last executing test programs: 5m10.738349746s ago: executing program 0 (id=783): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) 5m10.603313499s ago: executing program 0 (id=786): openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006340)="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", 0x2000, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x800}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fallocate(r2, 0x0, 0x460e, 0x3) close(r0) 5m10.355357984s ago: executing program 0 (id=795): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x10, 0x3, 0x5) 5m10.211912538s ago: executing program 0 (id=799): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) 5m10.080080381s ago: executing program 0 (id=803): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x11, 0x2c, &(0x7f0000000480)={0x3, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2c}}}, {{0x2, 0x4e22, @multicast1}}}, 0x108) 5m9.807420439s ago: executing program 0 (id=807): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000600)=0xdfa, 0x4) 5m9.616516548s ago: executing program 32 (id=807): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r2, 0x1, 0x26, &(0x7f0000000600)=0xdfa, 0x4) 5m9.513552308s ago: executing program 3 (id=813): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@index_on}]}) 5m9.227913626s ago: executing program 3 (id=816): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x24000]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000005800)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008080}, 0x0) 5m9.08732537s ago: executing program 3 (id=818): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYRES16=r3, @ANYBLOB="01060000000000000000090000002c0004"], 0xac}}, 0x0) 5m8.975945552s ago: executing program 3 (id=819): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3001009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x14a0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0) setxattr$security_capability(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x0) 5m8.284986721s ago: executing program 3 (id=830): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 5m5.591916579s ago: executing program 3 (id=868): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, 0x0) 5m5.445700394s ago: executing program 33 (id=868): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000080)) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa07, 0x0) 3m42.574268208s ago: executing program 5 (id=2533): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0xc]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) fsync(0xffffffffffffffff) 3m42.404152025s ago: executing program 5 (id=2538): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) 3m42.167382269s ago: executing program 5 (id=2544): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) connect$inet6(r2, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) write(r2, &(0x7f00000000c0)="8f2a0a65bd8c2c2b0304000eff0200000000000086a5cefe", 0x5ac) 3m42.061894459s ago: executing program 5 (id=2556): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000d00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRESHEX, @ANYBLOB="b5aeb8ee41283894d3a92a5f2e938d001e75134a6c84b5af394f7acfd82e32c798c8b845b9669f24699212cd02e80152f05442f604af4273f7da7d6056123abc53d651b4bca585c211a7", @ANYRESDEC], 0x0, 0x2ba, &(0x7f0000000e00)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 3m41.739142642s ago: executing program 5 (id=2553): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_SET_SECUREBITS(0x1c, 0x1d) setuid(0xee01) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) 3m40.161629659s ago: executing program 5 (id=2569): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'veth0_vlan\x00', {}, 0x8}) 3m40.003523105s ago: executing program 34 (id=2569): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f0000000000)={0x1, 'veth0_vlan\x00', {}, 0x8}) 3m36.408580883s ago: executing program 2 (id=2604): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000340)=[@mss={0x2, 0x1}, @timestamp, @window={0x3, 0x5, 0x4}, @window={0x3, 0x100, 0x4}], 0x4) 3m36.203220204s ago: executing program 2 (id=2617): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) fchown(r2, r3, 0xffffffffffffffff) 3m34.977187607s ago: executing program 2 (id=2610): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000002c0)="ea", 0x1}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}}], 0x1, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r4, 0x0, 0x39000, 0x0) 3m34.684810666s ago: executing program 2 (id=2612): bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./bus\x00', 0x2000414, &(0x7f0000000d00)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRES64, @ANYRESHEX, @ANYBLOB="b5aeb8ee41283894d3a92a5f2e938d001e75134a6c84b5af394f7acfd82e32c798c8b845b9669f24699212cd02e80152f05442f604af4273f7da7d6056123abc53d651b4bca585c211a7", @ANYRESDEC], 0x0, 0x2ba, &(0x7f0000000e00)="$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") setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 3m34.336466521s ago: executing program 2 (id=2616): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') 3m33.805732033s ago: executing program 2 (id=2618): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) 3m33.521508182s ago: executing program 35 (id=2618): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) 1m51.430372775s ago: executing program 6 (id=4505): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) write(r0, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1m51.346959143s ago: executing program 6 (id=4509): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_80211_inject_frame(0x0, 0x0, 0x0) 1m50.634837595s ago: executing program 6 (id=4521): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) futex(0x0, 0x80000000000b, 0x0, 0x0, 0x0, 0x300) 1m50.572886311s ago: executing program 6 (id=4522): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) 1m50.472461961s ago: executing program 6 (id=4526): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5f114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x12, r3, 0x2000) 1m50.227540245s ago: executing program 6 (id=4533): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xcb, &(0x7f0000000080)=0x7ac6, 0x4) 1m50.146021793s ago: executing program 36 (id=4533): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r3, 0x29, 0xcb, &(0x7f0000000080)=0x7ac6, 0x4) 11.937643208s ago: executing program 8 (id=6232): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x82802, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r2, 0x400455c8, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xae) 2.663690604s ago: executing program 7 (id=6371): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000100)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000900)='T', 0x1}], 0x1}, 0x4048841) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x22100) 2.60319625s ago: executing program 1 (id=6373): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = syz_clone(0x0, 0x0, 0xfffffffffffffdd6, 0x0, 0x0, 0x0) ptrace(0x10, r2) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90}, 0x0) wait4(r2, 0x0, 0x1, 0x0) 2.430078987s ago: executing program 1 (id=6375): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @loopback, 0x1}, 0x10) 2.234692237s ago: executing program 1 (id=6380): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00'}) 2.075398443s ago: executing program 1 (id=6382): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) signalfd(r2, 0x0, 0x0) 2.00661136s ago: executing program 4 (id=6383): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020300001800000000000000000000000400030000000000fdffffffffffffff07000000000000000000000000000000050006006c0000000a00000000000000fc010000000000000000000000001700000000000000000004000400000000000700000000000000000000000000000000000000000000000200010000000000000000060000000005000500008000000a00000000000000ff0100000000000000000000000000010000000000000000020013"], 0xc0}}, 0x0) 1.956959545s ago: executing program 1 (id=6384): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getgroups(0x0, 0x0) 1.80167466s ago: executing program 1 (id=6387): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r2, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0) syz_usb_disconnect(r3) 1.69949827s ago: executing program 4 (id=6389): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6f, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0x17, &(0x7f0000000180)={0x0, 0xdc000004, 0x0, {[0x6]}}, 0x0, 0x8, &(0x7f0000000300)) 1.650053795s ago: executing program 4 (id=6391): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) keyctl$get_security(0x11, 0x0, 0x0, 0x0) 1.619536138s ago: executing program 9 (id=6392): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_TIMEOUT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x890}, 0x44000) 1.561647104s ago: executing program 4 (id=6394): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfd}}, {{0xa, 0x4e20, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000002c0)={0x8, {{0xa, 0x4e20, 0x4, @mcast2, 0x6}}, {{0xa, 0x4e21, 0x4e11, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x5}}}, 0x108) getsockopt$inet6_buf(r2, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6) 1.556038695s ago: executing program 7 (id=6395): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4000, 0x0, &(0x7f0000001000/0x4000)=nil) 1.514160719s ago: executing program 9 (id=6396): r0 = epoll_create1(0x0) io_setup(0x1, &(0x7f0000000000)=0x0) io_submit(r1, 0x2, &(0x7f0000000480)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x7, 0xe, r0, 0x0, 0x0, 0x7}]) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f00000001c0)=0xffff8001, 0x4) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r2, 0x852ac000) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0xffffffff, @loopback, 0xbf}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000280)=0x6c, 0x4) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000080)=0x9, 0x4) recvmmsg(r2, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002000, 0x0) 1.431646237s ago: executing program 4 (id=6397): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00), 0xe3, 0x4000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r2, &(0x7f0000000600)=ANY=[], 0x78) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 1.380515842s ago: executing program 4 (id=6398): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x1) fsconfig$FSCONFIG_SET_FD(r3, 0x5, 0x0, 0x0, 0xffffffffffffffff) 1.371315953s ago: executing program 7 (id=6399): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setrlimit(0x9, &(0x7f0000000000)={0x0, 0xfffffffffffffffe}) io_setup(0x2004, &(0x7f0000000680)) 1.193362651s ago: executing program 9 (id=6400): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x0, &(0x7f0000000b00)={[{@quota}, {@init_itable}]}, 0x1, 0x24e, &(0x7f0000000340)="$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") r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) fdatasync(r3) 417.867868ms ago: executing program 8 (id=6401): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='cgroup.controllers\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)) ioctl$SIOCSIFHWADDR(r2, 0x8b0d, &(0x7f0000000000)={'wg1\x00'}) 409.472479ms ago: executing program 7 (id=6402): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f0000000580)={0x5, {{0xa, 0x4e21, 0x200000f, @mcast2, 0x10000}}, {{0xa, 0x4e23, 0xff, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xdbd4}}}, 0x108) 296.302781ms ago: executing program 8 (id=6403): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r2, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40040) r3 = socket(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000001a0001002abd70000000000002"], 0x78}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 295.123071ms ago: executing program 9 (id=6404): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x80, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="07000000040000000800000001000000a9"], 0x48) 243.479726ms ago: executing program 7 (id=6405): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, 0x0) 242.738706ms ago: executing program 8 (id=6406): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x3) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x1, 0x12, r2, 0x0) lseek(r2, 0x4, 0x1) 155.888074ms ago: executing program 7 (id=6407): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40840}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @fd=r0}]}, 0x1c}}, 0x84) 142.547486ms ago: executing program 8 (id=6408): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000c80)={'security\x00', 0x4, "f0fa7c8b"}, &(0x7f0000000d80)=0x28) 91.030601ms ago: executing program 9 (id=6409): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) getpid() 9.385909ms ago: executing program 8 (id=6410): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000080)={[{@debug}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xff) 0s ago: executing program 9 (id=6411): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) recvmmsg(r0, &(0x7f00000002c0), 0x220, 0x100, 0x0) kernel console output (not intermixed with test programs): which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.545159][T10659] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.724321][T10659] device hsr_slave_0 entered promiscuous mode [ 196.780492][T10659] device hsr_slave_1 entered promiscuous mode [ 196.825228][T10659] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.863620][T10659] Cannot create hsr debugfs directory [ 197.110409][T10757] loop6: detected capacity change from 0 to 256 [ 197.217807][T10757] FAT-fs (loop6): Directory bread(block 64) failed [ 197.242124][T10757] FAT-fs (loop6): Directory bread(block 65) failed [ 197.271854][T10757] FAT-fs (loop6): Directory bread(block 66) failed [ 197.279593][T10760] loop4: detected capacity change from 0 to 512 [ 197.289684][T10757] FAT-fs (loop6): Directory bread(block 67) failed [ 197.306757][T10757] FAT-fs (loop6): Directory bread(block 68) failed [ 197.326262][T10757] FAT-fs (loop6): Directory bread(block 69) failed [ 197.345037][T10659] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 197.373534][T10757] FAT-fs (loop6): Directory bread(block 70) failed [ 197.404514][T10757] FAT-fs (loop6): Directory bread(block 71) failed [ 197.431752][T10760] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 197.447836][T10757] FAT-fs (loop6): Directory bread(block 72) failed [ 197.450213][T10659] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 197.461227][T10757] FAT-fs (loop6): Directory bread(block 73) failed [ 197.513118][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 197.521872][T10760] ext4 filesystem being mounted at /559/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.587633][T10659] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 197.668293][T10659] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 197.726130][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2653'. [ 198.160491][T10659] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.249853][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 198.271519][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 198.312257][T10659] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.384333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 198.392993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 198.456061][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.463171][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.510413][T10817] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2667'. [ 198.529966][T10821] 9pnet: p9_client_clunk (10821): Trying to clunk with invalid fid [ 198.583758][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 198.591952][T10821] CPU: 1 PID: 10821 Comm: syz.4.2668 Not tainted syzkaller #0 [ 198.599428][T10821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 198.609503][T10821] Call Trace: [ 198.612788][T10821] [ 198.615714][T10821] dump_stack_lvl+0x168/0x230 [ 198.620408][T10821] ? show_regs_print_info+0x20/0x20 [ 198.625277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 198.625621][T10821] ? load_image+0x3b0/0x3b0 [ 198.638172][T10821] ? v9fs_fid_find+0x2d1/0x320 [ 198.642950][T10821] p9_client_clunk+0x2b3/0x380 [ 198.643333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 198.647720][T10821] v9fs_statfs+0x192/0x350 [ 198.647744][T10821] ? v9fs_drop_inode+0x130/0x130 [ 198.647771][T10821] ? __fdget_raw+0xca/0x1b0 [ 198.656296][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.660124][T10821] fd_statfs+0x18e/0x390 [ 198.665098][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.669521][T10821] __x64_sys_fstatfs+0xdd/0x1a0 [ 198.669544][T10821] ? __ia32_sys_statfs64+0x1d0/0x1d0 [ 198.698030][T10821] ? __context_tracking_exit+0x4c/0x80 [ 198.703499][T10821] ? __lock_acquire+0x7c60/0x7c60 [ 198.705757][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 198.708543][T10821] ? lockdep_hardirqs_on+0x94/0x140 [ 198.718176][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 198.721573][T10821] do_syscall_64+0x4c/0xa0 [ 198.721602][T10821] ? clear_bhb_loop+0x30/0x80 [ 198.731000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 198.733850][T10821] ? clear_bhb_loop+0x30/0x80 [ 198.733876][T10821] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 198.756925][T10821] RIP: 0033:0x7faaa1d486c9 [ 198.761346][T10821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 198.766013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 198.780946][T10821] RSP: 002b:00007faa9ffaf038 EFLAGS: 00000246 ORIG_RAX: 000000000000008a [ 198.780971][T10821] RAX: ffffffffffffffda RBX: 00007faaa1f9efa0 RCX: 00007faaa1d486c9 [ 198.780986][T10821] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 198.780998][T10821] RBP: 00007faaa1dcaf91 R08: 0000000000000000 R09: 0000000000000000 [ 198.781010][T10821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 198.829003][T10821] R13: 00007faaa1f9f038 R14: 00007faaa1f9efa0 R15: 00007fffebc46058 [ 198.836993][T10821] [ 198.849284][T10659] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 198.934592][T10659] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.979034][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 199.010803][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 199.030037][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 199.045265][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 199.053788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 199.063743][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 199.094864][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 199.103765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 199.399016][T10857] loop1: detected capacity change from 0 to 512 [ 199.570032][T10857] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 199.628457][T10857] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.644189][ T5069] Bluetooth: hci0: command 0x040f tx timeout [ 199.725132][T10659] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.732994][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 199.742892][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 200.033118][T10905] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2695'. [ 200.114356][T10905] device bridge_slave_1 left promiscuous mode [ 200.154370][T10905] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.235079][T10905] device bridge_slave_0 left promiscuous mode [ 200.241464][T10905] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.557366][T10925] loop6: detected capacity change from 0 to 512 [ 200.654325][T10935] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2704'. [ 200.663252][T10935] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.701696][T10935] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.716983][T10925] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 200.748506][T10925] ext4 filesystem being mounted at /363/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.752028][T10935] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.773304][T10934] can: request_module (can-proto-0) failed. [ 200.799634][T10935] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.134708][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 201.154949][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 201.285279][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 201.299548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 201.320693][T10960] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2713'. [ 201.330357][T10659] device veth0_vlan entered promiscuous mode [ 201.338479][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 201.383036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 201.429731][T10659] device veth1_vlan entered promiscuous mode [ 201.459470][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 201.495510][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2714'. [ 201.539277][T10970] device bridge_slave_1 left promiscuous mode [ 201.564392][T10970] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.596830][T10970] device bridge_slave_0 left promiscuous mode [ 201.615853][T10970] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.706712][ T5069] Bluetooth: hci0: command 0x0419 tx timeout [ 202.675515][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 202.703928][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 202.740882][T10659] device veth0_macvtap entered promiscuous mode [ 202.790468][T10659] device veth1_macvtap entered promiscuous mode [ 202.855900][T10997] loop1: detected capacity change from 0 to 256 [ 202.860950][T10659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.885841][ T5069] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 202.897613][T10659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.937264][T10659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.961872][T10997] FAT-fs (loop1): Directory bread(block 64) failed [ 202.968377][T10659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.982823][T10997] FAT-fs (loop1): Directory bread(block 65) failed [ 203.002640][T10997] FAT-fs (loop1): Directory bread(block 66) failed [ 203.011794][T10659] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.037918][T10997] FAT-fs (loop1): Directory bread(block 67) failed [ 203.050850][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 203.080951][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 203.099449][T10997] FAT-fs (loop1): Directory bread(block 68) failed [ 203.112137][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 203.120427][T10997] FAT-fs (loop1): Directory bread(block 69) failed [ 203.132229][T10997] FAT-fs (loop1): Directory bread(block 70) failed [ 203.141033][T10659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.147604][T10997] FAT-fs (loop1): Directory bread(block 71) failed [ 203.163081][T10997] FAT-fs (loop1): Directory bread(block 72) failed [ 203.170678][T10997] FAT-fs (loop1): Directory bread(block 73) failed [ 203.178590][T10659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.194423][ T5069] usb 8-1: Using ep0 maxpacket: 8 [ 203.224449][T10659] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.259918][T10659] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.298610][T10659] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.335515][ T5069] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 203.349765][T10659] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.354338][ T5069] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 203.413954][ T5069] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 203.418312][T10659] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.450015][ T5069] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 203.463280][T10659] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.493499][T10659] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.496409][ T5069] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 203.531787][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 203.553739][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 203.569140][ T5069] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.581935][T11022] loop4: detected capacity change from 0 to 164 [ 203.796167][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.811253][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.823775][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 203.884352][ T5069] usb 8-1: GET_CAPABILITIES returned 0 [ 203.889894][ T5069] usbtmc 8-1:16.0: can't read capabilities [ 203.923898][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.961736][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.024698][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 204.166359][ T5069] usb 8-1: USB disconnect, device number 2 [ 204.526735][T11056] loop8: detected capacity change from 0 to 256 [ 204.620001][T11056] FAT-fs (loop8): Directory bread(block 64) failed [ 204.658248][T11056] FAT-fs (loop8): Directory bread(block 65) failed [ 204.704511][T11056] FAT-fs (loop8): Directory bread(block 66) failed [ 204.711071][T11056] FAT-fs (loop8): Directory bread(block 67) failed [ 204.744269][T11056] FAT-fs (loop8): Directory bread(block 68) failed [ 204.811526][T11056] FAT-fs (loop8): Directory bread(block 69) failed [ 204.846702][T11056] FAT-fs (loop8): Directory bread(block 70) failed [ 204.882778][T11056] FAT-fs (loop8): Directory bread(block 71) failed [ 204.916645][T11056] FAT-fs (loop8): Directory bread(block 72) failed [ 204.956756][T11056] FAT-fs (loop8): Directory bread(block 73) failed [ 205.068678][T11078] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2753'. [ 205.136087][T11083] netlink: 'syz.7.2754': attribute type 4 has an invalid length. [ 205.143842][T11083] netlink: 'syz.7.2754': attribute type 5 has an invalid length. [ 205.174343][T11083] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.2754'. [ 205.547502][T11107] loop4: detected capacity change from 0 to 136 [ 205.637231][T11107] Attempt to read inode for relocated directory [ 205.813110][T11118] loop4: detected capacity change from 0 to 256 [ 205.950567][T11118] FAT-fs (loop4): Directory bread(block 64) failed [ 205.963707][T11125] loop6: detected capacity change from 0 to 256 [ 205.974264][T11118] FAT-fs (loop4): Directory bread(block 65) failed [ 206.043953][T11118] FAT-fs (loop4): Directory bread(block 66) failed [ 206.070228][T11118] FAT-fs (loop4): Directory bread(block 67) failed [ 206.072114][T11125] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d) [ 206.117701][T11118] FAT-fs (loop4): Directory bread(block 68) failed [ 206.178420][T11118] FAT-fs (loop4): Directory bread(block 69) failed [ 206.192267][T11137] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2774'. [ 206.220498][T11118] FAT-fs (loop4): Directory bread(block 70) failed [ 206.254374][T11118] FAT-fs (loop4): Directory bread(block 71) failed [ 206.254666][T11137] device bridge_slave_1 left promiscuous mode [ 206.261084][T11118] FAT-fs (loop4): Directory bread(block 72) failed [ 206.281519][T11141] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2777'. [ 206.324342][T11137] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.342814][T11118] FAT-fs (loop4): Directory bread(block 73) failed [ 206.363458][T11137] device bridge_slave_0 left promiscuous mode [ 206.388775][T11137] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.848931][T11166] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2787'. [ 208.077052][T11186] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 208.123067][T11190] loop7: detected capacity change from 0 to 256 [ 208.190591][T11190] FAT-fs (loop7): Directory bread(block 64) failed [ 208.219278][T11190] FAT-fs (loop7): Directory bread(block 65) failed [ 208.262747][T11190] FAT-fs (loop7): Directory bread(block 66) failed [ 208.279270][T11190] FAT-fs (loop7): Directory bread(block 67) failed [ 208.286629][T11190] FAT-fs (loop7): Directory bread(block 68) failed [ 208.293247][T11190] FAT-fs (loop7): Directory bread(block 69) failed [ 208.306524][T11190] FAT-fs (loop7): Directory bread(block 70) failed [ 208.320860][T11190] FAT-fs (loop7): Directory bread(block 71) failed [ 208.332678][T11190] FAT-fs (loop7): Directory bread(block 72) failed [ 208.339624][T11190] FAT-fs (loop7): Directory bread(block 73) failed [ 210.098638][T11259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2827'. [ 210.151432][T11259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.183389][T11259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.201321][T11263] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2828'. [ 210.215596][T11259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.230060][T11259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.394294][T11273] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2829'. [ 212.318171][T11357] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2857'. [ 212.328464][T11357] device bridge_slave_1 left promiscuous mode [ 212.335528][T11357] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.392846][T11357] device bridge_slave_0 left promiscuous mode [ 212.407221][T11357] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.589921][T11376] rdma_rxe: ignoring netdev event = 27 for bond_slave_0 [ 212.617944][T11376] rdma_rxe: ignoring netdev event = 26 for bond_slave_0 [ 212.638400][T11376] rdma_rxe: ignoring netdev event = 21 for bond_slave_0 [ 212.670079][T11379] loop6: detected capacity change from 0 to 128 [ 212.674882][T11376] bond0: (slave bond_slave_0): Releasing backup interface [ 212.714780][T11376] rdma_rxe: ignoring netdev event = 9 for bond_slave_0 [ 212.741675][T11376] rdma_rxe: ignoring netdev event = 8 for bond_slave_0 [ 212.767819][T11376] bond0: (slave bond_slave_1): Releasing backup interface [ 212.861851][T11376] team0: Port device team_slave_0 removed [ 212.882496][T11376] team0: Port device team_slave_1 removed [ 212.900153][T11376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.934269][T11376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.953281][T11395] netlink: 'syz.6.2875': attribute type 4 has an invalid length. [ 212.981327][T11395] netlink: 'syz.6.2875': attribute type 5 has an invalid length. [ 213.011266][T11395] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.2875'. [ 213.095225][T11405] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 213.238478][ T26] audit: type=1326 audit(1763444805.408:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11411 comm="syz.6.2884" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff89554c6c9 code=0x0 [ 213.610602][T11426] loop1: detected capacity change from 0 to 512 [ 213.678463][T11426] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback. [ 213.709201][T11426] ext4 filesystem being mounted at /581/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.837819][T11439] loop4: detected capacity change from 0 to 256 [ 213.935720][T11439] FAT-fs (loop4): Directory bread(block 64) failed [ 213.949225][T11443] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2897'. [ 213.967919][T11439] FAT-fs (loop4): Directory bread(block 65) failed [ 214.000215][ T26] audit: type=1326 audit(1763444806.168:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 214.037372][T11439] FAT-fs (loop4): Directory bread(block 66) failed [ 214.058561][T11439] FAT-fs (loop4): Directory bread(block 67) failed [ 214.085979][ T26] audit: type=1326 audit(1763444806.168:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 214.116247][T11439] FAT-fs (loop4): Directory bread(block 68) failed [ 214.122864][T11439] FAT-fs (loop4): Directory bread(block 69) failed [ 214.129782][T11439] FAT-fs (loop4): Directory bread(block 70) failed [ 214.144395][ T26] audit: type=1326 audit(1763444806.198:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 214.191179][T11439] FAT-fs (loop4): Directory bread(block 71) failed [ 214.227536][T11439] FAT-fs (loop4): Directory bread(block 72) failed [ 214.250062][T11439] FAT-fs (loop4): Directory bread(block 73) failed [ 214.258405][ T26] audit: type=1326 audit(1763444806.198:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 214.288288][T11454] netlink: 'syz.1.2901': attribute type 4 has an invalid length. [ 214.315336][T11454] netlink: 'syz.1.2901': attribute type 5 has an invalid length. [ 214.339889][T11454] netlink: 3657 bytes leftover after parsing attributes in process `syz.1.2901'. [ 214.368668][ T26] audit: type=1326 audit(1763444806.248:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 214.448770][ T26] audit: type=1326 audit(1763444806.248:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 214.491418][ T26] audit: type=1326 audit(1763444806.248:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 214.492428][T11463] input: syz1 as /devices/virtual/input/input5 [ 214.518654][ T26] audit: type=1326 audit(1763444806.258:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 214.546208][ T26] audit: type=1326 audit(1763444806.258:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11446 comm="syz.7.2899" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 214.572161][T11463] input: failed to attach handler leds to device input5, error: -6 [ 214.595768][T11467] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2910'. [ 214.966698][T11491] loop6: detected capacity change from 0 to 256 [ 215.062928][T11491] FAT-fs (loop6): Directory bread(block 64) failed [ 215.078766][T11491] FAT-fs (loop6): Directory bread(block 65) failed [ 215.085765][T11491] FAT-fs (loop6): Directory bread(block 66) failed [ 215.147594][T11491] FAT-fs (loop6): Directory bread(block 67) failed [ 215.160581][T11491] FAT-fs (loop6): Directory bread(block 68) failed [ 215.167992][T11491] FAT-fs (loop6): Directory bread(block 69) failed [ 215.183510][T11491] FAT-fs (loop6): Directory bread(block 70) failed [ 215.190125][T11491] FAT-fs (loop6): Directory bread(block 71) failed [ 215.203846][T11491] FAT-fs (loop6): Directory bread(block 72) failed [ 215.237883][T11491] FAT-fs (loop6): Directory bread(block 73) failed [ 215.252433][T11500] binder: 11499:11500 ioctl 4018620d 0 returned -22 [ 215.309287][T11504] bond0: (slave bond_slave_0): Releasing backup interface [ 215.443592][T11504] bond0: (slave bond_slave_1): Releasing backup interface [ 215.548240][T11504] team0: Port device team_slave_0 removed [ 215.585847][T11504] team0: Port device team_slave_1 removed [ 216.246600][T11544] loop4: detected capacity change from 0 to 256 [ 216.360047][T11544] FAT-fs (loop4): Directory bread(block 64) failed [ 216.382636][T11544] FAT-fs (loop4): Directory bread(block 65) failed [ 216.421199][T11544] FAT-fs (loop4): Directory bread(block 66) failed [ 216.446822][T11544] FAT-fs (loop4): Directory bread(block 67) failed [ 216.467954][T11544] FAT-fs (loop4): Directory bread(block 68) failed [ 216.489360][T11544] FAT-fs (loop4): Directory bread(block 69) failed [ 216.543405][T11544] FAT-fs (loop4): Directory bread(block 70) failed [ 216.575168][T11544] FAT-fs (loop4): Directory bread(block 71) failed [ 216.585106][T11544] FAT-fs (loop4): Directory bread(block 72) failed [ 216.623346][T11544] FAT-fs (loop4): Directory bread(block 73) failed [ 217.863738][T11622] overlayfs: conflicting lowerdir path [ 219.215761][T11704] binder: 11703:11704 ioctl 4018620d 0 returned -22 [ 220.017705][T11755] overlayfs: conflicting lowerdir path [ 220.691188][T11808] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3035'. [ 221.455106][T11815] fuse: Bad value for 'fd' [ 221.846713][T11876] TCP: TCP_TX_DELAY enabled [ 223.520611][T12006] loop4: detected capacity change from 0 to 256 [ 223.551168][T12008] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3111'. [ 223.573133][T12008] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3111'. [ 223.622438][T12006] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 223.954396][T12032] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3123'. [ 223.987671][T12033] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3122'. [ 224.009389][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3123'. [ 224.038699][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 224.053827][T12032] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3123'. [ 224.487440][T12061] netlink: 'syz.6.3136': attribute type 1 has an invalid length. [ 224.549842][T12065] bond1: (slave gretap1): making interface the new active one [ 224.560028][T12065] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 226.246716][T12139] device batadv_slave_1 entered promiscuous mode [ 226.285823][T12137] device batadv_slave_1 left promiscuous mode [ 226.466794][ T26] kauditd_printk_skb: 7 callbacks suppressed [ 226.466810][ T26] audit: type=1326 audit(1763445074.638:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 226.574351][ T26] audit: type=1326 audit(1763445074.688:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 226.671709][ T26] audit: type=1326 audit(1763445074.688:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 226.796935][ T26] audit: type=1326 audit(1763445074.688:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 226.855318][ T26] audit: type=1326 audit(1763445074.688:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 226.940830][ T26] audit: type=1326 audit(1763445074.688:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 227.008767][ T26] audit: type=1326 audit(1763445074.688:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 227.188755][T12189] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3193'. [ 227.209298][ T26] audit: type=1326 audit(1763445074.688:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 227.253792][ T26] audit: type=1326 audit(1763445074.688:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 227.999850][ T26] audit: type=1326 audit(1763445074.688:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12153 comm="syz.6.3177" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff89554c6c9 code=0x7ffc0000 [ 228.739385][T12230] loop7: detected capacity change from 0 to 128 [ 228.900889][T12235] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 229.017394][T12240] netlink: 76 bytes leftover after parsing attributes in process `syz.7.3214'. [ 229.067515][T12240] netlink: 56 bytes leftover after parsing attributes in process `syz.7.3214'. [ 231.442491][T12338] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 231.467498][T12338] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 231.481694][T12338] loop4: detected capacity change from 0 to 64 [ 232.694926][T12363] loop4: detected capacity change from 0 to 128 [ 233.164180][ T1107] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 233.415510][ T1107] usb 5-1: Using ep0 maxpacket: 16 [ 233.534624][ T1107] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 233.714556][ T1107] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 233.738833][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.759904][ T1107] usb 5-1: Product: syz [ 233.777761][ T1107] usb 5-1: Manufacturer: syz [ 233.782562][ T1107] usb 5-1: SerialNumber: syz [ 233.789467][T12420] netlink: 536 bytes leftover after parsing attributes in process `syz.1.3299'. [ 233.806977][ T1107] usb 5-1: config 0 descriptor?? [ 233.823319][T12420] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3299'. [ 233.866384][ T1107] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 233.895919][ T1107] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 234.504369][ T1107] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 234.519175][T12460] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3318'. [ 234.561288][T12460] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3318'. [ 234.596421][T12460] netlink: 59 bytes leftover after parsing attributes in process `syz.1.3318'. [ 234.708280][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3323'. [ 234.928018][T12481] loop8: detected capacity change from 0 to 128 [ 235.164399][ T1107] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 235.520224][ T1107] em28xx 5-1:0.0: board has no eeprom [ 236.224199][ T1107] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 236.240837][ T1107] em28xx 5-1:0.0: dvb set to bulk mode. [ 236.274356][ T1107] usb 5-1: USB disconnect, device number 8 [ 236.306535][ T1107] em28xx 5-1:0.0: Disconnecting em28xx [ 236.316257][ T7478] em28xx 5-1:0.0: Binding DVB extension [ 236.431732][ T7478] em28xx 5-1:0.0: Registering input extension [ 236.446901][ T1107] em28xx 5-1:0.0: Closing input extension [ 236.526369][ T1107] em28xx 5-1:0.0: Freeing device [ 236.617226][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 236.617240][ T26] audit: type=1326 audit(1763445084.788:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12514 comm="syz.7.3342" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 237.139441][ T26] audit: type=1326 audit(1763445085.308:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz.1.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c329f6c9 code=0x7ffc0000 [ 237.223600][ T26] audit: type=1326 audit(1763445085.308:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz.1.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c329f6c9 code=0x7ffc0000 [ 237.351360][T12558] overlayfs: missing 'lowerdir' [ 237.359424][ T26] audit: type=1326 audit(1763445085.328:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz.1.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f69c329f6c9 code=0x7ffc0000 [ 237.424662][ T26] audit: type=1326 audit(1763445085.328:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz.1.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c329f6c9 code=0x7ffc0000 [ 237.437153][T12562] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3364'. [ 237.484239][ T26] audit: type=1326 audit(1763445085.338:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz.1.3357" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c329f6c9 code=0x7ffc0000 [ 237.650667][T12570] loop7: detected capacity change from 0 to 128 [ 237.767554][T12570] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3367'. [ 239.250671][T12593] loop8: detected capacity change from 0 to 40427 [ 239.333039][T12593] F2FS-fs (loop8): invalid crc value [ 239.388353][T12593] F2FS-fs (loop8): Found nat_bits in checkpoint [ 239.524608][T12593] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 239.734076][T10659] attempt to access beyond end of device [ 239.734076][T10659] loop8: rw=2049, want=45104, limit=40427 [ 239.978515][T12675] 9pnet: Insufficient options for proto=fd [ 240.984750][T12680] netlink: 156 bytes leftover after parsing attributes in process `syz.4.3416'. [ 241.774768][T12729] netlink: 36 bytes leftover after parsing attributes in process `syz.7.3439'. [ 241.824253][T12729] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3439'. [ 242.127870][T12753] 9pnet_virtio: no channels available for device syz [ 242.548762][T12779] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3459'. [ 243.180485][T12828] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3492'. [ 243.368821][T12844] netlink: 'syz.4.3489': attribute type 6 has an invalid length. [ 243.626772][T12865] loop7: detected capacity change from 0 to 128 [ 243.725030][T12865] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 243.776664][T12865] ext4 filesystem being mounted at /180/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 243.962959][T12883] loop1: detected capacity change from 0 to 512 [ 244.033636][T12883] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 245.147329][T12959] loop4: detected capacity change from 0 to 128 [ 245.231324][T12959] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,barrier=0x0000000000000de2,,errors=continue. Quota mode: none. [ 245.247609][T12961] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3545'. [ 245.335862][T12959] ext4 filesystem being mounted at /730/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 245.362348][T12922] loop6: detected capacity change from 0 to 40427 [ 245.435749][T12922] F2FS-fs (loop6): invalid crc value [ 245.484509][T12922] F2FS-fs (loop6): Found nat_bits in checkpoint [ 245.623849][T12922] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 245.817407][ T6314] attempt to access beyond end of device [ 245.817407][ T6314] loop6: rw=2049, want=45104, limit=40427 [ 246.115435][T12986] 9p: Unknown Cache mode doo [ 246.270055][T12993] netlink: 72 bytes leftover after parsing attributes in process `syz.1.3558'. [ 246.463910][T13002] 9pnet_virtio: no channels available for device ./bus [ 246.611844][T13007] netlink: 240 bytes leftover after parsing attributes in process `syz.6.3553'. [ 246.797386][T13014] loop8: detected capacity change from 0 to 128 [ 246.876656][T13014] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 246.897249][T13014] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 247.319727][T13035] overlayfs: missing 'lowerdir' [ 247.871357][T13055] loop1: detected capacity change from 0 to 128 [ 248.048659][T13064] 8021q: adding VLAN 0 to HW filter on device bond1 [ 248.086393][T13055] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 248.137270][T13055] ext4 filesystem being mounted at /739/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 248.186549][T13042] loop6: detected capacity change from 0 to 32768 [ 248.302321][ T4196] Bluetooth: Frame is too long (len 20, expected len 4) [ 248.376079][T13042] XFS (loop6): Mounting V5 Filesystem [ 248.535186][T13097] 9p: Unknown access argument a [ 248.654327][T13042] XFS (loop6): Ending clean mount [ 249.010899][T13124] loop7: detected capacity change from 0 to 512 [ 249.139984][T13124] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 249.225599][ T6314] XFS (loop6): Unmounting Filesystem [ 249.477912][T13136] overlayfs: missing 'lowerdir' [ 249.960919][T13152] netlink: 'syz.4.3628': attribute type 1 has an invalid length. [ 250.050185][T13152] 8021q: adding VLAN 0 to HW filter on device bond2 [ 250.099085][T13156] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3628'. [ 250.431281][T13170] netlink: 'syz.4.3633': attribute type 12 has an invalid length. [ 251.537906][T13181] binder: Bad value for 'max' [ 253.348047][T13275] netlink: 48 bytes leftover after parsing attributes in process `syz.7.3681'. [ 253.590570][ T4240] Bluetooth: hci1: command 0x0406 tx timeout [ 253.687212][T13288] tc_dump_action: action bad kind [ 253.884768][T13303] netlink: 72 bytes leftover after parsing attributes in process `syz.6.3696'. [ 254.192957][T13326] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3706'. [ 255.342777][T13398] loop8: detected capacity change from 0 to 512 [ 255.428847][T13398] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 255.444376][T13405] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3742'. [ 255.453609][T13398] System zones: 1-12 [ 255.480287][T13398] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.3740: error while reading EA inode 32 err=-116 [ 255.504953][T13398] EXT4-fs (loop8): Remounting filesystem read-only [ 255.515355][T13398] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 255.520255][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.537770][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.582434][T13398] EXT4-fs error (device loop8): ext4_xattr_inode_iget:409: comm syz.8.3740: error while reading EA inode 32 err=-116 [ 255.605868][T13398] EXT4-fs (loop8): Remounting filesystem read-only [ 255.612764][T13398] EXT4-fs (loop8): 1 orphan inode deleted [ 255.619444][T13398] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,debug,debug_want_extra_isize=0x000000000000005e,noauto_da_alloc,bsddf,jqfmt=vfsv1,grpid,. Quota mode: none. [ 257.320439][T13460] netlink: 'syz.4.3766': attribute type 11 has an invalid length. [ 257.651634][T13478] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3773'. [ 257.863743][T13490] loop7: detected capacity change from 0 to 1024 [ 257.942151][T13490] EXT4-fs (loop7): Ignoring removed oldalloc option [ 258.013345][T13502] binder: Bad value for 'stats' [ 258.021054][T13490] EXT4-fs (loop7): mounted filesystem without journal. Opts: nodelalloc,auto_da_alloc=0x00000000000000e6,oldalloc,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 258.073232][T13490] ext4 filesystem being mounted at /233/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.389065][T13529] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3795'. [ 258.787947][T13559] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 258.927477][T13559] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 258.934668][T13559] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 259.012343][T13559] vhci_hcd vhci_hcd.0: Device attached [ 259.022720][T13564] vhci_hcd: connection closed [ 259.041436][ T4308] vhci_hcd: stop threads [ 259.066784][ T4308] vhci_hcd: release socket [ 259.079715][ T4308] vhci_hcd: disconnect device [ 260.852243][T13645] device syzkaller0 entered promiscuous mode [ 262.602011][T13718] netlink: 628 bytes leftover after parsing attributes in process `syz.4.3874'. [ 263.083248][T13739] IPv6: Can't replace route, no match found [ 263.138792][T13743] netlink: 'syz.1.3886': attribute type 1 has an invalid length. [ 263.171663][T13745] hub 8-0:1.0: USB hub found [ 263.178951][T13745] hub 8-0:1.0: 1 port detected [ 263.191772][T13743] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.229584][T13748] loop8: detected capacity change from 0 to 128 [ 263.264693][T13748] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 263.308499][T13743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3886'. [ 264.325798][T13771] xt_CT: You must specify a L4 protocol and not use inversions on it [ 265.108239][T13808] x_tables: duplicate underflow at hook 1 [ 265.434568][T13827] netlink: 9 bytes leftover after parsing attributes in process `syz.8.3922'. [ 267.741690][T13925] netlink: 88 bytes leftover after parsing attributes in process `syz.7.3969'. [ 267.988363][T13933] loop1: detected capacity change from 0 to 128 [ 268.101953][T13933] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 268.786788][T13970] loop7: detected capacity change from 0 to 128 [ 268.878719][T13970] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 269.498958][ T26] audit: type=1326 audit(1763445117.669:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14003 comm="syz.8.4009" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42fb7a06c9 code=0x0 [ 269.952390][T14040] 9pnet: Could not find request transport: f [ 270.492414][T14079] loop6: detected capacity change from 0 to 16 [ 270.577268][T14079] cramfs: Error -3 while decompressing! [ 270.594343][T14079] cramfs: ffffffff961ed0a8(27)->ffff88804e9ec000(4096) [ 270.601273][T14079] cramfs: Error -3 while decompressing! [ 270.609855][T14079] cramfs: ffffffff961ed0c3(16)->ffff88804a2a2000(4096) [ 270.628707][T14079] cramfs: Error -3 while decompressing! [ 270.648915][T14079] cramfs: ffffffff961f10a8(27)->ffff88804e9ec000(4096) [ 270.659617][ T26] audit: type=1800 audit(1763445118.829:63): pid=14079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4043" name="file3" dev="loop6" ino=348 res=0 errno=0 [ 271.020467][T14097] loop8: detected capacity change from 0 to 128 [ 271.039588][T14101] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4053'. [ 271.127522][T14097] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 271.191839][ T154] FAT-fs (loop8): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 271.391698][ T26] audit: type=1326 audit(1763445119.559:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14121 comm="syz.6.4063" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff89554c6c9 code=0x0 [ 271.522866][T14134] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 271.591024][T14137] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4067'. [ 272.454985][T14161] @: renamed from vlan0 [ 272.730945][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4084'. [ 272.761280][ T26] audit: type=1326 audit(1763445120.929:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14175 comm="syz.4.4085" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaa1d486c9 code=0x0 [ 273.051059][T14193] loop6: detected capacity change from 0 to 1024 [ 273.184906][T14193] EXT4-fs (loop6): Ignoring removed oldalloc option [ 273.245281][T14203] loop8: detected capacity change from 0 to 16 [ 273.287226][T14193] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodelalloc,auto_da_alloc=0x00000000000000e6,oldalloc,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 273.333835][T14193] ext4 filesystem being mounted at /624/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 273.364542][T14203] cramfs: Error -3 while decompressing! [ 273.370149][T14203] cramfs: ffffffff961ed0a8(27)->ffff8880494f4000(4096) [ 273.390673][T14203] cramfs: Error -3 while decompressing! [ 273.396614][T14203] cramfs: ffffffff961ed0c3(16)->ffff88804a328000(4096) [ 273.406995][T14203] cramfs: Error -3 while decompressing! [ 273.414297][T14203] cramfs: ffffffff961ed0a8(27)->ffff8880494f4000(4096) [ 273.421421][ T26] audit: type=1800 audit(1763445121.589:66): pid=14203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.4100" name="file3" dev="loop8" ino=348 res=0 errno=0 [ 273.444067][T14212] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 273.495396][T14212] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8) [ 273.501934][T14212] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 273.510231][T14212] vhci_hcd vhci_hcd.0: Device attached [ 273.522298][T14217] vhci_hcd: connection closed [ 273.524699][ T4308] vhci_hcd: stop threads [ 273.533716][ T4308] vhci_hcd: release socket [ 273.550877][ T4308] vhci_hcd: disconnect device [ 273.863792][T14243] loop6: detected capacity change from 0 to 128 [ 273.901649][T14245] loop4: detected capacity change from 0 to 1024 [ 273.931322][T14243] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 273.970291][T14245] EXT4-fs (loop4): Ignoring removed oldalloc option [ 273.979445][ T144] FAT-fs (loop6): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 274.082114][T14245] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodelalloc,auto_da_alloc=0x00000000000000e6,oldalloc,barrier,auto_da_alloc,nodioread_nolock,,errors=continue. Quota mode: none. [ 274.111193][T14245] ext4 filesystem being mounted at /816/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 274.386308][ T26] audit: type=1326 audit(1763445122.559:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14261 comm="syz.7.4124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x0 [ 275.337129][T14311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4147'. [ 275.374302][T14313] loop1: detected capacity change from 0 to 512 [ 275.439222][T14313] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 275.482163][T14313] ext4 filesystem being mounted at /852/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 275.548971][T14313] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.4148: corrupted inode contents [ 275.584707][T14323] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4151'. [ 275.593761][T14313] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #2: comm syz.1.4148: mark_inode_dirty error [ 275.606839][T14313] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.4148: corrupted inode contents [ 275.628220][T14313] EXT4-fs error (device loop1): __ext4_ext_dirty:183: inode #2: comm syz.1.4148: mark_inode_dirty error [ 275.681830][ T26] audit: type=1326 audit(1763445123.849:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 275.766786][ T26] audit: type=1326 audit(1763445123.879:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 275.845486][T14334] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 275.858063][ T26] audit: type=1326 audit(1763445123.879:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 275.905118][T14334] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(8) [ 275.911656][T14334] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 275.967249][T14334] vhci_hcd vhci_hcd.0: Device attached [ 275.977364][ T26] audit: type=1326 audit(1763445123.879:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 276.023018][ T26] audit: type=1326 audit(1763445123.879:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 276.064003][T14335] vhci_hcd: connection closed [ 276.074571][ T4308] vhci_hcd: stop threads [ 276.125020][ T4308] vhci_hcd: release socket [ 276.129469][ T4308] vhci_hcd: disconnect device [ 276.154869][ T26] audit: type=1326 audit(1763445123.879:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 276.180667][ T26] audit: type=1326 audit(1763445123.879:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 276.204423][ T26] audit: type=1326 audit(1763445123.879:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 276.230540][ T26] audit: type=1326 audit(1763445123.879:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=40000003 syscall=132 compat=1 ip=0x200000000006 code=0x7ffc0000 [ 276.332162][ T26] audit: type=1326 audit(1763445123.879:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14325 comm="syz.7.4152" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x7ffc0000 [ 277.479776][T14385] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 277.555130][T14385] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8) [ 277.561672][T14385] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 277.585062][T14385] vhci_hcd vhci_hcd.0: Device attached [ 277.594414][T14388] vhci_hcd: connection closed [ 277.595209][ T4315] vhci_hcd: stop threads [ 277.921595][ T4315] vhci_hcd: release socket [ 278.035363][ T4315] vhci_hcd: disconnect device [ 278.239170][ T4871] Bluetooth: hci4: command 0x0406 tx timeout [ 278.927088][T14429] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4193'. [ 279.647631][T14468] netlink: 'syz.4.4213': attribute type 8 has an invalid length. [ 279.690943][T14474] loop7: detected capacity change from 0 to 512 [ 279.768758][T14474] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 279.804267][T14474] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 279.900460][T14474] EXT4-fs (loop7): 1 truncate cleaned up [ 279.980531][T14474] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 280.013913][T14494] loop6: detected capacity change from 0 to 16 [ 280.111232][T14494] erofs: (device loop6): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 280.536309][T14520] loop6: detected capacity change from 0 to 512 [ 280.682920][T14520] EXT4-fs (loop6): mounted filesystem without journal. Opts: max_dir_size_kb=0x0000000000001000,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 280.821131][T14520] ext4 filesystem being mounted at /649/file0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 280.924501][T14520] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.4235: corrupted inode contents [ 280.977873][T14520] EXT4-fs error (device loop6): ext4_dirty_inode:6054: inode #2: comm syz.6.4235: mark_inode_dirty error [ 281.021904][T14520] EXT4-fs error (device loop6): ext4_do_update_inode:5218: inode #2: comm syz.6.4235: corrupted inode contents [ 281.064690][T14520] EXT4-fs error (device loop6): __ext4_ext_dirty:183: inode #2: comm syz.6.4235: mark_inode_dirty error [ 281.090620][T14500] loop8: detected capacity change from 0 to 32768 [ 281.180573][T14500] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.4226 (14500) [ 281.312210][T14500] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 281.380596][T14500] BTRFS info (device loop8): turning off barriers [ 281.394390][T14500] BTRFS info (device loop8): setting nodatasum [ 281.425652][T14500] BTRFS info (device loop8): enabling auto defrag [ 281.474225][T14500] BTRFS info (device loop8): disabling tree log [ 281.524174][T14500] BTRFS info (device loop8): using free space tree [ 281.530713][T14500] BTRFS info (device loop8): has skinny extents [ 281.758826][T14576] loop6: detected capacity change from 0 to 16 [ 281.811906][T14576] erofs: (device loop6): mounted with root inode @ nid 36. [ 281.889391][T14500] BTRFS info (device loop8): enabling ssd optimizations [ 282.297973][ T7478] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 282.613309][T14619] loop6: detected capacity change from 0 to 128 [ 282.693792][ T7478] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 282.807820][ T7478] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 282.827460][ T7478] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 282.848736][ T7478] usb 2-1: SerialNumber: syz [ 282.917632][ T7478] cdc_acm 2-1:1.0: skipping garbage [ 282.947677][ T7478] cdc_acm: probe of 2-1:1.0 failed with error -12 [ 283.141578][ T4871] usb 2-1: USB disconnect, device number 4 [ 283.491240][T14666] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4292'. [ 283.631726][T14676] binder: 14675:14676 ioctl c0306201 200000000940 returned -14 [ 283.899841][T14692] loop4: detected capacity change from 0 to 16 [ 283.936398][T14692] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 285.086458][T14747] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 285.146238][T14747] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 285.328926][T14769] 9pnet: p9_fd_create_unix (14769): problem connecting socket: ./bus: -2 [ 285.886678][T14798] loop1: detected capacity change from 0 to 512 [ 285.907336][ T5069] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 285.990191][T14798] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 286.033240][T14798] EXT4-fs (loop1): 1 truncate cleaned up [ 286.042104][T14798] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.191087][T14817] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4357'. [ 286.200982][ T5069] usb 5-1: Using ep0 maxpacket: 32 [ 286.357666][ T5069] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 286.368697][ T5069] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 286.398996][ T5069] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 286.420196][T14827] loop1: detected capacity change from 0 to 128 [ 286.431874][ T5069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 286.472198][ T5069] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 286.502674][ T5069] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 286.539585][T14827] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 286.597416][ T5069] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 286.624322][T14827] ext4 filesystem being mounted at /897/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 286.666874][ T5069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 286.717497][ T5069] usb 5-1: config 0 descriptor?? [ 286.944598][T14843] tipc: Failed to remove unknown binding: 66,1,1/0:2481346656/2481346658 [ 286.996814][ T5069] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 287.024513][T14843] tipc: Failed to remove unknown binding: 66,1,1/0:2481346656/2481346658 [ 287.040998][ T5069] usb 5-1: USB disconnect, device number 9 [ 287.076436][ T5069] usblp0: removed [ 287.587166][ T5069] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 287.766023][T14886] loop6: detected capacity change from 0 to 512 [ 287.828679][T14886] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.854227][ T5069] usb 5-1: Using ep0 maxpacket: 32 [ 287.948363][T14886] EXT4-fs (loop6): 1 truncate cleaned up [ 288.002065][T14886] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.016282][ T5069] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 288.023102][T14894] loop1: detected capacity change from 0 to 512 [ 288.029898][ T5069] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 288.051905][ T5069] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 288.074248][ T5069] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 288.084047][ T5069] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 288.094171][ T5069] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 288.107773][ T5069] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 288.133497][ T5069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.152792][ T5069] usb 5-1: config 0 descriptor?? [ 288.201655][T14894] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 288.299706][T14894] ext4 filesystem being mounted at /904/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 288.446233][ T5069] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 10 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 288.479643][ T5069] usb 5-1: USB disconnect, device number 10 [ 288.585485][ T5069] usblp0: removed [ 289.068438][T14931] loop4: detected capacity change from 0 to 512 [ 289.147683][T14931] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 289.206706][T14931] EXT4-fs (loop4): 1 truncate cleaned up [ 289.227045][T14931] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 289.796888][T14966] netlink: 60 bytes leftover after parsing attributes in process `syz.7.4423'. [ 289.909068][T14972] loop8: detected capacity change from 0 to 512 [ 290.023079][T14972] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 290.108896][T14972] EXT4-fs (loop8): 1 truncate cleaned up [ 290.149600][T14972] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 290.187492][T14987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.058909][T15068] loop8: detected capacity change from 0 to 128 [ 292.083673][T15069] loop7: detected capacity change from 0 to 512 [ 292.148405][T15069] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 292.174819][T15068] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.196760][T15069] EXT4-fs (loop7): 1 truncate cleaned up [ 292.212718][T15069] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 292.226603][T15068] ext4 filesystem being mounted at /350/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 292.394176][ T4227] Bluetooth: hci5: command 0x1003 tx timeout [ 292.400314][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 294.477247][ T4227] Bluetooth: hci5: command 0x1001 tx timeout [ 294.483339][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 294.611674][T15134] mmap: syz.7.4507 (15134): VmData 49209344 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 294.753354][T15139] tipc: Failed to remove unknown binding: 66,1,1/0:2601635435/2601635437 [ 294.800309][T15139] tipc: Failed to remove unknown binding: 66,1,1/0:2601635435/2601635437 [ 294.829344][T15139] tipc: Failed to remove unknown binding: 66,1,1/0:2601635435/2601635437 [ 295.111182][T15153] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.212770][T15160] loop4: detected capacity change from 0 to 512 [ 295.342899][T15160] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpid,lazytime,,errors=continue. Quota mode: writeback. [ 295.362760][T15160] ext4 filesystem being mounted at /896/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 295.716243][T15181] netlink: 188 bytes leftover after parsing attributes in process `syz.8.4520'. [ 295.926289][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4527'. [ 295.952568][T15196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4527'. [ 296.428201][T15209] chnl_net:caif_netlink_parms(): no params data found [ 296.476044][T15209] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.483135][T15209] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.491440][T15209] device bridge_slave_0 entered promiscuous mode [ 296.499547][T15209] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.507142][T15209] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.515290][T15209] device bridge_slave_1 entered promiscuous mode [ 296.538800][T15209] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.549665][T15209] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.554529][ T5069] Bluetooth: hci5: command 0x1009 tx timeout [ 296.577060][T15209] team0: Port device team_slave_0 added [ 296.584252][T15209] team0: Port device team_slave_1 added [ 296.601772][T15209] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.608796][T15209] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.635059][T15209] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.646858][T15209] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.653785][T15209] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.680229][T15209] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.766108][T15209] device hsr_slave_0 entered promiscuous mode [ 296.805231][T15209] device hsr_slave_1 entered promiscuous mode [ 296.854292][T15209] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 296.861876][T15209] Cannot create hsr debugfs directory [ 296.933710][T15209] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 296.986634][T15209] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 297.041444][T15209] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 297.087469][T15209] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 297.149757][T15209] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.156833][T15209] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.164182][T15209] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.171226][T15209] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.321834][T15209] 8021q: adding VLAN 0 to HW filter on device bond0 [ 297.339153][T15209] 8021q: adding VLAN 0 to HW filter on device team0 [ 297.347300][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 297.361180][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 297.370231][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.382748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 297.414785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 297.423996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 297.437932][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 297.445038][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 297.454152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 297.462868][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 297.477782][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 297.484861][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 297.493844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 297.505848][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 297.520793][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 297.531356][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 297.543132][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 297.564028][T15209] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 297.575119][T15209] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 297.590702][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 297.604988][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 297.613450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 297.628505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 297.639521][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 297.650393][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 297.661219][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 297.772947][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 297.780977][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 297.793606][T15209] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 297.955606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 297.969209][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 297.989458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 297.998497][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 298.008647][T15209] device veth0_vlan entered promiscuous mode [ 298.016644][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 298.028367][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 298.041151][T15209] device veth1_vlan entered promiscuous mode [ 298.067707][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 298.076419][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 298.084797][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 298.093272][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 298.105296][T15209] device veth0_macvtap entered promiscuous mode [ 298.115091][T15209] device veth1_macvtap entered promiscuous mode [ 298.132132][T15209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.143072][T15209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.153805][T15209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 298.165687][T15209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.177984][T15209] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.186647][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 298.198846][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 298.207287][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 298.220241][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 298.231215][T15209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.242657][T15209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.253713][T15209] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 298.264494][T15209] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 298.281112][T15209] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.290384][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 298.299852][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 298.308863][ T23] Bluetooth: hci4: command 0x0409 tx timeout [ 298.317683][T15209] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.328064][T15209] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.340793][T15209] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.350091][T15209] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.421476][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.438174][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.451694][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.466975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 298.478037][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 298.492060][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 298.600808][T15236] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4545'. [ 298.814023][T15251] loop4: detected capacity change from 0 to 128 [ 299.259782][ T4308] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.359174][T15273] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4552'. [ 299.381592][ T4308] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.451469][ T4308] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.561736][ T4308] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.399684][ T4240] Bluetooth: hci4: command 0x041b tx timeout [ 300.667107][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 300.667122][ T26] audit: type=1326 audit(1763445148.839:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15341 comm="syz.4.4579" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faaa1d486c9 code=0x0 [ 301.969932][ T4308] bond1: (slave gretap1): Releasing active interface [ 302.071887][T15424] bridge0: port 1(erspan0) entered blocking state [ 302.113950][T15424] bridge0: port 1(erspan0) entered disabled state [ 302.151384][T15424] device erspan0 entered promiscuous mode [ 302.200525][T15424] bridge0: port 1(erspan0) entered blocking state [ 302.207520][T15424] bridge0: port 1(erspan0) entered forwarding state [ 302.450162][T15452] netlink: 'syz.9.4624': attribute type 39 has an invalid length. [ 302.474113][ T4240] Bluetooth: hci4: command 0x040f tx timeout [ 304.546611][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 304.785834][T15543] netlink: 252 bytes leftover after parsing attributes in process `syz.9.4654'. [ 305.682316][ T4308] device hsr_slave_0 left promiscuous mode [ 305.744423][ T4308] device hsr_slave_1 left promiscuous mode [ 305.762726][T15562] fuse: Invalid rootmode [ 305.770325][T15589] loop8: detected capacity change from 0 to 128 [ 305.958590][ T4308] device veth1_macvtap left promiscuous mode [ 305.981562][ T4308] device veth0_macvtap left promiscuous mode [ 306.225566][ T4308] bond1 (unregistering): Released all slaves [ 306.390797][ T4308] team0 (unregistering): Port device team_slave_1 removed [ 306.419460][ T4308] team0 (unregistering): Port device team_slave_0 removed [ 306.468910][ T1107] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 306.481283][ T4308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.522941][ T1107] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 306.535408][ T4308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.806780][ T4308] bond0 (unregistering): Released all slaves [ 307.601088][T15650] netlink: 252 bytes leftover after parsing attributes in process `syz.8.4690'. [ 308.157864][ T26] audit: type=1326 audit(1763445156.329:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15678 comm="syz.1.4701" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f69c329f6c9 code=0x0 [ 308.408199][T15694] netlink: 'syz.9.4704': attribute type 7 has an invalid length. [ 308.461682][T15694] netlink: 'syz.9.4704': attribute type 8 has an invalid length. [ 308.793830][ T21] Bluetooth: hci1: command 0x0406 tx timeout [ 309.040950][ T26] audit: type=1326 audit(1763445157.209:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15730 comm="syz.9.4714" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e23bb86c9 code=0x0 [ 309.086981][T15735] loop1: detected capacity change from 0 to 128 [ 311.315851][T15819] netlink: 20 bytes leftover after parsing attributes in process `syz.9.4743'. [ 311.837244][T15847] loop1: detected capacity change from 0 to 512 [ 311.854110][ T154] tipc: Subscription rejected, illegal request [ 311.944631][T15847] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 311.992351][T15847] EXT4-fs (loop1): inline encryption not supported [ 312.033942][T15847] EXT4-fs (loop1): Test dummy encryption mode enabled [ 312.054199][T15847] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 312.094167][T15847] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 312.228060][T15847] EXT4-fs (loop1): 1 truncate cleaned up [ 312.258323][T15847] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 313.012125][T15908] netlink: 104 bytes leftover after parsing attributes in process `syz.7.4772'. [ 313.074316][T15908] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4772'. [ 313.103256][T15908] tc_dump_action: action bad kind [ 313.118777][T15913] netlink: 37 bytes leftover after parsing attributes in process `syz.8.4774'. [ 313.193456][T15920] netlink: 'syz.1.4776': attribute type 39 has an invalid length. [ 313.339260][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4781'. [ 313.726681][ T26] audit: type=1326 audit(1763445161.899:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15947 comm="syz.7.4786" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1f94b016c9 code=0x0 [ 313.896096][ T5069] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 314.274316][ T5069] usb 9-1: Using ep0 maxpacket: 32 [ 314.414544][ T5069] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 314.602024][ T5069] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 314.944371][ T5069] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 314.953373][ T5069] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 314.963373][ T5069] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 314.973684][ T5069] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 314.986884][ T5069] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 314.996147][ T5069] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.024805][ T5069] usb 9-1: config 0 descriptor?? [ 315.276828][ T5069] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 315.289478][ T5069] usb 9-1: USB disconnect, device number 2 [ 315.305999][ T5069] usblp0: removed [ 315.884222][ T5069] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 316.164248][ T5069] usb 9-1: Using ep0 maxpacket: 32 [ 316.314384][ T5069] usb 9-1: config index 0 descriptor too short (expected 29220, got 36) [ 316.322759][ T5069] usb 9-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 316.331437][ T5069] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 316.340421][ T5069] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 316.350077][ T5069] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 316.359729][ T5069] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 316.373058][ T5069] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 316.382265][ T5069] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.393990][ T5069] usb 9-1: config 0 descriptor?? [ 316.599522][ T5069] usblp 9-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 316.670390][ T5069] usb 9-1: USB disconnect, device number 3 [ 316.723712][ T26] audit: type=1326 audit(1763445164.889:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15991 comm="syz.8.4802" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42fb7a06c9 code=0x0 [ 316.750019][ T5069] usblp0: removed [ 316.960548][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.984008][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.031311][T16016] netlink: 100 bytes leftover after parsing attributes in process `syz.1.4817'. [ 317.304293][ T4240] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 317.462781][T16038] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4827'. [ 318.301281][ T4240] usb 10-1: Using ep0 maxpacket: 32 [ 318.424468][ T4240] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 318.443130][ T4240] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 318.471123][ T4240] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 318.512456][ T4240] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.556145][ T4240] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 318.587203][ T4240] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 318.635646][ T4240] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 318.659140][ T4240] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.663481][T16064] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4837'. [ 318.710563][ T4240] usb 10-1: config 0 descriptor?? [ 318.975542][ T4240] usblp 10-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 319.019683][ T4240] usb 10-1: USB disconnect, device number 2 [ 319.053372][ T7478] Bluetooth: hci0: command 0x0406 tx timeout [ 319.091761][ T4240] usblp0: removed [ 319.618113][ T4240] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 319.864239][ T4240] usb 10-1: Using ep0 maxpacket: 32 [ 319.984549][ T4240] usb 10-1: config index 0 descriptor too short (expected 29220, got 36) [ 320.011455][ T4240] usb 10-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 320.030523][ T4240] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 320.032490][T16143] loop8: detected capacity change from 0 to 512 [ 320.064365][ T4240] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 320.094566][ T4240] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 320.134232][ T4240] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 320.165285][T16143] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 320.173232][ T4240] usb 10-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 320.178833][T16143] EXT4-fs (loop8): inline encryption not supported [ 320.193901][T16143] EXT4-fs (loop8): Test dummy encryption mode enabled [ 320.202833][ T4240] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.246057][ T4240] usb 10-1: config 0 descriptor?? [ 320.264280][T16143] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 320.274370][ T4240] usb 10-1: can't set config #0, error -71 [ 320.296400][T16143] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 320.309044][ T4240] usb 10-1: USB disconnect, device number 3 [ 320.375514][T16143] EXT4-fs (loop8): 1 truncate cleaned up [ 320.381189][T16143] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 320.784332][T16143] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 321.606204][T16193] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4884'. [ 324.469305][T16321] xt_bpf: check failed: parse error [ 326.488884][T16388] netlink: 52 bytes leftover after parsing attributes in process `syz.8.4963'. [ 326.511530][T16391] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4966'. [ 326.557509][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4966'. [ 326.881795][T16415] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4973'. [ 326.962582][T16418] netlink: 388 bytes leftover after parsing attributes in process `syz.4.4974'. [ 327.246926][T16419] device veth0_to_bridge entered promiscuous mode [ 327.349048][T16438] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4981'. [ 327.655750][T16453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4987'. [ 328.240285][T16484] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4998'. [ 328.304590][T16487] loop8: detected capacity change from 0 to 64 [ 328.504532][T16487] hfs: get root inode failed [ 331.210814][T16646] loop4: detected capacity change from 0 to 256 [ 331.301366][T16646] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 332.219253][T16701] netlink: 5 bytes leftover after parsing attributes in process `syz.4.5075'. [ 332.625047][T16729] netlink: 'syz.7.5086': attribute type 4 has an invalid length. [ 332.632822][T16729] netlink: 'syz.7.5086': attribute type 5 has an invalid length. [ 332.693538][T16729] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.5086'. [ 332.739698][T16734] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.5087'. [ 332.767026][T16739] tipc: Trying to set illegal importance in message [ 334.487186][T16794] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5106'. [ 334.531612][T16794] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5106'. [ 334.556406][T16794] tipc: Invalid UDP bearer configuration [ 334.556445][T16794] tipc: Enabling of bearer rejected, failed to enable media [ 334.757147][ T26] audit: type=1326 audit(1763445182.929:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.8.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f42fb7a06c9 code=0x7fc00000 [ 334.843864][ T26] audit: type=1326 audit(1763445182.999:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16811 comm="syz.1.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c329f6c9 code=0x7fc00000 [ 334.884950][ T26] audit: type=1326 audit(1763445183.009:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16811 comm="syz.1.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f69c329f6c9 code=0x7fc00000 [ 335.030971][T16832] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5125'. [ 335.056870][T16832] netlink: 17 bytes leftover after parsing attributes in process `syz.7.5125'. [ 335.076630][T16832] tipc: Invalid UDP bearer configuration [ 335.076669][T16832] tipc: Enabling of bearer rejected, failed to enable media [ 335.093418][T16834] netlink: 'syz.9.5126': attribute type 1 has an invalid length. [ 335.153198][T16834] device bond1 entered promiscuous mode [ 335.160734][T16834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.197927][T16840] 8021q: adding VLAN 0 to HW filter on device bond1 [ 335.208426][T16840] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 335.220924][T16840] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 335.247476][T16840] bond1: (slave wireguard0): making interface the new active one [ 335.255588][T16840] device wireguard0 entered promiscuous mode [ 335.264811][T16840] bond1: (slave wireguard0): Enslaving as an active interface with an up link [ 335.278921][T16834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.286465][T16834] IPv6: NLM_F_CREATE should be set when creating new route [ 335.293720][T16834] IPv6: NLM_F_CREATE should be set when creating new route [ 335.316508][T16834] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 335.328013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 335.369346][ T26] audit: type=1326 audit(1763445183.539:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.8.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f42fb73c789 code=0x7fc00000 [ 335.422727][T16834] bond1: (slave wireguard1): The slave device specified does not support setting the MAC address [ 335.468927][ T26] audit: type=1326 audit(1763445183.539:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.8.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f42fb73c84f code=0x7fc00000 [ 335.493819][T16834] bond1: (slave wireguard1): Enslaving as a backup interface with an up link [ 335.550938][ T26] audit: type=1326 audit(1763445183.539:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16795 comm="syz.8.5109" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f42fb7a06c9 code=0x7fc00000 [ 335.632693][T16866] netlink: 'syz.7.5148': attribute type 4 has an invalid length. [ 335.640640][T16866] netlink: 3657 bytes leftover after parsing attributes in process `syz.7.5148'. [ 335.717902][T16869] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5139'. [ 335.731755][T16869] netlink: 17 bytes leftover after parsing attributes in process `syz.8.5139'. [ 335.741443][T16869] tipc: Invalid UDP bearer configuration [ 335.741479][T16869] tipc: Enabling of bearer rejected, failed to enable media [ 335.757255][T16872] netlink: 'syz.9.5141': attribute type 4 has an invalid length. [ 335.770458][T16872] netlink: 'syz.9.5141': attribute type 5 has an invalid length. [ 336.082987][T16896] loop8: detected capacity change from 0 to 256 [ 336.130129][T16896] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 336.190872][T16904] tipc: Invalid UDP bearer configuration [ 336.190908][T16904] tipc: Enabling of bearer rejected, failed to enable media [ 336.558191][ T26] audit: type=1326 audit(1763445184.729:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16925 comm="syz.8.5167" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f42fb7a06c9 code=0x0 [ 336.784505][ T4227] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 336.903085][T16946] netlink: 'syz.9.5176': attribute type 4 has an invalid length. [ 337.084256][ T4227] usb 8-1: Using ep0 maxpacket: 8 [ 337.275221][T16970] netlink: 'syz.8.5189': attribute type 4 has an invalid length. [ 337.283260][T16970] __nla_validate_parse: 5 callbacks suppressed [ 337.283273][T16970] netlink: 3657 bytes leftover after parsing attributes in process `syz.8.5189'. [ 337.329799][T16972] loop9: detected capacity change from 0 to 256 [ 337.381996][T16972] exFAT-fs (loop9): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 337.408722][ T4227] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 337.438609][ T4227] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.447540][ T4227] usb 8-1: Product: syz [ 337.462740][ T4227] usb 8-1: Manufacturer: syz [ 337.474198][ T4227] usb 8-1: SerialNumber: syz [ 337.502308][ T4227] usb 8-1: config 0 descriptor?? [ 337.658475][T16990] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 337.731073][ T26] audit: type=1326 audit(1763445185.889:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16811 comm="syz.1.5116" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f69c329f6c9 code=0x7fc00000 [ 337.784452][ T4227] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 337.994149][T17011] fuse: Bad value for 'fd' [ 337.997366][T17013] loop1: detected capacity change from 0 to 256 [ 338.061719][T17013] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d) [ 338.557632][T17046] netlink: 48 bytes leftover after parsing attributes in process `syz.8.5224'. [ 338.920595][T17060] loop4: detected capacity change from 0 to 512 [ 339.030245][T17060] EXT4-fs (loop4): Ignoring removed oldalloc option [ 339.054201][T17060] EXT4-fs (loop4): inline encryption not supported [ 339.060817][T17060] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 339.212570][T17060] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.5232: bg 0: block 64: padding at end of block bitmap is not set [ 339.240967][T17060] Quota error (device loop4): write_blk: dquota write failed [ 339.258657][T17060] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 339.269810][T17060] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.5232: Failed to acquire dquot type 0 [ 339.294189][T17060] EXT4-fs (loop4): 1 truncate cleaned up [ 339.300042][T17060] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,oldalloc,inlinecrypt,nombcache,noload,delalloc,noload,resuid=0x0000000000000000,lazytime,,errors=continue. Quota mode: writeback. [ 339.369554][T17060] EXT4-fs error (device loop4): ext4_acquire_dquot:6209: comm syz.4.5232: Failed to acquire dquot type 0 [ 339.605308][ T4227] dvb_usb_rtl28xxu: probe of 8-1:0.0 failed with error -71 [ 339.627326][ T4227] usb 8-1: USB disconnect, device number 3 [ 339.733973][T17099] user requested TSC rate below hardware speed [ 340.491519][T17157] cgroup: Need name or subsystem set [ 340.559275][T17160] fuse: Bad value for 'fd' [ 341.594403][ T5069] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 341.854278][ T5069] usb 5-1: Using ep0 maxpacket: 16 [ 341.974442][ T5069] usb 5-1: config 8 has an invalid interface number: 108 but max is 0 [ 341.997372][ T5069] usb 5-1: config 8 has no interface number 0 [ 342.992381][ T5069] usb 5-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=6e.97 [ 343.001751][ T5069] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 343.013621][ T5069] usb 5-1: Product: syz [ 343.022074][ T5069] usb 5-1: Manufacturer: syz [ 343.027604][ T5069] usb 5-1: SerialNumber: syz [ 343.222517][T17252] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5323'. [ 343.326882][ T5069] usb 5-1: bad CDC descriptors [ 343.349652][ T5069] usb 5-1: bad CDC descriptors [ 343.380591][ T5069] cdc_acm 5-1:8.108: Zero length descriptor references [ 343.417188][ T5069] cdc_acm: probe of 5-1:8.108 failed with error -22 [ 343.435301][T17271] cgroup: Need name or subsystem set [ 343.457748][ T5069] usb 5-1: USB disconnect, device number 11 [ 343.592719][T17282] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5334'. [ 343.770175][T17293] sctp: [Deprecated]: syz.7.5339 (pid 17293) Use of int in max_burst socket option deprecated. [ 343.770175][T17293] Use struct sctp_assoc_value instead [ 344.864208][ T5069] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 345.124468][ T5069] usb 2-1: Using ep0 maxpacket: 16 [ 345.244323][ T5069] usb 2-1: config 222 has an invalid interface number: 31 but max is 0 [ 345.266005][ T5069] usb 2-1: config 222 has no interface number 0 [ 345.284902][ T5069] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has an invalid bInterval 255, changing to 11 [ 345.314178][ T5069] usb 2-1: config 222 interface 31 altsetting 11 endpoint 0xE has invalid maxpacket 59391, setting to 1024 [ 345.346120][ T5069] usb 2-1: config 222 interface 31 has no altsetting 0 [ 345.524407][ T5069] usb 2-1: New USB device found, idVendor=0f11, idProduct=2030, bcdDevice=a9.fd [ 345.561015][ T5069] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.580203][ T5069] usb 2-1: Product: syz [ 345.602828][ T5069] usb 2-1: Manufacturer: syz [ 345.618013][ T5069] usb 2-1: SerialNumber: syz [ 345.654610][T17350] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 345.834949][T17424] netlink: 'syz.4.5392': attribute type 1 has an invalid length. [ 345.959183][ T5069] ldusb 2-1:222.31: LD USB Device #0 now attached to major 180 minor 0 [ 345.962972][T17431] netlink: 'syz.4.5395': attribute type 4 has an invalid length. [ 345.992988][ T5069] usb 2-1: USB disconnect, device number 6 [ 346.020336][ T5069] ldusb 2-1:222.31: LD USB Device #0 now disconnected [ 346.251596][T17450] tipc: Enabling of bearer rejected, failed to enable media [ 346.594186][ T5069] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 346.621101][T17468] loop7: detected capacity change from 0 to 4096 [ 346.687663][T17468] EXT4-fs (loop7): Test dummy encryption mode enabled [ 346.769435][T17468] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 346.844370][ T5069] usb 5-1: Using ep0 maxpacket: 16 [ 346.964362][ T5069] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 346.984253][ T5069] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 347.026459][ T5069] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 347.039834][ T5069] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.073369][ T5069] usb 5-1: config 0 descriptor?? [ 347.327068][ T4871] usb 5-1: USB disconnect, device number 12 [ 348.969657][T17515] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5431'. [ 349.004314][T17515] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5431'. [ 349.029069][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5431'. [ 349.048518][T17515] netlink: 16 bytes leftover after parsing attributes in process `syz.8.5431'. [ 349.528064][T17561] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5455'. [ 349.583586][T17564] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5456'. [ 350.032417][T17601] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5471'. [ 350.594307][ T4240] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 350.844364][ T4240] usb 8-1: Using ep0 maxpacket: 16 [ 350.964269][ T4240] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.984729][ T4240] usb 8-1: config 0 has no interfaces? [ 351.006751][ T4240] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 351.043276][ T4240] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.067585][ T4240] usb 8-1: config 0 descriptor?? [ 351.151318][T17663] netlink: 'syz.8.5507': attribute type 1 has an invalid length. [ 351.193744][T17663] netlink: 'syz.8.5507': attribute type 4 has an invalid length. [ 351.232526][T17663] netlink: 15294 bytes leftover after parsing attributes in process `syz.8.5507'. [ 351.347141][T17615] udc-core: couldn't find an available UDC or it's busy [ 351.371100][T17615] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 351.413098][ T4173] usb 8-1: USB disconnect, device number 4 [ 351.589974][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5514'. [ 352.341502][T17723] loop1: detected capacity change from 0 to 4096 [ 352.389260][T17723] EXT4-fs (loop1): Test dummy encryption mode enabled [ 352.458567][T17723] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 352.543218][T17735] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5532'. [ 353.353374][T17787] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 353.503145][T17796] netlink: 'syz.1.5560': attribute type 1 has an invalid length. [ 353.558723][T17796] netlink: 'syz.1.5560': attribute type 4 has an invalid length. [ 354.168614][T17835] netlink: 'syz.4.5577': attribute type 1 has an invalid length. [ 354.197880][T17833] loop9: detected capacity change from 0 to 4096 [ 354.215051][T17835] netlink: 'syz.4.5577': attribute type 4 has an invalid length. [ 354.235052][T17841] __nla_validate_parse: 7 callbacks suppressed [ 354.235066][T17841] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5579'. [ 354.259494][T17833] EXT4-fs (loop9): Test dummy encryption mode enabled [ 354.267004][T17835] netlink: 15294 bytes leftover after parsing attributes in process `syz.4.5577'. [ 354.350687][T17833] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 354.645589][T17860] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5587'. [ 355.292924][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5602'. [ 355.460085][T17907] loop4: detected capacity change from 0 to 1024 [ 355.522809][T17915] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5611'. [ 355.547308][T17907] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option [ 355.561577][T17907] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 355.621912][T17907] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 355.630202][T17907] System zones: 0-1, 3-36 [ 355.640685][T17907] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback. [ 355.697824][T17924] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5617'. [ 355.940796][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5622'. [ 356.310361][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5632'. [ 356.474185][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 356.474201][ T26] audit: type=1107 audit(1763445204.639:92): pid=17964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 356.650560][T17971] 9p: Unknown access argument a [ 356.677274][T17967] loop4: detected capacity change from 0 to 4096 [ 356.729281][T17967] EXT4-fs (loop4): Test dummy encryption mode enabled [ 356.763422][T17967] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 358.002024][T18018] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5656'. [ 358.046001][T18011] loop8: detected capacity change from 0 to 4096 [ 358.086880][T18011] EXT4-fs (loop8): Test dummy encryption mode enabled [ 358.210591][T18011] EXT4-fs (loop8): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 358.499396][T18048] overlayfs: bad mount option "redirect_dir=nofollow:/" [ 358.860052][T18073] 9p: Unknown access argument a [ 359.960933][T18119] netlink: 156 bytes leftover after parsing attributes in process `syz.9.5707'. [ 360.198351][T18129] loop8: detected capacity change from 0 to 128 [ 360.285668][T18129] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 360.334533][T18129] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 360.428617][T18144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5717'. [ 360.480346][T18140] loop9: detected capacity change from 0 to 4096 [ 360.598003][T18140] EXT4-fs (loop9): Test dummy encryption mode enabled [ 360.664369][T18140] EXT4-fs (loop9): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 361.561064][T18180] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5733'. [ 361.615104][T18178] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5734'. [ 363.092347][T18229] netlink: 148 bytes leftover after parsing attributes in process `syz.1.5756'. [ 363.121629][T18229] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 363.277757][T18240] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5759'. [ 363.473533][T18246] loop7: detected capacity change from 0 to 4096 [ 363.541656][T18246] EXT4-fs (loop7): Test dummy encryption mode enabled [ 363.597365][T18246] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption=v1,dioread_nolock,,errors=continue. Quota mode: writeback. [ 363.915398][T18283] tipc: Enabling of bearer rejected, failed to enable media [ 364.174170][ T7478] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 364.392151][T18307] netlink: 84 bytes leftover after parsing attributes in process `syz.9.5793'. [ 364.418412][T18307] netlink: 40 bytes leftover after parsing attributes in process `syz.9.5793'. [ 364.426780][ T7478] usb 2-1: Using ep0 maxpacket: 16 [ 364.546756][ T7478] usb 2-1: config 8 has an invalid interface number: 108 but max is 0 [ 364.568237][ T7478] usb 2-1: config 8 has no interface number 0 [ 364.734469][ T7478] usb 2-1: New USB device found, idVendor=0421, idProduct=04c9, bcdDevice=6e.97 [ 364.747104][ T7478] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.766252][ T7478] usb 2-1: Product: syz [ 364.773798][ T7478] usb 2-1: Manufacturer: syz [ 364.779790][ T7478] usb 2-1: SerialNumber: syz [ 365.097171][ T7478] usb 2-1: bad CDC descriptors [ 365.107596][ T7478] usb 2-1: bad CDC descriptors [ 365.122349][ T7478] cdc_acm 2-1:8.108: Zero length descriptor references [ 365.137997][ T7478] cdc_acm: probe of 2-1:8.108 failed with error -22 [ 365.170675][ T7478] usb 2-1: USB disconnect, device number 7 [ 366.309842][T18346] netlink: 148 bytes leftover after parsing attributes in process `syz.7.5806'. [ 366.320330][T18351] fuse: Bad value for 'rootmode' [ 366.339129][T18350] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 366.372409][T18346] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 366.490092][T18353] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 366.650060][T18357] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5813'. [ 368.252224][T18394] loop7: detected capacity change from 0 to 512 [ 368.382116][T18394] EXT4-fs (loop7): Ignoring removed bh option [ 368.407198][T18394] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 368.489633][T18394] EXT4-fs (loop7): orphan cleanup on readonly fs [ 368.540664][T18394] EXT4-fs (loop7): 1 truncate cleaned up [ 368.608268][T18394] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,resgid=0x000000000000ee00,bh,noload,data_err=ignore,abort,,errors=continue. Quota mode: writeback. [ 368.837930][T18415] netlink: 52 bytes leftover after parsing attributes in process `syz.4.5836'. [ 368.880691][T18415] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5836'. [ 370.569664][T18499] netlink: 108 bytes leftover after parsing attributes in process `syz.8.5875'. [ 372.075453][T18546] autofs4:pid:18546:autofs_fill_super: called with bogus options [ 372.372420][T18567] loop9: detected capacity change from 0 to 512 [ 372.399629][T18564] netlink: 'syz.4.5909': attribute type 16 has an invalid length. [ 372.447618][T18564] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.5909'. [ 372.537835][T18573] netlink: 'syz.7.5911': attribute type 13 has an invalid length. [ 372.554196][T18567] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 372.593034][T18567] ext4 filesystem being mounted at /293/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 372.641334][T18573] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.673978][T18573] IPv6: ADDRCONF(NETDEV_CHANGE): dummy0: link becomes ready [ 372.720915][T18567] EXT4-fs error (device loop9): ext4_do_update_inode:5218: inode #2: comm syz.9.5906: corrupted inode contents [ 372.735502][T18573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 372.754249][T18573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 372.789828][T18567] EXT4-fs error (device loop9): ext4_dirty_inode:6054: inode #2: comm syz.9.5906: mark_inode_dirty error [ 372.827911][T18567] EXT4-fs error (device loop9): ext4_do_update_inode:5218: inode #2: comm syz.9.5906: corrupted inode contents [ 372.899946][T18567] EXT4-fs error (device loop9): __ext4_ext_dirty:183: inode #2: comm syz.9.5906: mark_inode_dirty error [ 373.075609][T18600] netlink: 84 bytes leftover after parsing attributes in process `syz.8.5919'. [ 375.039271][T18682] netlink: 'syz.4.5958': attribute type 21 has an invalid length. [ 375.733629][T18709] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5970'. [ 376.043703][T18727] binder: BINDER_SET_CONTEXT_MGR already set [ 376.054036][T18727] binder: 18724:18727 ioctl 40046207 0 returned -16 [ 376.173049][ T144] tipc: Subscription rejected, illegal request [ 376.394705][T18747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5987'. [ 376.699336][T18761] A link change request failed with some changes committed already. Interface ip_vti0 may have been left with an inconsistent configuration, please check. [ 377.320295][T18791] netlink: 'syz.9.6006': attribute type 13 has an invalid length. [ 377.378895][T18791] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 377.413179][T18791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 377.438666][T18791] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 378.404932][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.411375][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.887194][T18854] fuse: Bad value for 'fd' [ 379.454585][T18884] netlink: 32 bytes leftover after parsing attributes in process `syz.9.6057'. [ 379.701070][T18893] 8021q: adding VLAN 0 to HW filter on device bond2 [ 379.802451][T18898] device bond_slave_0 entered promiscuous mode [ 379.809287][T18898] device bond_slave_1 entered promiscuous mode [ 379.820473][T18902] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6052'. [ 379.827717][T18898] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 379.874673][T18898] bond2: (slave macvlan2): making interface the new active one [ 379.899312][T18898] bond2: (slave macvlan2): Enslaving as an active interface with an up link [ 379.920013][T15756] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 383.228138][T19002] netlink: 'syz.8.6089': attribute type 13 has an invalid length. [ 383.311827][T19002] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 383.423763][T19002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 383.477464][T19002] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 386.572330][T19052] bond1: option mode: unable to set because the bond device is up [ 386.652468][T19052] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 386.712658][T19052] bond1: (slave macvlan3): Enslaving as an active interface with a down link [ 386.939753][T19067] loop1: detected capacity change from 0 to 512 [ 387.014309][T19067] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 387.060607][T19067] EXT4-fs (loop1): inline encryption not supported [ 387.082851][T19067] EXT4-fs (loop1): Test dummy encryption mode enabled [ 387.159305][T19067] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 387.179540][T19067] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 387.605454][T19067] EXT4-fs (loop1): 1 truncate cleaned up [ 387.649797][T19067] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 388.055153][T19087] usb usb6: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 388.157755][T19097] 8021q: adding VLAN 0 to HW filter on device bond1 [ 388.224099][T19097] device bond_slave_0 entered promiscuous mode [ 388.230297][T19097] device bond_slave_1 entered promiscuous mode [ 388.237040][T19097] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 388.246390][T19097] bond1: (slave macvlan2): making interface the new active one [ 388.255758][T19097] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 388.265310][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 390.333132][T19141] loop8: detected capacity change from 0 to 512 [ 390.364800][T19141] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 390.387263][T19141] EXT4-fs (loop8): inline encryption not supported [ 390.393835][T19141] EXT4-fs (loop8): Test dummy encryption mode enabled [ 390.478732][T19141] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 390.500012][T19141] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 390.542918][T19141] EXT4-fs (loop8): 1 truncate cleaned up [ 390.571321][T19141] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 390.722141][T19141] fscrypt: AES-256-XTS using implementation "xts-aes-aesni" [ 390.758960][T19173] netlink: 'syz.9.6161': attribute type 4 has an invalid length. [ 390.770956][T19173] netlink: 3649 bytes leftover after parsing attributes in process `syz.9.6161'. [ 391.048626][T19196] netlink: 'syz.9.6171': attribute type 1 has an invalid length. [ 391.088507][T19196] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.125424][T19200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 391.134799][T19200] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 391.146668][T19200] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 391.184798][T19196] device team_slave_0 entered promiscuous mode [ 391.191574][T19196] device team_slave_1 entered promiscuous mode [ 391.200713][T19196] device team_slave_0 left promiscuous mode [ 391.206698][T19196] device team_slave_1 left promiscuous mode [ 391.219983][T19196] bond3: (slave vlan1): making interface the new active one [ 391.235048][T19196] device team_slave_0 entered promiscuous mode [ 391.241265][T19196] device team_slave_1 entered promiscuous mode [ 391.249023][T19196] bond3: (slave vlan1): Enslaving as an active interface with an up link [ 391.503324][T19228] netlink: 'syz.4.6175': attribute type 13 has an invalid length. [ 391.833018][T19242] loop7: detected capacity change from 0 to 512 [ 391.938923][T19242] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 391.965448][T19242] EXT4-fs (loop7): inline encryption not supported [ 391.983028][T19242] EXT4-fs (loop7): Test dummy encryption mode enabled [ 392.017414][T19242] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 392.063204][T19242] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 392.106714][T19242] EXT4-fs (loop7): 1 truncate cleaned up [ 392.116242][T19242] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 392.363413][T19267] netlink: 'syz.1.6196': attribute type 13 has an invalid length. [ 392.407595][T19267] rdma_rxe: ignoring netdev event = 30 for bond_slave_0 [ 392.564587][T19279] fuse: Bad value for 'fd' [ 393.073719][T19295] binder: 19293:19295 ioctl c018620c 200000000000 returned -22 [ 393.126216][T19297] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6209'. [ 393.363420][T19306] loop9: detected capacity change from 0 to 512 [ 393.545045][T19306] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 393.564434][T19306] System zones: 0-2, 18-18, 34-35 [ 393.577898][T19306] EXT4-fs (loop9): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 393.620350][T19321] loop1: detected capacity change from 0 to 512 [ 393.664863][T19306] ext4 filesystem being mounted at /355/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 393.739241][T19321] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 393.764667][T19321] EXT4-fs (loop1): inline encryption not supported [ 393.784718][T19321] EXT4-fs (loop1): Test dummy encryption mode enabled [ 393.834216][T19321] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 393.841364][T19321] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 393.913624][T19321] EXT4-fs (loop1): 1 truncate cleaned up [ 393.916325][T19331] bridge0: port 2(vlan1) entered blocking state [ 393.942628][T19331] bridge0: port 2(vlan1) entered disabled state [ 393.948998][T19321] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 393.985444][T19331] device vlan1 entered promiscuous mode [ 393.992670][T19331] device bridge_slave_0 entered promiscuous mode [ 395.145581][T19349] Bluetooth: hci5: Frame reassembly failed (-84) [ 395.444529][T19364] loop7: detected capacity change from 0 to 512 [ 395.493601][T19364] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 395.517889][T19364] EXT4-fs (loop7): inline encryption not supported [ 395.529573][T19364] EXT4-fs (loop7): Test dummy encryption mode enabled [ 395.555021][T19364] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 395.562160][T19364] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 395.618274][T19364] EXT4-fs (loop7): 1 truncate cleaned up [ 395.628094][T19364] EXT4-fs (loop7): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 396.162614][T19396] netlink: 'syz.7.6252': attribute type 1 has an invalid length. [ 396.230550][T19396] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.369952][T19402] 8021q: adding VLAN 0 to HW filter on device bond1 [ 396.410217][T19404] loop4: detected capacity change from 0 to 1024 [ 396.415809][T19402] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 396.452193][T19402] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 396.467356][T19404] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 396.521795][T19404] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a800e11d, mo2=0002] [ 396.537080][T19404] System zones: 0-1, 4-36, 102-102 [ 396.569308][T19404] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,debug,norecovery,grpid,norecovery,,errors=continue. Quota mode: writeback. [ 396.609093][T19396] device team_slave_0 entered promiscuous mode [ 396.615380][T19396] device team_slave_1 entered promiscuous mode [ 396.642511][T19396] device team_slave_0 left promiscuous mode [ 396.648547][T19396] device team_slave_1 left promiscuous mode [ 396.686006][T19396] bond1: (slave vlan1): making interface the new active one [ 396.730601][T19396] device team_slave_0 entered promiscuous mode [ 396.736894][T19396] device team_slave_1 entered promiscuous mode [ 396.769024][T19396] bond1: (slave vlan1): Enslaving as an active interface with an up link [ 397.807019][ T7478] Bluetooth: hci5: command 0x1003 tx timeout [ 397.813385][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 398.009764][T19418] loop4: detected capacity change from 0 to 512 [ 398.069314][T19418] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 398.090602][T19418] EXT4-fs (loop4): inline encryption not supported [ 398.110407][T19418] EXT4-fs (loop4): Test dummy encryption mode enabled [ 398.130442][T19418] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 398.151435][T19418] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 398.200123][T19418] EXT4-fs (loop4): 1 truncate cleaned up [ 398.210158][T19418] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 398.632727][T19430] device syzkaller0 entered promiscuous mode [ 398.863690][T19449] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6270'. [ 398.889805][T19452] fuse: Bad value for 'fd' [ 399.004986][T19458] netlink: 32 bytes leftover after parsing attributes in process `syz.7.6273'. [ 399.139020][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6277'. [ 399.181562][T19466] tmpfs: Unknown parameter 'n' [ 399.605303][T19490] bridge0: port 1(vlan0) entered blocking state [ 399.635000][T19490] bridge0: port 1(vlan0) entered disabled state [ 399.652681][T19490] device vlan0 entered promiscuous mode [ 399.674209][T19490] device bridge_slave_0 entered promiscuous mode [ 399.690994][T19493] netlink: 756 bytes leftover after parsing attributes in process `syz.7.6290'. [ 399.824607][ T21] Bluetooth: hci5: command 0x1001 tx timeout [ 399.830731][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 400.321281][T19525] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6303'. [ 401.534295][ T1107] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 401.574360][ T21] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 401.710767][T19555] loop9: detected capacity change from 0 to 512 [ 401.784258][T19555] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 401.802821][T19555] EXT4-fs (loop9): inline encryption not supported [ 401.813193][T19555] EXT4-fs (loop9): Test dummy encryption mode enabled [ 401.820903][T19555] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 401.830187][T19555] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 401.861480][T19555] EXT4-fs (loop9): 1 truncate cleaned up [ 401.867556][T19555] EXT4-fs (loop9): mounted filesystem without journal. Opts: errors=remount-ro,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,. Quota mode: none. [ 401.916382][ T4240] Bluetooth: hci5: command 0x1009 tx timeout [ 401.944441][ T1107] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 401.962937][ T1107] usb 2-1: config 0 has no interfaces? [ 401.968854][ T21] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 401.977389][ T21] usb 5-1: config 0 has no interface number 0 [ 401.983598][ T21] usb 5-1: config 0 interface 41 has no altsetting 0 [ 402.138555][ T1107] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 402.153085][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.163866][ T21] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 402.180292][ T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.189197][ T1107] usb 2-1: Product: syz [ 402.193998][ T1107] usb 2-1: Manufacturer: syz [ 402.199219][ T1107] usb 2-1: SerialNumber: syz [ 402.205171][ T21] usb 5-1: Product: syz [ 402.210756][ T21] usb 5-1: Manufacturer: syz [ 402.217078][ T1107] usb 2-1: config 0 descriptor?? [ 402.222116][ T21] usb 5-1: SerialNumber: syz [ 402.229620][ T21] usb 5-1: config 0 descriptor?? [ 402.499885][ T1107] usb 2-1: USB disconnect, device number 8 [ 402.724640][ T21] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 402.760222][ T21] CoreChips: probe of 5-1:0.41 failed with error -71 [ 402.791036][T19613] netlink: 72 bytes leftover after parsing attributes in process `syz.9.6346'. [ 402.805466][ T21] usb 5-1: USB disconnect, device number 13 [ 402.884566][T19617] netlink: 'syz.9.6347': attribute type 12 has an invalid length. [ 403.003079][T19625] loop7: detected capacity change from 0 to 512 [ 403.075915][T19625] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 403.087427][T19625] System zones: 0-2, 18-18, 34-35 [ 403.103695][T19625] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 403.115585][T19625] ext4 filesystem being mounted at /777/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 403.138032][T19633] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6354'. [ 403.318684][T19642] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6358'. [ 403.522789][T19655] 9pnet_virtio: no channels available for device syz [ 403.618534][T19661] loop4: detected capacity change from 0 to 512 [ 403.708848][T19661] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002] [ 403.751479][T19661] System zones: 0-2, 18-18, 34-35 [ 403.806783][T19661] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 403.861593][T19661] ext4 filesystem being mounted at /1303/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.129465][T19684] loop4: detected capacity change from 0 to 2048 [ 404.204824][T19684] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 404.501092][T19705] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6386'. [ 404.890080][T19723] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 404.913295][ T4256] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 405.206692][T19733] loop9: detected capacity change from 0 to 128 [ 405.576347][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.738032][ T4256] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.764231][ T4256] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 405.773428][ T4256] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.802927][T19733] EXT4-fs (loop9): mounted filesystem without journal. Opts: quota,init_itable,,errors=continue. Quota mode: writeback. [ 405.825185][ T4256] usb 2-1: config 0 descriptor?? [ 405.884366][T19733] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 406.240964][T19750] ------------[ cut here ]------------ [ 406.254266][ T4256] usbhid 2-1:0.0: can't add hid device: -71 [ 406.262439][ T4256] usbhid: probe of 2-1:0.0 failed with error -71 [ 406.276541][T19750] wlan1: Failed check-sdata-in-driver check, flags: 0x4 [ 406.304005][ T4256] usb 2-1: USB disconnect, device number 9 [ 406.311234][T19750] WARNING: CPU: 0 PID: 19750 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550 [ 406.366557][T19750] Modules linked in: [ 406.414490][T19750] CPU: 1 PID: 19750 Comm: syz.7.6407 Not tainted syzkaller #0 [ 406.432622][T19758] loop8: detected capacity change from 0 to 512 [ 406.442439][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 406.483084][T19758] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 406.518010][T19750] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 406.525166][T19750] Code: 7d 8d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 14 19 8b 4c 89 e6 89 ea e8 95 f1 6f 00 <0f> 0b e9 07 fd ff ff e8 a9 15 49 f8 0f 0b e9 b1 fe ff ff e8 9d 15 [ 406.545115][T19758] EXT4-fs (loop8): inline encryption not supported [ 406.555260][T19758] EXT4-fs (loop8): Test dummy encryption mode enabled [ 406.562059][T19758] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 406.569819][T19750] RSP: 0018:ffffc900039cf248 EFLAGS: 00010246 [ 406.589112][T19758] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 406.599834][T19750] RAX: 3fb10d7ad8716700 RBX: 0000000000400000 RCX: 0000000000080000 [ 406.636307][T19750] RDX: ffffc9000fc36000 RSI: 0000000000005bc8 RDI: 0000000000005bc9 [ 406.712121][T19750] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172067b0 [ 406.802916][T19750] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff88807dd20000 [ 406.850313][T19758] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002] [ 406.979697][T19758] System zones: 1-12 [ 407.193264][T19758] EXT4-fs (loop8): 1 truncate cleaned up [ 407.211339][T19750] R13: ffff88807dd21290 R14: ffff88805afc0da0 R15: ffff88807dd22298 [ 407.234872][T19758] EXT4-fs (loop8): mounted filesystem without journal. Opts: debug,mblk_io_submit,inlinecrypt,test_dummy_encryption=v1,barrier,mblk_io_submit,nogrpid,,errors=continue. Quota mode: none. [ 407.271416][T19750] FS: 00007f1f92d686c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 407.309861][T19750] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 407.334695][T19750] CR2: 0000557a881e2168 CR3: 000000007d7be000 CR4: 00000000003506f0 [ 407.342719][T19750] Call Trace: [ 407.346321][T19750] [ 407.349277][T19750] ? netif_carrier_off+0x1/0xc0 [ 407.354202][T19750] ieee80211_ocb_leave+0x26f/0x320 [ 407.359339][T19750] __cfg80211_leave_ocb+0x219/0x3f0 [ 407.369780][T19750] cfg80211_leave_ocb+0x53/0x70 [ 407.375260][T19750] cfg80211_change_iface+0x4f1/0xeb0 [ 407.381118][T19750] nl80211_set_interface+0x598/0x7d0 [ 407.387058][T19750] ? nl80211_dump_interface+0x5c0/0x5c0 [ 407.394217][T19750] ? mutex_lock_nested+0x17/0x20 [ 407.399295][T19750] genl_rcv_msg+0xbc6/0xf40 [ 407.403824][T19750] ? genl_bind+0x370/0x370 [ 407.432200][T19750] ? verify_lock_unused+0x140/0x140 [ 407.445520][T19750] ? verify_lock_unused+0x140/0x140 [ 407.454192][T19750] ? nl80211_dump_interface+0x5c0/0x5c0 [ 407.468399][T19750] netlink_rcv_skb+0x1e0/0x430 [ 407.502139][T19750] ? genl_bind+0x370/0x370 [ 407.523754][T19750] ? netlink_ack+0xb60/0xb60 [ 407.536381][T19750] ? __lock_acquire+0x7c60/0x7c60 [ 407.541532][T19750] ? preempt_count_add+0x8d/0x190 [ 407.548719][T19750] ? down_read+0x1aa/0x2e0 [ 407.553239][T19750] genl_rcv+0x24/0x40 [ 407.558124][T19750] netlink_unicast+0x774/0x920 [ 407.563004][T19750] netlink_sendmsg+0x8ab/0xbc0 [ 407.567915][T19750] ? netlink_getsockopt+0x560/0x560 [ 407.573207][T19750] ? aa_sock_msg_perm+0x94/0x150 [ 407.578288][T19750] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 407.583665][T19750] ? security_socket_sendmsg+0x7c/0xa0 [ 407.601978][T19750] ? netlink_getsockopt+0x560/0x560 [ 407.612951][T19750] ____sys_sendmsg+0x5a2/0x8c0 [ 407.623465][T19750] ? memset+0x1e/0x40 [ 407.632040][T19750] ? __sys_sendmsg_sock+0x30/0x30 [ 407.642968][T19750] ? import_iovec+0x6f/0xa0 [ 407.652899][T19750] ___sys_sendmsg+0x1f0/0x260 [ 407.665161][T19750] ? __sys_sendmsg+0x250/0x250 [ 407.674492][T19750] ? sock_do_ioctl+0x27c/0x2f0 [ 407.679311][T19750] ? __fdget+0x18b/0x210 [ 407.693772][T19750] __se_sys_sendmsg+0x190/0x250 [ 407.711948][T19750] ? __x64_sys_sendmsg+0x80/0x80 [ 407.717906][T19750] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 407.723920][T19750] ? lockdep_hardirqs_on+0x94/0x140 [ 407.744155][T19750] do_syscall_64+0x4c/0xa0 [ 407.748695][T19750] ? clear_bhb_loop+0x30/0x80 [ 407.764138][T19750] ? clear_bhb_loop+0x30/0x80 [ 407.768854][T19750] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 407.788570][T19750] RIP: 0033:0x7f1f94b016c9 [ 407.793022][T19750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 407.816875][T19750] RSP: 002b:00007f1f92d68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 407.825934][T19750] RAX: ffffffffffffffda RBX: 00007f1f94d57fa0 RCX: 00007f1f94b016c9 [ 407.834006][T19750] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 407.842348][T19750] RBP: 00007f1f94b83f91 R08: 0000000000000000 R09: 0000000000000000 [ 407.854805][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 407.862796][T19750] R13: 00007f1f94d58038 R14: 00007f1f94d57fa0 R15: 00007ffc786415d8 [ 407.875260][T19750] [ 407.878312][T19750] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 407.885589][T19750] CPU: 0 PID: 19750 Comm: syz.7.6407 Not tainted syzkaller #0 [ 407.893045][T19750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 407.903097][T19750] Call Trace: [ 407.906375][T19750] [ 407.909304][T19750] dump_stack_lvl+0x168/0x230 [ 407.913992][T19750] ? show_regs_print_info+0x20/0x20 [ 407.919203][T19750] ? load_image+0x3b0/0x3b0 [ 407.923729][T19750] panic+0x2c9/0x7f0 [ 407.927638][T19750] ? bpf_jit_dump+0xd0/0xd0 [ 407.932157][T19750] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 407.938587][T19750] __warn+0x248/0x2b0 [ 407.942583][T19750] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 407.949012][T19750] report_bug+0x1b7/0x2e0 [ 407.953362][T19750] handle_bug+0x3a/0x70 [ 407.957521][T19750] exc_invalid_op+0x16/0x40 [ 407.962045][T19750] asm_exc_invalid_op+0x16/0x20 [ 407.966900][T19750] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550 [ 407.973934][T19750] Code: 7d 8d f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 40 14 19 8b 4c 89 e6 89 ea e8 95 f1 6f 00 <0f> 0b e9 07 fd ff ff e8 a9 15 49 f8 0f 0b e9 b1 fe ff ff e8 9d 15 [ 407.993551][T19750] RSP: 0018:ffffc900039cf248 EFLAGS: 00010246 [ 407.999634][T19750] RAX: 3fb10d7ad8716700 RBX: 0000000000400000 RCX: 0000000000080000 [ 408.007618][T19750] RDX: ffffc9000fc36000 RSI: 0000000000005bc8 RDI: 0000000000005bc9 [ 408.015596][T19750] RBP: 0000000000000004 R08: dffffc0000000000 R09: ffffed10172067b0 [ 408.023577][T19750] R10: ffffed10172067b0 R11: 1ffff110172067af R12: ffff88807dd20000 [ 408.031559][T19750] R13: ffff88807dd21290 R14: ffff88805afc0da0 R15: ffff88807dd22298 [ 408.039563][T19750] ? ieee80211_bss_info_change_notify+0x37b/0x550 [ 408.045997][T19750] ? netif_carrier_off+0x1/0xc0 [ 408.050870][T19750] ieee80211_ocb_leave+0x26f/0x320 [ 408.056005][T19750] __cfg80211_leave_ocb+0x219/0x3f0 [ 408.061230][T19750] cfg80211_leave_ocb+0x53/0x70 [ 408.066097][T19750] cfg80211_change_iface+0x4f1/0xeb0 [ 408.071402][T19750] nl80211_set_interface+0x598/0x7d0 [ 408.076709][T19750] ? nl80211_dump_interface+0x5c0/0x5c0 [ 408.082267][T19750] ? mutex_lock_nested+0x17/0x20 [ 408.087221][T19750] genl_rcv_msg+0xbc6/0xf40 [ 408.091747][T19750] ? genl_bind+0x370/0x370 [ 408.096182][T19750] ? verify_lock_unused+0x140/0x140 [ 408.101391][T19750] ? verify_lock_unused+0x140/0x140 [ 408.106613][T19750] ? nl80211_dump_interface+0x5c0/0x5c0 [ 408.112178][T19750] netlink_rcv_skb+0x1e0/0x430 [ 408.116944][T19750] ? genl_bind+0x370/0x370 [ 408.121364][T19750] ? netlink_ack+0xb60/0xb60 [ 408.125959][T19750] ? __lock_acquire+0x7c60/0x7c60 [ 408.130992][T19750] ? preempt_count_add+0x8d/0x190 [ 408.136019][T19750] ? down_read+0x1aa/0x2e0 [ 408.140450][T19750] genl_rcv+0x24/0x40 [ 408.144435][T19750] netlink_unicast+0x774/0x920 [ 408.149214][T19750] netlink_sendmsg+0x8ab/0xbc0 [ 408.153987][T19750] ? netlink_getsockopt+0x560/0x560 [ 408.159189][T19750] ? aa_sock_msg_perm+0x94/0x150 [ 408.164137][T19750] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 408.169425][T19750] ? security_socket_sendmsg+0x7c/0xa0 [ 408.174883][T19750] ? netlink_getsockopt+0x560/0x560 [ 408.180091][T19750] ____sys_sendmsg+0x5a2/0x8c0 [ 408.184870][T19750] ? memset+0x1e/0x40 [ 408.188869][T19750] ? __sys_sendmsg_sock+0x30/0x30 [ 408.193906][T19750] ? import_iovec+0x6f/0xa0 [ 408.198417][T19750] ___sys_sendmsg+0x1f0/0x260 [ 408.203107][T19750] ? __sys_sendmsg+0x250/0x250 [ 408.208032][T19750] ? sock_do_ioctl+0x27c/0x2f0 [ 408.212817][T19750] ? __fdget+0x18b/0x210 [ 408.217066][T19750] __se_sys_sendmsg+0x190/0x250 [ 408.221931][T19750] ? __x64_sys_sendmsg+0x80/0x80 [ 408.226876][T19750] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 408.232878][T19750] ? lockdep_hardirqs_on+0x94/0x140 [ 408.238088][T19750] do_syscall_64+0x4c/0xa0 [ 408.242511][T19750] ? clear_bhb_loop+0x30/0x80 [ 408.247196][T19750] ? clear_bhb_loop+0x30/0x80 [ 408.251878][T19750] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 408.257777][T19750] RIP: 0033:0x7f1f94b016c9 [ 408.262193][T19750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.281803][T19750] RSP: 002b:00007f1f92d68038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 408.290227][T19750] RAX: ffffffffffffffda RBX: 00007f1f94d57fa0 RCX: 00007f1f94b016c9 [ 408.298201][T19750] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000005 [ 408.306175][T19750] RBP: 00007f1f94b83f91 R08: 0000000000000000 R09: 0000000000000000 [ 408.314157][T19750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.322128][T19750] R13: 00007f1f94d58038 R14: 00007f1f94d57fa0 R15: 00007ffc786415d8 [ 408.330122][T19750] [ 408.333367][T19750] Kernel Offset: disabled [ 408.338007][T19750] Rebooting in 86400 seconds..