socket$kcm(0x2, 0x3, 0x2) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x402, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="034886dd09032800050030000300600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 3m26.606297929s ago: executing program 2 (id=131): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000140)) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x200000000) r1 = dup2(r0, r0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0xeeef0000}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) read$FUSE(r1, &(0x7f00000016c0)={0x2020}, 0x2020) write$vhost_msg_v2(r1, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000280)=""/128, 0xfe12, 0x0, 0x3, 0x2}}, 0x48) 3m26.297323147s ago: executing program 2 (id=132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) 3m25.734750309s ago: executing program 2 (id=135): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000300)) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000440)={0x0, 0x0, 0x0, &(0x7f0000000200)=""/148, 0x0}) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000001c0)={0x0, r2}) syz_emit_ethernet(0x2e, &(0x7f0000000740)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @remote, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @random="da7d3b3fa54f", @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, 0x0) 3m25.497208313s ago: executing program 2 (id=137): syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x21000, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000340)='./file0/../file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0xb101e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x304744a, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 3m25.257593317s ago: executing program 2 (id=139): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x4, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x1c, 0x2, [@TCA_PIE_TUPDATE={0x8, 0x3, 0x4}, @TCA_PIE_TARGET={0x8, 0x1, 0x8c6}, @TCA_PIE_BETA={0x4, 0x5, 0x20}]}}]}, 0x48}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000024000/0x18000)=nil, &(0x7f0000000480)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000280)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m23.712353707s ago: executing program 2 (id=149): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 3m23.402021765s ago: executing program 33 (id=149): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000080)={{0x3, 0x1, 0x0, 0x0, 0x6}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2m56.548094858s ago: executing program 4 (id=312): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2m56.436927794s ago: executing program 4 (id=313): syz_mount_image$iso9660(&(0x7f0000000500), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000300)={[{@map_off}, {@nojoliet}, {@check_strict}, {@map_acorn}]}, 0x13, 0x56b, &(0x7f0000001400)="$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") openat(0xffffffffffffff9c, 0x0, 0x40000, 0x120) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000200)='./bus\x00', 0x4812, &(0x7f00000001c0)=ANY=[], 0x1, 0x68b, &(0x7f0000000640)="$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") chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 2m56.16413084s ago: executing program 4 (id=316): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_GET(r0, 0x0, 0x0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) chdir(&(0x7f0000000340)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, 0x0) fchdir(r2) creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x95) getdents(r1, &(0x7f0000000140)=""/146, 0x92) 2m56.000844649s ago: executing program 4 (id=318): mkdir(&(0x7f0000000380)='./file1\x00', 0xa) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x400000, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r2, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x223}}, './file1\x00'}) 2m55.970855391s ago: executing program 4 (id=319): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfffffffe, 0x8000000000000000, 0x0, 0xfffffffffffffffe, 0x8, 0x0, 0x4, 0xfffffffffffffffd, 0x0, 0xf3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x6, 0x6, 0x0, 0x14, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3486, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x4, 0x800000, 0x0, 0x101, 0x0, 0xd721, 0x0, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x79a2, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4a44e74b]}) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f0000000880)=""/99, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0xfffffffe) 2m55.660173229s ago: executing program 4 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x58, 0x1, 0x8000000000000029}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 2m55.551406606s ago: executing program 34 (id=323): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000440)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r3}, @ptr={0x70742a85, 0x0, 0x0, 0x58, 0x1, 0x8000000000000029}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 13.679033554s ago: executing program 7 (id=825): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002300)={0x7, {"a2e3ad214fc752f91b4809094bf70e0dd038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb1d17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202e928f28381aab144a5d429a04a6a2b83c7076600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2e7faa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a74cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74322f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2a9702b4230f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df11fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x10af}}, 0x1006) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 11.502313871s ago: executing program 1 (id=827): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x20004000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, 0x0, 0x0, 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000040)="1400000052004f030e789e7e27286d", 0xf) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r7, 0x0, 0x7}, 0x38) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) setresuid(0x0, 0xee00, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="b700000012edfffebfa30000000000000703000028feffff620af0fff8ffffff61a4f0ff000000001d040000000000007f000000000000005504000001ed0a002500000017ff2000dd40000000000000730a00fe000000001f04000000000000e5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e84af69912435f1b6a693002e7f3be361917adef6ee1c8a2b4f8ef1e50b91f32050e436fe275daf51efd601b6482a0800000098efefb202ee010400006e7a1de4a21f379dbf01de00b1b564fef3bef70548aed0d600c095199fe3ff3128e599b0eaebbdbd7359a48f5b0afc646cb7798b3e6440c2fbdb00a3e35208b0bbf12cd8dff0c710e4000000000000009fbe4b61a615c6c57a2b649dc74a1a610643b08d9ec21ead2ed51b104d4d91af25b8123deda8a3658d42ecbf1dbf6d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31a76e42f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0800d9b3a69b37caa964e4b7000000000000d5f728d236619074d6ebdf098bc908f50ae728a40f9411fe7226a4040bef29b66e3858d051c096e37c4f46010400000000c3da29faf75ddd1aa96960bca97af13382cb881cc1f62c0f8f8f0e8d76b86f9c45636614786f5a2cb77230a874640dcbe0b20bb77c022d4cab080078fce8c5c81b7037181fc2f18f781aaa6e2957d7e39cc1baddcb7ec6667e699f24e41697ee7ea23e4b29a8b6cc9a1f5a7b3caae05f13792292cb949b3aab06b1e042ff2164d80c605532b18ab1c156b97e5889685a96949e4cb40df77b8bb84b0e733a63784ccc214d930cbb7e090df9a2867b3acec439c163fcd7071b53ac29df826f8ae6d6e18c1eacf5bf870768d5217e9bb5a05d9e22ce67f1231bd236486727d970acc546087acbf30f2f8165b47ba56dfadd14b306e98931485747292c6fe6e188750cf4f87cce2aa7d67c7133a9f05954cde298a35ea6d715ba80aee63300000000000000000000000000000000000040000000000000000386000000b854adb4f8080064e8407c6bdb37114c80fbaa4a0ec5aaf4b0ac6f2128668279eb6fc144344e2d461c9a1be8fa0061ea9d55ee4716bea8e1cebf9ed39325a904514d8e90131bfc00000000000000d7c5af73c683625aaad5eda5004a76c9f8975ed4c5e4eb3e77e9885769754932609f19e2f615a01cb6d17fbf5cb539403cb0572534f054d5514ad8269b2bdf2ca4958a62a6e744f9a4c1e646e1dd2ca19583f0f8b0dc53debd7d44f334e6ed7445a9580f970e483b307c4b3c018bc194b23d37e6a2e52d8288e5aab6fec586d52386e8c07a88c88e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000040)={0x24, r0, 0x62c21a4ade68aba1, 0x0, 0x2, {{0x32}, {@val={0x8, 0x1, 0x60}, @val={0x8, 0x3, r2}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x48d4}, 0x40010) 11.429109226s ago: executing program 5 (id=829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x20102, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r4, {0x10}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0xb9, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r7, 0x0, 0x0, 0x10040, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0xd8, 0x6, @multicast}, 0x14) 10.438328873s ago: executing program 7 (id=830): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x182815, &(0x7f0000000180)='uH\xce\x14\x1b\xac') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='ubifs\x00', 0x8000, 0x0) 10.393117616s ago: executing program 6 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 10.31085226s ago: executing program 3 (id=832): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x20000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x3, 0x7, 0x9}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000240)={0x0, 0x8000000000000001, [0x202, 0x9, 0x3, 0xa, 0x10002, 0x82bb]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x1c}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x100000000, 0x4, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) 9.577789433s ago: executing program 6 (id=833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 9.531051966s ago: executing program 7 (id=834): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 9.46915856s ago: executing program 5 (id=835): setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) syz_clone3(&(0x7f0000000080)={0x901400, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) sendmsg$alg(0xffffffffffffffff, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000000300)=[{0x0}, {0x0}, {&(0x7f0000000100)}, {0x0}, {&(0x7f0000000240)="f5c000fe69f8298383", 0x9}], 0x5}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000000440)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 8.635790738s ago: executing program 1 (id=836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000400)=@filter={'filter\x00', 0x2, 0x4, 0x378, 0xffffffff, 0x0, 0x1d8, 0x0, 0xfeffffff, 0xffffffff, 0x2a8, 0x2a8, 0x2a8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0x0, 0x0, 0xff000000], [0x0, 0xffffff00], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x6, 0x0, 0x1, 0x8}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [0x0, 0xffffffff], [0x0, 0x0, 0xffffffff], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xe0, 0x108, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x4, 0x2, 0xe1ad, 0xe703, 0x4, 0x7, 0x3}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'erspan0\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) 8.496181836s ago: executing program 3 (id=837): bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) io_setup(0x3fb, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 8.492483347s ago: executing program 6 (id=838): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) io_setup(0x3fb, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 7.74654454s ago: executing program 7 (id=839): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r3) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r4, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 7.657873934s ago: executing program 1 (id=840): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa0402, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000080)) r1 = syz_open_pts(r0, 0x20000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, &(0x7f0000000080)={0x3, 0x7, 0x9}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, &(0x7f0000000240)={0x0, 0x8000000000000001, [0x202, 0x9, 0x3, 0xa, 0x10002, 0x82bb]}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYRES64=r1], 0x1c}}, 0x4000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x64}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[], 0x44}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x3, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x100000000, 0x4, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) 6.820596393s ago: executing program 3 (id=841): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) fanotify_init(0xf00, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 6.777762706s ago: executing program 7 (id=842): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0x0) 6.773390976s ago: executing program 6 (id=843): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 6.641064324s ago: executing program 5 (id=844): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 6.520198311s ago: executing program 1 (id=845): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) fsopen(0x0, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x182815, &(0x7f0000000180)='uH\xce\x14\x1b\xac') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='ubifs\x00', 0x8000, 0x0) 4.978368791s ago: executing program 3 (id=846): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x4000, &(0x7f0000000480)={[{@dax_never}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@quota}]}, 0xd, 0x5ed, &(0x7f0000000600)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10138, 0x2, 0x0) 4.918886714s ago: executing program 5 (id=847): openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0, 0x13}], 0x2) creat(&(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x182815, &(0x7f0000000180)='uH\xce\x14\x1b\xac') mount(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)='ubifs\x00', 0x8000, 0x0) 4.688491757s ago: executing program 5 (id=848): setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x2a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r3, 0x2007ffc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) copy_file_range(r3, 0x0, r4, 0x0, 0xfffffbffa003e45b, 0x700000000000000) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) 3.628155329s ago: executing program 6 (id=849): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) prctl$PR_SET_PTRACER(0x59616d61, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2000003, 0x4082172, 0xffffffffffffffff, 0x418a6000) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) 3.587132781s ago: executing program 1 (id=850): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000002300)={0x7, {"a2e3ad214fc752f91b4809094bf70e0dd038e7ff7fc6e5539b326d078b089b3b083872090890e0878f0e1ac6e7049b3d68959b4c9a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b08320d075d0936cd3b78130daa61d8e809ea889b5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae19397d696d0d758f2dc7d1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb1d17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f0000000c558cdc0a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000000008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc94681359bad8deff4b05f60cea0da7710a80000000000008000e0a37ce0d0d4aa202e928f28381aab144a5d429a04a6a2b83c7076600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e988037b2ed050000000000000046684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2e7faa78d1f48c13b64df07847754b8400daaa69bf5c8f4ceb360c7e658828563e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5399e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a74cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df2928924486cfff799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d3a6df40babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e74322f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2a9702b4230f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6ea94f88a4facfd4c735a20307c737afae5136651b1b9bd522dcb399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f39a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab83c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a602000000000000007007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00303000000000000007fb33b72685ec37a2d3f766413a60559516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57fa9c0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d3679507000000000000934b99b3109af65d77e86abd6859cddf4bbae1f0930462df11fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fffffff7f00000000758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb903729a7db6ff957697c9ede7885d94ffb0759be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x10af}}, 0x1006) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r5, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.567464302s ago: executing program 3 (id=851): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x2) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYRES16], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 874.888969ms ago: executing program 5 (id=852): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = open(&(0x7f0000000c00)='./file0\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) fanotify_init(0xf00, 0x0) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7\x00', 0x4) renameat2(r3, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r4, &(0x7f00000002c0)='./file0\x00', 0x2) 683.486071ms ago: executing program 1 (id=853): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket(0x10, 0x803, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r5, @ANYRES16=r4], 0x3c}, 0x1, 0x0, 0x0, 0x40020c1}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast2}, 0x56, r2}) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000180)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2d, r5}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1006}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) 589.034066ms ago: executing program 7 (id=854): bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[], 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) pipe(0x0) io_setup(0x3fb, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @empty, 0x4000006}, 0x1c) listen(r1, 0x6) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept(r0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x1802, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, 0x0, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000) 8.43486ms ago: executing program 3 (id=855): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ab55cec06c453f4c0fa45f5e3fec9424", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600), 0xfec8) r2 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0), &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 0s ago: executing program 6 (id=856): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002300)={0x7, {"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", 0x10af}}, 0x1006) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) kernel console output (not intermixed with test programs): dv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.395505][ T4418] Bluetooth: hci3: command 0x0409 tx timeout [ 69.433532][ T4520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.497733][ T4520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.517612][ T4520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.597676][ T4520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.676955][ T4520] device hsr_slave_0 entered promiscuous mode [ 69.697793][ T4520] device hsr_slave_1 entered promiscuous mode [ 69.714620][ T4520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.743980][ T4520] Cannot create hsr debugfs directory [ 70.111222][ T4280] device hsr_slave_0 left promiscuous mode [ 70.133427][ T4280] device hsr_slave_1 left promiscuous mode [ 70.153381][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.174721][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.189428][ T4622] loop2: detected capacity change from 0 to 512 [ 70.203124][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.249432][ T4622] EXT4-fs (loop2): Test dummy encryption mode enabled [ 70.254209][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.277732][ T4622] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 70.314632][ T4280] device bridge_slave_1 left promiscuous mode [ 70.320503][ T4622] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 70.322374][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.337514][ T4541] syz.0.67 (4541) used greatest stack depth: 20752 bytes left [ 70.360829][ T4280] device bridge_slave_0 left promiscuous mode [ 70.368779][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.379416][ T4622] EXT4-fs error (device loop2): ext4_orphan_get:1426: comm syz.2.77: bad orphan inode 131083 [ 70.392612][ T4622] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 70.551012][ T4280] device veth1_macvtap left promiscuous mode [ 70.564640][ T4280] device veth0_macvtap left promiscuous mode [ 70.570759][ T4280] device veth1_vlan left promiscuous mode [ 70.636493][ T4280] device veth0_vlan left promiscuous mode [ 70.775220][ T4622] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 71.067384][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 71.098553][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 71.114909][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.142252][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.238409][ T4280] bond0 (unregistering): Released all slaves [ 71.313999][ T4173] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.402556][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.412622][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.450128][ T4660] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 71.475999][ T4419] Bluetooth: hci3: command 0x041b tx timeout [ 71.574205][ T4173] usb 3-1: Using ep0 maxpacket: 16 [ 71.694709][ T4173] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 71.738581][ T4173] usb 3-1: config 0 interface 0 has no altsetting 0 [ 71.764151][ T4173] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 71.780371][ T4173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.812196][ T4173] usb 3-1: config 0 descriptor?? [ 72.295406][ T4173] hid-generic 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 72.661695][ T4520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.690705][ T4520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.752710][ T4520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.810349][ T4520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.909857][ T4419] usb 3-1: USB disconnect, device number 2 [ 72.956606][ T4710] [ 73.061333][ T4723] loop4: detected capacity change from 0 to 256 [ 73.300959][ T4730] loop1: detected capacity change from 0 to 256 [ 73.354326][ T4706] chnl_net:caif_netlink_parms(): no params data found [ 73.500225][ T4520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.564419][ T4419] Bluetooth: hci3: command 0x040f tx timeout [ 73.703248][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 73.715690][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.759580][ T4520] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.770687][ T4706] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.779438][ T4706] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.793031][ T4706] device bridge_slave_0 entered promiscuous mode [ 73.808356][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 73.821895][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.831226][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.838363][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.853403][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 73.865686][ T4706] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.873310][ T4706] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.881786][ T4706] device bridge_slave_1 entered promiscuous mode [ 73.889381][ T4688] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.904587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 73.914848][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.923444][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.930607][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.951306][ T4706] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.962790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 73.973917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 73.990635][ T4706] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.009904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 74.027009][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 74.044491][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 74.064932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 74.083965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 74.094730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 74.103304][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 74.126485][ T4520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 74.160955][ T4520] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 74.206752][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 74.220862][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 74.264585][ T4688] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 74.268491][ T4706] team0: Port device team_slave_0 added [ 74.286249][ T4688] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 74.313132][ T4706] team0: Port device team_slave_1 added [ 74.350329][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.386171][ T4688] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 74.395833][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.403774][ T4688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 74.448602][ T4706] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.474065][ T4688] usb 2-1: SerialNumber: syz [ 74.503628][ T4706] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.544308][ T4706] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.576123][ T4706] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.728922][ T4706] device hsr_slave_0 entered promiscuous mode [ 74.746284][ T4706] device hsr_slave_1 entered promiscuous mode [ 74.785286][ T4688] usb 2-1: 0:2 : does not exist [ 74.822930][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 74.834224][ T4228] Bluetooth: hci1: command 0x0409 tx timeout [ 74.843242][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 74.891038][ T4520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.951385][ T4688] usb 2-1: USB disconnect, device number 2 [ 75.037706][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 75.061506][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 75.135262][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 75.154157][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 75.164697][ T4520] device veth0_vlan entered promiscuous mode [ 75.182008][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 75.191647][ T4619] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 75.215169][ T4520] device veth1_vlan entered promiscuous mode [ 75.242187][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 75.264313][ T4192] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 75.279943][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 75.302085][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 75.310918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 75.326990][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 75.358427][ T4520] device veth0_macvtap entered promiscuous mode [ 75.390420][ T4706] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 75.419721][ T4706] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 75.442965][ T4706] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 75.493007][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 75.512740][ T4520] device veth1_macvtap entered promiscuous mode [ 75.530828][ T4706] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 75.595612][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.607013][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.617540][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.630628][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.641300][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.644178][ T4688] Bluetooth: hci3: command 0x0419 tx timeout [ 75.654010][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.669266][ T4192] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 75.678391][ T4192] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 75.688430][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 75.698581][ T4192] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 75.701907][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.718804][ T4192] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 75.726364][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.742025][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.759820][ T4192] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 75.760013][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.787407][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.806040][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.820567][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.833177][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.845700][ T4520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 75.856776][ T4520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 75.867897][ T4520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.894988][ T4192] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 75.904344][ T4192] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 75.907958][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 75.912344][ T4192] usb 5-1: Product: syz [ 75.912362][ T4192] usb 5-1: Manufacturer: syz [ 75.935083][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 75.946602][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 75.956841][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 75.970847][ T4520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.980004][ T4520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.980789][ T4192] cdc_wdm 5-1:1.0: skipping garbage [ 75.994981][ T4520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.994994][ T4192] cdc_wdm 5-1:1.0: skipping garbage [ 75.995012][ T4520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.029512][ T4192] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 76.035720][ T4192] cdc_wdm 5-1:1.0: Unknown control protocol [ 76.065144][ T4280] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.152977][ T4280] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.229572][ T4706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.230718][ T4804] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 76.251188][ T4280] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.285569][ T13] usb 5-1: USB disconnect, device number 2 [ 76.296779][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.311886][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 76.324213][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.335869][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 76.351966][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 76.388388][ T4280] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.409047][ T4706] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.422625][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.426716][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.449302][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.452599][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.458526][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.471735][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.517175][ T1109] cfg80211: failed to load regulatory.db [ 76.539368][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.580464][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.608902][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.658830][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.676502][ T1166] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.683617][ T1166] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.692421][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.769279][ T4706] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 76.785243][ T4706] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.799184][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.823791][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.885890][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.921453][ T4228] Bluetooth: hci1: command 0x041b tx timeout [ 76.940102][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.989394][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.012908][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.028994][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.042360][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.059783][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.102707][ T4814] device syzkaller1 entered promiscuous mode [ 77.165276][ T4829] binder: BINDER_SET_CONTEXT_MGR already set [ 77.166019][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.200241][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.214169][ T4829] binder: 4828:4829 ioctl 4018620d 200000004a80 returned -16 [ 77.663550][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.674878][ T1253] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.755167][ T4706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.305117][ T4197] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 78.316751][ T4197] CPU: 0 PID: 4197 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 78.324323][ T4197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 78.334592][ T4197] Workqueue: hci3 hci_rx_work [ 78.339406][ T4197] Call Trace: [ 78.342695][ T4197] [ 78.345639][ T4197] dump_stack_lvl+0x188/0x250 [ 78.350346][ T4197] ? show_regs_print_info+0x20/0x20 [ 78.355571][ T4197] ? load_image+0x400/0x400 [ 78.360107][ T4197] sysfs_create_dir_ns+0x26a/0x290 [ 78.365255][ T4197] ? sysfs_warn_dup+0xa0/0xa0 [ 78.369946][ T4197] ? process_one_work+0x85f/0x1010 [ 78.375079][ T4197] ? do_raw_spin_unlock+0x11d/0x230 [ 78.380300][ T4197] kobject_add_internal+0x6e0/0xd90 [ 78.385517][ T4197] kobject_add+0x160/0x230 [ 78.389954][ T4197] ? kobject_init+0x1d0/0x1d0 [ 78.394653][ T4197] ? klist_children_get+0x50/0x50 [ 78.399698][ T4197] ? get_device_parent+0x121/0x3f0 [ 78.404833][ T4197] device_add+0x483/0xfb0 [ 78.409188][ T4197] hci_conn_add_sysfs+0xd1/0x1e0 [ 78.414157][ T4197] le_conn_complete_evt+0xc48/0x15c0 [ 78.419566][ T4197] ? cs_le_create_conn+0x5e0/0x5e0 [ 78.424703][ T4197] ? __mutex_trylock_common+0x155/0x260 [ 78.430275][ T4197] hci_le_meta_evt+0x285/0x3c90 [ 78.435150][ T4197] ? hci_event_packet+0x37b/0x1370 [ 78.440277][ T4197] ? __lock_acquire+0x7d10/0x7d10 [ 78.445733][ T4197] ? hci_remote_host_features_evt+0x280/0x280 [ 78.451786][ T4197] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 78.457411][ T4197] ? mark_lock+0x94/0x320 [ 78.461731][ T4197] ? mutex_unlock+0x10/0x10 [ 78.466222][ T4197] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 78.472197][ T4197] ? lock_chain_count+0x20/0x20 [ 78.477043][ T4197] ? __rwlock_init+0x140/0x140 [ 78.481802][ T4197] hci_event_packet+0xe48/0x1370 [ 78.486729][ T4197] ? lockdep_hardirqs_on+0x94/0x140 [ 78.491919][ T4197] ? rcu_lock_release+0x20/0x20 [ 78.496848][ T4197] ? hci_send_to_monitor+0x9c/0x4a0 [ 78.502036][ T4197] hci_rx_work+0x255/0xa10 [ 78.506448][ T4197] process_one_work+0x85f/0x1010 [ 78.511381][ T4197] ? worker_detach_from_pool+0x240/0x240 [ 78.517001][ T4197] ? lockdep_hardirqs_off+0x70/0x100 [ 78.522294][ T4197] ? _raw_spin_lock_irq+0xb7/0xf0 [ 78.527325][ T4197] ? _raw_spin_lock_irqsave+0x100/0x100 [ 78.532873][ T4197] ? wq_worker_running+0x97/0x170 [ 78.537897][ T4197] worker_thread+0xaa6/0x1290 [ 78.542578][ T4197] kthread+0x436/0x520 [ 78.546633][ T4197] ? rcu_lock_release+0x20/0x20 [ 78.551470][ T4197] ? kthread_blkcg+0xd0/0xd0 [ 78.556046][ T4197] ret_from_fork+0x1f/0x30 [ 78.560460][ T4197] [ 78.566363][ T4197] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 78.580331][ T4197] Bluetooth: hci3: failed to register connection device [ 78.862313][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.870468][ T4884] loop4: detected capacity change from 0 to 2048 [ 78.913717][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.980852][ T4884] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.994151][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 79.070643][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 79.109875][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.190099][ T4706] device veth0_vlan entered promiscuous mode [ 79.203542][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.215495][ T1166] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.280910][ T4706] device veth1_vlan entered promiscuous mode [ 79.342239][ T4884] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.125: Invalid inode table block 4 in block_group 0 [ 79.397174][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.412565][ T4884] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.125: Invalid inode table block 4 in block_group 0 [ 79.416241][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.454130][ T4884] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Corrupt filesystem [ 79.491483][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.498092][ T4884] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #12: comm syz.4.125: mark_inode_dirty error [ 79.502488][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.546853][ T4706] device veth0_macvtap entered promiscuous mode [ 79.602103][ T4706] device veth1_macvtap entered promiscuous mode [ 79.643078][ T4906] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 79.650851][ T4906] IPv6: NLM_F_CREATE should be set when creating new route [ 79.697014][ T154] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm kworker/u4:2: Invalid inode table block 4 in block_group 0 [ 79.739782][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.764488][ T13] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 79.808289][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.830508][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.866081][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.889920][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.913832][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.934217][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.957627][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.981041][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.006501][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.034435][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.072336][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 80.090599][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 80.120356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.172781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.184057][ T13] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 80.192092][ T4925] loop1: detected capacity change from 0 to 2048 [ 80.202638][ T13] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 80.222154][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.236731][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.247355][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.253781][ T13] usb 4-1: config 0 has no interfaces? [ 80.258753][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.273655][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.276666][ T13] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 80.294566][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.299261][ T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.320168][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.320810][ T13] usb 4-1: config 0 descriptor?? [ 80.341087][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.353224][ T4706] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.372421][ T4706] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.383820][ T4706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.423757][ T4925] loop1: p1 < > p4 [ 80.517920][ T4925] loop1: p4 size 8388608 extends beyond EOD, truncated [ 80.571759][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.582628][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.623807][ T4706] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.632819][ T4706] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.679826][ T4706] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.699064][ T4706] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.070446][ T4280] device hsr_slave_0 left promiscuous mode [ 81.077566][ T4416] Bluetooth: hci1: command 0x0419 tx timeout [ 81.115168][ T4280] device hsr_slave_1 left promiscuous mode [ 81.162682][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.180436][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.254587][ T4280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.262042][ T4280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.283333][ T4280] device bridge_slave_1 left promiscuous mode [ 81.291769][ T4280] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.291903][ T4949] loop4: detected capacity change from 0 to 8 [ 81.315704][ T4280] device bridge_slave_0 left promiscuous mode [ 81.321972][ T4280] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.364954][ T4280] device veth1_macvtap left promiscuous mode [ 81.371147][ T4280] device veth0_macvtap left promiscuous mode [ 81.397199][ T4280] device veth1_vlan left promiscuous mode [ 81.413005][ T4280] device veth0_vlan left promiscuous mode [ 81.446125][ T4949] SQUASHFS error: zlib decompression failed, data probably corrupt [ 81.498557][ T4949] SQUASHFS error: Failed to read block 0x4de: -5 [ 81.540205][ T4949] SQUASHFS error: Failed to read block 0x4e2: -5 [ 81.582731][ T4949] SQUASHFS error: Failed to read block 0x9ca: -5 [ 81.623657][ T4949] SQUASHFS error: Failed to read block 0x2cf2: -5 [ 81.653829][ T4949] SQUASHFS error: Failed to read block 0x52cf2: -5 [ 81.675259][ T4949] SQUASHFS error: Failed to read block 0x535f2: -5 [ 81.696130][ T26] audit: type=1800 audit(1769792501.150:4): pid=4949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.140" name="file1" dev="loop4" ino=5 res=0 errno=0 [ 81.816907][ T4967] loop4: detected capacity change from 0 to 512 [ 81.889045][ T4967] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,grpquota,,errors=continue. Quota mode: writeback. [ 81.927625][ T4967] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.022142][ T4967] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Out of memory [ 82.033380][ T4967] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #15: comm syz.4.143: mark_inode_dirty error [ 82.033763][ T4280] team0 (unregistering): Port device team_slave_1 removed [ 82.048669][ T4967] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Out of memory [ 82.064648][ T4280] team0 (unregistering): Port device team_slave_0 removed [ 82.069279][ T4967] EXT4-fs error (device loop4): ext4_write_end:1347: inode #15: comm syz.4.143: mark_inode_dirty error [ 82.088952][ T4280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 82.107245][ T4280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 82.155670][ T4194] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Out of memory [ 82.173807][ T4194] EXT4-fs error (device loop4): ext4_quota_off:6540: inode #4: comm syz-executor: mark_inode_dirty error [ 82.233305][ T4280] bond0 (unregistering): Released all slaves [ 82.300172][ T4330] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.339809][ T4330] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.356877][ T4968] netlink: 76 bytes leftover after parsing attributes in process `syz.1.142'. [ 82.424105][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.437336][ T4173] usb 4-1: USB disconnect, device number 2 [ 82.471128][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.511990][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.593803][ T4985] netlink: 'syz.1.148': attribute type 11 has an invalid length. [ 82.603131][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.614997][ T4983] loop4: detected capacity change from 0 to 512 [ 82.656527][ T4986] loop3: detected capacity change from 0 to 256 [ 82.689660][ T4983] EXT4-fs (loop4): Ignoring removed bh option [ 82.768441][ T4986] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d) [ 82.870010][ T4983] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nogrpid,bh,,errors=continue. Quota mode: writeback. [ 82.934032][ T4983] ext4 filesystem being mounted at /43/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 84.173348][ T5018] fuse: Bad value for 'fd' [ 84.491597][ T5036] sch_tbf: burst 3 is lower than device syzkaller0 mtu (1514) ! [ 84.871103][ T5030] chnl_net:caif_netlink_parms(): no params data found [ 84.983923][ T4416] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 85.122403][ T5030] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.129723][ T5030] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.144665][ T5030] device bridge_slave_0 entered promiscuous mode [ 85.182305][ T5030] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.208049][ T5030] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.238482][ T5030] device bridge_slave_1 entered promiscuous mode [ 85.322528][ T5030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.365828][ T5030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.396930][ T4416] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 85.399035][ T5072] loop1: detected capacity change from 0 to 256 [ 85.456368][ T5030] team0: Port device team_slave_0 added [ 85.480367][ T5072] FAT-fs (loop1): Directory bread(block 64) failed [ 85.500027][ T5072] FAT-fs (loop1): Directory bread(block 65) failed [ 85.509222][ T5030] team0: Port device team_slave_1 added [ 85.520311][ T5072] FAT-fs (loop1): Directory bread(block 66) failed [ 85.545880][ T5072] FAT-fs (loop1): Directory bread(block 67) failed [ 85.560331][ T5072] FAT-fs (loop1): Directory bread(block 68) failed [ 85.581668][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.582401][ T5072] FAT-fs (loop1): Directory bread(block 69) failed [ 85.601987][ T5072] FAT-fs (loop1): Directory bread(block 70) failed [ 85.604204][ T4416] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 85.609065][ T5072] FAT-fs (loop1): Directory bread(block 71) failed [ 85.618990][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.630562][ T5072] FAT-fs (loop1): Directory bread(block 72) failed [ 85.663650][ T4416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.669550][ T5072] FAT-fs (loop1): Directory bread(block 73) failed [ 85.680795][ T4416] usb 6-1: Product: syz [ 85.689637][ T4416] usb 6-1: Manufacturer: syz [ 85.699840][ T4416] usb 6-1: SerialNumber: syz [ 85.717709][ T5030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.762035][ T5030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.786062][ T4416] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 85.799599][ T5030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.861619][ T5030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.889124][ T26] audit: type=1800 audit(1769792505.340:5): pid=5065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.161" name="/" dev="fuse" ino=2 res=0 errno=0 [ 85.999390][ T4416] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 86.029681][ T5030] device hsr_slave_0 entered promiscuous mode [ 86.091350][ T4416] usb 6-1: USB disconnect, device number 2 [ 86.113112][ T5030] device hsr_slave_1 entered promiscuous mode [ 86.144336][ T5030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.151928][ T5030] Cannot create hsr debugfs directory [ 86.444047][ T4419] Bluetooth: hci0: command 0x0409 tx timeout [ 86.620281][ T5030] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 86.643761][ T5030] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 86.672866][ T5030] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 86.684243][ T4416] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 86.704918][ T5030] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 86.747240][ T4296] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 86.934621][ T5030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.969226][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 86.991812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 87.013955][ T4296] usb 2-1: Using ep0 maxpacket: 8 [ 87.035200][ T5030] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.054267][ T4416] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 87.078594][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 87.121915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 87.134142][ T4296] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 87.154548][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.174360][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.181454][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.206405][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 87.236359][ T4296] pvrusb2: Hardware description: Terratec Grabster AV400 [ 87.243426][ T4296] pvrusb2: ********** [ 87.254981][ T4296] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 87.271180][ T4296] pvrusb2: Important functionality might not be entirely working. [ 87.280312][ T4296] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 87.284218][ T4416] usb 6-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 87.297686][ T4296] pvrusb2: ********** [ 87.312225][ T4416] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.331536][ T4416] usb 6-1: Product: syz [ 87.336020][ T4416] usb 6-1: Manufacturer: syz [ 87.337731][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.340619][ T4416] usb 6-1: SerialNumber: syz [ 87.375015][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 87.397438][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 87.421943][ T4280] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.429138][ T4280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.446042][ T4416] usb 6-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 87.464489][ T2421] pvrusb2: Invalid write control endpoint [ 87.521722][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.605501][ T5132] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 87.616207][ T2421] pvrusb2: Invalid write control endpoint [ 87.622137][ T2421] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 87.636320][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 87.650275][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 87.678383][ T2421] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 87.706757][ T2421] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 87.729105][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.748661][ T2421] pvrusb2: Device being rendered inoperable [ 87.762443][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 87.765860][ T5137] loop4: detected capacity change from 0 to 8192 [ 87.779177][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 87.791861][ T5096] pvrusb2: Attempted to execute control transfer when device not ok [ 87.803048][ T2421] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 87.812509][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 87.820943][ T2421] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 87.829699][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 87.858435][ T2421] pvrusb2: Attached sub-driver cx25840 [ 87.876305][ T2421] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 87.887448][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 87.903190][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 87.911913][ T2421] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 87.944832][ T5030] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 87.981406][ T5137] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 88.023310][ T5137] REISERFS (device loop4): using ordered data mode [ 88.048069][ T5030] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.059649][ T5137] reiserfs: using flush barriers [ 88.079828][ T5137] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 88.102459][ T4419] usb 2-1: USB disconnect, device number 3 [ 88.123213][ T5137] REISERFS (device loop4): checking transaction log (loop4) [ 88.156160][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.218651][ T5137] REISERFS (device loop4): Using r5 hash to sort names [ 88.245451][ T5137] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 88.263423][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.293283][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.308573][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.425499][ T5152] kvm: pic: non byte read [ 88.451143][ T5152] kvm: pic: level sensitive irq not supported [ 88.451250][ T5152] kvm: pic: non byte read [ 88.478669][ T5152] kvm: pic: level sensitive irq not supported [ 88.478728][ T5152] kvm: pic: non byte read [ 88.515469][ T4419] Bluetooth: hci0: command 0x041b tx timeout [ 88.540256][ T5152] kvm: pic: level sensitive irq not supported [ 88.540316][ T5152] kvm: pic: non byte read [ 88.552933][ T5152] kvm: pic: level sensitive irq not supported [ 88.552988][ T5152] kvm: pic: non byte read [ 88.564956][ T5152] kvm: pic: level sensitive irq not supported [ 88.565011][ T5152] kvm: pic: non byte read [ 88.582350][ T5152] kvm: pic: level sensitive irq not supported [ 88.582406][ T5152] kvm: pic: non byte read [ 88.613169][ T5152] kvm: pic: level sensitive irq not supported [ 88.613231][ T5152] kvm: pic: non byte read [ 88.652437][ T5152] kvm: pic: level sensitive irq not supported [ 88.652497][ T5152] kvm: pic: non byte read [ 88.676280][ T5152] kvm: pic: level sensitive irq not supported [ 88.676337][ T5152] kvm: pic: non byte read [ 88.699475][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.707235][ T5152] kvm: pic: level sensitive irq not supported [ 88.707803][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.728442][ T4416] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 88.759204][ T4416] dvbdev: DVB: registering new adapter (774 Friio White ISDB-T USB2.0) [ 88.766390][ T5030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.786399][ T4416] usb 6-1: media controller created [ 88.823748][ T4416] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.110166][ T4416] usb 6-1: USB disconnect, device number 3 [ 89.294126][ T4417] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 89.391439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.460149][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.537948][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.553521][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.564159][ T4417] usb 4-1: Using ep0 maxpacket: 32 [ 89.577843][ T5030] device veth0_vlan entered promiscuous mode [ 89.619326][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.629293][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.658654][ T5030] device veth1_vlan entered promiscuous mode [ 89.671871][ T5198] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 89.734197][ T4680] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 89.749871][ T4417] usb 4-1: config 0 has an invalid interface number: 188 but max is 0 [ 89.764373][ T4417] usb 4-1: config 0 has no interface number 0 [ 89.796989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.805095][ T4417] usb 4-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 89.828695][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.848936][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.862270][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.877939][ T5030] device veth0_macvtap entered promiscuous mode [ 89.978393][ T5030] device veth1_macvtap entered promiscuous mode [ 89.985299][ T4680] usb 5-1: Using ep0 maxpacket: 16 [ 90.014202][ T4417] usb 4-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 90.033352][ T4417] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.058042][ T4417] usb 4-1: Product: syz [ 90.062229][ T4417] usb 4-1: Manufacturer: syz [ 90.081712][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.103971][ T4417] usb 4-1: SerialNumber: syz [ 90.124549][ T4417] usb 4-1: config 0 descriptor?? [ 90.138396][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.154327][ T5177] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.162480][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.181397][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.206082][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.234844][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.251013][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.264650][ T4680] usb 5-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 90.275403][ T4680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.283426][ T4680] usb 5-1: Product: syz [ 90.288530][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.298726][ T4680] usb 5-1: Manufacturer: syz [ 90.300011][ T5223] loop1: detected capacity change from 0 to 512 [ 90.303339][ T4680] usb 5-1: SerialNumber: syz [ 90.315018][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.325793][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.357748][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.391222][ T5177] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 90.399181][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.413953][ T5223] EXT4-fs (loop1): Ignoring removed oldalloc option [ 90.443264][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.455418][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.465630][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.481629][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.493567][ T5223] EXT4-fs (loop1): 1 truncate cleaned up [ 90.506404][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.506417][ T5223] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,bsdgroups,nouid32,errors=remount-ro,jqfmt=vfsv1,oldalloc,stripe=0x0000000000000005,. Quota mode: writeback. [ 90.516318][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.516338][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.516347][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.516357][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.516377][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.516388][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.516402][ T5030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.516412][ T5030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.517745][ T5030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.626842][ T23] Bluetooth: hci0: command 0x040f tx timeout [ 90.651653][ T4680] usb 5-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 90.693387][ T4680] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 90.709302][ T5223] EXT4-fs error (device loop1): ext4_free_branches:1043: inode #13: block 234881024: comm syz.1.184: Read failure [ 90.722497][ T4680] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 90.726731][ T5223] EXT4-fs (loop1): Remounting filesystem read-only [ 90.731412][ T4680] usb 5-1: media controller created [ 90.754164][ T4680] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.802816][ T4184] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 13: comm syz-executor: path /49/file1: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 90.823927][ T154] device hsr_slave_0 left promiscuous mode [ 90.837607][ T4184] EXT4-fs (loop1): Remounting filesystem read-only [ 90.849641][ T154] device hsr_slave_1 left promiscuous mode [ 90.856547][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.873490][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.885558][ T4680] zl10353_read_register: readreg error (reg=127, ret==-32) [ 90.909109][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.917752][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.929509][ T5236] binder: BINDER_SET_CONTEXT_MGR already set [ 90.942248][ T154] device bridge_slave_1 left promiscuous mode [ 90.946974][ T5236] binder: 5235:5236 ioctl 4018620d 200000004a80 returned -16 [ 90.949004][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.971580][ T154] device bridge_slave_0 left promiscuous mode [ 90.978290][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.991004][ T154] device veth1_macvtap left promiscuous mode [ 91.007949][ T154] device veth0_macvtap left promiscuous mode [ 91.015960][ T154] device veth1_vlan left promiscuous mode [ 91.021792][ T154] device veth0_vlan left promiscuous mode [ 91.129468][ T4680] dvb_usb_gl861: probe of 5-1:157.0 failed with error -5 [ 91.164437][ T4680] usb 5-1: USB disconnect, device number 3 [ 91.269622][ T5246] loop5: detected capacity change from 0 to 256 [ 91.325184][ T5247] loop1: detected capacity change from 0 to 4096 [ 91.352795][ T5246] exFAT-fs (loop5): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001) [ 91.384500][ T5247] EXT4-fs (loop1): Test dummy encryption mode enabled [ 91.386948][ T5246] exFAT-fs (loop5): Filesystem has been set read-only [ 91.408923][ T5246] exFAT-fs (loop5): failed to load upcase table [ 91.422837][ T5247] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,grpquota,,errors=continue. Quota mode: writeback. [ 91.425164][ T5246] exFAT-fs (loop5): failed to recognize exfat type [ 91.532727][ T154] team0 (unregistering): Port device team_slave_1 removed [ 91.576108][ T154] team0 (unregistering): Port device team_slave_0 removed [ 91.612002][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.651335][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.808448][ T154] bond0 (unregistering): Released all slaves [ 91.895345][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.913820][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.064092][ T5259] input: syz0 as /devices/virtual/input/input5 [ 92.080940][ T5030] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.730318][ T4192] Bluetooth: hci0: command 0x0419 tx timeout [ 92.754194][ T4417] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 92.857368][ T4417] asix 4-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 92.868534][ T5030] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.899640][ T4417] asix: probe of 4-1:0.188 failed with error -71 [ 92.907885][ T5030] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.954384][ T5030] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.964502][ T4417] usb 4-1: USB disconnect, device number 3 [ 93.130920][ T4296] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 93.217978][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.261013][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.346324][ T4619] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.385780][ T4280] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.404436][ T4619] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.446481][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.508243][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.549160][ T4296] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.586860][ T4296] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 93.668622][ T4296] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 93.694806][ T4296] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.734776][ T4296] usb 2-1: config 0 descriptor?? [ 94.665842][ T4296] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x6 [ 94.727157][ T4417] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 94.749299][ T4296] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 94.998037][ T5313] loop5: detected capacity change from 0 to 40427 [ 95.016859][ T4296] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 95.036364][ T4296] usb 2-1: USB disconnect, device number 4 [ 95.102754][ T5313] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 95.111013][ T5313] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 95.124002][ T5313] F2FS-fs (loop5): invalid crc value [ 95.181769][ T5313] F2FS-fs (loop5): Found nat_bits in checkpoint [ 95.273093][ T5313] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 95.281094][ T5313] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 95.323930][ T4173] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.344226][ T4417] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 95.379254][ T4417] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.414148][ T4417] usb 7-1: Product: syz [ 95.428678][ T4417] usb 7-1: Manufacturer: syz [ 95.443455][ T5326] fido_id[5326]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 95.459039][ T4417] usb 7-1: SerialNumber: syz [ 95.465192][ T5313] attempt to access beyond end of device [ 95.465192][ T5313] loop5: rw=2049, want=45104, limit=40427 [ 95.506564][ T4417] usb 7-1: config 0 descriptor?? [ 95.554917][ T5313] attempt to access beyond end of device [ 95.554917][ T5313] loop5: rw=2049, want=40976, limit=40427 [ 95.694272][ T4173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.723951][ T4173] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 95.774182][ T4173] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 95.819152][ T4173] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 95.827224][ T4417] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 95.853934][ T4173] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.864043][ T4192] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 95.884371][ T4173] usb 5-1: config 0 descriptor?? [ 96.294418][ T4192] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.323445][ T4192] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 96.343555][ T4192] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.369081][ T4173] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 96.388534][ T4192] usb 2-1: config 0 descriptor?? [ 96.426240][ T4173] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 96.974122][ T4192] ath6kl: Failed to submit usb control message: -71 [ 96.984007][ T4192] ath6kl: unable to send the bmi data to the device: -71 [ 97.009224][ T4192] ath6kl: Unable to send get target info: -71 [ 97.043928][ T4192] ath6kl: Failed to init ath6kl core: -71 [ 97.126306][ T4192] ath6kl_usb: probe of 2-1:0.0 failed with error -71 [ 97.159354][ T4192] usb 2-1: USB disconnect, device number 5 [ 97.474239][ T4417] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 97.508526][ T4417] usb 7-1: USB disconnect, device number 2 [ 97.695596][ C0] plantronics 0003:047F:FFFF.0004: usb_submit_urb(ctrl) failed: -1 [ 97.873449][ T5393] loop1: detected capacity change from 0 to 1024 [ 98.026432][ T5402] loop6: detected capacity change from 0 to 128 [ 98.328563][ T5402] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 98.339939][ T5402] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 98.502556][ T5402] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5854: Out of memory [ 98.528637][ T4176] udevd[4176]: incorrect ext4 checksum on /dev/loop6 [ 98.549291][ T4192] usb 5-1: USB disconnect, device number 4 [ 98.888105][ T5432] loop4: detected capacity change from 0 to 2048 [ 99.013967][ T4688] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 99.044924][ T5432] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 99.090384][ T5432] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 99.194491][ T5432] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 22 with error 28 [ 99.265428][ T5432] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.265428][ T5432] [ 99.307575][ T5432] EXT4-fs (loop4): Total free blocks count 0 [ 99.358189][ T4688] usb 7-1: Using ep0 maxpacket: 32 [ 99.374666][ T5432] EXT4-fs (loop4): Free/Dirty block details [ 99.404492][ T5432] EXT4-fs (loop4): free_blocks=2415919104 [ 99.431634][ T5432] EXT4-fs (loop4): dirty_blocks=32 [ 99.440773][ T5432] EXT4-fs (loop4): Block reservation details [ 99.465128][ T5432] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 99.514507][ T4688] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 99.542371][ T4688] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.581836][ T4688] usb 7-1: config 0 descriptor?? [ 99.625036][ T1253] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 99.663654][ T1253] EXT4-fs (loop4): This should not happen!! Data will be lost [ 99.663654][ T1253] [ 99.869262][ T4688] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 99.903478][ T4688] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 99.908628][ T5459] loop4: detected capacity change from 0 to 512 [ 99.946413][ T4688] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 99.976150][ T4688] usb 7-1: media controller created [ 100.018504][ T5459] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 100.021780][ T4688] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.111183][ T5459] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Out of memory [ 100.129571][ T5459] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #18: comm syz.4.231: mark_inode_dirty error [ 100.143513][ T5459] EXT4-fs error (device loop4): ext4_get_max_inline_size:115: inode #18: comm syz.4.231: can't get inode location 18 [ 100.160194][ T5459] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Out of memory [ 100.175184][ T5459] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #18: comm syz.4.231: mark_inode_dirty error [ 100.189493][ T5459] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Out of memory [ 100.200522][ T5459] EXT4-fs error (device loop4): ext4_dirty_inode:6058: inode #18: comm syz.4.231: mark_inode_dirty error [ 100.214486][ T5459] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Out of memory [ 100.230923][ T5459] EXT4-fs error (device loop4): ext4_ext_truncate:4456: inode #18: comm syz.4.231: mark_inode_dirty error [ 100.257556][ T5459] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5854: Out of memory [ 100.554196][ T1253] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 100.579618][ T4688] DVB: Unable to find symbol dib7000p_attach() [ 100.586350][ T4688] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 100.621762][ T1253] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 100.716276][ T1253] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 100.736564][ T4688] rc_core: IR keymap rc-dib0700-rc5 not found [ 100.758049][ T1253] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -117). Quota may get out of sync! [ 100.789782][ T4688] Registered IR keymap rc-empty [ 100.858055][ T4688] dvb-usb: could not initialize remote control. [ 100.890562][ T4688] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 100.958668][ T4688] usb 7-1: USB disconnect, device number 3 [ 101.021085][ T4688] dvb-usb: Elgato EyeTV DTT successfully deinitialized and disconnected. [ 101.527556][ T5508] loop4: detected capacity change from 0 to 128 [ 101.667969][ T5508] FAT-fs (loop4): bogus number of FAT structure [ 101.683253][ T5508] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 101.731388][ T5508] FAT-fs (loop4): Can't find a valid FAT filesystem [ 102.164017][ T23] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 102.283174][ T5542] loop5: detected capacity change from 0 to 256 [ 102.368718][ T5537] FAT-fs (loop5): error, corrupted directory (invalid entries) [ 102.384650][ T5537] FAT-fs (loop5): Filesystem has been set read-only [ 102.524307][ T23] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 29806, setting to 64 [ 102.552233][ T23] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 102.574811][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.591693][ T23] usb 5-1: config 0 descriptor?? [ 102.624290][ T5508] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 102.648991][ T23] hub 5-1:0.0: USB hub found [ 102.874035][ T23] hub 5-1:0.0: 1 port detected [ 102.974077][ T4417] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 103.224037][ T4417] usb 6-1: Using ep0 maxpacket: 32 [ 103.344121][ T4417] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 103.353638][ T4417] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.382308][ T4417] usb 6-1: config 0 descriptor?? [ 103.433097][ T5600] block device autoloading is deprecated and will be removed. [ 103.664084][ T4417] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 103.680605][ T4417] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 103.734395][ T4417] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 103.743979][ T4417] usb 6-1: media controller created [ 103.798492][ T4417] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 104.185366][ T4418] usb 5-1: USB disconnect, device number 5 [ 104.213737][ T5632] loop1: detected capacity change from 0 to 512 [ 104.372604][ T5640] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 104.415927][ T5642] binder: BINDER_SET_CONTEXT_MGR already set [ 104.452607][ T5642] binder: 5641:5642 ioctl 4018620d 200000004a80 returned -16 [ 104.884042][ T4417] stb0899_attach: Driver disabled by Kconfig [ 104.890879][ T4417] az6027: no front-end attached [ 104.890879][ T4417] [ 104.934052][ T4417] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 104.944264][ T4417] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input8 [ 104.980908][ T5660] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 104.992212][ T4417] dvb-usb: schedule remote query interval to 400 msecs. [ 105.007854][ T5660] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 105.017277][ T4417] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 105.327851][ T4417] usb 6-1: USB disconnect, device number 4 [ 105.426051][ T4417] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 105.911432][ T5696] device syzkaller0 entered promiscuous mode [ 106.204260][ T4173] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 106.574249][ T4173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.609277][ T4173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.684855][ T4173] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 106.749188][ T4173] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 106.776578][ T4173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.807103][ T4173] usb 6-1: config 0 descriptor?? [ 107.295946][ T4173] plantronics 0003:047F:FFFF.0005: unknown main item tag 0x6 [ 107.334789][ T4173] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving [ 107.381798][ T4173] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 108.098490][ T26] audit: type=1326 audit(1769792527.550:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5790 comm="syz.4.297" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa3984b4eb9 code=0x0 [ 108.375176][ T5804] sd 0:0:1:0: PR command failed: 2 [ 108.409703][ T5804] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 108.430512][ T5804] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 108.463183][ T5812] tipc: Started in network mode [ 108.474022][ T5812] tipc: Node identity 9eef835dced3, cluster identity 4711 [ 108.489532][ T5812] tipc: Enabled bearer , priority 0 [ 108.554744][ T5812] device syzkaller0 entered promiscuous mode [ 108.575549][ T5811] tipc: Resetting bearer [ 108.620728][ T5811] tipc: Disabling bearer [ 109.071665][ T5839] loop6: detected capacity change from 0 to 512 [ 109.137795][ T5839] EXT4-fs (loop6): Project quota feature not enabled. Cannot enable project quota enforcement. [ 109.427281][ T4417] usb 6-1: USB disconnect, device number 5 [ 109.997953][ T5879] loop4: detected capacity change from 0 to 736 [ 110.035030][ T5883] loop6: detected capacity change from 0 to 256 [ 110.062073][ T5883] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 110.527995][ T5898] binder_alloc: 5897: pid 5897 spamming oneway? 3 buffers allocated for a total size of 5192 [ 110.631518][ T26] audit: type=1326 audit(1769792530.080:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5902 comm="syz.6.322" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff4a0a4beb9 code=0x0 [ 110.718695][ T1253] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.764017][ T1253] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.840293][ T1253] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.931718][ T1253] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.081061][ T1253] tipc: Left network mode [ 111.190386][ T5911] chnl_net:caif_netlink_parms(): no params data found [ 111.293698][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.301080][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.309320][ T5911] device bridge_slave_0 entered promiscuous mode [ 111.318007][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.325230][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.333306][ T5911] device bridge_slave_1 entered promiscuous mode [ 111.365738][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 111.377406][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.412490][ T5911] team0: Port device team_slave_0 added [ 111.420812][ T5911] team0: Port device team_slave_1 added [ 111.442012][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.451302][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.480756][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.556972][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.568834][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.611636][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.757180][ T5911] device hsr_slave_0 entered promiscuous mode [ 111.797491][ T5911] device hsr_slave_1 entered promiscuous mode [ 111.814326][ T5911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.849850][ T5911] Cannot create hsr debugfs directory [ 111.919822][ T4417] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 112.180884][ T1253] device hsr_slave_0 left promiscuous mode [ 112.193488][ T1253] device hsr_slave_1 left promiscuous mode [ 112.210209][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.222786][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.238089][ T1253] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.253611][ T1253] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.272248][ T1253] device bridge_slave_1 left promiscuous mode [ 112.286172][ T1253] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.305611][ T1253] device bridge_slave_0 left promiscuous mode [ 112.319182][ T1253] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.342004][ T1253] device veth1_macvtap left promiscuous mode [ 112.348472][ T1253] device veth0_macvtap left promiscuous mode [ 112.357096][ T1253] device veth1_vlan left promiscuous mode [ 112.363082][ T1253] device veth0_vlan left promiscuous mode [ 112.374233][ T4417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.404211][ T4417] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.431074][ T4417] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.463267][ T4417] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.475325][ T4417] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.502705][ T4417] usb 2-1: config 0 descriptor?? [ 112.832239][ T1253] team0 (unregistering): Port device team_slave_1 removed [ 112.851069][ T1253] team0 (unregistering): Port device team_slave_0 removed [ 112.885012][ T1253] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.901861][ T1253] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.976411][ T4417] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 113.025856][ T1253] bond0 (unregistering): Released all slaves [ 113.108665][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 113.126852][ T4417] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 113.149360][ T5911] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 113.213695][ T5911] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 113.232938][ T5911] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 113.376533][ T5911] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 113.524948][ T5990] loop5: detected capacity change from 0 to 1024 [ 113.531822][ T5985] device syzkaller0 entered promiscuous mode [ 113.653137][ T5990] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 113.692374][ T5990] EXT4-fs (loop5): Encoding requested by superblock is unknown [ 113.835419][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.849979][ T5990] x_tables: duplicate underflow at hook 1 [ 113.906886][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 113.937328][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 114.007581][ T5911] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.045790][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 114.060113][ T6004] loop5: detected capacity change from 0 to 256 [ 114.088502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 114.109767][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.116939][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.169533][ T6004] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e8dde4d, utbl_chksum : 0xe619d30d) [ 114.192000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 114.211610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 114.266638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 114.305632][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.312797][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.367688][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 114.401512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 114.447208][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 114.492041][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 114.523228][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 114.561245][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 114.599241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 114.605349][ T6022] loop5: detected capacity change from 0 to 8 [ 114.629104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 114.657108][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 114.681174][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 114.704766][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 114.723347][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 115.116876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.146165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.154616][ T4192] Bluetooth: hci4: command 0x041b tx timeout [ 115.165046][ T4680] usb 2-1: USB disconnect, device number 6 [ 115.174042][ T1109] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 115.176876][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.413972][ T1109] usb 6-1: Using ep0 maxpacket: 16 [ 115.558629][ T144] Bluetooth: hci5: Frame reassembly failed (-84) [ 115.590437][ T6052] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 115.724480][ T1109] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 115.759077][ T1109] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.784030][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 115.793112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 115.808498][ T1109] usb 6-1: Product: syz [ 115.812730][ T1109] usb 6-1: Manufacturer: syz [ 115.836418][ T1109] usb 6-1: SerialNumber: syz [ 115.873136][ T5911] device veth0_vlan entered promiscuous mode [ 115.901227][ T5911] device veth1_vlan entered promiscuous mode [ 116.002922][ T5911] device veth0_macvtap entered promiscuous mode [ 116.031157][ T5911] device veth1_macvtap entered promiscuous mode [ 116.073572][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.103868][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.141082][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.162930][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.183973][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.219201][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.277015][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.304440][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.335716][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.367513][ T1109] usb 6-1: config 0 descriptor?? [ 116.372816][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.394727][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.413677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.446684][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.460095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.472421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.524823][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 116.539899][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 116.549053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 116.580861][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.593743][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.604266][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.616861][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.627725][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.649732][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.667223][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.677935][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.693517][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.709580][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.718018][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.735267][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 116.759792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 116.769478][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 116.770088][ T6075] loop2: detected capacity change from 0 to 7 [ 116.789107][ T5911] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.814250][ T5911] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.825596][ T5911] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.835414][ T5232] loop2: [ 116.838377][ T5232] loop2: partition table partially beyond EOD, truncated [ 116.847083][ T1109] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 116.860525][ T1109] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 116.873086][ T5911] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.889987][ T6075] loop2: [ 116.893361][ T6075] loop2: partition table partially beyond EOD, truncated [ 116.900969][ T1109] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 116.914241][ T1109] usb 6-1: media controller created [ 116.953162][ T1109] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 117.114228][ T1109] zl10353_read_register: readreg error (reg=127, ret==0) [ 117.115517][ T4331] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.130528][ T1109] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 117.157029][ T4331] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.170480][ T6082] fuse: Bad value for 'group_id' [ 117.182323][ T1109] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 117.203216][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.225421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 117.231048][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.244264][ T4192] Bluetooth: hci4: command 0x040f tx timeout [ 117.332071][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 117.634390][ T4192] Bluetooth: hci5: command 0x1003 tx timeout [ 117.640555][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 117.695134][ T23] usb 6-1: USB disconnect, device number 6 [ 117.704844][ T6105] device syzkaller0 entered promiscuous mode [ 117.741968][ T23] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 118.070898][ T6121] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 118.081920][ T6121] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 118.099883][ T6121] pit: kvm: requested 17600 ns i8254 timer period limited to 200000 ns [ 118.142623][ T6121] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 118.161056][ T6121] pit: kvm: requested 51123 ns i8254 timer period limited to 200000 ns [ 118.198924][ T6121] pit: kvm: requested 25142 ns i8254 timer period limited to 200000 ns [ 118.214483][ T6121] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 118.229376][ T6121] pit: kvm: requested 6704 ns i8254 timer period limited to 200000 ns [ 118.279271][ T6121] pit: kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 118.307756][ T6121] pit: kvm: requested 183542 ns i8254 timer period limited to 200000 ns [ 118.493381][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.6.360'. [ 118.538774][ T6137] device vlan2 entered promiscuous mode [ 118.558315][ T6137] device bond0 entered promiscuous mode [ 118.564992][ T6137] device bond_slave_0 entered promiscuous mode [ 118.571377][ T6137] device bond_slave_1 entered promiscuous mode [ 118.815507][ T6141] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 118.834857][ T6141] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 119.096645][ T6172] device syzkaller0 entered promiscuous mode [ 119.314687][ T23] Bluetooth: hci4: command 0x0419 tx timeout [ 119.389034][ T6192] loop6: detected capacity change from 0 to 1024 [ 119.569519][ T6192] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 119.714102][ T4416] Bluetooth: hci5: command 0x1001 tx timeout [ 119.720203][ T4202] Bluetooth: hci5: sending frame failed (-49) [ 119.761608][ T5911] ODEBUG: Out of memory. ODEBUG disabled [ 120.117971][ T6231] netlink: 16 bytes leftover after parsing attributes in process `syz.5.375'. [ 120.192842][ T6231] device vlan2 entered promiscuous mode [ 120.206037][ T6230] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.219529][ T6231] device bond0 entered promiscuous mode [ 120.263978][ T6231] device bond_slave_0 entered promiscuous mode [ 120.292399][ T6231] device bond_slave_1 entered promiscuous mode [ 121.900043][ T4416] Bluetooth: hci5: command 0x1009 tx timeout [ 122.301541][ T6272] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 122.409916][ T6268] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 122.421012][ T6268] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 124.014388][ T6298] kvm: pic: non byte write [ 124.076400][ T6303] loop6: detected capacity change from 0 to 256 [ 124.294026][ T4416] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 124.451057][ T6303] exFAT-fs (loop6): hint_cluster is invalid (17) [ 124.479534][ T6303] exFAT-fs (loop6): error, invalid dentry access beyond EOF (clu : 5, eidx : 129) [ 124.497108][ T6303] exFAT-fs (loop6): Filesystem has been set read-only [ 124.690953][ T4416] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.707428][ T4416] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.814157][ T4416] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 124.837536][ T4416] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 124.853953][ T4416] usb 8-1: SerialNumber: syz [ 124.866650][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.3.393'. [ 124.921574][ T6331] device vlan2 entered promiscuous mode [ 124.931627][ T6331] device bond0 entered promiscuous mode [ 124.938464][ T6331] device bond_slave_0 entered promiscuous mode [ 124.945527][ T6331] device bond_slave_1 entered promiscuous mode [ 125.156209][ T4416] usb 8-1: 0:2 : does not exist [ 125.203811][ T4416] usb 8-1: USB disconnect, device number 2 [ 125.492843][ T4176] udevd[4176]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.290249][ T6386] loop5: detected capacity change from 0 to 512 [ 127.367987][ T6386] EXT4-fs (loop5): Test dummy encryption mode enabled [ 127.427998][ T6386] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 127.554749][ T6386] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.405: bad orphan inode 131083 [ 127.604563][ T6386] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,noload,,errors=continue. Quota mode: none. [ 127.916036][ T6422] netlink: 28 bytes leftover after parsing attributes in process `syz.6.410'. [ 127.935484][ T6386] loop5: detected capacity change from 0 to 16 [ 128.003694][ T6386] erofs: (device loop5): mounted with root inode @ nid 36. [ 128.239438][ T6430] Set syz0 is full, maxelem 0 reached [ 128.455740][ T6439] loop5: detected capacity change from 0 to 32768 [ 128.499980][ T6439] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.417 (6439) [ 128.595135][ T6439] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 128.603999][ T6439] BTRFS info (device loop5): setting nodatacow, compression disabled [ 128.612187][ T6439] BTRFS info (device loop5): enabling auto defrag [ 128.618670][ T6439] BTRFS info (device loop5): max_inline at 0 [ 128.624673][ T6439] BTRFS info (device loop5): using free space tree [ 128.631169][ T6439] BTRFS info (device loop5): has skinny extents [ 129.144521][ T6479] cgroup: Unknown subsys name 'euid<00000000000000000000' [ 129.946883][ T6489] device syzkaller0 entered promiscuous mode [ 131.411125][ T6515] loop5: detected capacity change from 0 to 512 [ 131.584779][ T6515] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,sb=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 131.682539][ T6515] ext4 filesystem being mounted at /60/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 131.777470][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fccbc00: rx timeout, send abort [ 131.910423][ T6536] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 132.278445][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fcc8000: rx timeout, send abort [ 132.288140][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fccbc00: abort rx timeout. Force session deactivation [ 132.786710][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805fcc8000: abort rx timeout. Force session deactivation [ 132.845604][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.851929][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.985247][ T6553] loop5: detected capacity change from 0 to 1024 [ 133.300511][ T6553] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 133.669091][ T6564] binder: BINDER_SET_CONTEXT_MGR already set [ 133.684304][ T6564] binder: 6562:6564 ioctl 4018620d 2000000002c0 returned -16 [ 133.723379][ T6553] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,nodioread_nolock,discard,max_dir_size_kb=0x00000000004007b1,data_err=ignore,nolazytime,quota,user_xattr,nouid32,dioread_nolock,,errors=continue. Quota mode: writeback. [ 133.806766][ T6569] device syzkaller0 entered promiscuous mode [ 133.906068][ T6553] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3887: comm syz.5.432: Allocating blocks 497-513 which overlap fs metadata [ 134.054380][ T6553] EXT4-fs (loop5): pa ffff888073c26ee0: logic 128, phys. 385, len 8 [ 134.062975][ T6553] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4904: group 0, free 0, pa_free 1 [ 134.090485][ T4235] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 134.374094][ T4235] usb 4-1: Using ep0 maxpacket: 16 [ 134.689048][ T6601] binder: 6600:6601 ioctl c0306201 200000000300 returned -11 [ 134.716426][ T6602] device syzkaller0 entered promiscuous mode [ 134.745914][ T6602] 0: reclassify loop, rule prio 0, protocol 800 [ 134.774113][ T4235] usb 4-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 134.803583][ T4235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.813704][ T4235] usb 4-1: Product: syz [ 134.832991][ T4235] usb 4-1: Manufacturer: syz [ 134.852422][ T4235] usb 4-1: SerialNumber: syz [ 134.888714][ T4235] usb 4-1: config 0 descriptor?? [ 135.504217][ T4235] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 135.678768][ T4235] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 135.859957][ T4235] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 136.018011][ T4235] usb 4-1: media controller created [ 136.238233][ T4235] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 136.351104][ T6634] loop5: detected capacity change from 0 to 128 [ 136.394042][ T4235] zl10353_read_register: readreg error (reg=127, ret==0) [ 136.401140][ T4235] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 136.459461][ T4235] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 136.520430][ T4235] usb 4-1: USB disconnect, device number 4 [ 136.615083][ T4235] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 136.814090][ T6498] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 136.990329][ T6656] loop1: detected capacity change from 0 to 32768 [ 137.006105][ T6642] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000c56) [ 137.050738][ T6642] FAT-fs (loop5): Filesystem has been set read-only [ 137.062697][ T6656] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.465 (6656) [ 137.091037][ T6656] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 137.100074][ T6656] BTRFS info (device loop1): setting nodatacow, compression disabled [ 137.108219][ T6656] BTRFS info (device loop1): enabling auto defrag [ 137.114679][ T6656] BTRFS info (device loop1): max_inline at 0 [ 137.120640][ T6656] BTRFS info (device loop1): using free space tree [ 137.127136][ T6656] BTRFS info (device loop1): has skinny extents [ 137.154243][ T6498] usb 8-1: Using ep0 maxpacket: 32 [ 137.273967][ T6498] usb 8-1: config 0 has an invalid interface number: 184 but max is 0 [ 137.303883][ T6498] usb 8-1: config 0 has no interface number 0 [ 137.310039][ T6498] usb 8-1: config 0 interface 184 has no altsetting 0 [ 137.506430][ T5308] BTRFS info (device loop1): space_info 5 has 10498048 free, is not full [ 137.515465][ T5308] BTRFS info (device loop1): space_info total=11534336, used=53248, pinned=0, reserved=16384, may_use=966656, readonly=0 zone_unusable=0 [ 137.529779][ T5308] BTRFS info (device loop1): global_block_rsv: size 851968 reserved 847872 [ 137.539188][ T5308] BTRFS info (device loop1): trans_block_rsv: size 0 reserved 0 [ 137.546888][ T5308] BTRFS info (device loop1): chunk_block_rsv: size 0 reserved 0 [ 137.554588][ T5308] BTRFS info (device loop1): delayed_block_rsv: size 32768 reserved 32768 [ 137.563099][ T5308] BTRFS info (device loop1): delayed_refs_rsv: size 720896 reserved 86016 [ 137.923989][ T6498] usb 8-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 137.933165][ T6498] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.950703][ T6498] usb 8-1: Product: syz [ 137.955461][ T6498] usb 8-1: Manufacturer: syz [ 137.960446][ T6498] usb 8-1: SerialNumber: syz [ 137.966877][ T6498] usb 8-1: config 0 descriptor?? [ 137.982211][ T6680] device syzkaller0 entered promiscuous mode [ 138.004750][ T6498] smsc75xx v1.0.0 [ 139.174084][ T6498] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 139.210498][ T6498] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 140.013904][ T1109] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.113593][ T6728] xt_TPROXY: Can be used only with -p tcp or -p udp [ 140.943968][ T1109] usb 2-1: Using ep0 maxpacket: 16 [ 140.967942][ T6730] loop6: detected capacity change from 0 to 8 [ 141.017239][ T6730] unable to read id index table [ 141.064202][ T1109] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 141.134378][ T6498] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 141.194576][ T6498] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 141.227747][ T6498] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 141.270930][ T6498] smsc75xx: probe of 8-1:0.184 failed with error -71 [ 141.278366][ T1109] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 141.308840][ T1109] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.326749][ T6498] usb 8-1: USB disconnect, device number 3 [ 141.341397][ T1109] usb 2-1: Product: syz [ 141.346030][ T1109] usb 2-1: Manufacturer: syz [ 141.368519][ T1109] usb 2-1: SerialNumber: syz [ 141.542928][ T1109] usb 2-1: config 0 descriptor?? [ 141.722198][ T1109] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 141.839639][ T1109] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 141.983943][ T6498] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 142.364117][ T6498] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.394008][ T6498] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 142.414065][ T1109] em28xx 2-1:0.0: chip ID is em2765 [ 142.433672][ T6498] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.489324][ T6498] usb 8-1: config 0 descriptor?? [ 142.935859][ T6498] pwc: Askey VC010 type 2 USB webcam detected. [ 143.685851][ T6761] loop5: detected capacity change from 0 to 64 [ 143.944138][ T1109] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 143.952745][ T1109] em28xx 2-1:0.0: board has no eeprom [ 143.974151][ T6498] pwc: recv_control_msg error -32 req 02 val 2b00 [ 144.043046][ T6498] pwc: recv_control_msg error -32 req 02 val 2700 [ 144.174438][ T6498] pwc: recv_control_msg error -32 req 02 val 2c00 [ 144.304589][ T6498] pwc: recv_control_msg error -32 req 04 val 1000 [ 144.433955][ T6498] pwc: recv_control_msg error -32 req 04 val 1300 [ 144.554286][ T6498] pwc: recv_control_msg error -32 req 04 val 1400 [ 144.624041][ T6498] pwc: recv_control_msg error -32 req 02 val 2000 [ 144.674155][ T6498] pwc: recv_control_msg error -32 req 02 val 2100 [ 144.922768][ T6783] loop5: detected capacity change from 0 to 1024 [ 145.170755][ T6783] EXT4-fs (loop5): Ignoring removed bh option [ 145.305067][ T6783] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 145.482345][ T6498] pwc: recv_control_msg error -71 req 02 val 2500 [ 145.504095][ T6498] pwc: recv_control_msg error -71 req 02 val 2400 [ 145.524231][ T6717] em28xx 2-1:0.0: reading from i2c device at 0x1a4 failed (error=-5) [ 145.533539][ T6498] pwc: recv_control_msg error -71 req 02 val 2600 [ 145.552720][ T6783] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,min_batch_time=0x0000000000000005,bh,data_err=ignore,barrier=0x000000000000007f,usrquota,grpquota,dioread_nolock,nobarrier,resuid=0x0000000000000000,nojournal_checksum,,errors=continue. Quota mode: writeback. [ 145.553969][ T6498] pwc: recv_control_msg error -71 req 02 val 2900 [ 145.587612][ T1109] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 145.597743][ T1109] em28xx 2-1:0.0: dvb set to bulk mode. [ 145.623424][ T1109] usb 2-1: USB disconnect, device number 7 [ 145.635652][ T1109] em28xx 2-1:0.0: Disconnecting em28xx [ 145.644501][ T4680] em28xx 2-1:0.0: Binding DVB extension [ 145.654433][ T6498] pwc: recv_control_msg error -71 req 02 val 2800 [ 145.674038][ T6498] pwc: recv_control_msg error -71 req 04 val 1100 [ 145.721521][ T6498] pwc: recv_control_msg error -71 req 04 val 1200 [ 145.765980][ T4680] em28xx 2-1:0.0: Registering input extension [ 145.774610][ T6498] pwc: Registered as video103. [ 145.780384][ T6498] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input9 [ 145.804861][ T1109] em28xx 2-1:0.0: Closing input extension [ 145.915377][ T6498] usb 8-1: USB disconnect, device number 4 [ 145.959939][ T1109] em28xx 2-1:0.0: Freeing device [ 146.300456][ T6823] kvm: MONITOR instruction emulated as NOP! [ 146.467367][ T6834] loop1: detected capacity change from 0 to 128 [ 147.402871][ T6850] device syzkaller0 entered promiscuous mode [ 150.691588][ T6847] syz.6.489 (6847): drop_caches: 2 [ 150.710552][ T6847] syz.6.489 (6847): drop_caches: 2 [ 151.208620][ T6858] netlink: 36 bytes leftover after parsing attributes in process `syz.7.493'. [ 151.243193][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.615011][ T6858] syz.7.493 (6858) used greatest stack depth: 20432 bytes left [ 152.667511][ T6881] MPTCP: kernel_bind error, err=-22 [ 153.338829][ T6498] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 155.134345][ T6498] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 155.188454][ T6498] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.308740][ T6909] binder: BINDER_SET_CONTEXT_MGR already set [ 155.320786][ T6498] usb 4-1: Product: syz [ 155.377426][ T6498] usb 4-1: Manufacturer: syz [ 155.410934][ T6909] binder: 6906:6909 ioctl 4018620d 200000004a80 returned -16 [ 155.448292][ T6498] usb 4-1: SerialNumber: syz [ 155.509966][ T6498] usb 4-1: config 0 descriptor?? [ 155.633994][ T6498] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 155.651625][ T6498] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 155.721381][ T6498] usb 4-1: USB disconnect, device number 5 [ 155.760830][ T6920] netlink: 36 bytes leftover after parsing attributes in process `syz.5.507'. [ 155.865349][ T6920] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.289138][ T6912] loop1: detected capacity change from 0 to 32768 [ 156.328142][ T6912] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.505 (6912) [ 157.248860][ T6912] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 157.394075][ T6912] BTRFS info (device loop1): setting nodatacow, compression disabled [ 157.453527][ T6912] BTRFS info (device loop1): force clearing of disk cache [ 157.984702][ T6912] BTRFS info (device loop1): enabling ssd optimizations [ 157.993517][ T6912] BTRFS info (device loop1): using spread ssd allocation scheme [ 158.002481][ T6912] BTRFS info (device loop1): turning off barriers [ 158.204187][ T6912] BTRFS info (device loop1): disabling free space tree [ 159.244262][ T6912] BTRFS info (device loop1): not using ssd optimizations [ 159.303364][ T6949] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 159.305068][ T6912] BTRFS info (device loop1): not using spread ssd allocation scheme [ 159.323881][ T4681] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 159.331223][ T6912] BTRFS info (device loop1): has skinny extents [ 159.366732][ T6949] loop7: detected capacity change from 0 to 128 [ 159.436109][ T6949] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 159.654109][ T4681] usb 7-1: Using ep0 maxpacket: 16 [ 159.797576][ T4681] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.809080][ T4681] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 159.818999][ T4681] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.834294][ T6912] BTRFS error (device loop1): open_ctree failed: -12 [ 159.855891][ T4681] usb 7-1: config 0 descriptor?? [ 160.346921][ T4681] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 160.764190][ T4418] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 161.154087][ T4418] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 161.195428][ T4418] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 161.205690][ T6998] sctp: failed to load transform for md5: -4 [ 161.384169][ T4418] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 161.411635][ T4418] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 161.434100][ T4418] usb 2-1: SerialNumber: syz [ 161.505248][ T4416] usb 7-1: USB disconnect, device number 4 [ 162.146279][ T7029] UBIFS error (pid: 7029): cannot open "./file0", error -22 [ 162.476304][ T4418] usb 2-1: 0:2 : does not exist [ 163.394203][ T4418] usb 2-1: USB disconnect, device number 8 [ 163.583574][ T7045] binder: 7042:7045 ioctl c0306201 2000000002c0 returned -14 [ 163.613121][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.547065][ T7081] netlink: 12 bytes leftover after parsing attributes in process `syz.1.536'. [ 164.732584][ T7082] netlink: 'syz.5.537': attribute type 10 has an invalid length. [ 164.854067][ T7089] loop7: detected capacity change from 0 to 128 [ 164.892356][ T7082] device veth0_vlan left promiscuous mode [ 164.922887][ T4197] block nbd0: Receive control failed (result -1) [ 164.929245][ T7082] device veth0_vlan entered promiscuous mode [ 164.974084][ T7082] team0: Device veth0_vlan failed to register rx_handler [ 166.377091][ T7118] input: syz1 as /devices/virtual/input/input11 [ 166.430792][ T7082] syz.5.537 (7082) used greatest stack depth: 20016 bytes left [ 166.463498][ T7120] device syzkaller0 entered promiscuous mode [ 168.809061][ T4192] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 168.816636][ T23] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 169.124028][ T4679] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 169.214364][ T4192] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.224603][ T23] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.243924][ T23] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 169.262157][ T4192] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 169.289735][ T4192] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.306449][ T4192] usb 7-1: config 0 descriptor?? [ 169.346479][ T4192] pwc: Askey VC010 type 2 USB webcam detected. [ 169.364004][ T23] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 169.375490][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 169.384346][ T23] usb 4-1: SerialNumber: syz [ 169.535077][ T4679] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 169.588333][ T4679] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 169.677039][ T23] usb 4-1: 0:2 : does not exist [ 169.784918][ T4192] pwc: recv_control_msg error -32 req 02 val 2b00 [ 169.785119][ T4679] usb 2-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 169.823985][ T4192] pwc: recv_control_msg error -32 req 02 val 2700 [ 169.842354][ T23] usb 4-1: USB disconnect, device number 6 [ 169.864014][ T4192] pwc: recv_control_msg error -32 req 02 val 2c00 [ 169.903985][ T4192] pwc: recv_control_msg error -32 req 04 val 1000 [ 169.944141][ T4192] pwc: recv_control_msg error -32 req 04 val 1300 [ 169.994117][ T4192] pwc: recv_control_msg error -32 req 04 val 1400 [ 170.014632][ T4679] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.044076][ T4192] pwc: recv_control_msg error -32 req 02 val 2000 [ 170.120186][ T4679] usb 2-1: Product: syz [ 170.124807][ T4679] usb 2-1: Manufacturer: syz [ 170.129503][ T4679] usb 2-1: SerialNumber: syz [ 170.137021][ T5232] udevd[5232]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 170.163240][ T4192] pwc: recv_control_msg error -32 req 02 val 2100 [ 170.177060][ T4679] usb 2-1: config 0 descriptor?? [ 170.270612][ T7149] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 170.775822][ T7149] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 170.824012][ T4192] pwc: recv_control_msg error -32 req 04 val 1500 [ 170.934719][ T4192] pwc: recv_control_msg error -32 req 02 val 2500 [ 170.964636][ T4679] dm9601: probe of 2-1:0.0 failed with error -71 [ 171.230759][ T4192] pwc: recv_control_msg error -32 req 02 val 2400 [ 171.616395][ T4679] usb 2-1: USB disconnect, device number 9 [ 171.844008][ T4192] pwc: recv_control_msg error -71 req 02 val 2900 [ 172.583946][ T4192] pwc: recv_control_msg error -71 req 02 val 2800 [ 172.614104][ T4192] pwc: recv_control_msg error -71 req 04 val 1100 [ 172.627687][ T7184] device syzkaller0 entered promiscuous mode [ 172.630260][ T7183] loop6: detected capacity change from 0 to 512 [ 172.667276][ T4192] pwc: recv_control_msg error -71 req 04 val 1200 [ 172.686192][ T4192] pwc: Registered as video103. [ 172.712475][ T4192] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12 [ 172.751184][ T7183] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 172.794738][ T4192] usb 7-1: USB disconnect, device number 5 [ 172.880438][ T7183] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 173.156440][ T7198] tipc: Enabled bearer , priority 0 [ 173.166324][ T7183] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.559: attempt to clear invalid blocks 2 len 1 [ 173.183445][ T7201] device syzkaller0 entered promiscuous mode [ 173.871044][ T7183] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 173.949052][ T7183] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.559: invalid indirect mapped block 1819239214 (level 0) [ 174.054529][ T7198] tipc: Resetting bearer [ 174.083258][ T7183] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.559: invalid indirect mapped block 1819239214 (level 1) [ 174.134016][ T7196] tipc: Resetting bearer [ 174.171948][ T7196] tipc: Disabling bearer [ 174.178019][ T7183] EXT4-fs (loop6): 1 truncate cleaned up [ 174.183681][ T7183] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 174.379350][ T13] tipc: Node number set to 1346143069 [ 175.122088][ T7223] loop1: detected capacity change from 0 to 128 [ 175.378155][ T7223] FAT-fs (loop1): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value [ 175.953966][ T13] Bluetooth: hci2: command 0x0406 tx timeout [ 177.847148][ T26] audit: type=1804 audit(1769792597.300:8): pid=7257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.572" name="/newroot/82/file1" dev="fuse" ino=1 res=1 errno=0 [ 178.136831][ T7268] loop6: detected capacity change from 0 to 32768 [ 178.213909][ T4418] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 178.250232][ T7268] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 scanned by syz.6.575 (7268) [ 178.277734][ T7268] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm [ 178.286612][ T7268] BTRFS info (device loop6): enabling disk space caching [ 178.293632][ T7268] BTRFS info (device loop6): force clearing of disk cache [ 178.300798][ T7268] BTRFS info (device loop6): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 178.310227][ T7268] BTRFS info (device loop6): use zstd compression, level 3 [ 178.317504][ T7268] BTRFS info (device loop6): disk space caching is enabled [ 178.324748][ T7268] BTRFS info (device loop6): has skinny extents [ 178.453948][ T4418] usb 2-1: Using ep0 maxpacket: 32 [ 178.590423][ T7288] tipc: Enabling of bearer rejected, failed to enable media [ 179.179235][ T7268] BTRFS info (device loop6): enabling ssd optimizations [ 179.186147][ T4418] usb 2-1: unable to get BOS descriptor or descriptor too short [ 179.187514][ T7268] BTRFS info (device loop6): clearing free space tree [ 179.201240][ T7268] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 179.211084][ T7268] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 179.296675][ T4418] usb 2-1: no configurations [ 179.301322][ T4418] usb 2-1: can't read configurations, error -22 [ 180.363423][ T7312] loop5: detected capacity change from 0 to 256 [ 180.440324][ T7312] exFAT-fs (loop5): bogus fat length [ 180.453054][ T7312] exFAT-fs (loop5): failed to read boot sector [ 180.914640][ T7312] exFAT-fs (loop5): failed to recognize exfat type [ 181.022539][ T7323] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 181.376290][ T7334] device syzkaller0 entered promiscuous mode [ 181.679451][ T7347] netlink: 4 bytes leftover after parsing attributes in process `syz.1.588'. [ 181.753300][ T7347] device bridge0 entered promiscuous mode [ 181.764283][ T7347] device macvtap1 entered promiscuous mode [ 182.111334][ T4416] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 182.374056][ T4416] usb 6-1: Using ep0 maxpacket: 32 [ 183.493827][ C0] sched: RT throttling activated [ 183.970334][ T7352] device bridge0 left promiscuous mode [ 184.224159][ T4416] usb 6-1: unable to get BOS descriptor or descriptor too short [ 184.672498][ T4416] usb 6-1: no configurations [ 184.677616][ T4416] usb 6-1: can't read configurations, error -22 [ 190.470299][ T7462] device syzkaller0 entered promiscuous mode [ 192.656212][ T4418] Bluetooth: hci3: command 0x0406 tx timeout [ 193.416537][ T7495] tipc: Enabling of bearer rejected, failed to enable media [ 194.317761][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.326786][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.556487][ T13] Bluetooth: hci1: command 0x0406 tx timeout [ 203.255435][ T7600] loop1: detected capacity change from 0 to 512 [ 203.513120][ T7600] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.645: inode has both inline data and extents flags [ 203.544193][ T7600] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.645: couldn't read orphan inode 15 (err -117) [ 203.731689][ T7600] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback. [ 206.965605][ T4683] Bluetooth: hci0: command 0x0406 tx timeout [ 207.201068][ T7641] 8021q: adding VLAN 0 to HW filter on device bond1 [ 207.266362][ T7648] bond1: (slave macvlan2): making interface the new active one [ 207.282056][ T7648] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 207.316179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 207.348354][ T7641] netlink: 52 bytes leftover after parsing attributes in process `syz.6.653'. [ 209.470540][ T7676] loop1: detected capacity change from 0 to 256 [ 209.492101][ T7677] netlink: 4 bytes leftover after parsing attributes in process `syz.7.661'. [ 209.596665][ T7677] device team_slave_0 entered promiscuous mode [ 209.603516][ T7677] device team_slave_1 entered promiscuous mode [ 209.611175][ T7677] device macvtap1 entered promiscuous mode [ 209.784470][ T7677] device team0 entered promiscuous mode [ 210.394793][ T7677] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 210.416262][ T7681] netlink: 4 bytes leftover after parsing attributes in process `syz.7.661'. [ 210.562627][ T7681] device team0 left promiscuous mode [ 211.328924][ T7681] device team_slave_0 left promiscuous mode [ 211.334966][ T7681] device team_slave_1 left promiscuous mode [ 211.404161][ T7695] mmap: syz.6.664 (7695) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 212.555179][ T7712] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 212.635890][ T7712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.672391][ T7712] bond0: (slave rose0): Enslaving as an active interface with an up link [ 212.694345][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 213.847689][ T7749] x_tables: ip_tables: osf match: only valid for protocol 6 [ 221.150050][ T7852] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 221.846176][ T7857] loop1: detected capacity change from 0 to 128 [ 222.082672][ T7857] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv1,init_itable=0x0000000000000007,,errors=continue. Quota mode: none. [ 222.574321][ T7857] ext4 filesystem being mounted at /156/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 228.856929][ T7941] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 233.786156][ T7984] netlink: 512 bytes leftover after parsing attributes in process `syz.3.720'. [ 237.323935][ T4680] Bluetooth: hci4: command 0x0406 tx timeout [ 237.382820][ T8007] netlink: 'syz.7.729': attribute type 1 has an invalid length. [ 238.281066][ T8017] genirq: Flags mismatch irq 31. 00000000 (comedi_parport) vs. 00000000 (virtio1-input.0) [ 238.356255][ T8017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 240.005144][ T8007] device bond1 entered promiscuous mode [ 240.076459][ T8007] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.238924][ T8007] netlink: 28 bytes leftover after parsing attributes in process `syz.7.729'. [ 240.440407][ T8038] netlink: 'syz.7.733': attribute type 1 has an invalid length. [ 240.586794][ T8038] device bond2 entered promiscuous mode [ 240.592954][ T8038] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.703011][ T8038] netlink: 28 bytes leftover after parsing attributes in process `syz.7.733'. [ 240.904063][ T8038] bond2: (slave bridge1): making interface the new active one [ 241.429734][ T8038] device bridge1 entered promiscuous mode [ 241.437860][ T8038] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 241.447480][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 243.610079][ T8068] netlink: 'syz.7.742': attribute type 1 has an invalid length. [ 243.679095][ T8068] device bond3 entered promiscuous mode [ 243.744398][ T8068] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.460725][ T8068] netlink: 28 bytes leftover after parsing attributes in process `syz.7.742'. [ 244.660129][ T8068] bond3: (slave bridge2): making interface the new active one [ 244.734167][ T8068] device bridge2 entered promiscuous mode [ 244.742971][ T8068] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 244.815438][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 246.155793][ T8116] netlink: 'syz.5.751': attribute type 1 has an invalid length. [ 246.341834][ T8116] device bond1 entered promiscuous mode [ 246.362350][ T8116] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.542828][ T8119] bond1: (slave bridge2): making interface the new active one [ 246.573997][ T8119] device bridge2 entered promiscuous mode [ 246.666123][ T8119] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 246.971797][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 247.669569][ T8140] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 250.738255][ T8181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.766'. [ 253.808037][ T8204] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 255.112876][ T8209] netlink: 'syz.1.777': attribute type 1 has an invalid length. [ 255.216977][ T8209] device bond1 entered promiscuous mode [ 255.223349][ T8209] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.254311][ T8219] netlink: 'syz.3.779': attribute type 1 has an invalid length. [ 255.311805][ T8219] device bond1 entered promiscuous mode [ 255.318141][ T8219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.327840][ T8224] netlink: 'syz.7.780': attribute type 1 has an invalid length. [ 255.370175][ T8224] device bond4 entered promiscuous mode [ 255.379968][ T8224] 8021q: adding VLAN 0 to HW filter on device bond4 [ 255.418511][ T8226] netlink: 28 bytes leftover after parsing attributes in process `syz.3.779'. [ 255.482278][ T8209] netlink: 28 bytes leftover after parsing attributes in process `syz.1.777'. [ 255.520580][ T8230] netlink: 28 bytes leftover after parsing attributes in process `syz.7.780'. [ 256.228870][ T1422] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.235493][ T1422] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.266684][ T8219] bond1: (slave bridge1): making interface the new active one [ 256.293281][ T8219] device bridge1 entered promiscuous mode [ 256.300002][ T8219] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 256.460504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 257.005514][ T8253] netlink: 4 bytes leftover after parsing attributes in process `syz.7.782'. [ 257.613338][ T8260] netlink: 'syz.7.786': attribute type 1 has an invalid length. [ 257.702291][ T8260] device bond5 entered promiscuous mode [ 257.714682][ T8260] 8021q: adding VLAN 0 to HW filter on device bond5 [ 258.064233][ T8266] netlink: 28 bytes leftover after parsing attributes in process `syz.7.786'. [ 258.173637][ T8260] bond5: (slave bridge3): making interface the new active one [ 258.222080][ T8260] device bridge3 entered promiscuous mode [ 258.235045][ T8260] bond5: (slave bridge3): Enslaving as an active interface with an up link [ 258.272856][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 258.449897][ T8278] netlink: 'syz.3.789': attribute type 1 has an invalid length. [ 259.187501][ T8278] device bond2 entered promiscuous mode [ 259.193669][ T8278] 8021q: adding VLAN 0 to HW filter on device bond2 [ 259.202209][ T8281] netlink: 28 bytes leftover after parsing attributes in process `syz.3.789'. [ 259.337249][ T8290] netlink: 'syz.3.791': attribute type 1 has an invalid length. [ 259.442507][ T8290] device bond3 entered promiscuous mode [ 259.824868][ T8290] 8021q: adding VLAN 0 to HW filter on device bond3 [ 259.908503][ T8295] netlink: 28 bytes leftover after parsing attributes in process `syz.3.791'. [ 260.152819][ T8290] bond3: (slave bridge2): making interface the new active one [ 260.174036][ T8290] device bridge2 entered promiscuous mode [ 260.189249][ T8290] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 260.215702][ T4331] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 262.210718][ T8331] netlink: 'syz.5.804': attribute type 1 has an invalid length. [ 263.219559][ T8331] device bond2 entered promiscuous mode [ 263.269522][ T8331] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.088027][ T8361] netlink: 'syz.6.810': attribute type 1 has an invalid length. [ 267.323542][ T8361] device bond2 entered promiscuous mode [ 267.338731][ T8361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 269.407228][ T8388] netlink: 'syz.3.817': attribute type 1 has an invalid length. [ 271.737167][ T8388] device bond4 entered promiscuous mode [ 271.818398][ T8388] 8021q: adding VLAN 0 to HW filter on device bond4 [ 272.092100][ T8412] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 272.659130][ T8388] bond4: (slave bridge3): making interface the new active one [ 272.687628][ T8388] device bridge3 entered promiscuous mode [ 272.698755][ T8388] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 272.709524][ T8396] netlink: 28 bytes leftover after parsing attributes in process `syz.3.817'. [ 272.719429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 276.871411][ T8458] netlink: 'syz.7.834': attribute type 1 has an invalid length. [ 277.819325][ T8458] device bond6 entered promiscuous mode [ 277.825504][ T8458] 8021q: adding VLAN 0 to HW filter on device bond6 [ 277.961411][ T8458] netlink: 28 bytes leftover after parsing attributes in process `syz.7.834'. [ 277.991697][ T8458] bond6: (slave bridge4): making interface the new active one [ 277.999475][ T8458] device bridge4 entered promiscuous mode [ 278.142839][ T8458] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 278.332445][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond6: link becomes ready [ 279.660164][ T8490] netlink: 'syz.6.843': attribute type 1 has an invalid length. [ 279.816911][ T8490] device bond3 entered promiscuous mode [ 279.843723][ T8490] 8021q: adding VLAN 0 to HW filter on device bond3 [ 281.616450][ T8493] netlink: 28 bytes leftover after parsing attributes in process `syz.6.843'. [ 285.513505][ T8524] netlink: 'syz.3.851': attribute type 1 has an invalid length. [ 285.741257][ T8524] device bond5 entered promiscuous mode [ 285.757588][ T8524] 8021q: adding VLAN 0 to HW filter on device bond5 [ 286.216440][ T8529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.851'. [ 286.263549][ T8524] bond5: (slave bridge4): making interface the new active one [ 286.277500][ T8524] device bridge4 entered promiscuous mode [ 286.287170][ T8524] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 286.353907][ T8531] netlink: 'syz.1.853': attribute type 1 has an invalid length. [ 286.444657][ C1] ================================================================== [ 286.453655][ C1] BUG: KASAN: use-after-free in rose_timer_expiry+0x470/0x490 [ 286.461267][ C1] Read of size 2 at addr ffff888061b7b42a by task syz-executor/8544 [ 286.467202][ T8531] device bond2 entered promiscuous mode [ 286.469609][ C1] [ 286.475784][ T8531] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.477637][ C1] CPU: 1 PID: 8544 Comm: syz-executor Not tainted syzkaller #0 [ 286.491999][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 286.501565][ T5308] IPv6: ADDRCONF(NETDEV_CHANGE): bond5: link becomes ready [ 286.502232][ C1] Call Trace: [ 286.512698][ C1] [ 286.515640][ C1] dump_stack_lvl+0x188/0x250 [ 286.521017][ C1] ? show_regs_print_info+0x20/0x20 [ 286.526561][ C1] ? _printk+0xda/0x130 [ 286.530726][ C1] ? rose_timer_expiry+0x470/0x490 [ 286.535860][ C1] ? load_image+0x400/0x400 [ 286.540393][ C1] ? lock_acquire+0x208/0x400 [ 286.545107][ C1] print_address_description+0x60/0x2d0 [ 286.550682][ C1] ? rose_timer_expiry+0x470/0x490 [ 286.555912][ C1] kasan_report+0xdf/0x130 [ 286.560359][ C1] ? rose_timer_expiry+0x470/0x490 [ 286.566085][ C1] rose_timer_expiry+0x470/0x490 [ 286.571479][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 286.576689][ C1] call_timer_fn+0x17b/0x540 [ 286.581739][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 286.586769][ C1] ? __run_timers+0x7f0/0x7f0 [ 286.591794][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 286.597081][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 286.602308][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 286.607342][ C1] __run_timers+0x53a/0x7f0 [ 286.611949][ C1] ? detach_timer+0x2b0/0x2b0 [ 286.616636][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 286.622751][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 286.627605][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 286.633111][ C1] run_timer_softirq+0x63/0xf0 [ 286.637890][ C1] handle_softirqs+0x339/0x830 [ 286.642679][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 286.647576][ C1] ? do_softirq+0x210/0x210 [ 286.652316][ C1] __irq_exit_rcu+0x13b/0x230 [ 286.657014][ C1] ? irq_exit_rcu+0x20/0x20 [ 286.661560][ C1] irq_exit_rcu+0x5/0x20 [ 286.665799][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 286.671693][ C1] [ 286.674626][ C1] [ 286.677731][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 286.683736][ C1] RIP: 0010:kasan_check_range+0xc/0x290 [ 286.689629][ C1] Code: c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 <41> 57 41 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 [ 286.710175][ C1] RSP: 0018:ffffc90003d6fb10 EFLAGS: 00000202 [ 286.716251][ C1] RAX: f2f2f2f8f1f1f101 RBX: 0000000000000010 RCX: ffffffff815cdea8 [ 286.724224][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff88801ff7cec0 [ 286.732283][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000 [ 286.740381][ C1] R10: dffffc0000000000 R11: ffffed1003fef9cc R12: dffffc0000000000 [ 286.748437][ C1] R13: 0000000000000000 R14: ffff88801ff7cec0 R15: ffffffff8c3c0368 [ 286.756530][ C1] ? lockdep_init_map_type+0x98/0x900 [ 286.762468][ C1] memset+0x1e/0x40 [ 286.766336][ C1] lockdep_init_map_type+0x98/0x900 [ 286.771570][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 286.776959][ C1] inode_init_always+0x82b/0xcb0 [ 286.781896][ C1] ? shmem_match+0x160/0x160 [ 286.786724][ C1] new_inode_pseudo+0x8e/0x210 [ 286.791502][ C1] new_inode+0x25/0x1c0 [ 286.795655][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 286.800854][ C1] shmem_get_inode+0x334/0xa90 [ 286.805627][ C1] shmem_symlink+0x97/0x6c0 [ 286.810124][ C1] ? inode_permission+0xef/0x480 [ 286.815062][ C1] ? bpf_lsm_inode_symlink+0x5/0x10 [ 286.820371][ C1] vfs_symlink+0x247/0x3d0 [ 286.824882][ C1] do_symlinkat+0x1ab/0x6b0 [ 286.829395][ C1] ? vfs_symlink+0x3d0/0x3d0 [ 286.833997][ C1] ? getname_flags+0x1fe/0x500 [ 286.838753][ C1] __x64_sys_symlinkat+0x95/0xa0 [ 286.843682][ C1] do_syscall_64+0x4c/0xa0 [ 286.848102][ C1] ? clear_bhb_loop+0x30/0x80 [ 286.852769][ C1] ? clear_bhb_loop+0x30/0x80 [ 286.857443][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.863540][ C1] RIP: 0033:0x7ff4a0a4af77 [ 286.867971][ C1] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 fe f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 286.888046][ C1] RSP: 002b:00007ffd9a973528 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 286.896552][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff4a0a4af77 [ 286.904617][ C1] RDX: 00007ff4a0abbc2a RSI: 00000000ffffff9c RDI: 00007ff4a0ab6a6e [ 286.912579][ C1] RBP: 00007ffd9a97356c R08: 0000000000000000 R09: 0000000000000000 [ 286.920656][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000088 [ 286.928620][ C1] R13: 00000000000927c0 R14: 0000000000045df3 R15: 00007ffd9a9735c0 [ 286.936690][ C1] [ 286.939709][ C1] [ 286.942014][ C1] Allocated by task 5640: [ 286.946322][ C1] __kasan_kmalloc+0xb5/0xf0 [ 286.950912][ C1] rose_add_node+0x227/0xdb0 [ 286.955579][ C1] rose_rt_ioctl+0xa2b/0xe70 [ 286.960258][ C1] rose_ioctl+0x2a7/0x7d0 [ 286.964574][ C1] sock_do_ioctl+0xfb/0x320 [ 286.969084][ C1] sock_ioctl+0x4d2/0x710 [ 286.973584][ C1] __se_sys_ioctl+0xfa/0x170 [ 286.978276][ C1] do_syscall_64+0x4c/0xa0 [ 286.982702][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 286.988792][ C1] [ 286.991109][ C1] Last potentially related work creation: [ 286.997086][ C1] kasan_save_stack+0x35/0x60 [ 287.001773][ C1] kasan_record_aux_stack+0xb8/0x100 [ 287.007059][ C1] insert_work+0x54/0x3d0 [ 287.011383][ C1] __queue_work+0x9c5/0xd50 [ 287.015876][ C1] call_timer_fn+0x17b/0x540 [ 287.020550][ C1] __run_timers+0x565/0x7f0 [ 287.025055][ C1] run_timer_softirq+0x63/0xf0 [ 287.030220][ C1] handle_softirqs+0x339/0x830 [ 287.034971][ C1] __irq_exit_rcu+0x13b/0x230 [ 287.039893][ C1] irq_exit_rcu+0x5/0x20 [ 287.044212][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 287.050109][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 287.056196][ C1] [ 287.058529][ C1] The buggy address belongs to the object at ffff888061b7b400 [ 287.058529][ C1] which belongs to the cache kmalloc-512 of size 512 [ 287.072746][ C1] The buggy address is located 42 bytes inside of [ 287.072746][ C1] 512-byte region [ffff888061b7b400, ffff888061b7b600) [ 287.086233][ C1] The buggy address belongs to the page: [ 287.091856][ C1] page:ffffea000186de00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888061b7a800 pfn:0x61b78 [ 287.103296][ C1] head:ffffea000186de00 order:2 compound_mapcount:0 compound_pincount:0 [ 287.111617][ C1] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 287.119690][ C1] raw: 00fff00000010200 ffffea00017e1e08 ffffea0001896a08 ffff888016c41c80 [ 287.128361][ C1] raw: ffff888061b7a800 0000000000100005 00000001ffffffff 0000000000000000 [ 287.136986][ C1] page dumped because: kasan: bad access detected [ 287.143392][ C1] page_owner tracks the page as allocated [ 287.149092][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4189, ts 55266497868, free_ts 12150565213 [ 287.168279][ C1] get_page_from_freelist+0x1bbd/0x1ca0 [ 287.173969][ C1] __alloc_pages+0x1ee/0x480 [ 287.178566][ C1] new_slab+0xc0/0x4b0 [ 287.182641][ C1] ___slab_alloc+0x80a/0xdd0 [ 287.187230][ C1] __kmalloc_node_track_caller+0x1fc/0x3a0 [ 287.193051][ C1] __alloc_skb+0x22c/0x750 [ 287.197461][ C1] netlink_ack+0x372/0xb50 [ 287.201865][ C1] netlink_rcv_skb+0x27a/0x440 [ 287.206616][ C1] netlink_unicast+0x774/0x920 [ 287.211365][ C1] netlink_sendmsg+0x8ba/0xbe0 [ 287.216131][ C1] __sys_sendto+0x46d/0x620 [ 287.220645][ C1] __x64_sys_sendto+0xda/0xf0 [ 287.225341][ C1] do_syscall_64+0x4c/0xa0 [ 287.229783][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.235671][ C1] page last free stack trace: [ 287.240567][ C1] free_unref_page_prepare+0x637/0x6c0 [ 287.246018][ C1] free_unref_page+0x8f/0x2a0 [ 287.250687][ C1] free_contig_range+0x96/0xf0 [ 287.255573][ C1] destroy_args+0xf0/0xa00 [ 287.260203][ C1] debug_vm_pgtable+0x321/0x380 [ 287.265837][ C1] do_one_initcall+0x272/0x730 [ 287.270612][ C1] do_initcall_level+0x137/0x1f0 [ 287.275550][ C1] do_initcalls+0x4b/0x90 [ 287.279877][ C1] kernel_init_freeable+0x3e9/0x570 [ 287.285067][ C1] kernel_init+0x19/0x1b0 [ 287.289519][ C1] ret_from_fork+0x1f/0x30 [ 287.293928][ C1] [ 287.296237][ C1] Memory state around the buggy address: [ 287.301944][ C1] ffff888061b7b300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.310001][ C1] ffff888061b7b380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 287.318052][ C1] >ffff888061b7b400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.326366][ C1] ^ [ 287.331746][ C1] ffff888061b7b480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.340123][ C1] ffff888061b7b500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 287.348262][ C1] ================================================================== [ 287.356312][ C1] Disabling lock debugging due to kernel taint [ 287.362622][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 287.369926][ C1] CPU: 1 PID: 8544 Comm: syz-executor Tainted: G B syzkaller #0 [ 287.379011][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 287.389056][ C1] Call Trace: [ 287.392330][ C1] [ 287.395330][ C1] dump_stack_lvl+0x188/0x250 [ 287.400184][ C1] ? show_regs_print_info+0x20/0x20 [ 287.405382][ C1] ? load_image+0x400/0x400 [ 287.409887][ C1] panic+0x2e5/0x810 [ 287.413783][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 287.418381][ C1] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 287.424269][ C1] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 287.430204][ C1] ? _raw_spin_unlock+0x40/0x40 [ 287.435053][ C1] ? print_memory_metadata+0x314/0x400 [ 287.440503][ C1] ? rose_timer_expiry+0x470/0x490 [ 287.445606][ C1] check_panic_on_warn+0x80/0xa0 [ 287.450535][ C1] ? rose_timer_expiry+0x470/0x490 [ 287.455634][ C1] end_report+0x6d/0xf0 [ 287.459907][ C1] kasan_report+0x102/0x130 [ 287.464685][ C1] ? rose_timer_expiry+0x470/0x490 [ 287.469992][ C1] rose_timer_expiry+0x470/0x490 [ 287.474952][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 287.480104][ C1] call_timer_fn+0x17b/0x540 [ 287.484811][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 287.489828][ C1] ? __run_timers+0x7f0/0x7f0 [ 287.494620][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 287.499805][ C1] ? lockdep_hardirqs_on+0x94/0x140 [ 287.504990][ C1] ? rose_start_t1timer+0xd0/0xd0 [ 287.510007][ C1] __run_timers+0x53a/0x7f0 [ 287.514508][ C1] ? detach_timer+0x2b0/0x2b0 [ 287.519315][ C1] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 287.525312][ C1] ? sched_clock_cpu+0x15/0x3c0 [ 287.530196][ C1] ? ktime_get_real_ts64+0x440/0x440 [ 287.535481][ C1] run_timer_softirq+0x63/0xf0 [ 287.540238][ C1] handle_softirqs+0x339/0x830 [ 287.544995][ C1] ? __irq_exit_rcu+0x13b/0x230 [ 287.549908][ C1] ? do_softirq+0x210/0x210 [ 287.554828][ C1] __irq_exit_rcu+0x13b/0x230 [ 287.559520][ C1] ? irq_exit_rcu+0x20/0x20 [ 287.564537][ C1] irq_exit_rcu+0x5/0x20 [ 287.569027][ C1] sysvec_apic_timer_interrupt+0xa0/0xc0 [ 287.574892][ C1] [ 287.577987][ C1] [ 287.581100][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 287.587406][ C1] RIP: 0010:kasan_check_range+0xc/0x290 [ 287.592948][ C1] Code: c0 c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 ac 01 00 00 55 <41> 57 41 56 41 54 53 49 89 f8 49 01 f0 0f 82 0e 02 00 00 49 89 f8 [ 287.612636][ C1] RSP: 0018:ffffc90003d6fb10 EFLAGS: 00000202 [ 287.618688][ C1] RAX: f2f2f2f8f1f1f101 RBX: 0000000000000010 RCX: ffffffff815cdea8 [ 287.626740][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffff88801ff7cec0 [ 287.634695][ C1] RBP: 0000000000000000 R08: 0000000000000003 R09: 0000000000000000 [ 287.642658][ C1] R10: dffffc0000000000 R11: ffffed1003fef9cc R12: dffffc0000000000 [ 287.650639][ C1] R13: 0000000000000000 R14: ffff88801ff7cec0 R15: ffffffff8c3c0368 [ 287.658603][ C1] ? lockdep_init_map_type+0x98/0x900 [ 287.664330][ C1] memset+0x1e/0x40 [ 287.668442][ C1] lockdep_init_map_type+0x98/0x900 [ 287.673894][ C1] ? lockdep_softirqs_off+0x430/0x430 [ 287.679509][ C1] inode_init_always+0x82b/0xcb0 [ 287.684536][ C1] ? shmem_match+0x160/0x160 [ 287.689468][ C1] new_inode_pseudo+0x8e/0x210 [ 287.694487][ C1] new_inode+0x25/0x1c0 [ 287.698639][ C1] ? do_raw_spin_unlock+0x11d/0x230 [ 287.703833][ C1] shmem_get_inode+0x334/0xa90 [ 287.708593][ C1] shmem_symlink+0x97/0x6c0 [ 287.713167][ C1] ? inode_permission+0xef/0x480 [ 287.718182][ C1] ? bpf_lsm_inode_symlink+0x5/0x10 [ 287.723368][ C1] vfs_symlink+0x247/0x3d0 [ 287.727768][ C1] do_symlinkat+0x1ab/0x6b0 [ 287.732342][ C1] ? vfs_symlink+0x3d0/0x3d0 [ 287.736914][ C1] ? getname_flags+0x1fe/0x500 [ 287.741660][ C1] __x64_sys_symlinkat+0x95/0xa0 [ 287.746746][ C1] do_syscall_64+0x4c/0xa0 [ 287.751598][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.756266][ C1] ? clear_bhb_loop+0x30/0x80 [ 287.760935][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 287.767186][ C1] RIP: 0033:0x7ff4a0a4af77 [ 287.771596][ C1] Code: 44 00 00 48 89 f2 31 c9 48 89 fe bf 9c ff ff ff e9 fe f5 ff ff 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 b8 0a 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 287.791223][ C1] RSP: 002b:00007ffd9a973528 EFLAGS: 00000202 ORIG_RAX: 000000000000010a [ 287.799626][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff4a0a4af77 [ 287.807677][ C1] RDX: 00007ff4a0abbc2a RSI: 00000000ffffff9c RDI: 00007ff4a0ab6a6e [ 287.815646][ C1] RBP: 00007ffd9a97356c R08: 0000000000000000 R09: 0000000000000000 [ 287.823637][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000088 [ 287.831692][ C1] R13: 00000000000927c0 R14: 0000000000045df3 R15: 00007ffd9a9735c0 [ 287.839765][ C1] [ 287.843160][ C1] Kernel Offset: disabled [ 287.847487][ C1] Rebooting in 86400 seconds..