last executing test programs: 8m48.78283691s ago: executing program 2 (id=346): openat$sysfs(0xffffffffffffff9c, 0x0, 0x4002, 0x184) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000e40)) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x1) 8m43.784319522s ago: executing program 2 (id=350): socket$nl_route(0x10, 0x3, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e23, 0x7, @private2}, 0x1c, &(0x7f0000000700)}}], 0x4000000000002f3, 0x20000023) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030002100000000000000000000000020008000a000000a30000000000000005000600000000000a00000000000000fc02000000000000000000000000000000000000000000000200010000000000000009000000004005000500000000000a00"/128], 0x80}, 0x1, 0x7}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r3 = dup(r2) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/handlers\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0x5) bind$bt_sco(0xffffffffffffffff, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0xfffffffffffffffe}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r6 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x0, 0x12, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, 0x0, 0x0) ioctl$KVM_CAP_HYPERV_TLBFLUSH(r4, 0x4068aea3, &(0x7f0000000600)) 8m37.524783329s ago: executing program 2 (id=361): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'veth0_to_hsr\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) 8m36.460626733s ago: executing program 2 (id=363): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000200)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4004, 0x0, 0x0) 8m36.1765708s ago: executing program 2 (id=366): syz_mount_image$msdos(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x0, &(0x7f00000005c0), 0x1, 0x52e, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) syz_mount_image$exfat(&(0x7f00000005c0), &(0x7f0000000240)='./file0\x00', 0x3000050, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000008900)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000000180)={0x2, r1}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x4001, 0x3, 0x288, 0x160, 0x0, 0x148, 0x0, 0x148, 0x1f0, 0x240, 0x240, 0x1f0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x88, 0x1}, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x3, 0x76, 0xb75e, 0x5a3e, 0x4, 0x20}}, @common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0xffff, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) r7 = socket(0x1e, 0x1, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000d40)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x84008600}, 0xc, &(0x7f0000000d00)={&(0x7f0000000300)={0x24, 0x1, 0x1, 0x5, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1402}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4054}, 0x2005c) shutdown(r7, 0x2) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000dc0)={0x4, &(0x7f0000000d80)=[{0x3, 0x7, 0xc8, 0x3}, {0x8001, 0x56, 0x9, 0x7}, {0xb, 0x0, 0xff, 0x9}, {0x2, 0x6, 0xa, 0x8}]}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc8, &(0x7f0000000b40)=""/200, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000100)=@generic={0x0, r8}, 0x18) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r6, 0x400455c8, 0x4) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000080)={0x6, 0x40000006, 0x4, 0x7, 0xf8, "b708a7a26413ef6ca5a76bf8224be8720e0856", 0x15, 0x3}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) pipe2(&(0x7f00000000c0), 0x80000) 8m33.273862035s ago: executing program 2 (id=372): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f000001b0c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 8m18.086083931s ago: executing program 32 (id=372): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50) bpf$MAP_CREATE(0x0, &(0x7f000001b0c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000001dc0)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) openat$sysfs(0xffffffffffffff9c, 0x0, 0x141a82, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/if_inet6\x00') pread64(r3, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 52.654736455s ago: executing program 3 (id=1600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=@base={0x11, 0x4, 0x4, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000018", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0xf89, 0x0, &(0x7f0000000540)="39bdeac368e4c4e87a7bfd439b9f4793bcb64f217eb9435d6b4e435770512f9a534ba988586c565c33b12ddb4c357728b463ae54ffa88f65c5bc96051eb279632efcc45cc6c9e2dc521020f9357b64ce3879ce30e3", 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x6, 0x9, 0xffffffff}, 0x28) 52.164619805s ago: executing program 3 (id=1603): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23d, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x960, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0xe, 0xfffffffe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, 0x3, 0x1010001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9388, 0xffffffff, 0x0, 0x3ff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x100000]}, 0x45c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0xc, 0x4, 0xc4f, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000100), 0x6c7, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000440), 0x23, r6}, 0x38) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_DEBUGREGS(r7, 0x4080aea2, &(0x7f0000000000)={[0x8080000, 0x25000, 0x8000000, 0x1000], 0x1, 0x51, 0x9}) 50.919045061s ago: executing program 3 (id=1607): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setreuid(r1, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) 50.604291179s ago: executing program 3 (id=1609): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./bus\x00', 0xe, &(0x7f0000000240)={[{@commit}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1df}}, {@stripe}, {@noblock_validity}]}, 0x3, 0x451, &(0x7f0000000f80)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100)) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) read$FUSE(r0, &(0x7f0000001400)={0x2020}, 0x2020) 49.699455624s ago: executing program 3 (id=1616): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r0 = dup(0xffffffffffffffff) write$FUSE_BMAP(r0, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x40, &(0x7f0000000780)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@uname={'uname', 0x3d, 'trans=fd,'}}], [], 0x6b}}) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mountinfo\x00') read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) 47.524647685s ago: executing program 3 (id=1624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 47.183614055s ago: executing program 33 (id=1624): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@delchain={0x24, 0x66, 0x1, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 18.08829884s ago: executing program 4 (id=1721): syz_read_part_table(0x408c, &(0x7f00000040c0)="$eJzszz9Kw3AYBuC3TTShSEFXB3Fzkrp5BC9QcO4mODh4gKq3KR7AyQN4EEHwBC6RxGgVdVOU8jxDePP9+cEX/tzDWxotixdJ1pP7b3ZuZtebKdt0NZ4kdZLybNy1mk6GO0kmB1kb1cNsJDn//Mp08dO3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/9Vh0YfHZa1uP3dJ1yo+jBfJIJknmW03VZLb075zWTyd9HF3P8nRVv83bzdeHTd9mC5+5RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYFWV7/Ige6leYv3lcJVndufYBGAYBgKgVCSkygiBkD2ynLfxlEaFe4Pbu0aFeP6PrPtF+5/MK+K9568S51pn31oMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHMgAAAADC/K3zaD8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBQAA///xdxpv") syz_usb_connect$cdc_ncm(0x5, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109026400020100000009040100"], 0x0) userfaultfd(0x80000) r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0xdc) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x5000) 17.369724703s ago: executing program 6 (id=1726): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x1, 0x3, 0x1, 0xb, 0x2c5f, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) openat$cuse(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x4910, &(0x7f00000000c0)={0x0, 0xb45d, 0x3180, 0x0, 0x15e}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20003, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xfff, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(r7, &(0x7f00000003c0)={[0x21]}, 0x8, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000000000000100000458e00000030000000007000000000000005f00"], 0x0, 0x41, 0x0, 0x1}, 0x28) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x7, &(0x7f00000008c0)={0x22, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb8, 0xb8, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xe}}, @fwd={0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x2b}}, @struct={0x800000a, 0x7, 0x0, 0x4, 0x1, 0x7, [{0xd, 0x5}, {0x10, 0x1, 0x7}, {0x1, 0x3, 0x7}, {0x7, 0x0, 0x3}, {0x4, 0x1, 0x3}, {0xb, 0x0, 0x3e8e}, {0x0, 0x2, 0x5}]}, @enum]}, {0x0, [0x61, 0x61, 0x30, 0x5f]}}, 0x0, 0xd6}, 0x28) 16.963597857s ago: executing program 6 (id=1727): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x4, 0x7fff7bfc}]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x13) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x2282, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0xa0380, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r4, 0x400454cd, 0x6) close_range(r0, 0xffffffffffffffff, 0x0) 16.102735919s ago: executing program 4 (id=1730): r0 = socket(0x840000000002, 0x3, 0xff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000540)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r1, @ANYBLOB=',dmask=00000000000000000000152,fmask=00000000000000000000006,gid=', @ANYRESHEX=r2, @ANYBLOB=',uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c646973636172642c00fb278330ab3b4884d36adf6908d11f57832035e96a1513231140da182ca77aeedc492bbc501d94f854a7e26909bde6e698d72a15ec808a86c25d"], 0x1, 0x14f5, &(0x7f0000001580)="$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") lchown(&(0x7f0000000180)='./file0\x00', r1, 0xffffffffffffffff) 15.716105023s ago: executing program 4 (id=1731): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 12.896784203s ago: executing program 5 (id=1740): openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@usrquota}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$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") chmod(0x0, 0x23f) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x141) 11.712663504s ago: executing program 1 (id=1741): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x28107dd, &(0x7f0000000200)={[{@errors_remount}, {@noblock_validity}, {@discard}, {@test_dummy_encryption}, {@grpquota, 0x0}, {@acl}, {@noload}, {@nobarrier}, {@journal_path={'journal_path', 0x3d, './file0'}}, {@errors_remount}, {@usrjquota}, {@nolazytime}, {}, {@norecovery}, {@nobarrier}, {@quota}, {@resgid}, {@journal_ioprio}], [{@audit}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}], 0x2c}, 0x2, 0x4f8, &(0x7f0000000700)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f000000a3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x80}}, 0x50) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r6, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r7 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r7, &(0x7f0000000340)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xbb36, 0x3a, '-', 0x3a, '%%^!&@#', 0x3a, './file0', 0x3a, [0x50, 0x43, 0x4f, 0x4f, 0x50]}, 0x34) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000ac0)={0xb0, 0x0, 0x3, [{{0x4, 0x0, 0x4, 0x0, 0x8000, 0xf4, {0x4, 0x7, 0x8c, 0xfffffffffffffff9, 0x5, 0x3, 0x8, 0x806, 0x5, 0xa000, 0x5, 0x0, r4, 0x1ff, 0x2}}, {0x6, 0x8, 0x2, 0x7, 'fd'}}]}, 0x0, 0x0, 0x0}) getdents64(r5, &(0x7f0000000100)=""/134, 0x86) r9 = syz_mount_image$fuse(&(0x7f0000000380), &(0x7f00000003c0)='./file0\x00', 0x60040, &(0x7f00000005c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@allow_other}, {@blksize={'blksize', 0x3d, 0x200}}, {@blksize={'blksize', 0x3d, 0x400}}, {@blksize={'blksize', 0x3d, 0xe00}}, {@max_read={'max_read', 0x3d, 0x6}}], [{@smackfsdef={'smackfsdef', 0x3d, 'noblock_validity'}}, {@seclabel}]}}, 0x0, 0x0, &(0x7f0000000500)="82acdc94791d89adaff84974421018dfb9afede0ecb434aa1729a790f20a572f165ec365afd85fa441e9f1a829c892ecdd") r10 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0xe0902, 0x0) sendmsg$nl_netfilter(r8, &(0x7f00000004c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000c00)={0x150, 0x4, 0x6, 0x801, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0xa}, [@nested={0x13c, 0xb3, 0x0, 0x1, [@nested={0x4, 0xb9}, @nested={0x4, 0x3c}, @nested={0x4, 0x46}, @typed={0x14, 0x138, 0x0, 0x0, @ipv6=@private2}, @generic="87ba79012da648db5e0810e18c3871bad16abe7db08b313bd65fbd8dd4bef1ac59c22aa7fcbd660d822fd857393ed54056a1594d41b49dee96099ec2e804a711a574b700188df6f06cb5382f07ba645fff02101b7b1a464e42fdcff5696227e98b2da093e84646e21308c8b14432e7ac47d3f5033c526eeb18188d813d2da6a5a429910c506607855894710d7a5ed887dcc2d2340ad4067c3d68549845d3fcb684ccfb78820544b0ab7c0f0dbd4e05", @nested={0x4, 0x2b}, @generic="9c8773b214ed890114e0809736a4f2d2808cc7dd885d2357d061263773e126098e0eee3e6ee377971f59167f1302394a925ce75898ec5983fb2b3549e14458f122320c8b21ad769534a38171e406bb0748c6085490736eadac44cff06c51126711a2963520"]}]}, 0x150}, 0x1, 0x0, 0x0, 0x10}, 0x8000) r11 = ioctl$KVM_CREATE_VM(r10, 0xae01, 0x0) r12 = eventfd(0xff7ffff7) ioctl$KVM_IRQFD(r11, 0x4020ae76, &(0x7f0000000080)={r12, 0x2, 0x3, r12}) fchownat(r9, &(0x7f0000000540)='./file0\x00', r3, r4, 0xd00) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r13, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x310, 0x168, 0x9403, 0x4, 0x240, 0x2c0, 0x240, 0x4a8, 0x3d8, 0x240, 0x3d8, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x168, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'macsec0\x00', {0x0, 0x0, 0x0, 0x0, 0x100000, 0xa, 0x0, 0x84}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x5, 0x0, '\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'syz_tun\x00', 'team0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x370) creat(&(0x7f0000000dc0)='./file0\x00', 0x0) 11.712272314s ago: executing program 5 (id=1742): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x65, 0x89, 0x53, 0x40, 0x10f0, 0x2002, 0xd767, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x1, 0xa, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x1717, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r3, 0x0, 0x0}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) r7 = openat$dlm_plock(0xffffff9c, &(0x7f0000000500), 0x440, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000004c0)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0xfffffffffffff000}) dup3(r8, r9, 0x80000) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005938d74010973077339600"], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r10, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="2010060000"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000000)={0xc, &(0x7f0000000080)={0x20, 0x30, 0xec, {0xec, 0x0, "ca9bea8eac250dd68323573b16bc8798a1933052b7cb3c0622c05ee301feecc555cced1fa245a004fdd4075912a4c22adbce83197b803fa22b0e2a9ead2b4b1d890fd97b89a8030682ed227c3e146fca91d99822aaf9c7a244d5b54d919c28042776fa41136104a935ad176d258a171b2deed53f30eb1eec70c2c11f4f2fc965c76eb83d6eff1ddece8a95e5da3a0adb941a54e2a89fd92d940dd1c61bb963e542077bf28c057b49942368ba0713b94a658da482e23a77efba7bdd22f91b0d27454783344548d5f5b5f9e7201b6a1599e734cd638b1be6df134d412a5814da2eb04f6fe46086eae8e2da"}}, &(0x7f0000000180)={0x0, 0x3, 0xac, @string={0xac, 0x3, "c786de31306240a4fc02b9062e1c84036045e0bcd7e097bf620a051ed55cf85da555ffbe14c56410cd793a89b1dab9d4a5854d7406830c78bc4a30c94f07aa9003a59d44d8008b2076c24cbfa6b7167c6b1696a531a556ed5554ec0b5a0cd6e40499853b0e3ff60d10cfd7227f958219241a0a5c998d70b61c752219c77a3b0db8cb7576d865967be6136ea715b2fb8f442ad354bae3f3d818425dfab08f237320d62ec65583fe88ca72"}}}, &(0x7f00000003c0)={0x18, &(0x7f0000000240)={0x40, 0x13, 0x6f, "95e5a52fa61c3129b7dae7a66ed2f000af3898a15aef79a269f4ced0eda2d65f1f3530959f2ce4f6bc010d8d5df07fa5dec8f9d8a39e17b37cfd4d38887e1f94c25fff8ac4bf0f8c1d1572a6d778afa7a31e21998c8485a4e3e631788fdd52b5e61e7000"/111}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0xc0, 0x5, 0x5, "732d284abd"}, &(0x7f0000000380)={0x40, 0x5, 0x6, "234e8cb8a833"}}) 10.752610262s ago: executing program 1 (id=1748): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x1, 0x3, 0x1, 0xb, 0x2c5f, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) openat$cuse(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x4910, &(0x7f00000000c0)={0x0, 0xb45d, 0x3180, 0x0, 0x15e}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20003, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xfff, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(r7, &(0x7f00000003c0)={[0x21]}, 0x8, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000000000000100000458e00000030000000007000000000000005f00"], 0x0, 0x41, 0x0, 0x1}, 0x28) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x7, &(0x7f00000008c0)={0x22, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xe}}, @fwd={0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x2b}}, @struct={0x800000a, 0x7, 0x0, 0x4, 0x1, 0x7, [{0xd, 0x5}, {0x10, 0x1, 0x7}, {0x1, 0x3, 0x7}, {0x7, 0x0, 0x3}, {0x4, 0x1, 0x3}, {0xb, 0x0, 0x3e8e}, {0x0, 0x2, 0x5}]}, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{0xb, 0xfffffffc}, {0xd, 0x1}, {0xb}, {0xe, 0x786}, {0xb, 0x2}, {0x9, 0x14}, {0x5, 0x9}]}]}, {0x0, [0x61, 0x61, 0x30, 0x5f]}}, 0x0, 0x10e}, 0x28) 10.585451272s ago: executing program 1 (id=1749): r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket(0x2, 0x80805, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) io_getevents(0x0, 0x6, 0x0, &(0x7f00000003c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x40) mkdirat(0xffffffffffffff9c, 0x0, 0x1a0) mount$overlay(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000003c0)) chdir(&(0x7f00000000c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) lremovexattr(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)=@known='trusted.overlay.metacopy\x00') 8.836462398s ago: executing program 1 (id=1750): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'tunl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010000000000fbdbdf2507fe0000", @ANYRES32=r2, @ANYBLOB="00000000000000002c0012800900010069706970000000001c0002800500040000000000080003"], 0x4c}}, 0x0) 8.703385525s ago: executing program 5 (id=1751): r0 = socket$netlink(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1528, &(0x7f0000003240)="$eJzs3Au4TdXXMPAx5pyLQ9JOcjmsMcdip4NJkuSSkEuSJEmSW0KSJElIbrklIQm5J7knndw6Tjru9/s16eSVJElISDK/53T5e3v7+vz/79v3eb/3jN/zrLPnOGuPsefc46y9117POeebLsNrNKpZtQEzw3+F+u22NwAkAMAgALgGAAIAKJOrTC5AgGwae/+XHkT8zR6cdaVnIK4k6X/mJv3P3KT/mZv0P3OT/mdu0v/MTfqfuUn/hcjMts7Of61smXf7psvwGsv+qev/9v+8G3+9kev//51ku8x+ef//H+ufOtKk/5mb9D9zk/5nbtL/zE36n7lJ/zM36X/mJv0XIjO70tef/z/Yfn+qrvQ8LrMF/6m8K/vTJ4QQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAiszjnLzEA8Pv4Ss9LCCGEEEIIIYQQfx+f9UrPQAghhBBCCCGEEP/3IYDRYCCALJAVEiAbZIerIAdcDTnhGojBtZALroPccD3kgbyQD/JDIhSAghACgQWGCApBYYiD9wA3QhIUhWJQHByUgJJwE5SCm6E03AJlIDkF4DYoB+WhAlSE26ES3AGVoQpUhTuhGlSHGlAT7oJacDfUhnugDtwLdeE+qAf3Q314ABrAg9AQHoJG8DA0hkegCTSFZtAcWvyn8l+AHvAi9IRe0Bv6QF94CfpBfxgAA2EQvAyD4RUYAq/CUBgGw+E1GAGvw0h4A0bBaBgDb8JYGAfjYQJMhEkwGd6CKfA2TIV3YBpMhxkwE2bBbJgD78JceA/mwfuQjADzYQEshEWwGD6EFFgCqfARLIWPIQ2WwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBO2EX7IY9VfbCJ7APPoX98Bmkw+f/Yv5Z+GN+VwQEVKjQoMEsmAUTMAGzY3bMgTkwJ+bEGMYwF+bC3Jgb82AezIf5MBETsSAWREJCRsZCWAjjGMciWASTMAmLYTF06LAklsRSeDOWxtJYBstgWSyL5bA8lseKWBErYSWsjJWx6m0LALAa1sAaeBfehXdjbayNdbAO1sW6WA/rYX2sjw2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbthN3wBX8AX8UXshdVUH+yLfbEf9sMBOBAH4ss4GF/BV/BVHIrDcDi+hq/h6zgSz+AoHI1jcAxWUuNwPE5AVpNwMk7GKTgFp+JUnIbTcTrOxFk4G+fgHJyL72HGEZaMH+AHuAAX4CJcjIsxBZdgKqbiUjyLabgMl+MKXImrcCWuwbW4BtfjBlyPm3ATbsEtuA234Q7cgbtwF+7BPfgJfoKf4qc4FNMxHQ/gATyIB/EQHsLDeBiP4JFtVwHgMTyGx/E4nsCTeApP4mk8jWfwLJ7Dc3gez+MFfC7xq4Z7iq4bCiqDUUZlUVlUgkpQ2VV2lUPlUDlVThVTMZVL5VK5VW6VR+VR+VQ+lagSVUFVUJEixSpShVQhFVdxVUQVUUkqSRVTxZRTTpVUJVUpVUqVVqVVGXWrKqtuU+VUedXaVVQVVSXVxlVWVVRVVVVVU9VVDVVT1VS1VC1VW9VWdVQdVVfVVfXU/aq+6oMD8EGV0ZlGahg2VsOxiWqqmqnm6nV8VLVUI7GVaq3aqMfVaByF7VRL1149pTqo8dhRPZPw+wtdF/W86qq6qe7qBdVDtXI9VS81Dfuovmom9lP91QA1UM3F6up9TMYa6lU1VA1Tw9VrahG+rkaqN9QoNVqNUW+qsWqcGq8mqIlqkpqs3lJT1NtqqnpHTVPT1Qw1U81Ss9Uc9a6aq95T89T7Kll9oOarBWqhWqQWqw9VilqiUtVHaqn6WKWpZWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm1qu9qhdqpdarfao/aqT9Q+9anarz5T6epzlfH6fVB9oQ6pL9Vh9ZU6or5WR9U36pj6Vh1XvdQJdVKdUt+r0+oHdUad7XNO/ajOq5/UBfWzuqi8Ao1aaa2NDnQWnVUn6Gw6u75K59BX65z6Gh3T1+pc+jqdW1+v8+i8Op/OrxN1AV1Qh5q01awjXUgX1nF9gy6ib9RJuqgupotrp0vokvomXUrfrEvrW3QZfasuq2/T5XR5XUFX1LfrSvoOXVlX0VX1nbqarq5r6Jr6Ll1L361r63t0HX2vrqvv0/X0/bq+fkA30A/qhvoh3Ug/rBvrR3QT3VQ30811C/2obqkf0610a91GP67b6id0O/2kbq+f0h3007qjfkZ30s/qzvo53UU/r7vqbrq7/llf1F731L10b91H99Uv6X66vx6gB+pB+mU9WL+ih+hX9VA9TA/Xr+kR+nU9Ur+hR+nReox+U4/V4/R4PUFP1JP0ZP2WnqLf1lP1O3qanq5n6KwwS8/WA36rNO+fyH/7D/kzdUb+kF8efYveqrfp7XqH3ql36d16j96r9+p9ep/er/frdJ2uD+gD+qA+qA/pQ/qwPqyP6CP6qD6qj+lj+rg+rk/ok/pH/b0+rX/QZ/RZfVb/qM/r8/rCb88BGDTKaGNMYLKYrCbBZDPZzVUmh7na5DTXmJi51uQy15nc5nqTx+Q1+bKBSTQFTEETGjLWsIlMIVPYxM0Npoi50SSZoqaYKW6cKWFKmptMzCD8Id/k/5fy/2J+K2b8ekybFqaFaWlamlamlWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpnOprPpYrqYrqar6W66mx6mh+mJYHqb3qavecn0M/3NADPQDDIvm4zCQ8wQM9QMNcPNcDPCjDAjzUgzyowyGTvHmrFmvBlvJpqJZrKZbKaYKWaqmWqmmWlmhplhZplZZo6ZY+aauWaemWeSTbKZb+abhWahWWwWmxSTYlJNqllqlpo0s8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMmlmq9lqtpvtZqfZaXab3Wav2Wv2mX1mv9lv0k26OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlhTphT5pQ5bU6bM+aMOWfOmfPmvLlgLpiL5mLGaV+gAhWYwARZgixBQpAQZA+yBzmCHEHOIGcQC2JBriBXkDu4PsgT5A3yBfmDxKBAUDAIAwpswEEUFAoKB/HghqBIcGOQFBQNigXFAxeUCEoGNwWlgpuD0sEtQZng1qBscFtQLigfVAgqBrcHlYI7gspBlaBqcGdQLage1AhqBncFtYK7g9rBPUGd4N6gbnBfUC+4P6gfPBA0CB4MGgYPBY2Ch4PGwSNBk6Bp0CxoHrT4W+t7fybvY65n2CvMCn3CvuFLYb+wfzggHBgOCl8OB4evhEPCV8Oh4bBwePhaOCJ8PRwZvhGOCkeHY8I3w7HhuHB8OCGcGE4KJ4dvhVPCt8Op4TvhtHB6OCOcGc4KZ4dzwnfDueF74bzw/TA5/CCcHy4IF4aLwsXhh2FKuCRMDT8Kl4Yfh2nhsnB5uCJcGa4KV4drwrXhunB9uCHcGG4KN4dbwq3htnB7uCPcGe4Kd4d7wr3hJ+G+8NNwf/hZmB5+Hh4If3/b+zI8HH4VHgm/Do+G34THwm/D4+F34YnwZHgq/D48Hf4QngnPhufCH8Pz4U/hhfDn8GLoM07uM97eyZChLJSFEiiBslN2ykE5KCflpBjFKBflogAA8lAeykf5KJESqSAVpAxMTIWoEMUpTkWoCCVREhWjYuTIUUkqSaWoFJWm0lSGylBZKkvlqBxVoAp0O91Od9AdVIWq0J10J1Wn6lSTalItqkW1qTbVoTpUl+pSPapH9ak+NaAG1JAaUiNqRI2pMTWhJtSMmlELakEtqSW1olbUhtpQW2pL7agdtaf21IE6UEfqSJ2oE3WmztSFulBX6krdqTv1oB7Uk3pSb+pNfakv9aN+NIAG0CAaRINpMA2hITSUhtJwGk4jaASNpJE0ikbTGHqTxtI4Gk8TaCJNosk0mabQFJpKU2kaTaMZNINm0SyaQ3NoLs2leTSPkimZ5tN8WkgLaTEtphRKoVRKpaW0lNIojZbTclpJK2k1raa1tJbW03raSBtpM22mrbSVttN22kk7aTftpr20l/bRPtpP+ymd0ukAHaCDdJAO0SE6TIfpCB2ho3SUjtExOk7H6QSdoFN0ik7TaTpDZ+gcnaPz9BNdoJ/pInlKsNlsdnuVzWGvtjntNfY/xvlsfptoC9iCNrR5bN4/xGStTbJFbTFb3Dpbwpa0N/0pLmfL2wq2or3dVrJ32Mq/xQC/x7XW7vz1F9HtvbamvcvWsnfb2vYeW8fea+va+2w9+7Ctbx+xDWxT29A2t43sw7axfcQ2sU1tM9vctrVP2Hb2SdvePmU72Kf/FKfYJXatXWfX2w12n/3UnrM/2qP2G3ve/mR72l52kH3ZDrav2CH2VTvUDvtTPMa+acfacXa8nWAn2kl/imfYmXaWnW3n2HftXPven+LF9kObbFPtfLvALrSLfokz5pRqP7JL7cc2zS6zy+0Ku9Kusqvtmn/MdYXdZDfbLXav/cRutzvsTrvL7rZ7fokz1rHffmbT7ef2iP3aHrRf2EP2mD1sv/olzljfMfutPW6/syfsSXvKfm9P2x/sGXv2l/VnrP17+7O9aL0FRlas2XDAWTgrJ3A2zs5XcQ6+mnPyNRzjazkXX8e5+XrOw3k5H+fnRC7ABTlkYsvMERfiwhznG7gI38hJXJSLcXF2XIJL8k1cim/m0pxx9norl+XbuByX5wpckW/nSnwHV+YqXJXv5GpcnWtwTb6La/HdXJvv4Tp8L9fl+7ge38/1+QFuwA9yQ36IG/HD3Jgf4SbclJtxc27Bj3JLfoxbcWtuw49zW36C2/GT3J6f4g78NHfkZ7gTP8ud+Tnuws9zV+7G3fkF7sEvck/uxb25D/fll7gf9+cBPJAH8cs8mF/hIfwqD+VhPJxf4xH8Oo/kN3gUj+Yx/CaP5XE8nifwRJ7Ek/ktnsJv81R+h6fxdJ7BM3kWz+Y5/C7P5fd4Hr/PyfwBz+cFvJAX8WL+kFN4CafyR7yUP+Y0XsbLeQWv5FW8mtfwWl7H63kDb+RNvJkVb+VtvJ13MPIu3s17eC9/wvv4U97Pn3E6f84H+N/4IH/Bh/hLPsxf8RH+mo/yN3yMv+Xj/B2f4JN8ir/n0/wDn+GzfI5/5PP8E1/gn/kie4YIIxXpyERBlCXKGiVE2aLs0VVRjujqKGd0TRSLro1yRddFuaProzxR3ihflD9KjApEBaMwoshGHEVRoahwFI9uiIpEN0ZJUdGoWFQ8clGJqGR0U1QqujkqHd0SlYlujcpGt0XlovLRw/dWjG6PKkV3RJWjKlHV6M6oWlQ9qhHVjO6KakV3R7Wje6I60b1R6ei+qF50f1Q/eiBqAA9GDaOHokbRw1Hj6JGoSdQ0ahY1j1pEj0Yto8eiVlHrqE30eNQ2eiJqFz0ZtY+eijpET192f++oT9Q3eil6KfL+Hr0wvii+OP5hPCW+JJ4a/yi+NP5xPC2+LL48viK+Mr4qvjq+Jr42vi6+Pr4hvjG+Kb45viXufc2s4NApp51xgcvisroEl81ld1e5HO5ql9Nd42LuWpfLXedyu+tdHpfX5XP5XaIr4Aq60JGzjl3kCrnCLu5ucEXcjS7JFXXFXHHnXAlX0jV3LVwL19I95lq51q6Ne9w97p5wT7gn3ZPuKdfBPe06umdcJ/es6+yec8+5511X1811dy+4Hu5F19P1cr1db9fX9XX9XD83wA1wg9wgN9gNdkPcEDfUDXXD3XA3wo1wI91IN8qNcmPcGDfWjXXj3Xg30U10k91kN8VNcVPdVDfNTXMz3Aw3y81yc9wcN9fNdfPcPJeclOzmu/luoVvoFrvFLsWluFSX6pa6pS7Npbnlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ut1ut9vr9rp9bp/b7/a7dJfuDrgD57w76A65L91h95U74r52R9037pj71h1337kT7qQ75b53p90P7ow76865H91595O74H52F513k2NvxabE3o5Njb0TmxabHpsRmxmbFZsdmxN7NzY39l5sXuz9WHLsg9j82ILYwtii2OLYh7GU2JJYauyj2NLYx7G02LLY8tiK2MrYqpj3BbZHvpAv7OP+Bl/E3+iTfFFfzBf3zpfwJf1NvpS/2Zf2t/gy/lZf1t/my/nyvoJ/xDfxTX0z39y38I/6lv4x38q39m38476tf8K380/69v4p38E/7Tv6Z3wn/6zv7J/zXfzzvqvv5rv7F3wP/6Lv6bXv7fv4vv4l38/39wP8QD/Iv+wH+1f8EP+qH+qH+eH+NT/Cv+5H+jf8KD/aj/Fv+rF+nB/vJ/iJfpKf7N/yU/zbfqp/x0/z0/0MP9PP8rP9HP+un+vf8/P8+z7Zf+Dn+wV+oV/kF/sPfYpf4lP9R36p/9in+WV+uV/hIWGVX+3X+LV+nV/vN/iNfpPf7Lf4rX6b3+53+J1+l9/t9/i9/hO/z3/q9/vPfLr/3B/w/+YP+i/8If+lP+y/8kf81/6o/8Yf89/64/47f8Kf9Kf89/60/8Gf8Wf9Of+jP+9/8hf8z/6i/M2aEEIIIcQ/RV9mf58/ROofX9Vv3+kLAFfvyH/4P9bcmOfXcX+V2DYGAE/16vLg71u1ar179/7tvmkagsILACB2KT8LXIqXQRt4AtpDayj1v51ff9XtPF+mfvxWgOz/LicBLsWX6t/8F/XHJV+2/gKApMKXcrLBpfhS/dJ/qh38Uj9vy8vUz/bFZIBW/y4vB1yKL9UvCY/B09D+D/cUQgghhBBCCCF+1V9V6HS5z7cZn88TzaWcrHApvtzncyGEEEIIIYQQQlx5z3br/uSj7du37vQXgyp/vUsGmWWQ5b/HNK7E4LIHyL8yALjSy/nHAAF+ucT31/e50q9MQgghhBBCiL/bpZP+Kz0TIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAi8/p/8S/HrvQahRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//LtcmvA==") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) 8.282934191s ago: executing program 5 (id=1752): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) pipe(0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r4, &(0x7f0000000b00)=[{&(0x7f0000000300)=""/30, 0x1e}], 0x1, 0x80000001, 0x0) 5.534276737s ago: executing program 5 (id=1754): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000e40), 0x60341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5032}) pwritev(r0, &(0x7f00000000c0)=[{&(0x7f0000000300)="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", 0x824}], 0x1, 0x5, 0xfffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) r2 = dup(0xffffffffffffffff) write$UHID_CREATE2(r2, &(0x7f00000014c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x5c7, 0x1, 0x6, 0x2, 0x4b0c5a7b, 0xc, "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"}}, 0x6df) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x4, {{@in, @in=@local, 0x0, 0x5, 0x0, 0x0, 0x2}, {0x0, 0x7, 0xffffffffffffff8b, 0x0, 0x0, 0xf9df, 0x0, 0xfffffffffffffffc}, {0x0, 0x2, 0x200000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00', 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000740)='bridge0\x00', 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x40, 0x4, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x4, 0x2f, 0x0, @local, @multicast1}}}}) 3.791611971s ago: executing program 6 (id=1756): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000b00)={{{@in=@private, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private1}, 0x0, @in6}}, &(0x7f0000000500)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in=@remote, 0x0, 0x400, 0x1000, 0x0, 0x2, 0x20, 0x20, 0x84, 0x0, r2}, {}, {0x0, 0x4000000000000}}}, 0xb8}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1, 0x1}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0, 0x188}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000)) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) 3.746418354s ago: executing program 1 (id=1757): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r1, &(0x7f0000000140)=[{}], 0x1, 0x80000000, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0x20000014}) epoll_wait(r1, &(0x7f0000000040)=[{}], 0x1, 0x400) syz_usb_connect(0x5, 0x59, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x1}, 0x4) syz_emit_ethernet(0x66, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaac24d6b0c883a080045ea0058006600000a2f9078ac14143f640101000c21880b00000001010008000410be15498484b3b6b6274c790086dd080088be000000031c016b090100000000000000080022eb000000042700aeff0200000000000000772e66190800655800000004"], 0x0) clock_adjtime(0x0, &(0x7f0000001100)={0xd77, 0x2000000000000000, 0x80, 0x0, 0x0, 0x4b, 0xf2, 0x0, 0x0, 0xa12, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xefe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe81}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) open(0x0, 0x64842, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r2, @ANYBLOB='\a'], 0x10) fsmount(0xffffffffffffffff, 0x0, 0x188) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) bpf$BPF_GET_BTF_INFO(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) timer_create(0x2, &(0x7f00000000c0)={0x0, 0x12}, &(0x7f00000001c0)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_settime(r4, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) timer_create(0x7, &(0x7f0000000180)={0x0, 0x13, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)=0x0) timer_settime(r5, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 3.746122615s ago: executing program 0 (id=1758): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x50) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) 3.745681674s ago: executing program 4 (id=1759): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802) capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000240)={0x1, 0x3, 0x1, 0xb, 0x2c5f, 0x4}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) openat$cuse(0xffffff9c, &(0x7f0000000380), 0x2, 0x0) sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r5 = syz_io_uring_setup(0x4910, &(0x7f00000000c0)={0x0, 0xb45d, 0x3180, 0x0, 0x15e}, &(0x7f0000000340)=0x0, &(0x7f0000000180)) openat$pidfd(0xffffffffffffff9c, &(0x7f00000001c0), 0x20003, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xfff, 0x0, 0x4) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) signalfd4(r7, &(0x7f00000003c0)={[0x21]}, 0x8, 0x80000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000005000000000000000100000458e00000030000000007000000000000005f00"], 0x0, 0x41, 0x0, 0x1}, 0x28) io_uring_enter(r5, 0x627, 0x4c1, 0x43, 0x0, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000200), 0x0, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f00000002c0)={0x0, 0xfc, 0x7, &(0x7f00000008c0)={0x22, "cc3df0b97c31c635d41f1db17008852daad3915d105cea6345c0bd492ca56f24ee"}}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf0, 0xf0, 0x6, [@var={0x2, 0x0, 0x0, 0xe, 0x4, 0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0xe}}, @fwd={0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x2, 0x2b}}, @struct={0x800000a, 0x7, 0x0, 0x4, 0x1, 0x7, [{0xd, 0x5}, {0x10, 0x1, 0x7}, {0x1, 0x3, 0x7}, {0x7, 0x0, 0x3}, {0x4, 0x1, 0x3}, {0xb, 0x0, 0x3e8e}, {0x0, 0x2, 0x5}]}, @enum={0x0, 0x7, 0x0, 0x6, 0x4, [{0xb, 0xfffffffc}, {0xd, 0x1}, {0xb}, {0xe, 0x786}, {0xb, 0x2}, {0x9, 0x14}, {0x5, 0x9}]}]}, {0x0, [0x61, 0x61, 0x30, 0x5f]}}, 0x0, 0x10e}, 0x28) 3.424558033s ago: executing program 0 (id=1760): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x50) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9"], 0xb8}}, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e0001"], 0xb8}}, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 2.591763304s ago: executing program 5 (id=1761): syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x65, 0x89, 0x53, 0x40, 0x10f0, 0x2002, 0xd767, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0xfc, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x6b, 0x0, 0x1, 0xa, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x8a, 0x3}}]}}]}}]}}, 0x0) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r0) munmap(&(0x7f0000ffb000/0x3000)=nil, 0xffffffffffffffff) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_io_uring_setup(0x1717, &(0x7f0000000540)={0x0, 0x0, 0x10100, 0x1}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x1, r3, 0x0, 0x0}) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) r7 = openat$dlm_plock(0xffffff9c, &(0x7f0000000500), 0x440, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r7, 0x4c09, 0x400000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f00000004c0)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0xfffffffffffff000}) dup3(r8, r9, 0x80000) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100005938d74010973077339600"], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r10, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000340)={0x18, &(0x7f0000000000)=ANY=[@ANYBLOB="2010060000"], 0x0, 0x0, 0x0, 0x0}, 0x0) openat$rdma_cm(0xffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000000)={0xc, &(0x7f0000000080)={0x20, 0x30, 0xec, {0xec, 0x0, "ca9bea8eac250dd68323573b16bc8798a1933052b7cb3c0622c05ee301feecc555cced1fa245a004fdd4075912a4c22adbce83197b803fa22b0e2a9ead2b4b1d890fd97b89a8030682ed227c3e146fca91d99822aaf9c7a244d5b54d919c28042776fa41136104a935ad176d258a171b2deed53f30eb1eec70c2c11f4f2fc965c76eb83d6eff1ddece8a95e5da3a0adb941a54e2a89fd92d940dd1c61bb963e542077bf28c057b49942368ba0713b94a658da482e23a77efba7bdd22f91b0d27454783344548d5f5b5f9e7201b6a1599e734cd638b1be6df134d412a5814da2eb04f6fe46086eae8e2da"}}, &(0x7f0000000180)={0x0, 0x3, 0xac, @string={0xac, 0x3, "c786de31306240a4fc02b9062e1c84036045e0bcd7e097bf620a051ed55cf85da555ffbe14c56410cd793a89b1dab9d4a5854d7406830c78bc4a30c94f07aa9003a59d44d8008b2076c24cbfa6b7167c6b1696a531a556ed5554ec0b5a0cd6e40499853b0e3ff60d10cfd7227f958219241a0a5c998d70b61c752219c77a3b0db8cb7576d865967be6136ea715b2fb8f442ad354bae3f3d818425dfab08f237320d62ec65583fe88ca72"}}}, &(0x7f00000003c0)={0x18, &(0x7f0000000240)={0x40, 0x13, 0x6f, "95e5a52fa61c3129b7dae7a66ed2f000af3898a15aef79a269f4ced0eda2d65f1f3530959f2ce4f6bc010d8d5df07fa5dec8f9d8a39e17b37cfd4d38887e1f94c25fff8ac4bf0f8c1d1572a6d778afa7a31e21998c8485a4e3e631788fdd52b5e61e7000"/111}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000340)={0xc0, 0x5, 0x5, "732d284abd"}, &(0x7f0000000380)={0x40, 0x5, 0x6, "234e8cb8a833"}}) 2.591338824s ago: executing program 0 (id=1762): r0 = socket$netlink(0x10, 0x3, 0xc) syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1528, &(0x7f0000003240)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r3, 0xc0105502, &(0x7f0000000340)={0x1, 0x1}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060a00008bfee80001dd0048040d000600fe7f00000005000500", 0x29}], 0x1) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)) 2.540436027s ago: executing program 6 (id=1763): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=ANY=[@ANYBLOB="10010000160001000000000000000000fe8000000000000000000000000000aaff01000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe880000000000000000000000000001000000006c000000ffffffff000000000000000000000000000000000000000009000000000000000000000000000000000000000000000008000000000000000000000000000000030000000000"], 0x110}, 0x1, 0x0, 0x0, 0xc1}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 2.365342268s ago: executing program 4 (id=1764): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) mount(&(0x7f00000001c0)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000001200)='vfat\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x2, 0xd, 0x3}) 2.293952952s ago: executing program 0 (id=1765): r0 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000740)={[{@test_dummy_encryption}, {@i_version}, {@noblock_validity}, {@commit={'commit', 0x3d, 0x5}}, {@usrquota}, {@max_batch_time}, {@abort}, {@auto_da_alloc}, {@lazytime}, {@noauto_da_alloc}, {@block_validity}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$eJzs3c9vFFUcAPDvbH/QUrSFGBUP0sQYSJSWFjDEeICrIQ3+iBcvVloQKdDQGi2aUBK8mBgvxph48iD+F0rkyklPHrx4MiREDUcT18x2pnTb2ZYubacyn0+y9M17O7w33X773r6+NxtAZQ2m/9Qi9kbEdBLRn8wvlnVGVji48Lx7f39yOn0kUa+/8WcSSZaXPz/JvvZlJ/dExM8/JbGnY2W9M3NXzo9PTU1ezo6HZy9MD8/MXTl47sL42cmzkxdHXxo9dvTI0WMjh9q6rqsFeSevv/9h/2djb3/3zT/JyPe/jSVxPF7Nnrj0OjbKYAw2vifJyqK+YxtdWUk6sp+TpS9x0llig1iX/PXrioinoj864v6L1x+fvlZq44BNVU8i6kBFJeIfKiofB+Tv7Ze/D66VMioBtsLdEwsTACvjv3NhbjB6GnMDO+8lsXRaJ4mI9mbmmu2KiNu3xq6fuTV2PTZpHg4oNn8tIp4uiv+kEf8D0RMDjfivNcV/Oi44lX1N819vs/7lU8XiH7bOQvz3rBr/0SL+31kS/++2Wf/g/eR7vU3x39vuJQEAAAAAAEBl3TwRES8W/f2/trj+JwrW//RFxPENqH9w2fHKv//X7mxANUCBuyciXilc/1vLV/8OdGSpxxrrAbqSM+emJg9FxOMRcSC6dqTHI6vUcfDzPV+3KhvM1v/lj7T+29lawKwddzp3NJ8zMT47/rDXDUTcvRbxTOH632Sx/08K+v/098H0A9ax5/kbp1qVrR3/wGapfxuxv7D/v3/XimT1+3MMN8YDw/moYKVnP/7ih1b1txv/bjEBDy/t/3euHv8DydL79cysv47Dc531VmXtjv+7kzcbt5zpzvI+Gp+dvTwS0Z2c7Ehzm/JH199meBTl8ZDHSxr/B55bff6vaPzfGxHzy/7v5K/mPcW5J//t+71Ve4z/oTxp/E+sq/9ff2L0xsCPrep/sP7/SKOvP5DlmP+DBV/lYdrdnF8Qjp1FRVvdXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4FNQiYlcktaHFdK02NBTRFxFPxM7a1KWZ2RfOXPrg4kRa1vj8/1r+Sb/9C8dJ/vn/A0uOR5cdH46I3RHxZUdv43jo9KWpibIvHgAAAAAAAAAAAAAAAAAAALaJvhb7/1N/dJTdOmDTdZbdAKA0BfH/SxntALae/h+qS/xDdYl/qC7xD9Ul/qG6xD9Ul/iH6hL/AAAAAADwSNm97+avSUTMv9zbeKS6s7KuUlsGbLZa2Q0ASuMWP1Bdlv5AdXmPDyRrlPe0PGmtM1czffohTgYAAAAAAAAAAACAytm/1/5/qCr7/6G67P+H6sr3/+8ruR3A1vMeH4g1dvIX7v9f8ywAAAAAAAAAAAAAYCPNzF05Pz41NXlZ4q3t0YytTNTr9avpT8F2ac//PJEvhd8u7VmWyPf6PdhZ5f1OAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmv0XAAD//xYSJMU=") socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setreuid(0xee00, 0x0) keyctl$session_to_parent(0x12) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x800, 0x0) mkdirat(r0, &(0x7f0000002000)='./file0\x00', 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) capset(0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r5, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x7, &(0x7f0000002080)=0x1, 0x4) syz_mount_image$fuse(0x0, 0x0, 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) 2.132692222s ago: executing program 6 (id=1766): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200013, 0xfffffffe, 0x8000, 0x525, 0x9}) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@gettaction={0x28, 0x5a, 0x1, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x28}}, 0x0) 454.826103ms ago: executing program 4 (id=1767): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f0000000200)=0x80, 0x4) creat(&(0x7f0000000100)='./bus\x00', 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x7, 0x0, 0x0, 0x0, "a464357177330772"}}, 0x48}}, 0x8044) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 323.796211ms ago: executing program 1 (id=1768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f00000001c0)=@framed={{}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffffe, 0xa000000}]}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0xf4240, &(0x7f0000000100)=""/147}, 0x80) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x7, 0x3, 0x804, 0x9, 0xfffffffffffffffa, 0x8000120000, 0x4000000000009, 0x0, 0xb35, 0x8000000000000083, 0x2, 0x0, 0x101, 0x7, 0x1], 0x2, 0x141200}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000100)=@arm64={0x10, 0x2, 0xff, '\x00', 0x400009}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 300.809352ms ago: executing program 0 (id=1769): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10e) 221.017997ms ago: executing program 6 (id=1770): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$unix(0x1, 0x1, 0x0) ioctl$BTRFS_IOC_SET_FEATURES(0xffffffffffffffff, 0x40309439, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e6365"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 0s ago: executing program 0 (id=1771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x8, @loopback}, 0x1c) listen(r1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) capset(0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000340)=[{{&(0x7f0000000100)={0x2, 0x4e23, @empty}, 0x10, &(0x7f00000016c0)=[{0x0}], 0x1}}], 0x1, 0x4000800) recvfrom(0xffffffffffffffff, &(0x7f0000000200)=""/122, 0x7a, 0x2101, 0x0, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x7, @empty, 0xfffffffc}, 0x1c) dup3(r1, 0xffffffffffffffff, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='limits\x00') pread64(r6, &(0x7f00000005c0)=""/225, 0xe1, 0x1) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x5c, 0x0, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e22}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc004}, 0x4000040) kernel console output (not intermixed with test programs): umber 20 using dummy_hcd [ 493.036709][ T4426] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.054755][ T4426] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.066989][ T4426] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 493.082947][ T4426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 493.094175][ T4426] usb 1-1: SerialNumber: syz [ 493.333052][ T4426] usb 1-1: 0:2 : does not exist [ 493.341673][ T4426] usb 1-1: unit 5 not found! [ 493.380709][ T4426] usb 1-1: USB disconnect, device number 20 [ 493.825132][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 495.024669][ T22] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 495.233583][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.251558][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.263204][ T22] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 495.283230][ T22] usb 5-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 495.293015][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.320505][ T22] usb 5-1: config 0 descriptor?? [ 495.746818][ T22] saitek 0003:06A3:0621.001B: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.4-1/input0 [ 495.947874][ T14] usb 5-1: USB disconnect, device number 14 [ 496.052146][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.060848][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.069213][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.082442][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.090551][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.098154][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.106138][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.113583][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.121837][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.129486][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.137368][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.144966][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.152660][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.161041][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.169161][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.176680][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.185168][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.192701][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.200717][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.208732][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.217145][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.224841][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.232481][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.240003][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.247869][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.255526][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.263715][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.272327][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.280085][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.287977][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.295622][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.303173][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.311403][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.318939][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.326638][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.334063][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.341741][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.350529][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.358227][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.366861][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.374461][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.385192][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.393119][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.401884][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.409634][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.417311][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.424943][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.432402][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.439916][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.447538][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.455051][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.462681][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.480363][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.514350][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.521842][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.544390][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.551860][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.571535][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.579443][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.589441][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.597421][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.605234][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.612711][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.631121][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.645070][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.664394][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.672644][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.682608][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.690428][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.698945][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.710540][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.732256][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.745644][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.753108][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.766976][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.776875][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.787874][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.797283][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.809788][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.828550][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.836165][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.850100][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.859841][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.869228][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.878109][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.891899][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.900005][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.907529][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.921290][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.929817][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.944436][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.951909][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.960273][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.968738][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.982603][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 496.990173][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 497.000193][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 497.008039][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 497.024285][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 497.034275][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 497.041718][ T4380] hid-generic 0000:0000:0004.001C: unknown main item tag 0x0 [ 497.060327][ T4380] hid-generic 0000:0000:0004.001C: hidraw0: HID v0.03 Device [syz1] on syz1 [ 497.280269][ T8327] fido_id[8327]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 499.904924][ T14] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 500.116631][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 500.127660][ T14] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 500.137572][ T14] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 500.150682][ T14] usb 6-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00 [ 500.161087][ T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.177135][ T14] usb 6-1: config 0 descriptor?? [ 500.604607][ T14] saitek 0003:06A3:0621.001D: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.5-1/input0 [ 500.827801][ T22] usb 6-1: USB disconnect, device number 9 [ 501.058731][ T14] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 501.330922][ T14] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 501.367365][ T14] usb 2-1: config 252 has no interface number 0 [ 501.433219][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.445647][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.491630][ T14] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 501.830963][ T8364] fido_id[8364]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 501.845508][ T14] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 501.860547][ T14] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 501.870725][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 501.879074][ T14] usb 2-1: Product: syz [ 501.883277][ T14] usb 2-1: Manufacturer: syz [ 501.888399][ T14] usb 2-1: SerialNumber: syz [ 502.195913][ T8363] tipc: Failed to remove unknown binding: 66,0,0/0:4104851222/4104851223 [ 502.247323][ T8380] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 502.334969][ T8363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.353587][ T8363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.360300][ T8378] loop3: detected capacity change from 0 to 256 [ 502.363621][ T4327] usb 2-1: USB disconnect, device number 29 [ 502.414404][ T8378] exfat: Deprecated parameter 'utf8' [ 502.419963][ T8378] exfat: Deprecated parameter 'utf8' [ 502.488999][ T8388] device syzkaller0 entered promiscuous mode [ 502.500629][ T8378] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 504.215304][ T8415] i2c i2c-0: Invalid block write size 34 [ 504.329061][ T8417] loop4: detected capacity change from 0 to 512 [ 504.357579][ T8417] EXT4-fs (loop4): Test dummy encryption mode enabled [ 504.368198][ T8417] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 504.384441][ T8417] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c816e02c, mo2=0002] [ 504.394583][ T8417] EXT4-fs (loop4): orphan cleanup on readonly fs [ 504.405501][ T8417] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1106: bg 0: block 361: padding at end of block bitmap is not set [ 504.481459][ T8417] EXT4-fs (loop4): Remounting filesystem read-only [ 504.490695][ T8417] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 504.506398][ T8417] EXT4-fs (loop4): Remounting filesystem read-only [ 504.515668][ T8417] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1106: attempt to clear invalid blocks 33619980 len 1 [ 504.551177][ T8417] EXT4-fs (loop4): Remounting filesystem read-only [ 504.562088][ T8417] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1106: invalid indirect mapped block 1811939328 (level 0) [ 504.586803][ T8417] EXT4-fs (loop4): Remounting filesystem read-only [ 504.599428][ T8417] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1106: invalid indirect mapped block 2185560079 (level 1) [ 504.620575][ T8417] EXT4-fs (loop4): Remounting filesystem read-only [ 504.645155][ T8417] EXT4-fs (loop4): 1 truncate cleaned up [ 504.651424][ T8417] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 504.669953][ T8417] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1106: dx entry: limit 0 != root limit 125 [ 504.682511][ T8417] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1106: Corrupt directory, running e2fsck is recommended [ 504.704510][ T8417] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1106: dx entry: limit 0 != root limit 125 [ 504.722142][ T8417] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1106: Corrupt directory, running e2fsck is recommended [ 504.739184][ T8417] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1106: dx entry: limit 0 != root limit 125 [ 504.751383][ T8417] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1106: Corrupt directory, running e2fsck is recommended [ 504.776647][ T8417] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1106: dx entry: limit 0 != root limit 125 [ 504.790075][ T8417] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1106: Corrupt directory, running e2fsck is recommended [ 504.806106][ T8417] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.1106: dx entry: limit 0 != root limit 125 [ 504.819276][ T8417] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.1106: Corrupt directory, running e2fsck is recommended [ 504.960118][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 505.411072][ T8423] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 505.420489][ T8423] FAT-fs (loop9): unable to read boot sector [ 506.410145][ T8427] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 507.112579][ T4380] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 507.304431][ T4380] usb 5-1: config 252 has an invalid interface number: 107 but max is 0 [ 507.316121][ T4380] usb 5-1: config 252 has no interface number 0 [ 507.323112][ T4380] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 507.334862][ T4380] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 507.348209][ T4380] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 508.224623][ T4380] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.233081][ T4380] usb 5-1: Product: syz [ 508.237678][ T4380] usb 5-1: Manufacturer: syz [ 508.243046][ T4380] usb 5-1: SerialNumber: syz [ 508.288745][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.308522][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.490230][ T8432] tipc: Failed to remove unknown binding: 66,0,0/0:3053442207/3053442208 [ 508.491969][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.506864][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.515040][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.522562][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.529984][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.531074][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.537511][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.537539][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.537559][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.537580][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.537600][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.537620][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.570794][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.576973][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.606788][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.614417][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.621942][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.645828][ T8463] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 508.655660][ T8463] FAT-fs (loop11): unable to read boot sector [ 508.672398][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.680073][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.687755][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.695364][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.702974][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.710553][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.718181][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.725744][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 508.868507][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.008198][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.126578][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.237768][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.255842][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.267539][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.277799][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.289262][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.299567][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.311186][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.320244][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.329606][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.339144][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.347596][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.355113][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.362648][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.370358][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.377884][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.385333][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.392823][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.400217][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.407673][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.415142][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.422611][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.430082][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.437533][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.444995][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.452507][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.459926][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.467411][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.475404][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.482986][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.490381][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.497813][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.505261][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.512691][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.520084][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.527542][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.535017][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.542483][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.549875][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.557314][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.564769][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.572658][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.580101][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.587727][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.595245][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.602681][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.610113][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.617582][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.625036][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.632475][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.642048][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.649467][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.656969][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.664940][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.672459][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.680761][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.689518][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.704944][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.713147][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.720530][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.730459][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.738607][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.749010][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.757176][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.764724][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.780487][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.789467][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.809477][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.825466][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.837221][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.848162][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.860407][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.876466][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.888467][ T22] hid-generic 0000:0000:0004.001E: unknown main item tag 0x0 [ 509.908725][ T8470] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 509.932769][ T4327] usb 5-1: USB disconnect, device number 15 [ 510.072743][ T22] hid-generic 0000:0000:0004.001E: hidraw0: HID v0.03 Device [syz1] on syz1 [ 510.289530][ T8472] device syzkaller0 entered promiscuous mode [ 510.407326][ T8474] fido_id[8474]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 511.914695][ T8502] input: syz1 as /devices/virtual/input/input44 [ 513.287226][ T22] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 513.479722][ T22] usb 5-1: config 252 has an invalid interface number: 107 but max is 0 [ 513.488508][ T22] usb 5-1: config 252 has no interface number 0 [ 513.494944][ T22] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 513.506621][ T22] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 513.554833][ T22] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 513.564427][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.572880][ T22] usb 5-1: Product: syz [ 513.577101][ T22] usb 5-1: Manufacturer: syz [ 513.582432][ T22] usb 5-1: SerialNumber: syz [ 513.829635][ T8505] tipc: Failed to remove unknown binding: 66,0,0/0:715398706/715398707 [ 513.843863][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.854406][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.866340][ T22] usb 5-1: USB disconnect, device number 16 [ 514.798035][ T8509] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 514.807468][ T8509] FAT-fs (loop9): unable to read boot sector [ 515.807614][ T8513] loop3: detected capacity change from 0 to 256 [ 515.953350][ T8513] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 516.042556][ T8523] overlayfs: missing 'lowerdir' [ 516.110541][ T8524] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 516.119572][ T8524] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 517.175946][ T8515] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 518.585075][ T8544] loop0: detected capacity change from 0 to 1024 [ 518.624531][ T8544] /dev/loop0: Can't open blockdev [ 518.818298][ T4398] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 520.765176][ T8557] device syzkaller0 entered promiscuous mode [ 521.329348][ T8572] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 521.338772][ T8572] FAT-fs (loop3): unable to read boot sector [ 521.566235][ T8569] loop3: detected capacity change from 0 to 2048 [ 522.291052][ T8569] No such timeout policy "syz1" [ 522.309161][ T4271] Bluetooth: hci0: sending frame failed (-49) [ 522.317898][ T4277] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 522.720819][ T8576] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 524.647729][ T8595] loop3: detected capacity change from 0 to 256 [ 524.937866][ T8595] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 526.633173][ T8602] loop0: detected capacity change from 0 to 512 [ 526.645000][ T8602] EXT4-fs: Ignoring removed bh option [ 526.658853][ T8602] EXT4-fs: Ignoring removed mblk_io_submit option [ 526.709423][ T8602] /dev/loop0: Can't open blockdev [ 526.934812][ T8607] i2c i2c-0: Invalid block write size 34 [ 527.059172][ T4327] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 527.120609][ T8614] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 527.130051][ T8614] FAT-fs (loop9): unable to read boot sector [ 527.289524][ T4327] usb 2-1: Using ep0 maxpacket: 16 [ 527.346759][ T4327] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 527.468717][ T4327] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 527.583220][ T4327] usb 2-1: config 0 interface 0 has no altsetting 0 [ 527.749198][ T4327] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 527.837207][ T4327] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.879860][ T4327] usb 2-1: config 0 descriptor?? [ 527.958889][ T14] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 528.153942][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 528.184796][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 528.214521][ T14] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 528.257130][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 528.299030][ T14] usb 1-1: SerialNumber: syz [ 528.401205][ T8629] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1164'. [ 528.512573][ T4327] usb 2-1: USB disconnect, device number 30 [ 528.527107][ T14] usb 1-1: 0:2 : does not exist [ 528.586198][ T8630] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 528.594177][ T14] usb 1-1: unit 5 not found! [ 528.637950][ T14] usb 1-1: USB disconnect, device number 21 [ 528.970888][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 529.086121][ T8639] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 529.415273][ T8649] i2c i2c-0: Invalid block write size 34 [ 529.566919][ T8651] loop1: detected capacity change from 0 to 256 [ 529.594335][ T14] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 529.669801][ T4381] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 529.822931][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 529.874664][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 529.915146][ T14] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 530.213537][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.233454][ T14] usb 1-1: config 0 descriptor?? [ 530.615244][ T8658] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 530.624769][ T8658] FAT-fs (loop3): unable to read boot sector [ 531.419187][ T14] hid (null): report_id 0 is invalid [ 531.452707][ T14] playstation 0003:054C:0DF2.0020: report_id 0 is invalid [ 531.456720][ T8660] loop5: detected capacity change from 0 to 512 [ 531.459962][ T14] playstation 0003:054C:0DF2.0020: item 0 2 1 8 parsing failed [ 531.460459][ T14] playstation 0003:054C:0DF2.0020: Parse failed [ 531.505313][ T8660] EXT4-fs (loop5): Test dummy encryption mode enabled [ 531.541530][ T14] playstation: probe of 0003:054C:0DF2.0020 failed with error -22 [ 531.558499][ T8660] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 531.614689][ T8660] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c816e02c, mo2=0002] [ 531.651080][ T8660] EXT4-fs (loop5): orphan cleanup on readonly fs [ 531.663099][ T8660] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.1174: bg 0: block 361: padding at end of block bitmap is not set [ 531.685014][ T14] usb 1-1: USB disconnect, device number 22 [ 531.745044][ T8660] EXT4-fs (loop5): Remounting filesystem read-only [ 531.793249][ T8660] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6181: Corrupt filesystem [ 531.853375][ T8668] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 532.859223][ T8660] EXT4-fs (loop5): Remounting filesystem read-only [ 532.865945][ T8660] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #11: comm syz.5.1174: attempt to clear invalid blocks 33619980 len 1 [ 532.898490][ T8660] EXT4-fs (loop5): Remounting filesystem read-only [ 532.928906][ T8660] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1174: invalid indirect mapped block 1811939328 (level 0) [ 533.146241][ T8660] EXT4-fs (loop5): Remounting filesystem read-only [ 533.155806][ T8660] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.1174: invalid indirect mapped block 2185560079 (level 1) [ 533.193917][ T8677] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 533.239755][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1178'. [ 533.311098][ T8660] EXT4-fs (loop5): Remounting filesystem read-only [ 533.508116][ T8660] EXT4-fs (loop5): 1 truncate cleaned up [ 533.667524][ T8660] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 534.225931][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 534.297986][ T27] audit: type=1326 audit(2000007851.497:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3239aeb9 code=0x7ffc0000 [ 534.511999][ T27] audit: type=1326 audit(2000007851.607:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f5b3239aeb9 code=0x7ffc0000 [ 534.686850][ T27] audit: type=1326 audit(2000007851.607:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3239aeb9 code=0x7ffc0000 [ 534.725539][ T8689] i2c i2c-0: Invalid block write size 34 [ 534.812710][ T27] audit: type=1326 audit(2000007851.607:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3239aeb9 code=0x7ffc0000 [ 534.916290][ T27] audit: type=1326 audit(2000007851.637:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f5b3239aeb9 code=0x7ffc0000 [ 535.033527][ T27] audit: type=1326 audit(2000007851.657:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3239aeb9 code=0x7ffc0000 [ 535.056448][ T4380] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 535.095147][ T8695] lo: Caught tx_queue_len zero misconfig [ 535.122574][ T8695] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 535.153824][ T27] audit: type=1326 audit(2000007851.657:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f5b3239aeb9 code=0x7ffc0000 [ 535.246272][ T27] audit: type=1326 audit(2000007851.847:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3239aeb9 code=0x7ffc0000 [ 535.307955][ T27] audit: type=1326 audit(2000007851.847:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8686 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b3239aeb9 code=0x7ffc0000 [ 535.323789][ T4380] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 535.330245][ T27] audit: type=1326 audit(2000007851.887:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8691 comm="syz.0.1180" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b3235b78e code=0x7ffc0000 [ 535.461627][ T8698] loop3: detected capacity change from 0 to 256 [ 535.521324][ T4380] usb 5-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 535.558402][ T8698] exfat: Unknown parameter '0x00000000000000030x0000000000000000' [ 535.598460][ T4380] usb 5-1: config 0 interface 0 has no altsetting 0 [ 535.666129][ T4380] usb 5-1: New USB device found, idVendor=056a, idProduct=0047, bcdDevice= 0.00 [ 535.747554][ T4380] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.807280][ T4380] usb 5-1: config 0 descriptor?? [ 535.813155][ T8703] FAT-fs (loop3): bogus number of reserved sectors [ 535.819797][ T8703] FAT-fs (loop3): Can't find a valid FAT filesystem [ 535.903910][ T8693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 536.011399][ T8704] usb usb8: usbfs: process 8704 (syz.3.1186) did not claim interface 0 before use [ 536.022100][ T8704] netlink: 'syz.3.1186': attribute type 6 has an invalid length. [ 536.366089][ T4380] wacom 0003:056A:0047.0021: unknown main item tag 0x0 [ 536.697575][ T4380] wacom 0003:056A:0047.0021: unknown main item tag 0x0 [ 536.839202][ T4380] wacom 0003:056A:0047.0021: unknown main item tag 0x0 [ 536.871385][ T4380] wacom 0003:056A:0047.0021: unknown main item tag 0x0 [ 538.380440][ T4380] wacom 0003:056A:0047.0021: unknown main item tag 0x0 [ 538.393046][ T4380] wacom 0003:056A:0047.0021: Unknown device_type for 'HID 056a:0047'. Assuming pen. [ 538.467605][ T4380] wacom 0003:056A:0047.0021: hidraw0: USB HID v0.00 Device [HID 056a:0047] on usb-dummy_hcd.4-1/input0 [ 538.510852][ T4380] input: Wacom Intuos2 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0047.0021/input/input46 [ 538.641596][ T8727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1192'. [ 538.697993][ T4380] usb 5-1: USB disconnect, device number 17 [ 538.865350][ T8730] loop4: detected capacity change from 0 to 2048 [ 538.944053][ T8732] fido_id[8732]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 538.950196][ T4326] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 539.126539][ T4327] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 539.159299][ T4326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.199935][ T4326] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 539.264506][ T4326] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 539.295133][ T8735] No such timeout policy "syz1" [ 539.315921][ T4326] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 539.327595][ T4327] usb 4-1: Using ep0 maxpacket: 16 [ 539.334852][ T4327] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 539.375044][ T4327] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 539.388225][ T4326] usb 1-1: Manufacturer: syz [ 539.399619][ T4327] usb 4-1: New USB device found, idVendor=0003, idProduct=0000, bcdDevice= 0.00 [ 539.432847][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 539.441038][ T4327] usb 4-1: SerialNumber: syz [ 539.458323][ T4326] usb 1-1: config 0 descriptor?? [ 539.461910][ T4327] usb 4-1: cannot find UAC_HEADER [ 539.509651][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 539.514106][ T4327] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 539.800722][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 541.769786][ T4277] Bluetooth: hci0: command 0x1003 tx timeout [ 541.776727][ T4271] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 541.790882][ T4326] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0022/input/input49 [ 541.934996][ T4380] usb 4-1: USB disconnect, device number 19 [ 542.070404][ T4326] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0022/input/input50 [ 542.146968][ T4326] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0022/input/input51 [ 542.252460][ T4326] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0022/input/input52 [ 542.359299][ T4326] uclogic 0003:256C:006D.0022: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 542.471872][ T4326] usb 1-1: USB disconnect, device number 23 [ 542.568818][ T8752] loop0: detected capacity change from 0 to 2048 [ 542.650220][ T8761] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 542.659833][ T8761] FAT-fs (loop11): unable to read boot sector [ 543.462636][ T8752] loop0: detected capacity change from 0 to 256 [ 543.480458][ T8752] exfat: Unknown parameter 'xœìÚ?‹Aà1wæS‹Å‚ÕqZYºH„ÈZ¹p±Ùa·Ù¤ºo#øÙìÒ\¹ì’»ø¯1qÔ<„yÉ›ÀošÝ)æÝÃåÅÇæý³/ŸÂñó$ Bƒ«F«Ô¹Ó¯ƒU†Û.' [ 543.528287][ T8763] loop5: detected capacity change from 0 to 16 [ 543.569528][ T8763] erofs: (device loop5): mounted with root inode @ nid 36. [ 543.844904][ T8767] No such timeout policy "syz1" [ 543.911304][ T4819] Bluetooth: hci0: Frame reassembly failed (-84) [ 543.934435][ T4819] Bluetooth: hci0: Frame reassembly failed (-84) [ 544.237447][ T26] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 544.355675][ T8755] fido_id[8755]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 544.514198][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 544.658225][ T26] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 544.715364][ T26] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 544.745196][ T26] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 544.770761][ T26] usb 4-1: Manufacturer: syz [ 544.792670][ T26] usb 4-1: config 0 descriptor?? [ 544.835644][ T8773] syz.5.1201: attempt to access beyond end of device [ 544.835644][ T8773] loop5: rw=0, sector=8, nr_sectors = 32 limit=16 [ 544.988742][ T8778] loop4: detected capacity change from 0 to 2048 [ 545.504411][ T8782] No such timeout policy "syz1" [ 545.573170][ T4819] Bluetooth: hci6: Frame reassembly failed (-84) [ 545.719941][ T26] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0023/input/input53 [ 545.837538][ T26] input: syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0023/input/input54 [ 545.866148][ T26] input: syz Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0023/input/input55 [ 546.134690][ T4271] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 546.135032][ T4277] Bluetooth: hci0: command 0x1003 tx timeout [ 546.152444][ T26] input: syz Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.0023/input/input56 [ 546.180635][ T26] uclogic 0003:256C:006D.0023: input,hiddev0,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.3-1/input0 [ 546.195667][ T26] usb 4-1: USB disconnect, device number 20 [ 547.137656][ T8800] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1208'. [ 547.579316][ T4283] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 550.753808][ T8809] fido_id[8809]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 552.595393][ T8829] loop3: detected capacity change from 0 to 8192 [ 552.852625][ T8834] 9pnet_virtio: no channels available for device syz [ 552.937374][ T8834] overlayfs: filesystem on './file0' not supported as upperdir [ 553.934558][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1217'. [ 554.779268][ T8843] input: syz1 as /devices/virtual/input/input57 [ 555.901163][ T8851] loop1: detected capacity change from 0 to 256 [ 555.948160][ T8852] loop4: detected capacity change from 0 to 512 [ 555.966107][ T8851] /dev/loop1: Can't open blockdev [ 556.007432][ T8852] EXT4-fs: Ignoring removed oldalloc option [ 556.188436][ T8852] EXT4-fs error (device loop4): ext4_xattr_inode_iget:397: comm syz.4.1222: Parent and EA inode have the same ino 15 [ 558.358627][ T8870] loop0: detected capacity change from 0 to 2048 [ 558.651483][ T8874] loop5: detected capacity change from 0 to 16 [ 558.736368][ T8874] erofs: (device loop5): mounted with root inode @ nid 36. [ 559.242250][ T8852] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2799: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 559.331013][ T8852] EXT4-fs error (device loop4): ext4_xattr_inode_iget:397: comm syz.4.1222: Parent and EA inode have the same ino 15 [ 559.713078][ T8883] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 559.770439][ T8852] EXT4-fs (loop4): 1 orphan inode deleted [ 559.776574][ T8852] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 560.613068][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 560.771700][ T4381] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 560.793397][ T8885] loop1: detected capacity change from 0 to 128 [ 560.869301][ T8885] /dev/loop1: Can't open blockdev [ 561.078080][ T8887] loop4: detected capacity change from 0 to 512 [ 561.128551][ T4398] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 561.227079][ T8887] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 561.264381][ T8893] netlink: 356 bytes leftover after parsing attributes in process `syz.3.1233'. [ 561.306605][ T8887] ext4 filesystem being mounted at /270/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 561.768595][ T8900] input: syz1 as /devices/virtual/input/input58 [ 561.948291][ T8887] __quota_error: 43 callbacks suppressed [ 561.948400][ T8887] Quota error (device loop4): find_block_dqentry: Quota for id 0 referenced but not present [ 562.415215][ T8887] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 562.452168][ T8887] EXT4-fs error (device loop4): ext4_acquire_dquot:6835: comm syz.4.1232: Failed to acquire dquot type 0 [ 562.590023][ T8905] loop5: detected capacity change from 0 to 512 [ 562.639200][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 562.642954][ T8905] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 562.725321][ T8912] loop0: detected capacity change from 0 to 128 [ 562.747418][ T8905] EXT4-fs error (device loop5): ext4_orphan_get:1425: comm syz.5.1238: bad orphan inode 131083 [ 562.774908][ T8779] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 562.811994][ T8905] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 562.861340][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.868701][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.906195][ T4380] usb 4-1: new full-speed USB device number 21 using dummy_hcd [ 563.158229][ T4380] usb 4-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 563.191754][ T4380] usb 4-1: config 0 interface 0 has no altsetting 0 [ 563.222090][ T4380] usb 4-1: New USB device found, idVendor=056a, idProduct=0319, bcdDevice= 0.00 [ 563.283831][ T4380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.406412][ T4380] usb 4-1: config 0 descriptor?? [ 564.522267][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 564.551552][ T8919] loop1: detected capacity change from 0 to 2048 [ 564.584024][ T4426] usb 4-1: USB disconnect, device number 21 [ 564.719452][ T8923] loop4: detected capacity change from 0 to 2048 [ 565.097814][ T8927] No such timeout policy "syz1" [ 565.203009][ T4295] Bluetooth: hci0: Frame reassembly failed (-84) [ 565.956431][ T8929] No such timeout policy "syz1" [ 566.060363][ T4479] Bluetooth: hci6: Frame reassembly failed (-84) [ 566.301897][ T8938] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 566.311397][ T8938] FAT-fs (loop11): unable to read boot sector [ 567.176120][ T4283] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 568.759262][ T4271] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 568.765934][ T4283] Bluetooth: hci6: command 0x1003 tx timeout [ 571.808838][ T8970] loop0: detected capacity change from 0 to 1024 [ 571.968948][ T8970] EXT4-fs: Ignoring removed orlov option [ 571.986861][ T8970] EXT4-fs: Ignoring removed orlov option [ 572.051740][ T8970] /dev/loop0: Can't open blockdev [ 573.390318][ T8979] loop0: detected capacity change from 0 to 2048 [ 573.915936][ T8984] No such timeout policy "syz1" [ 576.696628][ T4282] Bluetooth: hci0: command 0x1003 tx timeout [ 576.703062][ T4271] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 577.815787][ T9006] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 578.552517][ T9014] loop4: detected capacity change from 0 to 128 [ 578.593485][ T9014] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 578.671871][ T9014] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 578.704644][ T9014] EXT4-fs error (device loop4): __ext4_find_entry:1696: inode #2: comm syz.4.1269: checksumming directory block 0 [ 579.063539][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 579.358764][ T9023] loop3: detected capacity change from 0 to 2048 [ 579.861821][ T9039] No such timeout policy "syz1" [ 581.313471][ T9036] loop0: detected capacity change from 0 to 512 [ 581.358819][ T9036] /dev/loop0: Can't open blockdev [ 581.722392][ T9044] overlayfs: failed to get inode (-116) [ 581.878342][ T9051] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 581.975582][ T4271] Bluetooth: hci0: command 0x1003 tx timeout [ 581.983838][ T4282] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 584.396148][ T9068] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 584.563553][ T9050] loop4: detected capacity change from 0 to 40427 [ 584.671320][ T9050] F2FS-fs (loop4): invalid crc value [ 584.756878][ T9050] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 585.070277][ T9050] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 585.131401][ T9050] F2FS-fs (loop4): Start checkpoint disabled! [ 587.099736][ T9098] loop4: detected capacity change from 0 to 2048 [ 587.306883][ T9084] loop0: detected capacity change from 0 to 40427 [ 587.440309][ T8779] I/O error, dev loop0, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 587.514221][ T9109] No such timeout policy "syz1" [ 587.655392][ T4479] Bluetooth: hci0: Frame reassembly failed (-84) [ 587.813461][ T9108] loop5: detected capacity change from 0 to 512 [ 588.354915][ T4326] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 588.406940][ T9108] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 588.416882][ T9108] ext4 filesystem being mounted at /158/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.574883][ T4326] usb 4-1: Using ep0 maxpacket: 16 [ 588.582170][ T4326] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 588.620185][ T4326] usb 4-1: config 0 interface 0 has no altsetting 0 [ 588.629999][ T4326] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 588.639299][ T4326] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 588.661999][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 588.691391][ T4326] usb 4-1: config 0 descriptor?? [ 588.934771][ T4575] usb 1-1: new full-speed USB device number 24 using dummy_hcd [ 589.126816][ T4575] usb 1-1: config 252 has an invalid interface number: 107 but max is 0 [ 589.136565][ T4575] usb 1-1: config 252 has no interface number 0 [ 589.143565][ T4575] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 589.166864][ T4326] nzxt-smart2 0003:1E71:2009.0025: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 589.178973][ T4575] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 589.206835][ T4575] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 589.216305][ T4575] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 589.224373][ T4575] usb 1-1: Product: syz [ 589.230252][ T4575] usb 1-1: Manufacturer: syz [ 589.236658][ T4575] usb 1-1: SerialNumber: syz [ 589.457466][ T9116] tipc: Failed to remove unknown binding: 66,0,0/0:2393637551/2393637552 [ 589.473456][ T4326] usb 1-1: USB disconnect, device number 24 [ 589.574785][ T4282] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 589.628921][ T9129] loop5: detected capacity change from 0 to 40427 [ 589.694531][ T4575] usb 4-1: USB disconnect, device number 22 [ 589.706079][ T9129] F2FS-fs (loop5): invalid crc value [ 589.760267][ T9129] F2FS-fs (loop5): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 589.856936][ T9129] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 589.876102][ T9129] F2FS-fs (loop5): Start checkpoint disabled! [ 589.898288][ T9129] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 589.944185][ T9129] capability: warning: `syz.5.1307' uses deprecated v2 capabilities in a way that may be insecure [ 590.078684][ T7062] kworker/u4:24: attempt to access beyond end of device [ 590.078684][ T7062] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 590.141223][ T9140] loop4: detected capacity change from 0 to 256 [ 590.170644][ T9140] exfat: Deprecated parameter 'utf8' [ 590.182405][ T9140] exfat: Deprecated parameter 'utf8' [ 590.198365][ T9140] exfat: Deprecated parameter 'utf8' [ 590.360698][ T9140] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d) [ 590.449385][ T27] audit: type=1804 audit(2000007907.652:68): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1311" name="/newroot/280/file0/bus" dev="loop4" ino=1048688 res=1 errno=0 [ 591.735132][ T9166] x_tables: duplicate underflow at hook 1 [ 592.068186][ T9164] 9pnet_fd: Insufficient options for proto=fd [ 592.583259][ T9173] loop3: detected capacity change from 0 to 2048 [ 593.034171][ T9183] No such timeout policy "syz1" [ 593.312660][ T4482] Bluetooth: hci0: Frame reassembly failed (-84) [ 594.829195][ T9186] loop0: detected capacity change from 0 to 1024 [ 594.917789][ T9186] /dev/loop0: Can't open blockdev [ 595.757309][ T4282] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 595.799103][ T4381] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 597.880534][ T9208] loop1: detected capacity change from 0 to 2048 [ 597.917020][ T9208] /dev/loop1: Can't open blockdev [ 597.993659][ T9218] loop5: detected capacity change from 0 to 512 [ 598.000819][ T9218] EXT4-fs: Ignoring removed i_version option [ 598.006935][ T9218] EXT4-fs: Ignoring removed bh option [ 598.825978][ T9218] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 598.894358][ T9218] ext4 filesystem being mounted at /165/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 599.024828][ T9224] 9pnet_fd: Insufficient options for proto=fd [ 599.220414][ T9226] loop3: detected capacity change from 0 to 8192 [ 599.891515][ T9235] loop1: detected capacity change from 0 to 1024 [ 599.905654][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 599.965314][ T9235] EXT4-fs: Ignoring removed i_version option [ 599.971570][ T9235] /dev/loop1: Can't open blockdev [ 600.336005][ T9241] input: syz1 as /devices/virtual/input/input65 [ 600.409315][ T9239] loop4: detected capacity change from 0 to 2048 [ 601.607793][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 601.665944][ T4326] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 601.712514][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 601.791870][ T9261] loop5: detected capacity change from 0 to 256 [ 601.802575][ T9261] exfat: Deprecated parameter 'utf8' [ 601.901372][ T9261] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x111400d0, checksum : 0x1119abd0) [ 601.911839][ T9261] exFAT-fs (loop5): invalid boot region [ 601.917536][ T9261] exFAT-fs (loop5): failed to recognize exfat type [ 602.562361][ T9257] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 602.647559][ T9257] device bridge_slave_0 left promiscuous mode [ 602.664759][ T9267] No such timeout policy "syz1" [ 602.706488][ T4326] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 602.734296][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 602.742620][ T4326] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 602.820481][ T4326] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 602.839753][ T4388] Bluetooth: hci0: Frame reassembly failed (-84) [ 602.937108][ T4326] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 603.353172][ T4326] usb 2-1: Product: syz [ 603.357817][ T4326] usb 2-1: Manufacturer: syz [ 603.377582][ T4326] hub 2-1:4.0: USB hub found [ 603.387541][ T9257] device bridge_slave_1 left promiscuous mode [ 603.435233][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 603.513350][ T9257] bond0: (slave bond_slave_0): Releasing backup interface [ 603.998122][ T9257] bond0: (slave bond_slave_1): Releasing backup interface [ 604.391074][ T4326] hub 2-1:4.0: config failed, hub has too many ports! (err -19) [ 604.431690][ T9257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 604.466298][ T9257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 604.475623][ T9257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 604.494690][ T9257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 604.714172][ T4575] usb 2-1: USB disconnect, device number 31 [ 604.774154][ T4271] Bluetooth: hci0: command 0x1003 tx timeout [ 604.782421][ T4282] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 605.199799][ T9295] loop3: detected capacity change from 0 to 2048 [ 606.818111][ T9308] No such timeout policy "syz1" [ 606.952128][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 607.029822][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 607.043471][ T9312] i2c i2c-0: Invalid block write size 34 [ 607.094132][ T9310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 609.191536][ T4271] Bluetooth: hci0: command 0x1003 tx timeout [ 609.199011][ T4282] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 609.509738][ T9329] loop0: detected capacity change from 0 to 2048 [ 609.878533][ T9335] loop1: detected capacity change from 0 to 512 [ 609.920156][ T9335] /dev/loop1: Can't open blockdev [ 609.946547][ T9337] No such timeout policy "syz1" [ 610.193733][ T4295] Bluetooth: hci0: Frame reassembly failed (-84) [ 610.217338][ T9342] loop1: detected capacity change from 0 to 256 [ 610.249174][ T9342] exfat: Deprecated parameter 'utf8' [ 610.262791][ T9342] /dev/loop1: Can't open blockdev [ 611.306305][ T9351] loop1: detected capacity change from 0 to 2048 [ 611.521292][ T4381] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 611.604172][ T9351] loop1: detected capacity change from 0 to 256 [ 611.611080][ T9351] exfat: Unknown parameter 'xœìÚ?‹Aà1wæS‹Å‚ÕqZYºH„ÈZ¹p±Ùa·Ù¤ºo#øÙìÒ\¹ì’»ø¯1qÔ<„yÉ›ÀošÝ)æÝÃåÅÇæý³/ŸÂñó$ Bƒ«F«Ô¹Ó¯ƒU†Û.' [ 611.679389][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 611.752705][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 611.790775][ T9358] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 611.880525][ T9358] device bridge_slave_0 left promiscuous mode [ 611.925256][ T9358] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.958958][ T9358] device bridge_slave_1 left promiscuous mode [ 611.998672][ T9358] bridge0: port 2(bridge_slave_1) entered disabled state [ 612.061631][ T9358] bond0: (slave bond_slave_0): Releasing backup interface [ 612.064831][ T9364] No such timeout policy "syz1" [ 612.167043][ T9358] bond0: (slave bond_slave_1): Releasing backup interface [ 612.213860][ T4282] Bluetooth: hci0: command 0x1003 tx timeout [ 612.222102][ T4283] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 612.223316][ T9358] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 612.259807][ T4479] Bluetooth: hci6: Frame reassembly failed (-84) [ 612.305344][ T9358] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.315429][ T9358] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 612.322886][ T9358] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.702378][ T9370] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1372'. [ 613.765622][ T9376] xt_hashlimit: size too large, truncated to 1048576 [ 614.252572][ T9381] loop3: detected capacity change from 0 to 8192 [ 614.293532][ T4282] Bluetooth: hci6: command 0x1003 tx timeout [ 614.301869][ T4283] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 615.328499][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 615.386188][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 615.409112][ T9396] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 615.529071][ T27] audit: type=1400 audit(2000007932.733:69): apparmor="DENIED" operation="setprocattr" info="fscreate" error=-22 profile="unconfined" pid=9403 comm="syz.3.1384" [ 616.019602][ T9410] overlayfs: missing 'lowerdir' [ 616.199111][ T9412] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 616.208181][ T9412] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 617.850444][ T9429] loop1: detected capacity change from 0 to 16 [ 617.861189][ T9429] /dev/loop1: Can't open blockdev [ 618.050487][ T9429] loop1: detected capacity change from 0 to 512 [ 618.064607][ T9429] ext4: Unknown parameter 'pcr' [ 618.326764][ T9428] loop0: detected capacity change from 0 to 2048 [ 618.512573][ T9428] loop0: detected capacity change from 0 to 256 [ 618.595532][ T9428] exfat: Unknown parameter 'xœìÚ?‹Aà1wæS‹Å‚ÕqZYºH„ÈZ¹p±Ùa·Ù¤ºo#øÙìÒ\¹ì’»ø¯1qÔ<„yÉ›ÀošÝ)æÝÃåÅÇæý³/ŸÂñó$ Bƒ«F«Ô¹Ó¯ƒU†Û.' [ 618.677010][ T9433] loop5: detected capacity change from 0 to 512 [ 619.168854][ T9433] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 619.198251][ T9438] loop3: detected capacity change from 0 to 256 [ 619.249708][ T9440] No such timeout policy "syz1" [ 619.787087][ T9438] FAT-fs (loop3): Directory bread(block 64) failed [ 619.983666][ T9438] FAT-fs (loop3): Directory bread(block 65) failed [ 620.184629][ T9438] FAT-fs (loop3): Directory bread(block 66) failed [ 620.447418][ T9438] FAT-fs (loop3): Directory bread(block 67) failed [ 620.491706][ T9438] FAT-fs (loop3): Directory bread(block 68) failed [ 620.539402][ T9438] FAT-fs (loop3): Directory bread(block 69) failed [ 620.592042][ T9438] FAT-fs (loop3): Directory bread(block 70) failed [ 620.615057][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 620.655488][ T9438] FAT-fs (loop3): Directory bread(block 71) failed [ 620.662182][ T9438] FAT-fs (loop3): Directory bread(block 72) failed [ 620.683185][ T9438] FAT-fs (loop3): Directory bread(block 73) failed [ 620.710400][ T9445] loop1: detected capacity change from 0 to 2048 [ 620.834180][ T9447] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1397'. [ 621.180448][ T9452] No such timeout policy "syz1" [ 621.187213][ T9451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 621.241568][ T9451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 621.275219][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 623.689778][ T4283] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 624.296976][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.303831][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.814862][ T9480] loop3: detected capacity change from 0 to 16 [ 624.873499][ T9480] erofs: (device loop3): mounted with root inode @ nid 36. [ 625.792926][ T9488] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 625.846115][ T9488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 625.909770][ T9488] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 626.057624][ T9486] tipc: Started in network mode [ 626.066601][ T9486] tipc: Node identity ae63763c269b, cluster identity 4711 [ 626.124745][ T9486] tipc: Enabled bearer , priority 0 [ 626.176365][ T9483] tipc: Resetting bearer [ 626.779128][ T9496] loop0: detected capacity change from 0 to 128 [ 626.873634][ T9496] /dev/loop0: Can't open blockdev [ 627.432730][ T4575] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 628.385529][ T4575] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.396136][ T4575] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 628.439807][ T4575] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 628.451528][ T4575] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 628.466651][ T4575] usb 1-1: SerialNumber: syz [ 628.555564][ T9518] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 628.689393][ T4575] usb 1-1: 0:2 : does not exist [ 628.706059][ T4575] usb 1-1: unit 5 not found! [ 628.722810][ T4575] usb 1-1: USB disconnect, device number 25 [ 628.804954][ T9520] loop1: detected capacity change from 0 to 2048 [ 628.940308][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 629.305758][ T9523] No such timeout policy "syz1" [ 629.424386][ T11] Bluetooth: hci0: Frame reassembly failed (-84) [ 629.746363][ T9526] loop0: detected capacity change from 0 to 16 [ 629.756823][ T9526] /dev/loop0: Can't open blockdev [ 629.870399][ T9526] loop0: detected capacity change from 0 to 512 [ 629.880577][ T9526] ext4: Unknown parameter 'pcr' [ 631.463995][ T4282] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 632.372726][ T9533] loop1: detected capacity change from 0 to 512 [ 632.380217][ T9533] /dev/loop1: Can't open blockdev [ 633.901024][ T9483] tipc: Disabling bearer [ 633.909510][ T4327] tipc: Node number set to 2297984572 [ 634.266991][ T9545] loop5: detected capacity change from 0 to 2048 [ 634.469562][ T9552] loop1: detected capacity change from 0 to 2048 [ 634.542266][ T4326] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 634.607467][ T9552] loop1: p3 < > p4 < > [ 634.622321][ T9552] loop1: partition table partially beyond EOD, truncated [ 634.669486][ T9552] loop1: p3 start 4284289 is beyond EOD, truncated [ 634.708912][ T9556] loop3: detected capacity change from 0 to 512 [ 634.734150][ T4326] usb 1-1: config 252 has an invalid interface number: 107 but max is 0 [ 634.755283][ T9556] EXT4-fs: Ignoring removed nomblk_io_submit option [ 634.761966][ T9556] EXT4-fs: Ignoring removed bh option [ 634.792282][ T4326] usb 1-1: config 252 has no interface number 0 [ 634.809427][ T4326] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 634.855207][ T4326] usb 1-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 634.987119][ T4326] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 634.997746][ T9556] EXT4-fs error (device loop3): mb_free_blocks:1826: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 635.909714][ T4326] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.934811][ T9556] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #11: comm syz.3.1433: corrupted inode contents [ 635.963336][ T4326] usb 1-1: Product: syz [ 635.981185][ T4326] usb 1-1: Manufacturer: syz [ 635.992249][ T9556] EXT4-fs error (device loop3): ext4_dirty_inode:6137: inode #11: comm syz.3.1433: mark_inode_dirty error [ 636.021491][ T9556] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1433: invalid indirect mapped block 1 (level 1) [ 636.055355][ T9556] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #11: comm syz.3.1433: corrupted inode contents [ 636.070667][ T9566] No such timeout policy "syz1" [ 636.098011][ T5154] Bluetooth: hci0: Frame reassembly failed (-84) [ 636.154799][ T9556] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem [ 636.166219][ T9556] EXT4-fs error (device loop3): ext4_do_update_inode:5272: inode #11: comm syz.3.1433: corrupted inode contents [ 636.179655][ T9556] EXT4-fs error (device loop3): ext4_truncate:4318: inode #11: comm syz.3.1433: mark_inode_dirty error [ 636.216336][ T9556] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem [ 636.235992][ T9556] EXT4-fs (loop3): 1 truncate cleaned up [ 636.241952][ T9556] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 636.450862][ T4326] usb 1-1: SerialNumber: syz [ 636.676935][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 636.690952][ T9546] tipc: Failed to remove unknown binding: 66,0,0/0:504552830/504552831 [ 636.749965][ T9546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 636.812462][ T9546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 636.849786][ T3599] usb 1-1: USB disconnect, device number 26 [ 637.025933][ T9574] loop4: detected capacity change from 0 to 1024 [ 637.050309][ T9574] EXT4-fs: Ignoring removed i_version option [ 637.081533][ T9574] EXT4-fs (loop4): Test dummy encryption mode enabled [ 637.117693][ T9576] loop3: detected capacity change from 0 to 512 [ 637.118508][ T9574] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 637.175063][ T9576] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 637.241465][ T9576] EXT4-fs error (device loop3): ext4_orphan_get:1425: comm syz.3.1437: bad orphan inode 131083 [ 637.281867][ T9576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 638.142543][ T4282] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 638.263026][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 638.333456][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 638.829459][ T9593] 9pnet_virtio: no channels available for device syz [ 638.886807][ T9593] overlayfs: failed to verify upper (299/file0, ino=1629, err=-116) [ 638.895653][ T9593] overlayfs: failed to verify index dir 'upper' xattr [ 638.902605][ T9593] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 639.622262][ T9600] loop3: detected capacity change from 0 to 2048 [ 639.631459][ T9602] loop5: detected capacity change from 0 to 1024 [ 639.674420][ T9602] EXT4-fs: Ignoring removed orlov option [ 639.762033][ T4327] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 639.941856][ T9602] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 639.972084][ T4327] usb 1-1: Using ep0 maxpacket: 16 [ 639.979126][ T4327] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 640.074284][ T4327] usb 1-1: config 0 interface 0 has no altsetting 0 [ 640.142160][ T4327] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 640.202281][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.269126][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 640.313427][ T4327] usb 1-1: config 0 descriptor?? [ 640.733465][ T4327] nzxt-smart2 0003:1E71:2009.0026: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 640.751941][ T4426] usb 2-1: new full-speed USB device number 32 using dummy_hcd [ 640.913177][ T9614] No such timeout policy "syz1" [ 640.967205][ T4426] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 640.993053][ T4426] usb 2-1: config 252 has no interface number 0 [ 640.999442][ T4426] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 641.017488][ T4426] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 641.029970][ T4354] Bluetooth: hci0: Frame reassembly failed (-84) [ 641.045657][ T4426] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 641.055163][ T4426] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.063724][ T4426] usb 2-1: Product: syz [ 641.068039][ T4426] usb 2-1: Manufacturer: syz [ 641.073238][ T4426] usb 2-1: SerialNumber: syz [ 641.127730][ T9617] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 641.158022][ T4426] usb 1-1: USB disconnect, device number 27 [ 641.198322][ T9617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 641.211367][ T9615] fido_id[9615]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 641.236235][ T9617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 641.274355][ T9617] device bridge_slave_0 left promiscuous mode [ 641.300386][ T9617] bridge0: port 1(bridge_slave_0) entered disabled state [ 641.314467][ T9610] tipc: Failed to remove unknown binding: 66,0,0/0:3280873349/3280873350 [ 641.331117][ T9617] device bridge_slave_1 left promiscuous mode [ 641.358102][ T9617] bridge0: port 2(bridge_slave_1) entered disabled state [ 641.360539][ T9610] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 641.400016][ T9610] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 641.416893][ T9617] bond0: (slave bond_slave_0): Releasing backup interface [ 641.446295][ T4426] usb 2-1: USB disconnect, device number 32 [ 641.488108][ T9625] loop5: detected capacity change from 0 to 2048 [ 641.501664][ T9617] bond0: (slave bond_slave_1): Releasing backup interface [ 641.563769][ T9617] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 641.591699][ T9617] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 641.604961][ T9617] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 641.628289][ T9617] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 642.161966][ T14] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 642.322458][ T9636] No such timeout policy "syz1" [ 642.813421][ T14] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 642.829511][ T14] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 642.838765][ T14] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 642.849630][ T14] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 642.864323][ T14] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 642.874003][ T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 642.893545][ T14] usb 1-1: SerialNumber: syz [ 643.011962][ T4271] Bluetooth: hci0: command 0x1003 tx timeout [ 643.020153][ T4283] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 643.116596][ T14] usb 1-1: 0:2 : does not exist [ 643.152521][ T14] usb 1-1: unit 5 not found! [ 643.175436][ T14] usb 1-1: USB disconnect, device number 28 [ 643.433598][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.698543][ T9655] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 643.715904][ T9655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 643.737487][ T9655] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 643.751265][ T9657] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1464'. [ 643.780995][ T9657] netlink: 128 bytes leftover after parsing attributes in process `syz.0.1464'. [ 644.026324][ T9663] loop0: detected capacity change from 0 to 2048 [ 644.382255][ T4282] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 644.554634][ T9669] No such timeout policy "syz1" [ 644.604387][ T5072] Bluetooth: hci0: Frame reassembly failed (-84) [ 646.612028][ T4283] Bluetooth: hci0: command 0x1003 tx timeout [ 646.620658][ T4282] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 646.906406][ T9693] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 646.933806][ T9693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 646.960231][ T9693] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 647.197483][ T9702] loop1: detected capacity change from 0 to 2048 [ 648.302051][ T9717] No such timeout policy "syz1" [ 649.057123][ T9730] loop3: detected capacity change from 0 to 1024 [ 649.118265][ T9730] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 649.148914][ T9730] ext4 filesystem being mounted at /283/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 649.167261][ T4326] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 649.205326][ T9735] loop0: detected capacity change from 0 to 512 [ 649.230328][ T9735] /dev/loop0: Can't open blockdev [ 649.248927][ T9730] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1488: bg 0: block 112: padding at end of block bitmap is not set [ 649.282000][ T9730] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 117 [ 649.323018][ T9729] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: block 1: comm syz.3.1488: lblock 1 mapped to illegal pblock 1 (length 1) [ 649.361553][ T4326] usb 6-1: Using ep0 maxpacket: 16 [ 649.369814][ T4326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 649.391312][ T4326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 649.407084][ T9730] EXT4-fs (loop3): This should not happen!! Data will be lost [ 649.407084][ T9730] [ 649.420070][ T4326] usb 6-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 649.447031][ T4326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 649.485533][ T9730] EXT4-fs error (device loop3): ext4_ext_remove_space:2930: inode #15: comm syz.3.1488: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 649.486930][ T4326] usb 6-1: config 0 descriptor?? [ 649.586169][ T9730] EXT4-fs error (device loop3) in ext4_setattr:5676: Corrupt filesystem [ 649.709689][ T4656] EXT4-fs error (device loop3): ext4_map_blocks:745: inode #15: comm kworker/u4:14: lblock 0 mapped to illegal pblock 0 (length 1) [ 649.754482][ T4656] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 649.772372][ T4656] EXT4-fs (loop3): This should not happen!! Data will be lost [ 649.772372][ T4656] [ 649.811043][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 650.494221][ T4283] Bluetooth: hci0: command 0x1003 tx timeout [ 650.500824][ T4282] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 651.026880][ T4326] usb 6-1: string descriptor 0 read error: -71 [ 651.068399][ T4326] uclogic 0003:5543:0047.0027: failed retrieving string descriptor #200: -71 [ 651.141614][ T4326] uclogic 0003:5543:0047.0027: failed retrieving pen parameters: -71 [ 651.206322][ T4326] uclogic 0003:5543:0047.0027: failed probing pen v2 parameters: -71 [ 651.237715][ T4326] uclogic 0003:5543:0047.0027: failed probing parameters: -71 [ 651.281479][ T4326] uclogic: probe of 0003:5543:0047.0027 failed with error -71 [ 651.341065][ T4326] usb 6-1: USB disconnect, device number 10 [ 652.235890][ T9775] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1505'. [ 652.486930][ T9782] loop5: detected capacity change from 0 to 2048 [ 653.209756][ T9765] loop4: detected capacity change from 0 to 40427 [ 653.229672][ T9765] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 653.288273][ T9765] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 653.315191][ T9785] No such timeout policy "syz1" [ 653.348750][ T9765] F2FS-fs (loop4): invalid crc value [ 653.365502][ T9765] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 653.414370][ T9765] F2FS-fs (loop4): Found nat_bits in checkpoint [ 653.600353][ T9765] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 653.632659][ T9765] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 653.669582][ T9765] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 653.684781][ T9765] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 653.758662][ T9795] loop1: detected capacity change from 0 to 8192 [ 653.971338][ T8779] I/O error, dev loop1, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 655.244126][ T9818] input: syz1 as /devices/virtual/input/input69 [ 655.408312][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1519'. [ 655.571278][ T4282] Bluetooth: hci0: command 0x1003 tx timeout [ 655.571314][ T4283] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 655.591287][ T4326] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 655.793301][ T4326] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 655.826204][ T4326] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 655.898600][ T4326] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 655.950540][ T4326] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 655.998379][ T4326] usb 2-1: SerialNumber: syz [ 656.245562][ T4326] usb 2-1: 0:2 : does not exist [ 656.260763][ T4326] usb 2-1: unit 5 not found! [ 656.308713][ T4326] usb 2-1: USB disconnect, device number 33 [ 656.785708][ T9837] loop4: detected capacity change from 0 to 1024 [ 656.839604][ T9837] EXT4-fs: Ignoring removed i_version option [ 656.909064][ T9837] EXT4-fs (loop4): Test dummy encryption mode enabled [ 657.000741][ T9837] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 657.308586][ T9848] loop3: detected capacity change from 0 to 1024 [ 657.315951][ T9848] EXT4-fs: Ignoring removed nomblk_io_submit option [ 657.331253][ T9848] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 657.500862][ T9848] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 657.534195][ T9848] System zones: 0-1, 3-36 [ 657.606078][ T9848] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 658.066251][ T9835] loop5: detected capacity change from 0 to 40427 [ 658.079410][ T9835] F2FS-fs (loop5): Invalid segment/section count (31, 24 x 1) [ 658.130159][ T9835] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 658.768420][ T9835] F2FS-fs (loop5): invalid crc value [ 658.838173][ T9835] F2FS-fs (loop5): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 658.918429][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 659.113607][ T9835] F2FS-fs (loop5): Found nat_bits in checkpoint [ 659.605171][ T9835] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0 [ 659.641246][ T9835] F2FS-fs (loop5): Cannot turn on quotas: -2 on 1 [ 659.662893][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 659.878700][ T9873] loop3: detected capacity change from 0 to 256 [ 660.116435][ T9877] 9pnet_fd: Insufficient options for proto=fd [ 660.821676][ T9882] input: syz1 as /devices/virtual/input/input70 [ 662.944214][ T9900] FAT-fs (loop7): bogus number of reserved sectors [ 662.951111][ T9900] FAT-fs (loop7): Can't find a valid FAT filesystem [ 664.333397][ T9919] input: syz1 as /devices/virtual/input/input71 [ 665.417188][ T9921] pimreg: tun_chr_ioctl cmd 1074812117 [ 665.551601][ T9914] loop4: detected capacity change from 0 to 40427 [ 665.622258][ T9914] F2FS-fs (loop4): Invalid segment/section count (31, 24 x 1) [ 665.629767][ T9914] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 665.669779][ T9914] F2FS-fs (loop4): invalid crc value [ 665.677134][ T9914] F2FS-fs (loop4): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root [ 665.697711][ T9914] F2FS-fs (loop4): Found nat_bits in checkpoint [ 665.774165][ T9929] 9pnet_fd: Insufficient options for proto=fd [ 665.787153][ T9914] F2FS-fs (loop4): Cannot turn on quotas: -2 on 0 [ 665.805516][ T9914] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1 [ 665.833234][ T9914] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 665.846183][ T9914] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 666.511388][ T9942] 9pnet_virtio: no channels available for device syz [ 667.580913][ T9942] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 670.419695][ T9961] loop3: detected capacity change from 0 to 1024 [ 670.447831][ T9961] EXT4-fs: Ignoring removed i_version option [ 670.530909][ T9963] input: syz1 as /devices/virtual/input/input72 [ 671.405724][ T9961] EXT4-fs (loop3): Test dummy encryption mode enabled [ 671.595545][ T9961] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 672.364156][ T4269] EXT4-fs (loop3): unmounting filesystem. [ 675.387601][ T4426] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 675.528630][T10000] loop1: detected capacity change from 0 to 1024 [ 675.576837][T10000] EXT4-fs: Ignoring removed nomblk_io_submit option [ 675.584011][ T4426] usb 1-1: Using ep0 maxpacket: 16 [ 675.593531][ T4426] usb 1-1: config 2 has an invalid interface number: 4 but max is 0 [ 675.610566][ T4426] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 675.657616][ T4426] usb 1-1: config 2 has no interface number 0 [ 675.668346][T10000] /dev/loop1: Can't open blockdev [ 675.675758][ T4426] usb 1-1: config 2 interface 4 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 675.737626][ T4426] usb 1-1: New USB device found, idVendor=0499, idProduct=1018, bcdDevice=b2.da [ 675.772833][ T4426] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 675.792080][ T4426] usb 1-1: Product: syz [ 675.820361][ T4426] usb 1-1: Manufacturer: syz [ 675.837140][ T4426] usb 1-1: SerialNumber: syz [ 675.919215][ T4426] snd-usb-audio: probe of 1-1:2.4 failed with error -2 [ 676.009537][ T4381] udevd[4381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:2.4/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 676.543452][T10014] input: syz1 as /devices/virtual/input/input73 [ 677.252909][ T4318] usb 1-1: USB disconnect, device number 29 [ 677.472230][T10018] loop0: detected capacity change from 0 to 128 [ 677.514016][T10018] /dev/loop0: Can't open blockdev [ 679.417644][T10039] loop5: detected capacity change from 0 to 512 [ 681.851006][T10043] loop4: detected capacity change from 0 to 512 [ 682.033346][T10039] EXT4-fs: error -4 creating inode table initialization thread [ 682.041811][T10039] EXT4-fs (loop5): mount failed [ 682.128357][T10043] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.1582: inode has both inline data and extents flags [ 682.471608][T10043] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1582: couldn't read orphan inode 15 (err -117) [ 682.510056][T10043] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 683.800160][T10065] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 683.809070][T10065] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 684.072933][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 684.946319][T10079] input: syz1 as /devices/virtual/input/input74 [ 685.039703][ T4318] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 685.380399][ T4318] usb 4-1: Using ep0 maxpacket: 16 [ 685.436522][ T4318] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 685.733069][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.739523][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.759008][ T4318] usb 4-1: config 0 interface 0 has no altsetting 0 [ 685.765748][ T4318] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 685.774856][ T4318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.810817][ T4318] usb 4-1: config 0 descriptor?? [ 686.079431][T10085] loop0: detected capacity change from 0 to 128 [ 686.088925][T10085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 686.096876][T10085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 686.104241][T10085] EXT4-fs: Ignoring removed nobh option [ 686.110254][T10085] /dev/loop0: Can't open blockdev [ 686.299562][ T4318] nzxt-smart2 0003:1E71:2009.0028: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 686.817529][ T4318] usb 4-1: USB disconnect, device number 23 [ 686.954379][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 686.990588][ T8779] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 687.126394][T10089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 687.337834][T10094] fido_id[10094]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 687.634397][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 687.678392][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 687.701546][T10104] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 687.765995][T10110] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1601'. [ 687.955425][T10109] loop1: detected capacity change from 0 to 16 [ 687.962806][T10109] /dev/loop1: Can't open blockdev [ 688.011580][ T4381] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 688.017106][T10109] loop1: detected capacity change from 0 to 512 [ 688.028220][T10109] ext4: Unknown parameter 'pcr' [ 688.896459][T10125] loop5: detected capacity change from 0 to 256 [ 689.129632][T10125] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 689.308254][ T4326] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 689.492090][ T4326] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 689.509398][ T4326] usb 2-1: config 252 has no interface number 0 [ 689.539396][ T4326] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 689.569790][ T4326] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 689.603412][ T4326] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 689.633020][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.651063][ T4326] usb 2-1: Product: syz [ 689.680840][ T4326] usb 2-1: Manufacturer: syz [ 689.694286][ T4326] usb 2-1: SerialNumber: syz [ 689.779150][T10135] loop3: detected capacity change from 0 to 512 [ 689.853017][T10135] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 689.976007][T10118] tipc: Failed to remove unknown binding: 66,0,0/0:1141681039/1141681040 [ 689.990794][T10135] EXT4-fs (loop3): 1 truncate cleaned up [ 690.007025][T10135] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 690.084143][T10118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 690.114545][T10118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 690.154916][ T27] audit: type=1800 audit(2000000010.720:70): pid=10135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1609" name="file1" dev="overlay" ino=15 res=0 errno=0 [ 690.185683][ T4318] usb 2-1: USB disconnect, device number 34 [ 690.269326][ T4326] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 690.394762][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 690.410770][ T4269] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0 [ 690.459455][ T4326] usb 6-1: Using ep0 maxpacket: 16 [ 690.479046][ T4326] usb 6-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 690.539313][ T4326] usb 6-1: config 0 interface 0 has no altsetting 0 [ 690.553775][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 690.571701][ T4326] usb 6-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 690.611658][T10152] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1615'. [ 690.620199][T10148] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 690.622386][T10149] loop0: detected capacity change from 0 to 16 [ 690.635216][T10149] /dev/loop0: Can't open blockdev [ 690.703848][ T4326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 690.730778][ T4326] usb 6-1: config 0 descriptor?? [ 690.877880][T10157] i2c i2c-0: Invalid block write size 34 [ 690.921800][ T4392] EXT4-fs (loop3): unmounting filesystem. [ 691.173240][ T4326] nzxt-smart2 0003:1E71:2009.0029: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.5-1/input0 [ 692.101922][ T4318] usb 6-1: USB disconnect, device number 11 [ 692.441812][T10169] fido_id[10169]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 693.359167][ T4318] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 693.412259][T10188] i2c i2c-0: Invalid block write size 34 [ 693.560927][ T4318] usb 5-1: config 252 has an invalid interface number: 107 but max is 0 [ 693.573724][ T4318] usb 5-1: config 252 has no interface number 0 [ 693.590258][ T4318] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 693.634698][ T4318] usb 5-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 693.658401][ T4318] usb 5-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 693.677949][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 693.698198][ T4318] usb 5-1: Product: syz [ 693.727949][ T4318] usb 5-1: Manufacturer: syz [ 693.747921][ T4318] usb 5-1: SerialNumber: syz [ 693.875012][T10199] 9pnet_fd: Insufficient options for proto=fd [ 693.911961][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 693.999483][ T4271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 694.011995][ T4271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 694.022407][ T4271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 694.034108][ T4271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 694.042582][ T4271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 694.398173][T10184] tipc: Failed to remove unknown binding: 66,0,0/2297984572:1029188929/1029188930 [ 694.501145][T10184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 694.527227][T10184] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 694.612276][ T4426] usb 5-1: USB disconnect, device number 18 [ 694.908224][T10195] chnl_net:caif_netlink_parms(): no params data found [ 694.976381][T10195] bridge0: port 1(bridge_slave_0) entered blocking state [ 694.984067][T10195] bridge0: port 1(bridge_slave_0) entered disabled state [ 694.994189][T10195] device bridge_slave_0 entered promiscuous mode [ 695.003308][T10195] bridge0: port 2(bridge_slave_1) entered blocking state [ 695.011275][T10195] bridge0: port 2(bridge_slave_1) entered disabled state [ 695.019635][T10195] device bridge_slave_1 entered promiscuous mode [ 695.047685][T10195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 695.059958][T10195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 695.093057][T10195] team0: Port device team_slave_0 added [ 695.101995][T10195] team0: Port device team_slave_1 added [ 695.136844][T10195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 695.154215][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.228692][T10195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 695.279825][T10195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 695.286851][T10195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 695.318613][T10220] loop5: detected capacity change from 0 to 2048 [ 695.341013][T10195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 695.428982][ T4426] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 695.473785][T10195] device hsr_slave_0 entered promiscuous mode [ 695.498036][T10195] device hsr_slave_1 entered promiscuous mode [ 695.514733][T10195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 695.545399][T10195] Cannot create hsr debugfs directory [ 695.628942][ T4426] usb 1-1: Using ep0 maxpacket: 16 [ 695.636127][ T4426] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 695.668925][ T4426] usb 1-1: config 0 interface 0 has no altsetting 0 [ 695.704160][ T4426] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 695.740154][ T4426] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 695.788612][ T4426] usb 1-1: config 0 descriptor?? [ 696.181680][T10195] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 696.208212][T10195] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 696.209053][ T4271] Bluetooth: hci0: command 0x0409 tx timeout [ 696.228002][ T4426] nzxt-smart2 0003:1E71:2009.002A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 696.246985][T10195] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 696.316952][T10195] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 696.376185][T10225] No such timeout policy "syz1" [ 696.448393][ T4388] Bluetooth: hci2: Frame reassembly failed (-84) [ 696.659236][ T4327] usb 1-1: USB disconnect, device number 30 [ 696.769830][T10195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 696.791288][T10229] fido_id[10229]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 696.819083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 696.837050][T10234] i2c i2c-0: Invalid block write size 34 [ 696.845602][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 696.895985][T10195] 8021q: adding VLAN 0 to HW filter on device team0 [ 696.921033][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 696.954136][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 696.986662][ T5072] bridge0: port 1(bridge_slave_0) entered blocking state [ 696.993881][ T5072] bridge0: port 1(bridge_slave_0) entered forwarding state [ 697.066439][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 697.092259][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 697.119541][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 697.126394][T10240] xt_hashlimit: size too large, truncated to 1048576 [ 697.128006][ T5072] bridge0: port 2(bridge_slave_1) entered blocking state [ 697.141456][ T5072] bridge0: port 2(bridge_slave_1) entered forwarding state [ 697.225301][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 697.257598][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 697.338083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 697.383956][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 697.399660][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 697.439470][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 697.479024][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 697.523088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 697.575483][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 697.653106][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 697.766286][T10254] overlayfs: missing 'lowerdir' [ 697.775816][T10195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 697.847798][T10255] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 697.856903][T10255] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 698.164332][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 698.289875][ T4283] Bluetooth: hci0: command 0x041b tx timeout [ 698.450116][ T4271] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 699.197422][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 699.207045][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 699.228607][ T22] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 699.254565][T10195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 699.430383][ T22] usb 2-1: config 252 has an invalid interface number: 107 but max is 0 [ 699.458512][ T22] usb 2-1: config 252 has no interface number 0 [ 699.465542][ T22] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 699.508835][ T22] usb 2-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 699.546482][ T22] usb 2-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 699.576188][ T22] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.596426][ T22] usb 2-1: Product: syz [ 699.608720][ T22] usb 2-1: Manufacturer: syz [ 699.613796][ T22] usb 2-1: SerialNumber: syz [ 699.880163][T10265] tipc: Failed to remove unknown binding: 66,0,0/0:615719875/615719876 [ 699.944716][T10265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 699.982819][T10265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 700.052820][ T14] usb 2-1: USB disconnect, device number 35 [ 700.294854][T10283] loop5: detected capacity change from 0 to 1024 [ 700.330575][T10283] EXT4-fs: Ignoring removed nobh option [ 700.351064][T10283] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 700.368414][ T4271] Bluetooth: hci0: command 0x040f tx timeout [ 700.374774][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 700.394406][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 700.439222][T10283] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 700.452120][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 700.461003][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 700.472183][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 700.480403][ T4656] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 700.496691][T10195] device veth0_vlan entered promiscuous mode [ 700.556952][T10195] device veth1_vlan entered promiscuous mode [ 700.589920][T10283] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3852: comm syz.5.1652: Allocating blocks 497-513 which overlap fs metadata [ 700.628750][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 700.648703][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 700.668583][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 700.676721][T10290] loop1: detected capacity change from 0 to 256 [ 700.677274][ T5072] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 700.911217][T10195] device veth0_macvtap entered promiscuous mode [ 700.925238][T10195] device veth1_macvtap entered promiscuous mode [ 700.944220][T10283] EXT4-fs (loop5): pa ffff888070aa32a0: logic 256, phys. 385, len 8 [ 700.952846][T10283] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 701.277015][T10195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 701.839042][T10195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 701.870435][T10287] EXT4-fs error (device loop5): mb_free_blocks:1826: group 0, inode 15: block 129:freeing already freed block (bit 8); block bitmap corrupt. [ 701.883848][T10195] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.914221][T10195] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.936401][T10195] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.958172][T10195] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 701.979266][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 702.098461][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 702.106617][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 702.220193][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 702.428432][T10302] snd_dummy snd_dummy.0: control 0:0:0:syz0:7 is already present [ 702.437250][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 702.448075][ T4271] Bluetooth: hci0: command 0x0419 tx timeout [ 702.538089][ T27] audit: type=1326 audit(2000005179.090:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10299 comm="syz.1.1657" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f184879aeb9 code=0x0 [ 703.522724][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 703.540440][ T4388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 703.796880][ T4482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.828495][ T4482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.856656][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 703.912724][T10315] loop5: detected capacity change from 0 to 1024 [ 703.919882][ T4388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 703.935691][ T4388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 703.937567][T10319] IPv6: NLM_F_CREATE should be specified when creating new route [ 703.965857][T10315] EXT4-fs: Ignoring removed nomblk_io_submit option [ 703.985160][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 703.998440][T10315] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 704.061289][T10315] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 704.116356][T10315] System zones: 0-1, 3-36 [ 704.200135][T10315] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 705.688734][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 707.248713][T10346] i2c i2c-0: Invalid block write size 34 [ 707.789461][T10351] loop6: detected capacity change from 0 to 256 [ 707.969183][T10351] FAT-fs (loop6): Directory bread(block 64) failed [ 708.044982][T10351] FAT-fs (loop6): Directory bread(block 65) failed [ 708.219893][T10357] input: syz1 as /devices/virtual/input/input79 [ 708.925500][T10351] FAT-fs (loop6): Directory bread(block 66) failed [ 708.933285][T10351] FAT-fs (loop6): Directory bread(block 67) failed [ 708.941711][T10351] FAT-fs (loop6): Directory bread(block 68) failed [ 708.948349][T10351] FAT-fs (loop6): Directory bread(block 69) failed [ 708.955283][T10351] FAT-fs (loop6): Directory bread(block 70) failed [ 708.972119][T10351] FAT-fs (loop6): Directory bread(block 71) failed [ 708.997000][T10351] FAT-fs (loop6): Directory bread(block 72) failed [ 709.003697][T10351] FAT-fs (loop6): Directory bread(block 73) failed [ 709.275028][T10363] loop5: detected capacity change from 0 to 4096 [ 709.329046][T10363] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 709.395817][T10363] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 710.672108][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 711.035904][T10385] netlink: 'syz.4.1685': attribute type 29 has an invalid length. [ 711.376845][T10390] input: syz1 as /devices/virtual/input/input80 [ 712.266459][T10394] loop5: detected capacity change from 0 to 512 [ 712.286649][T10395] loop4: detected capacity change from 0 to 1024 [ 712.304276][T10394] EXT4-fs: Ignoring removed oldalloc option [ 712.312134][T10395] EXT4-fs: Ignoring removed bh option [ 712.412872][T10395] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 712.461089][T10394] EXT4-fs error (device loop5): ext4_xattr_inode_iget:397: comm syz.5.1687: Parent and EA inode have the same ino 15 [ 712.577068][T10406] EXT4-fs error (device loop4): ext4_find_dest_de:2115: inode #12: block 7: comm syz.4.1688: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0 [ 712.710940][T10394] EXT4-fs error (device loop5): ext4_xattr_inode_iget:397: comm syz.5.1687: Parent and EA inode have the same ino 15 [ 712.767064][T10394] EXT4-fs (loop5): 1 orphan inode deleted [ 712.785413][T10395] overlayfs: conflicting lowerdir path [ 712.796185][T10406] EXT4-fs (loop4): Remounting filesystem read-only [ 712.796287][T10394] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 712.824666][T10406] EXT4-fs error (device loop4): ext4_xattr_inode_iget:401: comm syz.4.1688: inode #67108864: comm syz.4.1688: iget: illegal inode # [ 712.936380][T10406] EXT4-fs (loop4): Remounting filesystem read-only [ 712.973008][T10406] EXT4-fs error (device loop4): ext4_xattr_inode_iget:406: comm syz.4.1688: error while reading EA inode 67108864 err=-117 [ 713.107790][T10406] EXT4-fs (loop4): Remounting filesystem read-only [ 714.015241][ T4270] EXT4-fs (loop4): unmounting filesystem. [ 714.855355][T10428] loop1: detected capacity change from 0 to 512 [ 714.934986][T10428] /dev/loop1: Can't open blockdev [ 715.537199][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 715.588907][T10435] i2c i2c-0: Invalid block write size 34 [ 715.785206][T10437] input: syz1 as /devices/virtual/input/input81 [ 716.645154][T10445] loop0: detected capacity change from 0 to 128 [ 716.995320][T10443] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 717.313144][T10454] loop4: detected capacity change from 0 to 512 [ 718.761653][T10454] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock [ 718.771563][T10454] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock [ 718.781646][T10454] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock [ 718.822045][T10454] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 718.830079][T10454] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e040e01c, mo2=0000] [ 718.838130][T10454] EXT4-fs (loop4): failed to initialize system zone (-117) [ 718.845430][T10454] EXT4-fs (loop4): mount failed [ 718.928815][T10443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 719.066453][T10443] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 719.115918][ T4318] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 719.315863][ T4318] usb 7-1: Using ep0 maxpacket: 16 [ 719.345741][ T4318] usb 7-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.433330][ T4318] usb 7-1: config 0 interface 0 has no altsetting 0 [ 719.481219][ T4318] usb 7-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 719.555874][ T4318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.636464][ T4318] usb 7-1: config 0 descriptor?? [ 720.077596][ T4318] usbhid 7-1:0.0: can't add hid device: -71 [ 720.083654][ T4318] usbhid: probe of 7-1:0.0 failed with error -71 [ 720.106764][ T4318] usb 7-1: USB disconnect, device number 2 [ 720.122675][T10472] loop1: detected capacity change from 0 to 1024 [ 720.146645][T10472] EXT4-fs: Ignoring removed nobh option [ 720.157450][T10472] EXT4-fs: Ignoring removed bh option [ 720.166954][T10472] /dev/loop1: Can't open blockdev [ 720.493555][T10479] loop0: detected capacity change from 0 to 512 [ 720.550003][T10479] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 720.610463][T10479] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c802e02c, mo2=0002] [ 720.658636][T10479] EXT4-fs (loop0): write access unavailable, skipping orphan cleanup [ 720.691305][T10479] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 720.721046][T10479] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1711: dx entry: limit 0 != root limit 125 [ 720.806621][ T4326] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 720.822337][T10479] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1711: Corrupt directory, running e2fsck is recommended [ 720.829843][T10488] i2c i2c-0: Invalid block write size 34 [ 720.942481][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 720.995785][ T4326] usb 2-1: Using ep0 maxpacket: 16 [ 721.003082][ T4326] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 721.036149][ T4326] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 721.057167][ T4326] usb 2-1: config 0 has no interface number 0 [ 721.063474][ T4326] usb 2-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 721.077714][ T4326] usb 2-1: config 0 interface 41 has no altsetting 0 [ 721.116447][ T4326] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 721.132497][ T4326] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 721.148824][ T4326] usb 2-1: Product: syz [ 721.157478][ T4326] usb 2-1: Manufacturer: syz [ 721.167433][ T4326] usb 2-1: SerialNumber: syz [ 721.188845][ T4326] usb 2-1: config 0 descriptor?? [ 721.198079][T10490] loop6: detected capacity change from 0 to 8192 [ 721.254168][T10490] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 721.427922][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 721.450376][T10495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 721.474991][ T4326] dm9601: probe of 2-1:0.41 failed with error -22 [ 721.475110][T10495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 721.483396][ T4326] sr9700: probe of 2-1:0.41 failed with error -22 [ 721.514536][T10495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 721.531777][ T4326] usb 2-1: USB disconnect, device number 36 [ 721.785817][ T27] audit: type=1326 audit(2000000008.290:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10489 comm="syz.6.1715" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3d77b9aeb9 code=0x7fc00000 [ 722.175631][ T4327] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 722.375577][ T4327] usb 1-1: Using ep0 maxpacket: 16 [ 722.382754][ T4327] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 722.385232][T10514] 9pnet_fd: Insufficient options for proto=fd [ 722.424214][ T4327] usb 1-1: config 0 interface 0 has no altsetting 0 [ 722.444750][ T4327] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 722.475049][ T4327] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 722.507600][ T4327] usb 1-1: config 0 descriptor?? [ 722.629435][T10517] overlayfs: failed to resolve './file1': -2 [ 722.675607][ T4326] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 722.891143][ T4326] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 722.927660][ T4326] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 722.946383][T10519] i2c i2c-0: Invalid block write size 34 [ 722.965525][ T4326] usb 5-1: config 1 has no interface number 0 [ 722.992663][ T4326] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 723.025645][ T4326] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.033702][ T4326] usb 5-1: Product: syz [ 723.047018][ T4326] usb 5-1: Manufacturer: syz [ 723.069057][ T4326] usb 5-1: SerialNumber: syz [ 723.125317][ T4327] usbhid 1-1:0.0: can't add hid device: -71 [ 723.130313][T10508] loop4: detected capacity change from 0 to 32768 [ 723.134333][ T4327] usbhid: probe of 1-1:0.0 failed with error -71 [ 723.196920][ T4327] usb 1-1: USB disconnect, device number 31 [ 723.225779][T10508] loop4: p1 p2 p3 < p5 > [ 723.243999][T10508] loop4: p1 size 242222080 extends beyond EOD, truncated [ 723.285348][T10508] loop4: p2 start 16777215 is beyond EOD, truncated [ 723.350667][ T4326] usb 5-1: USB disconnect, device number 19 [ 723.428674][T10521] device syzkaller0 entered promiscuous mode [ 724.043691][T10527] loop5: detected capacity change from 0 to 512 [ 724.234991][T10527] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.1729: inode has both inline data and extents flags [ 724.301037][T10527] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1729: couldn't read orphan inode 15 (err -117) [ 724.350824][T10527] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 724.651287][ T4381] udevd[4381]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 724.657493][ T8779] udevd[8779]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 724.678099][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 724.693436][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 724.849468][ T8779] udevd[8779]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory [ 724.863125][ T4398] udevd[4398]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 725.646223][T10547] 9pnet_fd: Insufficient options for proto=fd [ 726.141166][T10552] i2c i2c-0: Invalid block write size 34 [ 726.219045][T10553] overlayfs: missing 'lowerdir' [ 726.324754][T10554] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 726.333751][T10554] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 726.361752][T10542] loop5: detected capacity change from 0 to 40427 [ 726.501753][T10542] F2FS-fs (loop5): build fault injection attr: rate: 174, type: 0x3ffff [ 727.011370][T10558] loop1: detected capacity change from 0 to 256 [ 727.124604][T10558] exfat: Unknown parameter '0xffffffffffffffff0x0000000000000000' [ 727.377915][T10557] usb usb8: usbfs: process 10557 (syz.1.1738) did not claim interface 0 before use [ 727.407665][T10560] loop5: detected capacity change from 0 to 512 [ 727.424463][T10563] loop0: detected capacity change from 0 to 1024 [ 727.449697][T10563] EXT4-fs: Ignoring removed i_version option [ 727.501574][T10563] /dev/loop0: Can't open blockdev [ 727.575714][T10560] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 727.610837][T10560] ext4 filesystem being mounted at /246/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 728.429191][ T5768] EXT4-fs (loop5): unmounting filesystem. [ 728.592209][T10571] loop1: detected capacity change from 0 to 512 [ 728.621266][T10571] EXT4-fs (loop1): Test dummy encryption mode enabled [ 728.628497][T10571] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 728.662588][T10571] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c816e02c, mo2=0002] [ 728.770312][T10571] EXT4-fs (loop1): write access unavailable, skipping orphan cleanup [ 728.824845][T10571] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 728.863630][T10571] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1741: dx entry: limit 0 != root limit 125 [ 728.875455][ T4382] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 728.904013][T10571] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1741: Corrupt directory, running e2fsck is recommended [ 728.928069][T10571] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1741: dx entry: limit 0 != root limit 125 [ 728.947552][T10571] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1741: Corrupt directory, running e2fsck is recommended [ 728.973832][T10571] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1741: dx entry: limit 0 != root limit 125 [ 728.986400][T10571] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1741: Corrupt directory, running e2fsck is recommended [ 729.002843][T10571] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1741: dx entry: limit 0 != root limit 125 [ 729.018826][T10571] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1741: Corrupt directory, running e2fsck is recommended [ 729.049137][T10571] EXT4-fs warning (device loop1): dx_probe:893: inode #2: comm syz.1.1741: dx entry: limit 0 != root limit 125 [ 729.061925][T10571] EXT4-fs warning (device loop1): dx_probe:966: inode #2: comm syz.1.1741: Corrupt directory, running e2fsck is recommended [ 729.077636][ T4382] usb 6-1: config 252 has an invalid interface number: 107 but max is 0 [ 729.095330][ T4382] usb 6-1: config 252 has no interface number 0 [ 729.102996][ T4382] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 729.117925][ T4382] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 729.151344][ T4382] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 729.174960][T10583] 9pnet_fd: Insufficient options for proto=fd [ 729.183480][ T4382] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 729.192013][ T4382] usb 6-1: Product: syz [ 729.200936][ T4382] usb 6-1: Manufacturer: syz [ 729.208940][ T4382] usb 6-1: SerialNumber: syz [ 729.327196][ T4281] EXT4-fs (loop1): unmounting filesystem. [ 729.445600][T10572] tipc: Failed to remove unknown binding: 66,0,0/0:4183109559/4183109560 [ 729.452907][T10588] i2c i2c-0: Invalid block write size 34 [ 729.458818][T10572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 729.493119][T10572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 729.516037][ T4318] usb 6-1: USB disconnect, device number 12 [ 730.535330][T10592] overlayfs: missing 'lowerdir' [ 730.886454][T10594] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 730.896127][T10594] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 731.449689][T10598] loop5: detected capacity change from 0 to 256 [ 731.484211][T10598] exfat: Unknown parameter '0x00000000000000030x0000000000000000' [ 731.700976][T10598] usb usb8: usbfs: process 10598 (syz.5.1751) did not claim interface 0 before use [ 732.031749][T10603] loop0: detected capacity change from 0 to 1024 [ 732.072474][T10603] EXT4-fs: Ignoring removed i_version option [ 732.106078][T10603] /dev/loop0: Can't open blockdev [ 736.199326][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 736.208777][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 736.216312][T10533] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 736.235614][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1750'. [ 736.666620][T10624] i2c i2c-0: Invalid block write size 34 [ 737.451865][T10634] loop0: detected capacity change from 0 to 256 [ 737.474667][T10634] exfat: Unknown parameter '0x00000000000000030x0000000000000000' [ 737.676689][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1763'. [ 737.706580][T10634] usb usb8: usbfs: process 10634 (syz.0.1762) did not claim interface 0 before use [ 737.724422][T10637] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1763'. [ 737.845035][ T4326] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 738.016972][T10642] loop0: detected capacity change from 0 to 1024 [ 738.025481][T10642] EXT4-fs: Ignoring removed i_version option [ 738.031678][T10642] /dev/loop0: Can't open blockdev [ 738.054068][ T4326] usb 6-1: config 252 has an invalid interface number: 107 but max is 0 [ 738.070291][ T4326] usb 6-1: config 252 has no interface number 0 [ 738.622697][T10644] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 738.632233][T10644] FAT-fs (loop9): unable to read boot sector [ 739.596895][T10649] netlink: 'syz.6.1766': attribute type 2 has an invalid length. [ 739.786701][ T4326] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 739.798146][ T4326] usb 6-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 739.815086][ T4326] usb 6-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67 [ 739.824171][ T4326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 739.849715][ T4326] usb 6-1: Product: syz [ 739.855272][ T4326] usb 6-1: Manufacturer: syz [ 739.859913][ T4326] usb 6-1: SerialNumber: syz [ 740.033932][T10659] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 740.043658][T10659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 740.072576][T10659] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 740.074770][T10656] ------------[ cut here ]------------ [ 740.085922][T10656] WARNING: CPU: 1 PID: 10656 at arch/x86/kvm/x86.c:11250 kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 740.091207][T10659] device bridge_slave_0 left promiscuous mode [ 740.096366][T10656] Modules linked in: [ 740.096385][T10656] CPU: 1 PID: 10656 Comm: syz.1.1768 Not tainted syzkaller #0 [ 740.096409][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.096422][T10656] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 740.096455][T10656] Code: e8 37 52 c3 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 fc 51 c3 00 e9 ce e5 ff ff e8 32 67 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 740.096475][T10656] RSP: 0018:ffffc90005027c48 EFLAGS: 00010287 [ 740.096497][T10656] RAX: ffffffff81100b3e RBX: ffff88807dc00000 RCX: 0000000000080000 [ 740.096514][T10656] RDX: ffffc900055c9000 RSI: 00000000000003d1 RDI: 00000000000003d2 [ 740.129997][T10659] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.130800][T10656] RBP: ffff88807b26a000 R08: dffffc0000000000 R09: 1ffffffff215e66a [ 740.157318][T10635] tipc: Failed to remove unknown binding: 66,0,0/0:1419727293/1419727294 [ 740.164765][T10656] R10: dffffc0000000000 R11: fffffbfff215e66b R12: ffff88807dc002f4 [ 740.164789][T10656] R13: ffff88807dc000d8 R14: dffffc0000000000 R15: 0000000000000000 [ 740.212436][T10656] FS: 00007f18497056c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 740.221473][T10656] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 740.225748][T10635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 740.228111][T10656] CR2: 000000110c45102e CR3: 00000000783d7000 CR4: 00000000003526e0 [ 740.244538][T10656] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 740.250471][T10635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 740.252529][T10656] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 740.268384][T10656] Call Trace: [ 740.271698][T10656] [ 740.274720][T10656] ? mutex_lock_nested+0x10/0x10 [ 740.279722][T10656] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 740.285562][T10656] kvm_vcpu_ioctl+0x8f7/0xc10 [ 740.290296][T10656] ? xa_release+0x50/0x50 [ 740.294715][T10656] ? __fget_files+0x28/0x4b0 [ 740.299355][T10656] ? __fget_files+0x28/0x4b0 [ 740.304015][T10656] ? bpf_lsm_file_ioctl+0x5/0x10 [ 740.309061][T10656] ? security_file_ioctl+0x7c/0xa0 [ 740.314212][T10656] ? xa_release+0x50/0x50 [ 740.318624][T10656] __se_sys_ioctl+0xfa/0x170 [ 740.323265][T10656] do_syscall_64+0x4c/0xa0 [ 740.327784][T10656] ? clear_bhb_loop+0x60/0xb0 [ 740.331802][ T4575] usb 6-1: USB disconnect, device number 13 [ 740.332479][T10656] ? clear_bhb_loop+0x60/0xb0 [ 740.332512][T10656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.349131][T10656] RIP: 0033:0x7f184879aeb9 [ 740.353588][T10656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.373305][T10656] RSP: 002b:00007f1849705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.381849][T10656] RAX: ffffffffffffffda RBX: 00007f1848a15fa0 RCX: 00007f184879aeb9 [ 740.389926][T10656] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 740.398004][T10656] RBP: 00007f1848808c1f R08: 0000000000000000 R09: 0000000000000000 [ 740.406068][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.414074][T10656] R13: 00007f1848a16038 R14: 00007f1848a15fa0 R15: 00007ffef78bbdf8 [ 740.422168][T10656] [ 740.425254][T10656] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 740.432557][T10656] CPU: 1 PID: 10656 Comm: syz.1.1768 Not tainted syzkaller #0 [ 740.440063][T10656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 740.450150][T10656] Call Trace: [ 740.453451][T10656] [ 740.456414][T10656] dump_stack_lvl+0x188/0x24e [ 740.461137][T10656] ? memcpy+0x3c/0x60 [ 740.465148][T10656] ? show_regs_print_info+0x12/0x12 [ 740.470385][T10656] ? load_image+0x400/0x400 [ 740.474941][T10656] panic+0x2e5/0x730 [ 740.478890][T10656] ? bpf_jit_dump+0xd0/0xd0 [ 740.483454][T10656] __warn+0x2f8/0x4f0 [ 740.487478][T10656] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 740.493322][T10656] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 740.499181][T10656] report_bug+0x2ba/0x4f0 [ 740.503552][T10656] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 740.509408][T10656] handle_bug+0x3a/0x70 [ 740.513602][T10656] exc_invalid_op+0x16/0x40 [ 740.518143][T10656] asm_exc_invalid_op+0x16/0x20 [ 740.523033][T10656] RIP: 0010:kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 740.529491][T10656] Code: e8 37 52 c3 00 e9 4e ef ff ff 44 89 f9 80 e1 07 38 c1 0f 8c db e5 ff ff 4c 89 ff e8 fc 51 c3 00 e9 ce e5 ff ff e8 32 67 72 00 <0f> 0b e9 da fc ff ff 44 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c ae eb [ 740.549122][T10656] RSP: 0018:ffffc90005027c48 EFLAGS: 00010287 [ 740.555202][T10656] RAX: ffffffff81100b3e RBX: ffff88807dc00000 RCX: 0000000000080000 [ 740.563183][T10656] RDX: ffffc900055c9000 RSI: 00000000000003d1 RDI: 00000000000003d2 [ 740.571165][T10656] RBP: ffff88807b26a000 R08: dffffc0000000000 R09: 1ffffffff215e66a [ 740.579145][T10656] R10: dffffc0000000000 R11: fffffbfff215e66b R12: ffff88807dc002f4 [ 740.587122][T10656] R13: ffff88807dc000d8 R14: dffffc0000000000 R15: 0000000000000000 [ 740.595106][T10656] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 740.600933][T10656] ? kvm_arch_vcpu_ioctl_run+0x1e9e/0x2390 [ 740.606764][T10656] ? mutex_lock_nested+0x10/0x10 [ 740.611735][T10656] ? kvm_arch_vcpu_ioctl_run+0x139/0x2390 [ 740.617471][T10656] kvm_vcpu_ioctl+0x8f7/0xc10 [ 740.622169][T10656] ? xa_release+0x50/0x50 [ 740.626518][T10656] ? __fget_files+0x28/0x4b0 [ 740.631124][T10656] ? __fget_files+0x28/0x4b0 [ 740.635743][T10656] ? bpf_lsm_file_ioctl+0x5/0x10 [ 740.640695][T10656] ? security_file_ioctl+0x7c/0xa0 [ 740.645815][T10656] ? xa_release+0x50/0x50 [ 740.650151][T10656] __se_sys_ioctl+0xfa/0x170 [ 740.654755][T10656] do_syscall_64+0x4c/0xa0 [ 740.659183][T10656] ? clear_bhb_loop+0x60/0xb0 [ 740.663863][T10656] ? clear_bhb_loop+0x60/0xb0 [ 740.668548][T10656] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 740.674449][T10656] RIP: 0033:0x7f184879aeb9 [ 740.678872][T10656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 740.698489][T10656] RSP: 002b:00007f1849705028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 740.706916][T10656] RAX: ffffffffffffffda RBX: 00007f1848a15fa0 RCX: 00007f184879aeb9 [ 740.714894][T10656] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 740.722868][T10656] RBP: 00007f1848808c1f R08: 0000000000000000 R09: 0000000000000000 [ 740.730846][T10656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 740.738825][T10656] R13: 00007f1848a16038 R14: 00007f1848a15fa0 R15: 00007ffef78bbdf8 [ 740.746815][T10656] [ 740.750226][T10656] Kernel Offset: disabled [ 740.754618][T10656] Rebooting in 86400 seconds..