last executing test programs: 23m53.255653361s ago: executing program 32 (id=161): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0x8, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0xd}, 0x48) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newsa={0x144, 0x1a, 0x1, 0x0, 0x0, {{@in6=@remote, @in6=@private1, 0x4003, 0x0, 0x3, 0x3, 0x2}, {@in6=@mcast2, 0x0, 0x32}, @in=@broadcast, {0x0, 0x9e8, 0x4000000000000, 0x402, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0xfffffffffffffffe}, {0x0, 0x0, 0x5}, 0x0, 0x0, 0xa}, [@tfcpad={0x8, 0x16, 0x7}, @algo_auth_trunc={0x4c, 0x14, {{'rmd128-generic\x00'}, 0x0, 0x180}}]}, 0x144}, 0x1, 0x0, 0x0, 0x8004}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x500, 0x4000000, 0xbe, 0x0, &(0x7f0000001100)="c2e4c35236ce2be2ed2652c8afb74c32be06ac7aa299fb0155508ff71b49c816b4752e60f741107c8d38f317e4fad47ed0bf7cf5efdf74ce11d60c60518eb6e82d1fbee0e1615ada6bac77fcf24d0983db76e442102596248dc1e29341eec5c40b2e02a2de7bd637ff688aa3cca5f1e2d5ac67481f1d519e2bfd9083c7f005398b239617bfdae58888b3d5cbd6745aaee62558c5d0d93514baf51b68e811716bbf31610c59da3487c52302a5e9627f9816fac533a5599e00000000000000"}, 0x50) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143142, 0x0) pwritev2(r3, &(0x7f0000000180)=[{&(0x7f00000001c0)="11", 0x1}], 0x1, 0x101000, 0x6, 0x41) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000001a40)=0xffff, 0x4) syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8080, &(0x7f0000001bc0)=ANY=[@ANYBLOB="696f636861727365743d638f4434392c75e90000000000e2dd4a12746769643d5eee0d0be3575b2234bd1a9fde9f1d92dc52a86b668c840fde1f20d05c01bd8521f851fbe8701077c37fabecefa06b0a7bb6817ea1ccb38c4a25599e7563431ffe05d74ec4ff35d19965b4481a29a9092c12d2c1833b429e1aba714f82cc92823219780efff4e08419a45c8e52cfac6ebbb7b52f7c4d82f8827204db7686531b5b0acc76fbc6c45fdf55973705ea7fc653ddd3b22f38554068eeb3551fd413b943fc8be06589a82a40e0953b20ec71a2d5ec3a3d3b89216527b53991ccf9ccb8a0ec2079dae8713dde5bfd0f9d604f8cb8afccc52d", @ANYRESDEC=0x0, @ANYBLOB=',shortad,umask=00000000000000000154330,novrs,noadinicb,rootdir=00000000000000000006,noadinicb,obj_type=\\,obj_user=){^%+,,subj_user=gid,\x00'], 0x1, 0xc32, &(0x7f0000000e00)="$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") mkdir(&(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x18f) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000200), &(0x7f0000000080)=0x4) r4 = socket$inet6(0xa, 0xa, 0x9) getsockopt$bt_hci(r4, 0x84, 0x85, &(0x7f0000000080)=""/4060, &(0x7f00000010c0)=0xfdc) 23m5.872278908s ago: executing program 33 (id=275): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000000)={0x48, 0x1, r1, 0x2000000, 0x1000, 0x2000}) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000007c0)={0x28, 0x6, r1, 0x0, &(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1004000}) 21m26.906800487s ago: executing program 34 (id=571): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)=0xffffffffffffffff) setsockopt(r0, 0x7, 0x4, &(0x7f00000000c0)="bffa02c55b87c79d9ec5ff1b458012917255782632da6a04cba910b46610b4", 0x1f) r1 = dup2(r0, r0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000100)={0x0, 0x3, 0x2, 0x0, 0x0, [{{r1}, 0x10}, {{r0}, 0x1}]}) flock(r0, 0x1) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/power/pm_trace', 0x640, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000001c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xea, 0x9}}, './file0\x00'}) getsockopt$IP_SET_OP_GET_FNAME(r2, 0x1, 0x53, &(0x7f0000000200)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000240)=0x2c) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, 0x140d, 0x800, 0x70bd2a, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x8d4) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000380)={0x0, 0x22, 0x100000000}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000780)={r5, 0x1, 0x40}) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x9, 0x3, 0x2e0, 0x210, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x210, 0xffffffff, 0xffffffff, 0x210, 0xffffffff, 0x3, &(0x7f0000000b80), {[{{@ipv6={@mcast2, @rand_addr=' \x01\x00', [0x0, 0xff, 0xff], [0xff000000, 0xffffff00, 0xffffffff], 'netdevsim0\x00', 'bridge0\x00', {}, {0xff}, 0x2c, 0x6, 0x4, 0x14}, 0x0, 0x120, 0x148, 0x0, {}, [@common=@inet=@set4={{0x50}, {{0x2, 0x4, 0x2}, {{}, 0x78}, {{0x9}, 0x9}, 0xc}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000f40), r2) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000001100)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000010c0)={&(0x7f0000000f80)={0x134, r7, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffa7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xd7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe73}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb3c2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_NODE={0x98, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_KEY={0x44, 0x4, {'gcm(aes)\x00', 0x1c, "f57ae68af470557abfe176c45826b91b3401738e0763132477e3a61f"}}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "6336eddd6cd729599e991e7cdfeb1a3ee698a7fec249de9002acd22ef9ab4274"}}]}]}, 0x134}, 0x1, 0x0, 0x0, 0x40000}, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000001140)=0x3, 0x4) r8 = socket$inet_udplite(0x2, 0x2, 0x88) bind(r8, &(0x7f0000001180)=@generic={0x18, "f568413afacc481d8ba664b41f50706c5db274c93feee2f1ace58511dc491917536df36ddf2b61a38256c1d7794e0370d8d27d7c74d50c6bcb62e9ef74610a260c880b56ccbc57711d52483e88dea7c2261d6a0959bab833c50f1be7266dcf29dc65a0628b5cd1855d8c44cb702db45f2a7b82dea37899a1b69e8d30ad04"}, 0x80) ioctl$sock_inet_SIOCGARP(r2, 0x8954, &(0x7f0000001200)={{0x2, 0x4e22, @loopback}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x4c, {0x2, 0x4e22, @local}, 'ip6_vti0\x00'}) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000001280)={0x0, 0xfd, "95aed08d47ecb2ddcc0df23d12294e6221afe9677612055bf75f1988707f94e66eb16cd7dd5094ccfa59e967cde6c98bfb714045267742df23f67ce77e7bbf067d29b174cc09268911d872c7fb6e14682a50fc78443ed86e6600b3bbe407896e77937b34a71e6924c48199550619c9f046c625a57e1efe3a388a195e799e662a2b2228f5bc93173f20cf380b1b6931e118552bbf656f85558bc30e03249225d5c46d0b26248e15c722ae8d6925473577b33c675980930611eadd7689eb8bb0b581df53c7d93b3a97ff4fe3d718e601197f32ffa93b68060d40f1094b3c596bf5889b3ab250dbb979bfcb4fa6e4bf8dac85ba83dd581144ee961090b04e"}, &(0x7f00000013c0)=0x105) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000001440)={r9, 0x1c, &(0x7f0000001400)=[@in6={0xa, 0x4e24, 0x2, @mcast1, 0x4}]}, &(0x7f0000001480)=0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001500), r3) sendmsg$NL80211_CMD_NEW_STATION(r10, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x3c, r11, 0x300, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x7ad}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x0, 0x6, 0x5, 0x3af0, 0xf]}, @NL80211_ATTR_STA_VLAN={0x8}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x5}]}, 0x3c}}, 0x80) write$apparmor_current(r1, &(0x7f0000001600)=@hat={'permhat ', 0x4, 0x5e, ['\x00', '\x00', 'ib\x00', '\'$\x00', '*\x00', ':\x00']}, 0x27) sendmsg$TIPC_NL_PEER_REMOVE(r2, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x14, r7, 0x800, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000000) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000001900)={&(0x7f0000001740)="7ccca82d63ece3ebb775a853cdc23d6d555041afbb45ece887c5d9cdc221b3f1ed182f39432de28b3e9e26f8d9", &(0x7f0000001780)=""/62, &(0x7f00000017c0)="f842766b8c14e3fdd1a5923511b6b3", &(0x7f0000001800)="6f34868eb5e74b8ac79d6804d81c795134702f3582335bef8154de21580e3dd4aaaff9d3a06c0049fda1a5e48593d2a394b02c3160dd9bf5e4075c05b301e7acc9fdd6640c59bdc1d1e7a70cbd28a4cd4317912389ef06c4654392af8787e79c66a95c2e9d957a9f9cb851e87216c203d17a68f0206c266d1cfe10911c509ba1a0a3e03c824a8d60da3b4aa5bb7701a7e08f230d0976730d26787efed9b1574a4dcc7f3712e64f99093cc471a7bf91138cb0e00b70e16f16cbab0cfc9b913bcc9947c5ccb8ffca677a6b30e6f58b737d0ad0a2", 0xfffff7a1, r1}, 0x38) 21m21.382129596s ago: executing program 35 (id=582): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='yeah', 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x200000000000005e) sendto$inet(r0, &(0x7f0000000380)='%', 0x1, 0x4000041, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000100)="fd0a0fc6dd4887c6048236609465f2e31c82c5f6be73b435a314bd11a3ccedb8ec4c8219ed81f552d8a12b9b15cdca91b058fbff98d619438ad5aaebb6ed6b54", 0xfffffffffffffe4f, 0x404c801, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed4040, &(0x7f0000000340)={[{@nodiscard}, {@stripe={'stripe', 0x3d, 0x1}}, {@auto_da_alloc}, {@grpid}, {@nolazytime}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x3}}, {@nolazytime}, {@dax_never}], [{@smackfstransmute={'smackfstransmute', 0x3d, ']'}}, {@uid_lt={'uid<', 0xee00}}]}, 0xf5, 0x47a, &(0x7f0000000580)="$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") ptrace(0x4206, r2) ptrace(0x4207, r2) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x70bd25, 0x0, {{@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x80, 0x3c, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x802000000000000}}}, 0xb8}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) r4 = pidfd_getfd(0xffffffffffffffff, r3, 0x0) ioctl$KIOCSOUND(r4, 0x4b2f, 0x4000000000000) 21m16.83917636s ago: executing program 36 (id=593): socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$qrtr(0x2a, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000580)='stack\x00') socket$netlink(0x10, 0x3, 0x8000000004) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101300, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[0x0], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 10m20.670927097s ago: executing program 37 (id=2546): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) 10m11.937572921s ago: executing program 9 (id=2592): utime(0x0, &(0x7f0000000040)={0x7, 0x5}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x44, 0x86}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000280)=0x2bc) bpf$PROG_LOAD(0x5, 0x0, 0x0) getpid() getpriority(0x2, r0) syz_emit_ethernet(0x5a, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000000)=0x800, 0x4) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x6, 0x8012, r3, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000100)={0x100, 0x0, 0xfffffffc}, 0x10) recvmmsg(r4, &(0x7f0000003d00), 0x0, 0x40000040, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r4) syz_open_dev$tty20(0xc, 0x4, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x0, &(0x7f0000000080)={@multicast1, @multicast1}, 0xc) ioctl$sock_bt_hci(r5, 0x400448dc, 0x0) 10m3.753888833s ago: executing program 9 (id=2602): creat(&(0x7f0000000340)='./file0\x00', 0x28) r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r0, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r0, &(0x7f00000002c0)='./file0\x00', 0x2) 9m59.928772525s ago: executing program 9 (id=2605): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000140)={[{@iocharset={'iocharset', 0x3d, 'cp864'}}, {@utf8}, {@uni_xlate}, {@utf8no}, {@shortname_lower}, {@utf8}, {@utf8no}, {@uni_xlate}, {@uni_xlateno}, {@uni_xlate}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '1250'}}, {@shortname_lower}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@numtail}]}, 0x3, 0x36b, &(0x7f0000000500)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0) 9m54.216216684s ago: executing program 9 (id=2609): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000001cb, 0x40c0004) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x3b, &(0x7f00000003c0)=ANY=[], 0x10) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x2}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r4, 0x29, 0x6, 0x0, 0x0) 9m49.190773303s ago: executing program 9 (id=2615): socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$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") syz_mount_image$fuse(0x0, &(0x7f0000000100)='./bus\x00', 0x20020, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) 9m46.027980038s ago: executing program 9 (id=2618): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1) 9m32.607958945s ago: executing program 6 (id=2640): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m29.964213548s ago: executing program 38 (id=2640): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x3, 0x10, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e86c0d85ff9782762f0800", 0x0, 0x1300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 9m29.74212223s ago: executing program 39 (id=2618): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/57, 0x39}], 0x1) 9m6.209066423s ago: executing program 0 (id=2680): r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socket$inet_udp(0x2, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) syz_kvm_add_vcpu$x86(r3, &(0x7f00000000c0)={0x0, 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r5, 0x2f000000}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) 9m5.323364946s ago: executing program 0 (id=2681): syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e39352c726f6469722c696f636861727365743d61736369692c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c696f636861727365743d757466382c73686f72746e616d653d77696e39352c6e6f6e756d7461696c3d302c73686f72746e616d653d77696e39352c757365667265652c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c6e6f6e756d7461696c3d302c646973636172642c6e6e6f6e756d7461696c3d312c636f6465706167653d3836352c6e6f6e756d7461696c3d302c726f6469722c696f636861727365743d6d616363656c7469632c007245cf8de2a0bc8cfbdaa6291f160b2ede625a74d7819e988390f3b3404510d636167e840be1cdfac6e3275491cbbe42f7c58f69fe34b13dc4e0cb6e54eff4677af157ef2df305e220fdf07d0d56ce3be57aec73f45f893b89e4042e56e2252bb74f960196b9f94c146c3ed719de54258de328f3fd851e8934622f6e664e14045275ea97818b97507088c3e0699e7ebb39b2c253dee90ff26c3726d26ffd29c3f9578154a733014130e30b819baceb93abdb480bcfec53fb00f88c1381589ca463cc86304eac2383fd2004afbec6caa5d3290176e76430a57a54a1cb82922098dec0520e9c20cb1e3e92a829fa7b7127c0484cc992a3393f3636a00dc252f91c3b9f431849efbe28421760b5adb5e32f8f1b1a212ba9ce"], 0x1, 0x373, &(0x7f0000000340)="$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") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000008000000000000000000000200000000070000000000000803000000000000000000000d00000000008c9d00305f2e2e"], 0x0, 0x44}, 0x28) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) ioctl$TUNSETLINK(r1, 0x400454cd, 0x20) r2 = syz_open_procfs(0x0, 0x0) renameat2(r2, 0x0, r2, 0x0, 0x5) mkdirat(r0, 0x0, 0x14d) r3 = socket(0x10, 0x3, 0x0) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x8, 0x0) 9m4.164675691s ago: executing program 0 (id=2685): r0 = socket$inet6(0xa, 0x3, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = userfaultfd(0x80801) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, &(0x7f0000000240)={0x0, 0x3c79}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) sendto$inet6(r1, 0x0, 0xffffff89, 0x8810, &(0x7f0000000080)={0xa, 0x4ea0, 0x4, @loopback={0xff00000000000000}, 0x2ab8f1b6}, 0x1c) sched_setaffinity(0x0, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r1}, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0x1000, 0x4) sendmmsg$inet6(r0, &(0x7f0000004580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x28}}], 0x1, 0x0) 9m1.07816837s ago: executing program 0 (id=2686): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000008c0)='./file0\x00', 0x1008490, &(0x7f0000000a40)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000a80)="$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") pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000004380), 0x181c800, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 9m0.2497798s ago: executing program 0 (id=2689): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/fscaps', 0x0, 0x49) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) 8m56.437563478s ago: executing program 0 (id=2694): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000002a80)="$eJzs3AuYjtX6MPB1r7UexjTpbZLDsO51P7xpsEyS5JCQQ5IkSZJTQtIkSUJiyClpSEKOk+QwhOQwjUnjfD7knDTZ0iRJSEiyvku7/2fvr713//3V9/m+Pffvuhbrnue97/d+3nuueZ/nva6Zb3qOqteifu1mRCT+EPjrfylCiBghxDAhxDVCiEAIUSm+Uvyl4wUUpPyxJ2F/rgfTr3QH7Eri+edtPP+8jeeft/H88zaef97G88/beP55G8+fsbxs+5xi1/LKu+sKf/7v4Y89K/tD+P3/P0hu+clfbCx/fa9/I4Xnn7fx/PM2nn/exvPP23j+eRvP/z9frX9xjOeft/H8GcvLrvTnz/8frZhfX7Ir3cefuq7wtx9jjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMsTzinL9MCyH+a3+l+2KMMcYYY4wxxtifx+e/0h0wxhhjjDHGGGPs/zwQUiihRSDyifwiRhQQseIqESeuFgXFNSIirhXx4jpRSFwvCosioqgoJhJEcVFCGIHCChKhKClKiai4QZQWN4pEUUaUFeWEE+VFkrhJVBA3i4riFlFJ3Coqi9tEFVFVVBPVxe2ihrhD1BS1RG1xp6gj6op6or64SzQQd4uG4h7RSNwrGov7RBNxv2gqHhDNxIOiuXhItBAPi5biEdFKtBZtRFvR7n8r/wXRV7wo+on+IkUMEAPFS2KQGCyGiKFimHhZDBeviBHiVZEqRopR4jUxWrwuxog3xFgxTowXb4oJYqKYJCaLKWKqSBNviWnibTFdvCNmiJlilpgt0sUcMVe8K+aJ+WKBeE8sFO+LRWKxWCKWigzxgcgUy0SW+FAsFx+JbLFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxHbxsdghdopdYrfYI/aKfeITsV98Kg6Iz0SO+PzfzD/7v+T3AgECJEjQoCEf5IMYiIFYiIU4iIOCUBAiEIF4iIdCUAgKQ2EoCkUhARKgBJQABAQCgpJQEqIQhdJQGhIhEcpCWXDgIAmSoALcDBWhIlSCSlAZKkMVqApVoTpUhxpQA2pCTagNtaEO1IF6UA/ugrvgbmgIDaERNILG0BiaQBNoCk2hGTSD5tAcWkALaAktoRW0gjbQBtpBO2gP7aEDdIBO0Ak6Q2foAl0gGZKhK3SFbtANukN36AE9oCf0hF7QG3rDC/ACvAgvQn+oIwfAQBgIg2AQDIGhMBRehuHwCrwCr0IqjIRR8Bq8Bq/DGDgDY2EcjIfxUENOhEkwGUhOhTRIg2kwDabDdJgBM2EmzIZ0mANzYS7Mg/kwH96DhfD+ufdhMSyGpZABGZAJyyALsmA5nIVsWAErYRWshjWwGtbBelgHG2ETbIQtsAW2wTb4GD6GnbATdsNu2At74RP4BD6FTyEVciAHDsJBOASH4DAchlzIhSNwBI7CUTgGx+A4HIcTcBJOwUk4DafhDJyFc3AOzsN5uADPJXzVfG+ZDalCXqKllvlkPhkjY2SsjJVxMk4WlAVlREZkvIyXhWQhWVgWlkVlUZkgE2QJWUKiREkylCVlSRmVUVlalpaJMlGWlWWlk04mySRZQVaQFWVFWUneKivL22QVWVV2dNVldVlDdnI1ZS1ZW9aWdWRdWU/Wl/VlA9lANpQNZSPZSDaWjWUTeb9sKgfAEHhQXppMCzkSWspR0Eq2lm1kW/k6PCrbyzHQQXaUneTjchyMhS6yvUuWT8muchJ0k8/IyfCs7CGnQk/5vOwle8s+8gXZV3Zw/WR/OQMGyIFyNgySg+UQOVTOg7ry0sTqyVdlqhwpR8nX5FJ4XY6Rb8ixcpwcL9+UE+REOUlOllPkVJkm35LT5NtyunxHzpAz5Sw5W6bLOXKufFfOk/PlAvmeXCjfl4vkYrlELpUZ8gOZKZfJLPmhXC4/ktlyhVwpV8nVco1cK9fJ9XKD3Cg3yc1yi9wqt8nt8mO5Q+6Uu+RuuUfulfvkJ3K//FQekJ/JHPm5PCj/Ig/JL+Rh+aXMlV/JI/JreVR+I4/Jb+Vx+Z08IU/KU/J7eVr+IM/Is/Kc/FGelz/JC/JneVF6KRQoqZTSKlD5VH4VowqoWHWVilNXq4LqGhVR16p4dZ0qpK5XhVURVVQVUwmquCqhjEJlFalQlVSlVFTdoEqrG1WiKqPKqnLKqfIqSd2kKqibVUV1i6qkblWV1W2qiqqqqqnq6nZVQ92haqpaqra6U9VRdVU9VV/dpRqou1VDdY9qpO5VjdV9qom6XzVVD6hm6kHVXD2kWqiHVUv1iGqlWqs2qq1qpx5V7dVjqoPqqDqpx1Vn9YTqop5Uyeop1VU9rbqpZ1R39azqoZ5TPdXzqpfqrfqon9VF5VU/1V+lqAFqoHpJDVKD1RA1VA1TL6vh6hU1Qr2qUtVINUq9pkar19UY9YYaq8ap8epNNUFNVJPUZDVFTVVp6i01Tb2tpqt31Aw1U81Ss1W6mqOG/FppwX8j/+1/kD/il2ffprarj9UOtVPtUrvVHrVX7VP71H61Xx1QB1SOylEH1UF1SB1Sh9Vhlaty1RF1RB1VR9UxdUwdV8fVCXVS/ai+V6fVD+qMOqvOqh/VeXVeXfj1NRAatNRKax3ofDq/jtEFdKy+Ssfpq3VBfY2O6Gt1vL5OF9LX68K6iC6qi+kEXVyX0Eajtpp0qEvqUjqqb9Cl9Y06UZfRZXU57XR5naRv+sP5v9dfO91Ot9ftdQfdQXfSnXRn3Vl30V10sk7WXXVX3U130911d91D99A9dU/dS/fSfXQf3Vf31f10P52iU/RA/ZIepAfrIXqoHqZf1sP1cD1Cj9CpOlWP0qP0aD1aj9Fj9Fg9Vo/X4/UEPUFP0pP0FD1Fp+k0PU1P09P1dD1Dz9Cz9CydrtP1XD1Xz9Pz9AK9QC/UC/UivUgv0Ut0hs7QmTpTZ+ksvVwv19l6hV6hV+lVeo1eo9fpdXqD3qA36U16i96is/V2vV3v0Dv0Lr1L79F79D69T+/X+/UBfUDn6Bx9UB/Uh/QhfVgf1rk6Vx/RR/RRfVQf08f0cX1cn9An9Cl9Sp/Wp/UZfUaf0+f0eX1eX9AX9EV98dJlXyADGehAB/mCfEFMEBPEBrFBXBAXFAwKBpEgEsQH8UGh4PqgcFAkKBoUCxKC4kGJwAQY2ICCMCgZlAqiwQ1B6eDGIDEoE5QNygUuKB8kBTcFFYKbg4rBLUGl4NagcnBbUCWoGlQLqge3BzWCO4KaQa2gdnBnUCeoG9QL6gdVJ/71mvSeoFFwb9A4uC9oEtwfNA0eCJoFDwbNg4eCFsHDQcvgkaBV0DpoE7QN2v1b9e8KGgR3Bw2Df1bf+zNFHnP9TH+TYgaYgeYlM8gMNkPMUDPMvGyGm1fMCPOqSTUjzSjzmhltXjdjzBtmrBlnxps3zQQz0Uwyk80UM9WkmbfMNPO2mW7eMTPMTDPLzDbpZo6Za94188x8s8C8Zxaa980is9gsMUtNhvnAZJplJst8aJabj0y2WWFWmlVmtVlj1pp1Zr3ZYDaaTWaz2WK2mm1mu/nY7DA7zS6z2+wxe80+84nZbz41B8xnJsd8bg6av5hD5gtz2Hxpcs1X5oj52hw135hj5ltz3HxnTpiT5pT53pw2P5gz5qw5Z340581P5oL52Vw0/tLF/aW3d9SoMR/mwxiMwViMxTiMw4JYECMYwXiMx0JYCAtjYSyKRTEBE7AElsBLCAlLYkmMYhRLY2lMxEQsi2XRocMkTMIKWAErYkWshJWwMlbGKlgFq2E1vB1vxzvwDqyFtfBOvBPrYl2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbYStsg22wHbbD9tgeO2AH7ISdsDN2xi7YBZMxGbtiV+yG3bA7dsce2AN7Yk/shb2wD/bBvtgX+2E/TMEUHIgDcRAOwiE4BIfhMByOw3EEjsBUTMVROApH42gcg2NwLI7D8fgmTsCJOAkn4xScimmYhtNwGk7H6TgDZ+AsnIXpmI5zcS7Ow3m4ABfgQlyIi3ARLsElmIEZmImZmIVZuByXYzZm40pciatxNa7Ftbge1+NG3IibcTNuxa24HbfjDtyBu3AX7sE9uA/34X7cjwfwAOZgDh7Eg3gID+FhPIy5mItH8AgexaN4DI/hcTyOJ/AEnsJTeBpP4xk8g+fwHJ7Hn/AC/owX0WOMlSLWXmXj7NW2oL3GxtgC9m/joraYTbDFbQlrbGFb5O9itNYm2jK2rC1nnS1vk+xNv4mr2Kq2mq1ub7c17B225m/iBvZu29DeYxvZe219e9ffxY3tfbaJfdg2tY/YZra1bW7b2hb2YdvSPmJb2da2jW1rO9snbBf7pE22T9mu9unfxJl2mV1vN9iNdpPdbz+15+yP9qj9xp63P9l+tr8dZl+2w+0rdoR91abakb+Jx9s37QQ70U6yk+0UO/U38Sw726bbOXaufdfOs/N/E2fYD+xCm2UX2cV2iV36S3yppyz7oV1uP7LZdoVdaVfZ1XaNXWvX/c9eV9ktdqvdZvfZT+wOu9PusrvtHrv3l/jSeRywn9kc+7k9Yr+2h+wX9rA9ZnPtV7/El87vmP3WHrff2RP2pD1lv7en7Q/2jD37y/lfOvfv7c/2ovVWEJAkRZoCykf5KYYKUCxdRXF0NRWkayhC11I8XUeF6HoqTEWoKBWjBCpOJcgQkiWikEpSKYrSDVSabqREKkNlqRw5Kk9JdBNVoJupIt1ClehWqky3URWqStWoOt1ONegOqkm1qDbdSXWoLtWj+nQXNaC7qSHdQ43oXmpM91ETup+a0gPUjB6k5vQQtaCHqSU9Qq2oNbWhttSOHqX29Bh1oI7UiR6nzvQEdaEnKZmeoq70NHWjZ6g7PUs96DnqSc9TL+pNfegF6ksvUj/qTyk0gAbSSzSIBtMQGkrD6GUaTq/QCHqVUmkkjaLXaDS9TmPoDRpL42g8vUkTaCJNosk0haZSGr1F0+htmk7v0AyaSbNoNqXTHJpL79I8mk8L6D1aSO/TIlpMS2gpZdAHlEnLKIs+pOX0EWXTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttPHtIN20i7aTXtoL+2jT2g/fUoH6DPKoc/pIP2FDtEXdJi+pFz6io7Q13SUvqFj9C0dp+/oBJ2kU/Q9naYf6AydpXP0I52nn+gC/UwXyZMIIZShCnUYhPnC/GFMWCCMDa8K48Krw4LhNWEkvDaMD68LC4XXh4XDImHRsFiYEBYPS4QmxNCGFIZhybBUGA1vCEuHN4aJYZmwbFgudGH5MCm8KawQ3hxWDG8JK4W3hpXD28IqYdXw4Xurh7eHNcI7wpphrbB2eGdYJ6wb1gvrh3eFDcK7w4bhPWGj8N6wYnhf2CS8P2waPhA2Cx8Mm4cPhS3Ch8OW4SNhq7B12CZsG7YLHw3bh4+FHcKOYafw8bBz+ETYJXwyTA6fCruGT//u8ZRwQDgwfCl8KfT+HrUkujSaEf0gmhldFs2KfhhdHv0omh1dEV0ZXRVdHV0TXRtdF10f3RDdGN0U3RzdEt0a3Rb1vn5+4cBJp5x2gcvn8rsYV8DFuqtcnLvaFXTXuIi71sW761whd70r7Iq4oq6YS3DFXQlnHDrryIWupCvlou4GV9rd6BJdGVfWlXPOlXdJrq1r59q59u4x18F1dJ3c4+5x94R7wj3pnnRPua7uadfNPeO6u2ddD/ece84973q53q6Pe8H1dS+6fq6/S3EpbqAb6Aa5QW6IG+KGuWFuuBvuRrgRLtWlulFulBvtRrsxbowb68a68W68m+AmuElukpviprg0l+amuWluupvuZrgZbpab5dJdupvr5rp5bp5b4Ba4hYkL3SK3yC1xS1yGy3CZLtNluSy33C132S7brXQr3Wq32q11a916t95tdBvdZrfZbXVb3Xa33e1wO9wut8vtcXvcPrfP7Xf73QF3wOW4HHfQHXSH3CF32H3pct1X7oj72h1137hj7lt33H3nTriT7pT73p12P7gz7qw75350591P7oL72V103qVF3opMi7wdmR55JzIjMjMyKzI7kh6ZE5kbeTcyLzI/siDyXmRh5P3IosjiyJLI0khG5INIZmRZJCvyYWR55KNIdmRFZGVkVWR1ZE3E++I7Ql/Sl/JRf4Mv7W/0ib6ML+vLeefL+yR/k6/gb/YV/S2+kr/VV/a3+Sq+qq/mH/GtfGvfxrf17fyjvr1/zHfwHX0n/7jv7J/wXfyTPtk/5bv6p303/4zv7p/1Pfxzvqd/3vfyvX0f/4Lv61/0/Xx/n+IH+IH+JT/ID/ZD/FA/zL/sh/tX/Aj/qk/1I/0o/5of7V/3Y/wbfqwf58f7N/0EP9FP8pP9FD/Vp/m3/DT/tp/u3/Ez/Ew/y8/26X6On+vf9fP8fL/Av+cX+vf9Ir/YL/FLfYb/wGf6ZT7Lf+iX+498tl/hV/pVfrVf49f6dX693+A3+k1+s9/it/ptfrv/2O/wO/0uv9vv8Xv9Pv+J3+8/9Qf8Zz7Hf+4P+r/4Q/4Lf9h/6XP9V/6I/9of9d/4Y/5bf9x/50/4k/6U/96f9j/4M/6sP+d/9Of9T/6C/9lf5N9ZY4wxxhj7b9la+F8fH/APviZ/XZcMFEJcvbNY7t8eV0KIzb/WHSwTOkeEEE/17/ngf606dVJSUn59bLYSQanFQojI5fx84nK84pd/k0VHUeEf9jdY9j5Pv1M/eqsQsX+TEyMuxytEJ/HEL/Vv/if1H318fGbl8Fz8v6i/WIjEUpdzCojL8eX6Ff9J/SLtf6f/Al+kCdHhb3LixOX4cv0k8Zh4WiT/3SMZY4wxxhhjjLG/Giyrdf+9++dL9+cJ+nJOfnE5vnz/+Y/vzxljjDHGGGOMMXblPdu7z5OPJid37M6bP7wB+H+iDd7w5k/YXOmfTIwxxhhjjLE/2+WL/ivdCWOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxlnf93/hzYlf6HBljjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLEr7X8EAAD//7MxObU=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='.\x00', 0x4000423) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0xf0, 0x3ed, 0x2, 0x70bd2c, 0x25dfdbfd, "863711c9fe7c736c8976f1d65128690fde29f3311a2bcf9619006cdeae0fab7c00487eb134e6ced77e9496173692e5d82c8cf7c61d432a6eff1496de610abaddaf5a1d445b1b7066b4f29b5398f9087efa39e98034b8f4a8e255549e722b6594ff3aebcd58f9ab8bd8beae859028ba01f47dfea2be15b3ed4aab4fb479d8ca095fcf6a292717e571bd64cd7f7bf3c20ccf39464f7f50fd9735b1a5be5dc020d6d9beafca8d99f28a7a9ad8471d79f1907f3e2f417749078426bde5ad5a60586f2f0510af316c5920c1c30ce3761a0e4733339460fdcb5ca3914efc6dad3bd7dc", ["", ""]}, 0xf0}, 0x1, 0x0, 0x0, 0x84}, 0x800) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x0, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0x2, 0xc000, 0x20000000, 0x0, 0x0, 0x3ff, 0xb101}}, {0x0, 0x1e}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 8m54.328988461s ago: executing program 40 (id=2694): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/tcp6\x00') syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x2000085c, &(0x7f0000000380)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRES16, @ANYRESOCT=0x0, @ANYBLOB="dd812246da16e3f3744109adecbf790b293943c866e410686871297a5f0d7ae82908f6ba144c43d8299b393f0bf8d5ce774794f45e41d2baac5bb21da7bfa7953e1b99f77929f7a4f3069219c59678f7fd86f2371cd5238783f37d25cfb853f3330632288112a663e0547534d398a77ef57503cb1b1b2548726354308bb8723bedc0c1997f043d9ff1745bc4f980882eb24cce51c0f9e6cfac5596d0013f775910ea2f18d46216b9ecd3508b347cf690c1db6bd77bff73e719be2d22b0bc374048d493bb3262859982a98b7f523ea4e8044ab6de9cdbee0cc9540eb8f06aa7b239e62bc6fab71a2ca0ff472263f9fcca9c45", @ANYRES8=0x0, @ANYRESHEX, @ANYRES32, @ANYRESHEX], 0xc1, 0x151a, &(0x7f0000002a80)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = inotify_init() inotify_add_watch(r4, &(0x7f00000001c0)='.\x00', 0x4000423) r5 = open(&(0x7f0000000040)='./file1\x00', 0x80242, 0x0) sendmsg$AUDIT_USER(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0xf0, 0x3ed, 0x2, 0x70bd2c, 0x25dfdbfd, "863711c9fe7c736c8976f1d65128690fde29f3311a2bcf9619006cdeae0fab7c00487eb134e6ced77e9496173692e5d82c8cf7c61d432a6eff1496de610abaddaf5a1d445b1b7066b4f29b5398f9087efa39e98034b8f4a8e255549e722b6594ff3aebcd58f9ab8bd8beae859028ba01f47dfea2be15b3ed4aab4fb479d8ca095fcf6a292717e571bd64cd7f7bf3c20ccf39464f7f50fd9735b1a5be5dc020d6d9beafca8d99f28a7a9ad8471d79f1907f3e2f417749078426bde5ad5a60586f2f0510af316c5920c1c30ce3761a0e4733339460fdcb5ca3914efc6dad3bd7dc", ["", ""]}, 0xf0}, 0x1, 0x0, 0x0, 0x84}, 0x800) write$FUSE_CREATE_OPEN(r5, &(0x7f0000000180)={0xa0, 0xfffffffffffffff5, 0x0, {{0x3, 0x1, 0x5, 0xa, 0x3, 0x1, {0x0, 0x17d, 0x8, 0x5, 0x100, 0x7cf4, 0x9, 0x7ffffffd, 0x2, 0xc000, 0x20000000, 0x0, 0x0, 0x3ff, 0xb101}}, {0x0, 0x1e}}}, 0xa0) sendfile(r5, r5, &(0x7f0000000080)=0x2, 0x7f03) 7m49.4063931s ago: executing program 8 (id=2830): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)={0x14, r1, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x818}, 0x20000004) 7m48.34684607s ago: executing program 8 (id=2833): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000302000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) 7m35.492197101s ago: executing program 8 (id=2867): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[]) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) removexattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="73656375726974792e657468746f6f6c0086c34e3850ea4f"]) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) syz_fuse_handle_req(r0, &(0x7f00000007c0)="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", 0x2000, &(0x7f0000000700)={&(0x7f0000000040)={0x50, 0xffffffffffffff8c, 0x0, {0x7, 0x28, 0x3b, 0x1333c135, 0xfffe, 0x4, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0xb2}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m35.397310444s ago: executing program 3 (id=2868): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000500), 0x2) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000580)={0x0, 0x1, [{0xffffffffffffffff, 0x0, 0xfffffffffffff000, 0x1000}]}) 7m34.932305523s ago: executing program 3 (id=2870): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x900, 0x12) 7m34.875267079s ago: executing program 8 (id=2871): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x5, 0x4) sendto$inet(r0, &(0x7f0000000900)='.U/]', 0x4, 0x12, 0x0, 0x0) 7m34.076736975s ago: executing program 8 (id=2874): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) userfaultfd(0x80001) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 7m33.577035923s ago: executing program 3 (id=2875): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x800000, &(0x7f0000000600)={[{@numtail}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x90003}}, {@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_win95}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@uni_xlate}, {@uni_xlate}, {@shortname_win95}, {@utf8no}, {@utf8no}]}, 0x25, 0x35b, &(0x7f0000000200)="$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") sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[], 0xfffffffffffffd2b}, 0x1, 0x0, 0x0, 0x80640d0}, 0x200488c9) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000180)={0x1, 0x8003}, 0x4) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m32.954418826s ago: executing program 8 (id=2877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000302000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) 7m31.544113763s ago: executing program 3 (id=2881): r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7fffffffffffffff, 0x2) ioctl$vim2m_VIDIOC_DQBUF(r0, 0xc0585611, 0x0) 7m30.523230827s ago: executing program 3 (id=2884): r0 = userfaultfd(0x80801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000e, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/61, 0x3d}], 0x1) 7m28.453771733s ago: executing program 3 (id=2888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x109800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x1fb2c0, 0x50) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000300)='0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r5, r5, 0x0, 0x4800000009) 7m15.876630957s ago: executing program 41 (id=2877): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000302000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) 7m13.125041307s ago: executing program 42 (id=2888): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x1000006, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x47f9, 0x0, 0x0, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, 0x0, 0x109800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x1fb2c0, 0x50) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)='v2to_da_alloc', 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000300)='0\x00', 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc}) ioctl$IOMMU_IOAS_MAP(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, 0x0) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$random(0xffffffffffffff9c, &(0x7f00000003c0), 0x40202, 0x0) sendfile(r5, r5, 0x0, 0x4800000009) 1m12.539648367s ago: executing program 5 (id=4360): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000940)={[{@jqfmt_vfsold}, {@debug}, {@noblock_validity}, {@noload}, {@nombcache}, {@bh}, {@min_batch_time={'min_batch_time', 0x3d, 0x2}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}]}, 0xfa, 0x485, &(0x7f0000000a00)="$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") munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) getdents64(r0, &(0x7f0000000f40)=""/4110, 0x100e) 1m11.586885003s ago: executing program 5 (id=4364): syz_io_uring_setup(0x3a, &(0x7f0000000040)={0x0, 0x0, 0x10100, 0x40000000, 0xc9}, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x83fb, 0x4, 0x29, 0x4, 0xfffffffd, 0xcc7, 0x8, 0x8d, 0x7fff, 0x0, 0x7, 0x1, 0x1, 0x1, 0x8026, 0x80, 0x6, 0x1a449, 0x9, 0x40000003, 0x89, 0xfffff443, 0x0, 0x20001e5c, 0x8, 0xffc00004, 0x3c, 0x8, 0x100016, 0xf7fffff7, 0xfffffff8]}) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="043e"], 0xf8) 1m11.027382712s ago: executing program 5 (id=4369): openat$tun(0xffffffffffffff9c, 0x0, 0x200, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r2}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 1m10.434384203s ago: executing program 5 (id=4374): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000019c0)={0x3, 0x4, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000001980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0xe, 0x0, &(0x7f0000000040)="9a0ed80000ffff9b4fa004642f9f", 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m9.845725229s ago: executing program 5 (id=4378): openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 1m9.506343274s ago: executing program 5 (id=4380): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000780)="$eJzs3U9oHFUcB/Df7B/jJotEvQjiHxARDYR4E7zEi0JAQhARVIiIeJJEiAnesp68eNCzSkDwEkpvTXssvYReWgo9pW0O6aXQhh4aemgPW3Znt2ySDW33b9n5fGCYmbz35r0J832zLMxsAJk1GRGzEZGPiKmIKEZE0lrh7XSZbOxulLYXI6rVL+4m9XrpfqrZbiIiKhHxUUShWba29c3e/Z3P3vtjtfju/1tflwZ1fq3293Y/P/h3/vczcx+uXb56ez6J2Sg3ylrPo5eSNn8rJBGv9KOz50RSGPYIeBoLv56+Vsv9qxHxTj3/xcg1IvvnygsXivHBPye1/evOldcHOVag96rVYu0eWKkCmZOLiHIkuemISLdzuenp9DP89fx47qfllV+mflxeXfph2DMV0CvlSHY/PTd2duJI/m/l0/wDo6scsfvlwuaN2vZBftijAfqm9dv2N9JVLf9T362/H/IPmSP/kF3yD9kl/zACOsyu/EN2dZP/F/s0JmAw3P9hhBWbG5W2xfIP2SX/MKL+a/fU6WHyD9nVmn8AIFuqY8N+AhkYlmHPPwAAAAAAAAAAAAAAAAAAwHEbpe3F5jKoPi/+HbH/SUQU2vWfr/8ecfNt4+P3klq1x5K0WVe+favLA3TpVM+evi511Oqlm73qvzOX3uzPcX87vHviP2d9KaJSqzxTKBy//pLG9de5l59QXvy+yw6e0dG3An781WD7P+rh5nD7n9uJOF+bf2bazT+5eK2+bj//lFtfsdyhnx90eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG5lEAAAD//4oibec=") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x66, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 53.147565537s ago: executing program 43 (id=4380): syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10040, &(0x7f0000000380), 0xfd, 0x269, &(0x7f0000000780)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r3, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @mcast2}, 0x50) syz_emit_ethernet(0x66, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffff"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) 14.868633608s ago: executing program 4 (id=4495): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a000000040001"], 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a00000005000100060000001400078008"], 0x58}}, 0x20000000) 14.092970621s ago: executing program 4 (id=4499): mount$fuseblk(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYRESOCT=0x0]) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000280)={0x3, 0x0, 0x0, 0x0, 0x7fffffff}) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) 12.113122932s ago: executing program 7 (id=4503): sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f0000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = syz_io_uring_setup(0x126b, &(0x7f0000000500)={0x0, 0x72de, 0x0, 0x0, 0x3a8}, &(0x7f0000000140), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r4, 0x2, &(0x7f0000002d40)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE(r4, 0x6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)=[0xffffffffffffffff]}, 0x1) syz_open_procfs(0xffffffffffffffff, 0x0) 9.228993569s ago: executing program 7 (id=4504): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000140)={0x3, &(0x7f0000000000)=[{0x20, 0x10, 0x4, 0xfffff010}, {0x30, 0x0, 0xfd, 0x5ae9}, {0x6, 0x0, 0x7, 0x2}]}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0xffffffffffffff97, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) sendmmsg$inet(r0, &(0x7f0000002c40), 0x4000000000002dd, 0x0) 8.691276601s ago: executing program 1 (id=4505): bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES32=r3], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="280000002100050125bd7000000000000200000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="b7836f1c1b5be19805e133cc73fc5944bcec8171ae276f8474276c3617"], 0x28}}, 0x0) 8.615133083s ago: executing program 2 (id=4506): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000000c0)={[{0x3f, 0x8000, 0x9, 0x9, 0xfc, 0xa, 0x3, 0x8, 0x8, 0x4, 0xb, 0x2, 0x1}, {0xc022, 0x2, 0xd, 0x5, 0x80, 0x7, 0x80, 0x80, 0xff, 0x3, 0xa5, 0x6, 0x40}, {0xb51ee0, 0xa, 0x72, 0x80, 0x77, 0x77, 0x6, 0x9, 0xf6, 0x6, 0xd, 0x8, 0x5}]}) 8.42544685s ago: executing program 4 (id=4507): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004"], 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000"], 0x58}}, 0x20000000) 8.366927261s ago: executing program 6 (id=4414): symlink(&(0x7f0000000440)='./cgroup.cpu/cgroup.procs\x00', &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x13) 6.915115012s ago: executing program 2 (id=4508): r0 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000140)={0x0, 0x0}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000f00)={0x4, 0x0, [{0x7, 0x514, 0x2, 0xe3, 0x800000, 0x22, 0x5}, {0xa, 0x2a8, 0x6, 0x7, 0x9, 0x1, 0x1}, {0x80000007, 0x67e0, 0x4, 0x1, 0x7, 0x3, 0x8}, {0x1, 0x7, 0x0, 0x6, 0x7, 0xdebe00}]}) 6.699712572s ago: executing program 7 (id=4509): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a000000040001"], 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a00000005000100060000001400078008"], 0x58}}, 0x20000000) 6.290450259s ago: executing program 6 (id=4510): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd60dfa5ef000832"], 0x0) 6.158073704s ago: executing program 1 (id=4511): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r4}, &(0x7f0000000280), &(0x7f0000000240)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 5.9412819s ago: executing program 2 (id=4512): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 5.832560807s ago: executing program 7 (id=4513): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000003200)='./file1\x00', 0x2204206, &(0x7f0000003240)=ANY=[], 0x2, 0x334, &(0x7f0000000880)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) getsockname(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) dup(r2) unshare(0x24020400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='blkio.bfq.io_serviced\x00', 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r4 = dup(0xffffffffffffffff) r5 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000440)=ANY=[@ANYBLOB="080086dd0001110004000000a60c6eec00be00442ffffe8000000000000000000000000000aaff02000000000000000000000000000104", @ANYRESDEC], 0xfdef) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000080}, 0x2000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x7, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2c}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80) close_range(r6, r6, 0x2) 5.692376503s ago: executing program 4 (id=4514): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000040000000c0000000b"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.510122616s ago: executing program 6 (id=4515): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4008, &(0x7f0000000000)=ANY=[@ANYBLOB="4a1784f60c67b47889f1ce", @ANYRESOCT], 0x1, 0x5510, &(0x7f00000001c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrquIaZQ8RUfCgF7vd1tbexIMSPHjzKoR0W2O3/mhzsKWIuXiTnHsRPYoISrz1f+i5hV7qrYcFI3hW5ld28gNcNc6syecDb953H8O875uFkO+8SQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKhM3pzGSXboFXFcjt3bvrWa9ff39Jk7mw+WspbF0SyTLRxi4vPm130jz9c/RP0mkwEAAOC4Sqr6PoTwMN1azvq4l9f/aXVOVvN/82QRV/X83rq/6qvaP2s///To2Z2JesU82UUvrY1Hp/en0vnvVjnfnvrLMzr5nc+fvST5FxK/s/HMJM3vZ/TV3btvdfPwRBPZAgD/xKmqL4Pq96GsH7aZGADHRqdWeFf1f9JrNycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAJkw2wuNVHIUQljrTOHN/+9bqQf2dzQdLVTt/+/Zm+GJ6zewSaQjh0tp4dLrR1cy36zduXlkZj0fXmg9eCCEUI+8lTc/+Rrn8K+/PcHIIrdwfwSEFcfllz0s+/4+gxR9KAAAcSWnZsrr+Ybq1nI1FiyH88e3u+v/lWhxmrP8ffXD+Xn2uev0/bGyF82+wfvWTwfUbN19du7pyeXR59NFrZ4avD89eOHfuwiB/VjLwxAQAAIB/p1u2ev0fL+7f/z9Zi8OM9f+nXw8/r8+VqP8PNN30azsTAACA4+3pF3//LTpgPOp2w2cr6+vXhsVx5/OZ4thCqn/bibLV6/9kse2sAAAAgCZMNqJd+/8Xa3GYcf//ie+e+6F+zSSEsFDu/59a/Xh8sbnlzLUm/py47TUCAADQroWy1ff/0/z9/3jnlYc4hPDKS0Vc/hvAmer/5O0vv6/PVX///2xzS5xLcb+4H3nfD6HTbzsjAAAAjrLHypYV+7+kW8sf/njy3a73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//yqfPww=") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x8800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x3dd}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4138ae84, &(0x7f00000004c0)=@x86={0x6, 0xa, 0x7, 0x0, 0x3, 0xad, 0xce, 0x1c, 0x89, 0xa4, 0x27, 0x8, 0x0, 0x8000, 0xb, 0x2, 0x8, 0x2, 0x1, '\x00', 0x19, 0x3fb}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x5, 0x0, 0x7, 0x0, 0xdc, 0x4, 0x6, 0x7, 0x7, 0x9, 0x3, 0x9, 0x0, 0x7, 0x100, 0xf7, 0x5, 0xf4, 0xc, '\x00', 0xfe}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.509572702s ago: executing program 2 (id=4516): sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0) socket$inet(0xa, 0x801, 0x84) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000000c0)="440f20c03507000000440f22c067420f8f04000000c443ad68b60080000095c4828947b600000000b99d090000b82f624a48baf4e055500f30263636f3430fc73636f2360fa5a10050aa37f39066b817018ec8c4c1795a5100", 0x59}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 5.50514598s ago: executing program 1 (id=4517): r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_CLAIM_PORT(r0, 0x80045518, &(0x7f0000000180)=0xa) 2.62543093s ago: executing program 7 (id=4518): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000100)=0x8, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x800, 0x2, 0x4}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000600)="05", 0x5b6, 0x2400d8d5, &(0x7f0000000300)={0x11, 0x88a8, r3, 0x1, 0x85, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}}, 0x14) 2.398674251s ago: executing program 2 (id=4519): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)=0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf39, 0x0) splice(r2, 0x0, r5, 0x0, 0x4, 0x4) write$binfmt_elf32(r3, &(0x7f0000000980)={{0x7f, 0x45, 0x4c, 0x46, 0xe0, 0x9, 0x0, 0x0, 0x101, 0x3, 0x3, 0xc, 0x1e7, 0x38, 0x3cc, 0x5, 0x200, 0x20, 0x1, 0x401, 0x3, 0x24}, [{0xfb9f9787c765f93, 0x7fffffff, 0x7, 0xa6e7, 0x8, 0x2, 0x7, 0xffff}]}, 0x58) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) 2.359898239s ago: executing program 1 (id=4520): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000100)={[{@grpid}, {@auto_da_alloc}, {@lazytime}, {@nombcache}]}, 0x7, 0x4d4, &(0x7f0000000680)="$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") setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x46942, 0x0) pwrite64(r0, &(0x7f0000000280)='l', 0x1, 0x404142ffc) 1.57546878s ago: executing program 6 (id=4521): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="01000000070000000080000001"], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000005c0), 0x0}, 0x20) 1.322956184s ago: executing program 7 (id=4522): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000440)={0x2c, &(0x7f0000000300)={0x40, 0x1a, 0x4, {0x4, 0x21, "ccc0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.172245905s ago: executing program 4 (id=4523): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a000000040001"], 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a32000000000500040000000000050005000a00000005000100060000001400078008"], 0x58}}, 0x20000000) 918.519501ms ago: executing program 1 (id=4524): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000000002010400000000000000000a00000004"], 0x84}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x14, 0x36, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="58000000020605000000000000000000000000030c000300686173683a6970000900020073797a320000"], 0x58}}, 0x20000000) 848.518578ms ago: executing program 6 (id=4525): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r0, 0x0, 0x44080) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r4, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000180)={0x14, r5, 0x1, 0x0, 0x0, {0x2d}}, 0x14}}, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23) 832.249992ms ago: executing program 2 (id=4526): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f00000000c0)=0x4, 0x4) sendto$inet(r0, 0x0, 0x0, 0x200007fd, 0x0, 0x0) 463.616378ms ago: executing program 4 (id=4527): bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES32], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x4c, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000840)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r3, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) 0s ago: executing program 1 (id=4528): bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB], 0x48) socket(0x41503864490ca358, 0x6, 0xffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0xdedb) r3 = getpid() r4 = syz_pidfd_open(r3, 0x0) setns(r4, 0x24020000) syz_open_procfs(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000009c0), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) kernel console output (not intermixed with test programs): as invalid maxpacket 59391, setting to 1024 [ 1165.027595][ T8831] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1165.045772][ T8831] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1165.229373][ T8831] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1165.270204][ T8831] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1165.308353][ T8831] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1165.320587][ T8831] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1165.333758][ T8831] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1165.349623][ T8831] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1165.362908][ T8831] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1165.376633][ T8831] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1165.573005][ T8831] usb 4-1: string descriptor 0 read error: -22 [ 1165.580767][ T8831] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1165.591092][ T8831] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.611496][T15107] loop8: detected capacity change from 0 to 256 [ 1165.721614][T15107] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1165.787628][ T8831] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1165.931137][T15082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1165.996045][T15082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.104258][T15082] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1166.201941][T15082] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1166.237943][ T8831] usb 4-1: USB disconnect, device number 21 [ 1166.607833][T15122] loop8: detected capacity change from 0 to 16 [ 1166.638681][T15122] erofs (device loop8): mounted with root inode @ nid 36. [ 1168.089008][T15132] loop3: detected capacity change from 0 to 128 [ 1168.452424][T15132] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1168.526274][T15132] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1169.648751][ T5846] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1169.865441][ T5846] usb 8-1: Using ep0 maxpacket: 16 [ 1169.901240][T14783] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1169.926506][ T5846] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1169.975472][ T5846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1169.985644][ T5846] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1169.998807][ T5846] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1170.008259][ T5846] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1170.074547][ T5846] usb 8-1: config 0 descriptor?? [ 1170.075137][ T8831] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1170.267900][ T5846] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1170.345215][ T8831] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1170.354261][ T8831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1170.369300][ T8831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1170.585240][ T8831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1170.651064][ T8831] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1170.660594][ T8831] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1170.673445][ T8831] usb 5-1: Product: syz [ 1170.679443][ T8831] usb 5-1: Manufacturer: syz [ 1170.789706][ T8831] cdc_wdm 5-1:1.0: skipping garbage [ 1170.795249][ T8831] cdc_wdm 5-1:1.0: skipping garbage [ 1170.834682][ T8831] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1170.841255][ T8831] cdc_wdm 5-1:1.0: Unknown control protocol [ 1171.031777][ T5846] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1171.063100][ T8831] usb 5-1: USB disconnect, device number 31 [ 1171.244679][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.255620][ T5846] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1171.264812][ T5846] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1171.274224][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.372573][ T5846] usb 4-1: config 0 descriptor?? [ 1171.607916][ T8831] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1171.821366][ T8831] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1171.830522][ T8831] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.846002][ T8831] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1171.929283][ T8831] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1171.987078][ T8831] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1172.001140][ T8831] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1172.010852][ T8831] usb 5-1: Product: syz [ 1172.015421][ T8831] usb 5-1: Manufacturer: syz [ 1172.132196][ T8831] cdc_wdm 5-1:1.0: skipping garbage [ 1172.137932][ T8831] cdc_wdm 5-1:1.0: skipping garbage [ 1172.173334][ T8831] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 1172.179582][ T8831] cdc_wdm 5-1:1.0: Unknown control protocol [ 1172.339770][ T8831] usb 5-1: USB disconnect, device number 32 [ 1172.390822][T12969] usb 8-1: USB disconnect, device number 59 [ 1172.557097][ T5839] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1172.736103][ T5839] usb 9-1: Using ep0 maxpacket: 8 [ 1172.771972][ T5839] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1172.833231][ T5839] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1172.852762][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1172.862175][T15183] loop7: detected capacity change from 0 to 512 [ 1172.865053][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1172.882761][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1172.894381][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1172.906216][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1172.924668][ T5839] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1172.954337][T15183] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1172.972085][ T5839] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1172.980730][ T5839] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1173.004744][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1173.016711][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1173.033247][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1173.046401][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1173.058426][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1173.072231][ T5839] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1173.158442][T15183] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1173.211783][T15190] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 217: padding at end of block bitmap is not set [ 1173.218045][ T5839] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 1173.266501][T15183] ext4 filesystem being mounted at /447/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1173.303264][ T5839] usb 9-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1173.351732][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1173.363630][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1173.376026][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1173.387663][ T5839] usb 9-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1173.399524][ T5839] usb 9-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1173.413867][ T5839] usb 9-1: config 168 interface 0 has no altsetting 0 [ 1173.582511][ T5839] usb 9-1: string descriptor 0 read error: -22 [ 1173.590037][ T5839] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1173.599789][ T5839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1173.678068][T15198] loop1: detected capacity change from 0 to 16 [ 1173.691843][T15198] erofs (device loop1): mounted with root inode @ nid 36. [ 1173.732252][ T5839] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1173.921738][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1173.983205][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.021286][T12969] usb 4-1: USB disconnect, device number 22 [ 1174.151788][T15175] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1174.184258][ T8012] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.217154][T15175] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1174.481050][ T5839] usb 9-1: USB disconnect, device number 63 [ 1175.355392][ T5839] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1175.377353][T12969] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1175.575199][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 1175.590414][T12969] usb 8-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 1175.616840][ T5839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1175.620094][ T5846] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1175.633901][ T5839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1175.637653][T12969] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1175.659208][T12969] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1175.668522][T12969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.687010][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1175.699113][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1175.711363][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1175.723341][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1175.735151][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1175.749007][ T5839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1175.842312][T12969] usb 8-1: config 0 descriptor?? [ 1175.872250][ T5839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1175.883359][T12969] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1175.897087][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 1175.911023][ T5839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1175.916617][ T5846] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1175.957016][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1175.967370][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1175.980632][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1175.980670][ T5846] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1175.980809][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1175.996119][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1176.026786][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1176.038445][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1176.044417][ T5846] usb 2-1: config 0 descriptor?? [ 1176.050233][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1176.050399][ T5839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1176.152875][ T5839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1176.182904][ T5839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1176.306603][ T5846] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1176.317249][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1176.329257][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1176.341461][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1176.352995][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1176.366683][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1176.380874][ T5839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1176.476416][ T5839] usb 5-1: string descriptor 0 read error: -22 [ 1176.490709][ T5839] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1176.504590][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1176.625501][ T5839] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1176.952225][ T5846] usb 5-1: USB disconnect, device number 33 [ 1177.595227][ T5846] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1177.643312][T15250] loop3: detected capacity change from 0 to 512 [ 1177.672616][T15250] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1177.771746][T15250] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1177.814806][ T5846] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1177.816526][T15250] ext4 filesystem being mounted at /5/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1177.825538][ T5846] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1177.825728][ T5846] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1177.858051][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.872035][ T5846] usb 9-1: config 0 descriptor?? [ 1178.268984][ T5839] usb 8-1: USB disconnect, device number 60 [ 1178.310431][T15260] loop4: detected capacity change from 0 to 16 [ 1178.352983][T15260] erofs (device loop4): mounted with root inode @ nid 36. [ 1178.578585][ T5846] usb 2-1: USB disconnect, device number 13 [ 1178.725959][T14783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1179.057019][ T5846] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 1179.340770][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1179.435260][ T5846] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1179.444609][ T5846] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1179.453062][ T5846] usb 2-1: Manufacturer: syz [ 1179.521190][ T5846] usb 2-1: config 0 descriptor?? [ 1179.571296][ T5846] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1180.117350][ T5846] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1180.295679][ T5846] usb 8-1: Using ep0 maxpacket: 8 [ 1180.421049][ T5846] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1180.429713][ T5846] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1180.450003][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1180.462277][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1180.474493][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1180.486199][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1180.500861][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1180.515525][ T5846] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1180.576842][ T5846] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1180.586240][ T5846] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1180.613927][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1180.625815][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1180.637957][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1180.649574][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1180.661341][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1180.675166][ T5846] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1180.763853][ T5839] usb 9-1: USB disconnect, device number 64 [ 1180.766937][ T5846] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 1180.829148][ T5846] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1180.865662][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1180.877450][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1180.889877][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1180.901572][ T5846] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1180.916304][ T5846] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1180.930932][ T5846] usb 8-1: config 168 interface 0 has no altsetting 0 [ 1181.195763][ T5846] usb 8-1: string descriptor 0 read error: -22 [ 1181.230995][ T5846] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1181.240509][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1181.240752][ T5839] usb 5-1: new full-speed USB device number 34 using dummy_hcd [ 1181.374138][ T5846] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1181.462951][ T5839] usb 5-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.553242][ T5839] usb 5-1: too many endpoints for config 253 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 1181.585795][ T5839] usb 5-1: config 253 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1181.602042][T15278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.653990][ T5839] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1181.663390][ T5839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1181.671736][ T5839] usb 5-1: SerialNumber: syz [ 1181.681016][T15278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.740099][T15278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1181.800579][T15278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1181.893110][ T5846] usb 8-1: USB disconnect, device number 61 [ 1182.069405][ T5839] rndis_host 5-1:253.0: probe with driver rndis_host failed with error -22 [ 1182.102606][T12969] usb 2-1: USB disconnect, device number 14 [ 1182.119022][ T5839] usb 5-1: USB disconnect, device number 34 [ 1182.957507][T15314] loop3: detected capacity change from 0 to 512 [ 1183.050144][T15314] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1183.202546][T15323] loop4: detected capacity change from 0 to 16 [ 1183.214223][T15314] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1183.232484][T15323] erofs (device loop4): mounted with root inode @ nid 36. [ 1183.390101][T15314] ext4 filesystem being mounted at /10/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1184.267424][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2801'. [ 1184.442157][T14783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1184.608784][T15337] macvlan2: entered promiscuous mode [ 1184.614594][T15337] macvlan2: entered allmulticast mode [ 1185.288248][ T5846] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1185.651203][ T5846] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1185.779512][ T5846] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 1185.793183][ T5846] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1185.802740][ T5846] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.060431][ T5846] usb 4-1: config 0 descriptor?? [ 1186.149655][ T5846] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1186.245536][T12969] usb 5-1: new full-speed USB device number 35 using dummy_hcd [ 1186.484073][T12969] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1186.588616][T12969] usb 5-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1186.599285][T12969] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1186.607653][T12969] usb 5-1: Manufacturer: syz [ 1186.768221][T12969] usb 5-1: config 0 descriptor?? [ 1187.043724][T12969] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1188.439179][ T5839] usb 4-1: USB disconnect, device number 23 [ 1189.236667][ T5846] usb 5-1: USB disconnect, device number 35 [ 1189.275197][T12969] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1189.449019][T15374] loop1: detected capacity change from 0 to 2048 [ 1189.488171][T15374] EXT4-fs: Ignoring removed bh option [ 1189.508959][T12969] usb 4-1: Using ep0 maxpacket: 8 [ 1189.541041][T12969] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1189.583152][T15380] loop8: detected capacity change from 0 to 16 [ 1189.594745][T15380] erofs (device loop8): mounted with root inode @ nid 36. [ 1189.639920][T12969] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1189.686991][T15374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1189.702318][T12969] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1189.717569][T12969] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1189.730773][T12969] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1189.742532][T12969] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1189.754382][T12969] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1189.768224][T12969] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1190.507425][T12969] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1190.515383][T12969] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1190.533703][T12969] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1190.545410][T12969] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1190.557552][T12969] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1190.569688][T12969] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1190.581501][T12969] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1190.596757][T12969] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1190.674038][T15388] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1190.690079][T15388] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 1190.702657][T15388] EXT4-fs (loop1): This should not happen!! Data will be lost [ 1190.702657][T15388] [ 1190.712541][T15388] EXT4-fs (loop1): Total free blocks count 0 [ 1190.718835][T15388] EXT4-fs (loop1): Free/Dirty block details [ 1190.724952][T15388] EXT4-fs (loop1): free_blocks=2415919104 [ 1190.730826][T15388] EXT4-fs (loop1): dirty_blocks=32 [ 1190.739749][T15388] EXT4-fs (loop1): Block reservation details [ 1190.746988][T15388] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 1191.061794][T12969] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 1191.155678][T12969] usb 4-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1191.257366][T12969] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1191.271774][T12969] usb 4-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1191.283938][T12969] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1191.295677][T12969] usb 4-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1191.307502][T12969] usb 4-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1191.321225][T12969] usb 4-1: config 168 interface 0 has no altsetting 0 [ 1192.305314][ T5846] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1192.569354][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1192.653302][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.075398][ T5846] usb 9-1: Using ep0 maxpacket: 16 [ 1193.142627][ T5846] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1193.200942][T14486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1193.250616][ T5846] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1193.261934][ T5846] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1193.275287][ T5846] usb 9-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1193.284511][ T5846] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1193.341862][T15395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1193.432166][T12969] usb 4-1: string descriptor 0 read error: -22 [ 1193.443607][T15395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1193.485800][T12969] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1193.495211][T12969] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.548648][ T5846] usb 9-1: config 0 descriptor?? [ 1193.772144][T12969] adutux 4-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1194.224469][ T5846] hid_parser_main: 5 callbacks suppressed [ 1194.224568][ T5846] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1194.238412][ T5846] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1194.245871][ T5846] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1194.253243][ T5846] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1194.260705][ T5846] nintendo 0003:057E:2019.001E: unknown main item tag 0x0 [ 1194.475652][ T5839] usb 4-1: USB disconnect, device number 24 [ 1194.601830][ T5846] nintendo 0003:057E:2019.001E: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.8-1/input0 [ 1194.715349][T12969] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 1194.744792][ T5846] nintendo 0003:057E:2019.001E: Failed to get joycon info; ret=-38 [ 1194.753058][ T5846] nintendo 0003:057E:2019.001E: Failed to retrieve controller info; ret=-38 [ 1194.765071][ T5846] nintendo 0003:057E:2019.001E: Failed to initialize controller; ret=-38 [ 1194.873319][ T5846] nintendo 0003:057E:2019.001E: probe - fail = -38 [ 1194.880748][ T5846] nintendo 0003:057E:2019.001E: probe with driver nintendo failed with error -38 [ 1194.966083][T12969] usb 2-1: Using ep0 maxpacket: 32 [ 1195.045988][ T5846] usb 9-1: USB disconnect, device number 65 [ 1195.053820][T12969] usb 2-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1195.063289][T12969] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.071677][T12969] usb 2-1: Product: syz [ 1195.076106][T12969] usb 2-1: Manufacturer: syz [ 1195.080858][T12969] usb 2-1: SerialNumber: syz [ 1195.233002][T12969] usb 2-1: config 0 descriptor?? [ 1195.306955][T12969] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1195.575743][T12969] gspca_topro: reg_w err -71 [ 1195.634593][T12969] gspca_topro: Sensor soi763a [ 1195.683417][T15413] loop3: detected capacity change from 0 to 1024 [ 1195.696017][T12969] usb 2-1: USB disconnect, device number 15 [ 1195.768161][T12777] udevd[12777]: setting mode of /dev/bus/usb/002/015 to 020664 failed: No such file or directory [ 1195.811655][T15407] fido_id[15407]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1195.838025][T12777] udevd[12777]: setting owner of /dev/bus/usb/002/015 to uid=0, gid=0 failed: No such file or directory [ 1195.968616][T15413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1196.839083][T15413] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4215: comm syz.3.2819: Allocating blocks 497-513 which overlap fs metadata [ 1197.232090][T15413] EXT4-fs (loop3): pa ffff8881210da3f0: logic 256, phys. 385, len 8 [ 1197.240744][T15413] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 1197.930627][T14783] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.078971][T12969] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 1200.740244][T12969] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1201.441859][T15452] binder: 15450:15452 unknown command 0 [ 1201.494028][T15452] binder: 15450:15452 ioctl c0306201 200000000080 returned -22 [ 1201.625261][T15454] binder: BINDER_SET_CONTEXT_MGR already set [ 1201.717454][ T5839] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1201.779088][T15454] binder: 15450:15454 ioctl 4018620d 200000000040 returned -16 [ 1201.838059][T12969] usb 2-1: string descriptor 0 read error: -71 [ 1201.844531][T12969] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1201.854254][T12969] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1201.869121][T12969] usb 2-1: config 0 descriptor?? [ 1201.877442][T12969] usb 2-1: can't set config #0, error -71 [ 1201.887229][T12969] usb 2-1: USB disconnect, device number 16 [ 1201.986182][ T5839] usb 8-1: Using ep0 maxpacket: 16 [ 1202.076621][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1202.180044][ T5839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1202.192570][ T5839] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1202.210540][ T5839] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1202.221251][ T5839] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1202.474347][ T5839] usb 8-1: config 0 descriptor?? [ 1202.643635][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2831'. [ 1202.727455][T15461] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2831'. [ 1203.009569][ T5839] nintendo 0003:057E:2019.001F: unknown main item tag 0x0 [ 1203.017184][ T5839] nintendo 0003:057E:2019.001F: unknown main item tag 0x0 [ 1203.031958][ T5839] nintendo 0003:057E:2019.001F: unknown main item tag 0x0 [ 1203.041703][ T5839] nintendo 0003:057E:2019.001F: unknown main item tag 0x0 [ 1203.049238][ T5839] nintendo 0003:057E:2019.001F: unknown main item tag 0x0 [ 1203.098473][T15463] netlink: 'syz.4.2832': attribute type 5 has an invalid length. [ 1203.406339][ T5839] nintendo 0003:057E:2019.001F: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.7-1/input0 [ 1203.595835][ T5839] nintendo 0003:057E:2019.001F: Failed to get joycon info; ret=-38 [ 1203.604132][ T5839] nintendo 0003:057E:2019.001F: Failed to retrieve controller info; ret=-38 [ 1203.613385][ T5839] nintendo 0003:057E:2019.001F: Failed to initialize controller; ret=-38 [ 1203.897367][ T5839] nintendo 0003:057E:2019.001F: probe - fail = -38 [ 1203.904550][ T5839] nintendo 0003:057E:2019.001F: probe with driver nintendo failed with error -38 [ 1204.027571][ T5839] usb 8-1: USB disconnect, device number 62 [ 1204.264342][T15477] loop4: detected capacity change from 0 to 1024 [ 1204.473350][T15477] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1204.678451][T15488] loop7: detected capacity change from 0 to 16 [ 1204.800165][T15488] erofs (device loop7): mounted with root inode @ nid 36. [ 1205.263239][T15476] fido_id[15476]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1206.526747][T15477] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2835: Allocating blocks 497-513 which overlap fs metadata [ 1206.889932][T15477] EXT4-fs (loop4): pa ffff8881210da380: logic 256, phys. 385, len 8 [ 1206.898312][T15477] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 1207.036371][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.043075][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1207.195614][T12969] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1207.376108][T14491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1207.386850][T12969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1207.409698][T12969] usb 4-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 1207.419238][T12969] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 1207.430713][T12969] usb 4-1: Manufacturer: syz [ 1207.617947][T12969] usb 4-1: config 0 descriptor?? [ 1207.707604][T12969] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1207.825445][ T5839] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1208.003415][ T5839] usb 8-1: Using ep0 maxpacket: 32 [ 1208.034193][ T5839] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1208.099297][ T5839] usb 8-1: config 64 has an invalid interface number: 2 but max is 0 [ 1208.108206][ T5839] usb 8-1: config 64 has no interface number 0 [ 1208.130605][ T5839] usb 8-1: config 64 interface 2 altsetting 14 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 1208.146924][ T5839] usb 8-1: config 64 interface 2 has no altsetting 0 [ 1208.181854][ T5839] usb 8-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice=cf.3d [ 1208.183133][T15512] loop1: detected capacity change from 0 to 512 [ 1208.191735][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1208.206497][ T5839] usb 8-1: Product: syz [ 1208.210825][ T5839] usb 8-1: Manufacturer: syz [ 1208.215723][ T5839] usb 8-1: SerialNumber: syz [ 1208.329317][T15512] EXT4-fs (loop1): orphan cleanup on readonly fs [ 1208.396859][T15512] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.2844: bg 0: block 248: padding at end of block bitmap is not set [ 1208.505942][T15512] Quota error (device loop1): write_blk: dquota write failed [ 1208.513822][T15512] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 1208.525312][T15512] EXT4-fs error (device loop1): ext4_acquire_dquot:6986: comm syz.1.2844: Failed to acquire dquot type 1 [ 1208.567832][ T5839] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1208.738635][T15512] EXT4-fs (loop1): 1 truncate cleaned up [ 1208.761671][ T5839] snd-usb-audio 8-1:64.2: probe with driver snd-usb-audio failed with error -2 [ 1208.802751][T15512] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1208.844776][ T5839] usb 8-1: USB disconnect, device number 63 [ 1209.059434][T12777] udevd[12777]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:64.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1209.110426][T15517] netlink: 'syz.4.2845': attribute type 5 has an invalid length. [ 1209.238400][T14486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1209.858863][T12969] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1209.951690][ T5846] usb 4-1: USB disconnect, device number 25 [ 1210.069365][T12969] usb 8-1: Using ep0 maxpacket: 16 [ 1210.101867][T12969] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1210.165238][T12969] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1210.176535][T12969] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1210.192671][T12969] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1210.206257][T12969] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1210.335881][T12969] usb 8-1: config 0 descriptor?? [ 1210.371952][T15530] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 1211.116426][T12969] nintendo 0003:057E:2019.0020: unknown main item tag 0x0 [ 1211.126679][T12969] nintendo 0003:057E:2019.0020: unknown main item tag 0x0 [ 1211.134148][T12969] nintendo 0003:057E:2019.0020: unknown main item tag 0x0 [ 1211.141910][T12969] nintendo 0003:057E:2019.0020: unknown main item tag 0x0 [ 1211.149557][T12969] nintendo 0003:057E:2019.0020: unknown main item tag 0x0 [ 1211.179275][T12969] nintendo 0003:057E:2019.0020: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.7-1/input0 [ 1211.246449][T12969] nintendo 0003:057E:2019.0020: Failed to get joycon info; ret=-38 [ 1211.254559][T12969] nintendo 0003:057E:2019.0020: Failed to retrieve controller info; ret=-38 [ 1211.264412][T12969] nintendo 0003:057E:2019.0020: Failed to initialize controller; ret=-38 [ 1211.365414][T12969] nintendo 0003:057E:2019.0020: probe - fail = -38 [ 1211.372769][T12969] nintendo 0003:057E:2019.0020: probe with driver nintendo failed with error -38 [ 1211.516593][T12969] usb 8-1: USB disconnect, device number 64 [ 1211.604253][T15541] loop4: detected capacity change from 0 to 1024 [ 1211.870156][T15541] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1212.423559][T15559] loop7: detected capacity change from 0 to 512 [ 1212.554771][T15559] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1212.583655][T15559] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.2856: bg 0: block 248: padding at end of block bitmap is not set [ 1212.609139][T15547] fido_id[15547]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 1212.669212][T15559] Quota error (device loop7): write_blk: dquota write failed [ 1212.681136][T15559] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 1212.691632][T15559] EXT4-fs error (device loop7): ext4_acquire_dquot:6986: comm syz.7.2856: Failed to acquire dquot type 1 [ 1212.871824][T15541] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4215: comm syz.4.2853: Allocating blocks 497-513 which overlap fs metadata [ 1212.880487][T15559] EXT4-fs (loop7): 1 truncate cleaned up [ 1212.962392][T15559] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1213.386753][T15541] EXT4-fs (loop4): pa ffff88811ee6c9a0: logic 256, phys. 385, len 8 [ 1213.396084][T15541] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 1 [ 1213.420752][ T8012] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1213.962635][T15572] loop7: detected capacity change from 0 to 256 [ 1213.975614][T12969] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1214.003102][T14491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1214.019390][T15566] netlink: 'syz.1.2858': attribute type 5 has an invalid length. [ 1214.175207][T12969] usb 4-1: Using ep0 maxpacket: 16 [ 1214.227372][T12969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1214.238631][T12969] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1214.248990][T12969] usb 4-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1214.258347][T12969] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1214.329557][T15572] FAT-fs (loop7): Directory bread(block 64) failed [ 1214.344093][T15572] FAT-fs (loop7): Directory bread(block 65) failed [ 1214.426495][T15572] FAT-fs (loop7): Directory bread(block 66) failed [ 1214.433229][T15572] FAT-fs (loop7): Directory bread(block 67) failed [ 1214.449735][T12969] usb 4-1: config 0 descriptor?? [ 1214.525862][T15572] FAT-fs (loop7): Directory bread(block 68) failed [ 1214.565383][T15572] FAT-fs (loop7): Directory bread(block 69) failed [ 1214.572522][T15572] FAT-fs (loop7): Directory bread(block 70) failed [ 1214.682711][T15572] FAT-fs (loop7): Directory bread(block 71) failed [ 1214.713079][T15572] FAT-fs (loop7): Directory bread(block 72) failed [ 1214.770460][T15572] FAT-fs (loop7): Directory bread(block 73) failed [ 1214.971811][T12969] usbhid 4-1:0.0: can't add hid device: -71 [ 1214.978647][T12969] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1215.049743][T12969] usb 4-1: USB disconnect, device number 26 [ 1216.201764][T12969] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 1216.405574][T12969] usb 5-1: Using ep0 maxpacket: 16 [ 1216.429876][T12969] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.482651][T12969] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1216.494187][T12969] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1216.507492][T12969] usb 5-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1216.516930][T12969] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.758083][T12969] usb 5-1: config 0 descriptor?? [ 1217.210517][T15606] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1217.261897][T15606] block device autoloading is deprecated and will be removed. [ 1217.375095][ T5839] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1217.705839][ T5839] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1217.716565][ T5839] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.727309][ T5839] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1217.815214][ T5839] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1217.943839][ T5839] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1217.953540][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1217.963415][ T5839] usb 8-1: Product: syz [ 1217.969901][ T5839] usb 8-1: Manufacturer: syz [ 1218.032301][T12969] usbhid 5-1:0.0: can't add hid device: -71 [ 1218.039727][T12969] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 1218.056041][T15617] loop3: detected capacity change from 0 to 256 [ 1218.109213][T12969] usb 5-1: USB disconnect, device number 36 [ 1218.135256][ T5839] cdc_wdm 8-1:1.0: skipping garbage [ 1218.140657][ T5839] cdc_wdm 8-1:1.0: skipping garbage [ 1218.235386][ T5839] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 1218.241494][ T5839] cdc_wdm 8-1:1.0: Unknown control protocol [ 1218.392694][ T5846] usb 8-1: USB disconnect, device number 65 [ 1218.450811][T15617] FAT-fs (loop3): Directory bread(block 64) failed [ 1218.493713][T15617] FAT-fs (loop3): Directory bread(block 65) failed [ 1218.551544][T15617] FAT-fs (loop3): Directory bread(block 66) failed [ 1218.585489][T15617] FAT-fs (loop3): Directory bread(block 67) failed [ 1218.642214][T15617] FAT-fs (loop3): Directory bread(block 68) failed [ 1218.708059][T15617] FAT-fs (loop3): Directory bread(block 69) failed [ 1218.756137][T15617] FAT-fs (loop3): Directory bread(block 70) failed [ 1218.818584][T15617] FAT-fs (loop3): Directory bread(block 71) failed [ 1218.870115][T15617] FAT-fs (loop3): Directory bread(block 72) failed [ 1218.948203][T15617] FAT-fs (loop3): Directory bread(block 73) failed [ 1219.595138][ T5846] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1219.796080][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 1219.832128][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1219.844004][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1219.855013][ T5846] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 1219.864248][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.007703][ T5846] usb 2-1: config 0 descriptor?? [ 1220.155452][ T5839] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 1220.365535][ T5839] usb 5-1: Using ep0 maxpacket: 8 [ 1220.405468][ T5839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1220.438753][ T5839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1220.472033][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1220.484140][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1220.496557][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1220.513923][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1220.525836][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1220.542904][ T5839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1220.571340][ T5846] usbhid 2-1:0.0: can't add hid device: -71 [ 1220.582976][ T5846] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1220.686922][ T5839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1220.694533][ T5839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1220.696921][ T5846] usb 2-1: USB disconnect, device number 17 [ 1220.774600][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1220.786673][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1220.798928][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1220.810563][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1220.822392][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1220.836255][ T5839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1221.010966][ T5839] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 1221.042208][ T5839] usb 5-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1221.101745][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1221.113765][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1221.126030][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1221.137546][ T5839] usb 5-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1221.153653][ T5839] usb 5-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1221.168933][ T5839] usb 5-1: config 168 interface 0 has no altsetting 0 [ 1221.612472][ T5839] usb 5-1: string descriptor 0 read error: -22 [ 1221.625975][ T5839] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1221.635486][ T5839] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1221.699596][T15650] loop1: detected capacity change from 0 to 512 [ 1221.782833][ T5839] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1221.798837][T15650] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1221.874065][T15650] EXT4-fs error (device loop1): ext4_orphan_get:1417: comm syz.1.2885: bad orphan inode 131083 [ 1221.927517][T15650] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1222.048226][ T5839] usb 5-1: USB disconnect, device number 37 [ 1222.430497][T14486] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.868765][T15669] loop4: detected capacity change from 0 to 2048 [ 1223.965981][T15669] EXT4-fs: Ignoring removed bh option [ 1224.734309][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1224.864609][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 1224.916775][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1224.939386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1225.145140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 1225.246872][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 1225.348983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1225.496536][T15669] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1226.065667][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 1226.553991][T15680] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1226.569699][T15680] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 17 with error 28 [ 1226.585929][T15680] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1226.585929][T15680] [ 1226.597186][T15680] EXT4-fs (loop4): Total free blocks count 0 [ 1226.603343][T15680] EXT4-fs (loop4): Free/Dirty block details [ 1226.609690][T15680] EXT4-fs (loop4): free_blocks=2415919104 [ 1226.615785][T15680] EXT4-fs (loop4): dirty_blocks=32 [ 1226.621056][T15680] EXT4-fs (loop4): Block reservation details [ 1226.627342][T15680] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 1227.164571][T14491] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.189512][T15695] mmap: syz.1.2896 (15695) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1229.556156][T15686] Bluetooth: hci3: command 0x0406 tx timeout [ 1229.572362][ T5787] Bluetooth: hci4: command 0x0406 tx timeout [ 1230.406992][ T8831] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1231.098564][ T8831] usb 2-1: Using ep0 maxpacket: 8 [ 1231.117606][ T8831] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1231.165151][ T8831] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1231.209720][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1231.221528][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.233716][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1231.245501][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1231.257198][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1231.270757][ T8831] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1231.469484][ T8831] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1231.515120][ T8831] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1231.563623][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1231.575837][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1231.588329][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1231.602612][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1231.615456][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1231.629110][ T8831] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1232.775623][ T8831] usb 2-1: unable to read config index 2 descriptor/start: -71 [ 1232.783693][ T8831] usb 2-1: can't read configurations, error -71 [ 1232.895734][T15723] loop7: detected capacity change from 0 to 2048 [ 1232.906780][T15723] EXT4-fs: Ignoring removed bh option [ 1233.034692][T15723] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1234.570947][T15730] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 1235.260379][ T8012] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.941321][ T5787] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1236.977200][ T5787] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1237.007503][ T5787] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1237.050751][ T5787] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1237.069099][ T5787] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1237.281024][T15751] fuse: Bad value for 'fd' [ 1237.716289][ T5800] Bluetooth: hci3: command 0x0406 tx timeout [ 1238.265212][ T8831] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1238.475408][ T8831] usb 2-1: Using ep0 maxpacket: 8 [ 1238.547261][ T8831] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1238.624042][ T8831] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1238.715552][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1238.728883][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1238.740966][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1238.752397][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1238.767412][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1238.782161][ T8831] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1239.018097][ T8831] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1239.038481][ T8831] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1239.064046][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1239.080214][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1239.093776][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1239.105373][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1239.117173][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1239.130889][ T8831] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1239.144160][ T8831] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 1239.152460][ T8831] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 1239.165830][T13721] Bluetooth: hci5: command tx timeout [ 1239.220625][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 1239.232359][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 1239.244646][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1239.256348][ T8831] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 1239.268115][ T8831] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 1239.286289][ T8831] usb 2-1: config 168 interface 0 has no altsetting 0 [ 1239.473992][ T5787] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1239.491250][ T5787] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1239.502816][ T8831] usb 2-1: string descriptor 0 read error: -22 [ 1239.509940][ T5787] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1239.527588][ T5787] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1239.546393][ T5787] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1239.569464][ T8831] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 1239.583424][ T8831] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1239.708345][ T8831] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 1239.798955][T13721] Bluetooth: hci3: command 0x0406 tx timeout [ 1240.017144][T15746] chnl_net:caif_netlink_parms(): no params data found [ 1240.087556][ T8831] usb 2-1: USB disconnect, device number 20 [ 1240.325133][ T5846] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1240.522061][ T5846] usb 5-1: Using ep0 maxpacket: 16 [ 1240.557347][ T5846] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1240.571866][ T5846] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1240.681639][ T5846] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1240.691118][ T5846] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1240.699504][ T5846] usb 5-1: Product: syz [ 1240.703831][ T5846] usb 5-1: Manufacturer: syz [ 1240.712097][ T5846] usb 5-1: SerialNumber: syz [ 1240.826933][ T5846] usb 5-1: config 0 descriptor?? [ 1240.978684][ T5846] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1240.988291][ T5846] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 1241.243822][T13721] Bluetooth: hci5: command tx timeout [ 1241.490663][ T5846] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 1241.530414][ T5846] em28xx 5-1:0.0: Config register raw data: 0x00 [ 1241.635528][T13721] Bluetooth: hci6: command tx timeout [ 1241.823619][ T7435] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.354487][T13721] Bluetooth: hci5: command tx timeout [ 1243.718119][T13721] Bluetooth: hci6: command tx timeout [ 1243.932106][ T8831] usb 5-1: USB disconnect, device number 38 [ 1243.943248][ T7435] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1243.968316][ T8831] em28xx 5-1:0.0: Disconnecting em28xx [ 1244.036817][ T8831] em28xx 5-1:0.0: Freeing device [ 1244.107032][T15799] fuse: Bad value for 'fd' [ 1244.308145][ T7435] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1244.539986][T15804] loop2: detected capacity change from 0 to 7 [ 1244.630567][T15804] Dev loop2: unable to read RDB block 7 [ 1244.637795][T15804] loop2: AHDI p1 p2 p3 [ 1244.642143][T15804] loop2: partition table partially beyond EOD, truncated [ 1244.708689][T15804] loop2: p1 start 1818582900 is beyond EOD, truncated [ 1244.716354][T15804] loop2: p3 start 335544320 is beyond EOD, truncated [ 1245.119812][ T7435] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1245.395768][T13721] Bluetooth: hci5: command tx timeout [ 1245.606009][T15771] chnl_net:caif_netlink_parms(): no params data found [ 1245.662009][T15746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1245.669791][T15746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1246.058465][T13721] Bluetooth: hci6: command tx timeout [ 1247.061441][T15746] bridge_slave_0: entered allmulticast mode [ 1247.138210][T15746] bridge_slave_0: entered promiscuous mode [ 1247.903606][T15746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1247.911375][T15746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1247.919794][T15746] bridge_slave_1: entered allmulticast mode [ 1247.929584][T15746] bridge_slave_1: entered promiscuous mode [ 1248.115708][T13721] Bluetooth: hci6: command tx timeout [ 1248.757775][T15746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.184059][T15746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.121779][T15746] team0: Port device team_slave_0 added [ 1250.189690][ T7435] bridge_slave_1: left allmulticast mode [ 1250.196191][ T7435] bridge_slave_1: left promiscuous mode [ 1250.202727][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1250.375123][ T7435] bridge_slave_0: left allmulticast mode [ 1250.381853][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1250.940663][T15847] fuse: Bad value for 'fd' [ 1251.579386][ T5839] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1251.778552][ T5839] usb 2-1: Using ep0 maxpacket: 8 [ 1251.795280][ T5839] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1251.802136][ T5839] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1251.812593][ T5839] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.835626][ T7435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1251.854311][ T7435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1251.896948][ T5839] usb 2-1: config 0 descriptor?? [ 1251.960187][ T7435] bond0 (unregistering): Released all slaves [ 1252.046826][T15746] team0: Port device team_slave_1 added [ 1252.478814][ T5839] petalynx 0003:18B1:0037.0021: unknown main item tag 0x0 [ 1252.494044][ T5839] petalynx 0003:18B1:0037.0021: unknown main item tag 0x0 [ 1252.503461][ T5839] petalynx 0003:18B1:0037.0021: unknown main item tag 0x0 [ 1252.511027][ T5839] petalynx 0003:18B1:0037.0021: unknown main item tag 0x0 [ 1252.518700][ T5839] petalynx 0003:18B1:0037.0021: unknown main item tag 0x0 [ 1253.566797][ T5839] petalynx 0003:18B1:0037.0021: hidraw0: USB HID v0.05 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 1254.253909][T15771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1254.261797][T15771] bridge0: port 1(bridge_slave_0) entered disabled state [ 1254.308907][T15771] bridge_slave_0: entered allmulticast mode [ 1254.320242][T15771] bridge_slave_0: entered promiscuous mode [ 1254.422600][T15746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1254.432835][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.460159][T15746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1254.517991][T15771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1254.526658][T15771] bridge0: port 2(bridge_slave_1) entered disabled state [ 1254.554559][ T5839] usb 2-1: USB disconnect, device number 21 [ 1254.620219][T15771] bridge_slave_1: entered allmulticast mode [ 1254.682910][T15771] bridge_slave_1: entered promiscuous mode [ 1254.757683][T15746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1254.764792][T15746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.794577][T15746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1255.596853][T15771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1256.493517][ T7435] hsr_slave_0: left promiscuous mode [ 1256.542226][ T7435] hsr_slave_1: left promiscuous mode [ 1256.590647][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1256.598547][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1256.719519][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1256.727891][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1256.941106][ T7435] veth1_macvtap: left promiscuous mode [ 1256.978478][ T7435] veth0_macvtap: left promiscuous mode [ 1256.984353][ T7435] veth1_vlan: left promiscuous mode [ 1257.065129][ T7435] veth0_vlan: left promiscuous mode [ 1257.213654][T15889] loop8: detected capacity change from 0 to 7 [ 1257.345760][T15889] Dev loop8: unable to read RDB block 7 [ 1257.351816][T15889] loop8: unable to read partition table [ 1257.423976][T15889] loop8: partition table beyond EOD, truncated [ 1257.430679][T15889] loop_reread_partitions: partition scan of loop8 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1258.486364][ T5846] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1258.706187][ T5846] usb 2-1: Using ep0 maxpacket: 8 [ 1258.748173][ T5846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1258.756037][ T5846] usb 2-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00 [ 1258.766344][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.846332][ T7435] team0 (unregistering): Port device team_slave_1 removed [ 1258.961089][ T7435] team0 (unregistering): Port device team_slave_0 removed [ 1259.485420][ T5846] usb 2-1: config 0 descriptor?? [ 1259.512666][T15771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1259.937387][T15746] hsr_slave_0: entered promiscuous mode [ 1260.079669][T15746] hsr_slave_1: entered promiscuous mode [ 1260.290904][ T5846] petalynx 0003:18B1:0037.0022: unknown main item tag 0x0 [ 1260.298479][ T5846] petalynx 0003:18B1:0037.0022: unknown main item tag 0x0 [ 1260.306145][ T5846] petalynx 0003:18B1:0037.0022: unknown main item tag 0x0 [ 1260.313491][ T5846] petalynx 0003:18B1:0037.0022: unknown main item tag 0x0 [ 1260.321078][ T5846] petalynx 0003:18B1:0037.0022: unknown main item tag 0x0 [ 1260.759090][ T5846] petalynx 0003:18B1:0037.0022: hidraw0: USB HID v0.05 Device [HID 18b1:0037] on usb-dummy_hcd.1-1/input0 [ 1260.859461][T15771] team0: Port device team_slave_0 added [ 1260.987062][ T5846] usb 2-1: USB disconnect, device number 22 [ 1261.269172][T15771] team0: Port device team_slave_1 added [ 1261.966712][T15914] fido_id[15914]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1262.283077][T15771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1262.290375][T15771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.319606][T15771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1262.379241][T15930] loop1: detected capacity change from 0 to 128 [ 1262.461429][T15930] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1262.477767][T15930] ext4 filesystem being mounted at /60/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1262.629157][T15771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1262.636414][T15771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1262.662959][T15771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1263.603595][ T7435] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.042095][ T7435] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.158744][T15771] hsr_slave_0: entered promiscuous mode [ 1264.190671][ T5839] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1264.191665][T15771] hsr_slave_1: entered promiscuous mode [ 1264.260042][T15771] debugfs: 'hsr0' already exists in 'hsr' [ 1264.269600][T15771] Cannot create hsr debugfs directory [ 1264.382608][ T7435] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1264.406700][ T5839] usb 8-1: Using ep0 maxpacket: 32 [ 1264.433695][ T5839] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1264.444456][ T5839] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1264.508055][ T5839] usb 8-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1264.517787][ T5839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.526297][ T5839] usb 8-1: Product: syz [ 1264.530634][ T5839] usb 8-1: Manufacturer: syz [ 1264.535508][ T5839] usb 8-1: SerialNumber: syz [ 1264.614432][ T5839] usb 8-1: config 0 descriptor?? [ 1264.620806][T14486] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1264.713602][ T7435] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1266.568110][ T7435] bridge_slave_1: left allmulticast mode [ 1266.573962][ T7435] bridge_slave_1: left promiscuous mode [ 1266.580841][ T7435] bridge0: port 2(bridge_slave_1) entered disabled state [ 1266.669383][ T7435] bridge_slave_0: left allmulticast mode [ 1266.675473][ T7435] bridge_slave_0: left promiscuous mode [ 1266.682044][ T7435] bridge0: port 1(bridge_slave_0) entered disabled state [ 1267.093941][ T5839] usb 8-1: USB disconnect, device number 66 [ 1267.688475][ T7435] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1267.751733][ T7435] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1267.776183][ T7435] bond0 (unregistering): Released all slaves [ 1268.466347][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1268.473054][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1268.497098][ T7435] hsr_slave_0: left promiscuous mode [ 1268.547011][ T7435] hsr_slave_1: left promiscuous mode [ 1268.587538][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1268.595394][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1268.608431][ T7435] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1268.616807][ T7435] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1268.704238][ T7435] veth1_macvtap: left promiscuous mode [ 1268.715682][ T7435] veth0_macvtap: left promiscuous mode [ 1268.722109][ T7435] veth1_vlan: left promiscuous mode [ 1268.761838][ T7435] veth0_vlan: left promiscuous mode [ 1269.674574][ T5846] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1269.798564][ T797] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1269.885570][ T5846] usb 8-1: Using ep0 maxpacket: 32 [ 1269.914740][ T5846] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1269.926975][ T5846] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1269.973756][ T5846] usb 8-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1269.983342][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1269.994019][ T5846] usb 8-1: Product: syz [ 1269.999421][ T5846] usb 8-1: Manufacturer: syz [ 1270.004201][ T5846] usb 8-1: SerialNumber: syz [ 1270.010043][ T797] usb 2-1: Using ep0 maxpacket: 16 [ 1270.034188][ T797] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1270.045119][ T797] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1270.056443][ T797] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1270.071924][ T797] usb 2-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1270.081332][ T797] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1270.103660][ T5846] usb 8-1: config 0 descriptor?? [ 1270.109893][ T7435] team0 (unregistering): Port device team_slave_1 removed [ 1270.127280][ T797] usb 2-1: config 0 descriptor?? [ 1270.233991][ T7435] team0 (unregistering): Port device team_slave_0 removed [ 1270.815328][ T797] usbhid 2-1:0.0: can't add hid device: -71 [ 1270.821850][ T797] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 1270.896248][ T797] usb 2-1: USB disconnect, device number 23 [ 1271.485818][T15746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1271.567221][T15746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1271.648090][T15746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1271.808380][T15746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1272.111644][T15771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1272.174415][T15771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1272.201266][T15771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1272.272234][T15771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1272.780440][ T8831] usb 8-1: USB disconnect, device number 67 [ 1274.275863][T15746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1274.905579][T15746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.094594][T16052] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1275.147821][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.155539][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1275.293569][T15771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1275.434729][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.442359][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1275.745547][T15771] 8021q: adding VLAN 0 to HW filter on device team0 [ 1275.961295][ T6126] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.968944][ T6126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1276.476173][ T6126] bridge0: port 2(bridge_slave_1) entered blocking state [ 1276.483869][ T6126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1276.676676][ T8831] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1276.935254][ T8831] usb 5-1: Using ep0 maxpacket: 32 [ 1276.961476][ T8831] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1277.041313][ T8831] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 1277.051141][ T8831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1277.061268][ T8831] usb 5-1: Product: syz [ 1277.066630][ T8831] usb 5-1: Manufacturer: syz [ 1277.071391][ T8831] usb 5-1: SerialNumber: syz [ 1277.271330][ T8831] usb 5-1: config 0 descriptor?? [ 1278.481433][T15746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1278.699213][T15771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1279.347091][T15771] veth0_vlan: entered promiscuous mode [ 1279.490222][T15771] veth1_vlan: entered promiscuous mode [ 1279.575908][ T797] usb 5-1: USB disconnect, device number 39 [ 1280.263280][T15771] veth0_macvtap: entered promiscuous mode [ 1280.580603][T15771] veth1_macvtap: entered promiscuous mode [ 1280.735368][ T5846] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1280.883158][T15771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1280.945140][ T5846] usb 2-1: Using ep0 maxpacket: 16 [ 1281.011499][ T5846] usb 2-1: config 0 interface 0 has no altsetting 0 [ 1281.018639][ T5846] usb 2-1: New USB device found, idVendor=28bd, idProduct=1903, bcdDevice= 0.00 [ 1281.028165][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.057635][T15771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1281.170419][ T5846] usb 2-1: config 0 descriptor?? [ 1281.225482][ T6126] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.282909][ T6126] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.372805][ T6126] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1281.503446][ T6126] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1282.379118][T15746] veth0_vlan: entered promiscuous mode [ 1282.409925][ T5846] input: HID 28bd:1903 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:28BD:1903.0023/input/input39 [ 1282.562261][T15746] veth1_vlan: entered promiscuous mode [ 1282.642194][ T5846] uclogic 0003:28BD:1903.0023: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:1903] on usb-dummy_hcd.1-1/input0 [ 1282.775552][ T5846] usb 2-1: USB disconnect, device number 24 [ 1283.163130][T15746] veth0_macvtap: entered promiscuous mode [ 1283.288144][T15746] veth1_macvtap: entered promiscuous mode [ 1283.673724][T16127] fido_id[16127]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 1283.693960][T15746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1284.008074][T15746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1284.232686][ T174] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.304344][ T174] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.399947][ T174] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1284.501496][ T174] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1285.935037][ T5846] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1286.133005][ T5846] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.202329][ T5846] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1286.660658][ T5846] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1286.672736][ T5846] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1286.681056][ T5846] usb 2-1: Product: syz [ 1286.687796][ T5846] usb 2-1: Manufacturer: syz [ 1286.729124][ T5846] usb 2-1: can't set config #1, error -71 [ 1286.778819][ T5846] usb 2-1: USB disconnect, device number 25 [ 1289.897791][T16080] usb 8-1: new high-speed USB device number 68 using dummy_hcd [ 1290.117382][T16080] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1290.157059][T16080] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1290.230964][T16080] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1290.241391][T16080] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1290.253877][T16080] usb 8-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1290.334754][ T6156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.344087][ T6156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1290.427596][T16080] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1290.439683][T16080] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1290.448089][T16080] usb 8-1: Product: syz [ 1290.452415][T16080] usb 8-1: Manufacturer: syz [ 1290.457468][T16080] usb 8-1: SerialNumber: syz [ 1290.550284][T16080] cdc_ncm 8-1:1.0: skipping garbage [ 1290.610885][ T6126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1290.619260][ T6126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1291.112399][T16229] fuse: Bad value for 'fd' [ 1291.457553][T16232] loop2: detected capacity change from 0 to 256 [ 1291.588268][T16080] cdc_ncm 8-1:1.0: bind() failure [ 1291.637803][T16232] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1291.663831][T16080] cdc_ncm 8-1:1.1: probe with driver cdc_ncm failed with error -71 [ 1291.721031][T16080] cdc_mbim 8-1:1.1: probe with driver cdc_mbim failed with error -71 [ 1291.784503][T16080] usbtest 8-1:1.1: probe with driver usbtest failed with error -71 [ 1291.794574][T16235] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 1291.863158][T16080] usb 8-1: USB disconnect, device number 68 [ 1292.142328][ T6126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.151298][ T6126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1292.499531][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1292.507783][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1296.594586][T16276] loop7: detected capacity change from 0 to 256 [ 1296.886611][T16276] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1297.756924][ T5846] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1298.029276][ T5846] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.808005][ T5846] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1306.538574][ T5846] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1306.553204][ T5846] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1306.564686][ T5846] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1306.891542][ T5846] usb 6-1: string descriptor 0 read error: -71 [ 1306.948127][ T5846] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1306.961821][ T5846] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1307.080633][ T5846] usb 6-1: can't set config #1, error -71 [ 1307.158246][ T5846] usb 6-1: USB disconnect, device number 13 [ 1307.321922][T16304] fuse: Bad value for 'user_id' [ 1307.327443][T16304] fuse: Bad value for 'user_id' [ 1307.348612][T16303] binder: BINDER_SET_CONTEXT_MGR already set [ 1307.354729][T16303] binder: 16301:16303 ioctl 4018620d 200000000040 returned -16 [ 1308.813678][T16321] loop2: detected capacity change from 0 to 256 [ 1309.240496][T16321] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1310.839922][ T5846] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1311.092373][ T5846] usb 3-1: Using ep0 maxpacket: 16 [ 1311.132382][T16346] binder: 16344:16346 ioctl c0306201 0 returned -14 [ 1311.145313][ T5846] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.177040][T16346] binder: 16344:16346 ioctl c0306201 2000000003c0 returned -14 [ 1311.237273][ T5846] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1311.249053][ T5846] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 1311.266682][ T5846] usb 3-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 1311.277502][ T5846] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.558230][ T5846] usb 3-1: config 0 descriptor?? [ 1311.997905][T16355] fuse: Bad value for 'user_id' [ 1312.003215][T16355] fuse: Bad value for 'user_id' [ 1312.727998][ T5846] nintendo 0003:057E:2019.0024: unknown main item tag 0x0 [ 1312.735591][ T5846] nintendo 0003:057E:2019.0024: unknown main item tag 0x0 [ 1312.742977][ T5846] nintendo 0003:057E:2019.0024: unknown main item tag 0x0 [ 1312.750508][ T5846] nintendo 0003:057E:2019.0024: unknown main item tag 0x0 [ 1312.758046][ T5846] nintendo 0003:057E:2019.0024: unknown main item tag 0x0 [ 1312.828352][ T5846] nintendo 0003:057E:2019.0024: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.2-1/input0 [ 1312.945690][ T5846] nintendo 0003:057E:2019.0024: Failed to get joycon info; ret=-38 [ 1312.953899][ T5846] nintendo 0003:057E:2019.0024: Failed to retrieve controller info; ret=-38 [ 1312.963174][ T5846] nintendo 0003:057E:2019.0024: Failed to initialize controller; ret=-38 [ 1313.118239][ T5846] nintendo 0003:057E:2019.0024: probe - fail = -38 [ 1313.125586][ T5846] nintendo 0003:057E:2019.0024: probe with driver nintendo failed with error -38 [ 1313.157551][T12969] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1313.244015][ T5846] usb 3-1: USB disconnect, device number 75 [ 1313.344262][T12969] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1313.353314][T12969] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.363908][T12969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1313.499098][T12969] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1313.593184][T12969] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1313.602847][T12969] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1313.611204][T12969] usb 5-1: Product: syz [ 1313.620223][T12969] usb 5-1: Manufacturer: syz [ 1314.106881][T16373] fido_id[16373]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 1314.352064][T12969] cdc_wdm 5-1:1.0: skipping garbage [ 1314.375930][T12969] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1314.608103][T12969] usb 5-1: USB disconnect, device number 40 [ 1314.819748][T16389] binder: 16387:16389 ioctl c0306201 0 returned -14 [ 1314.925780][T16389] binder: 16387:16389 ioctl c0306201 2000000003c0 returned -14 [ 1315.132872][T16395] fuse: Bad value for 'user_id' [ 1315.138247][T16395] fuse: Bad value for 'user_id' [ 1315.209852][T16397] loop2: detected capacity change from 0 to 7 [ 1315.218063][T12969] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1315.244640][T16397] Dev loop2: unable to read RDB block 7 [ 1315.250685][T16397] loop2: AHDI p2 p3 [ 1315.257941][T16397] loop2: partition table partially beyond EOD, truncated [ 1315.301375][T16397] loop2: p2 start 1702059890 is beyond EOD, truncated [ 1315.452197][T12969] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1315.465705][T12969] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1315.477811][T12969] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1315.557148][T12969] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1315.681623][T12969] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1315.691208][T12969] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1315.700004][T12969] usb 5-1: Product: syz [ 1315.704328][T12969] usb 5-1: Manufacturer: syz [ 1315.807491][T12969] cdc_wdm 5-1:1.0: skipping garbage [ 1315.840683][T12969] cdc_wdm 5-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1315.865144][ T5846] usb 8-1: new high-speed USB device number 69 using dummy_hcd [ 1316.095964][ T5846] usb 8-1: Using ep0 maxpacket: 16 [ 1316.121529][ T5846] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1316.133627][ T5846] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1316.134291][T16080] usb 5-1: USB disconnect, device number 41 [ 1316.267814][ T5846] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1316.285365][ T5846] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1316.293559][ T5846] usb 8-1: Product: syz [ 1316.299662][ T5846] usb 8-1: Manufacturer: syz [ 1316.304427][ T5846] usb 8-1: SerialNumber: syz [ 1316.466046][ T5846] usb 8-1: config 0 descriptor?? [ 1316.514588][ T5846] em28xx 8-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1316.524685][ T5846] em28xx 8-1:0.0: Audio interface 0 found (Vendor Class) [ 1317.144238][ T5846] em28xx 8-1:0.0: chip ID is em2800 [ 1317.370865][ T5846] em28xx 8-1:0.0: Config register raw data: 0xfffffffb [ 1317.441193][ T5846] em28xx 8-1:0.0: AC97 chip type couldn't be determined [ 1317.449962][ T5846] em28xx 8-1:0.0: No AC97 audio processor [ 1317.605931][ T5846] usb 8-1: USB disconnect, device number 69 [ 1317.671901][ T5846] em28xx 8-1:0.0: Disconnecting em28xx [ 1317.747690][ T5846] em28xx 8-1:0.0: Freeing device [ 1317.797065][T14375] udevd[14375]: setting owner of /dev/media28 to uid=0, gid=28 failed: No such file or directory [ 1318.064640][T16430] binder: 16428:16430 ioctl c0306201 0 returned -14 [ 1318.172777][T16430] binder: 16428:16430 ioctl c0306201 2000000003c0 returned -14 [ 1318.206361][T16432] fuse: Bad value for 'fd' [ 1320.593462][T16476] fuse: Bad value for 'fd' [ 1324.634326][T16536] loop2: detected capacity change from 0 to 7 [ 1324.741258][T16536] Dev loop2: unable to read RDB block 7 [ 1324.747233][T16536] loop2: unable to read partition table [ 1325.017307][T16536] loop2: partition table beyond EOD, truncated [ 1325.023737][T16536] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1327.691443][T16574] fuse: Bad value for 'fd' [ 1327.879780][T16576] veth0_to_team: mtu greater than device maximum [ 1329.907275][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1329.914018][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1332.641024][T16635] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3146'. [ 1337.058826][T16709] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3171'. [ 1337.216465][T16709] 8021q: VLANs not supported on ip6tnl0 [ 1342.188400][T16762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3189'. [ 1342.777051][T16769] fuse: Invalid rootmode [ 1343.479451][ C0] hrtimer: interrupt took 68509 ns [ 1344.068667][T16790] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 1345.196002][T16804] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3203'. [ 1345.303140][T16808] fuse: Bad value for 'rootmode' [ 1347.526489][T16839] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3216'. [ 1347.556890][T16843] fuse: Bad value for 'rootmode' [ 1354.435463][T16942] capability: warning: `syz.4.3251' uses 32-bit capabilities (legacy support in use) [ 1357.247675][T16974] fuse: Unknown parameter 'use00000000000000000000' [ 1357.761931][T16983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3265'. [ 1357.794620][T16983] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1357.802463][T16983] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1359.826532][T17012] fuse: Unknown parameter 'use00000000000000000000' [ 1360.286552][T17018] fuse: Unknown parameter 'grou00000000000000000000' [ 1362.491349][T17046] fuse: Unknown parameter 'use00000000000000000000' [ 1362.681236][T13721] Bluetooth: hci6: command 0x0406 tx timeout [ 1362.690349][ T5800] Bluetooth: hci5: command 0x0406 tx timeout [ 1363.550882][T17061] fuse: Unknown parameter 'group_i00000000000000000000' [ 1367.932064][T17091] overlayfs: failed to clone upperpath [ 1368.388085][T17096] fuse: Unknown parameter 'user_i00000000000000000000' [ 1368.460522][T17101] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3305'. [ 1368.510577][T17101] gre0: entered promiscuous mode [ 1368.546075][T17103] fuse: Unknown parameter 'group_i00000000000000000000' [ 1368.847479][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3308'. [ 1369.110994][T17116] overlayfs: failed to clone upperpath [ 1370.467824][T17137] fuse: Unknown parameter 'user_i00000000000000000000' [ 1371.102462][T17144] fuse: Unknown parameter 'group_i00000000000000000000' [ 1373.337822][T17175] fuse: Unknown parameter 'group_id00000000000000000000' [ 1376.372627][T17214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3345'. [ 1377.029290][T17229] 9p: Bad value for 'rfdno' [ 1377.814615][T17249] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3359'. [ 1378.276001][T17252] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3361'. [ 1384.039826][T17333] fuse: Bad value for 'fd' [ 1385.469611][T17350] overlayfs: missing 'lowerdir' [ 1391.517679][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.524261][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1394.131237][T17437] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3424'. [ 1407.052419][ T5800] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1407.066064][ T5800] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1407.079366][ T5800] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1407.093191][ T5800] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1407.110748][ T5800] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1409.169834][ T5800] Bluetooth: hci0: command tx timeout [ 1411.235809][ T5800] Bluetooth: hci0: command tx timeout [ 1411.248292][T17589] chnl_net:caif_netlink_parms(): no params data found [ 1411.374699][ T1140] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1411.999748][ T1140] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.392953][ T1140] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1412.698389][ T1140] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1413.265794][ T1140] bridge_slave_1: left allmulticast mode [ 1413.271638][ T1140] bridge_slave_1: left promiscuous mode [ 1413.278510][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 1413.317767][ T5800] Bluetooth: hci0: command tx timeout [ 1413.359816][ T1140] bridge_slave_0: left allmulticast mode [ 1413.366131][ T1140] bridge_slave_0: left promiscuous mode [ 1413.372589][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 1414.560727][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1414.617131][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1414.668385][ T1140] bond0 (unregistering): (slave veth1_to_bond): Releasing backup interface [ 1414.716623][ T1140] bond0 (unregistering): Released all slaves [ 1414.754658][ T1140] bond1 (unregistering): Released all slaves [ 1414.855660][ T1140] bond2 (unregistering): Released all slaves [ 1415.395303][ T5800] Bluetooth: hci0: command tx timeout [ 1415.680252][T17589] bridge0: port 1(bridge_slave_0) entered blocking state [ 1415.688158][T17589] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.739954][T17589] bridge_slave_0: entered allmulticast mode [ 1415.790962][T17589] bridge_slave_0: entered promiscuous mode [ 1415.853816][T17589] bridge0: port 2(bridge_slave_1) entered blocking state [ 1415.861607][T17589] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.880669][T17589] bridge_slave_1: entered allmulticast mode [ 1415.970188][T17589] bridge_slave_1: entered promiscuous mode [ 1416.253913][T17679] "syz.4.3498" (17679) uses obsolete ecb(arc4) skcipher [ 1416.392948][T17589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1416.508359][T17589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1416.609795][ T1140] hsr_slave_0: left promiscuous mode [ 1416.636825][ T1140] hsr_slave_1: left promiscuous mode [ 1416.665650][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1416.673451][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1416.716211][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1416.723911][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1416.787338][ T1140] veth1_macvtap: left promiscuous mode [ 1416.793053][ T1140] veth0_macvtap: left promiscuous mode [ 1416.841187][ T1140] veth1_vlan: left promiscuous mode [ 1416.868433][ T1140] veth0_vlan: left promiscuous mode [ 1418.920261][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 1419.016907][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 1420.686727][T17589] team0: Port device team_slave_0 added [ 1420.751026][T17589] team0: Port device team_slave_1 added [ 1421.067877][ T1140] IPVS: stop unused estimator thread 0... [ 1421.083794][T17589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1421.091113][T17589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.117433][T17589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1421.406689][T17745] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1421.430121][T17589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1421.438757][T17589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1421.468461][T17589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1421.701426][T17751] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3520'. [ 1422.123457][T17589] hsr_slave_0: entered promiscuous mode [ 1422.170441][T17589] hsr_slave_1: entered promiscuous mode [ 1422.204460][T17589] debugfs: 'hsr0' already exists in 'hsr' [ 1422.210573][T17589] Cannot create hsr debugfs directory [ 1427.034247][T17589] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1428.095896][T17589] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1428.231624][T17589] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1428.351364][T17589] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1429.662035][T17589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1429.893026][T17589] 8021q: adding VLAN 0 to HW filter on device team0 [ 1429.973018][ T174] bridge0: port 1(bridge_slave_0) entered blocking state [ 1429.980547][ T174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1430.598434][ T7435] bridge0: port 2(bridge_slave_1) entered blocking state [ 1430.606050][ T7435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1432.436499][T17852] netlink: 'syz.5.3552': attribute type 5 has an invalid length. [ 1436.309546][T17589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1437.097040][T17949] fuse: Unknown parameter 'use00000000000000000000' [ 1438.115050][T17953] netlink: 'syz.1.3567': attribute type 5 has an invalid length. [ 1438.366837][T17964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3569'. [ 1439.929368][T17589] veth0_vlan: entered promiscuous mode [ 1440.060474][T17589] veth1_vlan: entered promiscuous mode [ 1440.539896][T17589] veth0_macvtap: entered promiscuous mode [ 1440.641267][T17589] veth1_macvtap: entered promiscuous mode [ 1440.859030][T17589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1440.884508][T17993] fuse: Unknown parameter 'use00000000000000000000' [ 1441.023863][T17589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1441.245832][ T5990] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.298915][ T5990] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.390356][T13519] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1441.450509][ T35] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1450.638332][T18143] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1452.796851][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1452.803447][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1453.132996][T17911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.141186][T17911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.432124][T18060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1453.440658][T18060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1453.472048][T18189] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3616'. [ 1454.065944][T18198] loop7: detected capacity change from 0 to 256 [ 1454.099459][T18198] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d) [ 1454.297776][T18204] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3620'. [ 1461.866942][T18352] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3677'. [ 1464.414666][T18370] lo speed is unknown, defaulting to 1000 [ 1464.420983][T18370] lo speed is unknown, defaulting to 1000 [ 1464.431262][T18370] lo speed is unknown, defaulting to 1000 [ 1464.470994][T18370] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1464.535225][T18370] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 1464.647294][T18370] lo speed is unknown, defaulting to 1000 [ 1464.668757][T18370] lo speed is unknown, defaulting to 1000 [ 1464.682984][T18370] lo speed is unknown, defaulting to 1000 [ 1464.697277][T18370] lo speed is unknown, defaulting to 1000 [ 1464.710415][T18370] lo speed is unknown, defaulting to 1000 [ 1466.446862][T12969] libceph: connect (1)[c::]:6789 error -101 [ 1466.471304][T12969] libceph: mon0 (1)[c::]:6789 connect error [ 1466.555460][T18379] ceph: No mds server is up or the cluster is laggy [ 1466.810919][T18388] fuse: Bad value for 'fd' [ 1468.114385][T18407] siw: device registration error -23 [ 1470.259977][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 1470.319399][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 1470.666547][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 1470.779837][T18432] siw: device registration error -23 [ 1470.885101][T18425] ceph: No mds server is up or the cluster is laggy [ 1471.647999][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 1474.233645][ T5800] Bluetooth: hci5: unexpected event for opcode 0x080d [ 1474.682646][T18483] fuse: Unknown parameter '0x0000000000000003' [ 1476.706591][T18522] fuse: Unknown parameter '0x0000000000000003' [ 1476.995071][T18526] team_slave_0: entered allmulticast mode [ 1477.097556][T18531] team_slave_0: entered promiscuous mode [ 1477.646619][T18541] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 1477.655959][T18541] overlayfs: missing 'lowerdir' [ 1478.843011][T18564] fuse: Unknown parameter '0x0000000000000003' [ 1480.471867][ T5800] Bluetooth: hci0: unexpected subevent 0x0e length: 244 > 15 [ 1480.480828][ T5800] Bluetooth: hci0: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1481.017962][T18601] fuse: Unknown parameter '0x0000000000000003' [ 1481.833090][T18610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3762'. [ 1481.896024][T18607] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1483.317882][ T5800] Bluetooth: hci3: unexpected subevent 0x0e length: 244 > 15 [ 1483.335415][ T5800] Bluetooth: hci3: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1483.667428][T18633] fuse: Unknown parameter 'fd0x0000000000000003' [ 1485.051982][ T5918] libceph: connect (1)[c::]:6789 error -101 [ 1485.095282][ T5918] libceph: mon0 (1)[c::]:6789 connect error [ 1485.216764][ T5800] Bluetooth: hci4: unexpected subevent 0x0e length: 244 > 15 [ 1485.228021][ T5800] Bluetooth: hci4: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1485.303127][T18657] ceph: No mds server is up or the cluster is laggy [ 1486.901961][T18679] fuse: Unknown parameter 'fd0x0000000000000003' [ 1487.937037][ T5800] Bluetooth: hci5: unexpected subevent 0x0e length: 244 > 15 [ 1487.945179][ T5800] Bluetooth: hci5: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1489.186501][T18715] fuse: Unknown parameter 'fd0x0000000000000003' [ 1489.192519][T16724] libceph: connect (1)[c::]:6789 error -101 [ 1489.210408][T16724] libceph: mon0 (1)[c::]:6789 connect error [ 1489.315991][T18712] ceph: No mds server is up or the cluster is laggy [ 1489.323835][T16724] libceph: connect (1)[c::]:6789 error -101 [ 1489.345916][T16724] libceph: mon0 (1)[c::]:6789 connect error [ 1489.615629][T18723] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3802'. [ 1491.859650][ T5800] Bluetooth: hci5: adv larger than maximum supported [ 1491.859760][ T5800] Bluetooth: hci5: Unknown advertising packet type: 0x7f [ 1491.866804][ T5800] Bluetooth: hci5: Malformed LE Event: 0x0d [ 1492.441211][ T30] audit: type=1800 audit(1769226789.507:1084): pid=18769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3818" name="nullb0" dev="tmpfs" ino=1252 res=0 errno=0 [ 1493.971629][T18793] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3826'. [ 1494.006464][T18793] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3826'. [ 1497.255138][T18850] xt_hashlimit: size too large, truncated to 1048576 [ 1499.296153][T18886] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3853'. [ 1501.070889][T18923] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3867'. [ 1501.296268][T18927] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3868'. [ 1503.142836][T18961] netlink: 763 bytes leftover after parsing attributes in process `syz.7.3880'. [ 1503.599424][T18968] netlink: 104 bytes leftover after parsing attributes in process `syz.4.3881'. [ 1505.468431][T18997] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3893'. [ 1507.211556][T19026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1507.236842][T19026] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3904'. [ 1507.573141][T19030] netlink: 763 bytes leftover after parsing attributes in process `syz.4.3906'. [ 1508.152046][T19044] fuse: Unknown parameter 'group_id00000000000000000000' [ 1508.301188][ T5800] Bluetooth: hci3: unexpected event for opcode 0x080d [ 1509.155527][T19063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1509.216942][T19063] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3918'. [ 1510.071759][T19080] fuse: Bad value for 'user_id' [ 1510.077285][T19080] fuse: Bad value for 'user_id' [ 1510.607387][T19090] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1510.643852][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3930'. [ 1511.239246][T19101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1511.266627][T19101] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3932'. [ 1511.815803][T19111] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3939'. [ 1512.940338][T19125] netlink: 763 bytes leftover after parsing attributes in process `syz.1.3945'. [ 1513.130842][T19134] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3948'. [ 1513.186171][T19134] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3948'. [ 1514.221549][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1514.229323][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1515.490636][T19175] netlink: 763 bytes leftover after parsing attributes in process `syz.2.3960'. [ 1515.732407][T19181] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3962'. [ 1515.767565][T19181] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3962'. [ 1523.135469][T19305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4002'. [ 1524.451502][T16724] libceph: connect (1)[c::]:6789 error -101 [ 1524.600782][T19328] ceph: No mds server is up or the cluster is laggy [ 1524.676286][T16724] libceph: mon0 (1)[c::]:6789 connect error [ 1529.184650][T16724] libceph: connect (1)[c::]:6789 error -101 [ 1529.191332][T16724] libceph: mon0 (1)[c::]:6789 connect error [ 1529.344351][T19392] ceph: No mds server is up or the cluster is laggy [ 1531.635538][ T5800] Bluetooth: hci0: command 0x0406 tx timeout [ 1534.031381][T19470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4056'. [ 1534.041020][T19470] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4056'. [ 1535.923210][T19507] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4070'. [ 1535.936628][T19507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4070'. [ 1537.656545][T19548] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4085'. [ 1539.884325][T19579] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1540.607629][T19586] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4099'. [ 1540.846707][T19590] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4100'. [ 1543.045658][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4113'. [ 1543.108928][T19624] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4113'. [ 1543.531393][T19629] netlink: 32 bytes leftover after parsing attributes in process `syz.7.4114'. [ 1544.308593][T19641] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 1546.465664][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1546.566146][T19668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4128'. [ 1547.655708][T19687] netlink: 'syz.7.4136': attribute type 5 has an invalid length. [ 1547.663695][T19687] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4136'. [ 1549.886475][T19703] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 1550.481799][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4142'. [ 1550.700228][T19711] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4142'. [ 1552.364601][T19732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4149'. [ 1552.850111][T19738] netlink: 'syz.7.4151': attribute type 5 has an invalid length. [ 1552.858213][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4151'. [ 1552.878116][ T5787] Bluetooth: hci4: unexpected event for opcode 0x3030 [ 1553.398931][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4155'. [ 1553.458751][T19749] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4155'. [ 1555.461664][ T5839] libceph: connect (1)[c::]:6789 error -101 [ 1555.568102][T19768] ceph: No mds server is up or the cluster is laggy [ 1555.632796][ T5839] libceph: mon0 (1)[c::]:6789 connect error [ 1556.348248][T19779] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4165'. [ 1556.708919][T19782] netlink: 'syz.2.4166': attribute type 5 has an invalid length. [ 1556.724231][T19782] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4166'. [ 1557.568139][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4170'. [ 1557.614379][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4170'. [ 1562.008336][T16724] libceph: connect (1)[c::]:6789 error -101 [ 1562.015324][T16724] libceph: mon0 (1)[c::]:6789 connect error [ 1562.150456][T19827] ceph: No mds server is up or the cluster is laggy [ 1562.626761][T19834] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4183'. [ 1562.708567][T19835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4183'. [ 1565.305457][T19869] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4195'. [ 1565.367979][T19874] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4195'. [ 1566.285455][T16724] libceph: connect (1)[c::]:6789 error -101 [ 1566.292010][T16724] libceph: mon0 (1)[c::]:6789 connect error [ 1566.468424][T19879] ceph: No mds server is up or the cluster is laggy [ 1566.636440][T16724] libceph: connect (1)[c::]:6789 error -101 [ 1566.718532][T16724] libceph: mon0 (1)[c::]:6789 connect error [ 1568.989512][T19909] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1569.025707][T19909] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4208'. [ 1570.907791][T19944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4221'. [ 1570.985130][T19944] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4221'. [ 1572.865574][T19983] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4236'. [ 1572.913959][T19983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4236'. [ 1574.766185][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4251'. [ 1575.568619][T20028] lo speed is unknown, defaulting to 1000 [ 1575.667804][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1575.674485][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1575.678184][T20034] 9p: Bad value for 'rfdno' [ 1576.412324][T20046] bridge0: entered promiscuous mode [ 1576.498652][T20046] vlan2: entered promiscuous mode [ 1576.537212][T20046] bridge0: port 3(vlan2) entered blocking state [ 1576.544010][T20046] bridge0: port 3(vlan2) entered disabled state [ 1576.587032][T20046] vlan2: entered allmulticast mode [ 1576.592496][T20046] bridge0: entered allmulticast mode [ 1576.636484][T20052] netlink: 36 bytes leftover after parsing attributes in process `syz.7.4262'. [ 1576.649176][T20046] vlan2: left allmulticast mode [ 1576.654203][T20046] bridge0: left allmulticast mode [ 1577.450833][T20061] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4265'. [ 1578.589055][T20081] netlink: 182 bytes leftover after parsing attributes in process `syz.7.4273'. [ 1578.991163][T20092] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4277'. [ 1579.191384][T20097] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4278'. [ 1580.268784][T20108] bridge0: port 2(bridge_slave_1) entered disabled state [ 1580.277150][T20108] bridge0: port 1(bridge_slave_0) entered disabled state [ 1580.286673][T20108] bridge0: entered promiscuous mode [ 1580.336514][T20108] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 1582.421396][ T30] audit: type=1800 audit(1769226879.487:1085): pid=20121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4286" name="file1" dev="tmpfs" ino=1807 res=0 errno=0 [ 1583.201250][T20133] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4289'. [ 1583.309169][T20135] overlayfs: failed to resolve './bus': -2 [ 1583.448716][T20135] lo speed is unknown, defaulting to 1000 [ 1584.860166][T20143] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4292'. [ 1587.388146][T20182] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4306'. [ 1590.343871][T20204] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4312'. [ 1592.076474][T20222] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4317'. [ 1592.763235][T20233] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4321'. [ 1593.265722][T20246] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4325'. [ 1595.345667][T20281] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4340'. [ 1597.704112][T20324] overlayfs: failed to clone lowerpath [ 1597.739778][T20324] overlayfs: failed to clone lowerpath [ 1600.300259][T20359] fuse: Bad value for 'fd' [ 1602.162548][T20398] fuse: Bad value for 'fd' [ 1605.063403][T20437] fuse: Bad value for 'fd' [ 1615.131781][T20491] ip6gretap0: entered promiscuous mode [ 1615.142355][T20491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4408'. [ 1615.219076][T20491] ip6gretap0 (unregistering): left promiscuous mode [ 1620.517581][T20519] lo speed is unknown, defaulting to 1000 [ 1620.678451][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1620.687623][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1620.697655][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1620.760185][ T5800] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1620.771155][ T5800] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1622.226282][T20528] lo speed is unknown, defaulting to 1000 [ 1622.675093][T20542] x_tables: duplicate underflow at hook 1 [ 1622.836695][ T5800] Bluetooth: hci1: command tx timeout [ 1624.167638][T20528] chnl_net:caif_netlink_parms(): no params data found [ 1624.915130][ T5800] Bluetooth: hci1: command tx timeout [ 1626.068741][T20528] bridge0: port 1(bridge_slave_0) entered blocking state [ 1626.076340][T20528] bridge0: port 1(bridge_slave_0) entered disabled state [ 1626.126900][T20528] bridge_slave_0: entered allmulticast mode [ 1626.189117][T20528] bridge_slave_0: entered promiscuous mode [ 1626.371845][T20528] bridge0: port 2(bridge_slave_1) entered blocking state [ 1626.379497][T20528] bridge0: port 2(bridge_slave_1) entered disabled state [ 1626.498833][T20528] bridge_slave_1: entered allmulticast mode [ 1626.552021][T20528] bridge_slave_1: entered promiscuous mode [ 1626.996196][ T5800] Bluetooth: hci1: command tx timeout [ 1627.618073][T20528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1627.792750][T20528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1628.451710][T20528] team0: Port device team_slave_0 added [ 1628.649917][T20528] team0: Port device team_slave_1 added [ 1628.930589][T20528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1628.937908][T20528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1628.964729][T20528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1629.079676][ T5800] Bluetooth: hci1: command tx timeout [ 1629.090724][T20528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1629.101251][T20528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1629.130446][T20528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1629.430912][T20528] hsr_slave_0: entered promiscuous mode [ 1630.316546][T20528] hsr_slave_1: entered promiscuous mode [ 1630.446755][T20528] debugfs: 'hsr0' already exists in 'hsr' [ 1630.452646][T20528] Cannot create hsr debugfs directory [ 1633.870385][T20528] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1634.003648][T20528] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1634.085188][T20528] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1634.164416][T20528] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1635.076189][T20654] overlayfs: missing 'lowerdir' [ 1635.961106][T20664] overlayfs: failed to clone lowerpath [ 1636.035162][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4449'. [ 1636.049097][T20665] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4449'. [ 1636.488810][T20528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1636.848539][T20528] 8021q: adding VLAN 0 to HW filter on device team0 [ 1637.122931][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1637.130186][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1637.173454][T18053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1637.181044][T18053] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1637.499788][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state [ 1637.507456][ T6057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1639.423099][T20695] overlayfs: failed to resolve './bus': -2 [ 1639.833645][T20528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1641.205977][T20711] 9p: Bad value for 'wfdno' [ 1644.860074][T20741] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4471'. [ 1648.388003][T20528] veth0_vlan: entered promiscuous mode [ 1648.548690][T20528] veth1_vlan: entered promiscuous mode [ 1649.431239][T20528] veth0_macvtap: entered promiscuous mode [ 1649.567315][T20528] veth1_macvtap: entered promiscuous mode [ 1649.803591][T20528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1649.874265][T20528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1651.410151][T20786] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4484'. [ 1651.462785][T18053] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.553301][T18053] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.697994][T18053] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1651.775361][T17919] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1653.249740][T20802] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4487'. [ 1653.259166][T20802] netlink: 96 bytes leftover after parsing attributes in process `syz.1.4487'. [ 1653.268619][T20802] vlan1: entered allmulticast mode [ 1653.277184][T20802] veth0_vlan: entered allmulticast mode [ 1656.325333][T20821] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4494'. [ 1661.982802][T10686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1661.990873][T10686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.283434][T17911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1662.294634][T17911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1662.855958][T20884] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4505'. [ 1664.516823][T20889] netlink: 44 bytes leftover after parsing attributes in process `syz.4.4507'. [ 1670.439138][T20939] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4524'. [ 1671.575892][T20949] ===================================================== [ 1671.583329][T20949] BUG: KMSAN: uninit-value in eth_type_trans+0x6a2/0x9b0 [ 1671.590709][T20949] eth_type_trans+0x6a2/0x9b0 [ 1671.595666][T20949] __dev_forward_skb2+0x4b1/0x950 [ 1671.600971][T20949] dev_forward_skb_nomtu+0x3b/0xe0 [ 1671.606315][T20949] __bpf_redirect+0x14d7/0x1760 [ 1671.611432][T20949] bpf_clone_redirect+0x4b5/0x6d0 [ 1671.616718][T20949] ___bpf_prog_run+0x12af/0xeb60 [ 1671.621884][T20949] __bpf_prog_run512+0xc5/0x100 [ 1671.626973][T20949] bpf_test_run+0x493/0xdf0 [ 1671.631727][T20949] bpf_prog_test_run_skb+0x2376/0x3200 [ 1671.637447][T20949] bpf_prog_test_run+0x5bb/0x9f0 [ 1671.642572][T20949] __sys_bpf+0x873/0xeb0 [ 1671.647035][T20949] __x64_sys_bpf+0xa4/0xf0 [ 1671.651573][T20949] x64_sys_call+0x31c3/0x3e70 [ 1671.656533][T20949] do_syscall_64+0xc9/0xf80 [ 1671.661297][T20949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.667444][T20949] [ 1671.669825][T20949] Uninit was created at: [ 1671.674314][T20949] kmem_cache_alloc_node_noprof+0x9de/0x1780 [ 1671.680535][T20949] kmalloc_reserve+0x13c/0x4b0 [ 1671.685563][T20949] pskb_expand_head+0x1fc/0x15a0 [ 1671.690659][T20949] skb_ensure_writable+0x44e/0x510 [ 1671.696032][T20949] bpf_clone_redirect+0x310/0x6d0 [ 1671.701217][T20949] ___bpf_prog_run+0x12af/0xeb60 [ 1671.706380][T20949] __bpf_prog_run512+0xc5/0x100 [ 1671.711375][T20949] bpf_test_run+0x493/0xdf0 [ 1671.716137][T20949] bpf_prog_test_run_skb+0x2376/0x3200 [ 1671.721768][T20949] bpf_prog_test_run+0x5bb/0x9f0 [ 1671.726949][T20949] __sys_bpf+0x873/0xeb0 [ 1671.731317][T20949] __x64_sys_bpf+0xa4/0xf0 [ 1671.735948][T20949] x64_sys_call+0x31c3/0x3e70 [ 1671.740787][T20949] do_syscall_64+0xc9/0xf80 [ 1671.745536][T20949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.751568][T20949] [ 1671.753981][T20949] CPU: 0 UID: 0 PID: 20949 Comm: syz.6.4525 Tainted: G W L syzkaller #0 PREEMPT(voluntary) [ 1671.765620][T20949] Tainted: [W]=WARN, [L]=SOFTLOCKUP [ 1671.770887][T20949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1671.781132][T20949] ===================================================== [ 1671.788237][T20949] Disabling lock debugging due to kernel taint [ 1671.794471][T20949] Kernel panic - not syncing: kmsan.panic set ... [ 1671.800993][T20949] CPU: 0 UID: 0 PID: 20949 Comm: syz.6.4525 Tainted: G B W L syzkaller #0 PREEMPT(voluntary) [ 1671.812573][T20949] Tainted: [B]=BAD_PAGE, [W]=WARN, [L]=SOFTLOCKUP [ 1671.819068][T20949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/13/2026 [ 1671.829225][T20949] Call Trace: [ 1671.832581][T20949] [ 1671.835587][T20949] __dump_stack+0x26/0x30 [ 1671.840075][T20949] dump_stack_lvl+0x50/0x1c0 [ 1671.844820][T20949] ? dump_stack+0x12/0x25 [ 1671.849308][T20949] dump_stack+0x1e/0x25 [ 1671.853619][T20949] vpanic+0x435/0xd40 [ 1671.857772][T20949] panic+0x15d/0x160 [ 1671.861872][T20949] kmsan_report+0x31a/0x320 [ 1671.866571][T20949] ? __msan_warning+0x1b/0x30 [ 1671.871480][T20949] ? eth_type_trans+0x6a2/0x9b0 [ 1671.876527][T20949] ? __dev_forward_skb2+0x4b1/0x950 [ 1671.881870][T20949] ? dev_forward_skb_nomtu+0x3b/0xe0 [ 1671.887299][T20949] ? __bpf_redirect+0x14d7/0x1760 [ 1671.892489][T20949] ? bpf_clone_redirect+0x4b5/0x6d0 [ 1671.897858][T20949] ? ___bpf_prog_run+0x12af/0xeb60 [ 1671.903113][T20949] ? __bpf_prog_run512+0xc5/0x100 [ 1671.908290][T20949] ? bpf_test_run+0x493/0xdf0 [ 1671.913135][T20949] ? bpf_prog_test_run_skb+0x2376/0x3200 [ 1671.918945][T20949] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1671.924217][T20949] ? __sys_bpf+0x873/0xeb0 [ 1671.928764][T20949] ? __x64_sys_bpf+0xa4/0xf0 [ 1671.933480][T20949] ? x64_sys_call+0x31c3/0x3e70 [ 1671.938502][T20949] ? do_syscall_64+0xc9/0xf80 [ 1671.943356][T20949] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1671.949574][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1671.954886][T20949] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1671.960898][T20949] ? should_fail_ex+0x45/0x8a0 [ 1671.965956][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1671.971265][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1671.976568][T20949] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1671.983081][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1671.988392][T20949] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1671.994396][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1671.999703][T20949] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1672.006226][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.011544][T20949] __msan_warning+0x1b/0x30 [ 1672.016221][T20949] eth_type_trans+0x6a2/0x9b0 [ 1672.021111][T20949] __dev_forward_skb2+0x4b1/0x950 [ 1672.026303][T20949] ? pskb_expand_head+0x11f0/0x15a0 [ 1672.031698][T20949] dev_forward_skb_nomtu+0x3b/0xe0 [ 1672.036959][T20949] __bpf_redirect+0x14d7/0x1760 [ 1672.041990][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.047313][T20949] bpf_clone_redirect+0x4b5/0x6d0 [ 1672.052540][T20949] ___bpf_prog_run+0x12af/0xeb60 [ 1672.057664][T20949] __bpf_prog_run512+0xc5/0x100 [ 1672.062692][T20949] ? kmsan_internal_poison_memory+0x78/0x90 [ 1672.068765][T20949] ? kmsan_internal_poison_memory+0x4a/0x90 [ 1672.074832][T20949] ? kmsan_slab_alloc+0xdc/0x160 [ 1672.079937][T20949] ? kmem_cache_alloc_noprof+0x967/0x1730 [ 1672.085914][T20949] ? slab_build_skb+0x5c/0x5a0 [ 1672.090818][T20949] ? bpf_prog_test_run_skb+0x750/0x3200 [ 1672.096533][T20949] ? bpf_prog_test_run+0x5bb/0x9f0 [ 1672.101793][T20949] ? __sys_bpf+0x873/0xeb0 [ 1672.106339][T20949] ? __x64_sys_bpf+0xa4/0xf0 [ 1672.111056][T20949] ? x64_sys_call+0x31c3/0x3e70 [ 1672.116082][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.121394][T20949] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1672.127409][T20949] ? bpf_test_run+0x11/0xdf0 [ 1672.132170][T20949] ? filter_irq_stacks+0x49/0x190 [ 1672.137461][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.142764][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.148063][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.153368][T20949] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 1672.159885][T20949] ? kmsan_get_metadata+0x146/0x160 [ 1672.165275][T20949] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1672.171276][T20949] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1672.176892][T20949] ? __pfx___bpf_prog_run512+0x10/0x10 [ 1672.182507][T20949] bpf_test_run+0x493/0xdf0 [ 1672.187175][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.192476][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.197775][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.203081][T20949] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1672.209105][T20949] ? bpf_test_run+0x2f4/0xdf0 [ 1672.213972][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.219279][T20949] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1672.225291][T20949] bpf_prog_test_run_skb+0x2376/0x3200 [ 1672.230926][T20949] ? kmsan_get_metadata+0xf1/0x160 [ 1672.236252][T20949] ? __rcu_read_unlock+0x6c/0xd0 [ 1672.241491][T20949] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 1672.247474][T20949] bpf_prog_test_run+0x5bb/0x9f0 [ 1672.252588][T20949] __sys_bpf+0x873/0xeb0 [ 1672.257015][T20949] __x64_sys_bpf+0xa4/0xf0 [ 1672.261584][T20949] x64_sys_call+0x31c3/0x3e70 [ 1672.266437][T20949] do_syscall_64+0xc9/0xf80 [ 1672.271110][T20949] ? clear_bhb_loop+0x40/0x90 [ 1672.275947][T20949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1672.281990][T20949] RIP: 0033:0x7fea4899acb9 [ 1672.286511][T20949] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1672.306268][T20949] RSP: 002b:00007fea49885028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1672.314833][T20949] RAX: ffffffffffffffda RBX: 00007fea48c16180 RCX: 00007fea4899acb9 [ 1672.322926][T20949] RDX: 0000000000000023 RSI: 0000200000000240 RDI: 000000000000000a [ 1672.331009][T20949] RBP: 00007fea48a08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 1672.339093][T20949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1672.347173][T20949] R13: 00007fea48c16218 R14: 00007fea48c16180 R15: 00007ffdb9ffa828 [ 1672.355296][T20949] [ 1672.358743][T20949] Kernel Offset: disabled [ 1672.363105][T20949] Rebooting in 86400 seconds..