last executing test programs: 14.930697603s ago: executing program 2 (id=1362): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x92, 0xdf, 0x55, 0x10, 0x5ac, 0x9226, 0xb289, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0xe9}}]}}]}}, 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9a30105240000000d240f8100000000000000000006241a0000000905810300000000000904010000020d00000904010102020d000009058202000000000009050302"], 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904010001faf40d00090582"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[], 0x0) syz_open_dev$evdev(0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x36, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$hiddev(0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0) ioctl$HIDIOCGREPORT(r3, 0x400c4807, &(0x7f0000000000)={0x2}) syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x6, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0x12, 0x2, 0x7, 0x1, 0x2, 0x3, "", {{{0x9, 0x5, 0x1, 0x2, 0x10, 0x0, 0x8, 0x8}}}}}]}}]}}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001", @ANYRES16], 0x0) syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xa4, &(0x7f0000000440)={[{0x9f, 0x4e00, "0a1715ef08b4159b6c45dbf660934ae641aee0a84da6c4a961a304a39f842b8f7362ec648fe55dc0933d0f61dcb34382d37a58d9d3120e592fc818a03f64df21ca68ab2b1962a937bda4935d64f160c7c2447773c36d0e34e76138b4b2ad4edce4be1b00c9fcd3457c95554c4c04cca5f9459d3e0df4440ee72801c9338d0edcbca08682ef781b8e203740d9b8e8eeee27813486e812d7f8fb2961aa32cc04"}]}) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 11.319679762s ago: executing program 4 (id=1371): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x800, &(0x7f0000000500)=ANY=[@ANYBLOB='dmask=00000000000000000000004,iocharset=cp737,allow_utime=00000000000000000000006,dmask=00000000000000000000011,uid=', @ANYRESHEX, @ANYBLOB=',errors=remount-ro,allow_utime=00000000000\a00000000001,discard,discard,dmask=00000000000000000000002,smackfsfloor=iocharset,fowner>', @ANYRESDEC=0xee00, @ANYBLOB="01105b4e3678684895c48ddc295ff5b35ee2aea6f6d5aec39a4f7a46712f29977aca5268721559904b5123461e0d81b1d48d3ea4ca8b410a4b00e4b1b83018d0672589e8ff8145c2647a7097259c8fc053ce83f29a9941921a0e87ea41a9d39ce160792e9b2c1a"], 0x2, 0x1518, &(0x7f0000002280)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$vsock_stream(0x28, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mount(0x0, 0x0, &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x4b65, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x0, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, 0x0, &(0x7f0000000600)) 11.155718046s ago: executing program 1 (id=1372): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2218050, &(0x7f0000000140)=ANY=[], 0x1, 0x1522, &(0x7f00000002c0)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x4000147, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001868000000000000000000080000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001800000000000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00'}, 0x10) socket(0xa, 0x1, 0x0) renameat2(r0, &(0x7f0000000140)='./file0/file0\x00', r0, &(0x7f00000002c0)='./file1\x00', 0x0) 9.395154841s ago: executing program 2 (id=1385): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000000000100000000000000000000000000000000000000ff"]) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000008704"]) r3 = socket$packet(0x11, 0x2, 0x300) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) fcntl$setstatus(r5, 0x4, 0x42000) io_submit(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r5, &(0x7f0000000140)}]) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)=0x0) timer_settime(r6, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x5, 0x0, 0x0, &(0x7f0000048000), 0x5000000) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) 7.841519398s ago: executing program 0 (id=1377): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) userfaultfd(0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x1de) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000640)={&(0x7f0000000540), 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x2, 0x0, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8040}, 0x80) execve(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000080)=[&(0x7f00000002c0)='\\\\B\xc6+\xd5\xb9\x93L\\\x87\x84K\xb9!\x0eX =z\\\x14\xec*\xed\xa6u\xc4\x14=\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9=?i\x86Lpw\xba\xe1\v\x1a9G\a\xf9\x18\xe4\xf6f\xd6\fpfP\xcf\xee<\\C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1dC\xba2\xa6u\x14\x0ee\xef\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xae\xa0\"(\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95h\xd7PN\xf1\xe7\xe2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5bP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x01\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\xfd\x05\xee\xa0L\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\xa1w,\xc7\x15oA\xc5m\xbb\x15\xd1\x1e\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4moccU\xb5\\\xf5\x05\xec\xa7\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xacd\x9d=d\xae\xbf\xd7K\x9do)p\x00!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x19f\xd3\t\xf8\x96\'\x8c{\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\r\x98\a\x06\xe8\x80\xf3\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xca\xc2-\xfc\xe8\xc3qAt\b\x94\xee\x9e4\x85\xd0\xfe+\xc0\x17\xbfE\x15\xfdZ\xce\x954v\x8a\x05\xde\xaal\xf4\x82\xe2?\xabS\xe4\xe2\xe1\xd83\x17\xfe\xf8~\x04\xb6\x11\xc4K3\x82\x127\xf7\xc7\x06\x177\x8bWF\xb21\xce\xc7\x19|\x9f\xe87\x80\xbc\xac\xb6;\xcc\xafr\xbd\x90\xde9\x0e\xda\x05\x86\xf0i\xf4{\xbf\x82#\xfd9\xdc\xa7\x01\x00\x12\xea1K\xc9\xe1\xfdv#0U\xd2\t\x14\x10\xe6\xfc\xba\xa1\xac=\xfd\xd7\xa8\xc8\x18\x00\x00\x00\xc4w', &(0x7f00000020c0)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K9\"\xf1@\a\xea\xbb\xfe\x9cY\xfc\x80\x99\xb9!\x0eX czg\x14\xec*\xed\xa6u\xc4\x14*\xdb_\xe8\\\x96\n\xa6)\v\xf9 \xddb|\xe7\x14\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\xc2\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7\xf7\xff]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13mNP\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0=k\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xba\x87\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7*\xecl\xbfp\xc3x\xc3\xc1r\xbe7\xb5\xa3\xf11[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80=\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9oQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tr\xb4\xc4\x929\x01\xee\xe6\n\x8ba\xde\xdbsAzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44LB\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf)\xee\xab\xb3C\x92\x8e\x80\xb1\x01\x85\xb1v\xae*\xa7])n)+\xd9\xcf\xe9\x9ag\x8a*u\xe4e?\xf9\x93\x93u\xd2M\xfd\xa1\xc5\xff\xd9\x15-\xabH\x90\x04\xea\x88\"\xfe\v\x1d\xa5}H\xee\xc7\x94\xdb\x02\xf7\t5\x1e\xd6~R\x9e\xb5NV)\xa6\x1ff\xde\xbf\x97V\x87\v\x94\xb4\xb0\x7f3\xa3\x85c=\xb0\x8ab\x06\xfa\xe9\xb3\x1d\x0e0\xfe\xc7\xf9\xde\xd6\xe6\x14O\xc8\xff7\xd8\xed\xc6\xdf\x01\xb3\n8\xbf\xbe\x1e\v\x18\xd9\xb3+X4\xb5S\xe7\xf6oO;\xc5\xc8-\x9e\xb5\xbe\x97\xb4k\xd2n\xfa\xd1\x82\x16\xea\x93\xc7\xb3?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xb7\xf2K\xe9\xcf\xc6y\xb00\xe0\xa0\f\xef\x02\xd5 (S\xffhY\"\x83\x05M\x0f\v\xec0B\x1f\xd7\x80\xdaL\xa2Q\x8c\xde\x17* \xf5)tk\xb6\xb9\x86?\x1a\xff\xdc\xecP\xd1w1\xf4a\x00r\x06,\x86S\x11)\xf4\x16W\xd6\x86\x10\x02\x15mod\x854\xd4\'^\xb6\xe9f\xd6:\xfc5%\x16\xc5\xa5\xf1\x11k\xdd{\xaai\x8a\xde\xa6\x18,H\xd8\xe5\xf5g\xe7U\\(\x01\xc5\xde\x1d\x8acHf\x86`9qV|=\xbb\xd1\x95\x0f\x86\xffa\xb1\xdb\x82l\xc3\xcf\x88\xeeJ\xda\x8b0f\xac\xc2n\xd1\')\xf2\xaf\xc0\x06\x01\xb4b\xef\xa8!\xf9\n\xf7{C\xdc`h\b6>\x171\x16\x89\xa8\xe9OC\x7f\xb1\x1c\xd4\xd5\xa7\x7f\xfd\xa8Y\xf0s_\xfb\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00.\xeb\x1a\x18\xf1h\x04\xa8\xe8\x92\xe6\xbc\xe1O\xcf', &(0x7f0000001e80)='gcB\xc6+[;\x88\xfe\x97B*[\a\x03\x96l\x1e\b\xd9\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX c\x03\x00\x00\x00\x00\x00\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\n\xa6)\xd9\x10#\xf5b|i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfE\xd1\x1f\x9b\x1d2mRQ\xea\x90\xa0m#\xa4\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\x00\x00Jh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7\x8d\xf1\xe7\xe2\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8f_\xda8l\xc8\xa2\xb0\xd1\fg\x00\x00\x00\x00\x00\x00\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c1\xf1\xe7m\xfd\x00\x00\x00\x00\xe4C\"\xba\xd5\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&\x9c\xbd\xbb\x90\x17$\x9e\\\xee\xc6\x88?)\r@e*\"_^xb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occU\xb5\\\xf5\x05\xec\xa3\x98\f1\x89\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6zG!3\xd7\x05\xf0Xk\xb7vo?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\x9f\xa1\xda@\xc7-\x93\xbc4\xc0\xfe\xf6\xf6\xc4\xc3ZT>R\x11\xba\xf9\x17\xfd\x98\x06\x06\xe8\x80\xef\xdf\x87\x1f\xfd\xb8\x99\x9c\x19\xb4\xac\xb0\x11i\xcc\xb9BG\x1ac\xbc\xd9&\xb6\xd9\x04\x03\xc6\xebf\x84\xe5\xfe[\xe7\xe6\xb3\xe9\xca\xe7\xc1\xa7\x9aO\xc1\t\x1c\xeb\xfbl\xa4\x80KQG\x80\xcd\xdd\t\x91\xdb}\xb1\xde\xf9\xbe=\x8b\xde\xf2G\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf7\xa9\x99t\x87 \x9f\x03}\x8d\x1b\x14\x1eU.r\xe1\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, &(0x7f0000000a00)='gcB\xc6+\xbf\xcc_\x81 \xd5\xb9\x93L9\x87\x84K\xb9!\x0eX cz\xb8\x14\xec*\xed\xa6u\xc4\x14*\x82\xc3\x90\xf9\r?i\x86Lpw\xba\xe1\v\x1a9G\x04\fpfP\xcf\xee<:C\x1e\\\x1f&\xaf\xea?\x91\a\xea\x8d\x05\x83aJ\xf0v\xc0q\x84\x93il\v\x03\b\xadT\a\x14\xd7\xd5u\x84\x82\xb2\xd4(\x1d\x04\xf2\v\xe9\x8a\xdfU\xd1\x1f\x9b\x1d2mRQ\xea\x90\xe6\\h\\\x1dy\x9d\xe9\xfa\x06\xa27\x9d;\xe4\xb4\x86\xa7&\xa9c6\x1b\x8d\xa6$\x82\x1b\x9a\x82\xc0o/\x8c\x97\xb9BJh\x9f\xb2\"\x95j\xd7PN\x89\x7f\xc8AB\xc7}T\xbe\x8aO\x9d\x94\x8d\xf1\xe7\xc1\xad\xdd\xc2\xb7\xe8Ac*v\xf7\x16\x8fe\xef\x84\xf5k\xa9\xeb\xebt\xc3\xf1f\xca\x04*\xec\xfa\xe5b\xeb\xb4\x99\xefSv\x82\xe2\xe3\x02)sP%Z\xad\x83\xda\xbe2\xa9\xf2\x04\xda\nU\x84\x82\xe3E\xc1\xd8L\xb1r\xb0\xdaH\xf2{\xf6~\x0f\xb9\xdd.\x06W\xd7\x1dG<\x1e\f2c\xf4\xa0d\x11\x88\xee\xcc\x18(\rap\x98?\xb1$\xe9\xe9+\xa6\xfb\xb1\xc61\xf1\xe7m\x91]]\xb26\xbfA\x86\f\xda\fi\xc8\xefl&*\"_^5\xd1 H\x17\xf0\xa7\x83}\x92W\xeb\xe5\xa3\xcc\a\x10dxb\xc2\x13m[P\xac]\xc2\xc1\xa8\x1df_\xcax\xbd\xf4m\x1e\x18occQ\xb6\\\xf5\xf3\xeb\xa3\x98\f1\x8b\x99\xf0P\x8e\x1b\xe3\x9e\xb9\x0f\xf9\xb0\xadd\x9d=d\x94\xec\xceQx\xdb\xf6z?1H\x86\x192\xb2&\xa5\x9d\xd7\xbc\x85\a\xfer\x14\x0e\xd9=\xa6\xa1\xda@\xc7-\x93\xbc4.C\f\x193\x03cz>R\x11\xba\xf9\x17\r\x98\ap\xda-\xb0R\t\x93.r/\xce\xa4\rK\xcb\x1aO\x03z$\xbeYvYn\xddI\xe7\x13\x8f\x15\xefL\xba`\x9d\xea\xed\xf0)s\x12r\x9b\xf2&\xf2-\xc6\xec\x96\x19\xc9\xd7\xda\x06\xad#\x18\xef+\xcdp\x95\xef\xd9\xb9s\x8b\xf3\x8b\x88<\xa0\xa3\xad\x8c\xaf&iMM\xc5>\xa7v\x17\xdf \xca\x86#\xa7[`\xcb7z\xa0P\xd5p\xe9\xddC\xc0\x80M\xd9y\x01\x1c\xe7\x1cdN\xd5x\x89\xc9\xc0\xc4{\x01\xa6o\x9ceZ\xe1\xfa0?\x94\x1f\x9aQ\xb2\xea\br\xfb\xdc\'\xb8\xdbh\x02|\xacW\xd5\xf0Lf\x1e\x17A@\x06\x89\xadg+$/V\r\xc9o\xda3C\xa0\x06\xd4^\x8bQ=k\xa0\xa6\\\x00\x99\x94\x10dy\x7f\xd1\xd2\xe36\xa1\xd3\xb1o\x7f0:}\xad\xd04\x96\b\x80/\x9a\xfc\a\'\x83\xb8\xcd\xb1\xf5#\tzG\xe86\xfe\x83\x1d\xb3K2\xf0\x8f\xde\x85\x00M&\x00\x00O\x86\xec2/\xea\xe6$(L\x85\xf8Y\xcf,\xa3\x87^\xe1\xd8F\xe4AJ\xaa\x1f\xe9\xff?\x9aF\x97M\x80\xe9LR\xdc\x9f~\xce\xb5\xef\x14M\f#>O\xb44L`\xc6a\x82\xc5\x107\xae\xdb\v\xf7\xc4k\xab\xf8:\x1fj\xa2vf\xab', 0x0]) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440052d7290000104fcd4f000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b0001006970366772650000140005800800040000000000060010004e200000"], 0x44}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xffffffffffffff2a) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000000)="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", 0xfc) 7.623913688s ago: executing program 1 (id=1379): r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000000c0)={0x58, r1, 0x801, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac0b}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "cabee339084eeef16f162471f4"}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5}]}]}, 0x58}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_SET_SERVICE(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, 0x0, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x80}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6000a000}, 0x2000c090) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="01000200000001000000090000007c00038008000100020000000800040002000000060007004e200000080003000100000014000600fe8800000000000000000000000000011400027b480000000000006f5f62726964676500140002"], 0x90}}, 0x0) socket(0x200000100000011, 0x803, 0x0) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x16, 0x0, &(0x7f00000000c0)=0x55) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {0x7a}, [{0x78, 0x1, [@m_police={0x74, 0x1, 0x0, 0x0, {{0xb}, {0x48, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8, 0x5, 0x20000000}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x8c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r9, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x3c, 0x453, 0x4, 0x70bd2b, 0x25dfdbfc, "8a363301fa5c9b866d21f6694e9bed8ac9cd8bf44506f07e3816a72ad48e4645df4050372bbc6bdcd6", [""]}, 0x3c}}, 0x20000000) 7.623560468s ago: executing program 2 (id=1380): socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r0, 0x65, 0x1, 0xffffffffffffffff, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB='\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) accept(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x220002, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001f00), 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 7.337672033s ago: executing program 3 (id=1381): syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x1, 0x21d, &(0x7f0000000b40)="$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") r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r5) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) 6.175404386s ago: executing program 3 (id=1382): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002300), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',allow_other'], 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="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"/306], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/fscaps', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00') syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x39}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2000, &(0x7f000003d000/0x2000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) 6.099801682s ago: executing program 2 (id=1383): r0 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$eJzs3ctrXGUbAPDnTG5N2u9LPvhA6yogaKB0YmpsFVxUXIhgoaBr2zCZhjaTTMlMShMCbRHBjaDFhaCb7gQvdefWy1b/CxfSUmwajLiQkTOZaSfNTDppbo35/eC07zvnTJ73OZf3vDPnMCeAfWsw/ScTcTgiPkoi+muvJxHRVS11RpxcWW55cSGXTklUKm//nlSXWVpcyEXDe1IHa5WnI+LH9yOOZNbGLc3NT44VCvmZWn24PHVxuDQ3f/T81NhEfiI/fXxkdPTYiZdOHN+6XP/4Zf7Q7Y/feP6bk3+999TND39K4mQcqs1rzGOrDMZgbZ10patwlde3OtguS9aZd2AH28HGpIdmx8pRHoejPzqqpRZ6d7JlAMB2uRIRFQBgn0mc/wFgn6l/D7C0uJCrT+t8XbDOxYG96c5rKxeolmrXNpfv599Zu2Z3oHodtG8pWZV8EhEDWxB/MCI+/+7dr9Iptuk6JEAzV69FxNmBwbX9f7LmnoWNeqGNZQYfqjf0f92bDA88wvfp+OflZuO/zP3xTzQZ//Q0OXYfxzrHf03m1haEaSkd/73acG/bckP+NQMdtdp/qmO+ruTc+UI+7dv+GxFD0dWT1kfWiTF07+97reY1jv/uXr+Q9nm5u9cvfPlgicytzp7V7xkfK49tJudGd65FPNPZLP96/79yD1uz8e/pNmO8+coHn7Wal+af5luf0vir899elRsRzzXd/g/uaEvWvT9xuLo7DNd3iia+/fXTvlbxG7d/OqXx658FdkK6/fvWz38gabxfs7TxGD/f6P+h1bxH5998/+9O3qmW64OEy2Pl8sxIRHfy1trXjz14b71eXz7Nf+jZ7qbHf73/a7b/p58Jz7aZf+fta18/fv7bK81/fEPbf+OFm8uTHa3it7f9R6ulodor7fR/7TZwM+sOAAAAAAAAAAAAAAAAAAAAAAAAANqViYhDkWSy98uZTDa78gzv/0dfplAslY+cK85Oj0f1WdkD0ZWp/9Rlf8PvoY7Ufg+/Xj/2UP3FiPhfRHzS01utZ3PFwvhuJw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANQdbPP8/9VvPbrcOANg2B3a7AQDAjnP+B4D9Z2Pn/95tawcAsHN8/geA/cf5HwD2H+d/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAttnpU6fSqfLn4kIurY9fmpudLF46Op4vTWanZnPZXHHmYnaiWJwo5LO54lTLP3R15b9CsXhxNKZnLw+X86XycGlu/sxUcXa6fOb81NhE/ky+a8cyAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2lebmJ8cKhfzMnilUKpUrT0Az/g2FjtpO8KS0Z88VMptYdV/sduMfUWjsJXp3p3MCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2AP+CQAA//+qiiUU") pwritev2(r0, &(0x7f0000002740)=[{0x0}, {0x0}, {0x0}, {0x0}], 0x4, 0x0, 0x0, 0x0) getgid() open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1080, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00001f0000), 0x1000002, 0x0) r2 = dup(r1) r3 = open(&(0x7f0000000100)='./bus\x00', 0x40542, 0x0) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) ftruncate(r3, 0xee72) sendfile(r2, r3, 0x0, 0x8000fffffffe) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = dup3(r2, r4, 0x0) bpf$BPF_LINK_UPDATE(0xf, &(0x7f0000000600), 0x10) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000040)=0x1b) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000000)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x0, 0x7, 0x8, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6.098523082s ago: executing program 0 (id=1394): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x400103, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x5) getdents(0xffffffffffffffff, &(0x7f00000001c0)=""/97, 0x61) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) ioctl$TCSETS(r0, 0x8926, &(0x7f00000000c0)={0x7f, 0x0, 0x0, 0x0, 0x0, "bb5dee4cbd49ae22ae0200"}) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000180)={0x3ff, 0x9, 0x81, 0x0, 0xe, "a7aea4ce463b6487"}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000400)=ANY=[@ANYBLOB="18000000c0c6cdb14afb050929aa46cad276634fc845b822a411ded2661da43209407bcc45dcdd81c8a0d96c3f988d0e6e9b323c071a8d6a069c8f86017dcaa282c11e30bc650201fbe1c2a5c794d28a58d7d5817a81f4b7b9fb5734502278789e003843c803f71c3ee6e2c17ce3e55ea169d87b2d3eeba24928c733bca68c0e8c325b71b6ead15b36e9aca3c7f964d1aa8f189baac2cce894497937e50c324fcce3f454af35c6c8f6cd19278b1bb8d239f4d18ff933ba4b267f09423f615d44008c9a422b22745d273743811f7433042a73db3767db60", @ANYRES16=r2, @ANYBLOB="090200000000000000000300000004000780"], 0x18}}, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000100)) syz_open_pts(r0, 0x52000) r3 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8993, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000080)}) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0x80) r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000300), 0x8502, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, 0x0, 0x0) readv(r5, &(0x7f0000000280)=[{&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000500)=""/199, 0xc7}], 0x2) 5.931785757s ago: executing program 1 (id=1384): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000001480)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@map_normal}, {@nocompress}, {@map_off}, {@overriderock}, {@check_relaxed}, {@map_off}, {@session={'session', 0x3d, 0x3e}}, {@hide}, {}, {@overriderock}, {@overriderock}, {@unhide}, {@cruft}, {@block={'block', 0x3d, 0x200}}]}, 0x2, 0x9e8, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x801c582d, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) 5.602401666s ago: executing program 0 (id=1386): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xeb, 0x8, 0x0, 0x0}}, 0x10) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xa, 0x4, 0x6, 0xff, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000080), 0x619, r1}, 0x38) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f00000000c0)={0x1f, 0x2}, 0x6) gettid() bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) mkdirat(0xffffffffffffffff, 0x0, 0x28) mkdir(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='fib_table_lookup\x00'}, 0x10) 5.601976446s ago: executing program 4 (id=1387): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000c40)={r5, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x100) 4.505165753s ago: executing program 1 (id=1388): socket$nl_route(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, 0x0) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000300)={{0x3, @bcast}, [@netrom, @default, @remote, @bcast, @remote, @bcast, @rose, @rose]}, &(0x7f0000000380)=0x48, 0x40000) getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f00000003c0)=0x9b, &(0x7f0000000480)=0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mq_open(0x0, 0x2, 0x80, &(0x7f0000000180)={0x1, 0x80000000001, 0x800000000000}) r4 = getpid() mq_notify(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, @tid=r4}) r5 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000280)={r5, r5, r5}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 4.428848939s ago: executing program 3 (id=1389): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000009"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r6, 0x0, 0x0, 0xc840, 0x0, 0x0) connect$inet(r6, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x0, 0x32}, 0x0, @in=@remote}}, 0xe8) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x1}, 0x10) sendmmsg(r6, &(0x7f0000000180), 0x400000000000354, 0x0) close(r6) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x24}, 0x10000}, 0x1c) splice(r2, 0x0, r0, 0x0, 0x7f, 0x0) 4.374845894s ago: executing program 4 (id=1390): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7}) r3 = getpid() sched_setscheduler(r3, 0x1, 0x0) fcntl$lock(r2, 0x6, &(0x7f0000000180)={0x0, 0x0, 0xffffffffffffffff, 0x2, r3}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x6, &(0x7f00000000c0)={0x1, 0x0, 0x200001, 0x2}) r5 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') pread64(r5, &(0x7f0000000300)=""/246, 0xf6, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000100)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x280c410, &(0x7f0000002140)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESOCT, @ANYRES16=r1], 0xff, 0xa1b, &(0x7f0000001540)="$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") r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) sigaltstack(&(0x7f0000001f00)={0x0, 0x80000002}, 0x0) sigaltstack(&(0x7f00000022c0)={0x0, 0x80000002}, &(0x7f0000003300)={0x0}) sync() write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x38, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x1}]}, @NL80211_ATTR_SCAN_SSIDS={0x10, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}]}]}, 0x38}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x6, 0x4, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000, @void, @value}, 0x90) 3.068968719s ago: executing program 1 (id=1391): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x1, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea899e2b7fb0a0110d1000000000900", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c5512654000"}}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DEST(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="170c000000000000000004000000090001800600010000000000080005000000000093452858e3fefcb430c1807658b16816c7be41bf79a6aec2498a2b27a6ed4ef1b376e00d2a837d610e060c99bf6c3ae26d5fd2"], 0x28}}, 0x0) 3.018288624s ago: executing program 3 (id=1392): r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0xa2602, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80, &(0x7f0000000700)={[{@oldalloc}, {@min_batch_time}, {@min_batch_time={'min_batch_time', 0x3d, 0x8e}}, {@errors_remount}, {@jqfmt_vfsv0}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000000}}, {@debug}, {@nombcache}, {@data_err_abort}, {@data_writeback}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@discard}], [], 0x2c}, 0x0, 0x4bb, &(0x7f0000000140)="$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") open(&(0x7f00000000c0)='./file0\x00', 0x101200, 0x91) mount(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000100)='./file0\x00') mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000) writev(r2, &(0x7f0000000140)=[{&(0x7f0000000040)="0dbb", 0x2}], 0x1) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) getdents64(r4, &(0x7f0000000f80)=""/4096, 0x1000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x180000) 2.087097106s ago: executing program 2 (id=1393): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[], 0x60}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0xffffffffffffff84}, "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", "cfb220c7d481332f3f1f8079dfe27e23185fd67a407358db7892789f96b7fa9b14daa48617a10d8a91b820ecbaa470ec0bb1f3cbce7f70ec70b19a4cad082229c2788f8611d7dc306d9a45761a97828c36ed87ebde5d4a3e1609c1422a8ae2f7cca428ebdb0dd38b90b9598a353b18a600bf35a369e6e3e5abb0a1c5c0c0e48e014e7ef1b7d768b3c5657f1adfbb7ff2985082b16c99eb83ec3660990dcf1106efa6b7f8a4798fec811c2c85faec0235c83b7093b3d02367421abc40a554e0b0d7fc1bcaece4222c594f8d20e368fe625ca433c75486fe5c94103cd17291349ee12b877602936688666f82ecd8f4f83d50bb1650e08b96cd25ad147c4c956c98649806a3736d072c8d97c6e3a46a7c18535df8d828b86662400d8e9cc861fa1dd5dc193892d3168396c499e07b279fb76c7e289f2fd955691363bc1de74536dc571817615c88b0d594a136966c129e424ccb7ef1c7c7461eac7ca5f03d72ea4c9c3d1156ee4cb1bb70e097357588b5c49f6716bbae1bd118104b42786f09a3b9f7cb80f383cadfd0c462096ff2bb637b7cf79764b6a4b7ffc5d87c1f063fb48e7f08ad5af534c70079f12f28e8921abbd4280801cdf6101ea494768b1274afd0eea5939843d56022a83590920fe446d52dfe699c33977d5592dbf7e0e236b8175d7faae06e0c50f7402174023ce4b996564e945c416fa823f2f9c3213ac50b20bd1fd55bb8d9fe70ee31ea2f404ae0fcbf857bebcc9196c8c622059fea2e248e4058905b69fb98be312d3193ea1d8ff653173e8c2371371b77a5bea45b3cd6fba19b6336f94ec04c8f86d24e9ca959874577d7ca0baf3c4ff30b554bc3ccc06df46d925373fbf7863e2cf684d3bc9603ab72b851ca4728294de87f2dec6f23ca9e43ed2e5cbba662d13137fc1ce0f6ae6aeb974f72f4b750825fafb67715e425f40c7da83b92d4249a0a4e96b789cceb7b07f38cb83f72dd093a345ab3cb8ae760fc14e40ea182a0d7fe1facc62a1ab0902349fd7e27bb0cd349fb5053f4734823abf020739b4b43bb11f5d69b61295068df31177959903c2ea1bb82d24eeaa93d0d4738d5d15b2a401e7ebe0d3cfbd45b2db2882cdb41408aaa718f8320fbb7f9da4f68d0eebeef175442e807e9908132731fe5e268582dcf6dffa4251ebb7121db8e412089fa9d8af9919799547a26b6b8eb44c28f1ce5f9a3021fe30841be204c1b4b3813dccae6baeef9b53fe413cbec46bb0cd95d3793cdc9bfe6cdd96ce0c4aa4a25e1cbbeeee6c9fa558b279048c7e31d07b125bac68d4e1f4253bd4dc7824cf3d722c94cf2b8f61bc8155731f072fd447082b181a13ffb8c08a1d568298c5de2d969fae2bea070a9e2688f294e76b8c200dfb993ec19778eb56ae3127c1116ccc85ef8806fdcb9ee0cb66ff03fbb0fa6c52b9b101b3830fc1650efa859163a264b4059092e5dc9a415ec09bfd1460f142fe5ef00beb6aa9032bd0de97aefc6f65e8cfeea761b3d8174caf528b6627682ff4d4450cb0f34251fc000ed01dd538ef13260984f44703b89dfb511bfb538d0b1c8aded964e1bcc5ca57437468b14a31ec0000a17e4d24369c40500449c37e7dccedba3eceb59d827dace246b5c48afb6a5988e64c560b3dc76c32d831f51cdbc5cfc4364ac8b25372b87c92bacfedc6bc8feb44098dbebc89cda03c59e4c58a31372bd574704b9e788834b9f83c6703f6709efad97c4ce499ea580dae1de282a019247cb3dce5c1906322e6d3ca5157ea6428bc42416936fac194efe136089c07faf7adf1e923003f1dc63fcbc634b389a4f351a6acee785e23c6bb04ca2f265be1e634362b87c6f9fd369bbe62a1db6b286c7ffde6370bb4d6e9e0cc3ec451e1a99d134726c9075e71319d3a683e91e4b900061c0e6d086481069cd32f4cde7816f8e3a0ac6428a7488f31f06ee0da10df3ed0c150d29085879d064f914407f60018bb588735663647bfeda930407d69abef3f72fd461c2b85b00988b412a180fd267fc646a86d297e7e40912607157b6fa873df6442579b1523d8117f0c06c87adf75843b8bff30a5bfb4fe1e9846b7fdd58774641baf9cc9c4e38e53ed24a9d9e9dbc7657aa9b220a8545852b0409f5c0812e953823e841967bf55059acc7a4600818134359e72cfae0d04a0738ac8acca133d6395a455b22cdd6f901d4cdea1cf17415f7d7895a4b65f80d2f7c5c60a0dc04b40c9ae5ffc922e074a82afd704673e1766d19db9f60eab0238fb4a3169a08aded607847e5d752d4e24c4914b95bac3892bcfc2076f16a7f07583f0d418b9dec03afdb2e93335a392e1b1ef2910eb2a4b6a63fe61641f3c02bef73cd7e4a77a6f30ae821598c3160511603541bea89022b54f321c2a55cdeeb19335d78a821ab6ca0f36588a9a79a41e2123905a491d658c2a1caeee998c995bb0f816c92c5dc2b862183f80b9f9786c9c5524723c944d11f6894c7f008ab8194f577e22c03631d2a33205f508ea49653e7600639242dbaba704f700ac227f32dc575c559a0a1f4fe0cf6c22fbf7e1ca2ab4b1e4724e8379021e3c9a7c1509c6a413bd7d9c98938e440762eda2546d636597defa86c1ad31126a1182d365f858927d140fb0a97f80adcc5f4ed5efe11ac503453917a263f1d64692348d30f382e85e464ef7616067a42df5de1a1b622fabefe2ca4ceffa4801f7a02fdef40644cd1d079590d900727628d54b44db7ac700d8d664f7eea12837fcf347360d8e43a354fe51b4c49e8fcda3c322b738ed2b800b5cc06e22c72af2a67ee7bc8ae894e841f2cf2b0a7e381caf944bf4e91ded63b6f82f7474e4f81e986fff7e5339b8e9f60103a1af81833e120f0c88893ecabac044a4a2867cda4fdcb084459a00507aa9e5a8e761a72df3322a1ae8cd918b4994c23bdb1e459b4f21651bd7fa067a00e2a2877bf6b29f289ed8018e0a78f6fb4ded9749640e0e37f6381b320ab72da404f3d70d60152f6fa6738932387b83250cb3148141edb52f109bfd4bda8054959db01f4c550609a63c08cf01ecd110cfc6f0055638c0dde039d2ac2daafe59e561f9f08a8830c3f661e4325de63e98f4a4216ec3b83fd200201ed3f647147611424286ffc6c4a8aca64a6874743242d4feeaa9153de06e51c512d9cab7ae712c6424069f3e5db4ddebe9b48b5f6caa741162edf97674d2368e03a387f798151a4b9b9fa9e3a5838a343133158364a9fe3bb4b9a3c464c0c54a4c64ca774ad200925ac6bf59508c10a8574afde9b821741af43ec64cedc13aa220b39772195283506dfe899dd6a7b37eb21f154056a2df3564ef2bb918a928651de88c3613b84e7960bddd7b46b1304deb30f57b6fe5a3b4788629e91bcc2456a72fabb16b47da71624d2e9081de748b3387f52da4bb094782326dcfde0827e2d674e41bb375247d349cade9c704e5431785009b0e53f1b45c70b237c9432e07e4c7a8464ed11608a3d2184338dd9e6f6ef4b3d751e979667b6a3953c89aff4eead7a978071a912b3de21a85a5849c57933cf53cd74a610f3e60f699766fbc7e0bb8a891a429c77bb6f3b6f9f8eb0b1bd9588ef2ce98fdf0a0838e4b0bed807d8b673093c717feec8d697e32542274887d039db7a2daed5d52c8e9767443229f8003c5d67e907376ea2f393484fa70deee159cb56f8d097b8fe2736e95f540137e20725f0940a8d049068ead4c46bb3771a671bb00de88931e03445a55868de0c220db05cbda9f996d5fe7c1070efe5e718fed4d4cb4ecacad3d6b643bc0ffe9a71b720ba7b5adbbdefe29106ef6a6ffe4547f5d02bec312147df0abe80efb2d5e598fc7c8b268e58b59e0d75728e9a18126f013c963ddc92d251405f857fe3a5cbacf443be7772975b7bf4f6d7ed6f80dfcc47a88c6d19120942adb5385be6ef3c0d7e396bcac5affc8f9276d6cd1a0b069aed72a98cde8ea7aabe6cc091b19efcfaf9368dfeb3087a05a42e3b893dae5ffeb72e6ac06e995a2a75ea0b5f7876247bb4c38cf3f0153f1f7473b522f1c440b632270e2b1d654d3a5ae16cb788482760d34ca79c8951b29c628e21029715683a3e6f8f77c5d89ecdae37e0190f79c4c1dbc9d0160e359cd6c94d6662ed53bb01a83374ff593c823acc59241b11f020902069fc0054a9b26cb320bef4fb1f8cc5bd8ae76eb029afab731b9876bc4e8708a8315512823cff1f9375d284ce66e53d4efad6c76d17bb532fc938b8f80c13ce86b5ba3e540164bc5a5d47cd321c241d8740f453ef95bd3878d578561ad6ce20877ffbd44062dce8df1d048d8d5e4045be647886108cbb1f0b26a8b74b66858afedb830a161bb02bde4c46a688a0ea3a7018ce24666aab0f422ede2f78ea29f77e28d87c744cba0285ce33d0d9ac45774829699de6d725a9b6db6e7d03ad4ec9d075c386e68ca0bcd9e9911d741ed0168cbddb87a7918a964d206629da4e887277b0ef7d3f9c7082f3f15f29a0dfb39f3b0877a5ec3ac4343e0d808f5aee8f1869923aab6dfc3016821c013109f34aece6183994b853d0e9561375c02cdd26b1b55194757341929a8038864cedd6b5a3b8b51ade44637044c4ebddb190f173969a0ca4cf5d42153763a0b91da0110ae7a25204850927d81b00176d4568a3d444d8029bd010df784e3f673fe855601ec4f1b26b2df58841e6a65f0db66373f63cc14a8b07dfc52ac9957eb542d05ed687c79519609de96df18b63cb294b534ddf7d2e8f41bcc1e5a006191c4db057b6709f0a96f18e7e8f67b8be2a19c015b9c4b0b3f42e4de366b71f8da8888809473c3c7a02a1158e375f29997a43bc7118ca4d1abb8f8f21972fc589aaa3d73a4d40a1e1705e169ac6e56cff50d89fc45b6863c8fc67bb2b5939a7f33072539ba4c24077be5711ba368bf7efd4897931531d388eb5c2e56bef337777150dd59518652145c9594e110e41d2615196c6b197916c88cc2814e13a3a922b4ecb044bf31cc90e0bfe0ce07de29188bbcb0ec1a12b509f52582fbb948c3cbe0c6964f46991cec0704bfac08aec6ad8ddfc36dc68c7f547c5ee6af4a8d55c79e3dc1c49b045379811f81e9a185a92cd37ae4ee32c5d3c82d36d6202a6c84fd231fe467071d42072827fd77afa5d757e6f37247f783ef09bdfd7536b666e84bc4bb878005b7829293a04ba090272dec844f4ef0e934617c08518bdc6b915ac6f3f03e4a6ab88e21c3f21f93b31d95ea3b9228e0031cb69795de5abd19c4cb4a0cf2984e53ca391cc66e33ee0d510151670331fa264753704fea5e4b1760f74890c49a74a47e0da13155c5470013d53dea0f05b5e088f1511c209f5be940232318af2757951d399e32eb862d915784713baa8ba93645caf04ba78fa3cf600ff92b9c5be58ad87438a340bac00a5ea9fb17e39478ba61fe36335e48d8c5a0b25f024cbd2ec7f217d0f260951da396dc13a2a74cd90df4b52db686e3b34d27cfa4cebd7bf59cbcfaf4007dc943a1da6e0bd1799a21ab449d7bb42935e50c839c5b567c59742436af15bc8d46095520dcd9273ae2b6f3c1cc2b4311ac9e5d297f0940b1552c5955adb302022022bb7457978998b56328629b7725dfbe3dedb37f37af0697a4471d1d6ff6bec633a38540adeba903f3eaaec5785fbb3c6a598f49dbd9ff93c67dea1ef39a614331b119fa8efccc8bac01595fb95a2a57eec9fc6c6fe82782aa89ea971866fd9a3bca4010182092ab6d1e2b49b964be9e3bb13bd6b77850e435f55a5d46e5bcb3330c7edefd31c33f61275e516"}) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/22], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x8000, 0xffff, 0x2}, {0x0, 0x9}, {0x3}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003500)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3f}, 0x1c, &(0x7f0000001540)=[{&(0x7f00000001c0)='6', 0x1}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f0000000240)={r7, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000080)={r7, 0x0, 0x4}, 0x8) 2.084996066s ago: executing program 1 (id=1395): r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000001580), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f0000001bc0)=@s={0x5, @generic}) syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") open(&(0x7f00009e1000)='./file0\x00', 0xa060, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f00000000c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x7ab78c4493c5a29b}}, 0x50) chmod(&(0x7f0000000000)='./file0\x00', 0x0) creat(&(0x7f0000000180)='./file0\x00', 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2b442, 0x0) ftruncate(r4, 0x4008c0d) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6) syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000d0918108ac051582588f0000000109022d00010000000009040000030b08000009058d67c8002a000009050502000000000009058b6e"], 0x0) write(r4, &(0x7f0000000200)="c8", 0x1) 1.8202358s ago: executing program 0 (id=1396): unshare(0x60600) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = landlock_create_ruleset(&(0x7f0000000980)={0x0, 0x5}, 0x10, 0x0) read(r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.current\x00', 0x275a, 0x0) r2 = socket$kcm(0x15, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x80, 0x0}, 0x488c4) ioctl$EXT4_IOC_GROUP_ADD(r1, 0xc080661a, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x4000000, 0x1}) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f0000000040)={&(0x7f0000001380)={{@my=0x0, 0xffffffa0}, {@hyper, 0x80}, 0x400, "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"}, 0x418, 0x7f}) r3 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) write$binfmt_misc(r2, &(0x7f0000001900)=ANY=[@ANYBLOB="73397a30a2c2e3226b656dc1cfe0c66ea3045418fcd6be605098d27e2d7cace70377b1bfc2158dbdd5d268a2304d344decaabcf0fb44988b2535f670820130625d2507833152feb2df4d32984e67a8ac174d398e43d459f0d3177b9f065b8817a7868eec8327cdbf9e90feca8f780391aeebff4225d8ad9a0dffcddc4117597c94be3aa1121c1700000000000000f4bfd9d5c934d70411f97c255b9fd7a6892cc9239265df7e32b55508d4569775028093e189f9e270977b0c885cf004"], 0x7e) ioctl$VIDIOC_SUBSCRIBE_EVENT(r3, 0x4020565a, &(0x7f0000000140)={0x3, 0x98f90b, 0x3}) r4 = add_key$keyring(&(0x7f00000018c0), &(0x7f0000001800)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) r5 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, r4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000f5bdd63a3b3864", @ANYRES16=r0, @ANYRESDEC], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000002c0)='f2fs_lookup_end\x00', r6}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, 0x0, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r3, 0x4020565b, &(0x7f0000000180)) 1.721690969s ago: executing program 3 (id=1397): socket$nl_generic(0x10, 0x3, 0x10) pipe2$watch_queue(&(0x7f0000000080), 0x80) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xffff) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sg(&(0x7f0000000000), 0x2, 0x2) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) mprotect(&(0x7f000060d000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x14) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0'}, 0xf000) 1.638475646s ago: executing program 4 (id=1398): socket$netlink(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) madvise(&(0x7f000058f000/0x3000)=nil, 0x3000, 0xd) madvise(&(0x7f0000495000/0x400000)=nil, 0x400000, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 00004093'], 0x2a, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key$user(&(0x7f0000000040), &(0x7f0000000000), &(0x7f00000002c0)='s', 0x1, 0xfffffffffffffffe) execve(0x0, 0x0, 0x0) keyctl$read(0xb, r1, &(0x7f0000000240)=""/112, 0x349b7f55) membarrier(0x40, 0x0) membarrier(0x20, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000040), 0x0, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x541c, &(0x7f0000000000)) ioctl$KVM_CHECK_EXTENSION(r2, 0xae03, 0x2d) 1.391937988s ago: executing program 0 (id=1399): prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) preadv(r0, 0x0, 0x0, 0x7fd, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@setneightbl={0x14, 0x43, 0x1, 0x1, 0x0, {0xa}}, 0x14}}, 0x0) request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0x0) request_key(&(0x7f00000002c0)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000500)='-!\xc2(&^}\x00', 0xfffffffffffffff8) syz_open_procfs(0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0x0, 0x0, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x41, 0x0, &(0x7f00000000c0)) request_key(&(0x7f0000000180)='rxrpc_s\x00', 0x0, 0x0, 0x0) request_key(&(0x7f0000000540)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000280)='\xf3yz', 0x0) 579.803589ms ago: executing program 0 (id=1400): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SOUND_MIXER_READ_DEVMASK(r4, 0xc0044dff, &(0x7f0000001480)) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@map_normal}, {@nocompress}, {@map_off}, {@overriderock}, {@check_relaxed}, {@map_off}, {@session={'session', 0x3d, 0x3e}}, {@hide}, {}, {@overriderock}, {@overriderock}, {@unhide}, {@cruft}, {@block={'block', 0x3d, 0x200}}]}, 0x2, 0x9e8, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x801c582d, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) 514.087575ms ago: executing program 2 (id=1401): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) syz_open_dev$sndctrl(0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$UHID_CREATE2(0xffffffffffffffff, 0x0, 0x118) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000100)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0}]}, &(0x7f0000000180)=0x10) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r6, 0x84, 0x70, &(0x7f0000000c40)={r5, @in={{0x2, 0x0, @multicast2}}}, &(0x7f0000000080)=0x100) 512.520165ms ago: executing program 4 (id=1402): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000202070250000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sock_addr, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003000)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000001500)={'bridge_slave_1\x00', {0x2, 0x4e23, @rand_addr=0x64010100}}) syz_emit_ethernet(0x1f, &(0x7f0000000dc0)={@local, @random="7d321a25982f", @void, {@llc_tr={0x11, {@snap={0xaa, 0x0, 'c', "e28a63", 0x0, "8facd075b14746fcac"}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=ANY=[@ANYBLOB="8c0000001000714400"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000080004005c"], 0x8c}}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0xe) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x0, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x1a}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000180), 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) syz_emit_ethernet(0xae, &(0x7f00000005c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60f4adf70038290000000000000000000000000000000000ff020000000000000000000000000001"], 0x0) 123.957869ms ago: executing program 3 (id=1404): syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) gettid() r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) getpid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) close(r1) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)={0x44, r5, 0xb7a006d1969b963b, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x26, 0x33, @probe_request={{{}, {}, @device_b, @device_b}, @void, @val, @void, @void, @val={0x72, 0x6}}}]}, 0x44}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) 0s ago: executing program 4 (id=1405): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x49, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040341d0a0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200000000000000000000000000008500000017000000950000000000000060bda108010da26a15544b2a4c738e0fa0f897aa278b325764f2dcd6b865984f599ffe6cad199d36bc80e98b17249acf845992d69cc4a092d0655f0e225d2f568bd76a618d10b49d26440819e5f1e36c54"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r3, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000a40)=ANY=[], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "6f7f5e18"}]}}, 0x0}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1a, 0x0, 0x9, 0x1, 0x2490, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): sses unique to avoid problems! [ 485.666464][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.677911][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.687998][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.698610][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.709232][ T7521] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.719968][ T7521] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.731684][ T7521] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.763845][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 485.831042][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 485.840534][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 485.907493][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 485.929642][ T7521] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.948587][ T7521] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.969193][ T7521] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.988892][ T7521] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 487.855159][ T3683] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 487.864051][ T3683] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 487.910815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 487.995721][ T7718] xt_CT: You must specify a L4 protocol and not use inversions on it [ 488.226493][ T7718] netlink: 4 bytes leftover after parsing attributes in process `syz.1.899'. [ 488.248671][ T3683] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 489.049590][ T3683] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 489.131894][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 490.225571][ T3585] block nbd3: Receive control failed (result -107) [ 490.235889][ T7731] nbd3: detected capacity change from 0 to 15960 [ 490.250284][ T263] block nbd3: Dead connection, failed to find a fallback [ 490.259299][ T263] block nbd3: shutting down sockets [ 490.267118][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.278884][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.289585][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.300476][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.308482][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.319759][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.330335][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.345754][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.355280][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.366458][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.375020][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.386131][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.394461][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.405539][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.414716][ T263] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.425872][ T263] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.436159][ T7111] ldm_validate_partition_table(): Disk read failed. [ 490.474443][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.485504][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.498092][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 490.509700][ T150] Buffer I/O error on dev nbd3, logical block 0, async page read [ 490.529483][ T7111] Dev nbd3: unable to read RDB block 0 [ 490.535767][ T7111] nbd3: unable to read partition table [ 490.549893][ T7731] ldm_validate_partition_table(): Disk read failed. [ 490.559294][ T7731] Dev nbd3: unable to read RDB block 0 [ 490.566227][ T7731] nbd3: unable to read partition table [ 490.588621][ T7111] ldm_validate_partition_table(): Disk read failed. [ 490.614687][ T7111] Dev nbd3: unable to read RDB block 0 [ 490.635509][ T7111] nbd3: unable to read partition table [ 490.702051][ T7744] block nbd4: NBD_DISCONNECT [ 490.743335][ T7111] ldm_validate_partition_table(): Disk read failed. [ 490.750688][ T7744] block nbd4: Disconnected due to user request. [ 490.768801][ T7744] block nbd4: shutting down sockets [ 490.771803][ T7111] Dev nbd3: unable to read RDB block 0 [ 490.785855][ T7111] nbd3: unable to read partition table [ 490.795135][ T7111] ldm_validate_partition_table(): Disk read failed. [ 490.802476][ T7111] Dev nbd3: unable to read RDB block 0 [ 490.808768][ T7111] nbd3: unable to read partition table [ 491.066746][ T7746] device bond0 entered promiscuous mode [ 491.074793][ T7746] device bond_slave_0 entered promiscuous mode [ 491.093248][ T7746] device bond_slave_1 entered promiscuous mode [ 492.078203][ T7743] device bond0 left promiscuous mode [ 492.090696][ T7743] device bond_slave_0 left promiscuous mode [ 492.103873][ T7743] device bond_slave_1 left promiscuous mode [ 492.198127][ T7753] loop2: detected capacity change from 0 to 40427 [ 492.241072][ T7753] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 492.248970][ T7753] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 492.299752][ T7734] loop1: detected capacity change from 0 to 32768 [ 492.394878][ T7753] F2FS-fs (loop2): Found nat_bits in checkpoint [ 492.524065][ T7753] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 492.540382][ T7753] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 492.693592][ T7766] loop4: detected capacity change from 0 to 1764 [ 493.487395][ T7772] loop3: detected capacity change from 0 to 64 [ 493.961997][ T7782] loop1: detected capacity change from 0 to 1024 [ 494.235851][ T3851] device hsr_slave_0 left promiscuous mode [ 494.280984][ T3851] device hsr_slave_1 left promiscuous mode [ 494.351836][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.365283][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.379404][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.386903][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.441258][ T26] audit: type=1326 audit(1726259549.263:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 494.482344][ T3616] Bluetooth: hci0: command 0x0c1a tx timeout [ 494.505703][ T3851] device bridge_slave_1 left promiscuous mode [ 494.512088][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.526940][ T26] audit: type=1326 audit(1726259549.263:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 494.553301][ T26] audit: type=1326 audit(1726259549.295:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 494.577937][ T26] audit: type=1326 audit(1726259549.305:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 494.602851][ T3851] device bridge_slave_0 left promiscuous mode [ 494.609234][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.622059][ T26] audit: type=1326 audit(1726259549.305:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 494.645836][ T26] audit: type=1326 audit(1726259549.316:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 494.682872][ T26] audit: type=1326 audit(1726259549.347:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 494.716624][ T3851] device veth1_macvtap left promiscuous mode [ 494.770466][ T26] audit: type=1326 audit(1726259549.347:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 494.791485][ T3851] device veth0_macvtap left promiscuous mode [ 494.876856][ T3851] device veth1_vlan left promiscuous mode [ 494.899763][ T26] audit: type=1326 audit(1726259549.358:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 494.921266][ T3851] device veth0_vlan left promiscuous mode [ 494.957330][ T26] audit: type=1326 audit(1726259549.358:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.1.917" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 495.224872][ T7799] loop2: detected capacity change from 0 to 64 [ 496.183632][ T6024] hfs: node 4:3 still has 1 user(s)! [ 496.464783][ T7] Bluetooth: hci0: command 0x0406 tx timeout [ 496.487922][ T7806] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 496.556853][ T7805] loop2: detected capacity change from 0 to 1024 [ 496.717060][ T3851] team0 (unregistering): Port device team_slave_1 removed [ 496.837432][ T3851] team0 (unregistering): Port device team_slave_0 removed [ 496.925929][ T3851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.947417][ T3851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 497.119100][ T3851] bond0 (unregistering): Released all slaves [ 497.208240][ T7786] netlink: 'syz.0.919': attribute type 21 has an invalid length. [ 497.216541][ T7797] tipc: Started in network mode [ 497.233964][ T7797] tipc: Node identity 000000000000003a0000400000000001, cluster identity 4711 [ 497.245661][ T7797] tipc: Enabling of bearer rejected, failed to enable media [ 498.875459][ T3611] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 499.123416][ T3611] usb 5-1: Using ep0 maxpacket: 8 [ 499.390546][ T3611] usb 5-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4 [ 499.621419][ T3611] usb 5-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3 [ 499.633398][ T3611] usb 5-1: Product: syz [ 499.638041][ T3611] usb 5-1: Manufacturer: syz [ 499.652933][ T3611] usb 5-1: SerialNumber: syz [ 499.669423][ T3611] usb 5-1: config 0 descriptor?? [ 500.516750][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 500.562309][ T3611] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd [ 500.678116][ T7847] netlink: 32 bytes leftover after parsing attributes in process `syz.0.936'. [ 500.746913][ T7831] ucma_write: process 520 (syz.4.931) changed security contexts after opening file descriptor, this is not allowed. [ 501.183315][ T3611] gspca_zc3xx: reg_r err -71 [ 501.192895][ T3611] gspca_zc3xx: probe of 5-1:0.0 failed with error -71 [ 501.214283][ T7858] netlink: 80 bytes leftover after parsing attributes in process `syz.1.939'. [ 501.227334][ T3611] usb 5-1: USB disconnect, device number 12 [ 501.235560][ T7849] netlink: 4 bytes leftover after parsing attributes in process `syz.2.937'. [ 501.285474][ T7826] chnl_net:caif_netlink_parms(): no params data found [ 501.556312][ T7826] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.580949][ T7826] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.611634][ T7826] device bridge_slave_0 entered promiscuous mode [ 501.651513][ T7826] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.679893][ T7826] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.208192][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.223019][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.526667][ T3611] Bluetooth: hci4: command 0x041b tx timeout [ 502.530356][ T7826] device bridge_slave_1 entered promiscuous mode [ 502.846740][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'. [ 502.880546][ T7870] netlink: 20 bytes leftover after parsing attributes in process `syz.0.941'. [ 502.907829][ T7826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 502.956110][ T7826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 503.011558][ T3611] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 503.193259][ T7826] team0: Port device team_slave_0 added [ 503.221793][ T7826] team0: Port device team_slave_1 added [ 504.315089][ T3611] usb 3-1: New USB device found, idVendor=249c, idProduct=9002, bcdDevice=de.ad [ 504.354789][ T3611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.397004][ T3611] usb 3-1: config 0 descriptor?? [ 504.479516][ T23] Bluetooth: hci4: command 0x040f tx timeout [ 504.579352][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 504.595487][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.621456][ C1] vkms_vblank_simulate: vblank timer overrun [ 504.647597][ T3611] snd-usb-hiface: probe of 3-1:0.0 failed with error -22 [ 504.692485][ T7898] 9pnet: Insufficient options for proto=fd [ 504.752352][ T7899] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 504.803545][ T7826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 504.821221][ T7903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.951'. [ 504.842907][ T7826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 504.850237][ T7826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 504.926326][ T7826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.025152][ T7901] loop0: detected capacity change from 0 to 8192 [ 505.095086][ T7826] device hsr_slave_0 entered promiscuous mode [ 505.124608][ T7901] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 505.137059][ T7901] REISERFS (device loop0): using ordered data mode [ 505.143683][ T7901] reiserfs: using flush barriers [ 505.169676][ T7826] device hsr_slave_1 entered promiscuous mode [ 505.176281][ T7901] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 505.219115][ T3615] usb 3-1: USB disconnect, device number 8 [ 505.254397][ T7901] REISERFS (device loop0): checking transaction log (loop0) [ 505.270242][ T7826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 505.317364][ T7901] REISERFS (device loop0): Using r5 hash to sort names [ 505.332944][ T7826] Cannot create hsr debugfs directory [ 505.338760][ T7901] REISERFS (device loop0): using 3.5.x disk format [ 505.365483][ T7901] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 505.604434][ T7826] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.653244][ T7826] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.750798][ T7826] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 505.835460][ T7826] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 506.086029][ T7826] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 506.182760][ T7826] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 506.226533][ T7826] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 506.231887][ T3615] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 506.262180][ T7826] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 506.441569][ T4044] Bluetooth: hci4: command 0x0419 tx timeout [ 506.575563][ T3615] usb 3-1: config 0 has no interfaces? [ 506.581428][ T3615] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 506.599453][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.522360][ T3615] usb 3-1: config 0 descriptor?? [ 507.869801][ T7933] loop1: detected capacity change from 0 to 512 [ 507.942545][ T7934] loop4: detected capacity change from 0 to 2048 [ 507.968890][ T7826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 508.363833][ T7826] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.726372][ T4044] Bluetooth: hci5: command 0x1003 tx timeout [ 510.749178][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 510.757527][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 510.772104][ T3582] Bluetooth: hci5: sending frame failed (-49) [ 510.788644][ T7934] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 510.884470][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 510.898527][ T7] usb 3-1: USB disconnect, device number 9 [ 510.953263][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 510.989676][ T3683] bridge0: port 1(bridge_slave_0) entered blocking state [ 510.996933][ T3683] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.013675][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 511.028955][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 511.049824][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 511.070555][ T3683] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.078190][ T3683] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.116759][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 511.136890][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 511.154862][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 511.176947][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 511.234066][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 511.320369][ T7945] netlink: 4 bytes leftover after parsing attributes in process `syz.4.960'. [ 511.325648][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 511.370887][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 511.401776][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 511.448158][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 511.464806][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 511.479781][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 511.504983][ T7826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 511.673089][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 511.700552][ T7956] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'. [ 511.897019][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 511.897050][ T26] audit: type=1326 audit(1726259567.586:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7958 comm="syz.4.963" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43c8ec0ef9 code=0x0 [ 512.546614][ T7964] loop4: detected capacity change from 0 to 1024 [ 512.650218][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 512.667813][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 512.697387][ T3611] Bluetooth: hci5: command 0x1001 tx timeout [ 512.705663][ T7826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 512.722606][ T3582] Bluetooth: hci5: sending frame failed (-49) [ 512.722794][ T7964] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 512.784535][ T7936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 512.814338][ T7936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 512.990884][ T7826] device veth0_vlan entered promiscuous mode [ 513.032011][ T7974] loop2: detected capacity change from 0 to 128 [ 513.039396][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 513.049908][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 513.061903][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 513.070366][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 513.110167][ T7826] device veth1_vlan entered promiscuous mode [ 513.197107][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 513.224951][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 513.257160][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 513.259726][ T7978] loop4: detected capacity change from 0 to 512 [ 513.273635][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 513.287580][ T7826] device veth0_macvtap entered promiscuous mode [ 513.311425][ T7826] device veth1_macvtap entered promiscuous mode [ 513.334798][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.346531][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.357040][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.367984][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.378352][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.391300][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.409969][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 513.426380][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.447179][ T7826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.456777][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 513.473409][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 513.550672][ T7978] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 513.570183][ T7978] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 513.581508][ T7978] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.967: Corrupt directory, running e2fsck is recommended [ 513.617158][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.639765][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.655782][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.674214][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.686920][ T7978] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 513.695284][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.711256][ T7978] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.967: corrupted in-inode xattr [ 513.712854][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.741053][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.755457][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.760417][ T7978] EXT4-fs (loop4): Remounting filesystem read-only [ 513.781315][ T7826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 513.785049][ T7978] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.967: couldn't read orphan inode 15 (err -117) [ 513.792018][ T7826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 513.815744][ T7826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.830495][ T7981] netlink: 40 bytes leftover after parsing attributes in process `syz.1.968'. [ 513.851812][ T7978] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 513.880714][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 513.900863][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 513.924615][ T7826] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.978884][ T7826] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.011356][ T7826] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.025925][ T7826] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 514.291751][ T7990] EXT4-fs warning (device loop4): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 514.303616][ T7990] EXT4-fs warning (device loop4): dx_probe:881: Enable large directory feature to access it [ 514.313844][ T7990] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.967: Corrupt directory, running e2fsck is recommended [ 516.985547][ T3615] Bluetooth: hci5: command 0x1009 tx timeout [ 517.728985][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.764555][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.901670][ T7936] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 518.020650][ T7936] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.047178][ T7936] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.276848][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 519.318906][ T8011] loop4: detected capacity change from 0 to 4096 [ 519.411579][ T8015] loop1: detected capacity change from 0 to 32768 [ 519.458895][ T8011] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 519.503899][ T8019] loop3: detected capacity change from 0 to 128 [ 519.716334][ T3613] Bluetooth: hci5: command 0x0409 tx timeout [ 519.829532][ T8019] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 519.841093][ T8019] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 520.964731][ T4986] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22. [ 521.375572][ T4986] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 521.585134][ T4986] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22. [ 521.869827][ T8003] chnl_net:caif_netlink_parms(): no params data found [ 522.045007][ T4043] Bluetooth: hci5: command 0x041b tx timeout [ 522.339307][ T8040] loop3: detected capacity change from 0 to 1024 [ 522.364372][ T8036] loop4: detected capacity change from 0 to 512 [ 523.287509][ T3851] device hsr_slave_0 left promiscuous mode [ 523.301015][ T8040] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 523.312887][ T8040] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff) [ 523.339510][ T3851] device hsr_slave_1 left promiscuous mode [ 523.376955][ T8036] EXT4-fs (loop4): Unrecognized mount option "hash" or missing value [ 523.535430][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.609591][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 523.643854][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.659993][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.668756][ T3851] device bridge_slave_1 left promiscuous mode [ 523.675827][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.689360][ T3851] device bridge_slave_0 left promiscuous mode [ 523.732435][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.795145][ T3851] device veth1_macvtap left promiscuous mode [ 523.802303][ T3851] device veth0_macvtap left promiscuous mode [ 523.809219][ T3851] device veth1_vlan left promiscuous mode [ 523.815326][ T3851] device veth0_vlan left promiscuous mode [ 523.975348][ T3611] Bluetooth: hci5: command 0x040f tx timeout [ 524.292985][ T3574] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 524.476400][ T3851] team0 (unregistering): Port device team_slave_1 removed [ 524.523329][ T3851] team0 (unregistering): Port device team_slave_0 removed [ 524.558246][ T3851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.607330][ T3851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.652385][ T3574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.687060][ T3574] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.717783][ T3574] usb 2-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 524.766827][ T3574] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.807541][ T3574] usb 2-1: config 0 descriptor?? [ 524.991653][ T3851] bond0 (unregistering): Released all slaves [ 525.279942][ T3574] hid-steam 0003:28DE:1142.0009: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 525.415016][ T3574] hid-steam 0003:28DE:1142.000A: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.1-1/input0 [ 526.235374][ T8073] Cannot find add_set index 0 as target [ 526.552896][ T23] Bluetooth: hci5: command 0x0419 tx timeout [ 526.727124][ T8003] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.901343][ T3574] hid-steam 0003:28DE:1142.0009: Steam wireless receiver connected [ 526.924268][ T8003] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.990863][ T8075] loop3: detected capacity change from 0 to 512 [ 526.999327][ T8003] device bridge_slave_0 entered promiscuous mode [ 527.019340][ T8003] bridge0: port 2(bridge_slave_1) entered blocking state [ 527.048576][ T8003] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.165883][ T8003] device bridge_slave_1 entered promiscuous mode [ 527.225814][ T7468] usb 2-1: reset high-speed USB device number 9 using dummy_hcd [ 527.317260][ T8075] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 527.333101][ T8075] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038 (0x7fffffff) [ 527.441538][ T8003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 527.556944][ T8003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 527.840288][ T8090] loop3: detected capacity change from 0 to 64 [ 528.061691][ T8003] team0: Port device team_slave_0 added [ 528.137638][ T8092] loop1: detected capacity change from 0 to 2048 [ 528.204369][ T8003] team0: Port device team_slave_1 added [ 528.268607][ T8092] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #2: comm syz.1.991: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 528.327097][ T8092] EXT4-fs (loop1): get root inode failed [ 528.339817][ T8092] EXT4-fs (loop1): mount failed [ 528.367889][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.386194][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.482093][ T8003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.532603][ T8003] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.564814][ T8003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.605925][ T8098] loop4: detected capacity change from 0 to 128 [ 528.680431][ T8100] loop1: detected capacity change from 0 to 512 [ 528.703170][ T8003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.747180][ T3574] usb 2-1: USB disconnect, device number 9 [ 528.775561][ T8098] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 528.798970][ T8100] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 528.848895][ T8098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 528.868504][ T3574] hid-steam 0003:28DE:1142.0009: Steam wireless receiver disconnected [ 528.885326][ T8100] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 528.905146][ T8100] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.991: invalid indirect mapped block 2683928664 (level 1) [ 528.935188][ T8100] EXT4-fs (loop1): Remounting filesystem read-only [ 528.947754][ T8100] EXT4-fs (loop1): 1 truncate cleaned up [ 529.139444][ T8100] EXT4-fs (loop1): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 529.172795][ T8003] device hsr_slave_0 entered promiscuous mode [ 529.227387][ T8003] device hsr_slave_1 entered promiscuous mode [ 530.245624][ T3611] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 530.378038][ T8003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.917495][ T8003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.141745][ T3611] usb 5-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a [ 531.169062][ T3611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 531.205297][ T3611] usb 5-1: config 0 descriptor?? [ 531.251527][ T8003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.270113][ T3611] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input17 [ 531.376831][ T8003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.859753][ T3012] bcm5974 5-1:0.0: could not read from device [ 531.870984][ T8003] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 531.909550][ T3611] usb 5-1: USB disconnect, device number 13 [ 531.914979][ T8003] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 531.939287][ T7993] bcm5974 5-1:0.0: could not read from device [ 531.961635][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'. [ 531.998003][ T26] audit: type=1326 audit(1726259588.675:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.000997][ T8003] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 532.043250][ T7993] udevd[7993]: Error opening device "/dev/input/event4": No such file or directory [ 532.075937][ T7993] udevd[7993]: Unable to EVIOCGABS device "/dev/input/event4" [ 532.111979][ T26] audit: type=1326 audit(1726259588.717:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.114846][ T7993] udevd[7993]: Unable to EVIOCGABS device "/dev/input/event4" [ 532.160701][ T26] audit: type=1326 audit(1726259588.717:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.164816][ T8003] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 532.192885][ T26] audit: type=1326 audit(1726259588.717:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.218058][ T26] audit: type=1326 audit(1726259588.759:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.280228][ T7993] udevd[7993]: Unable to EVIOCGABS device "/dev/input/event4" [ 532.294939][ T7993] udevd[7993]: Unable to EVIOCGABS device "/dev/input/event4" [ 532.307858][ T26] audit: type=1326 audit(1726259588.759:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.365550][ T26] audit: type=1326 audit(1726259588.780:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.391473][ T26] audit: type=1326 audit(1726259588.780:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.438317][ T26] audit: type=1326 audit(1726259588.780:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.559494][ T8135] xt_bpf: check failed: parse error [ 532.560013][ T26] audit: type=1326 audit(1726259588.790:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8127 comm="syz.1.1001" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff43c7b7ef9 code=0x7ffc0000 [ 532.590781][ T3611] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 532.602726][ T8137] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 532.619619][ T8137] PKCS7: Only support pkcs7_signedData type [ 532.669575][ T8003] 8021q: adding VLAN 0 to HW filter on device bond0 [ 532.729447][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 532.747784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 532.779078][ T8003] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.820122][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 532.838857][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 532.857935][ T6082] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.865065][ T6082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.895587][ T3611] usb 2-1: Using ep0 maxpacket: 8 [ 532.906083][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 532.924344][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 532.936160][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 532.962506][ T6082] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.969629][ T6082] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.989622][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 533.028472][ T3611] usb 2-1: config 0 has no interfaces? [ 533.034255][ T3611] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 533.039876][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 533.061956][ T3611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.091779][ T3611] usb 2-1: config 0 descriptor?? [ 533.096523][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 533.138697][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 533.172855][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 533.205156][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 533.223232][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 533.249486][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 533.277685][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 533.294754][ T8003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 533.316446][ T8003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 533.377309][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 533.413059][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 533.575219][ T8149] loop2: detected capacity change from 0 to 190 [ 533.655786][ T8147] loop3: detected capacity change from 0 to 512 [ 533.663382][ T3574] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 533.714390][ T3574] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 533.729509][ T8153] device ip6gre0 entered promiscuous mode [ 533.748993][ T8149] ntfs: volume version 3.1. [ 533.763634][ T8153] device vlan3 entered promiscuous mode [ 533.768319][ T8149] attempt to access beyond end of device [ 533.768319][ T8149] loop2: rw=0, want=560, limit=190 [ 533.797620][ T8153] device ip6gre0 left promiscuous mode [ 533.930076][ T8149] attempt to access beyond end of device [ 533.930076][ T8149] loop2: rw=0, want=560, limit=190 [ 533.942625][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 533.958435][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 534.000778][ T4043] usb 2-1: USB disconnect, device number 10 [ 534.024837][ T8003] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.171774][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 534.227183][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 535.134088][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 535.178518][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 535.191640][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 535.218543][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 535.253195][ T8003] device veth0_vlan entered promiscuous mode [ 535.340153][ T8003] device veth1_vlan entered promiscuous mode [ 535.439212][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 535.479530][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 535.518515][ T8003] device veth0_macvtap entered promiscuous mode [ 535.558142][ T8003] device veth1_macvtap entered promiscuous mode [ 535.568370][ T8165] loop1: detected capacity change from 0 to 8192 [ 535.587148][ T8170] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1014'. [ 535.605433][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.636172][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.657614][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.658533][ T3655] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 535.677584][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.696653][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.726323][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.750087][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.761734][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.774749][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.790173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 535.817380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 535.887889][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 535.926321][ T3655] usb 5-1: Using ep0 maxpacket: 16 [ 535.936179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 535.962382][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.987236][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.001598][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.012713][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.027252][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.039802][ T3655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7 [ 536.057005][ T3655] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 1792, setting to 1024 [ 536.057148][ T8163] loop2: detected capacity change from 0 to 32768 [ 536.076579][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.092504][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.119035][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.134002][ T8003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 536.145329][ T8003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 536.156963][ T8003] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.169139][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 536.228833][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 536.242278][ T3655] usb 5-1: New USB device found, idVendor=0d46, idProduct=0081, bcdDevice=19.82 [ 536.264530][ T3655] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 536.273899][ T3655] usb 5-1: Product: syz [ 536.278507][ T3655] usb 5-1: Manufacturer: syz [ 536.283251][ T3655] usb 5-1: SerialNumber: syz [ 536.353072][ T3655] usb 5-1: config 0 descriptor?? [ 536.385121][ T8167] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 536.428953][ T3611] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 536.452673][ T3655] kobil_sct 5-1:0.0: KOBIL USB smart card terminal converter detected [ 536.473145][ T3655] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 536.617483][ T8179] xt_l2tp: v2 doesn't support IP mode [ 536.773334][ T3611] usb 2-1: Using ep0 maxpacket: 8 [ 536.926153][ T3611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 537.367050][ T8003] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.390929][ T3611] usb 2-1: New USB device found, idVendor=05ac, idProduct=9219, bcdDevice=61.da [ 537.417713][ T8003] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.427211][ T3611] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 537.447429][ T8003] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.457617][ T3611] usb 2-1: Manufacturer: syz [ 537.470611][ T3611] usb 2-1: config 0 descriptor?? [ 537.477332][ T8003] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.507149][ T8167] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1013'. [ 537.575202][ T3645] usb 5-1: USB disconnect, device number 14 [ 537.590049][ T3645] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 537.634186][ T3645] kobil_sct 5-1:0.0: device disconnected [ 537.792879][ T3611] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 537.816862][ T3611] appledisplay: probe of 2-1:0.0 failed with error -110 [ 537.896774][ T3611] usb 2-1: USB disconnect, device number 11 [ 537.908420][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.928996][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.953012][ T8183] netlink: 'syz.3.1017': attribute type 3 has an invalid length. [ 538.006233][ T6082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 538.048114][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.066509][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.107706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 540.518756][ T8202] loop3: detected capacity change from 0 to 512 [ 540.570506][ T8206] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1024'. [ 540.628275][ T8202] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 540.646343][ T8202] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038 (0x7fffffff) [ 540.763676][ T8202] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1023: Directory hole found for htree leaf block 0 [ 540.780650][ T8213] netlink: 'syz.0.1025': attribute type 10 has an invalid length. [ 540.830147][ T8213] device hsr0 entered promiscuous mode [ 540.880611][ T8213] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 540.894545][ T8202] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.1023: Directory hole found for htree leaf block 0 [ 540.905384][ T8213] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 540.918291][ T8213] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 540.931848][ T8213] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 541.069323][ T8217] loop0: detected capacity change from 0 to 16 [ 541.173436][ T8217] erofs: (device loop0): mounted with root inode @ nid 36. [ 543.012743][ T8223] loop3: detected capacity change from 0 to 1024 [ 543.495216][ T3851] device hsr_slave_0 left promiscuous mode [ 543.522246][ T8227] loop4: detected capacity change from 0 to 1024 [ 543.560165][ T3851] device hsr_slave_1 left promiscuous mode [ 543.680201][ T8227] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 543.696099][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.711657][ T8232] loop0: detected capacity change from 0 to 2048 [ 543.731100][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.775964][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.809611][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 543.832007][ T3851] device bridge_slave_1 left promiscuous mode [ 543.839143][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.855007][ T3851] device bridge_slave_0 left promiscuous mode [ 543.861294][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.963641][ T8232] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 544.026113][ T3851] device veth1_macvtap left promiscuous mode [ 544.032229][ T3851] device veth0_macvtap left promiscuous mode [ 544.225421][ T3851] device veth1_vlan left promiscuous mode [ 544.231379][ T3851] device veth0_vlan left promiscuous mode [ 545.230798][ T8003] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 545.272793][ T8003] EXT4-fs error (device loop0): __ext4_iget:4872: inode #13: block 127754: comm syz-executor: invalid block [ 545.289970][ T8003] EXT4-fs error (device loop0): __ext4_iget:4872: inode #13: block 127754: comm syz-executor: invalid block [ 545.360435][ T8254] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1036'. [ 545.626588][ T3611] Bluetooth: hci0: command 0x0409 tx timeout [ 546.545873][ T3851] team0 (unregistering): Port device team_slave_1 removed [ 546.914061][ T3851] team0 (unregistering): Port device team_slave_0 removed [ 547.338972][ T3851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 547.428138][ T3851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 547.450187][ T8268] loop1: detected capacity change from 0 to 512 [ 547.608272][ T3612] Bluetooth: hci0: command 0x041b tx timeout [ 547.685592][ T8268] loop1: detected capacity change from 0 to 512 [ 547.721462][ T8268] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 547.781634][ T8268] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 547.813855][ T3851] bond0 (unregistering): Released all slaves [ 547.820768][ T8268] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 547.852899][ T8268] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 547.864630][ T8268] System zones: 0-2, 18-18, 34-34 [ 547.908631][ T8268] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 547.961469][ T8268] EXT4-fs (loop1): 1 truncate cleaned up [ 547.979848][ T8268] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 548.153697][ T8268] EXT4-fs warning (device loop1): ext4_group_extend:1823: can't shrink FS - resize aborted [ 548.834434][ T8284] loop1: detected capacity change from 0 to 1024 [ 549.590606][ T4043] Bluetooth: hci0: command 0x040f tx timeout [ 549.806270][ T8298] loop3: detected capacity change from 0 to 1024 [ 549.909693][ T8229] chnl_net:caif_netlink_parms(): no params data found [ 549.959739][ T8298] EXT4-fs (loop3): Test dummy encryption mode enabled [ 551.155325][ T8298] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,data=writeback,noquota,max_batch_time=0x0000000000000009,barrier=0x0000000000000005,nombcache,sysvgroups,data=ordered,,errors=continue. Quota mode: writeback. [ 551.267671][ T3611] Bluetooth: hci3: command 0x0409 tx timeout [ 551.567103][ T8229] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.578420][ T8229] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.588696][ T3612] Bluetooth: hci0: command 0x0419 tx timeout [ 551.635971][ T8229] device bridge_slave_0 entered promiscuous mode [ 551.678435][ T8229] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.691130][ T8229] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.725366][ T8229] device bridge_slave_1 entered promiscuous mode [ 551.816687][ T8229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 551.828712][ T8298] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 551.878017][ T8229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 552.730962][ T8229] team0: Port device team_slave_0 added [ 552.788039][ T8229] team0: Port device team_slave_1 added [ 553.022996][ T8285] chnl_net:caif_netlink_parms(): no params data found [ 553.048585][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 553.065674][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.129572][ T8229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 553.249762][ T7468] Bluetooth: hci2: command 0x0406 tx timeout [ 553.320900][ T3703] Bluetooth: hci3: command 0x041b tx timeout [ 553.384151][ T8229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 553.567927][ T8331] loop4: detected capacity change from 0 to 2048 [ 553.579002][ T3703] Bluetooth: hci0: command 0x0405 tx timeout [ 553.757165][ T8229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 553.940034][ T8229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.358130][ T8331] EXT4-fs (loop4): mounted filesystem without journal. Opts: data_err=abort,nodelalloc,,errors=continue. Quota mode: none. [ 554.371601][ T8331] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038 (0x7fffffff) [ 554.403479][ T8328] EXT4-fs (loop4): shut down requested (2) [ 554.418156][ T8285] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.469764][ T8285] bridge0: port 1(bridge_slave_0) entered disabled state [ 554.498687][ T8285] device bridge_slave_0 entered promiscuous mode [ 554.540030][ T8229] device hsr_slave_0 entered promiscuous mode [ 554.596611][ T8229] device hsr_slave_1 entered promiscuous mode [ 554.631974][ T8229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.658468][ T8229] Cannot create hsr debugfs directory [ 554.719607][ T8285] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.738296][ T8285] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.748566][ T8285] device bridge_slave_1 entered promiscuous mode [ 554.977700][ T8285] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 555.235634][ T8285] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 555.317297][ T3612] Bluetooth: hci3: command 0x040f tx timeout [ 556.428368][ T8357] loop3: detected capacity change from 0 to 164 [ 557.299647][ T3612] Bluetooth: hci3: command 0x0419 tx timeout [ 558.450603][ T8357] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 558.486344][ T8356] rock: corrupted directory entry. extent=41, offset=65536, size=8 [ 558.541653][ T26] kauditd_printk_skb: 87 callbacks suppressed [ 558.541669][ T26] audit: type=1326 audit(1726259616.536:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8361 comm="syz.1.1063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff43c7b7ef9 code=0x0 [ 559.544853][ T8285] team0: Port device team_slave_0 added [ 559.568243][ T8285] team0: Port device team_slave_1 added [ 559.622897][ T8373] sp0: Synchronizing with TNC [ 559.728845][ T8374] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1065'. [ 559.773961][ T8373] nvme_fabrics: missing parameter 'transport=%s' [ 559.825275][ T8373] nvme_fabrics: missing parameter 'nqn=%s' [ 559.866343][ T8370] [U] ` [ 559.875222][ T8229] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.898711][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 559.905966][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 559.934497][ T8285] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.010883][ T8382] loop3: detected capacity change from 0 to 8 [ 560.035345][ T8285] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.042366][ T8285] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.072459][ T8285] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 560.102701][ T8382] SQUASHFS error: Unable to read inode 0x11f [ 560.135206][ T8229] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.145689][ T3574] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 560.257853][ T8285] device hsr_slave_0 entered promiscuous mode [ 560.272440][ T8285] device hsr_slave_1 entered promiscuous mode [ 560.280165][ T8285] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 560.293793][ T8285] Cannot create hsr debugfs directory [ 560.341281][ T8229] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.396647][ T3574] usb 5-1: Using ep0 maxpacket: 16 [ 560.429899][ T3851] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.608670][ T8229] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.662074][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 560.678881][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 560.700405][ T3851] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.718862][ T3574] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 560.771300][ T3574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.787087][ T3574] usb 5-1: Product: syz [ 560.797275][ T3574] usb 5-1: Manufacturer: syz [ 560.804835][ T3574] usb 5-1: SerialNumber: syz [ 560.841515][ T3574] usb 5-1: config 0 descriptor?? [ 560.858214][ T8395] netlink: 100 bytes leftover after parsing attributes in process `syz.3.1074'. [ 560.874372][ T8391] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 560.894712][ T3574] appledisplay 5-1:0.0: Could not find int-in endpoint [ 560.916862][ T3574] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 561.010619][ T3851] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.104180][ T3851] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.131884][ T3613] usb 5-1: USB disconnect, device number 15 [ 561.820661][ T3645] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 562.054488][ T3645] usb 5-1: Using ep0 maxpacket: 8 [ 562.188090][ T3645] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 562.196154][ T3645] usb 5-1: config 0 has no interface number 0 [ 562.240992][ T3645] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 562.283560][ T3645] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 562.340062][ T3645] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.205555][ T8428] xt_CT: No such helper "syz0" [ 563.322809][ T3645] usb 5-1: config 0 descriptor?? [ 563.651200][ T3645] usb 5-1: can't set config #0, error -71 [ 563.665620][ T8434] loop3: detected capacity change from 0 to 32768 [ 564.960075][ T3645] usb 5-1: USB disconnect, device number 16 [ 565.294588][ T8442] xt_CONNSECMARK: invalid mode: 0 [ 565.557542][ T8434] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1080 (8434) [ 566.597461][ T8434] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 566.607472][ T8434] BTRFS info (device loop3): using free space tree [ 566.614115][ T8434] BTRFS info (device loop3): has skinny extents [ 566.822809][ T8229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 567.137550][ T8434] BTRFS error (device loop3): open_ctree failed [ 567.138105][ T7993] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (7993) [ 567.204198][ T8229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 567.286997][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1086'. [ 567.331254][ T8499] tipc: Started in network mode [ 567.413478][ T8499] tipc: Node identity , cluster identity 4711 [ 567.444555][ T8499] tipc: Failed to set node id, please configure manually [ 567.489723][ T8499] tipc: Enabling of bearer rejected, failed to enable media [ 567.541959][ T8229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 567.579263][ T8229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 567.725263][ T8285] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 567.789295][ T8285] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 567.886319][ T8285] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 567.999943][ T8285] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 568.409717][ T8229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.635233][ T8229] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.674288][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 568.692202][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 568.732411][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 568.758279][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 568.775976][ T1245] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.783259][ T1245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.799742][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 568.814171][ T8285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.861483][ T3851] device hsr_slave_0 left promiscuous mode [ 568.889452][ T3851] device hsr_slave_1 left promiscuous mode [ 568.906155][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 568.979550][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 569.009101][ T3851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 569.034730][ T3851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 569.075403][ T3851] device bridge_slave_1 left promiscuous mode [ 569.108855][ T3851] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.123123][ T3851] device bridge_slave_0 left promiscuous mode [ 569.129657][ T3851] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.154504][ T3851] device veth1_macvtap left promiscuous mode [ 569.160626][ T3851] device veth0_macvtap left promiscuous mode [ 569.189402][ T3851] device veth1_vlan left promiscuous mode [ 569.262286][ T3851] device veth0_vlan left promiscuous mode [ 572.458979][ T3851] team0 (unregistering): Port device team_slave_1 removed [ 572.522894][ T3851] team0 (unregistering): Port device team_slave_0 removed [ 572.549328][ T3851] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 572.549330][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1095'. [ 572.581783][ T3851] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 572.811458][ T3851] bond0 (unregistering): Released all slaves [ 572.869236][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 572.896196][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 572.996722][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.003951][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 573.088771][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 573.662060][ T8285] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.825717][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 573.843262][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 573.856070][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 573.900292][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 573.911297][ T3626] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.918473][ T3626] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.946262][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 573.966986][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 573.981977][ T26] audit: type=1326 audit(1726259632.739:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8573 comm="syz.4.1098" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f43c8ec0ef9 code=0x0 [ 574.166551][ T3626] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.173871][ T3626] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.182517][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 574.193332][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 574.202674][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 574.211805][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 574.221670][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 574.555912][ T8586] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 574.714121][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 574.723493][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 574.733667][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 574.742738][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 574.751657][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 574.880075][ T8229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 574.894326][ T8229] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 574.919755][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 575.030867][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 575.073889][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 575.153387][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 575.183911][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 575.203067][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 575.224367][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 575.252365][ T487] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 575.343502][ T8594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1103'. [ 575.670596][ C1] vkms_vblank_simulate: vblank timer overrun [ 575.981561][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 576.007031][ T6214] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 576.101564][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 576.130616][ C1] vkms_vblank_simulate: vblank timer overrun [ 576.131096][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 576.195306][ T8285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 576.339036][ T8607] block nbd4: shutting down sockets [ 576.369472][ T8611] netlink: 892 bytes leftover after parsing attributes in process `syz.3.1106'. [ 576.422187][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 576.430852][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 576.500340][ T8229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.575082][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 576.598348][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 576.716951][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 576.741711][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 576.885823][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 577.038441][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 577.316299][ T8229] device veth0_vlan entered promiscuous mode [ 577.650212][ T8229] device veth1_vlan entered promiscuous mode [ 577.741892][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 577.774916][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 577.874233][ T8285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.033958][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 578.405969][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 579.098966][ T8229] device veth0_macvtap entered promiscuous mode [ 579.179779][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 579.208494][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 580.016665][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 580.054632][ T8229] device veth1_macvtap entered promiscuous mode [ 580.091822][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 580.110406][ T8632] loop4: detected capacity change from 0 to 4096 [ 580.120273][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 580.221755][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.259313][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.289680][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.320457][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.351629][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 580.416543][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.463004][ T8632] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 580.466897][ T8229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 580.528334][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 580.547214][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 580.566843][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 580.576005][ T8632] ntfs: (device loop4): ntfs_is_extended_system_file(): Non-resident file name. You should run chkdsk. [ 580.625833][ T8632] ntfs: (device loop4): ntfs_read_locked_inode(): $DATA attribute is missing. [ 580.644715][ T8632] ntfs: (device loop4): ntfs_read_locked_inode(): Failed with error code -2. Marking corrupt inode 0x1 as bad. Run chkdsk. [ 580.647168][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 580.680298][ T8632] ntfs: (device loop4): load_system_files(): Failed to load $MFTMirr. Mounting read-only. Run ntfsfix and/or chkdsk. [ 580.745739][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.780444][ T8632] ntfs: volume version 3.1. [ 580.803915][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.871178][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 580.922644][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 580.994066][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.061306][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.112358][ T8229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 581.123692][ T8229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.156377][ T8229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 581.189842][ T8285] device veth0_vlan entered promiscuous mode [ 581.207151][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 581.225767][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 581.257459][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 581.286038][ T3683] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 581.320090][ T8644] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1111'. [ 581.339779][ T8229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.361661][ T8229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.389894][ T8229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.400816][ T8229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.433732][ T8285] device veth1_vlan entered promiscuous mode [ 581.629600][ T8285] device veth0_macvtap entered promiscuous mode [ 581.671985][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 581.690898][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 581.727426][ T8285] device veth1_macvtap entered promiscuous mode [ 581.747886][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 581.782418][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 581.842541][ T3626] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.864847][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 581.900967][ T3626] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.918186][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 581.967595][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.037216][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.080168][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.098162][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.118233][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 582.149975][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.172586][ T8653] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1118'. [ 582.175081][ T8655] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1119'. [ 582.208273][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 582.224816][ T26] audit: type=1326 audit(1726259641.386:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8654 comm="syz.3.1119" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa42defef9 code=0x0 [ 582.304950][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 582.313017][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 582.356615][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 582.369737][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.383192][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.394380][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.406667][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.417484][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.430809][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.443776][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.455606][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.474168][ T8285] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 582.493305][ T8285] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 582.526824][ T8285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 582.550524][ T8659] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1117'. [ 582.576285][ T8659] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1117'. [ 582.597447][ T8659] bridge0: port 2(bridge_slave_1) entered listening state [ 582.617594][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 582.634569][ T1245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 582.687671][ T8285] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.704760][ T1245] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 582.713569][ T1245] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.733141][ T8285] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.742382][ T8285] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.825610][ T8669] loop4: detected capacity change from 0 to 512 [ 582.836059][ T8285] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 582.887634][ T8665] netlink: 'syz.1.1120': attribute type 12 has an invalid length. [ 582.922719][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 583.230758][ T8676] cgroup: Unexpected value for 'cpuset_v2_mode' [ 583.247894][ T8669] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 583.266772][ T8669] ext4 filesystem being mounted at /206/file0 supports timestamps until 2038 (0x7fffffff) [ 583.279012][ T1245] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.319557][ T1245] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.342389][ T8679] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 1, id = 0 [ 583.361323][ T6214] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 583.406933][ T6214] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 583.511918][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 583.535512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 583.868803][ T8685] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 583.985719][ T8685] loop3: detected capacity change from 0 to 64 [ 585.121885][ T8689] loop1: detected capacity change from 0 to 4096 [ 585.219440][ T8692] netlink: 300 bytes leftover after parsing attributes in process `syz.4.1121'. [ 585.234003][ T8689] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 585.304824][ T8689] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 585.305079][ T8674] loop2: detected capacity change from 0 to 40427 [ 585.831463][ T8674] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 585.897220][ T8674] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 585.977598][ T8674] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 586.110473][ T8700] sctp: [Deprecated]: syz.3.1127 (pid 8700) Use of int in maxseg socket option. [ 586.110473][ T8700] Use struct sctp_assoc_value instead [ 586.223005][ T8700] loop3: detected capacity change from 0 to 4096 [ 586.343201][ T8700] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512) [ 586.518679][ T8709] loop1: detected capacity change from 0 to 256 [ 586.807717][ T8715] loop0: detected capacity change from 0 to 128 [ 587.947214][ T8715] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 588.067030][ T8715] sysv_free_block: trying to free block not in datazone [ 588.147867][ T8726] sysv_count_free_blocks: free block count was -2041545929, correcting to 9 [ 588.911968][ T8726] sysv_count_free_inodes: unable to read inode table [ 589.009882][ T26] audit: type=1804 audit(1726259648.512:239): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1133" name="/newroot/1/file0" dev="loop0" ino=2 res=1 errno=0 [ 589.104292][ T26] audit: type=1804 audit(1726259648.606:240): pid=8715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1133" name="/newroot/1/file0" dev="loop0" ino=2 res=1 errno=0 [ 589.142537][ T3585] Bluetooth: hci3: wrong event for mode 0 [ 589.203719][ T8732] loop2: detected capacity change from 0 to 4096 [ 589.244562][ T8737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1138'. [ 589.253894][ T8737] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1138'. [ 589.355897][ T8285] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 589.360573][ T8732] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 589.500018][ T8751] Error parsing options; rc = [-22] [ 590.259219][ T8761] loop4: detected capacity change from 0 to 2048 [ 591.077314][ T8761] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 592.585972][ T8776] loop2: detected capacity change from 0 to 128 [ 594.446562][ T8774] loop4: detected capacity change from 0 to 8 [ 594.701492][ T8774] unable to read xattr id index table [ 594.727064][ T8786] netlink: 'syz.3.1151': attribute type 12 has an invalid length. [ 594.823054][ T8776] EXT4-fs (loop2): Ignoring removed orlov option [ 594.847210][ T8790] netlink: 'syz.3.1151': attribute type 29 has an invalid length. [ 595.209011][ T8790] netlink: 'syz.3.1151': attribute type 29 has an invalid length. [ 595.225192][ T8776] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsv1,i_version,data_err=abort,noload,orlov,nobarrier,,errors=continue. Quota mode: none. [ 595.245388][ T8776] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 595.283549][ T8786] netlink: 'syz.3.1151': attribute type 29 has an invalid length. [ 596.133232][ T8801] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 596.276333][ T8804] netlink: 'syz.0.1155': attribute type 1 has an invalid length. [ 596.394695][ T8804] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1155'. [ 596.624503][ T8814] : renamed from bond0 [ 598.046703][ T8827] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 599.277000][ T8836] loop1: detected capacity change from 0 to 256 [ 600.281834][ T8836] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe9e488b, utbl_chksum : 0xe619d30d) [ 600.305912][ T8836] exFAT-fs (loop1): error, invalid access to FAT bad cluster (entry 0x00000005) [ 600.315158][ T8836] exFAT-fs (loop1): Filesystem has been set read-only [ 600.322280][ T8836] exFAT-fs (loop1): failed to initialize root inode [ 600.338109][ T8841] syz.3.1165 sent an empty control message without MSG_MORE. [ 601.494743][ T8852] loop4: detected capacity change from 0 to 2048 [ 601.681101][ T8860] loop1: detected capacity change from 0 to 512 [ 602.997952][ T8860] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 603.022631][ T8852] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 603.093184][ T8878] loop3: detected capacity change from 0 to 512 [ 603.117986][ T8860] EXT4-fs (loop1): 1 truncate cleaned up [ 603.151936][ T8860] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none. [ 603.207876][ T8878] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 603.247994][ T8878] EXT4-fs (loop3): Mount option "delalloc" incompatible with ext2 [ 603.302483][ T26] audit: type=1800 audit(1726259663.508:241): pid=8857 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1170" name="bus" dev="loop1" ino=18 res=0 errno=0 [ 603.558963][ T8885] loop4: detected capacity change from 0 to 512 [ 604.310550][ T8885] EXT4-fs error (device loop4): ext4_orphan_get:1423: comm syz.4.1178: bad orphan inode 1 [ 604.350962][ T8885] EXT4-fs (loop4): mounted filesystem without journal. Opts: noinit_itable,resgid=0x0000000000000000,max_dir_size_kb=0x00000000000003f5,min_batch_time=0x0000000000000005,errors=continue,noquota,jqfmt=vfsold,,errors=continue. Quota mode: none. [ 606.091699][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 606.149706][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 606.200543][ T8912] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 606.421142][ T8929] loop3: detected capacity change from 0 to 1024 [ 606.552747][ T8929] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 606.752149][ T26] audit: type=1800 audit(1726259667.128:242): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1188" name="bus" dev="loop3" ino=861 res=0 errno=0 [ 607.933559][ T8952] loop1: detected capacity change from 0 to 512 [ 608.170449][ T8952] EXT4-fs (loop1): orphan cleanup on readonly fs [ 608.884667][ T8952] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz.1.1195: pblk 0 bad header/extent: too large eh_depth - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 608.906527][ T8952] EXT4-fs error (device loop1): ext4_quota_enable:6390: comm syz.1.1195: Bad quota inode: 4, type: 1 [ 609.124877][ T8952] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 609.271435][ T8966] xt_hashlimit: size too large, truncated to 1048576 [ 610.902744][ T8952] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 610.909805][ T8952] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 611.583561][ T8978] loop0: detected capacity change from 0 to 164 [ 611.851332][ T8978] isofs: isofs_export_get_parent(): child directory not normalized! [ 612.927775][ T8987] loop1: detected capacity change from 0 to 2048 [ 613.054212][ T3615] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 614.008053][ T8995] loop3: detected capacity change from 0 to 512 [ 614.964216][ T8987] EXT4-fs error (device loop1): ext4_fill_super:4840: inode #2: comm syz.1.1203: casefold flag without casefold feature [ 615.012012][ T3615] usb 3-1: device not accepting address 10, error -71 [ 615.046983][ T8987] EXT4-fs (loop1): get root inode failed [ 615.052705][ T8987] EXT4-fs (loop1): mount failed [ 615.110090][ T8995] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 615.121523][ T8995] ext4 filesystem being mounted at /62/file1 supports timestamps until 2038 (0x7fffffff) [ 615.224049][ T8994] Quota error (device loop3): find_tree_dqentry: Getting block too big (2309 >= 6) [ 615.235869][ T8994] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0 [ 615.245741][ T8994] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.1208: Failed to acquire dquot type 0 [ 616.259543][ T9016] loop4: detected capacity change from 0 to 256 [ 616.347046][ T9026] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 616.358466][ T9026] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 616.622844][ T9034] loop3: detected capacity change from 0 to 1024 [ 616.654448][ T9023] loop1: detected capacity change from 0 to 8192 [ 616.685060][ T9034] EXT4-fs (loop3): Ignoring removed oldalloc option [ 616.737134][ T9034] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none. [ 616.763617][ T3703] Bluetooth: hci4: command 0x0406 tx timeout [ 616.772822][ T9032] loop4: detected capacity change from 0 to 1024 [ 616.977224][ T9023] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 617.624562][ T9032] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 617.743567][ T3615] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 617.758474][ T26] audit: type=1800 audit(1726259678.682:243): pid=9032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1217" name="bus" dev="loop4" ino=861 res=0 errno=0 [ 617.824513][ T9042] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 618.163224][ T3615] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 618.214816][ T3615] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 618.249398][ T3615] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 618.259907][ T3615] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 618.305739][ T3615] usb 3-1: config 0 descriptor?? [ 618.687618][ T9060] loop1: detected capacity change from 0 to 64 [ 618.816900][ T9060] Trying to free block not in datazone [ 618.822725][ T9060] Trying to free block not in datazone [ 618.828311][ T9060] Trying to free block not in datazone [ 618.833968][ T9060] Trying to free block not in datazone [ 618.839608][ T9060] Trying to free block not in datazone [ 618.845141][ T9060] minix_free_block (loop1:6): bit already cleared [ 618.851942][ T9060] Trying to free block not in datazone [ 619.204318][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 619.210673][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 619.640780][ T9070] loop3: detected capacity change from 0 to 2048 [ 619.738475][ T9073] loop0: detected capacity change from 0 to 4096 [ 619.802351][ T3615] usbhid 3-1:0.0: can't add hid device: -71 [ 619.825971][ T3615] usbhid: probe of 3-1:0.0 failed with error -71 [ 619.960083][ T3615] usb 3-1: USB disconnect, device number 12 [ 620.165094][ T9070] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,lazytime,data_err=abort,nogrpid,,errors=continue. Quota mode: writeback. [ 620.488122][ T9073] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 620.592313][ T9081] xt_TPROXY: Can be used only with -p tcp or -p udp [ 620.620612][ T9073] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 620.659172][ T9066] EXT4-fs error (device loop3): ext4_find_extent:929: inode #2: comm syz.3.1228: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 620.738755][ T9073] ntfs3: loop0: Failed to load $MFT. [ 620.748292][ T9087] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 621.079416][ T9091] 9pnet: Insufficient options for proto=fd [ 621.183324][ T9091] loop0: detected capacity change from 0 to 512 [ 621.269613][ T9091] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1235: casefold flag without casefold feature [ 621.289506][ T9091] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1235: couldn't read orphan inode 15 (err -117) [ 621.312768][ T9091] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 621.648881][ T9096] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 621.670330][ T9096] netlink: 'syz.3.1238': attribute type 8 has an invalid length. [ 621.751654][ T9097] loop2: detected capacity change from 0 to 1024 [ 622.050898][ T26] audit: type=1804 audit(1726259683.163:244): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1237" name="/newroot/23/file1/bus" dev="loop2" ino=26 res=1 errno=0 [ 622.094468][ T9107] loop0: detected capacity change from 0 to 1024 [ 622.796955][ T26] audit: type=1800 audit(1726259683.247:245): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1237" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 622.836931][ T26] audit: type=1804 audit(1726259684.002:246): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1237" name="/newroot/23/file1/bus" dev="loop2" ino=26 res=1 errno=0 [ 622.954181][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1243'. [ 623.669114][ T9113] netlink: 'syz.3.1244': attribute type 3 has an invalid length. [ 623.689516][ T9113] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1244'. [ 623.691108][ T26] audit: type=1800 audit(1726259684.002:247): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1237" name="bus" dev="loop2" ino=26 res=0 errno=0 [ 623.866170][ T9107] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 623.927048][ T9122] loop3: detected capacity change from 0 to 1024 [ 623.989133][ T9124] loop1: detected capacity change from 0 to 16 [ 624.104135][ T9128] loop2: detected capacity change from 0 to 512 [ 624.128216][ T9124] erofs: (device loop1): mounted with root inode @ nid 36. [ 624.145810][ T26] audit: type=1800 audit(1726259685.377:248): pid=9103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1236" name="bus" dev="loop0" ino=861 res=0 errno=0 [ 624.217233][ T9128] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349) [ 624.293143][ T9128] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002] [ 624.324922][ T9128] System zones: 1-12 [ 624.341104][ T9128] EXT4-fs (loop2): orphan cleanup on readonly fs [ 624.348394][ T9128] EXT4-fs error (device loop2): ext4_read_inode_bitmap:168: comm syz.2.1247: Inode bitmap for bg 0 marked uninitialized [ 624.380175][ T9128] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 624.442432][ T23] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 624.470307][ T9128] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 5: comm syz.2.1247: lblock 0 mapped to illegal pblock 5 (length 1) [ 624.533019][ T9128] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1247: error -117 reading directory block [ 624.715969][ T9135] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 5: comm syz.2.1247: lblock 0 mapped to illegal pblock 5 (length 1) [ 624.749797][ T9135] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1247: error -117 reading directory block [ 624.771012][ T9132] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 5: comm syz.2.1247: lblock 0 mapped to illegal pblock 5 (length 1) [ 625.624395][ T9128] EXT4-fs error (device loop2): ext4_map_blocks:628: inode #2: block 5: comm syz.2.1247: lblock 0 mapped to illegal pblock 5 (length 1) [ 625.656501][ T9128] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1247: error -117 reading directory block [ 625.698285][ T9132] EXT4-fs warning (device loop2): dx_probe:823: inode #2: lblock 0: comm syz.2.1247: error -117 reading directory block [ 625.824857][ T23] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 625.847754][ T23] usb 2-1: config 179 has no interface number 0 [ 625.877048][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 625.903145][ T9146] Non-string source [ 625.935681][ T3585] Bluetooth: hci3: ACL packet for unknown connection handle 212 [ 625.946783][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1029, setting to 64 [ 625.986444][ T23] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 65535, setting to 64 [ 625.999225][ T23] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 626.024216][ T23] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 626.035006][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 626.072421][ T9124] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 626.086329][ T9132] EXT4-fs error (device loop2): ext4_remount:5854: comm syz.2.1247: Abort forced by user [ 626.091941][ T9124] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 626.124503][ T9132] EXT4-fs (loop2): re-mounted. Opts: bsdgroups,nodiscard,noblock_validity,grpjquota=,grpjquota=,noquota,abort,noload,noload,. Quota mode: none. [ 626.144613][ T9128] EXT4-fs warning (device loop2): dx_probe:893: inode #2: comm syz.2.1247: dx entry: limit 0 != root limit 125 [ 626.160029][ T9128] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1247: Corrupt directory, running e2fsck is recommended [ 626.183856][ T23] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input22 [ 626.243595][ T9128] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 5: comm syz.2.1247: path /24/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0 [ 626.343910][ T9154] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1253'. [ 626.480360][ T23] usb 2-1: USB disconnect, device number 12 [ 626.486545][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 626.505389][ T23] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 627.849690][ T9165] loop2: detected capacity change from 0 to 512 [ 627.877058][ T9164] loop1: detected capacity change from 0 to 1024 [ 627.927018][ T9165] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 628.006582][ T9165] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2002c019, mo2=0002] [ 628.021699][ T9164] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,resgid=0x0000000000000000,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 628.048932][ T9165] System zones: 1-12 [ 628.058751][ T9165] EXT4-fs (loop2): 1 truncate cleaned up [ 628.065602][ T9165] EXT4-fs (loop2): mounted filesystem without journal. Opts: noinit_itable,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,debug,nombcache,stripe=0x0000000000000001,,errors=continue. Quota mode: none. [ 628.107253][ T9165] xt_TCPMSS: Only works on TCP SYN packets [ 628.519127][ T9172] loop0: detected capacity change from 0 to 256 [ 629.403874][ T9176] loop1: detected capacity change from 0 to 512 [ 629.551769][ T9176] EXT4-fs (loop1): 1 truncate cleaned up [ 629.557469][ T9176] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 631.815663][ T9201] loop3: detected capacity change from 0 to 256 [ 631.921217][ T9200] loop4: detected capacity change from 0 to 32768 [ 631.931639][ T9196] loop1: detected capacity change from 0 to 1024 [ 631.964910][ T9200] XFS: attr2 mount option is deprecated. [ 631.970800][ T9200] XFS: noikeep mount option is deprecated. [ 632.055346][ T9196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 632.075821][ T9201] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 632.103925][ T26] audit: type=1800 audit(1726259693.730:249): pid=9196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1261" name="bus" dev="loop1" ino=861 res=0 errno=0 [ 632.306101][ T9200] XFS (loop4): Mounting V5 Filesystem [ 632.416621][ T9200] XFS (loop4): Ending clean mount [ 632.470354][ T9200] XFS (loop4): Quotacheck needed: Please wait. [ 632.858602][ T9200] XFS (loop4): Quotacheck: Done. [ 632.908771][ T9222] loop1: detected capacity change from 0 to 64 [ 633.413513][ T9224] loop2: detected capacity change from 0 to 1764 [ 634.471603][ T1293] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 634.485251][ T4986] XFS (loop4): Unmounting Filesystem [ 634.497117][ T26] audit: type=1800 audit(1726259696.228:250): pid=9223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1270" name="file0" dev="loop2" ino=1986 res=0 errno=0 [ 635.388333][ T7157] hfs: node 4:3 still has 1 user(s)! [ 635.646925][ T9235] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 635.679182][ T9238] xt_CT: You must specify a L4 protocol and not use inversions on it [ 635.689756][ T9240] tipc: Started in network mode [ 635.723149][ T9240] tipc: Node identity 000000000000003a0000400000000001, cluster identity 4711 [ 635.765680][ T9240] tipc: Enabling of bearer rejected, failed to enable media [ 635.772820][ T1293] usb 4-1: device not accepting address 13, error -71 [ 635.788171][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1277'. [ 635.969635][ T9242] loop1: detected capacity change from 0 to 1024 [ 636.121249][ T9249] xt_CONNSECMARK: invalid mode: 0 [ 636.776730][ T9253] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1290'. [ 637.259120][ T1293] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 640.651737][ T1293] usb 4-1: unable to read config index 0 descriptor/all [ 640.658907][ T1293] usb 4-1: can't read configurations, error -71 [ 640.695037][ T1293] usb usb4-port1: attempt power cycle [ 640.861312][ T9273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1283'. [ 642.135135][ T9294] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 642.249670][ T150] block nbd3: Attempted send on invalid socket [ 642.257011][ T150] print_req_error: 74 callbacks suppressed [ 642.257053][ T150] blk_update_request: I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 642.278714][ T9299] (syz.3.1293,9299,1):ocfs2_get_sector:1774 ERROR: status = -5 [ 642.286432][ T9299] (syz.3.1293,9299,1):ocfs2_sb_probe:750 ERROR: status = -5 [ 642.293833][ T9299] (syz.3.1293,9299,1):ocfs2_fill_super:991 ERROR: superblock probe failed! [ 642.302620][ T9299] (syz.3.1293,9299,1):ocfs2_fill_super:1177 ERROR: status = -5 [ 643.847041][ T9306] device team_slave_0 entered promiscuous mode [ 643.854369][ T9306] device team_slave_1 entered promiscuous mode [ 643.860639][ T9306] device geneve0 entered promiscuous mode [ 643.908799][ T9306] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 643.999933][ T9306] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 644.071457][ T9319] loop2: detected capacity change from 0 to 512 [ 644.191917][ T9315] loop3: detected capacity change from 0 to 40427 [ 644.227422][ T9319] EXT4-fs (loop2): Value of option "test_dummy_encryption=test_dummy_encryption" is unrecognized [ 644.283812][ T9315] F2FS-fs (loop3): invalid crc value [ 644.344027][ T9310] device bond0 entered promiscuous mode [ 644.363941][ T9310] device bond_slave_0 entered promiscuous mode [ 644.372214][ T9315] F2FS-fs (loop3): Found nat_bits in checkpoint [ 644.416216][ T9315] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1 [ 644.436356][ T9315] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 644.451946][ T9310] device bond_slave_1 entered promiscuous mode [ 644.458516][ T9310] device macvlan2 entered promiscuous mode [ 644.494682][ T9323] 9pnet: Insufficient options for proto=fd [ 644.603942][ T9310] device team0 entered promiscuous mode [ 645.736318][ T26] audit: type=1800 audit(1726259706.858:251): pid=9328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1297" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 645.953993][ T7826] attempt to access beyond end of device [ 645.953993][ T7826] loop3: rw=2049, want=45104, limit=40427 [ 649.170993][ T9347] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1306'. [ 649.216582][ T9337] loop1: detected capacity change from 0 to 8192 [ 649.416251][ T9337] REISERFS warning (device loop1): sh-2012 read_super_block: found unknown format "1282" of reiserfs with non-standard magic [ 649.480807][ T9337] REISERFS warning (device loop1): sh-2021 reiserfs_fill_super: can not find reiserfs on loop1 [ 649.576371][ T9356] loop2: detected capacity change from 0 to 512 [ 649.813419][ T9356] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 649.866663][ T9356] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 649.887524][ T9356] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1309: Corrupt directory, running e2fsck is recommended [ 650.014272][ T9356] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2 [ 650.065099][ T9356] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.1309: corrupted in-inode xattr [ 650.112053][ T9356] EXT4-fs (loop2): Remounting filesystem read-only [ 650.132471][ T9356] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.1309: couldn't read orphan inode 15 (err -117) [ 650.198372][ T9356] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,dioread_lock,init_itable,auto_da_alloc,grpjquota=.nouid32,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback. [ 650.737088][ T9374] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 650.748728][ T9374] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 650.758970][ T9374] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.1309: Corrupt directory, running e2fsck is recommended [ 654.622092][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 654.670996][ T9379] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 654.714826][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1324'. [ 654.725773][ T9381] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1324'. [ 654.822111][ T9387] loop4: detected capacity change from 0 to 256 [ 654.862669][ T9389] loop3: detected capacity change from 0 to 1024 [ 655.048135][ T9387] FAT-fs (loop4): Unrecognized mount option "uid=00000000000000000000!$98 @Nz|hSPl`8aD_vA0" or missing value [ 655.352589][ T9397] loop0: detected capacity change from 0 to 2048 [ 655.370277][ T9389] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 655.464441][ T9397] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.199802][ T9415] loop3: detected capacity change from 0 to 128 [ 657.277809][ T9423] loop1: detected capacity change from 0 to 2048 [ 657.293129][ T9419] loop2: detected capacity change from 0 to 1024 [ 657.400127][ T9423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 657.418405][ T26] audit: type=1326 audit(1726259720.301:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 657.446797][ T26] audit: type=1326 audit(1726259720.312:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 657.566226][ T26] audit: type=1326 audit(1726259720.312:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 657.610579][ T26] audit: type=1326 audit(1726259720.312:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 657.669092][ T26] audit: type=1326 audit(1726259720.312:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 657.823781][ T26] audit: type=1326 audit(1726259720.312:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 657.848660][ T26] audit: type=1326 audit(1726259720.312:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 657.871813][ T26] audit: type=1326 audit(1726259720.312:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 657.896590][ T26] audit: type=1326 audit(1726259720.333:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 657.921117][ T26] audit: type=1326 audit(1726259720.333:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9418 comm="syz.2.1323" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89f2758ef9 code=0x7ffc0000 [ 658.180315][ T3585] Bluetooth: hci2: ACL packet for unknown connection handle 0 [ 658.295101][ T9435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1331'. [ 658.367150][ T9435] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1331'. [ 659.632096][ T9451] loop1: detected capacity change from 0 to 128 [ 659.642492][ T9449] loop4: detected capacity change from 0 to 2048 [ 659.803258][ T9451] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 659.883519][ T9451] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 659.915004][ T9449] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #2: comm syz.4.1335: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 660.113928][ T9449] EXT4-fs (loop4): get root inode failed [ 660.120033][ T9449] EXT4-fs (loop4): mount failed [ 660.267542][ T3646] Bluetooth: hci0: command 0x0406 tx timeout [ 660.618333][ T9461] loop4: detected capacity change from 0 to 512 [ 660.742972][ T9463] loop2: detected capacity change from 0 to 128 [ 660.772680][ T9461] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 660.833858][ T9463] FAT-fs (loop2): bogus number of FAT structure [ 660.850756][ T9463] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 660.885236][ T9461] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 660.900028][ T9463] FAT-fs (loop2): Can't find a valid FAT filesystem [ 660.938949][ T9461] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.1335: invalid indirect mapped block 2683928664 (level 1) [ 660.961979][ T9461] EXT4-fs (loop4): Remounting filesystem read-only [ 660.973526][ T9461] EXT4-fs (loop4): 1 truncate cleaned up [ 660.983628][ T9461] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.". Quota mode: writeback. [ 661.819056][ T9475] loop0: detected capacity change from 0 to 512 [ 662.542797][ T9475] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 662.708355][ T9475] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 662.738886][ T9475] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 662.802389][ T9475] EXT4-fs (loop0): 1 truncate cleaned up [ 662.822937][ T9475] EXT4-fs (loop0): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,data_err=ignore,grpjquota="errors=continue,errors=remount-ro,jqfmt=vfsv1,. Quota mode: writeback. [ 662.979861][ T9489] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117 [ 663.026629][ T9489] PKCS7: Only support pkcs7_signedData type [ 664.058213][ T9501] xt_bpf: check failed: parse error [ 664.146624][ T5545] Bluetooth: hci3: command 0x1407 tx timeout [ 664.295640][ T9505] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 664.740323][ T9507] loop1: detected capacity change from 0 to 190 [ 664.798966][ T9510] loop2: detected capacity change from 0 to 512 [ 664.972986][ T9513] loop0: detected capacity change from 0 to 64 [ 664.980183][ T9507] __ntfs_warning: 3 callbacks suppressed [ 664.980202][ T9507] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum. [ 665.030342][ T9510] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 665.099504][ T9510] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038 (0x7fffffff) [ 665.113318][ T9507] ntfs: (device loop1): ntfs_mapping_pairs_decompress(): Corrupt attribute. [ 665.274228][ T9507] ntfs: (device loop1): ntfs_read_block(): Failed to read from inode 0x1, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5). [ 665.714977][ T9507] ntfs: (device loop1): check_mft_mirror(): Failed to read $MFTMirr. [ 665.959647][ T9507] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Will not be able to remount read-write. Run ntfsfix and/or chkdsk. [ 666.050231][ T9507] ntfs: (device loop1): ntfs_attr_find(): Inode is corrupt. Run chkdsk. [ 666.128820][ T9507] ntfs: (device loop1): ntfs_read_locked_inode(): Failed to lookup attribute list attribute. [ 666.146907][ T9522] loop4: detected capacity change from 0 to 64 [ 666.202280][ T9507] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 666.311489][ T9507] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 666.324651][ T9507] ntfs: volume version 3.1. [ 666.329561][ T9507] ntfs: (device loop1): ntfs_read_locked_inode(): Inode is not in use! [ 666.343120][ T9507] attempt to access beyond end of device [ 666.343120][ T9507] loop1: rw=0, want=560, limit=190 [ 666.440642][ T9507] attempt to access beyond end of device [ 666.440642][ T9507] loop1: rw=0, want=560, limit=190 [ 666.491222][ T8285] hfs: node 4:3 still has 1 user(s)! [ 666.495446][ T9525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 666.646166][ T9525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.604107][ T9534] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1355'. [ 667.715239][ T9534] netlink: 'syz.0.1355': attribute type 1 has an invalid length. [ 670.517539][ T9538] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1356'. [ 670.582659][ T1293] Bluetooth: hci3: command 0x0406 tx timeout [ 671.576116][ T9555] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1360'. [ 671.839018][ T3703] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 672.406716][ T9567] loop3: detected capacity change from 0 to 64 [ 672.958243][ T9569] loop4: detected capacity change from 0 to 2048 [ 672.981358][ T3703] usb 3-1: Using ep0 maxpacket: 16 [ 673.268975][ T9404] loop4: p2 p3 p7 [ 673.275136][ T8485] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 673.612248][ T7826] hfs: node 4:3 still has 1 user(s)! [ 673.727899][ T8485] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 673.730257][ T9569] loop4: p2 p3 p7 [ 673.741663][ T8485] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 673.753126][ T8485] usb 2-1: config 0 descriptor?? [ 673.766102][ T3703] usb 3-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 673.781589][ T3703] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 673.791937][ T3703] usb 3-1: Product: syz [ 673.828346][ T3703] usb 3-1: Manufacturer: syz [ 673.837677][ T3703] usb 3-1: SerialNumber: syz [ 673.871665][ T3703] usb 3-1: config 0 descriptor?? [ 673.906985][ T9437] udevd[9437]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 673.919815][ T9404] udevd[9404]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 673.926873][ T3703] appledisplay 3-1:0.0: Could not find int-in endpoint [ 673.938662][ T9383] udevd[9383]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 673.976816][ T3703] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 674.051156][ T9383] udevd[9383]: inotify_add_watch(7, /dev/loop4p7, 10) failed: No such file or directory [ 674.068547][ T9585] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 674.078992][ T9404] udevd[9404]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 674.095266][ T9437] udevd[9437]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 674.747829][ T9587] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 675.038729][ T9585] VFS: Can't find a romfs filesystem on dev nullb0. [ 675.038729][ T9585] [ 675.139416][ T3655] usb 3-1: USB disconnect, device number 13 [ 675.191690][ T9593] loop4: detected capacity change from 0 to 256 [ 675.262772][ T9593] exfat: Bad value for 'uid' [ 675.272341][ T8485] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00 [ 675.288232][ T8485] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 675.299467][ T9594] loop3: detected capacity change from 0 to 1024 [ 675.329019][ T8485] [drm:udl_init] *ERROR* Selecting channel failed [ 675.403035][ T8485] [drm] Initialized udl 0.0.1 20120220 for 2-1:0.0 on minor 2 [ 675.469800][ T9597] loop1: detected capacity change from 0 to 256 [ 675.482015][ T8485] [drm] Initialized udl on minor 2 [ 675.491880][ T9594] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,,errors=continue. Quota mode: none. [ 675.519254][ T3655] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 675.601498][ T8485] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 675.629714][ T8485] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 675.810097][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 675.845026][ T8485] usb 2-1: USB disconnect, device number 13 [ 675.896602][ T7] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 675.936823][ T7] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 676.024330][ T3655] usb 3-1: device not accepting address 14, error -71 [ 676.089751][ T9597] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d) [ 676.110994][ T9597] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 676.927204][ T3611] Bluetooth: hci3: command 0x0405 tx timeout [ 677.759046][ T1395] ieee802154 phy0 wpan0: encryption failed: -22 [ 677.765835][ T1395] ieee802154 phy1 wpan1: encryption failed: -22 [ 679.123476][ T9630] loop3: detected capacity change from 0 to 16 [ 679.179635][ T9630] erofs: (device loop3): mounted with root inode @ nid 36. [ 679.299201][ T9632] netlink: 'syz.1.1379': attribute type 4 has an invalid length. [ 679.417907][ T9632] netlink: 'syz.1.1379': attribute type 1 has an invalid length. [ 680.284502][ T9632] netlink: 'syz.1.1379': attribute type 7 has an invalid length. [ 680.394492][ T26] kauditd_printk_skb: 10 callbacks suppressed [ 680.394508][ T26] audit: type=1107 audit(1726259744.406:265): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='63\m!iN͋E~8*ԎFE@P7+k' [ 680.556780][ T9638] sp0: Synchronizing with TNC [ 680.576726][ T9640] loop2: detected capacity change from 0 to 2048 [ 680.623472][ T9646] nvme_fabrics: missing parameter 'transport=%s' [ 680.666477][ T9646] nvme_fabrics: missing parameter 'nqn=%s' [ 680.702285][ T9637] [U] ` [ 680.997161][ T9651] loop1: detected capacity change from 0 to 1764 [ 682.016345][ T9640] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 682.276738][ T9662] loop4: detected capacity change from 0 to 1024 [ 683.656742][ T9677] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1391'. [ 684.330383][ T9675] loop3: detected capacity change from 0 to 512 [ 684.390464][ T8229] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 684.491497][ T8229] EXT4-fs error (device loop2): __ext4_iget:4872: inode #13: block 127754: comm syz-executor: invalid block [ 684.555523][ T8229] EXT4-fs error (device loop2): __ext4_iget:4872: inode #13: block 127754: comm syz-executor: invalid block [ 686.019987][ T9700] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1402'. [ 686.411181][ T9680] loop1: detected capacity change from 0 to 40427 [ 686.551697][ T9680] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 686.573435][ T9680] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 686.591102][ T9707] ------------[ cut here ]------------ [ 686.597910][ T9707] WARNING: CPU: 1 PID: 9707 at kernel/softirq.c:363 __local_bh_enable_ip+0x1b3/0x1f0 [ 686.608371][ T9707] Modules linked in: [ 686.612890][ T9707] CPU: 1 PID: 9707 Comm: syz.3.1404 Not tainted 5.15.167-syzkaller #0 [ 686.621343][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 686.632129][ T9707] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0 [ 686.638488][ T9707] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 [ 686.660172][ T9707] RSP: 0018:ffffc90002e47140 EFLAGS: 00010046 [ 686.666321][ T9707] RAX: 0000000000000000 RBX: 1ffff920005c8e2c RCX: 0000000000040000 [ 686.674327][ T9707] RDX: ffffc90004499000 RSI: 0000000000000200 RDI: ffffffff884b8e55 [ 686.682426][ T9707] RBP: ffffc90002e471f0 R08: dffffc0000000000 R09: fffffbfff1bd2c16 [ 686.690438][ T9707] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 686.698617][ T9707] R13: 1ffff1100c3a2418 R14: ffffc90002e47180 R15: 0000000000000200 [ 686.706756][ T9707] FS: 00007ffa412686c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 686.715932][ T9707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 686.722852][ T9707] CR2: 0000001b2ca13ff8 CR3: 000000006504c000 CR4: 00000000003506e0 [ 686.730969][ T9707] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 686.738999][ T9707] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 686.747104][ T9707] Call Trace: [ 686.750458][ T9707] [ 686.753462][ T9707] ? __warn+0x15b/0x300 [ 686.758113][ T9707] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 686.764065][ T9707] ? report_bug+0x1b7/0x2e0 [ 686.769284][ T9707] ? handle_bug+0x3d/0x70 [ 686.774162][ T9707] ? exc_invalid_op+0x16/0x40 [ 686.779157][ T9707] ? asm_exc_invalid_op+0x16/0x20 [ 686.784430][ T9707] ? local_bh_enable+0x5/0x20 [ 686.789296][ T9707] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 686.795221][ T9707] ? local_bh_enable+0x5/0x20 [ 686.800323][ T9707] ? _local_bh_enable+0xa0/0xa0 [ 686.805540][ T9707] __dev_queue_xmit+0x1c56/0x3230 [ 686.810930][ T9707] ? dev_queue_xmit+0x20/0x20 [ 686.815745][ T9707] ? __copy_skb_header+0x47b/0x600 [ 686.821285][ T9707] ? __skb_clone+0x454/0x6c0 [ 686.827450][ T9707] ? skb_clone+0x1ee/0x350 [ 686.832060][ T9707] __netlink_deliver_tap+0x4d2/0x760 [ 686.837797][ T9707] netlink_deliver_tap+0x16c/0x180 [ 686.843655][ T9707] netlink_broadcast_filtered+0xc2d/0x11a0 [ 686.849257][ T8485] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 686.851882][ T9707] netlink_broadcast+0x35/0x50 [ 686.866384][ T9707] genlmsg_multicast_netns+0x8e/0xc0 [ 686.872191][ T9707] nl80211_frame_tx_status+0x659/0xa40 [ 686.878676][ T9707] ? cfg80211_control_port_tx_status+0x50/0x50 [ 686.885112][ T9707] ? do_raw_spin_unlock+0x137/0x8b0 [ 686.890713][ T9707] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 686.897321][ T9707] ? _raw_spin_unlock+0x40/0x40 [ 686.903217][ T9707] cfg80211_mgmt_tx_status+0x3a/0x50 [ 686.908898][ T9707] ieee80211_report_used_skb+0x12f6/0x1810 [ 686.915530][ T9707] ? _raw_spin_lock_irqsave+0xac/0x120 [ 686.921419][ T9707] ? ieee80211_handle_filtered_frame+0x750/0x750 [ 686.928088][ T9707] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 686.933604][ T9707] ? _raw_spin_lock+0x40/0x40 [ 686.939020][ T9707] ? skb_queue_purge+0x2b9/0x2e0 [ 686.944108][ T9707] ieee80211_free_txskb+0x1e/0x30 [ 686.949531][ T9707] ieee80211_do_stop+0x10b8/0x1ce0 [ 686.955353][ T9707] ? ieee80211_stop_queues_by_reason+0x1ce/0x250 [ 686.962308][ T9707] ? ieee80211_sdata_stop+0x70/0x70 [ 686.967669][ T9707] ? ieee80211_add_pending_skbs+0x390/0x390 [ 686.973726][ T9707] ? ieee80211_get_vif_queues+0x228/0x390 [ 686.979814][ T9707] ieee80211_if_change_type+0x447/0x9f0 [ 686.985539][ T9707] ieee80211_change_iface+0x57/0x430 [ 686.991598][ T9707] ? cfg80211_mlme_purge_registrations+0x1f3/0x220 [ 686.998166][ T9707] cfg80211_change_iface+0x8ab/0x10c0 [ 687.003718][ T9707] __cfg80211_wext_siwmode+0x1b7/0x280 [ 687.009418][ T9707] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 687.015447][ T9707] ? apparmor_capable+0x12e/0x190 [ 687.021065][ T9707] ? full_name_hash+0x8f/0xe0 [ 687.026772][ T9707] ioctl_standard_call+0xdb/0x280 [ 687.032423][ T9707] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 687.038607][ T9707] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 687.044987][ T9707] wext_ioctl_dispatch+0x16f/0x460 [ 687.050641][ T9707] ? wext_ioctl_dispatch+0x460/0x460 [ 687.056787][ T9707] ? iw_handler_get_private+0x1e0/0x1e0 [ 687.063423][ T9707] wext_handle_ioctl+0x15b/0x260 [ 687.069334][ T9707] ? call_commit_handler+0xf0/0xf0 [ 687.075056][ T9707] sock_ioctl+0x13b/0x770 [ 687.079950][ T9707] ? sock_poll+0x410/0x410 [ 687.084690][ T9707] ? __fget_files+0x413/0x480 [ 687.089967][ T9707] ? bpf_lsm_file_ioctl+0x5/0x10 [ 687.096299][ T9707] ? security_file_ioctl+0x7d/0xa0 [ 687.103040][ T9707] ? sock_poll+0x410/0x410 [ 687.108089][ T9707] __se_sys_ioctl+0xf1/0x160 [ 687.113685][ T9707] do_syscall_64+0x3b/0xb0 [ 687.118864][ T9707] ? clear_bhb_loop+0x15/0x70 [ 687.124016][ T9707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 687.131026][ T9707] RIP: 0033:0x7ffa42defef9 [ 687.135725][ T9707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.157906][ T9707] RSP: 002b:00007ffa41268038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.166880][ T9707] RAX: ffffffffffffffda RBX: 00007ffa42fa7f80 RCX: 00007ffa42defef9 [ 687.175804][ T9707] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000004 [ 687.185331][ T9707] RBP: 00007ffa42e62b76 R08: 0000000000000000 R09: 0000000000000000 [ 687.194813][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.204003][ T9707] R13: 0000000000000000 R14: 00007ffa42fa7f80 R15: 00007fffb391d398 [ 687.213361][ T9707] [ 687.216629][ T9707] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 687.225123][ T9707] CPU: 1 PID: 9707 Comm: syz.3.1404 Not tainted 5.15.167-syzkaller #0 [ 687.235032][ T9707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 687.246358][ T9707] Call Trace: [ 687.250043][ T9707] [ 687.253321][ T9707] dump_stack_lvl+0x1e3/0x2d0 [ 687.258498][ T9707] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 687.264713][ T9707] ? panic+0x860/0x860 [ 687.269239][ T9707] ? panic+0x860/0x860 [ 687.273764][ T9707] ? __local_bh_enable_ip+0xe0/0x1f0 [ 687.279670][ T9707] ? __local_bh_enable_ip+0xe0/0x1f0 [ 687.285119][ T9707] panic+0x318/0x860 [ 687.289676][ T9707] ? __warn+0x16a/0x300 [ 687.294191][ T9707] ? fb_is_primary_device+0xd0/0xd0 [ 687.299821][ T9707] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 687.305614][ T9707] __warn+0x2b2/0x300 [ 687.309933][ T9707] ? __local_bh_enable_ip+0x1b3/0x1f0 [ 687.315758][ T9707] report_bug+0x1b7/0x2e0 [ 687.321870][ T9707] handle_bug+0x3d/0x70 [ 687.327054][ T9707] exc_invalid_op+0x16/0x40 [ 687.332208][ T9707] asm_exc_invalid_op+0x16/0x20 [ 687.337632][ T9707] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0 [ 687.343846][ T9707] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 44 94 e9 8d 80 e1 07 80 c1 03 38 c1 [ 687.365731][ T9707] RSP: 0018:ffffc90002e47140 EFLAGS: 00010046 [ 687.372245][ T9707] RAX: 0000000000000000 RBX: 1ffff920005c8e2c RCX: 0000000000040000 [ 687.380454][ T9707] RDX: ffffc90004499000 RSI: 0000000000000200 RDI: ffffffff884b8e55 [ 687.388807][ T9707] RBP: ffffc90002e471f0 R08: dffffc0000000000 R09: fffffbfff1bd2c16 [ 687.397123][ T9707] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 687.405538][ T9707] R13: 1ffff1100c3a2418 R14: ffffc90002e47180 R15: 0000000000000200 [ 687.413484][ T9680] F2FS-fs (loop1): Found nat_bits in checkpoint [ 687.413868][ T9707] ? local_bh_enable+0x5/0x20 [ 687.426607][ T9707] ? local_bh_enable+0x5/0x20 [ 687.432369][ T9707] ? _local_bh_enable+0xa0/0xa0 [ 687.441045][ T9707] __dev_queue_xmit+0x1c56/0x3230 [ 687.448044][ T9707] ? dev_queue_xmit+0x20/0x20 [ 687.455364][ T9707] ? __copy_skb_header+0x47b/0x600 [ 687.462479][ T9707] ? __skb_clone+0x454/0x6c0 [ 687.468509][ T9707] ? skb_clone+0x1ee/0x350 [ 687.473803][ T9707] __netlink_deliver_tap+0x4d2/0x760 [ 687.480370][ T9707] netlink_deliver_tap+0x16c/0x180 [ 687.485671][ T9707] netlink_broadcast_filtered+0xc2d/0x11a0 [ 687.492547][ T9707] netlink_broadcast+0x35/0x50 [ 687.499164][ T9707] genlmsg_multicast_netns+0x8e/0xc0 [ 687.505170][ T9707] nl80211_frame_tx_status+0x659/0xa40 [ 687.511993][ T9707] ? cfg80211_control_port_tx_status+0x50/0x50 [ 687.514205][ T9680] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 687.522577][ T9707] ? do_raw_spin_unlock+0x137/0x8b0 [ 687.522630][ T9707] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 687.522659][ T9707] ? _raw_spin_unlock+0x40/0x40 [ 687.522688][ T9707] cfg80211_mgmt_tx_status+0x3a/0x50 [ 687.531021][ T9680] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 687.537984][ T9707] ieee80211_report_used_skb+0x12f6/0x1810 [ 687.538034][ T9707] ? _raw_spin_lock_irqsave+0xac/0x120 [ 687.538067][ T9707] ? ieee80211_handle_filtered_frame+0x750/0x750 [ 687.552227][ T8485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 687.556973][ T9707] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 687.557017][ T9707] ? _raw_spin_lock+0x40/0x40 [ 687.557046][ T9707] ? skb_queue_purge+0x2b9/0x2e0 [ 687.609136][ T8485] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 687.612075][ T9707] ieee80211_free_txskb+0x1e/0x30 [ 687.612123][ T9707] ieee80211_do_stop+0x10b8/0x1ce0 [ 687.612164][ T9707] ? ieee80211_stop_queues_by_reason+0x1ce/0x250 [ 687.618608][ T8485] usb 5-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 687.628411][ T9707] ? ieee80211_sdata_stop+0x70/0x70 [ 687.628455][ T9707] ? ieee80211_add_pending_skbs+0x390/0x390 [ 687.636255][ T8485] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 687.641029][ T9707] ? ieee80211_get_vif_queues+0x228/0x390 [ 687.641083][ T9707] ieee80211_if_change_type+0x447/0x9f0 [ 687.641124][ T9707] ieee80211_change_iface+0x57/0x430 [ 687.641157][ T9707] ? cfg80211_mlme_purge_registrations+0x1f3/0x220 [ 687.641190][ T9707] cfg80211_change_iface+0x8ab/0x10c0 [ 687.641229][ T9707] __cfg80211_wext_siwmode+0x1b7/0x280 [ 687.641261][ T9707] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 687.641296][ T9707] ? apparmor_capable+0x12e/0x190 [ 687.641322][ T9707] ? full_name_hash+0x8f/0xe0 [ 687.641354][ T9707] ioctl_standard_call+0xdb/0x280 [ 687.668682][ T8485] usb 5-1: config 0 descriptor?? [ 687.673349][ T9707] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 687.673392][ T9707] ? __cfg80211_wext_giwfreq+0x7e0/0x7e0 [ 687.673417][ T9707] wext_ioctl_dispatch+0x16f/0x460 [ 687.771071][ T9707] ? wext_ioctl_dispatch+0x460/0x460 [ 687.777193][ T9707] ? iw_handler_get_private+0x1e0/0x1e0 [ 687.783924][ T9707] wext_handle_ioctl+0x15b/0x260 [ 687.790191][ T9707] ? call_commit_handler+0xf0/0xf0 [ 687.796330][ T9707] sock_ioctl+0x13b/0x770 [ 687.800868][ T9707] ? sock_poll+0x410/0x410 [ 687.806591][ T9707] ? __fget_files+0x413/0x480 [ 687.812430][ T9707] ? bpf_lsm_file_ioctl+0x5/0x10 [ 687.818269][ T9707] ? security_file_ioctl+0x7d/0xa0 [ 687.824333][ T9707] ? sock_poll+0x410/0x410 [ 687.829772][ T9707] __se_sys_ioctl+0xf1/0x160 [ 687.835855][ T9707] do_syscall_64+0x3b/0xb0 [ 687.841692][ T9707] ? clear_bhb_loop+0x15/0x70 [ 687.846867][ T9707] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 687.854050][ T9707] RIP: 0033:0x7ffa42defef9 [ 687.859509][ T9707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 687.884640][ T9707] RSP: 002b:00007ffa41268038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 687.894918][ T9707] RAX: ffffffffffffffda RBX: 00007ffa42fa7f80 RCX: 00007ffa42defef9 [ 687.906906][ T9707] RDX: 0000000020000000 RSI: 0000000000008b06 RDI: 0000000000000004 [ 687.916906][ T9707] RBP: 00007ffa42e62b76 R08: 0000000000000000 R09: 0000000000000000 [ 687.926567][ T9707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 687.935770][ T9707] R13: 0000000000000000 R14: 00007ffa42fa7f80 R15: 00007fffb391d398 [ 687.945035][ T9707] [ 687.949482][ T9707] Kernel Offset: disabled [ 687.958043][ T9707] Rebooting in 86400 seconds..