last executing test programs: 4m57.348801636s ago: executing program 32 (id=7): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 4m18.845373257s ago: executing program 33 (id=322): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg$unix(r0, &(0x7f0000006200)=[{{&(0x7f0000000540)=@abs, 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/232, 0xe8}], 0x1}}], 0x1, 0x0, 0x0) 4m3.436938087s ago: executing program 34 (id=390): syz_usb_connect(0x5, 0x2d, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x7}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in6=@ipv4={'\x00', '\xff\xff', @private=0xa010101}, 0x0, 0x3c}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x6, 0x4, 0x3, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x4e25, 0x0, @empty, 0x7}, 0x1c) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0xffd8) 4m2.35901101s ago: executing program 35 (id=394): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) ioctl$PPPIOCGL2TPSTATS(r2, 0x40047452, 0xffffffffffffffff) 3m59.704668595s ago: executing program 36 (id=408): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='proc/sys/net/ipv4/ip_forward\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1\n', 0x2) 3m54.865588917s ago: executing program 37 (id=429): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1d0000001400010000000000000000002d00000002000000050002000a000000"], 0x1d}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="380000001800010000000000000000002d0000000000000001000000050001000a0000000c000f8008000200f40100000800040002000000"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001a00010300000000000000002d000000"], 0x14}}, 0x0) 3m50.57016842s ago: executing program 38 (id=440): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') 3m12.066446398s ago: executing program 39 (id=505): socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)={0x5c, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x34, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0xe1f}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x88}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000c80)=ANY=[@ANYBLOB='\\\x00\x00\x00\n'], 0x5c}, 0x1, 0x0, 0x0, 0x10000042}, 0x90) 3m11.381683008s ago: executing program 8 (id=574): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000340)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3m10.802914596s ago: executing program 8 (id=575): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="700000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r2], 0x70}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0x7}, {0x3}}}, 0x24}}, 0x0) 3m9.48791705s ago: executing program 40 (id=577): timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x2}, &(0x7f0000000b80)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) 3m9.435463289s ago: executing program 8 (id=582): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) 3m9.055165082s ago: executing program 8 (id=585): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '#]+$', 0x3a, '{', 0x3a, './file0/file0', 0x3a, [0x46]}, 0x33) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0xc8) 3m8.09186632s ago: executing program 8 (id=592): pipe(&(0x7f0000000080)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) r2 = getpgrp(0x0) syz_pidfd_open(r2, 0x0) splice(r0, 0x0, r1, 0x0, 0x4ffe6, 0x8864000000000000) 3m6.314275334s ago: executing program 8 (id=596): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x20030b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x2, 0xa3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x25, {0x0, 0x0, 0x0, 0xfffffffd}}) 3m5.684504288s ago: executing program 41 (id=596): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x20030b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000580)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x45}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000500)={0x0, 0x1fffd, 0x0, 0x3}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x4, 0x3, 0x10000004, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf7ff, 0x8, 0xfffffffe, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf910, 0x1000, 0x2, 0xa3, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29a7, 0x8200, 0x2, 0x367}}], 0x1, &(0x7f0000000340)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, r4, '\x00', {0x1, 0x0, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x25, {0x0, 0x0, 0x0, 0xfffffffd}}) 2m57.055724198s ago: executing program 9 (id=637): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0x43, 0x1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x1, r1}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000005c0)={0x0, r1}) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000500)=' ,1\t#|^q', 0x8}], 0x1) 2m56.804775827s ago: executing program 9 (id=639): ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(0xffffffffffffffff, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x8}) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) 2m56.437538354s ago: executing program 9 (id=640): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) setrlimit(0x9, &(0x7f0000000080)={0x8606, 0xffff}) io_setup(0x8f0, &(0x7f0000002400)) 2m54.547061482s ago: executing program 9 (id=645): r0 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x40, &(0x7f0000000340), 0x1, 0x55b, &(0x7f0000000940)="$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") write$binfmt_register(r0, &(0x7f0000000100)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x9, 0x3a, '#]+$', 0x3a, '{', 0x3a, './file0/file0', 0x3a, [0x46]}, 0x33) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file0\x00', 0x300, 0xc8) 2m53.80309939s ago: executing program 9 (id=647): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x25}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x540000, r1}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x6, 0x0, 0x100, 0x4, 0x460202}) 2m52.049168063s ago: executing program 9 (id=654): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845) syz_emit_ethernet(0x9a, &(0x7f0000000240)={@local, @random="c9963525a3c5", @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "000002", 0x64, 0x11, 0x1, @private1, @local, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "0ba8ebff914b28cd07839eee6a646a3243164002bc075ff0698b165afe9177bb", "e76b3787cb70d64f50435d86e0b210f2", {"e2d1e37ee7e88fc0dbf9f56a1a5d2295", "5d5724c32505f0ae3f01163aa27d6658"}}}}}}}}, 0x0) 2m51.388581288s ago: executing program 42 (id=654): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0x3, @empty, 0x8}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}}], 0x4000000000000d6, 0x4000845) syz_emit_ethernet(0x9a, &(0x7f0000000240)={@local, @random="c9963525a3c5", @void, {@ipv6={0x86dd, @udp={0xa, 0x6, "000002", 0x64, 0x11, 0x1, @private1, @local, {[], {0x4e1d, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x3, "0ba8ebff914b28cd07839eee6a646a3243164002bc075ff0698b165afe9177bb", "e76b3787cb70d64f50435d86e0b210f2", {"e2d1e37ee7e88fc0dbf9f56a1a5d2295", "5d5724c32505f0ae3f01163aa27d6658"}}}}}}}}, 0x0) 2m39.687237525s ago: executing program 6 (id=568): r0 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x10084c3, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) write$cgroup_devices(r0, &(0x7f0000000040)={'b', ' *:* ', 'rw\x00'}, 0x9) 2m39.027787916s ago: executing program 6 (id=684): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000700)=0xdfffffff, 0x4) 2m37.385188158s ago: executing program 6 (id=686): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000006c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x4, {0x7, 0x28, 0x0, 0x50906000, 0x0, 0x2, 0x0, 0x3, 0x0, 0x0, 0x100, 0xff}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x604300, 0x164) utimensat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 2m36.749437593s ago: executing program 6 (id=691): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) 2m36.038885038s ago: executing program 6 (id=697): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x200000, &(0x7f0000000380), 0x3, 0x589, &(0x7f0000001580)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3100401, 0x0, 0xfc, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x1a1) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea, 0xfffffffc}) 2m34.414188383s ago: executing program 6 (id=699): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 2m18.796180808s ago: executing program 43 (id=699): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 2m12.493006759s ago: executing program 7 (id=769): pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0xe0000000}) fcntl$setpipe(r1, 0x407, 0x0) read$FUSE(r0, &(0x7f0000000480)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r1, &(0x7f00000024c0)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0xffff, 0x0, 0x0, 0x20000000000007f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, r3, 0x3, 0x2}}}, 0x90) 2m11.725602579s ago: executing program 7 (id=773): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x804}, 0x4) 2m11.363676085s ago: executing program 7 (id=775): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000900)=r2, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff20000000003a000aac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) 2m10.415907302s ago: executing program 7 (id=777): syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xae4, &(0x7f0000000340)="$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") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) 2m7.521859324s ago: executing program 7 (id=785): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000003300)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x24044894) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 2m4.169348514s ago: executing program 7 (id=798): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) 2m2.540293912s ago: executing program 44 (id=798): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) ioctl$UFFDIO_POISON(r0, 0xc020aa08, 0x0) 26.445304758s ago: executing program 0 (id=1143): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xff070000, 0x2}, 0x50) 16.951147243s ago: executing program 0 (id=1176): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="00dc6b"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00033c0000005d03"], 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000680)={0x2c, 0x0, &(0x7f0000000480)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0}, 0x0) 13.178302402s ago: executing program 0 (id=1190): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, 0x0, &(0x7f00000000c0)=0x0, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0) r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x5, 0x4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2bbea4138c1bc02d}}}, 0x0) r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000340)={0x2e, 0x0, 0x0, r6, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, r7, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000280)=@new_dev={0x2, 0x90, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x21}}}, &(0x7f00000003c0)=0x0) syz_ublk_setup_queues(r8, r9, 0x0, 0x0, 0x1, &(0x7f0000000180)={0x2e, 0x0, 0x0, r8, 0xc0107525, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfffc, 0x0, 0x0, 0x0}}, 0x0) 11.73534171s ago: executing program 0 (id=1194): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x8, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000700)=[0x2], 0x0, 0x0, 0x200000000000022f}}, 0x40) 9.909833659s ago: executing program 0 (id=1204): add_key$fscrypt_provisioning(&(0x7f00000001c0), 0x0, 0x0, 0x0, 0xfffffffffffffffc) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x20f42, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061835294cc0c618aba204f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b848de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") socket(0x400000000010, 0x3, 0x0) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fsync(r1) 9.608991171s ago: executing program 4 (id=1206): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x11c9cd6, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 9.078249575s ago: executing program 4 (id=1209): socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2e0, 0x88, 0x0, &(0x7f0000000100)="b9ff03076044238cb89e0cf086dd0de0ffff00184000630677fbac141414e000000162079f4b4d2f87e5feca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43", 0x0, 0xfe, 0x60000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x3}, 0x50) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001580)=ANY=[@ANYBLOB="600000000206030000000000b8791fa80000000014000780080012400000000005001500010000000500010006000000050005000200000005000400000000000900020073797a310000000012000300686173683a6e65742c706f7274"], 0x60}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ac1414aa050007008400000006000440462000000c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x74040017}, 0x80) 8.382552042s ago: executing program 4 (id=1213): socket$inet6_sctp(0xa, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000c3fb0000000000000000850000002f000000850000007d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x94) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r0, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000004540)={0xfffffffffffffe10, 0x2a, 0x301, 0x70bd27, 0x25dfdbfd, {0x7}}, 0x14}}, 0x0) 8.254011573s ago: executing program 1 (id=1214): syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 7.725045378s ago: executing program 3 (id=1216): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004400, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[], [], 0x6b}}) shutdown(r0, 0x1) 7.547806417s ago: executing program 4 (id=1217): syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/ttyUSB0\x00', 0x2, 0x0) 6.945163552s ago: executing program 2 (id=1218): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dff, 0x15}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x1, 0xfffffff9, 0x7ff, 0xd, "006204000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 6.806366062s ago: executing program 3 (id=1219): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e22, @multicast1}, 0x10) 6.304808343s ago: executing program 3 (id=1220): r0 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=") ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0xc0506617, &(0x7f0000000b00)={@desc={0x1, 0x0, @desc3}, 0x10, 0x0, '\x00', @d}) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r1, 0x800c6613, &(0x7f0000000040)=@v1={0x0, @adiantum, 0x4, @desc3}) chdir(&(0x7f00000002c0)='mnt/encrypted_dir\x00') fspick(0xffffffffffffff9c, &(0x7f0000000080)='mnt\x00', 0x1) 5.82764589s ago: executing program 2 (id=1221): socket(0x23, 0xa, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x150, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x1e8, 0xffffffff, 0xffffffff, 0x1e8, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x150, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x1, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x2000, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x6, 0x0, 0x0, 0x4, 0x1], 0x2, 0x1}, {0x1, [0x2, 0x2, 0x6, 0x1, 0x6, 0x1], 0x1, 0x4}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, 0xff, 0xffffff, 'wlan0\x00', 'vcan0\x00', {}, {0xff}, 0x32}, 0x0, 0x70, 0x98}, @common=@unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x8}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2e0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5.470965788s ago: executing program 3 (id=1222): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r1, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r1, &(0x7f0000000100)="d5c0", 0x2) write$P9_RXATTRWALK(r1, &(0x7f0000000180)={0xf, 0x1f, 0x1, 0xb61}, 0xf) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000040)=[0x8], 0x0, 0x0, 0x1, 0x1}}, 0x40) 5.441950202s ago: executing program 5 (id=1223): sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x9, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x3, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x400, 0x2100, 0x10000004, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x11e0, 0x1, 0xfffffffe, 0xaf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf911, 0x0, 0x0, 0x1f0, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xac1b, 0x8200, 0x2, 0x250}}], 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {}, 0x1f, 0x0, '\x00', {0xfff6, 0x0, 0x0, 0x0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x94) 5.216628764s ago: executing program 0 (id=1224): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f00000001c0)={r0, 0x1, 0x2}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) 5.172593743s ago: executing program 1 (id=1225): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000004000000850000008600000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000001a40)="259a53f2710100000000000000a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) 4.718333655s ago: executing program 5 (id=1226): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x786, &(0x7f0000000f80)="$eJzs3c9rHGUfAPDvbLNJ37Tv27zwwms9BQQNlG5Mja2Ch4oHESwU9Gy7bLahZpMt2U1pQkCLCF4EFQ+CXnq2Wm9e/XHVP8C7B2mpmhYjHiQym9102+ymmzSbbdnPByZ5npnZfOc7z8w8T3aG3QD61mj6IxNxOCI+SCIO1ecnEZGtlQYiTq6vt7qyXEinJNbWXvstqa1ze2W5EE2vSR2oVx6LiO/ejTiS2Ry3srg0ky+VivP1+nh19sJ4ZXHp6PnZ/HRxujh3fGJy8tiJZ08c371c//hx6eCND19+6suTf73z/2vvf5/EyThYX9acx24ZjdH6Psmmu/AuL8Vbux2up5JebwA7kp6a+9bP8jicpOWBXm8SANBl6Sh0DQDoM4n+HwD6TON9gNsry4XG1Nt3JPbWzRcjYv96/o37m+tLBur37PbX7oMO307uujOSRMTILsQfjYjPvn7jajpFl+5DArTy9uWIODsyuvn6n2x6ZmG7nu5gndF76hvxf8o+YHTgfr5Jxz/PtRr/ZTbGP9Fi/DPU4tzdibbn/4bM9V0I01Y6/nuh6dm21ab860b21Wv/ro35ssm586Viem37T0SMRXYorU9sEWPs1t+32i1rHv/9/tGbn6fx09931shcHxi6+zVT+Wr+QXJudvNyxOMDrfJPNto/aTP+Pd1hjFeef+/TdsvS/NN8G9Pm/Ltr7UrEky3b/84TbcmWzyeO1w6H8cZB0cJXP38y3C5+c/un0+rK8loScXX3M20tbf/hrfMfSZqf16xsP8YPVw59225Zi/wLjf+F1rU+/geT12vlwfq8S/lqdX4iYjB5dfP8Y3de26g31k/zH3ui9fm/1fGfjk7Odpj/wI1fv9h5/t2V5j+1rfbffuHa6sy+dvE7a//JWmmsPqeT61+nG/gg+w4AAAAAAAAAAAAAAAAAAAAAAAAAOpWJiIORZHIb5Uwml1v/Du//xXCmVK5Uj5wrL8xNRe27skcim2l81OWhps9Dnah/Hn6jfuye+jMR8d+I+HjoX7V6rlAuTfU6eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACoO9Dm+/9Tvwz1eusAgK7Z3+sNAAD2nP4fAPqP/h8A+o/+HwD6j/4fAPqP/h8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAuO33qVDqt/bmyXEjrUxcXF2bKF49OFSszudmFQq5Qnr+Qmy6Xp0vFXKE8e7+/VyqXL0zG3MKl8WqxUh2vLC6dmS0vzFXPnJ/NTxfPFLN7khUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbE9lcWkmXyoV5xUegcJAvdUelu3ZUSHTSGKvgg52K4uHYGd2r9DDixIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAI+SfAAAA///WoyFe") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000000c0)=0x10) getpgrp(0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000004c0)=0x10) fallocate(r0, 0x0, 0x100000001, 0x9) 4.678307297s ago: executing program 2 (id=1227): r0 = creat(&(0x7f0000000400)='./file0\x00', 0x128) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x12, r1, 0x0) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="b292edaa5c8f09"], 0x13) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) 3.454372133s ago: executing program 5 (id=1228): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000001400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x4008880) close(r0) recvfrom(r1, 0x0, 0x2000, 0x40002062, 0x0, 0x0) 3.204456357s ago: executing program 2 (id=1229): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000440)=ANY=[@ANYRES32=0x0, @ANYBLOB="06"], 0x9) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x6}, 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000340), 0x8) 3.143711968s ago: executing program 3 (id=1230): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000200)={[{@grpid}, {}, {@nodioread_nolock}, {@test_dummy_encryption}, {@lazytime}, {@nodelalloc}, {@minixdf}, {@init_itable}]}, 0x0, 0xbaf, &(0x7f00000017c0)="$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") r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) r2 = dup(r1) ioctl$HIDIOCGRDESC(r2, 0x90044802, 0x0) 3.140205455s ago: executing program 4 (id=1231): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x6, @local, 0xb}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000000300)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fa0500", 0x48, 0x11, 0x0, @local, @local, {[], {0x4e20, 0xe22, 0x48, 0x0, @wg=@cookie={0x3, 0x2, "88c73b21f267636d01dbe5712c1c941e1cdafbbb43f09c28", "e138060072381f41e5fff9620915b6f78670dfaf9a195fcb2a79cf6b7931c9b4"}}}}}}}, 0x0) 2.988884825s ago: executing program 1 (id=1232): r0 = socket$inet(0x2, 0x3, 0x2) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r1 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80000000, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) 2.558955201s ago: executing program 5 (id=1233): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) io_uring_setup(0x4, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0x7}]}, 0x24}}, 0x0) gettid() 2.119983494s ago: executing program 5 (id=1234): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x40488102, 0x0, 0x0, 0x7, 0xa15, 0x0, 0x0, 0x1, 0x6}}, 0x50) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0/file1\x00', 0x2100014, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008240)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0x1, {0xfffffffffffffffe, 0x2, 0x4, 0x2, 0x0, 0x5, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0xc28d, 0x8000000000000004, 0x0, 0x9, 0x8000000, 0xa000, 0x7ffffffd, 0x0, 0x0, 0xc1, 0xfffffffe}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.096415091s ago: executing program 1 (id=1235): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0xfff, 0x9, 0x400000}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=@newtfilter={0x60, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xffe0, 0xffe0}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x30, 0x2, [@TCA_FLOW_EMATCHES={0x2c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x1, 0x0, 0x0, {{0x5, 0x3, 0x5}, {0xe9, 0x5, 0xfffffffb, 0x4}}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 2.086106679s ago: executing program 4 (id=1236): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0xaa180) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000040)=0x3) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0) 1.809782205s ago: executing program 2 (id=1237): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000000c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000040), 0x3, r2}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x600, 0x1, &(0x7f0000000180)=[r2], &(0x7f0000000400)=[0x3], &(0x7f0000000640)=[r3, r4, r4], &(0x7f0000000340), 0x0, 0xffffffffffffffff}) 1.358653332s ago: executing program 3 (id=1238): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f00000000c0)='./file1\x00', 0x1000812, &(0x7f0000001800)=ANY=[@ANYBLOB="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"/396, @ANYRESOCT, @ANYRES8=0x0, @ANYBLOB="eb4df9aa36400f1596263ee4e2ba950c3777a4ec31bc2dc78cd48b646ae82f0508a43d2064587fb0b58769e71fc7b7c8e93fa8ec644b9889e92afb0c6a178d5f85790c4047947250a43c67c7b897debc120c19d2b9c218c8a1205fae81bb140f9e9a69c60fd20d07ac3643e470a4bbe559f8b777749dd02b1336813ff11343d09bebc37a1ed9bb9ced4e3264a2ead14b4350c271", @ANYRESHEX=0x0, @ANYBLOB="0affd5ece651e2a4648f9b279d8dc44bc4bd6acc0aa01a3ab56e469d3c338a26ff996b57afbe65c4eb94f6fd4cfbda2af6c85c6e135955ca0640546a2aac7bb02432e45e6d333181ee921f9f26a8ef000000000800000000000000000000000000000000000000000000000000004de9f91aeab66cc8b2197d3c00068324c7b7bd"], 0x1, 0x305, &(0x7f0000000340)="$eJzs3U1rE1scx/HfmaRNepvbmz5cLtxltaAb0boRNxHJWxDEhWjbCMVQUSuoG1NxJaJ7974FX4QbxTegKxfiC2g3jpwzD8kkk5k0JB2D3w+Ik8n85/zPPP5PoBwB+GNdbX55d/Gb/WekkkrSy8uSJ6kqlSX9q/+qj/b2d/fbrZ2sHZVchI58GQWRZmCb7b2W+/8gudrGuYhQ3X4qq9a7DtPh+/6Vr33rvnsFJYPCuLs/hSdVwrvTfV898cyyHYwZ15lwHrPGHOpQj7VUdB4AgGLZ9/9BUPjb93wtrN89T9oIX/u/5ft/XIdFJzB1fua3Pe9/N8ryjT2//7ivuuM9N4Sz33vRKHGUluf6Ps8rKCQTBaZJH1V2h3wuF2/hzm67dW77XnvH03M1Qj0Ba3ELIXuF5mS7njI2zTBC301qRRmk5c3ZPmwOyX91zBYzDAzfEifEfDCfzE1T11vtxPVf2Tc2W5dwve9MBfmfH97eoouyWyl8bDQaDc/tKLLsGvk/eaZyellNH5EoOrDLSv5AUM/L00Wt9EUFvbuQGlCJo1ZTozajT0PaWktE2d7EV/PwLKfNvDbXzbp+6L2aPfW/Z/Pb0PA7M/GLjtkIbjR3xIP+zKc3V3b7rA+8OTq6UUuuiY9iZVjqR9nPNIwgOoevtKVLWnr45OndUrvdemAXbqcs3K/Fa+ZeSKnbFLygTndNRb4zsHH0DEyEL4Qrp5TY2Ynu0D4/cje2d9mJHPneKyG6YSfWhLziL62sa6P5se9CmtiCX5nwDn/6Y0T9fcIPJRSle9KLzgQFsXWXCcZ/rpIP631Xr9lq4VpleJ0eFWRpJZur3sM9+rbGjkdA1UT8ilv6K1lG54wNFsM6JmUc19FoY65TZ6TTo7dYD/OcDf6znA1MU591i9//AQAAAAAAAAAAAAAAAAAAZs3x/65g4dhRRfcRAAAAAAAAAAAAAAAAAAAAAIBZF8//q2j+X402/2//VCzh/L9V5cz/uzWYw8D8v2/2ZDoS8/8C0/UrAAD///8sd7M=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101041, 0xf0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) 1.002732319s ago: executing program 2 (id=1239): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000040)={0x0, 0x40000000, 0x0, 0x0, 0x83, "00000000000000000000ffff00"}) r1 = syz_open_pts(r0, 0x0) poll(&(0x7f0000000000)=[{r1, 0xa}], 0x1, 0xa1) r2 = dup3(r1, r0, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000bc0)={0x7, 0xdac0, 0x8, 0x7, 0x13, "4dd5d26bd8b1eb227705ecfba7158d29559dba", 0x5, 0xa4}) 762.855566ms ago: executing program 1 (id=1240): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000001840)={0x1, &(0x7f0000001880)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f00000018c0)="90cb8c693dc85bf6422208a587fceb969024deee39f9828d22f6d688724429fd43b6c4561039fc8f5bb75fe94d4969e0ee9fe0e2334ae0fb2ebcf3408611ee16022b24ec96d71c67a3154e5d188aee290fe4558ea1478ca5fb7c171a046fdd82684dc0dd5cc25412c568d507d26672607edc82b946219fdee1b10490086e5d650138984fc271417264fcc865d7667b1ce555dc2117c8559f36f77735c8bb88c0f8dd233f8bab999b8d5a5bd9d9d3eecd42ad06318d04bb19c075e5ad6e9a9a139bc7138750", 0xc5}], 0x1}, 0x4011) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/229, 0xe5, 0x0, 0x0}, &(0x7f00000002c0)=0x40) sendmmsg$inet(r0, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001800)='\t', 0x1}], 0x1}}], 0x1, 0x40013) 660.721403ms ago: executing program 5 (id=1241): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x9, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000111"], 0xffe) 0s ago: executing program 1 (id=1242): mkdir(&(0x7f0000000240)='./file1\x00', 0x8) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, &(0x7f0000000300)='usrquota') chdir(&(0x7f00000000c0)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f0000000340)={0x8000000002000000, 0x4, 0x2000008, 0x2, 0x24, 0xffffffffffffffff, 0x9c59, 0xfffffffffffffffc, 0x100fff}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) lchown(&(0x7f0000000100)='./file0\x00', 0xee00, 0x0) kernel console output (not intermixed with test programs): d_bio+0xf53/0x1340 [ 218.574026][ T7215] ? __pfx_f2fs_write_end_bio+0x10/0x10 [ 218.574070][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.574125][ T7215] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 218.574163][ T7215] bio_endio+0x778/0x8e0 [ 218.574213][ T7215] submit_bio_noacct+0x64c/0x1ff0 [ 218.574283][ T7215] f2fs_submit_write_bio+0x133/0x330 [ 218.574354][ T7215] __submit_merged_bio+0x330/0x7b0 [ 218.574390][ T7215] ? rcu_is_watching+0x12/0xc0 [ 218.574451][ T7215] __submit_merged_write_cond+0x3fe/0x510 [ 218.574500][ T7215] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 218.574552][ T7215] ? __pfx___might_resched+0x10/0x10 [ 218.574592][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.574636][ T7215] ? folio_clear_dirty_for_io+0x178/0x960 [ 218.574703][ T7215] f2fs_write_cache_pages+0x20e9/0x2630 [ 218.574772][ T7215] ? __bfs+0xef/0x2a0 [ 218.574828][ T7215] ? __pfx_f2fs_write_cache_pages+0x10/0x10 [ 218.574880][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.574924][ T7215] ? __kasan_check_byte+0x13/0x50 [ 218.574963][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.575009][ T7215] ? unwind_next_frame+0x3be/0x2090 [ 218.575067][ T7215] ? rcu_is_watching+0x12/0xc0 [ 218.575119][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.575166][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.575210][ T7215] ? __kasan_check_byte+0x13/0x50 [ 218.575247][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.575308][ T7215] ? is_bpf_text_address+0x94/0x1a0 [ 218.575354][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.575398][ T7215] ? kernel_text_address+0x8d/0x100 [ 218.575499][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.575543][ T7215] ? check_prev_add+0x354/0xe60 [ 218.575581][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.575626][ T7215] ? rcu_is_watching+0x12/0xc0 [ 218.575684][ T7215] f2fs_write_data_pages+0x799/0x16d0 [ 218.575746][ T7215] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 218.575801][ T7215] ? do_writepages+0x4b5/0x600 [ 218.575859][ T7215] ? do_writepages+0x4b5/0x600 [ 218.575919][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.575967][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.576012][ T7215] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 218.576073][ T7215] do_writepages+0x278/0x600 [ 218.576140][ T7215] ? __pfx_do_writepages+0x10/0x10 [ 218.576198][ T7215] ? do_raw_spin_unlock+0x145/0x1e0 [ 218.576249][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.576292][ T7215] ? _raw_spin_unlock+0x28/0x50 [ 218.576343][ T7215] filemap_writeback+0x22d/0x2e0 [ 218.576383][ T7215] ? __pfx_filemap_writeback+0x10/0x10 [ 218.576446][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.576543][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.576587][ T7215] ? find_held_lock+0x2b/0x80 [ 218.576641][ T7215] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 218.576689][ T7215] ? f2fs_sync_dirty_inodes+0x3a7/0x970 [ 218.576735][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.576792][ T7215] f2fs_sync_dirty_inodes+0x46a/0x970 [ 218.576860][ T7215] block_operations+0x2a6/0xfc0 [ 218.576922][ T7215] ? __pfx_block_operations+0x10/0x10 [ 218.577024][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.577071][ T7215] ? ktime_get+0x22c/0x320 [ 218.577112][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.577156][ T7215] ? rcu_is_watching+0x12/0xc0 [ 218.577216][ T7215] f2fs_write_checkpoint+0x58b/0x53d0 [ 218.577267][ T7215] ? _raw_spin_unlock_irq+0x23/0x50 [ 218.577309][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.577358][ T7215] ? _raw_spin_unlock_irq+0x2e/0x50 [ 218.577397][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.577441][ T7215] ? __wait_for_common+0x1f3/0x4c0 [ 218.577486][ T7215] ? __pfx_schedule_timeout+0x10/0x10 [ 218.577555][ T7215] ? __pfx___wait_for_common+0x10/0x10 [ 218.577603][ T7215] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 218.577664][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.577707][ T7215] ? rcu_is_watching+0x12/0xc0 [ 218.577759][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.577803][ T7215] ? kthread_stop+0x280/0x630 [ 218.577864][ T7215] kill_f2fs_super+0x3f1/0x4a0 [ 218.577912][ T7215] ? __pfx_kill_f2fs_super+0x10/0x10 [ 218.577980][ T7215] ? lockdep_hardirqs_on+0x78/0x100 [ 218.578026][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.578072][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.578135][ T7215] deactivate_locked_super+0xc1/0x1b0 [ 218.578183][ T7215] deactivate_super+0xe7/0x110 [ 218.578230][ T7215] cleanup_mnt+0x21f/0x450 [ 218.578286][ T7215] task_work_run+0x150/0x240 [ 218.578329][ T7215] ? __pfx_task_work_run+0x10/0x10 [ 218.578370][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.578423][ T7215] exit_to_user_mode_loop+0x1d8/0x6f0 [ 218.578468][ T7215] ? srso_alias_return_thunk+0x5/0xfbef5 [ 218.578512][ T7215] ? rcu_is_watching+0x12/0xc0 [ 218.578569][ T7215] do_syscall_64+0x666/0x870 [ 218.578623][ T7215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.578661][ T7215] RIP: 0033:0x7fcf4499f257 [ 218.578691][ T7215] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 218.578745][ T7215] RSP: 002b:00007ffc8fef8338 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 218.578779][ T7215] RAX: 0000000000000000 RBX: 00007fcf44a3445c RCX: 00007fcf4499f257 [ 218.578803][ T7215] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc8fef83f0 [ 218.578825][ T7215] RBP: 00007ffc8fef83f0 R08: 00007ffc8fef93f0 R09: 00000000ffffffff [ 218.578850][ T7215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc8fef9480 [ 218.578873][ T7215] R13: 00007fcf44a3445c R14: 00000000000354d1 R15: 00007ffc8fef94c0 [ 218.578923][ T7215] [ 219.351636][ T7215] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 219.513549][ T5873] usb 2-1: config 0 descriptor?? [ 220.357327][ T5625] Bluetooth: hci0: command 0x0c1a tx timeout [ 220.365982][ T5784] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 220.386734][ T5784] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 220.509810][ T5873] hid-led 0003:27B8:01ED.0009: probe with driver hid-led failed with error -71 [ 220.593512][ T5873] usb 2-1: USB disconnect, device number 10 [ 220.989243][ T5762] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 221.065300][ T8082] loop9: detected capacity change from 0 to 4096 [ 221.142525][ T8082] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 221.176710][ T5762] usb 6-1: Using ep0 maxpacket: 16 [ 221.195175][ T5762] usb 6-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 221.216693][ T5762] usb 6-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 221.239994][ T5762] usb 6-1: Product: syz [ 221.248959][ T5762] usb 6-1: Manufacturer: syz [ 221.262580][ T5762] usb 6-1: SerialNumber: syz [ 221.300808][ T5762] usb 6-1: config 0 descriptor?? [ 221.319946][ T5762] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 221.389500][ T8082] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #15: comm syz.9.543: corrupted inode contents [ 221.411461][ T8082] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 221.458021][ T8082] EXT4-fs (loop9): Remounting filesystem read-only [ 221.497643][ T47] EXT4-fs (loop9): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 221.543212][ T47] Quota error (device loop9): write_blk: dquota write failed [ 221.576774][ T5873] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 221.584514][ T47] Quota error (device loop9): free_dqentry: Can't write quota data block 5 [ 221.702747][ T8098] misc userio: Can't change port id on an already running userio instance [ 221.750301][ T5873] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 221.768614][ T5873] usb 10-1: config 0 has no interfaces? [ 221.781924][ T5873] usb 10-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 221.796273][ T5873] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.805954][ T5873] usb 10-1: Product: syz [ 221.815040][ T5873] usb 10-1: Manufacturer: syz [ 221.821328][ T5873] usb 10-1: SerialNumber: syz [ 221.839707][ T5873] usb 10-1: config 0 descriptor?? [ 222.068502][ T5776] usb 6-1: USB disconnect, device number 7 [ 222.128915][ T5857] usb 10-1: USB disconnect, device number 2 [ 222.351817][ T8115] netlink: 'syz.8.557': attribute type 1 has an invalid length. [ 222.597816][ T5625] Bluetooth: hci1: command 0x0c1a tx timeout [ 222.604446][ T5784] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 222.627907][ T5784] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 222.816355][ T7215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.273267][ T8134] netlink: 'syz.8.563': attribute type 4 has an invalid length. [ 223.521987][ T8136] loop1: detected capacity change from 0 to 1024 [ 223.640558][ T8136] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 223.653499][ T8136] ext4 filesystem being mounted at /149/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.040331][ T8149] binder: 8148:8149 ioctl c0306201 200000000040 returned -11 [ 224.062400][ T8151] loop9: detected capacity change from 0 to 256 [ 224.091712][ T8151] exfat: Deprecated parameter 'namecase' [ 224.137378][ T7270] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.164262][ T8151] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36df086c, utbl_chksum : 0xe619d30d) [ 224.306238][ T5622] EXT4-fs error (device loop1): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /149/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 224.366845][ T5622] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /149/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 224.451668][ T5622] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 224.519829][ T5622] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /149/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 224.577534][ T47] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.612466][ T5622] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 224.671285][ T5622] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /149/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 224.698042][ T5622] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 224.720035][ T5622] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /149/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 224.754278][ T5622] EXT4-fs error (device loop1): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 224.802009][ T5622] EXT4-fs error (device loop1): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /149/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 224.932648][ T8166] netlink: 52 bytes leftover after parsing attributes in process `syz.8.572'. [ 224.988023][ T47] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.074060][ T8166] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.081549][ T8166] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.207384][ T5784] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 225.284692][ T47] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.315633][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.331001][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.342331][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.353764][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.363226][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.417995][ T5784] usb 10-1: Using ep0 maxpacket: 16 [ 225.495837][ T5784] usb 10-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90 [ 225.509963][ T5625] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 225.519664][ T5625] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 225.531179][ T5625] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 225.545610][ T5784] usb 10-1: New USB device strings: Mfr=1, Product=6, SerialNumber=3 [ 225.554984][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 225.563361][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 225.566421][ T47] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.599421][ T5784] usb 10-1: Product: syz [ 225.606935][ T5784] usb 10-1: Manufacturer: syz [ 225.618333][ T5784] usb 10-1: SerialNumber: syz [ 225.690433][ T5784] usb 10-1: config 0 descriptor?? [ 225.764393][ T5784] ums-onetouch 10-1:0.0: USB Mass Storage device detected [ 226.214221][ T8188] netlink: 52 bytes leftover after parsing attributes in process `syz.8.575'. [ 226.296950][ T8190] netlink: 4 bytes leftover after parsing attributes in process `syz.8.575'. [ 226.358505][ T5622] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.426588][ T5762] usb 10-1: USB disconnect, device number 3 [ 227.529534][ T47] bridge_slave_1: left allmulticast mode [ 227.539192][ T47] bridge_slave_1: left promiscuous mode [ 227.566331][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.583544][ T8212] binder: 8209:8212 ioctl c0306201 200000000040 returned -11 [ 227.614614][ T47] bridge_slave_0: left allmulticast mode [ 227.635162][ T47] bridge_slave_0: left promiscuous mode [ 227.640947][ T5637] Bluetooth: hci2: command tx timeout [ 227.655393][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.945044][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.964788][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.972975][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.985306][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.994107][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 228.067443][ T8226] netlink: 'syz.0.586': attribute type 13 has an invalid length. [ 228.157574][ T8221] loop8: detected capacity change from 0 to 1024 [ 228.300610][ T8221] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 228.327274][ T8221] ext4 filesystem being mounted at /23/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 228.589951][ T8221] evm: overlay not supported [ 228.615026][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.649594][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.675808][ T47] bond0 (unregistering): Released all slaves [ 228.719353][ T7198] EXT4-fs error (device loop8): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /23/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 228.801307][ T7198] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /23/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 228.856030][ T7198] EXT4-fs error (device loop8): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 228.934947][ T7198] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /23/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 228.986315][ T7198] EXT4-fs error (device loop8): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 229.013971][ T7198] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /23/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 229.041307][ T7198] EXT4-fs error (device loop8): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 229.071590][ T7198] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /23/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 229.125951][ T7198] EXT4-fs error (device loop8): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 229.174108][ T7198] EXT4-fs error (device loop8): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /23/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 229.503997][ T8225] bridge0: port 3(syz_tun) entered blocking state [ 229.510862][ T8225] bridge0: port 3(syz_tun) entered disabled state [ 229.517769][ T8225] syz_tun: entered allmulticast mode [ 229.525435][ T8225] syz_tun: entered promiscuous mode [ 229.531815][ T8225] bridge0: port 3(syz_tun) entered blocking state [ 229.540278][ T8225] bridge0: port 3(syz_tun) entered forwarding state [ 229.717903][ T5637] Bluetooth: hci2: command tx timeout [ 229.761141][ T8243] loop5: detected capacity change from 0 to 131072 [ 229.770423][ T8243] F2FS-fs (loop5): invalid crc value [ 229.891807][ T8243] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 229.908690][ T8243] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 229.990857][ T30] audit: type=1800 audit(1785456521.825:20): pid=8243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.590" name="bus" dev="loop5" ino=10 res=0 errno=0 [ 230.037477][ T5637] Bluetooth: hci3: command tx timeout [ 230.381921][ T7198] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.755404][ T8171] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.802875][ T8171] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.834122][ T8171] bridge_slave_0: entered allmulticast mode [ 230.887090][ T8171] bridge_slave_0: entered promiscuous mode [ 230.905637][ T8171] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.923906][ T8171] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.953593][ T8171] bridge_slave_1: entered allmulticast mode [ 230.974136][ T8171] bridge_slave_1: entered promiscuous mode [ 231.067845][ T47] hsr_slave_0: left promiscuous mode [ 231.090629][ T47] hsr_slave_1: left promiscuous mode [ 231.104999][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.131110][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.160607][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.191910][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.242213][ T47] veth1_macvtap: left promiscuous mode [ 231.262691][ T47] veth0_macvtap: left promiscuous mode [ 231.285139][ T47] veth1_vlan: left promiscuous mode [ 231.292572][ T47] veth0_vlan: left promiscuous mode [ 231.604058][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.622360][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.635299][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.652610][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.660859][ T5625] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.797182][ T5637] Bluetooth: hci2: command tx timeout [ 232.117600][ T5637] Bluetooth: hci3: command tx timeout [ 232.315452][ T47] team0 (unregistering): Port device team_slave_1 removed [ 232.362089][ T47] team0 (unregistering): Port device team_slave_0 removed [ 232.794289][ T8306] netlink: 52 bytes leftover after parsing attributes in process `syz.5.594'. [ 232.862909][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.5.594'. [ 232.884472][ T5280] 8021q: adding VLAN 0 to HW filter on device eth1 [ 232.968740][ T8171] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.020171][ T8171] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.402440][ T8171] team0: Port device team_slave_0 added [ 233.430693][ T8171] team0: Port device team_slave_1 added [ 233.571148][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.591838][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.666734][ T8171] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.716918][ T5637] Bluetooth: hci4: command tx timeout [ 233.759562][ T8171] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.781852][ T8171] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 233.821302][ T8171] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.880228][ T5637] Bluetooth: hci2: command tx timeout [ 234.203509][ T5637] Bluetooth: hci3: command tx timeout [ 235.219408][ T8171] hsr_slave_0: entered promiscuous mode [ 235.294485][ T8171] hsr_slave_1: entered promiscuous mode [ 235.344450][ T8171] debugfs: 'hsr0' already exists in 'hsr' [ 235.376423][ T8171] Cannot create hsr debugfs directory [ 235.699818][ T47] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.796804][ T5637] Bluetooth: hci4: command tx timeout [ 236.112063][ T8390] loop5: detected capacity change from 0 to 256 [ 236.162590][ T47] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.255335][ T5280] 8021q: adding VLAN 0 to HW filter on device eth2 [ 236.288126][ T5637] Bluetooth: hci3: command tx timeout [ 236.512383][ T47] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.030799][ T47] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.877141][ T5637] Bluetooth: hci4: command tx timeout [ 238.222754][ T8436] batadv_slave_1: entered promiscuous mode [ 238.381817][ T8216] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.389941][ T8216] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.397972][ T8216] bridge_slave_0: entered allmulticast mode [ 238.405898][ T8216] bridge_slave_0: entered promiscuous mode [ 238.438990][ T5280] 8021q: adding VLAN 0 to HW filter on device eth3 [ 238.497655][ T8216] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.505013][ T8216] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.512558][ T8216] bridge_slave_1: entered allmulticast mode [ 238.520416][ T8216] bridge_slave_1: entered promiscuous mode [ 238.530520][ T8435] batadv_slave_1: left promiscuous mode [ 238.672899][ T8216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.686440][ T47] bridge_slave_1: left allmulticast mode [ 238.692798][ T47] bridge_slave_1: left promiscuous mode [ 238.698786][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.711492][ T47] bridge_slave_0: left allmulticast mode [ 238.718393][ T47] bridge_slave_0: left promiscuous mode [ 238.724152][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.910938][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.930352][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.940740][ T47] bond0 (unregistering): Released all slaves [ 239.059008][ T8216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.245808][ T8282] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.283585][ T8282] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.330429][ T8282] bridge_slave_0: entered allmulticast mode [ 239.373478][ T8282] bridge_slave_0: entered promiscuous mode [ 239.451356][ T8216] team0: Port device team_slave_0 added [ 239.598175][ T8216] team0: Port device team_slave_1 added [ 239.605430][ T8282] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.636904][ T8282] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.644318][ T8282] bridge_slave_1: entered allmulticast mode [ 239.677181][ T8282] bridge_slave_1: entered promiscuous mode [ 239.967803][ T5637] Bluetooth: hci4: command tx timeout [ 239.981394][ T8282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.142322][ T8282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.184415][ T47] hsr_slave_0: left promiscuous mode [ 240.195100][ T47] hsr_slave_1: left promiscuous mode [ 240.208303][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.215968][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.240615][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.250165][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.280184][ T47] veth1_vlan: left promiscuous mode [ 240.285835][ T47] veth0_vlan: left promiscuous mode [ 240.548114][ T8464] loop5: detected capacity change from 0 to 8192 [ 240.602089][ T8464] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 241.156214][ T47] team0 (unregistering): Port device team_slave_1 removed [ 241.209621][ T47] team0 (unregistering): Port device team_slave_0 removed [ 241.925178][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.944800][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 241.977976][ T8216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.081906][ T8216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.093064][ T8216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 242.123313][ T8216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.320236][ T8282] team0: Port device team_slave_0 added [ 242.568264][ T8282] team0: Port device team_slave_1 added [ 242.584969][ T8479] loop9: detected capacity change from 0 to 1024 [ 242.724205][ T8479] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.790715][ T8479] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.891323][ T8216] hsr_slave_0: entered promiscuous mode [ 242.912866][ T8216] hsr_slave_1: entered promiscuous mode [ 242.936266][ T8216] debugfs: 'hsr0' already exists in 'hsr' [ 242.952345][ T8216] Cannot create hsr debugfs directory [ 243.001899][ T7215] EXT4-fs error (device loop9): ext4_readdir:263: inode #2: block 16: comm syz-executor: path /41/file1: bad entry in directory: directory entry overrun - offset=876, inode=0, rec_len=1024, size=1024 fake=0 [ 243.044329][ T8171] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 243.056392][ T7215] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /41/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 243.083461][ T7215] EXT4-fs error (device loop9): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 243.092678][ T8171] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 243.164057][ T7215] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /41/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 243.199455][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.202105][ T7215] EXT4-fs error (device loop9): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 243.226723][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.283874][ T7215] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /41/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 243.305326][ T8282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.332140][ T8282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.344555][ T7215] EXT4-fs error (device loop9): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 243.351071][ T8282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 243.419655][ T7215] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /41/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 243.423558][ T8282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 243.449702][ T7215] EXT4-fs error (device loop9): ext4_empty_dir:3124: inode #11: block 37: comm syz-executor: bad entry in directory: directory entry overrun - offset=5120, inode=0, rec_len=197884, size=1024 fake=0 [ 243.457024][ T8171] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 243.475259][ T7215] EXT4-fs error (device loop9): ext4_readdir:263: inode #11: block 37: comm syz-executor: path /41/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=197884, size=1024 fake=0 [ 243.536217][ T8171] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 243.546312][ T8171] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 243.608447][ T8171] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 244.014609][ T8171] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 244.033503][ T8171] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 244.279868][ T8282] hsr_slave_0: entered promiscuous mode [ 244.305494][ T8282] hsr_slave_1: entered promiscuous mode [ 244.343132][ T8282] debugfs: 'hsr0' already exists in 'hsr' [ 244.355813][ T8282] Cannot create hsr debugfs directory [ 244.407803][ T7215] bridge0: port 3(syz_tun) entered disabled state [ 244.482430][ T7215] syz_tun (unregistering): left allmulticast mode [ 244.506923][ T7215] syz_tun (unregistering): left promiscuous mode [ 244.521975][ T7215] bridge0: port 3(syz_tun) entered disabled state [ 244.682605][ T7215] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.796819][ T5873] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 244.956894][ T5873] usb 6-1: Using ep0 maxpacket: 8 [ 244.976545][ T5873] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.996095][ T5873] usb 6-1: config 0 has no interface number 0 [ 245.036849][ T5873] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.056875][ T5873] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 245.077167][ T5873] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.101013][ T5873] usb 6-1: config 0 descriptor?? [ 245.156067][ T5873] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 245.211551][ T13] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.375181][ T8171] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.434377][ T13] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.481825][ T5873] usb 6-1: USB disconnect, device number 8 [ 245.742699][ T8216] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.827029][ T5625] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 245.843668][ T13] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.844931][ T5625] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 245.868222][ T5625] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 245.884024][ T5625] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 245.897161][ T5625] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.229378][ T8216] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.597161][ T8523] loop5: detected capacity change from 0 to 40427 [ 246.611321][ T8523] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 246.617745][ T8523] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 246.627779][ T8523] F2FS-fs (loop5): invalid crc value [ 246.971359][ T13] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.227074][ T8216] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.361707][ T8171] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.501769][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.509047][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.633259][ T8541] netlink: 'syz.5.663': attribute type 13 has an invalid length. [ 247.661834][ T8216] vlan2 (unregistering): left allmulticast mode [ 247.686519][ T8216] netdevsim netdevsim2 netdevsim0 (unregistering): left allmulticast mode [ 247.720631][ T8216] vlan2 (unregistering): left promiscuous mode [ 247.738554][ T8216] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 247.769136][ T8216] bridge0: port 3(vlan2) entered disabled state [ 247.804104][ T8216] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.957039][ T5637] Bluetooth: hci5: command tx timeout [ 248.029700][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.037040][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.420831][ T8171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.886199][ T13] bridge_slave_1: left allmulticast mode [ 248.897037][ T13] bridge_slave_1: left promiscuous mode [ 248.904633][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.928204][ T13] bridge_slave_0: left allmulticast mode [ 248.939940][ T13] bridge_slave_0: left promiscuous mode [ 248.950978][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.630366][ T8572] loop5: detected capacity change from 0 to 2048 [ 249.665063][ T8572] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 249.697570][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.716690][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.730714][ T30] audit: type=1800 audit(1785456541.565:21): pid=8572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.675" name="file2" dev="loop5" ino=1347 res=0 errno=0 [ 249.781727][ T13] bond0 (unregistering): Released all slaves [ 250.037039][ T5637] Bluetooth: hci5: command tx timeout [ 250.818141][ T13] hsr_slave_0: left promiscuous mode [ 250.828985][ T13] hsr_slave_1: left promiscuous mode [ 250.836212][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.846199][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.856084][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.864704][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.882305][ T13] veth1_macvtap: left promiscuous mode [ 250.888008][ T13] veth0_macvtap: left promiscuous mode [ 250.893593][ T13] veth1_vlan: left promiscuous mode [ 250.906411][ T13] veth0_vlan: left promiscuous mode [ 251.271864][ T13] team0 (unregistering): Port device team_slave_1 removed [ 251.295272][ T13] team0 (unregistering): Port device team_slave_0 removed [ 251.934694][ T8216] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 251.961882][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.973258][ T8216] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.023224][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.033242][ T8216] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.051469][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.112448][ T8216] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.119822][ T5637] Bluetooth: hci5: command tx timeout [ 252.134371][ T8216] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.201219][ T8171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.432375][ T8514] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.443851][ T8514] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.452577][ T8514] bridge_slave_0: entered allmulticast mode [ 252.463754][ T8514] bridge_slave_0: entered promiscuous mode [ 252.527902][ T8514] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.535185][ T8514] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.543032][ T8514] bridge_slave_1: entered allmulticast mode [ 252.553825][ T8514] bridge_slave_1: entered promiscuous mode [ 252.632871][ T8282] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 252.649459][ T8282] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 252.657781][ T8282] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 252.668714][ T8282] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 252.689747][ T8514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.718290][ T8514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.732796][ T8282] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 252.764890][ T8282] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 252.829797][ T8282] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 252.844304][ T8282] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 252.882593][ T8514] team0: Port device team_slave_0 added [ 252.929448][ T8514] team0: Port device team_slave_1 added [ 252.983977][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.991283][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.022069][ T8514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.047694][ T8514] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.054773][ T8514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 253.085002][ T8514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.242156][ T8514] hsr_slave_0: entered promiscuous mode [ 253.262824][ T8514] hsr_slave_1: entered promiscuous mode [ 253.276118][ T8514] debugfs: 'hsr0' already exists in 'hsr' [ 253.290307][ T8514] Cannot create hsr debugfs directory [ 253.583094][ T8171] veth0_vlan: entered promiscuous mode [ 253.717802][ T8618] netlink: 40 bytes leftover after parsing attributes in process `syz.5.687'. [ 254.013505][ T8216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 254.084033][ T8171] veth1_vlan: entered promiscuous mode [ 254.098123][ T8633] loop5: detected capacity change from 0 to 64 [ 254.198162][ T5637] Bluetooth: hci5: command tx timeout [ 254.448553][ T8636] hfs: request for non-existent node 237 in B*Tree [ 254.458189][ T8636] hfs: request for non-existent node 237 in B*Tree [ 254.492074][ T8636] hfs: request for non-existent node 237 in B*Tree [ 254.511826][ T8216] 8021q: adding VLAN 0 to HW filter on device team0 [ 254.512277][ T8636] hfs: request for non-existent node 237 in B*Tree [ 254.539360][ T8633] hfs: request for non-existent node 237 in B*Tree [ 254.553364][ T8633] hfs: request for non-existent node 237 in B*Tree [ 254.739310][ T8171] veth0_macvtap: entered promiscuous mode [ 254.834404][ T1013] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.841639][ T1013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 254.880913][ T8171] veth1_macvtap: entered promiscuous mode [ 255.085311][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.091805][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.222364][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.229631][ T6548] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.276413][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.299047][ T8282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.411211][ T8171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.655383][ T8282] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.687259][ T1013] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.841978][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.849230][ T6548] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.980706][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.989202][ T5832] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.009528][ T57] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.249041][ T57] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.383596][ T8514] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 256.461912][ T8514] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 256.485506][ T8514] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 256.503733][ T8514] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 256.529118][ T6547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.530135][ T8514] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 256.549040][ T6547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.588274][ T8514] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 256.655861][ T8514] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 256.679541][ T8514] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 256.801823][ T6551] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.820688][ T6551] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.939056][ T13] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.367546][ T30] audit: type=1800 audit(1785456549.195:22): pid=8682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.693" name="idVendor" dev="configfs" ino=24207 res=0 errno=0 [ 257.843589][ T8514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.022690][ T8694] input: syz1 as /devices/virtual/input/input14 [ 258.169213][ T8514] 8021q: adding VLAN 0 to HW filter on device team0 [ 258.281996][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.289235][ T5832] bridge0: port 1(bridge_slave_0) entered forwarding state [ 258.450071][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.459774][ T6551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 258.897007][ T8216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.503789][ T8216] veth0_vlan: entered promiscuous mode [ 259.708899][ T8216] veth1_vlan: entered promiscuous mode [ 259.844064][ T8282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.875312][ T8721] loop5: detected capacity change from 0 to 2048 [ 260.039502][ T8721] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 260.051586][ T8216] veth0_macvtap: entered promiscuous mode [ 260.072254][ T8216] veth1_macvtap: entered promiscuous mode [ 260.098623][ T8721] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 260.297512][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.405141][ T8736] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -28 [ 260.433677][ T8216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 260.725323][ T6547] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.773984][ T7436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.018208][ T8745] loop6: detected capacity change from 0 to 1024 [ 261.020403][ T6547] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.113637][ T8745] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 261.186907][ T6547] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.294878][ T6547] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.347025][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.439599][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.674577][ T5832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.735391][ T5832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.125158][ T8282] veth0_vlan: entered promiscuous mode [ 263.231096][ T8282] veth1_vlan: entered promiscuous mode [ 263.330798][ T8774] netlink: 'syz.2.579': attribute type 4 has an invalid length. [ 263.484440][ T8514] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.659342][ T8282] veth0_macvtap: entered promiscuous mode [ 263.714060][ T8282] veth1_macvtap: entered promiscuous mode [ 263.870495][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 264.140710][ T8282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 264.455740][ T6555] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.547566][ T6555] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.688634][ T6551] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.754003][ T6551] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 264.952329][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.005615][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.200514][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.237023][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.954691][ T8514] veth0_vlan: entered promiscuous mode [ 266.055561][ T8514] veth1_vlan: entered promiscuous mode [ 266.260069][ T8514] veth0_macvtap: entered promiscuous mode [ 266.314328][ T8514] veth1_macvtap: entered promiscuous mode [ 266.393071][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.471788][ T8514] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.591230][ T8822] loop5: detected capacity change from 0 to 256 [ 266.656939][ T5832] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.707322][ T5832] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.786975][ T5832] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.846291][ T5832] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.619174][ T6547] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.678810][ T6547] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.928109][ T5783] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 268.100841][ T8846] loop4: detected capacity change from 0 to 2048 [ 268.135527][ T5783] usb 6-1: Using ep0 maxpacket: 32 [ 268.168875][ T5783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 268.193991][ T5783] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 268.231954][ T8846] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 268.248708][ T5783] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 268.261036][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.283423][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.294327][ T5783] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.351043][ T5783] usb 6-1: config 0 descriptor?? [ 268.415230][ T5783] hub 6-1:0.0: USB hub found [ 268.620254][ T5783] hub 6-1:0.0: 1 port detected [ 268.961933][ T8864] gadgetfs: bound to dummy_udc driver [ 269.345171][ T5783] hub 6-1:0.0: activate --> -90 [ 269.537075][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 269.732645][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 269.755726][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 269.777768][ T5873] usb 6-1: USB disconnect, device number 9 [ 269.818208][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 269.856216][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 269.913099][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 269.972830][ T10] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 270.015643][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 270.070943][ T10] hub 5-1:1.0: bad descriptor, ignoring hub [ 270.099684][ T10] hub 5-1:1.0: probe with driver hub failed with error -5 [ 270.152604][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 270.192182][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 270.223082][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 270.250045][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 270.946424][ T5784] usb 5-1: USB disconnect, device number 4 [ 272.491712][ T30] audit: type=1804 audit(1785456564.315:23): pid=8910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.732" name="/newroot/59/file1" dev="tmpfs" ino=343 res=1 errno=0 [ 272.533106][ T8909] loop2: detected capacity change from 0 to 256 [ 272.591469][ T8909] exfat: Deprecated parameter 'namecase' [ 272.688874][ T8909] exfat: Deprecated parameter 'namecase' [ 272.753277][ T8909] exfat: Deprecated parameter 'utf8' [ 272.916503][ T8909] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001fe89, chksum : 0xcf07e9af, utbl_chksum : 0xe619d30d) [ 274.818677][ T8929] loop2: detected capacity change from 0 to 512 [ 275.526811][ T8926] loop5: detected capacity change from 0 to 131072 [ 275.571967][ T8926] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 275.581922][ T8926] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 275.595119][ T8926] F2FS-fs (loop5): invalid crc value [ 275.729099][ T8929] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 275.851174][ T8926] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 275.899506][ T8926] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 275.910642][ T8926] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 276.051107][ T8929] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 276.094592][ T8929] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 276.360947][ T8929] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.740: bg 0: block 217: padding at end of block bitmap is not set [ 276.601113][ T8929] EXT4-fs (loop2): Remounting filesystem read-only [ 276.967265][ T6555] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 276.985000][ T8216] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.014944][ T6555] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync! [ 277.536737][ T185] IPVS: starting estimator thread 0... [ 277.704773][ T8963] IPVS: using max 25 ests per chain, 60000 per kthread [ 279.821734][ T5625] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 279.861318][ T5625] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 279.886540][ T5625] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 279.908798][ T5625] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 279.928627][ T5625] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 281.594541][ T8171] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 281.717966][ T9012] loop4: detected capacity change from 0 to 128 [ 281.919936][ T9012] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 282.039526][ T5625] Bluetooth: hci6: command tx timeout [ 282.418999][ T6555] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 282.696114][ T47] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.742812][ T9022] loop7: detected capacity change from 0 to 256 [ 284.128021][ T5625] Bluetooth: hci6: command tx timeout [ 284.535262][ T47] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.214807][ T47] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.289856][ T30] audit: type=1326 audit(1785456577.115:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 285.494068][ T30] audit: type=1326 audit(1785456577.115:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 285.673545][ T30] audit: type=1326 audit(1785456577.275:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 285.781518][ T30] audit: type=1326 audit(1785456577.285:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 285.819302][ T47] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.993722][ T30] audit: type=1326 audit(1785456577.285:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 286.209960][ T5625] Bluetooth: hci6: command tx timeout [ 286.272288][ T30] audit: type=1326 audit(1785456577.285:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 286.593181][ T30] audit: type=1326 audit(1785456577.295:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 286.689480][ T9074] loop4: detected capacity change from 0 to 128 [ 286.704597][ T30] audit: type=1326 audit(1785456577.325:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 286.802012][ T9074] EXT4-fs (loop4): Test dummy encryption mode enabled [ 286.886518][ T9074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a046c018, mo2=0042] [ 286.894638][ T9074] System zones: 1-3, 19-19, 35-36 [ 286.965615][ T30] audit: type=1326 audit(1785456577.325:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 287.008808][ T30] audit: type=1326 audit(1785456577.325:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9058 comm="syz.0.772" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8dff59e019 code=0x7ffc0000 [ 287.125886][ T9074] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 287.188312][ T9074] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 287.296124][ T9076] loop7: detected capacity change from 0 to 2048 [ 287.367427][ T9074] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 287.409528][ T9076] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024) [ 287.453403][ T9086] loop5: detected capacity change from 0 to 1024 [ 287.512339][ T9086] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840c018, mo2=0003] [ 287.581943][ T9086] System zones: 0-1, 3-12 [ 287.608055][ T9090] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 287.849498][ T9086] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.102633][ T9086] EXT4-fs (loop5): shut down requested (1) [ 288.223315][ T9076] NILFS (loop7): failed to count free inodes: err=-34 [ 288.278338][ T5625] Bluetooth: hci6: command tx timeout [ 288.279355][ T9076] overlayfs: upper fs does not support tmpfile. [ 288.446220][ T9076] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 288.536382][ T7436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.607116][ T9076] overlayfs: failed to set xattr on upper [ 288.612991][ T9076] overlayfs: ...falling back to redirect_dir=nofollow. [ 288.633427][ T8282] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 288.870970][ T9076] overlayfs: ...falling back to index=off. [ 288.919069][ T9076] overlayfs: ...falling back to uuid=null. [ 288.955308][ T9076] NILFS (loop7): failed to count free inodes: err=-34 [ 289.306566][ T47] bridge_slave_1: left allmulticast mode [ 289.312276][ T47] bridge_slave_1: left promiscuous mode [ 289.369681][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.412105][ T9090] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 289.466904][ T185] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 289.526719][ T9090] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4) [ 289.568983][ T47] bridge_slave_0: left allmulticast mode [ 289.603373][ T9090] Remounting filesystem read-only [ 289.620215][ T47] bridge_slave_0: left promiscuous mode [ 289.627186][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.720699][ T8514] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=13) [ 289.805398][ T8514] NILFS error (device loop7): nilfs_readdir: bad page in #13 [ 289.818526][ T185] usb 5-1: unable to get BOS descriptor or descriptor too short [ 289.856757][ T185] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 289.888024][ T185] usb 5-1: can't read configurations, error -71 [ 289.909870][ T8514] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=18) [ 289.963907][ T8514] NILFS error (device loop7): nilfs_readdir: bad page in #18 [ 289.994321][ T8514] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 290.059204][ T8514] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=2) [ 290.985612][ T9132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.788'. [ 291.116941][ T9135] netlink: 84 bytes leftover after parsing attributes in process `syz.5.791'. [ 291.401225][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.441422][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.517140][ T47] bond0 (unregistering): Released all slaves [ 292.316725][ T9148] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 292.483855][ T8514] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer [ 292.986138][ T9161] loop4: detected capacity change from 0 to 64 [ 293.253403][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 293.253430][ T30] audit: type=1800 audit(1785456585.085:60): pid=9161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.799" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 294.121737][ T47] hsr_slave_0: left promiscuous mode [ 294.155985][ T47] hsr_slave_1: left promiscuous mode [ 294.162181][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 294.179308][ T57] kworker/u8:4: attempt to access beyond end of device [ 294.179308][ T57] loop4: rw=1, sector=323, nr_sectors = 56 limit=64 [ 294.193073][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 294.212462][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 294.219864][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 294.271815][ T57] kworker/u8:4: attempt to access beyond end of device [ 294.271815][ T57] loop4: rw=8388609, sector=379, nr_sectors = 1 limit=64 [ 294.271918][ T47] veth1_macvtap: left promiscuous mode [ 294.343945][ T57] Buffer I/O error on dev loop4, logical block 379, lost async page write [ 294.363064][ T47] veth0_macvtap: left promiscuous mode [ 294.368679][ T47] veth1_vlan: left promiscuous mode [ 294.373983][ T47] veth0_vlan: left promiscuous mode [ 294.386903][ T57] kworker/u8:4: attempt to access beyond end of device [ 294.386903][ T57] loop4: rw=8388609, sector=380, nr_sectors = 1 limit=64 [ 294.455121][ T57] Buffer I/O error on dev loop4, logical block 380, lost async page write [ 294.506905][ T57] kworker/u8:4: attempt to access beyond end of device [ 294.506905][ T57] loop4: rw=8388609, sector=381, nr_sectors = 1 limit=64 [ 294.561789][ T57] Buffer I/O error on dev loop4, logical block 381, lost async page write [ 294.589587][ T57] kworker/u8:4: attempt to access beyond end of device [ 294.589587][ T57] loop4: rw=8388609, sector=382, nr_sectors = 1 limit=64 [ 294.665865][ T57] Buffer I/O error on dev loop4, logical block 382, lost async page write [ 294.729602][ T57] kworker/u8:4: attempt to access beyond end of device [ 294.729602][ T57] loop4: rw=8388609, sector=503, nr_sectors = 1 limit=64 [ 294.800316][ T57] Buffer I/O error on dev loop4, logical block 503, lost async page write [ 294.835963][ T30] audit: type=1326 audit(1785456586.665:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9174 comm="syz.2.805" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa93cd9e019 code=0x0 [ 294.887025][ T57] kworker/u8:4: attempt to access beyond end of device [ 294.887025][ T57] loop4: rw=8388609, sector=504, nr_sectors = 1 limit=64 [ 294.934340][ T57] Buffer I/O error on dev loop4, logical block 504, lost async page write [ 294.966874][ T57] kworker/u8:4: attempt to access beyond end of device [ 294.966874][ T57] loop4: rw=8388609, sector=505, nr_sectors = 1 limit=64 [ 295.017011][ T57] Buffer I/O error on dev loop4, logical block 505, lost async page write [ 295.056956][ T57] kworker/u8:4: attempt to access beyond end of device [ 295.056956][ T57] loop4: rw=8388609, sector=506, nr_sectors = 1 limit=64 [ 295.142524][ T57] Buffer I/O error on dev loop4, logical block 506, lost async page write [ 295.180538][ T57] kworker/u8:4: attempt to access beyond end of device [ 295.180538][ T57] loop4: rw=1, sector=507, nr_sectors = 280 limit=64 [ 295.204690][ T5637] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 295.204814][ T57] Buffer I/O error on dev loop4, logical block 867, lost async page write [ 295.228867][ T5637] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 295.247772][ T57] Buffer I/O error on dev loop4, logical block 868, lost async page write [ 295.262881][ T5637] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 295.271476][ T5637] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 295.314439][ T5637] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 296.161494][ T9191] 9pnet: p9_errstr2errno: server reported unknown error ÿÿÿ [ 296.763815][ T47] team0 (unregistering): Port device team_slave_1 removed [ 296.887448][ T47] team0 (unregistering): Port device team_slave_0 removed [ 297.101320][ T9204] loop2: detected capacity change from 0 to 256 [ 297.177463][ T9204] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 297.226203][ T9204] FAT-fs (loop2): Filesystem has been set read-only [ 297.313237][ T9204] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 297.399249][ T5625] Bluetooth: hci2: command tx timeout [ 297.411859][ T9204] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 297.449992][ T30] audit: type=1800 audit(1785456589.285:62): pid=9204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.816" name="file1" dev="loop2" ino=1048702 res=0 errno=0 [ 297.957754][ T8988] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.012125][ T8988] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.081557][ T8988] bridge_slave_0: entered allmulticast mode [ 298.112285][ T8988] bridge_slave_0: entered promiscuous mode [ 298.145998][ T8988] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.182864][ T8988] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.190226][ T8988] bridge_slave_1: entered allmulticast mode [ 298.332399][ T8988] bridge_slave_1: entered promiscuous mode [ 298.544466][ T8988] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.702951][ T8988] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.258322][ T8988] team0: Port device team_slave_0 added [ 299.310526][ T8988] team0: Port device team_slave_1 added [ 299.478130][ T5625] Bluetooth: hci2: command tx timeout [ 299.574252][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.581295][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 299.763443][ T8988] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.913514][ T8988] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.921614][ T8988] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 300.025344][ T8988] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 300.305961][ T47] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.607396][ T8988] hsr_slave_0: entered promiscuous mode [ 300.621073][ T8988] hsr_slave_1: entered promiscuous mode [ 300.627722][ T8988] debugfs: 'hsr0' already exists in 'hsr' [ 300.695292][ T8988] Cannot create hsr debugfs directory [ 300.914364][ T47] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.201757][ T47] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.557014][ T5625] Bluetooth: hci2: command tx timeout [ 302.401845][ T9278] loop2: detected capacity change from 0 to 764 [ 302.455846][ T47] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.155553][ T9257] loop4: detected capacity change from 0 to 512 [ 303.286648][ T9257] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 303.453207][ T9257] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.828: bad orphan inode 131083 [ 303.463535][ T9257] loop4: lost filesystem error report for type 5 error -117 [ 303.469982][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 303.489002][ C1] EXT4-fs (loop4): initial error at time 1785456595: ext4_orphan_get:1425 [ 303.497543][ C1] EXT4-fs (loop4): last error at time 1785456595: ext4_orphan_get:1425 [ 303.572528][ T9257] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 303.644341][ T5625] Bluetooth: hci2: command tx timeout [ 304.969137][ T47] bridge_slave_1: left allmulticast mode [ 305.009503][ T47] bridge_slave_1: left promiscuous mode [ 305.043128][ T47] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.074072][ T9311] loop5: detected capacity change from 0 to 512 [ 305.097497][ T47] bridge_slave_0: left allmulticast mode [ 305.110104][ T47] bridge_slave_0: left promiscuous mode [ 305.115950][ T47] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.324949][ T8282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.366490][ T9311] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 305.538315][ T9311] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.841: bad orphan inode 131083 [ 305.578944][ T9311] loop5: lost filesystem error report for type 5 error -117 [ 305.647290][ T9311] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 306.500058][ T7436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 306.619158][ T9316] loop4: detected capacity change from 0 to 40427 [ 306.635492][ T9316] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 306.643250][ T9316] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 306.804915][ T9316] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 306.833352][ T9316] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 306.848424][ T9316] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 307.185388][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.459669][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.689008][ T47] bond0 (unregistering): Released all slaves [ 310.700586][ T802] IPVS: starting estimator thread 0... [ 310.900356][ T9354] IPVS: using max 22 ests per chain, 52800 per kthread [ 310.947609][ T9177] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.036100][ T9177] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.043486][ T9177] bridge_slave_0: entered allmulticast mode [ 311.097694][ T9177] bridge_slave_0: entered promiscuous mode [ 311.121105][ T9351] dummy0: Caught tx_queue_len zero misconfig [ 311.132827][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.856'. [ 311.150764][ T9177] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.157981][ T9177] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.174997][ T9177] bridge_slave_1: entered allmulticast mode [ 311.183183][ T9177] bridge_slave_1: entered promiscuous mode [ 311.306936][ T9358] xfrm1: entered promiscuous mode [ 311.375113][ T9358] xfrm1: entered allmulticast mode [ 311.398591][ T9358] netlink: 12 bytes leftover after parsing attributes in process `syz.2.856'. [ 311.618897][ T47] hsr_slave_0: left promiscuous mode [ 311.626400][ T47] hsr_slave_1: left promiscuous mode [ 311.661588][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.694258][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.712939][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.720348][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.773328][ T47] veth1_macvtap: left promiscuous mode [ 311.778858][ T47] veth0_macvtap: left promiscuous mode [ 311.784448][ T47] veth1_vlan: left promiscuous mode [ 311.823774][ T47] veth0_vlan: left promiscuous mode [ 311.871797][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 312.204773][ T29] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 312.213912][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.252730][ T29] usb 5-1: config 0 descriptor?? [ 312.348109][ T29] cp210x 5-1:0.0: cp210x converter detected [ 312.512142][ T9378] loop5: detected capacity change from 0 to 256 [ 312.831218][ T29] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 312.901550][ T802] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 312.912766][ T29] usb 5-1: cp210x converter now attached to ttyUSB0 [ 313.133182][ T802] usb 6-1: Using ep0 maxpacket: 16 [ 313.182336][ T5873] usb 5-1: USB disconnect, device number 7 [ 313.241571][ T802] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 313.279240][ T802] usb 6-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 313.301223][ T802] usb 6-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 313.334127][ T802] usb 6-1: config 0 interface 0 has no altsetting 0 [ 313.391154][ T802] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 313.429807][ T802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 313.434310][ T5873] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 313.453245][ T47] team0 (unregistering): Port device team_slave_1 removed [ 313.478038][ T802] usb 6-1: config 0 descriptor?? [ 313.577473][ T47] team0 (unregistering): Port device team_slave_0 removed [ 313.620700][ T5873] cp210x 5-1:0.0: device disconnected [ 314.032090][ T9378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 314.088507][ T9378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 314.144881][ T802] hid (null): invalid report_count -842715762 [ 314.151158][ T802] hid (null): invalid report_size -2094628929 [ 314.505800][ T802] usb 6-1: USB disconnect, device number 10 [ 314.526556][ T5280] 8021q: adding VLAN 0 to HW filter on device eth4 [ 314.562117][ T9395] netlink: 8 bytes leftover after parsing attributes in process `syz.0.867'. [ 314.611491][ T9395] netlink: 'syz.0.867': attribute type 9 has an invalid length. [ 314.637035][ T9177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.716563][ T9177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.850853][ T5832] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 315.026064][ T9177] team0: Port device team_slave_0 added [ 315.058234][ T9177] team0: Port device team_slave_1 added [ 315.465186][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.514825][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 315.647339][ T9177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.932732][ T9177] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.984038][ T9177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 316.095499][ T9177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.097988][ T5873] IPVS: starting estimator thread 0... [ 316.186789][ T5832] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.195963][ T5832] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.202720][ T47] IPVS: stop unused estimator thread 0... [ 316.286389][ T9420] IPVS: using max 22 ests per chain, 52800 per kthread [ 316.477433][ T9177] hsr_slave_0: entered promiscuous mode [ 316.529335][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.538894][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.600549][ T9177] hsr_slave_1: entered promiscuous mode [ 316.637414][ T9177] debugfs: 'hsr0' already exists in 'hsr' [ 316.643199][ T9177] Cannot create hsr debugfs directory [ 316.649007][ T8988] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 316.740312][ T8988] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 316.761334][ T47] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.835541][ T8988] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 316.944011][ T8988] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.092575][ T8988] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 317.110169][ T8988] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.185328][ T8988] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 317.223275][ T8988] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.993482][ T802] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 318.229586][ T9177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.249028][ T802] usb 5-1: Using ep0 maxpacket: 8 [ 318.362309][ T802] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 318.370662][ T802] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.407231][ T802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 318.417060][ T802] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 318.439627][ T8988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.510664][ T802] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.556996][ T802] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 318.597893][ T8988] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.636957][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.827806][ T9177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.896226][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.907740][ T6555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.969131][ T802] usb 5-1: usb_control_msg returned -32 [ 319.023081][ T802] usbtmc 5-1:16.0: can't read capabilities [ 319.107955][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.116389][ T6555] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.360515][ T29] libceph: connect (1)127.0.0.1:6789 error -101 [ 319.373265][ T29] libceph: mon0 (1)127.0.0.1:6789 connect error [ 319.440729][ T9177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.648304][ T5776] libceph: connect (1)127.0.0.1:6789 error -101 [ 319.654788][ T5776] libceph: mon0 (1)127.0.0.1:6789 connect error [ 319.767074][ T9177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.768251][ T9473] usbtmc 5-1:16.0: CHECK_CLEAR_STATUS returned 3 [ 319.815149][ T9476] netlink: 'syz.0.888': attribute type 1 has an invalid length. [ 319.918270][ T9476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.033641][ T10] usb 5-1: USB disconnect, device number 8 [ 320.073044][ T9464] ceph: No mds server is up or the cluster is laggy [ 320.180619][ T9478] bond1: (slave gretap1): making interface the new active one [ 320.219593][ T5776] libceph: connect (1)127.0.0.1:6789 error -101 [ 320.234849][ T5776] libceph: mon0 (1)127.0.0.1:6789 connect error [ 320.252201][ T9478] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 320.935516][ T9177] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 321.020429][ T9177] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 321.131263][ T9177] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 321.188491][ T9177] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 321.275573][ T9177] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.313926][ T9177] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 321.367173][ T9177] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 321.409957][ T9177] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 322.991153][ T9177] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.140578][ T9525] loop5: detected capacity change from 0 to 256 [ 323.156359][ T9177] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.175277][ T9525] exfat: Deprecated parameter 'namecase' [ 323.181003][ T9525] exfat: Deprecated parameter 'namecase' [ 323.230821][ T9525] exfat: Deprecated parameter 'namecase' [ 323.280166][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.288635][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.313623][ T9525] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0x5174a95f, utbl_chksum : 0xe619d30d) [ 323.485129][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.492320][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.591831][ T9520] loop2: detected capacity change from 0 to 4096 [ 323.727901][ T9520] ntfs3(loop2): Mark volume as dirty due to NTFS errors [ 323.862518][ T9520] ntfs3(loop2): Failed to load $Extend (-22). [ 323.883662][ T9177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 323.938958][ T9520] ntfs3(loop2): Failed to initialize $Extend. [ 324.037424][ T30] audit: type=1800 audit(1785456615.865:63): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.903" name="pattern" dev="configfs" ino=28522 res=0 errno=0 [ 324.392137][ T8988] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 324.798194][ T8988] veth0_vlan: entered promiscuous mode [ 324.903337][ T802] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 324.985229][ T8988] veth1_vlan: entered promiscuous mode [ 325.021058][ T9548] veth1_to_bond: entered allmulticast mode [ 325.107626][ T9547] veth1_to_bond: left allmulticast mode [ 325.234355][ T802] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 325.345042][ T802] usb 6-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 325.354225][ T802] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 325.465159][ T802] usb 6-1: Product: syz [ 325.469369][ T802] usb 6-1: Manufacturer: syz [ 325.474710][ T8988] veth0_macvtap: entered promiscuous mode [ 325.509435][ T8988] veth1_macvtap: entered promiscuous mode [ 325.655432][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 325.729999][ T802] usb_debug 6-1:1.0: debug converter detected [ 325.765443][ T8988] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 325.803251][ T802] usb 6-1: debug converter now attached to ttyUSB0 [ 325.944906][ T29] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 325.991309][ T9562] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 326.038054][ T5784] usb 6-1: USB disconnect, device number 11 [ 326.095866][ T5784] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 326.165722][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.174518][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.235981][ T5784] usb_debug 6-1:1.0: device disconnected [ 326.258827][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.406123][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.844205][ T802] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 326.962714][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.007187][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.346822][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.466896][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.944649][ T9177] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.630171][ T9177] veth0_vlan: entered promiscuous mode [ 329.793853][ T9177] veth1_vlan: entered promiscuous mode [ 330.023736][ T9177] veth0_macvtap: entered promiscuous mode [ 330.056144][ T9177] veth1_macvtap: entered promiscuous mode [ 330.226150][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.334516][ T9177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.547710][ T6551] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.678471][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.687245][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.824113][ T185] xhci_hcd 0000:00:01.0: init 0000:00:01.0 fail, -16 [ 330.832559][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.852133][ T9639] xhci_hcd 0000:00:01.0: probe with driver xhci_hcd failed with error -16 [ 331.368590][ T1013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.402436][ T1013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.624336][ T5832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.655665][ T5832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.768754][ T5784] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 332.077722][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 332.122424][ T5784] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 332.147092][ T9654] netlink: 'syz.4.937': attribute type 26 has an invalid length. [ 332.194545][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'. [ 332.216400][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.937'. [ 332.303658][ T5784] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 332.312760][ T5784] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 332.371386][ T5784] usb 4-1: Product: syz [ 332.375603][ T5784] usb 4-1: Manufacturer: syz [ 332.397222][ T9654] netlink: 'syz.4.937': attribute type 26 has an invalid length. [ 332.430117][ T9654] netlink: 4 bytes leftover after parsing attributes in process `syz.4.937'. [ 332.490572][ T5784] usb 4-1: SerialNumber: syz [ 333.005631][ T5784] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202 [ 333.375675][ T30] audit: type=1800 audit(1785456625.205:64): pid=9672 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.943" name="protocol" dev="configfs" ino=29213 res=0 errno=0 [ 334.372336][ T9690] loop4: detected capacity change from 0 to 512 [ 334.515930][ T9690] EXT4-fs: Invalid want_extra_isize 1969 [ 334.590131][ T9692] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 334.767051][ T802] usb 4-1: USB disconnect, device number 2 [ 334.876040][ T802] usblp0: removed [ 335.642854][ T9708] loop3: detected capacity change from 0 to 512 [ 335.707091][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 335.907903][ T9708] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.952: inode has both inline data and extents flags [ 336.059208][ T9708] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 336.060911][ T9708] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.952: couldn't read orphan inode 15 (err -117) [ 336.076789][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 336.076825][ C1] EXT4-fs (loop3): initial error at time 1785456627: ext4_orphan_get:1399: inode 15 [ 336.076875][ C1] EXT4-fs (loop3): last error at time 1785456627: ext4_orphan_get:1399: inode 15 [ 336.322882][ T9708] loop3: lost filesystem error report for type 5 error -117 [ 336.333225][ T9708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 337.994791][ T9707] loop4: detected capacity change from 0 to 8192 [ 338.357981][ T8988] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.919969][ T9745] loop3: detected capacity change from 0 to 8 [ 340.809700][ T9753] input: syz1 as /devices/virtual/input/input15 [ 341.977143][ T9763] loop2: detected capacity change from 0 to 65536 [ 342.112078][ T9763] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 342.165418][ T29] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 342.245388][ T30] audit: type=1804 audit(1785456634.075:65): pid=9779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.970" name="/newroot/54/file1" dev="tmpfs" ino=321 res=1 errno=0 [ 342.477935][ T29] usb 2-1: not running at top speed; connect to a high speed hub [ 342.525492][ T9763] XFS (loop2): Ending clean mount [ 342.550363][ T29] usb 2-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 342.552166][ T9763] XFS (loop2): Quotacheck needed: Please wait. [ 342.559520][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 342.734126][ T29] cyberjack 2-1:1.0: Reiner SCT Cyberjack USB card reader converter detected [ 342.885535][ T29] usb 2-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 342.988553][ T9763] XFS (loop2): Quotacheck: Done. [ 343.437407][ T9792] hpfs: hpfs_map_sector(): read error [ 343.551484][ T24] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 343.594976][ T24] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 343.861126][ T24] usb 2-1: USB disconnect, device number 11 [ 344.046804][ T24] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 344.220383][ T24] cyberjack 2-1:1.0: device disconnected [ 344.805389][ T8216] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 345.404876][ T9818] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 345.480388][ T9813] syzkaller1: entered allmulticast mode [ 345.767523][ T9818] team0 (unregistering): Port device team_slave_0 removed [ 345.885897][ T9818] team0 (unregistering): Port device team_slave_1 removed [ 346.018099][ T9826] loop5: detected capacity change from 0 to 16 [ 346.131083][ T9826] erofs (device loop5): mounted with root inode @ nid 36. [ 346.798224][ T9831] device-mapper: ioctl: dm_ctl_ioctl: unknown command 0xc138fd32 [ 347.599901][ T9840] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 347.924967][ T5280] 8021q: adding VLAN 0 to HW filter on device eth17 [ 349.111499][ T5784] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 349.338550][ T5784] usb 2-1: Using ep0 maxpacket: 32 [ 349.445608][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 349.465409][ T5784] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 349.475201][ T5784] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 349.548698][ T5784] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 349.623521][ T5784] usb 2-1: config 0 descriptor?? [ 349.734322][ T5784] hub 2-1:0.0: USB hub found [ 349.900626][ T5784] hub 2-1:0.0: 1 port detected [ 350.596454][ T29] hub 2-1:0.0: activate --> -90 [ 351.040020][ T5784] usb 2-1: USB disconnect, device number 12 [ 351.134649][ T9903] loop3: detected capacity change from 0 to 128 [ 351.142160][ T9903] vfat: Unknown parameter 'uid-0x000000000000ee00' [ 354.437054][ T5625] Bluetooth: hci3: command 0x0406 tx timeout [ 354.449925][ T5642] Bluetooth: hci4: command 0x0406 tx timeout [ 355.911173][ T9944] uprobe: syz.3.1023:9944 failed to unregister, leaking uprobe [ 356.171782][ T9944] uprobe: syz.3.1023:9944 failed to unregister, leaking uprobe [ 356.524670][ T9951] loop4: detected capacity change from 0 to 131072 [ 356.540421][ T9951] F2FS-fs (loop4): invalid crc value [ 356.686047][ T9951] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 356.723501][ T9951] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 357.135557][ T9951] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 357.305735][ T9968] loop3: detected capacity change from 0 to 256 [ 357.522389][ T9968] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 357.971422][ T9975] loop1: detected capacity change from 0 to 128 [ 358.087258][ T9975] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 358.259726][ T9975] hpfs: filesystem error: improperly stopped [ 358.265782][ T9975] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 358.357244][ T9983] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 358.391667][ T9975] hpfs: You really don't want any checks? You are crazy... [ 358.398920][ T9975] hpfs: Code page index out of array [ 358.485715][ T9975] hpfs: code page support is disabled [ 358.491740][ T9975] hpfs: hpfs_map_4sectors(): unaligned read [ 358.551031][ T9975] hpfs: hpfs_map_4sectors(): unaligned read [ 358.619781][ T9975] hpfs: filesystem error: unable to find root dir [ 358.624239][ T9983] CIFS: Attempting to mount //127.0.0.1/share [ 360.201508][ T9983] CIFS: VFS: Error connecting to socket. Aborting operation. [ 360.343628][ T5611] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 360.370921][ T9983] CIFS: VFS: cifs_mount failed w/return code = -4 [ 360.409564][ T9987] loop3: detected capacity change from 0 to 131072 [ 360.435485][ T9987] F2FS-fs (loop3): Invalid log sectorsize (67108873) [ 360.449535][ T9987] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 360.477998][ T9987] F2FS-fs (loop3): invalid crc value [ 360.661570][ T9987] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 360.739426][ T9987] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 360.755916][ T9987] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 360.957916][ T5611] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 361.042268][ T5611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.131392][ T5611] usb 3-1: Product: syz [ 361.166759][ T5611] usb 3-1: Manufacturer: syz [ 361.262247][ T5611] usb 3-1: SerialNumber: syz [ 361.812370][ T5611] usb 3-1: can't set config #1, error -71 [ 361.896983][ T5611] usb 3-1: USB disconnect, device number 7 [ 363.034651][T10021] loop5: detected capacity change from 0 to 128 [ 363.228449][T10021] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 363.305255][T10021] System zones: 1-3, 19-19, 35-36 [ 363.721516][T10021] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 363.927822][T10017] loop4: detected capacity change from 0 to 131072 [ 363.942544][T10017] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 363.949299][T10017] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 363.972216][T10017] F2FS-fs (loop4): invalid crc value [ 364.110973][T10021] ext4 filesystem being mounted at /124/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 364.155272][ T5280] 8021q: adding VLAN 0 to HW filter on device eth6 [ 364.171410][T10017] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 364.320981][T10017] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 364.333359][T10017] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 364.553468][ T29] usb 2-1: new full-speed USB device number 13 using dummy_hcd [ 364.670317][ T30] audit: type=1800 audit(1785456656.505:66): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1044" name="file1" dev="loop4" ino=7 res=0 errno=0 [ 364.874250][ T29] usb 2-1: config index 0 descriptor too short (expected 28277, got 36) [ 364.882662][ T29] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.918590][ T29] usb 2-1: config 0 has no interfaces? [ 364.924128][ T29] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 364.961398][ T29] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.999941][ T29] usb 2-1: config 0 descriptor?? [ 365.265540][T10041] 8021q: adding VLAN 0 to HW filter on device bond1 [ 365.352844][T10041] bridge0: port 3(bond1) entered blocking state [ 365.359253][T10041] bridge0: port 3(bond1) entered disabled state [ 365.392066][ T5784] usb 2-1: USB disconnect, device number 13 [ 365.456507][ T7436] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 365.466501][T10041] bond1: entered allmulticast mode [ 365.555922][T10041] bond1: entered promiscuous mode [ 365.612646][T10041] bridge0: port 3(bond1) entered blocking state [ 365.619050][T10041] bridge0: port 3(bond1) entered forwarding state [ 365.909356][ T47] bridge0: port 3(bond1) entered disabled state [ 365.968710][T10045] ip6tnl3: entered promiscuous mode [ 369.897976][T10077] binder: 10075:10077 ioctl c0306201 200000000000 returned -14 [ 370.774222][T10085] lo: Caught tx_queue_len zero misconfig [ 371.792779][T10105] loop3: detected capacity change from 0 to 512 [ 372.068605][T10105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 372.188998][T10105] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.213853][T10114] loop5: detected capacity change from 0 to 8 [ 372.339492][T10114] SQUASHFS error: Failed to read block 0x2d7: -5 [ 372.345874][T10114] SQUASHFS error: Unable to read metadata cache entry [2d5] [ 372.868837][ T8988] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 372.980658][T10123] loop2: detected capacity change from 0 to 1024 [ 373.371466][T10123] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 373.493982][ T5611] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 373.514889][ T5280] 8021q: adding VLAN 0 to HW filter on device eth7 [ 373.721019][ T5611] usb 6-1: not running at top speed; connect to a high speed hub [ 373.756238][ T5611] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 373.805493][ T5611] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 373.855170][ T5611] usb 6-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 373.866125][ T5611] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.879333][ T5611] usb 6-1: Product: syz [ 373.889438][ T5611] usb 6-1: Manufacturer: syz [ 373.897406][ T5611] usb 6-1: SerialNumber: syz [ 373.962516][ T5611] oti6858 6-1:1.0: oti6858 converter detected [ 374.142822][ T5611] usb 6-1: oti6858 converter now attached to ttyUSB0 [ 374.317903][T10126] oti6858 ttyUSB0: oti6858_open(): usb_submit_urb() failed with error -90 [ 374.505167][ T5611] usb 6-1: USB disconnect, device number 12 [ 375.075318][ T8216] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 375.143870][ T5611] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 375.440238][ T5611] oti6858 6-1:1.0: device disconnected [ 376.708168][T10153] loop1: detected capacity change from 0 to 40427 [ 376.722497][T10153] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 376.731764][T10153] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 377.162734][T10153] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 377.205255][T10168] loop4: detected capacity change from 0 to 8 [ 377.228207][T10153] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 377.236472][T10153] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 377.270973][T10168] SQUASHFS error: zlib decompression failed, data probably corrupt [ 377.386501][T10168] SQUASHFS error: Failed to read block 0x9b: -5 [ 377.392805][T10168] SQUASHFS error: Unable to read metadata cache entry [99] [ 377.565845][T10168] SQUASHFS error: Unable to read inode 0x127 [ 378.005371][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.011723][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.217269][T10185] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1092'. [ 378.313527][T10153] bio_check_eod: 148 callbacks suppressed [ 378.313579][T10153] syz.1.1083: attempt to access beyond end of device [ 378.313579][T10153] loop1: rw=2049, sector=45096, nr_sectors = 2048 limit=40427 [ 378.379058][T10153] syz.1.1083: attempt to access beyond end of device [ 378.379058][T10153] loop1: rw=2049, sector=47144, nr_sectors = 2056 limit=40427 [ 378.434864][T10153] syz.1.1083: attempt to access beyond end of device [ 378.434864][T10153] loop1: rw=2049, sector=49200, nr_sectors = 2048 limit=40427 [ 378.480612][T10153] syz.1.1083: attempt to access beyond end of device [ 378.480612][T10153] loop1: rw=2049, sector=51248, nr_sectors = 2000 limit=40427 [ 378.498790][T10153] syz.1.1083: attempt to access beyond end of device [ 378.498790][T10153] loop1: rw=2049, sector=45056, nr_sectors = 8 limit=40427 [ 378.533300][T10153] syz.1.1083: attempt to access beyond end of device [ 378.533300][T10153] loop1: rw=2049, sector=57344, nr_sectors = 2072 limit=40427 [ 378.658711][T10153] syz.1.1083: attempt to access beyond end of device [ 378.658711][T10153] loop1: rw=2049, sector=59416, nr_sectors = 2048 limit=40427 [ 378.720608][T10153] syz.1.1083: attempt to access beyond end of device [ 378.720608][T10153] loop1: rw=2049, sector=61464, nr_sectors = 2048 limit=40427 [ 378.750236][T10185] team1: entered promiscuous mode [ 378.755298][T10185] team1: entered allmulticast mode [ 378.758951][T10153] syz.1.1083: attempt to access beyond end of device [ 378.758951][T10153] loop1: rw=2049, sector=63512, nr_sectors = 1600 limit=40427 [ 379.011320][ T802] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 379.287804][T10198] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1096'. [ 379.324143][ T802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.343134][ T802] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.352946][ T802] usb 5-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 379.447596][ T802] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.504365][ T802] usb 5-1: config 0 descriptor?? [ 380.284896][ T5783] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 380.478729][ T5783] usb 4-1: unable to get BOS descriptor or descriptor too short [ 380.495804][ T802] hid-led 0003:27B8:01ED.000C: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.4-1/input0 [ 380.503371][ T5783] usb 4-1: not running at top speed; connect to a high speed hub [ 380.592767][ T802] hid-led 0003:27B8:01ED.000C: ThingM blink(1) initialized [ 380.625865][ T5783] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 380.670955][ T5783] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 380.744254][ T29] usb 5-1: USB disconnect, device number 9 [ 380.745731][ T5783] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 380.892050][ T5783] usb 4-1: config 14 has no interface number 0 [ 380.942806][ T5783] usb 4-1: config 14 has no interface number 1 [ 380.957363][T10211] fido_id[10211]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 381.003849][ T5783] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 381.035144][ T5783] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 381.078430][ T5783] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.102978][ T5783] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 381.127465][ T5783] usb 4-1: config 14 interface 57 has no altsetting 0 [ 381.135652][ T5783] usb 4-1: config 14 interface 228 has no altsetting 0 [ 381.246700][ T5783] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 381.303725][ T5783] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.356676][ T5783] usb 4-1: Product: syz [ 381.384204][ T5783] usb 4-1: Manufacturer: syz [ 381.428965][ T5783] usb 4-1: SerialNumber: syz [ 382.088441][T10227] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1102'. [ 382.133432][ T5783] legousbtower 4-1:14.57: interrupt endpoints not found [ 382.560573][ T5783] legousbtower 4-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 382.630992][ T5783] legousbtower 4-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 382.797926][ T5280] 8021q: adding VLAN 0 to HW filter on device eth8 [ 384.176757][ T802] usb 4-1: USB disconnect, device number 3 [ 384.324554][ T802] legousbtower 4-1:14.228: LEGO USB Tower #-160 now disconnected [ 384.735927][T10276] loop4: detected capacity change from 0 to 512 [ 384.963932][T10276] EXT4-fs (loop4): orphan cleanup on readonly fs [ 385.289672][T10276] EXT4-fs (loop4): 1 orphan inode deleted [ 385.413676][T10276] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 386.051378][ T8282] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 386.359456][ T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 386.568297][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 386.634968][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 386.722854][ T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 386.777166][ T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 386.833852][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 386.913250][ T10] usb 6-1: config 0 descriptor?? [ 386.986097][ T10] hub 6-1:0.0: USB hub found [ 387.257448][ T10] hub 6-1:0.0: 1 port detected [ 387.496912][T10317] netlink: 'syz.4.1127': attribute type 1 has an invalid length. [ 387.504681][T10317] netlink: 'syz.4.1127': attribute type 2 has an invalid length. [ 387.618042][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1127'. [ 388.264383][ T10] hub 6-1:0.0: activate --> -90 [ 388.701689][ T5611] usb 6-1: USB disconnect, device number 13 [ 388.712630][ T10] usb 6-1-port1: config error [ 389.239736][T10346] trusted_key: syz.0.1136 sent an empty control message without MSG_MORE. [ 389.968635][T10354] loop5: detected capacity change from 0 to 512 [ 389.982849][T10353] loop3: detected capacity change from 0 to 2048 [ 390.097234][T10354] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a85ec018, mo2=0002] [ 390.134925][T10354] System zones: 0-2, 18-18, 34-35 [ 390.184607][T10353] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 390.231131][T10354] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 390.438318][T10354] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 390.621687][T10354] EXT4-fs (loop5): shut down requested (1) [ 390.652671][T10368] pim6reg1: entered promiscuous mode [ 390.749191][T10368] pim6reg1: entered allmulticast mode [ 390.776584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 391.054493][ T7436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 391.206149][ T8988] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 393.328419][ C0] ip6_tunnel: ip6gretap0: Local routing loop detected! [ 394.865719][T10421] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 394.865719][T10421] program syz.5.1157 not setting count and/or reply_len properly [ 395.113226][T10421] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 395.113226][T10421] program syz.5.1157 not setting count and/or reply_len properly [ 395.316808][T10421] sg_write: data in/out 1701604413/2147479510 bytes for SCSI command 0x0-- guessing data in; [ 395.316808][T10421] program syz.5.1157 not setting count and/or reply_len properly [ 396.126584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 396.326609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #46!!! [ 396.508838][T10432] loop5: detected capacity change from 0 to 4096 [ 396.623918][T10432] EXT4-fs: inline encryption not supported [ 396.751604][T10432] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 396.822067][T10432] EXT4-fs (loop5): Test dummy encryption mode enabled [ 396.919001][T10432] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 396.973851][T10432] System zones: 0-5 [ 397.136590][ T0] NOHZ tick-stop error: local softirq work is pending, handler #86!!! [ 397.209857][T10432] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 397.326584][ T0] NOHZ tick-stop error: local softirq work is pending, handler #206!!! [ 397.499129][T10454] loop3: detected capacity change from 0 to 16 [ 397.595844][ T30] audit: type=1800 audit(1785456689.425:67): pid=10432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1162" name="bus" dev="loop5" ino=18 res=0 errno=0 [ 397.667571][T10459] loop2: detected capacity change from 0 to 512 [ 397.716938][T10454] erofs (device loop3): mounted with root inode @ nid 36. [ 397.838583][T10459] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 397.972873][T10459] EXT4-fs (loop2): 1 truncate cleaned up [ 398.053914][T10459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 398.624634][ T7436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.083591][ T8216] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.130602][ T10] xhci_hcd 0000:00:01.0: init 0000:00:01.0 fail, -16 [ 399.140902][T10470] xhci_hcd 0000:00:01.0: probe with driver xhci_hcd failed with error -16 [ 399.486589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #06!!! [ 399.507460][ T29] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 399.726588][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 399.837577][ T29] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 399.949074][ T29] usb 2-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 399.958170][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 400.010631][ T29] usb 2-1: Product: syz [ 400.014846][ T29] usb 2-1: Manufacturer: syz [ 400.030070][ T802] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 400.179957][ T29] usb_debug 2-1:1.0: debug converter detected [ 400.222740][ T29] usb 2-1: debug converter now attached to ttyUSB0 [ 400.274291][ T802] usb 6-1: Using ep0 maxpacket: 8 [ 400.343191][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 400.385106][ T802] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 400.393370][ T802] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 400.487796][ T24] usb 2-1: USB disconnect, device number 14 [ 400.504610][ T802] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 400.514495][ T802] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 400.558384][ T24] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 400.620420][ T802] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 400.621038][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 400.662635][ T24] usb_debug 2-1:1.0: device disconnected [ 400.668420][ T802] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 400.753427][ T10] usb 4-1: config 0 has no interfaces? [ 400.766695][ T802] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.782945][ T10] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 400.862677][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.964720][ T10] usb 4-1: config 0 descriptor?? [ 401.135185][ T802] usb 6-1: GET_CAPABILITIES returned 0 [ 401.140748][ T802] usbtmc 6-1:16.0: can't read capabilities [ 401.422359][ T29] usb 6-1: USB disconnect, device number 14 [ 402.136158][ T5280] 8021q: adding VLAN 0 to HW filter on device eth5 [ 402.671425][ T24] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 402.894378][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 403.001824][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 403.010078][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 403.039487][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 403.103535][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 403.161942][ T802] usb 4-1: USB disconnect, device number 4 [ 403.310099][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 403.434462][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 403.551802][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.900771][ T24] usb 2-1: usb_control_msg returned -32 [ 403.906413][ T24] usbtmc 2-1:16.0: can't read capabilities [ 404.257963][ T10] usb 2-1: USB disconnect, device number 15 [ 404.268257][T10512] usbtmc 2-1:16.0: usb_control_msg returned -71 [ 404.590030][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 404.649755][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 404.657760][T10550] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.712608][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1193'. [ 404.801381][T10549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1193'. [ 405.947675][T10565] Mass Storage Function, version: 2009/09/11 [ 405.954036][T10565] LUN: removable file: (no medium) [ 406.178468][T10570] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 409.711380][ T24] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 410.059716][ T24] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 410.069889][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 410.147952][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 410.181667][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 410.201890][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 410.211827][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 410.344799][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 410.354829][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 410.541871][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 410.551684][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 410.664685][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 410.674498][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 410.741989][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 410.801752][T10635] loop3: detected capacity change from 0 to 128 [ 410.842760][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 410.898161][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 410.914957][T10635] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 410.927968][T10635] ext4 filesystem being mounted at /54/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 411.031104][T10635] fscrypt: key with descriptor e8dab99234bb312e is too short (got 16 bytes, need 32+ bytes) [ 411.066441][ T24] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 411.075609][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.139538][ T24] usb 5-1: Product: syz [ 411.224336][ T24] usb 5-1: Manufacturer: syz [ 411.228992][ T24] usb 5-1: SerialNumber: syz [ 411.297096][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.304492][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.348443][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.423868][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.474458][ T8988] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 411.530983][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.602632][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.659417][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.691553][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.698868][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.841150][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.848542][T10623] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 411.956381][ T24] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 411.965545][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 412.092904][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 412.170836][ T24] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 412.353878][ T24] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 412.560832][ T24] usb 5-1: USB disconnect, device number 10 [ 412.640037][T10661] loop5: detected capacity change from 0 to 2048 [ 412.860298][T10661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 413.124005][ T24] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 413.148006][ T24] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 413.225957][ T24] keyspan 5-1:1.0: device disconnected [ 413.459315][ T7436] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 414.161461][ T10] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 414.243198][ T10] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 414.666153][T10676] loop3: detected capacity change from 0 to 4096 [ 414.796995][T10676] EXT4-fs (loop3): Test dummy encryption mode enabled [ 415.059838][T10676] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 415.087182][T10658] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 415.093744][T10658] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 415.239271][T10658] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 415.245232][T10658] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 415.332874][ T5776] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 415.534765][ T8988] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 415.670756][ T5776] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 415.683293][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 415.733152][ T5776] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 415.781535][ T5776] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 415.890226][ T5776] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 416.029313][ T5776] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 416.088501][ T5776] usb 5-1: config 0 descriptor?? [ 416.097466][T10715] loop3: detected capacity change from 0 to 64 [ 416.253658][T10658] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 416.259610][T10658] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 416.321436][T10715] syz.3.1238: attempt to access beyond end of device [ 416.321436][T10715] loop3: rw=8390657, sector=161, nr_sectors = 1 limit=64 [ 416.442082][T10715] buffer_io_error: 126 callbacks suppressed [ 416.442108][T10715] Buffer I/O error on dev loop3, logical block 161, lost async page write [ 416.491183][T10658] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.548058][T10658] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 416.583403][T10715] syz.3.1238: attempt to access beyond end of device [ 416.583403][T10715] loop3: rw=8390657, sector=162, nr_sectors = 1 limit=64 [ 416.738838][T10722] syz.3.1238: attempt to access beyond end of device [ 416.738838][T10722] loop3: rw=8388608, sector=175, nr_sectors = 1 limit=64 [ 416.899467][T10715] Buffer I/O error on dev loop3, logical block 162, lost async page write [ 416.911843][T10715] syz.3.1238: attempt to access beyond end of device [ 416.911843][T10715] loop3: rw=8390657, sector=163, nr_sectors = 1 limit=64 [ 416.928244][T10715] Buffer I/O error on dev loop3, logical block 163, lost async page write [ 416.939367][T10715] syz.3.1238: attempt to access beyond end of device [ 416.939367][T10715] loop3: rw=8390657, sector=167, nr_sectors = 1 limit=64 [ 416.955662][T10715] Buffer I/O error on dev loop3, logical block 167, lost async page write [ 416.964079][ T5776] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 416.992827][T10658] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 417.004941][T10658] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 417.013367][T10658] CPU: 0 UID: 0 PID: 10658 Comm: syz.0.1224 Tainted: G L syzkaller #0 PREEMPT(full) [ 417.024354][T10658] Tainted: [L]=SOFTLOCKUP [ 417.028669][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 417.038722][T10658] RIP: 0010:klist_put+0x4d/0x1d0 [ 417.043726][T10658] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 10 0d [ 417.063364][T10658] RSP: 0018:ffffc9000e1378d0 EFLAGS: 00010212 [ 417.069440][T10658] RAX: dffffc0000000000 RBX: ffff88807e2c0860 RCX: ffffc9001f947000 [ 417.077438][T10658] RDX: 000000000000000b RSI: ffffffff8bb043a5 RDI: 0000000000000058 [ 417.085413][T10658] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2209860 [ 417.093471][T10658] R10: ffffffff9104c303 R11: 0000000000000001 R12: 0000000000000000 [ 417.101528][T10658] R13: 0000000000000001 R14: ffffffff9104c2c0 R15: dffffc0000000000 [ 417.109503][T10658] FS: 00007f8e0041e6c0(0000) GS:ffff888123dda000(0000) knlGS:0000000000000000 [ 417.118446][T10658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.125032][T10658] CR2: 0000200000010000 CR3: 00000000607bf000 CR4: 0000000000350ef0 [ 417.133004][T10658] Call Trace: [ 417.136281][T10658] [ 417.139206][T10658] klist_remove+0x14c/0x2e0 [ 417.143771][T10658] ? __pfx_klist_remove+0x10/0x10 [ 417.148858][T10658] ? __pfx_kobject_move+0x10/0x10 [ 417.154287][T10658] ? kobject_put+0xb9/0x640 [ 417.159121][T10658] device_move+0x12d/0x1140 [ 417.163675][T10658] hci_conn_del_sysfs+0x86/0x1a0 [ 417.168634][T10658] hci_conn_del+0x506/0x1180 [ 417.173247][T10658] hci_conn_hash_flush+0x186/0x280 [ 417.178385][T10658] hci_dev_close_sync+0x5cf/0x13c0 [ 417.183524][T10658] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 417.189092][T10658] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.194738][T10658] ? do_raw_spin_lock+0x128/0x260 [ 417.199791][T10658] hci_dev_do_close+0x2e/0xb0 [ 417.204487][T10658] hci_rfkill_set_block+0x225/0x3a0 [ 417.209704][T10658] ? lockdep_hardirqs_on+0x78/0x100 [ 417.215003][T10658] ? __pfx_hci_rfkill_set_block+0x10/0x10 [ 417.220745][T10658] rfkill_set_block+0x205/0x510 [ 417.225624][T10658] rfkill_fop_write+0x2c0/0x580 [ 417.230509][T10658] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.236252][T10658] ? __pfx_rfkill_fop_write+0x10/0x10 [ 417.241651][T10658] ? __entry_text_end+0x1020b5/0x1020b9 [ 417.247228][T10658] ? security_file_permission+0x76/0x210 [ 417.252906][T10658] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.258586][T10658] ? rw_verify_area+0xce/0x6d0 [ 417.263401][T10658] vfs_write+0x2aa/0x1050 [ 417.267751][T10658] ? __pfx_rfkill_fop_write+0x10/0x10 [ 417.273164][T10658] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.278818][T10658] ? __pfx_vfs_write+0x10/0x10 [ 417.283596][T10658] ? find_held_lock+0x2b/0x80 [ 417.288296][T10658] ? __fget_files+0x215/0x3d0 [ 417.293033][T10658] ? __fget_files+0x215/0x3d0 [ 417.297730][T10658] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.303562][T10658] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.309419][T10658] ? __fget_files+0x21f/0x3d0 [ 417.314213][T10658] ksys_write+0x1f8/0x250 [ 417.318585][T10658] ? __pfx_ksys_write+0x10/0x10 [ 417.323465][T10658] ? srso_alias_return_thunk+0x5/0xfbef5 [ 417.329143][T10658] do_syscall_64+0x115/0x870 [ 417.333758][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.339689][T10658] RIP: 0033:0x7f8dff59e019 [ 417.344108][T10658] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 417.363819][T10658] RSP: 002b:00007f8e0041e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 417.372256][T10658] RAX: ffffffffffffffda RBX: 00007f8dff826090 RCX: 00007f8dff59e019 [ 417.380237][T10658] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 417.388209][T10658] RBP: 00007f8dff63500c R08: 0000000000000000 R09: 0000000000000000 [ 417.396179][T10658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 417.404147][T10658] R13: 00007f8dff826128 R14: 00007f8dff826090 R15: 00007ffeec459598 [ 417.412138][T10658] [ 417.415159][T10658] Modules linked in: [ 417.455353][T10658] ---[ end trace 0000000000000000 ]--- [ 417.479461][T10722] Buffer I/O error on dev loop3, logical block 175, async page read [ 417.487623][T10722] syz.3.1238: attempt to access beyond end of device [ 417.487623][T10722] loop3: rw=8388608, sector=176, nr_sectors = 1 limit=64 [ 417.544112][T10715] syz.3.1238: attempt to access beyond end of device [ 417.544112][T10715] loop3: rw=8390657, sector=169, nr_sectors = 1 limit=64 [ 417.557581][T10722] Buffer I/O error on dev loop3, logical block 176, async page read [ 417.568142][T10722] syz.3.1238: attempt to access beyond end of device [ 417.568142][T10722] loop3: rw=8388608, sector=177, nr_sectors = 1 limit=64 [ 417.576738][T10715] Buffer I/O error on dev loop3, logical block 169, lost async page write [ 417.592920][T10715] syz.3.1238: attempt to access beyond end of device [ 417.592920][T10715] loop3: rw=8390657, sector=171, nr_sectors = 1 limit=64 [ 417.609620][T10715] Buffer I/O error on dev loop3, logical block 171, lost async page write [ 417.618158][T10715] syz.3.1238: attempt to access beyond end of device [ 417.618158][T10715] loop3: rw=8390657, sector=172, nr_sectors = 1 limit=64 [ 417.639347][T10715] Buffer I/O error on dev loop3, logical block 172, lost async page write [ 417.705013][T10658] RIP: 0010:klist_put+0x4d/0x1d0 [ 417.749438][T10722] Buffer I/O error on dev loop3, logical block 177, async page read [ 417.806968][T10658] Code: c1 ea 03 80 3c 02 00 0f 85 74 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 43 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 10 0d [ 417.850542][T10658] RSP: 0018:ffffc9000e1378d0 EFLAGS: 00010212 [ 417.856744][T10658] RAX: dffffc0000000000 RBX: ffff88807e2c0860 RCX: ffffc9001f947000 [ 417.869082][T10658] RDX: 000000000000000b RSI: ffffffff8bb043a5 RDI: 0000000000000058 [ 417.877153][T10658] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff2209860 [ 417.904332][T10658] R10: ffffffff9104c303 R11: 0000000000000001 R12: 0000000000000000 [ 417.912360][T10658] R13: 0000000000000001 R14: ffffffff9104c2c0 R15: dffffc0000000000 [ 417.931766][T10658] FS: 00007f8e0041e6c0(0000) GS:ffff888123eda000(0000) knlGS:0000000000000000 [ 417.952401][T10658] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 417.960291][T10658] CR2: 0000001b2daf7ff8 CR3: 00000000607bf000 CR4: 0000000000350ef0 [ 417.969985][T10658] Kernel panic - not syncing: Fatal exception [ 417.976352][T10658] Kernel Offset: disabled [ 417.980667][T10658] Rebooting in 86400 seconds..