last executing test programs: 4m18.000022705s ago: executing program 2 (id=124): gettid() timer_create(0x0, 0x0, &(0x7f0000000380)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000180)={0x0, 0x0}) sendto$inet6(r3, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000480)={{0x4, 0x3, 0xfffffff9, 0x8385, 'syz0\x00', 0x8}, 0x3, 0x20000000, 0x7bab, r4, 0x2, 0x91, 'syz1\x00', &(0x7f0000000000)=['@\x9f%\x00', 'e8dab99234bb312e'], 0x14}) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001", @ANYRES16=r4, @ANYBLOB="3897e14f5527cfe8ef92650e4158ff61c460fdb94f6b4a238efd9b081e51dbcb7d57358eb7405bb6a1d8ed230f2f4bdb402c1ce15115f7c30152cacf6c3706ea8c3889fe9c921396ea08eef7dcff63cc81298d06c6054eb7f004b6e0ca59952b5942bbd53cad879a277aeb3d784abe575212678e9ac1784b608a0c74e352f3278da8ef50f57e06e85155974f0b58147d0759ab130f68df"], 0x7c}}, 0x4014) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000000b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c000000070a01010000000000000000020000000900020073000000000000"], 0x2c}}, 0x40054) 4m15.576603747s ago: executing program 2 (id=128): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) epoll_create1(0x0) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r5 = fanotify_init(0x81, 0x40000) fanotify_mark(r5, 0x105, 0x40001032, r4, 0x0) read$FUSE(r5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r7, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_HARD_IFINDEX={0x4}]}, 0x24}}, 0x0) 4m13.836004272s ago: executing program 2 (id=130): shutdown(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x1f, 0x0, 0xffffffff80013248, 0x2d, 0x0, 0x6, 0x5, 0x0, 0x0, 0x10}}, 0x50) r5 = semget$private(0x0, 0x207, 0x0) semctl$GETVAL(r5, 0x2, 0xc, 0x0) syz_fuse_handle_req(r3, &(0x7f00000066c0)="a062030607792c01386f28a428828947de99f79cc542703d923c7cb9d4e1f6fd95fbf2f747ab32f6fb041861fb3f87a88cb85405b4e73c0b6b12c81e42a9f13d82c32b7ddb172bcba1aac5c38f083747ac179f08d4d6d342a87ba8dd9bb7a9680f27433c3357b4f6ac97b19a973592f1ac6e7853a0b15ba42a28efb9cc30b146346b546018966e94976ca28f26a1950dd64c0adbb0c2e09bbd9caa9e7886a2b3d6e2b6d6616b718f1322ea2881ca59ef73948b1bcdc2dd3970e63cbc1043ce42af0ea1f95d17268cbc3ef062c8c31a537e94a20c1c505a6022d5ece7f51bd9c754d8c47cbe80bbb30b2159991a94dd3a25e64aff8a7a17374b5a71e0c7c241cbfd7f084e18a50bea512ada902210a3881ffcd42071ab09c4d80139d8980d6dc5d12c2595ced445caf22f80d8fb1a4c243da47fadb8e28e9c04fea820a8a2f032f5adff8b7d9269e63db68d196bf7f416405e52b6b8abd8bb9d9694b8b5eddae348209963738cd9710bd6c291af1c8eaf0e52d2f2f24bef8c8bc9f77eed40104e07c8ee1b4cb358fc73e2653fef6232b5e9f5d0be26b91a0b7967ed5e3bf10c449424ff4d11951d963677001d9576425d6a9c4503268a407d74854f5e1caacc0ccc463dc56e684db1d80b370da238915579ab82cdbd7d155adf10b96ed71100ea92834e8a4e4f5b7b831bff6fb4febe01bb398ea4065446f277f107aa3cc06e0b7a6e98434bf57744ba9ecb8effe704d7f852e16bc33ac113649f7540b7a7a67cf5493b400ce06e571d485af1732938b79ded4de7dad97a7e1c0be7bd479dc264647bb76503168423e3f6fc95f8ac8ea35e39f476ab54e88286fcf73eead1f794784465592fe4ad112ac63bbc3b3f35b87c40bc5fa6e3ca6cad878f9772a61a23aa00491a9e2442eb90a32af2bd74e99d075bcda20288bfc30f3b00a7e8e1a0b4791573abd65284bbb53e2b7d667239b95b332dd423e4d7c512de559bd53fde5285add9795bda81ec142620e693af9c787a4499dd76ca0d77d9c7c4043e537ec6c1cd0b9a642b12adc782a0e00f6c1ed7379d5fff4c2feb19182db977f657b195e4710ff00f78e35a146119897495b0e1a0068a6606292ee72bf65adcd2cd29b4e59a4b3f82eac77d5254013d03d2fb2511975558906741912d09304f0d4cf08c8f62690c67968c869f75a4025224d8e84baf7a42e01b4ecf7e55d7c45839778c2266880d1bb73e3aad618d1a4f8d5a16914d64d70438a88512649fd4caa90506e5a2d58a33ecaebc9b2e5f8a4fbeca57c829ae02fd2dc146e939c3d295ada7df4a07e74b356c6ffd7a9c546b9eddf7e013cbcb2b57ae0d225249f7e06a415681d9f597a060fd55e39bd56f04b863efeca458a0cbc54b660db50ca40d27a3fda3416860e691cfc780593f06b467700968bb918c32547e378b14b4e0dcd11cb0b2fb36ea70946ac62290184b4eed38b51c322a75367b50f558e063bf363341a17c28ddcbf9ce53da06f26303fd156423a25f686809bc9845a78e0cc3d94e04bc8da85f22a4a8ece2c4ac2c79e54dcc4eabc61e067060ad880377a71fe0c2c0305256e4f3c637575f086e4ae3d7ab5d106fde03d24c47dccba3da23a244c1f50a4f60cd8d71b77390c5ce6d5612fd0260a2f33389b064ae6acac783eca62874232fd3808fb2188151a43de6cebc7e245106183f7d929f1eeff6f972da3e3d967170247925fb0f04bf38e88d06321f9ff9d2c296553d842b69036a2b6de2aad3879aedee723ff00736f7b0dffe6182104105ff0f0b636f5192d6bb5ae7ef950825827d2f3d6285d83aedca3f31474e0ad50ce6290a0e546c30d900e5b4208ecc8b3aca0ba3d110fc3c0a7e004a53e5d0ba1cc1c2bb42c3dbcbb4ceb6674151932ae56f6b03cc34ce450c292fecd2456ddcf42b075e6fd49305fbf265a36f3cff61321dd60f16e844089d659130947672a2d059e04af9ef653e8afec926b5a5d411f60a2a435437095a1df8dc60a616bd1a1ce7b5251ed8f905becffebd635eee8ff0055c40f146f1350a406b853ecb005c6ede4dc270ce6751cff915aa27f5f6b0736da14c9949de599d57868c29cc97ad03bd89502a34b88ad29c8762d0dc24a6df759821882a32e70531cab51fa1752a4fc49cf0706cb24d203174b2940f29ef8b0ce65b40cfde4e0c7310c685cc8de8384e485a951192fa8c36c11f9b88a48caf027dca480caa4fccae70ea6c837eb82f926ad7691c7709f217220d71f6e374fb8522a84c118b5c25f3d56acfb25afbe676fc9e574b6c5a59c00a0bbeeff61fd82a1677f3da9bb596133db491a8f11b945d930c8a67de9ce80025c764d518efcbae25d9194dc96c31ed02c63b1ac976715f7233ffed7cb6e929bbb5afabd34bc37c095acd0abbbdb1ea48e40a30ac99550f0ccca19ecef5acb2604c48fffb53b352d114fac72d6fc019ddec558406668f773fed9476148133c0f9ca4d1fd7e70dd04bfa089dc57e5940f29a5fd33dc79913ff48853794fdaf891d71de94c4a4fed0544e09f2bd578b07003031b8602f08ca8a79fa5ebfd5477f4d4f031c3efe0db273446a99d0cbe21a3cf43f3b82774e4657bb4f9675adbaf71c52953f0b18a61e05a9c770536fbad215848f8238e8730b9085189ea4621780dac500d7d7dc7815b45e232f86592498f1515ac8c50306013524cc5f0a74b67bc85d435d332ce69f00641c86a3e91be84b78ac358f35b18d69679df4197d3be8554417cf44aee6dc623f68ce3388df18168efa1c87c776cbda792f6110b6af178eb8200a91dfb72c1e23b5e5a66b5a3ee3f4c2bba2ccac939dcb036006b86e894093922a95fd70baba9424a3d0327a0f209fe10b39f3cec3f669d301a2834e58fd56f94d622dccf653f08e776c9f3e1b0e5b3cdef133834b93c41c70438d51a0b127262868d49ca91623c3d8b75c2cce0b771b9ac941bb96029e782224a3686a7c0dd164e162ede667e0e5817e7bde85ad3bf30a6a5bdc420f751679be74a02f84aa93b971c3f45a67d155f7ecb1d5284660918dbf102bc16f496fb62a1290e6b88ddaff55740583cba13076afd623276634e0c11663be50766980949095003ef5bc6f90a98bbad436b67928513e70115224f672ca2a24e27bb98bd5288c49ea23d47ef13c5ff28c43ce53ca16a6caeccc1f601226253c4a38a88a93828f6c800547cadbaa6d7ad26db618cccd38a671507cad5ba0065ce2edba81a059b95c36c5d04ab456fd6fd81ec3738ebe546d973c0886a5e7b83dd9c2f58f5d6c19519e67575b3732a486555f8d8c4ae004a62e8d07ab2c8ef74cdb96aa99d75aeb1c25985996f281d71106910a3c3da17de35e04dbe00e2b7b75ec2fed177a7f2d04fbf68bd0b8af682b30911867d4d1497ba060b662f4e97a8e7fd3613015cc34302377497cd08bcdc29f06dae240820d2ccddbf8c95c76a4ba5d3e1b37a62369ce3f79fb74ebd9bc82c3fa3edad4034b6715c2853fa7781c974b5a4e541e8b69bf4bd653fcce4e4340d9409fe9112e4d253a3b7e9d43f4426127b10f2d5d3fcd2193490f7d933e0cc53dae552f2d7c9d77b8f9b27c59105cfae43a0aab314a0820fbb5684bf20986e3be215688b42938d272c4c0edd17bcdc84a514d2483456d6cfb4f5c1218859ee55bfc77da36c9c75734932a12fd03df38232063ed92024f8ee7c21f314129feb10670bb4d6a0ad4fb3dc57a64cfe6509a0770650cdec0efd5e0b1fd29433cf871c9ddbe648319bd481357326ac1eb32b4bef4ad89ab6122e92dc786decac88624a4a3963ae771f8023b9a92e446114764c53d7efc07e3ea77a9daac5cabbe648a223e249db62102ef7b7b6d06df46b6ff913911b89848a47aecc0563fb06b6d77fe1daf4541cf619105ab68e0bcdf7a05af22b0551323bf33dec8167df2b7fac62dc9e286dd3462f488c82ad194f7fd5d3ca72fe9c0c37cdb6d75684326e5cb30319ab333fc70bb197320acda161d2e685e78ac2cb1417223f64742b12a316d590b18a4173b2a105a381baf6f383ec2e81d04860b5cc536475d7c5d05bd6a7db1a5d93930bacba8c1de63707bd24785e19fc1f15ba724660ac00d0f2ebbcd5528b8cbe4f3ca332e8611e937a310fc79d234be6c1cd09d6a5cb06ab36a9d667188144c81f86aaf0851763573b36cc21462ba4f3d6e95d38d1e9b943085661d234ef6d079bc9d84c7447c85baba88263451ba10559e1ce326fee5074b26b54872e690a9a1e589e1c444daa3224b292bf9ec4a604dc512760084084f27386c89a1190b8905f0d720508c0ed69272f396725805480188aa4602a26e833c16aa5079c0577a8203ec0b2b929ef3b410bb427c168b7fefd1be652f06efc61c7a295a5d07a9fd61bd5bfe67ac5f74e485a66c92950a1b460257084ca3a3489943ad450300967234b487fa3def4010f9b715196562ebb0846b7ac3eba47646af6285582b4402f64aa684dff7d9cf81fbe1aa88959f7906f06839389f2ad56efb5029afe1d5ceac99a3e698f49ff0da7db06d7c9e94a8773a13fab93def139667b4dc6b741bd2769da7786acecbe315f9006bb6b72abe5bdc587d8d5aa8f67aaefef68197fd2e7874d9b7da2c3a5618720c12e8fc31db3e334c47abcbf10c6181ec14af4f9e90e19a35360a793b1e9b336e49b3ed67568a860cd4c298f967ba323d315821959629e5b7aaac367e1ddb8a1c5d61500afa69331a4c90861852f533657b28b97a343bc531a11ff634b157a6d859a35f0d2a595375e11a32457575f1d73da033bf5eeda12337b9fdd46bce192d3aaaa240a8c65bf47704d6aa64a9531f9de14a96fc9fe380db35dd5ec52321c67fb4c18abcaf22fbe8f602ed201232251317e1a1b71e1e2c924a92d84685de348eec97fed954b7f6681ddf521b4ee03a1aeb2e446ee2a7f4dfa37b1c53831139fc624c14dcc4d144ccdf758fd9f344b4cdc1df70f6a24fa78cab136c912d1ebffa7053ccbc9b9445762236dca409820f738370117d5c369dfc50fd42277f14eeaf29110aedcd503008c42914d04e219a8b6c01e337d04724919b07157e2275ba6365a9dba5ebc8019bd1aa1b8668023f64cf47e1b49b4fbcfc10d560bb74405c90751504db8100d8a8a1a3ff84d98f1262fbbd6b962f492b9531a7411c08e7e56eb0f838075f754b6a395b6b58a8e4c47eb46bfaba2ac94800a396749d18ba0e6219f8d616ec71a1e60b3bcc24e19d4a20ddbc6a871e6d7efa50a362610598d892a5adecbcfe217534deee3620dfc88c7992ec2e710e083ef0a50c20621405f654804d1af4f24d22b8ca48f26303e6969127a74f0b276a5624c3b84410d4d5ee3c62605876e60a88df2bd6e8db8c7e486fdb452178563e7add6bc126b721b9ef8b12181989b87031573a4010d88e34f15a2344e4808b74c99ad68f0c2aca4e8d504397c03e1328c4b1ec43fd902d206c3cfb63d7541ac57fdbc70b0033f87514286101231fe7e79668c802e1c23d61540cdf13a5e675b736e221ddc29ab747d9c64f6213f51d3c1ded2e2b0efc4e45183d90468f61ec1720f7a0b87947e2c54125cebe6563ee4415d886bbe869d17d36371c942c11db1e13c1dd40ed24cabaf7ee80eae6c4db934e982d9619d753dcd679c5650cd95d21582e31b259043a0d03371cd294f4cc028042c75070c9b534a2d79f164ab9d773295795280d1584ca664b53b263fe2e23534d27b0d85742fae8061e03187795129dd272041c6eb9c10c3406da1f752f4ca697bdbddd74975cd4dbba5687fb30ac4fd5d2579494eac73053a63821a852cf41a80f6668006f7e1c4e30b48d638ebab470c558d42baeed1adc8fc71f73e95f3ca212a4b009b508e89898727f805685e4e7650a2961d62c117d1ee9017236a6bffa0c36ae11bc52d346c83399e43c42cdb9f443aa307109a97ee66ceb7a29eeb2f1a2bb3ee1492229116db07301b2aa4126aee7775daa2d0eab4d206fae11b3c6b565dcc4c7b4dd1cf2abec81150d0629803f6eb221be384b8772fe6d6c4fa98c928a9d0a02e9ff8bb7a2168dbebe140323d93bee8983c496bccf752c372b795a3493624cefb3cfeb4307bd39826cac1ea3f18912deef1b8c8db30bc016990a477bc0a925fb36453a9e21354b2d7e6e3d4ca4dd20f27a8db05429d44b7a485365191dc4ba977a815958faf6434813a9f4046054763dd55dbb7fae892b746e169ae046ae3361a9f75cf622b03f75b1633da864395bd1c3a594fab0b1fb37f088dd1f2776e2b795c78635c2026a8ce7ff40968a1960786049a217dd8872ac0c01f4bafcf2d3d751dd46a5e1bec00540a9ca7afca3ef37575d4a8b1291d05be94913092890a9b4bfff39edbff307e5654896e79228777c0f8ea46c55bfe19e522bf457ab4e6b0167d776dbcd0160598370a12c4a03e4edc82b245a7608797b03d4ed89dfc2a5bf07b9fcb251fb8608553f3b3774818717a9aabe6b2ded811515ba454b390a6065bbc59552f3bfe51d38f139792e1aae60093a7c5770b52a1730feb1049c14a7d5261d644f6b738e22ee72aafa422bd93f61e1ccac0a5ef4726c66f61bb539acb937bd63da82c700c0860be90ce5621ced22b52b63d041266fc258fbfa6641aef22e97804e5138ad2ce4405eaf76bb0acd7fc61b2d6de4aabc5c28a850fcf219cff77c97d3cb6bec0067c171b912d11d82c56cbad56c0032a9657d4cdd1eacaca53f40f5e3fe911127e1cd30781351f180e1413933cee2d46ca0eea31ee01fe4e99a567edd0b10565d47b87c8a48366143e889e52d0ff13c920aea092c2545fa9b7056204fec156549d3c0a997bc1cf4a01338483bf5c69d6958ae038f1c3e3b84baeb2c1f9e064c0750602c34c6c483c316391d975f94f21f6dfe74e92c33228b408a9e2b9abcda33c497abba9c48a63e5c8f1a8d0f4c24d36a44e1601e8a09e8a5c7179bd4c44b17e542dd99cace87aab60a5e53325d544c991b6fa5deffa49fd886332980deeca9229cb2f67f495a7b743153854ed81e1623b12dbd65512d08a5732fee2db3fb455cf6df5a1701a2b8674633c6792162dc86ac76e30da225b0167a7e704ad33ba694f9c902afbeed58eef609874767053f59414d4d3eccbbcdbc7eba997c71f9b1f5139bb020d5dae1db6e2dcfbb51b5371b08bdbc3312b05ee6d8c03c8b5a7d4f23da45f276394f222b1a0bdf4e2603243cdba60ee0530387c88bb457ca9932f2283a4d55bb1195e6d325ed93f714e21908b1baafa467f1cec7fa26e5c384ee6828e77978bd1abd014de549a5e5966f2b2f4ba000f9d77f1abfe3a6c337cdb852c1ec59f61b63d543f3062dd2616a163ed7ca60168b0347b5c5646a678dafb4c502c333a0a48f0341b47f5c5946e42e571db0bfa0682a449ca64e71b5661a842975182399245c6de241512c67ac918d7e0c5cb66565010e881b8333567ca584321ead1c383b099d8bf1c56dac08cb218cde4226ad420d6d6313f9c4884d6394722304fdaa76e61db8c0d54eb1151344c41ce1130272928eecb2f9f0f23c752622374eb1223a80efcf0b937dff7d813d7be0340226c0a7b163741d9aecafcb7ddae5a219323323f621c802be82399e06d2e1cc582e759ffa303c5103f8a44d7129d2853b02e506abda57ad2836d7ff16f95232149fbeb8b62e586d3536bb4ae042ecd9e25d1dee789353071f9c89d4361000c47b763556e8902f1f25cbd8ae71679e03ff27db0ec75eeee3fccafc7fcf22c377ac60d3c61a43cb53abf6162118f2efc86a5ce80e69a02bc1db80018beeef6d567941232e4412a958ed012bf7a832c1eaf68134ecabc4927ad666b3d0f21d4e8d52fa37e0a9751124efed8bf47544299138a6f69d89e295677f12606c79b72451c263fca3eec22bf0c47c641159a0bbfb3b2b03154af533e5c06a149e52adcfae31bfc55f30064a8903c8d3b828d275a937b1e4adffa0597da5e253b50bd71b33f057ffeff0b2a0829b3bf33350fbe67c7c79034f80d69e6a21be495a848d328f416f15966491b218eab390544e39d498258ad80ddae248634c845cbe6f1c1e93e7c2b02075411e075fe936bcc75f4a4e1a3687cb3dbbb61cb31ddfbbc87a1859b3a48fccdd8e5915c8bf4eebe8f7093cef6a7a91c8682915f9908c854c483e90c9643467292884d284134dbaddafdbc74d94a5f9713719d62b4f6b4236803d210181847ca27129fde264156895f4e1822ef78a3b215ef56d7e36d2b94c93f5e931a0d13a3a3030061ce62de595eecf47eae6bf698530145757700df18f66fd7261a12c119d6679663b3c0f99d1705aebe66dc862eb21ccb7360b93f54507149b577abf521113991e06f345e8282fdc18de673e1ca7b188ee34b14f37f86ddcf97fef0b913c33cf8e5d5d33707dbcdbe4b27cef056670252f186735cdd02f6ed6bfe5318a704f00e34ffc4fda9855bf37c51be6a7423e44dd8a98883c8fa82ca37c90d681fb7a0db915576b50e49aff545b99aa3aa6343b814ba0bf64e53b2a1edcae2231bf20d65e4bb4da6dc8382120ede652adfb7c30a46e0ee784cbde74563d83eb8d89a1573fa104fddca9d4833c49dc904bda905426c7dee3e48b596c8ee201bea57fedb1a0649457eaac3c5b5f4519af3adb66f10b861e711cd4034448890e15047c2f8902588268b5645051f3f3968ed8d630e050ccef0d01b61ffeade51e4e72d8fd46bba4c20009396e984c424d174934a67a1930665fbea04c809e7cda0a2cdfd3a14d6b99c3a8d8b3691825830456876f188ff871fc861e4c6a0ca377dc1f0cb0f929f7eb1f5da045d9a588a393312acacca5c5a3b15bb1b488b08fc40ad65ae2c1df187eccd8377525a81d80df57579ae52f775fb2efdd172a41c370300fcc594c2635dcf50e9eb9d34fa8b4bbfd13078422e3a7734a8ae6cc09e39d07c7ee19838f8da4cbafe4162c8f8dc44e284840bd0a5c80bfc657c22e37e0d9a96dda34a51ce616c9ccdc95955cf85d93860da902ab30f11aa333eacc25c47981d8636038761ed4d84fcbb0ca92dd2e07863b9505b451c3c49e36a172527578123049ff2dc2b4e258a3f698a12ca4705a6fd0ce6bc4f1767b4d9c2e57c9ed1388527964ac96ff5e4cf5ad6fdb6a853b43905df32af8bd788b520fd526cbb95195a1bc00d654cb080acdf67938517a6cdac741d86730358be16465b4e1301f47f6a444c4e8d2980b8bd98a8dcd6617cde0b287e2d1f59167b5c445146fa49728111b8a2729428cabd02facb8fbddbdb2769680f288648d6baac53e0d909335da3e2b4c13ebd41f32820c9f491e9124ca444a0532f60e2816e15a5810baa91f64454aa355f9d362c7d1a461561689d08b1350a216b6f1bda57aae0706b3710a1b8e52a7e3084e600b5ee3dc540bba0c16267d549304a7840659a32e40070715c9bb912792d4a7b84fa06e73b9ddbc2f06c4edc19d25f5a198c7e3fc6226842e6215da5d826fcf5949612889f78e9de39d4e64b86b7033b5717a21f8f2b81c799a3fc0bfe6f5837b252eefa360c91a6148296bd19d50a343d909c1edf5261e70c8dfb2c488940cf236941ad3fd01247e37902a4bbfdd1839f7c92c260a2c494022fac08629303c8e54108d78ae2c94289c7f998ba3b622b48931ee7c17c59f5499d282467a1b8050acc94a0b17b21836c80b69f519b9b077d18e33c027faad562fa09f2cc6120f8cf5ee18cf7db9d729ffbb9de58885713215b7aebb8c98d9fa009be0a9ef3ceccdb2b31968db555b26c5c94e382d06ebf6d356e8caa85def5813dd1596d823924c4fb63dba5bd094cb64f204d1e59d31287715f831a1f0be95d8749f2166ba0b0b6b64a37991be1fe1c1e922835f2da0c074ec9413561d52166576b1c4f1e18f078dc046d1c284964b80217b55c59a474740c3649116b33e927479736bff6005859c7c00598f22cb8eca38af802f4c86836e8330492ac7ef3707890a8ff856dc7786ed769bba75b18484b257b3b022eeb51aa720639f79e6e6bd3d3c9a61f7822abe562867b4693f0b2f61135aaeaa510b31112efeec48d2602c6d4f2ddeeb51bb03ab18c18d8e127a37e22881febca47742b9332d3f2251003b1a46c40eca111d02446466b669568c70971bd33254ca577777f126f86f8a3665f065b645ff261e78e0f532e83a81b99c5de3488de74ca82daa0e4e7404eff911ae955acbb800f9f91b774e472bc14aa92817b6d85877b1861a6ca92c03c83b6f1490068bad8eab1f58c9e91e1029683de2ca45c99966966031ee86d8c9995f0612480e2a6d5396e8ae361d6fd2e24557613a1191f5019d4c8078628013512ea3a59532efffa6cfe4970d28d8c7aa8c866c4275ff2b0b4ef1a7e56854d7ee4bc445713da9349d13e30a4a802cb9db2f10280fd9ea043b5b3480441e8ed2d907eae1259befba9d87a04ce42b0010c70af157b90e0bf72549852fd122edd6cf3475f76852b13b4bf887cf32e25ad34aed7fd5a6e97b307f9b4ff1c07b2b55beef5ef3dd96eeb2a57720c18209d911a55341cee67e6ff577f7acaba01c2c9690b15a3b8aaa5b9d734196467a8c074b2eeeb5ae931ddf3deb15b1a8d603e72125c2e68ad206f2c4252a659f8248ff882a8e54126ebc0c77a46101072272460e683d465279a3695be6b64c9eeb4a576d95fd520be42eab5c95cbace0dfd80e2d67bab9f683a1cc9c006c02f0f90a21a0f51218c628f5608fbf1abc79aa63452bde1002383033578f32980e3779a8edeb226f6d3f9b36d8f07bddd7479b60346a4b4fa883940e3aef8ad8d834dad4405960a4409a6255e8753d0c0ad0960ff3ef48ce93fbe6b165e86eab36fccb8b989f5b54e6ccaa19749ff065a0a732d15c41b9072bbc6f07e1fd5a3df2775874e46b61ed50714e8c403fbed6884ec06f52ab71d2c191fcc56ac0b17ba3c46d2dab3e11c79383bd8867ff14b5fbca73b9ae594b6a09fb73a2e8f15aee59150e8d6d3dad9659025d045bbd1b9ca257c67bb78abe8f7eb9c8b3bc32951c41f7390bacc8c7059a2a9b078ab50413605aec604e4666a6ace765b0e7ab558fe6232f2703d07811e3d0ac5bf9434e87876e99250ee9db6527a8ccb4a3ee3bde738563c9746f941cf2cd7efacdbd2593cafdbe5171864b2982b54dc5a32c86638c0e650a331625033b8dd65851965ae791880349d5cd52548f4422a317f96ed79e7ccf3bd671e6dc70365f521c65206386eb1f99570a544d11b3d36fea285f8a3770ca303a965a0c1d598ebe3696e647be734ccf760d3d47dec75e236d7ac08019b6622a7b9f08bc8f0937ab75e75a047a7386befbd56fc4b2f89c852dadce8df946cb3fafe4eed2678caadf1a913ae32b2c0b8a37984cb700343c5e24609f8c5ddeff5e653837a9332a41c8e21466a13d79224125d5f6a4fef79b5adae7f4ab7d351c55400545edd3c00637bd27164828925e9bb5d79f1f1e6eb3270ab799ae38772f779565d92c47503de695f7aad7ddacda6f6c71e755b3737231b64715bf07849d3466e4f92239f733436ce674389bd16900", 0x2000, &(0x7f0000008b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x90, 0x0, 0x0, {0x100000000404, 0x0, 0xc, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) readlink(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000080)=""/149, 0x95) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x801) read$FUSE(r3, &(0x7f0000008bc0)={0x2020}, 0x2020) 4m3.573953077s ago: executing program 2 (id=146): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f00000002c0), 0x1, 0x55ae, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==") 3m59.217304349s ago: executing program 2 (id=154): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) epoll_create1(0x0) syz_clone3(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$inet_icmp_raw(0x2, 0x3, 0x1) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x40000) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) read$FUSE(r4, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r6, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_HARD_IFINDEX={0x4}]}, 0x24}}, 0x0) 3m56.965554559s ago: executing program 2 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x9, 0x8000000000000000, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0xd}) socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xfffffffffffffffc, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x171, &(0x7f0000000480)="$eJzs2rFKw0AYB/DParEUn8Cp0Ax1aJMmWgV3QXDyAcTQ3tXQxEgiSDsFX0BxiI/g6qqbj9DZzU1dXB0kkvRq2zsXCxLB/29o/vTLfXcJ4aarB77X5GGdaC262n8uBL5XaVmbbd7kNo3sElElDcMkuW6Q4vCrPkyihnJD9V5ca9147447LjPVHgAAAAAAAAAAAAAAAAAAAAAA/0T1RYTyUezfcMdlzalq2B/0bNdlQTj+RyNxRod47G9zR2PWTL/aO5GWnd9x4p3ztJ8xU9fSTqUk80byfPqpd6KH/UHd8ewu67Jj07RaxrphbJh61kuXO2qXYk1EpfRnQXo+7XZynujRUM8TUXl0WVp14ouzrHtRfv4CBZMX8YMQzTUKIcdAEdEfWIYIT69E35dK4gNlQVic/lYXR/dsHWSlnBb/keT/6n47yPsHdZat6kO6fzTavttR9k8pjEfPM3lBjO3ZK+kUyo4GkJPPAAAA///+VynD") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) userfaultfd(0x802) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_io_uring_setup(0x32ba, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(r2, r2, 0x0, 0x2000fb) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) 3m41.226997061s ago: executing program 32 (id=158): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x180, 0x557, 0x28}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000050000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x9, 0x8000000000000000, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0xd}) socket$inet_mptcp(0x2, 0x1, 0x106) mbind(&(0x7f0000222000/0x1000)=nil, 0x1000, 0x0, 0x0, 0xfffffffffffffffc, 0x1) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x48c00, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x171, &(0x7f0000000480)="$eJzs2rFKw0AYB/DParEUn8Cp0Ax1aJMmWgV3QXDyAcTQ3tXQxEgiSDsFX0BxiI/g6qqbj9DZzU1dXB0kkvRq2zsXCxLB/29o/vTLfXcJ4aarB77X5GGdaC262n8uBL5XaVmbbd7kNo3sElElDcMkuW6Q4vCrPkyihnJD9V5ca9147447LjPVHgAAAAAAAAAAAAAAAAAAAAAA/0T1RYTyUezfcMdlzalq2B/0bNdlQTj+RyNxRod47G9zR2PWTL/aO5GWnd9x4p3ztJ8xU9fSTqUk80byfPqpd6KH/UHd8ewu67Jj07RaxrphbJh61kuXO2qXYk1EpfRnQXo+7XZynujRUM8TUXl0WVp14ouzrHtRfv4CBZMX8YMQzTUKIcdAEdEfWIYIT69E35dK4gNlQVic/lYXR/dsHWSlnBb/keT/6n47yPsHdZat6kO6fzTavttR9k8pjEfPM3lBjO3ZK+kUyo4GkJPPAAAA///+VynD") mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x2236824, 0x0) userfaultfd(0x802) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) syz_io_uring_setup(0x32ba, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendfile(r2, r2, 0x0, 0x2000fb) socket$inet_udplite(0x2, 0x2, 0x88) ioprio_get$uid(0x3, 0x0) 1m58.676207914s ago: executing program 0 (id=340): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x540) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r0, 0xc02064cc, &(0x7f0000021580)={0x0, 0x0, 0x3ff, 0x0, 0x4}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) clock_adjtime(0x0, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc010643a, &(0x7f0000000000)={0x1, 0x2, 0x4}) madvise(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x10) lremovexattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000214c0)=ANY=[@ANYBLOB]) r1 = socket$netlink(0x10, 0x3, 0x4) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000080)={0x4, 0xa0000000, {}, {0xee00}, 0x9, 0x4}) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) 1m56.527826403s ago: executing program 0 (id=346): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x401c2, 0x0) ftruncate(r0, 0x8800000) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) sendfile(r2, r0, 0x0, 0x578410eb) 1m54.326250178s ago: executing program 0 (id=349): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) ftruncate(r0, 0x472e) msgsnd(0x0, &(0x7f0000004280)={0x2}, 0x8, 0x0) 1m54.206013194s ago: executing program 0 (id=350): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000001080)={[{@discard}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@quota}]}, 0x3, 0x43a, &(0x7f0000001100)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) 1m53.502520044s ago: executing program 0 (id=354): r0 = socket$inet(0x2, 0x2, 0x0) close(0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in={{0x2, 0x4e23, @multicast1}}, 0x0, 0x0, 0x2d, 0x0, "f6a7346a1ca3caf66200f0e70b995efa20d5ddc09c0bc0c88e00bdea5e6998967d569964c8b68dae57dea91c0e3ef03a96483bcaaa5ab222d1993083e8e3619fbbff30da0288a8b78a3f921c40fdc06a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='vlan1\x00', 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 1m51.169102097s ago: executing program 0 (id=365): socket(0x1e, 0x1, 0x0) r0 = syz_io_uring_setup(0x188f, &(0x7f00000004c0)={0x0, 0x20aedf, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r0, 0x32d7, 0x0, 0x46, 0x0, 0x0) 1m50.655956493s ago: executing program 33 (id=365): socket(0x1e, 0x1, 0x0) r0 = syz_io_uring_setup(0x188f, &(0x7f00000004c0)={0x0, 0x20aedf, 0x0, 0x0, 0xbfdfffbc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) io_uring_enter(r0, 0x32d7, 0x0, 0x46, 0x0, 0x0) 1m47.679573429s ago: executing program 4 (id=396): syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0x206, &(0x7f0000000240)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040)) 1m47.264895433s ago: executing program 4 (id=400): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000300)={[{@dots}, {@fat=@flush}, {@nodots}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x3}}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@fat=@dmask}, {@fat=@flush}, {@nodots}, {@dots}, {@nodots}, {@fat=@umask={'umask', 0x3d, 0x8}}, {@fat=@flush}, {@fat=@time_offset={'time_offset', 0x3d, 0x3a4}}, {@fat=@errors_continue}, {@dots}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a) 1m46.915636028s ago: executing program 4 (id=403): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) unshare(0x2c020400) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m46.562530064s ago: executing program 4 (id=408): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2, &(0x7f0000000180)={[{@jqfmt_vfsold}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@orlov}, {@noload}, {@delalloc}, {@mblk_io_submit}, {@commit}, {@nodioread_nolock}, {@nogrpid}, {@init_itable_val={'init_itable', 0x3d, 0xfff}}]}, 0xfa, 0x477, &(0x7f0000001380)="$eJzs3M9vFFUcAPDvTH/w21bEHyBIFY3EHy0tP+TgRaMJB01M9IDxVNtCKgs1tCZCiFYPeDQk3o3/hfGkF6NeNPGqd0NCDBdQL2tmZwaWZbfd0m0X2M8nme57M6/73ndm3u6bebsbQM8ayf4kEVsj4o+IGMqztxYYyR+uX70w9c/VC1NJVKtv/53Uyl27emGqLFr+35Y8U60W+Q1N6r34XsRkpTJztsiPLZz+cGz+3PkXZ09Pnpw5OXNm4ujRQwf3DB6ZONyROLO4ru36ZG73zmPvXnpz6vil939O0sjjjoY4OmUk37tNPdPpyrpsW1066a/fsvfXm+lmZwLd1BcR2eEaqPX/oeiLTTe2DcXrn3e1ccCaqlar1SVelRerwH0siW63AOiO8o0+u/4tl3UaetwVrrySXwBlcV8vlnxLf6R5Yu9Aw/Xt1g7WPxIRxxf//TpbYo3uQwAA1Ps+G/+80Gz8l8YjeWIw+/NAMYcyHBEPRsT2iHgoInZExMMRtbKPRsRjK6y/cYbk9vFPevmOg2tDNv57uZjbunX8l5ZFhvuK3LZa/APJidnKzIFin+yPgQ0nZpOZ8SXq+OG1379sta1+/JctWf3lWLBox+X+hht005MLk6uJud6VzyJ29TeLP4lyGieJiJ0RsesO65h9rr/ltuXjX0Lrp21b9ZuIZ/PjvxgN8ZeSlvOT4y8dmTg8tjEqMwfGyrPidr/8dvGtVvWvKv4OyI7/5qbn/434h5ONEfPnzp+qzdfOr+jps64TF//8ouU1TRF/1r3aOf+PbSvO/8HkndqKwWLDx5MLC2fHIwaTN25fP3Hz2cp8WT6Lf/++5v1/e9zcE49HxO6I2BMRT2QXhUXbn4yIpyJi3xI74adXn/5gmfibHP/1mSvN4p9e7vhH/fFfeaLv1I/fLR//xohodfwP1VL7izXtvP6128DV7DsAAAC4V+SfgU/S0RvpNB0dzT/DvyM2p5W5+YXnT8x9dGY6n/cejoG0vNM1VHc/dLy4N1zmJxryB4v7xl/1barlR6fmKtPdDh563JYW/T/zV1+3WwesuQ7MowH3KP0fepf+D70p0f+hp+n/0Lua9f9PW5Ye/XZNGwOsK+//0Lva6P+L+UPrUQFwb/L+D71L/4ee1PK78emqvvK/7on/it8zvFvac/8nIr0rmnH/J/rb/jGLFSSqQ3n/z9ZsaFqm269MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnfF/AAAA//8Qi+Nc") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file1\x00', 0x85) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0/file1'}}]}) 1m45.147968247s ago: executing program 4 (id=415): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000000)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x1, 0x1, &(0x7f0000000380)=""/240, &(0x7f0000000900)=""/103, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000980)=0x1) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f0000000380)={0x0, 0xcdf, 0xf}) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) 1m43.267338081s ago: executing program 4 (id=426): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='T', 0x1}], 0x1) 1m43.006495045s ago: executing program 34 (id=426): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) writev(r0, &(0x7f0000000400)=[{&(0x7f0000000280)='T', 0x1}], 0x1) 1m1.780579846s ago: executing program 7 (id=677): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) 1m0.728149982s ago: executing program 7 (id=680): openat$ttyS3(0xffffff9c, &(0x7f0000000000), 0x44400, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl(0xffffffffffffffff, 0xb8, &(0x7f0000000000)="15e0185428227964d1") r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x40, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:mac\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x400c491}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000180)=ANY=[@ANYBLOB="54000000090605fb0000002000000000010000050900020073797a30000000000500010007000000080009400000000124000880100007800a0011000180c2"], 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000340)={0x1fe, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0x0, 0x4002004c8, 0x1004, 0x45c5, 0xc595, 0x7, 0x2, 0x4, 0x0, 0x80000004000000, 0x200000000c], 0x100000, 0x2010d3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m0.475268495s ago: executing program 7 (id=682): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, 0x0) 1m0.321117625s ago: executing program 7 (id=684): r0 = socket$inet(0x2, 0xa, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="b60a0000000000008111a400000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000040)='X', 0x1) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f0000000080), 0x4) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0xfffe, @local}, {0x1, @link_local}, 0x4a, {0x2, 0x103, @multicast2}, 'macvlan1\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e22, @rand_addr=0x64010101}, 0x10) mount_setattr(r5, &(0x7f0000000080)='./file0/file0\x00', 0x8000, &(0x7f0000001dc0)={0x0, 0xc, 0x20000, {r5}}, 0xfffffffffffffd9f) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYRES32=0x0, @ANYRESHEX=0x0, @ANYRESDEC=0x0], 0x2, 0x36b, &(0x7f0000000d80)="$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") syz_open_dev$MSR(&(0x7f0000000140), 0x81, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(0x0, r6) sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x48040}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {{}, {}, {0x8, 0x2, 0x7}}, ["", "", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x24008800) 59.646758213s ago: executing program 7 (id=685): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="a18e26bd7000fbdbdf2501000000000000ff0041"], 0x34}, 0x1, 0x0, 0x0, 0xd800f664a7913fc1}, 0x20008000) 59.251101184s ago: executing program 7 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100030a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 58.259125392s ago: executing program 35 (id=687): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020100030a0000000000000000000000030006002b20000002004e24ac1414aa0000000000000000030005000000000002000a01000000000000000000000000020013"], 0x50}, 0x1, 0x7}, 0x20000000) 5.63621868s ago: executing program 8 (id=1127): mount_setattr(0xffffffffffffffff, &(0x7f0000000080)='./file0/file0\x00', 0x8000, 0x0, 0x0) 5.536029083s ago: executing program 8 (id=1130): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x9, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101], [0x0, 0x10, 0x0, 0x0, 0x0, 0x40, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7626, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setsig(r1, 0xa, 0x13) fcntl$setlease(r1, 0x400, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r0, 0x8004f50c, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000140)='./file0\x00', 0x0) 4.445182695s ago: executing program 6 (id=1145): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000000)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000080)={@hyper}) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000001540)={@my=0x0, 0xfffffff9}) 4.312301492s ago: executing program 6 (id=1147): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_GET_STATS_FD_cpu(r2, 0xaece) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000640)={0x0, 0x0, @ioapic={0x70000, 0x1, 0x7, 0x8000, 0x0, [{0x0, 0x6, 0x40, '\x00', 0xd}, {0x4, 0x6, 0x7, '\x00', 0x6}, {0x4, 0x6, 0x6, '\x00', 0x80}, {0x7f, 0x5, 0x40, '\x00', 0x5}, {0x80, 0xf, 0x6, '\x00', 0x15}, {0x0, 0x93, 0xd, '\x00', 0x48}, {0x60, 0x0, 0x4, '\x00', 0x7f}, {0xb, 0x7, 0x1, '\x00', 0x6}, {0x80, 0x81, 0x1, '\x00', 0x20}, {0x8, 0xf6, 0xa4, '\x00', 0x3}, {0x2, 0x3, 0x7, '\x00', 0x5}, {0x9, 0x0, 0x3, '\x00', 0x82}, {0x4, 0x0, 0x6, '\x00', 0x80}, {0x9, 0x40, 0x51, '\x00', 0xc0}, {0x74, 0x3b, 0x56, '\x00', 0x8}, {0xc, 0x2, 0x4, '\x00', 0xc}, {0x0, 0x6, 0xff, '\x00', 0x5}, {0x3, 0x7c, 0x93}, {0x80, 0x4, 0x3, '\x00', 0x4}, {0x7, 0x6, 0xc, '\x00', 0xff}, {0x6, 0x5, 0xe, '\x00', 0x4}, {0x8, 0x4, 0x7, '\x00', 0x6}, {0x5, 0x55, 0x5, '\x00', 0x1}, {0xa, 0x6, 0xa, '\x00', 0x8}]}}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x7, 0x7ffc0001}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000300)={0x3, &(0x7f00000002c0)=[{0x0, 0x6, 0x7, 0x9}, {0xfffd, 0x61, 0x9, 0xcc}, {0x9, 0x0, 0x6, 0x8a3}]}) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_opts(r4, 0x0, 0xd, &(0x7f00000000c0)="6487674b9b", 0x5) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r6 = dup(r5) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000003980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000400)=ANY=[@ANYBLOB='time_offset=0x000000000000000c,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=cp932,discard,gid=', @ANYRESHEX=0x0, @ANYBLOB="26c48c1238119da9c79d50c23c54744d276d777c86995e66b069f32c044fdfc6f661764c95a8e00c86f0167bb09c6e7751740aa0dc6355c60d5eb543ddfccfb9c8f047670cf7443fd50e5739c61506da26f7bbf86dd112d8f69e1d59c7a02df98d7d8ea65ebfee45de72ce59525ba46a3b9f8e7099d98b41e1d179f05ad394bbbe055c2d9ffa1fc1ef517f1300f882", @ANYRESHEX=0x0, @ANYBLOB=',sys_tz,errors=continue,errors=continue,keep_last_dots,fmask=00000000000000000000003,\x00'], 0x1, 0x1524, &(0x7f0000002280)="$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") mount$nfs(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x211008, 0x0) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f0000000880)=ANY=[@ANYBLOB="e00000020a0101020100000009000000e0000001e0000001000000007f000001ac514e96644cceca261414aa0000000064010101ac1414bbe00000023c61f60585a62a3973e0fe0cb536af3366e4d120a5f43def7236476719090e1530c4159ba17a9a718f26e8b53db516f09d9545b0680402fa9bbc19694196aad2237d51"], 0x34) r7 = socket$inet6(0xa, 0x3, 0x2f) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) mprotect(&(0x7f0000004000/0x3000)=nil, 0x3000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x1, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_usb_control_io$hid(r8, 0x0, 0x0) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000580)="b7feb3d6cbe385e06f1b407fd97c75597d30f5f690caefabb6dff981c60e1b884585fff39fa369468fee9c82a5032ddac8181228567d16570c278f1e64658b4877cf08133cf9f6b3c802daafcf09105fe11de1008be7ff9b26438d0fd58a603f4e88ab35450879f2f7d8777a42148130e5634510ffdbd1bec6116ae038204a4ba20134df4e8070b83067ac451b84da289f27c49ded", 0x95) syz_usb_control_io$hid(r8, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00222200000096231355258f4b0000000000b00007e996877756000000830000000093cdd2f3610b5d"], 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x9) r9 = mq_open(&(0x7f0000001600)='eth0\x00#~\x02\x00\x00\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfd\x05\x00\x00\x00\x00\x00\x80\x00\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94uu_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18A\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x05\x00\x00\x000\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xce\x00\x00\x00\xe8\vq+\xbb\xc7\xaf\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r9, 0x0, 0x0, 0x6, 0x0) ioctl$KVM_SET_SREGS2(r2, 0x4140aecd, &(0x7f0000000080)={{0xdddd1000, 0xeeee0000, 0xe, 0x80, 0x4, 0x1a, 0x87, 0x0, 0xfc, 0x9, 0x7}, {0xffff1000, 0x6000, 0x9, 0xc5, 0x0, 0xc2, 0x8, 0x5c, 0x2, 0xf, 0x86, 0x5}, {0xeeee8000, 0x60000, 0x9, 0xf8, 0x81, 0x5, 0xee, 0x7, 0x1, 0x8, 0x9, 0x4}, {0x8000000, 0x1, 0xc, 0x1, 0xef, 0xec, 0x44, 0x5, 0x5, 0xf7, 0x5, 0x2}, {0xa000, 0xffff1000, 0xc, 0x9, 0x8, 0x0, 0x8, 0x6, 0xff, 0x1, 0x10, 0x1}, {0xffffcfff, 0xeeef0000, 0x10, 0x3, 0x8, 0x7, 0x7, 0x7, 0x4e, 0x0, 0x81, 0xf}, {0x1, 0x2, 0xc, 0x11, 0x0, 0x7, 0xff, 0x40, 0x5, 0xf8, 0x7, 0x8}, {0x8000000, 0x6000, 0x9, 0x0, 0x6, 0x8, 0x7, 0x6, 0x8, 0x5, 0x6, 0x2}, {0x1, 0x6}, {0x3000, 0x4}, 0x80010044, 0x0, 0x2, 0x201, 0x8, 0x5400, 0xd000, 0x0, [0xdf7, 0x1, 0x8000000000000000, 0x3]}) getsockopt$bt_BT_POWER(r6, 0x112, 0x9, &(0x7f0000000380)=0x1, &(0x7f00000003c0)=0x1) 2.513635495s ago: executing program 3 (id=1178): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x101c0ca, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x6, 0x2c0, &(0x7f0000000900)="$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") lchown(&(0x7f0000000340)='./file2\x00', 0xffffffffffffffff, 0x0) 2.436354445s ago: executing program 8 (id=1180): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000f0000001c0007800c000400002e0000000000000c0003"], 0x30}}, 0x0) 2.303981342s ago: executing program 8 (id=1183): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r3, &(0x7f0000000f40)={{0x6, @rose}, [@default, @bcast, @netrom, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000040)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket(0x8, 0x4, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x24004000}, 0x40040) r7 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000180)={0x1d, r2, 0x1, {0xd1975f19586edd82, 0x1, 0x1}}, 0x18) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r8], 0x5c}}, 0x40) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r10}, @IFLA_MASTER={0x8, 0xa, r10}]}, 0x4c}}, 0x884) 2.267689487s ago: executing program 3 (id=1185): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000000)='./file2\x00', 0x2010410, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fdatasync(r0) 1.732104856s ago: executing program 8 (id=1192): syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x200000, &(0x7f0000000100)=ANY=[@ANYBLOB='quiet,dir_umask=00000000000000000000007,iocharset=koi8-ru,codepage=koi8-ru,quiet,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c66696c655f756d61736b3d30303030303030303030303030303030303030313236342c63726561746f723d8c10b0812c66696c655f756d61736b3d3030303030303030303030303030322c00"], 0x2, 0x36b, &(0x7f0000000d80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8a) unlink(&(0x7f0000005880)='./file2\x00') write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6}, @ib={0x1b, 0x4, 0x9, {"1a1dabe689bd03d62e738d1b5d3c13db"}, 0x7, 0x9, 0xa6}}}, 0x118) 1.731949036s ago: executing program 3 (id=1193): r0 = inotify_init() syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x8a0c40, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x2) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x20045a, &(0x7f0000000200)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x2000, 0x105) close_range(r0, 0xffffffffffffffff, 0x0) 1.528015652s ago: executing program 3 (id=1197): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback}, 0x58) shutdown(r0, 0x2) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040014, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c) sendmmsg$inet(r1, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}, {&(0x7f00000001c0)="06", 0x1}], 0x2}}], 0x1, 0x8000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.527902853s ago: executing program 8 (id=1198): socket$unix(0x1, 0x5, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYRES16=r1], 0x0) 1.216148163s ago: executing program 5 (id=1205): r0 = socket(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@remote, @random="0000dcf6177a", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @multicast, @multicast1, @local, @dev={0xac, 0x14, 0x14, 0xe}}}}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104000000000007000000000000", @ANYRES32=r5, @ANYBLOB="3f00000006020400280012800b0001006272696467650000180002800c002e0003000000030000000500070008"], 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.215971403s ago: executing program 6 (id=1206): r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x1) r3 = eventfd(0x5f0) ioctl$KVM_IOEVENTFD(r2, 0x40a0ae49, &(0x7f0000000080)={0x7ff, 0x8080000, 0x0, r3}) 1.186210317s ago: executing program 6 (id=1208): r0 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r0, &(0x7f00000000c0)=[{&(0x7f0000001bc0)="310d4f7fa9", 0x5}], 0x1) 1.053649734s ago: executing program 6 (id=1210): r0 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x200098f7, 0x100) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc2c45512, &(0x7f0000001240)={{0x4, 0x1, 0x800, 0x9, 'syz1\x00', 0x8}, 0x0, [0x802, 0x476, 0x4, 0x80000000, 0x3, 0xfffffffe, 0x5, 0x0, 0x4, 0x9, 0x2, 0x7, 0x9, 0x400, 0x3, 0x0, 0x2, 0xfff, 0x32ff, 0x7, 0x8, 0x6, 0x0, 0xd2a, 0x3, 0x7fffffff, 0x9, 0x3, 0x4, 0x0, 0x5417, 0x5, 0x5, 0x7, 0x3, 0x9, 0xbb, 0x7f, 0xff, 0xfffffffb, 0x3, 0x6, 0x7f, 0xffffffff, 0xc, 0x29e4, 0x2, 0x2, 0x9, 0x5, 0x7, 0x168, 0x1ff, 0x7fffffff, 0x6, 0x1, 0x7, 0x3, 0x7, 0x8, 0xf0d8, 0x6, 0x2, 0xd, 0x98e671c, 0x2, 0x9, 0x2, 0x7, 0x2, 0x0, 0x3, 0x3, 0x6, 0x7, 0xc, 0x200, 0x2, 0x3, 0x10000, 0x1, 0xffffffff, 0x8, 0xceb4, 0x0, 0x200, 0x0, 0x200, 0x0, 0x9, 0xae0, 0x5, 0x6f97, 0x1ea, 0x43, 0x9, 0x9, 0xf, 0x6, 0x8, 0x8, 0x5, 0x7, 0xd29, 0x8, 0xfffffa1a, 0x6, 0x6, 0x5, 0x4, 0x0, 0x622, 0x3, 0x9, 0x2, 0x5, 0x8001, 0x3, 0x1, 0x2, 0x10, 0xffff7fff, 0x3, 0x53e50338, 0xb, 0x7f, 0x1, 0xfffffffc]}) 1.053530014s ago: executing program 5 (id=1211): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x4, &(0x7f00000004c0)=[{0x800000000}], 0x1b, 0xbff, 0x1e, 0x0, 0x2e, 0x1}) 1.039082836s ago: executing program 6 (id=1212): r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_connect={0x3}) 994.485501ms ago: executing program 5 (id=1213): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) 880.112566ms ago: executing program 5 (id=1214): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) 798.272827ms ago: executing program 1 (id=1218): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200), 0x9201, 0x0) pwrite64(r0, &(0x7f0000000040)="d63cea68", 0x4, 0x7) 711.810798ms ago: executing program 1 (id=1219): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0x40046604, 0x0) 690.178311ms ago: executing program 1 (id=1220): openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 639.136448ms ago: executing program 3 (id=1221): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip_vti0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 572.006367ms ago: executing program 1 (id=1222): sendmsg$RDMA_NLDEV_CMD_STAT_DEL(0xffffffffffffffff, 0x0, 0x0) close(0x3) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f00000000c0), 0x4) socket$rxrpc(0x21, 0x2, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x1102}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) writev(r2, &(0x7f0000000740)=[{&(0x7f0000000000)="89e7ee2c5ddad9b4b473e4c988cafb0c7d1b1403bb91be0e49e20600000000000000074d5303", 0x26}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={0xd0, r1, 0x1, 0x0, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0xa0, 0x33, @mgmt_frame=@probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x7fff}, @device_b, @device_a, @from_mac=@device_b, {0x1}, @value=@ver_80211n={0x0, 0x4, 0x1, 0x0, 0x0, 0x3, 0x1}}, 0x120000000000000, @random, 0x880, @val={0x0, 0x6, @default_ap_ssid}, @void, @void, @val={0x4, 0x6, {0xcb, 0x1, 0x5, 0x5}}, @val={0x6, 0x2, 0x1}, @void, @void, @void, [{0xdd, 0x5e, "d109e44bd2604f1db8f2117a64d69862c268aa29f9cf25b3f8b823913811ccb98c12fd14d404593ce000cfad7c9d198c93b7204810146f49a093a7cf8e87f9cbcebbcb8fe31efc6d63bdd5c8aed61164983971610d0dc4fc6153bf6521ff"}]}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 571.882976ms ago: executing program 3 (id=1223): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f0000000000)=0x9, 0x4) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) close_range(r0, 0xffffffffffffffff, 0x3e00000000000000) 548.507759ms ago: executing program 1 (id=1224): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@broadcast, @random="0a6960aa78c4", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x24, 0x0, {0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x7d, 0x0, [{0x0, 0xc, "e2ffb28c599d1681fb52"}, {0x0, 0x9, "789607671442eb"}, {0x0, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x0, 0x7, "cfa11cab1a"}, {0x6, 0x10, "8475be675de6a70a05a0dc91e5c6"}, {0x1, 0xa, "6580a5e97612fe86"}, {0x0, 0x12, "240011000300000000c501b357000000"}, {0x0, 0xb, "c8f46976e79e56c7a9"}, {0x5, 0x8, "0ddd0d23bd52"}, {0x0, 0x5, "c74257"}]}]}}}}}}}, 0x0) 484.396258ms ago: executing program 1 (id=1225): r0 = socket(0xa, 0x3, 0xff) syz_emit_ethernet(0x3e, &(0x7f0000000780)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x19}, @void, {@ipv6={0x86dd, @generic={0xc, 0x6, '\x00', 0x8, 0x2b, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, @local, {[@hopopts={0xff}]}}}}}, 0x0) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x4020, 0x0) 167µs ago: executing program 5 (id=1226): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001a00010026bd70000000000002002000", @ANYRES32=0x0, @ANYBLOB="00000000080002000c00000014"], 0x38}, 0x1, 0x0, 0x0, 0x20040050}, 0x0) 0s ago: executing program 5 (id=1227): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x60d}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000100), 0xc06620, 0x4) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0x0 [ 323.942747][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 323.949551][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 323.956375][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 323.963124][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 323.969970][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 323.977288][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 323.984945][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 323.991901][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 323.998842][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.008211][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.015322][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.022116][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.029391][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.036502][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.043504][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.050610][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.057519][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.064260][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.071177][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.078317][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.085980][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.093006][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.110448][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.120792][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.145494][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.152363][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.159692][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.166738][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.173996][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.182089][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.189579][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.196574][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.203325][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.210960][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.218308][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.225078][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.232898][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.243518][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.252869][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.280259][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.287972][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.297037][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.303997][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.311025][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.318775][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.325893][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.333122][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.340712][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.347771][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.354508][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.361854][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.368892][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.376035][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.382860][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.391800][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.398809][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.406091][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.412844][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.419834][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.426626][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.433357][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.440332][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.447229][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.454241][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.461192][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.468120][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.475281][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.482048][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.489528][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.497208][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.503955][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.510829][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.517650][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.524409][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.531285][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.538212][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.544981][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.552033][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.558943][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.566011][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.572923][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.580144][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.587343][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.594668][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.602374][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.609425][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.617902][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.624870][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.632685][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.641039][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.648476][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.655844][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.662694][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.669538][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.676772][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.683685][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.690518][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.697919][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.705324][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.712082][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.718938][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.725769][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.732729][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.739552][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.746437][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.753257][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.760166][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.767064][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.773800][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.780721][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.787507][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.794814][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.802269][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.809103][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.815997][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.822755][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.829957][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.836879][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.843628][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.850499][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.857499][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.864241][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.871028][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.877856][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.884612][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.891529][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.899463][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.910420][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.918186][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.924918][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.931845][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.940132][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.947076][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.953824][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.960660][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.967441][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.974193][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.981166][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.988065][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 324.994989][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.002598][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.010278][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.017147][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.023900][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.030874][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.037770][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.044518][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.051766][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.058577][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.065510][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.072338][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.079196][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.086062][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.092799][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.100003][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.108431][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.115522][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.122257][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.129421][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.143978][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.151171][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.158312][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.165067][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.181605][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.195305][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.205435][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.214364][ T6700] loop3: detected capacity change from 0 to 256 [ 325.224545][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.231644][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.238899][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.245880][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.252636][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.259940][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.266831][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.273614][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.280533][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.289930][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.296790][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.303634][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.308627][ T6700] exfat: Deprecated parameter 'namecase' [ 325.311920][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.319322][ T6700] exfat: Unknown parameter 'zero_size_dir' [ 325.331520][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.338511][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.345431][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.352203][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.359031][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.366074][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.372989][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.379817][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.386762][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.393594][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.400419][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.407345][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.415553][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.422460][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.429864][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.436984][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.443928][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.465516][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.472306][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.490762][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.511528][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.525075][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.532253][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.541163][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.559316][ T6703] binder: BINDER_SET_CONTEXT_MGR already set [ 325.567445][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.574483][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.583135][ T6703] binder: 6702:6703 ioctl 4018620d 200000004a80 returned -16 [ 325.591625][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.605527][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.612357][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.628102][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.634927][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.653060][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.660634][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.668778][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.675922][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.682880][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.690224][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.697390][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.704239][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.712287][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.719796][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.727523][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.734463][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.741915][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.749048][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.756218][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.763000][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.774446][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.783738][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.797756][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.804637][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.819679][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.827821][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.834638][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.842073][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.849201][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.859570][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.868974][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.880515][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.889833][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.897412][ T6707] loop3: detected capacity change from 0 to 2048 [ 325.905420][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.915445][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.929412][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.933423][ T6707] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024) [ 325.936565][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.953963][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.962801][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.971298][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.979186][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.986585][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 325.994885][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.005022][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.018385][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.026210][ T4425] udevd[4425]: incorrect nilfs2 checksum on /dev/loop3 [ 326.033404][ T6708] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 326.045083][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.052614][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.067993][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.074985][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.090065][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.099754][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.106712][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.117473][ T26] audit: type=1800 audit(2000000061.018:25): pid=6709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.544" name=FDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="loop3" ino=18 res=0 errno=0 [ 326.147063][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.153925][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.164048][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.171112][ T26] audit: type=1804 audit(2000000061.048:26): pid=6707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.544" name=2F6E6577726F6F742F3133392F6275732FFDB77CBB36154982A93C19825D6FD273AB1EB5BCD47ADAD50DE8A6791486E482E29ECC94284921F33B941CFC10 dev="loop3" ino=18 res=1 errno=0 [ 326.200999][ C1] vkms_vblank_simulate: vblank timer overrun [ 326.207440][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.214504][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.226172][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.233849][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.241563][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.248756][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.255922][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.262818][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.270054][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.277090][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.283969][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.290802][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.298291][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.305131][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.312496][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.319424][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.326206][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.333536][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.341227][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.348082][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.354842][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.361693][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.368655][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.375933][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.382754][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.389716][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.396628][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.403373][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.410270][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.417503][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.424253][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.431223][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.439479][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.446332][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.453224][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.460252][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.467303][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.474176][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.481134][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.487966][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.494873][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.501690][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.508463][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.515305][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.522057][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.529399][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.536897][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.544373][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.551344][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.558311][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.565160][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x4 [ 326.572051][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.578911][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.585697][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.592436][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.599387][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x2 [ 326.606187][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.612957][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.619746][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.626564][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.633443][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.640933][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.648303][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.655449][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.662225][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.669070][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.675897][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.682772][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.689641][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.696594][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.703512][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.710468][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.717252][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.724023][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.730936][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.737727][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.744930][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.752337][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.760756][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.767639][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.774586][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.781500][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.788593][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.795447][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.802196][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.809190][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.816299][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.823181][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.830115][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.836926][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.844081][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.851431][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.859310][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.866356][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.873254][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.880179][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.887151][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.893886][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.900743][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.907734][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.914790][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.921690][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.928757][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.935644][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.942538][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.949839][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.957435][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.964257][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.971092][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.977999][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.984768][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.991778][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 326.998677][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.005486][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.012278][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.019277][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.026295][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.033722][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.041001][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.048559][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.056622][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.063547][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.070386][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.077171][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.083929][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.090962][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.097939][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.105107][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.112226][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.119023][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.125842][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.132714][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.139626][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.146547][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.153732][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.161014][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.167851][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.174606][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.182033][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.188983][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.196234][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.202973][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.209886][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.216710][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.223468][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.230608][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.237694][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.244564][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.251386][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.259068][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.266103][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.272934][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.279772][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.286757][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.293581][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.300427][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.307439][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.314374][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.321205][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.328532][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.336201][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.343036][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.350382][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.358755][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.368928][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.375774][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.383495][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.390674][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.398177][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.404931][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.411802][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.418626][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.425535][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.432677][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.439666][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.447003][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.454083][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.461512][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.469210][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.476320][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.483116][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.490431][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.503325][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.510822][ T6232] kye 0003:0458:5011.0002: unknown main item tag 0x0 [ 327.520441][ T6232] kye 0003:0458:5011.0002: hidraw0: USB HID v0.00 Device [HID 0458:5011] on usb-dummy_hcd.1-1/input0 [ 327.532174][ T6232] kye 0003:0458:5011.0002: tablet-enabling feature report not found [ 327.541351][ T6232] kye 0003:0458:5011.0002: tablet enabling failed [ 327.560503][ T6232] usb 2-1: USB disconnect, device number 4 [ 327.787951][ T6714] loop1: detected capacity change from 0 to 64 [ 327.811770][ T6715] loop5: detected capacity change from 0 to 1024 [ 327.884630][ T6711] fido_id[6711]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 327.907726][ T4236] dvb-usb: TeVii S662 successfully deinitialized and disconnected. [ 328.052105][ T6715] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=continue,quota,delalloc,delalloc,journal_dev=0x0000000000000008,bsddf,,errors=continue. Quota mode: writeback. [ 328.070286][ T6726] loop3: detected capacity change from 0 to 256 [ 328.088529][ T6715] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 328.300478][ T26] audit: type=1800 audit(2000000063.198:27): pid=6715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.534" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 328.817503][ T6754] loop5: detected capacity change from 0 to 512 [ 328.934531][ T6754] EXT4-fs (loop5): mounted filesystem without journal. Opts: user_xattr,nodioread_nolock,nodelalloc,,errors=continue. Quota mode: writeback. [ 328.956007][ T6754] ext4 filesystem being mounted at /44/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 329.723582][ T6787] Zero length message leads to an empty skb [ 330.000542][ T26] audit: type=1326 audit(2000000064.898:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 330.094733][ T26] audit: type=1326 audit(2000000064.928:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 330.117853][ C1] vkms_vblank_simulate: vblank timer overrun [ 330.235332][ T26] audit: type=1326 audit(2000000064.928:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 330.345851][ T26] audit: type=1326 audit(2000000064.928:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 330.470987][ T26] audit: type=1326 audit(2000000064.928:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 330.574681][ T26] audit: type=1326 audit(2000000064.928:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 330.655586][ T26] audit: type=1326 audit(2000000064.928:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6791 comm="syz.1.566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 330.787557][ T6810] loop3: detected capacity change from 0 to 2048 [ 330.805348][ T4313] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 330.823884][ T6739] ODEBUG: Out of memory. ODEBUG disabled [ 330.845883][ T6816] loop1: detected capacity change from 0 to 64 [ 330.923475][ T6810] NILFS (loop3): invalid segment: Inconsistency found [ 330.955299][ T6232] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 330.970326][ T6810] NILFS (loop3): trying rollback from an earlier position [ 330.997392][ T6810] NILFS (loop3): recovery complete [ 331.005734][ T6817] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 331.045282][ T4313] usb 6-1: Using ep0 maxpacket: 32 [ 331.165678][ T4313] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 331.203193][ T4313] usb 6-1: config 0 has no interface number 0 [ 331.485828][ T4313] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 331.496260][ T6232] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 331.564991][ T6232] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.579979][ T4313] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.722491][ T6232] usb 8-1: Product: syz [ 331.733726][ T4313] usb 6-1: Product: syz [ 331.809376][ T6232] usb 8-1: Manufacturer: syz [ 331.818587][ T4313] usb 6-1: Manufacturer: syz [ 331.882513][ T6232] usb 8-1: SerialNumber: syz [ 331.887529][ T4313] usb 6-1: SerialNumber: syz [ 331.946246][ T6232] usb 8-1: config 0 descriptor?? [ 331.952938][ T4313] usb 6-1: config 0 descriptor?? [ 332.074128][ T6232] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 332.106757][ T4313] smsc95xx v2.0.0 [ 332.545523][ T4313] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 332.594518][ T4313] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 332.710205][ T6833] loop1: detected capacity change from 0 to 4096 [ 332.747607][ T6833] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 332.866019][ T6833] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 332.975008][ T1197] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 332.986772][ T1197] ntfs3: loop1: ino=1e, Internal error [ 333.021749][ T1197] ntfs3: loop1: ntfs3_write_inode r=1e failed, -22. [ 333.044378][ T4183] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 333.055376][ T4183] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 333.062750][ T4183] ntfs3: loop1: ntfs_set_state r=3 failed, -22. [ 333.075408][ T6232] gspca_stk1135: reg_w 0x7 err -71 [ 333.086505][ T6232] gspca_stk1135: serial bus timeout: status=0x00 [ 333.106652][ T6232] gspca_stk1135: Sensor write failed [ 333.124787][ T6232] gspca_stk1135: serial bus timeout: status=0x00 [ 333.131875][ T1197] ntfs3: loop1: ntfs3_write_inode r=3 failed, -22. [ 333.148455][ T4183] ntfs3: loop1: ntfs_evict_inode r=3 failed, -22. [ 333.148702][ T6232] gspca_stk1135: Sensor write failed [ 333.197712][ T6232] gspca_stk1135: serial bus timeout: status=0x00 [ 333.228774][ T6232] gspca_stk1135: Sensor read failed [ 333.261741][ T6232] gspca_stk1135: serial bus timeout: status=0x00 [ 333.287726][ T6232] gspca_stk1135: Sensor read failed [ 333.306519][ T6232] gspca_stk1135: Detected sensor type unknown (0x0) [ 333.316769][ T4313] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 333.345759][ T4313] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 333.352731][ T6232] gspca_stk1135: serial bus timeout: status=0x00 [ 333.392334][ T6232] gspca_stk1135: Sensor read failed [ 333.422250][ T4313] usb 6-1: USB disconnect, device number 4 [ 333.428495][ T6232] gspca_stk1135: serial bus timeout: status=0x00 [ 333.434885][ T6232] gspca_stk1135: Sensor read failed [ 333.476990][ T6232] gspca_stk1135: serial bus timeout: status=0x00 [ 333.483402][ T6232] gspca_stk1135: Sensor write failed [ 333.494884][ T6232] gspca_stk1135: serial bus timeout: status=0x00 [ 333.502529][ T6232] gspca_stk1135: Sensor write failed [ 333.514374][ T6232] stk1135: probe of 8-1:0.0 failed with error -71 [ 333.538935][ T6232] usb 8-1: USB disconnect, device number 3 [ 333.669819][ T6856] loop1: detected capacity change from 0 to 64 [ 334.072791][ T6865] overlayfs: failed to clone lowerpath [ 334.242844][ T6874] loop3: detected capacity change from 0 to 2048 [ 334.321501][ T6879] loop7: detected capacity change from 0 to 512 [ 334.362190][ T6879] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 334.374046][ T6874] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 334.415296][ T6874] UDF-fs: Scanning with blocksize 512 failed [ 334.518471][ T6874] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 334.557854][ T6879] EXT4-fs (loop7): 1 truncate cleaned up [ 334.563572][ T6879] EXT4-fs (loop7): mounted filesystem without journal. Opts: noload,resgid=0x0000000000000000,,errors=continue. Quota mode: none. [ 334.719717][ T6874] overlayfs: upper fs needs to support d_type. [ 334.808630][ T6874] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 334.882213][ T6874] overlayfs: failed to set xattr on upper [ 334.891494][ T6874] overlayfs: ...falling back to index=off,metacopy=off. [ 335.989519][ T6899] comedi comedi2: dt2814: I/O port conflict (0xfffffffffffffff9,2) [ 336.266868][ T6908] loop3: detected capacity change from 0 to 512 [ 336.368513][ T6908] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 336.439059][ T6908] EXT4-fs (loop3): 1 orphan inode deleted [ 336.535303][ T6908] EXT4-fs (loop3): 1 truncate cleaned up [ 336.541122][ T6908] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodelalloc,debug_want_extra_isize=0x0000000000000006,stripe=0x0000000000000005,jqfmt=vfsv0,quota,. Quota mode: writeback. [ 336.781255][ T6739] Set syz1 is full, maxelem 65536 reached [ 336.944954][ T6929] loop6: detected capacity change from 0 to 64 [ 337.670929][ T6929] overlayfs: empty lowerdir [ 337.920222][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.618'. [ 337.922287][ T6947] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 337.997814][ T6947] bond1: (slave lo): Enslaving as an active interface with an up link [ 338.047281][ T6957] loop3: detected capacity change from 0 to 128 [ 338.092625][ T6947] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 338.116148][ T6950] netlink: 60 bytes leftover after parsing attributes in process `syz.5.618'. [ 338.150756][ T6952] netlink: 60 bytes leftover after parsing attributes in process `syz.5.618'. [ 338.185487][ T6957] attempt to access beyond end of device [ 338.185487][ T6957] loop3: rw=2051, want=1041, limit=128 [ 338.517172][ T6975] loop3: detected capacity change from 0 to 512 [ 338.631760][ T6975] loop3: detected capacity change from 0 to 512 [ 339.025295][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.631'. [ 339.214721][ T7004] loop6: detected capacity change from 0 to 256 [ 339.548734][ T7014] loop7: detected capacity change from 0 to 128 [ 339.688603][ T26] kauditd_printk_skb: 17 callbacks suppressed [ 339.688620][ T26] audit: type=1800 audit(2000000074.588:52): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.635" name="bus" dev="loop7" ino=1048602 res=0 errno=0 [ 339.903523][ T4359] Trying to write to read-only block-device loop7 [ 339.992818][ T6159] Trying to write to read-only block-device loop7 [ 340.008287][ T4755] Trying to write to read-only block-device loop7 [ 340.014949][ T4755] Trying to write to read-only block-device loop7 [ 340.031408][ T4755] Trying to write to read-only block-device loop7 [ 340.045608][ T6159] Trying to write to read-only block-device loop7 [ 340.279883][ T7043] loop1: detected capacity change from 0 to 1764 [ 340.394518][ T7040] loop6: detected capacity change from 0 to 4096 [ 340.462678][ T7040] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 340.628086][ T7040] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 340.652096][ T7056] loop1: detected capacity change from 0 to 512 [ 340.734903][ T4755] ntfs3: loop6: ntfs3_write_inode r=3 failed, -22. [ 340.760425][ T5957] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 340.771030][ T5957] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 340.798534][ T5957] ntfs3: loop6: ntfs_set_state r=3 failed, -22. [ 340.810076][ T7056] EXT4-fs (loop1): orphan cleanup on readonly fs [ 340.822997][ T4359] ntfs3: loop6: ntfs3_write_inode r=3 failed, -22. [ 340.845727][ T5957] ntfs3: loop6: ntfs_evict_inode r=3 failed, -22. [ 340.885389][ T7056] EXT4-fs error (device loop1): ext4_orphan_get:1427: comm syz.1.648: bad orphan inode 13 [ 340.990554][ T7056] ext4_test_bit(bit=12, block=18) = 1 [ 340.997699][ T7056] is_bad_inode(inode)=0 [ 341.001989][ T7056] NEXT_ORPHAN(inode)=2130706432 [ 341.007134][ T7056] max_ino=32 [ 341.010500][ T7056] i_nlink=1 [ 341.014228][ T7056] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 341.153571][ T7068] input: syz0 as /devices/virtual/input/input11 [ 341.283584][ T4295] udevd[4295]: setting mode of /dev/input/js0 to 020664 failed: No such file or directory [ 341.304104][ T7077] loop1: detected capacity change from 0 to 512 [ 341.349670][ T4295] udevd[4295]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 341.427686][ T7077] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 341.447737][ T7077] EXT4-fs (loop1): invalid journal inode [ 341.468627][ T7077] EXT4-fs (loop1): can't get journal size [ 341.606417][ T7077] EXT4-fs (loop1): 1 truncate cleaned up [ 341.612144][ T7077] EXT4-fs (loop1): mounted filesystem without journal. Opts: norecovery,grpquota,sysvgroups,lazytime,,errors=continue. Quota mode: writeback. [ 341.818326][ T7101] loop7: detected capacity change from 0 to 512 [ 342.256743][ T7108] loop7: detected capacity change from 0 to 256 [ 342.356002][ T7108] exfat: Deprecated parameter 'utf8' [ 342.361510][ T7108] exfat: Deprecated parameter 'namecase' [ 342.384370][ T7108] exfat: Deprecated parameter 'namecase' [ 342.449804][ T7108] exfat: Deprecated parameter 'utf8' [ 342.475654][ T7108] /dev/loop7: Can't open blockdev [ 342.664212][ T7093] loop6: detected capacity change from 0 to 32768 [ 342.726145][ T7093] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 scanned by syz.6.658 (7093) [ 342.765509][ T7129] netlink: 'syz.5.671': attribute type 10 has an invalid length. [ 342.870670][ T7129] team0: Port device dummy0 added [ 342.920925][ T7093] BTRFS info (device loop6): using sha256 (sha256-avx2) checksum algorithm [ 342.955372][ T7093] BTRFS info (device loop6): setting nodatacow, compression disabled [ 342.998807][ T7093] BTRFS info (device loop6): force clearing of disk cache [ 343.032562][ T7093] BTRFS info (device loop6): enabling ssd optimizations [ 343.053551][ T7132] loop7: detected capacity change from 0 to 4096 [ 343.073431][ T7093] BTRFS info (device loop6): using spread ssd allocation scheme [ 343.115396][ T7093] BTRFS info (device loop6): turning off barriers [ 343.121929][ T7093] BTRFS info (device loop6): disabling free space tree [ 343.165560][ T7093] BTRFS info (device loop6): not using ssd optimizations [ 343.173689][ T7143] overlayfs: failed to clone upperpath [ 343.198042][ T7093] BTRFS info (device loop6): not using spread ssd allocation scheme [ 343.246315][ T7093] BTRFS info (device loop6): has skinny extents [ 343.357380][ T7153] trusted_key: encrypted_key: insufficient parameters specified [ 344.252094][ T7093] BTRFS info (device loop6): clearing free space tree [ 344.276367][ T7093] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 344.394224][ T7093] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 344.804690][ T13] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 344.937630][ T7190] loop7: detected capacity change from 0 to 64 [ 345.071595][ T13] usb 2-1: Using ep0 maxpacket: 32 [ 345.245632][ T13] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 345.273097][ T13] usb 2-1: config 0 has no interface number 0 [ 345.283241][ T13] usb 2-1: config 0 interface 89 has no altsetting 0 [ 345.495761][ T13] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 345.504882][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.533013][ T13] usb 2-1: Product: syz [ 345.545349][ T13] usb 2-1: Manufacturer: syz [ 345.560288][ T13] usb 2-1: SerialNumber: syz [ 345.593218][ T13] usb 2-1: config 0 descriptor?? [ 345.658480][ T13] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 345.709101][ T13] em28xx 2-1:0.89: Video interface 89 found: bulk [ 345.731947][ T7211] Device name cannot be null; rc = [-22] [ 345.937532][ T1591] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.345611][ T13] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 346.371213][ T1591] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.700263][ T1591] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.774454][ T1591] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.934631][ T7217] loop6: detected capacity change from 0 to 256 [ 347.085677][ T13] em28xx 2-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 347.128723][ T13] em28xx 2-1:0.89: board has no eeprom [ 347.282948][ T13] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 347.299487][ T13] em28xx 2-1:0.89: analog set to bulk mode. [ 347.354832][ T13] usb 2-1: USB disconnect, device number 5 [ 347.384018][ T13] em28xx 2-1:0.89: Disconnecting em28xx [ 347.413935][ T4225] em28xx 2-1:0.89: Registering V4L2 extension [ 347.537158][ T4225] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 347.552275][ T6975] Set syz1 is full, maxelem 65536 reached [ 347.560445][ T4225] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 347.595290][ T4225] em28xx 2-1:0.89: No AC97 audio processor [ 347.631262][ T4225] usb 2-1: Decoder not found [ 347.657296][ T4225] em28xx 2-1:0.89: failed to create media graph [ 347.663760][ T4225] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 347.701835][ T4225] em28xx 2-1:0.89: Registering snapshot button... [ 347.717000][ T4225] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input13 [ 347.744938][ T4225] em28xx 2-1:0.89: Remote control support is not available for this card. [ 347.754068][ T13] em28xx 2-1:0.89: Closing input extension [ 347.761007][ T13] em28xx 2-1:0.89: Deregistering snapshot button [ 347.918258][ T13] em28xx 2-1:0.89: Freeing device [ 348.222668][ T7221] chnl_net:caif_netlink_parms(): no params data found [ 348.348360][ T7265] input: syz0 as /devices/virtual/input/input14 [ 349.185464][ T4764] Bluetooth: hci3: command 0x0409 tx timeout [ 349.207440][ T7300] loop6: detected capacity change from 0 to 64 [ 349.467571][ T7303] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 349.614943][ T7268] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.615397][ T7268] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.873802][ T7319] loop3: detected capacity change from 0 to 1024 [ 350.074875][ T4755] hfsplus: b-tree write err: -5, ino 4 [ 350.506586][ T7268] rdma_rxe: ignoring netdev event = 10 for bond_slave_0 [ 350.526624][ T7268] infiniband syû: set down [ 350.624601][ T7268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.685604][ T7268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.185611][ T4746] Bluetooth: hci1: command 0x080f tx timeout [ 351.229025][ T7268] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.238345][ T7268] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.247640][ T7268] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.258909][ T7268] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.265761][ T4906] Bluetooth: hci3: command 0x041b tx timeout [ 351.767613][ T7221] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.813720][ T7221] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.866323][ T7221] device bridge_slave_0 entered promiscuous mode [ 351.896009][ T7221] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.910355][ T7221] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.948275][ T7221] device bridge_slave_1 entered promiscuous mode [ 352.025582][ T7367] loop6: detected capacity change from 0 to 16 [ 352.093974][ T1591] device hsr_slave_0 left promiscuous mode [ 352.129461][ T7367] erofs: (device loop6): mounted with root inode @ nid 36. [ 352.175426][ T1591] device hsr_slave_1 left promiscuous mode [ 352.209220][ T1591] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 352.236211][ T1591] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 352.302733][ T1591] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 352.361210][ T1591] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 352.369338][ T1591] device bridge_slave_1 left promiscuous mode [ 352.383224][ T1591] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.444889][ T1591] device bridge_slave_0 left promiscuous mode [ 352.577730][ T1591] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.058347][ T1591] device veth1_macvtap left promiscuous mode [ 353.068070][ T1591] device veth0_macvtap left promiscuous mode [ 353.074303][ T1591] device veth1_vlan left promiscuous mode [ 353.110184][ T1591] device veth0_vlan left promiscuous mode [ 353.224455][ T7397] loop6: detected capacity change from 0 to 764 [ 353.250748][ T7397] rock: directory entry would overflow storage [ 353.289287][ T7397] rock: sig=0x5245, size=8, remaining=5 [ 353.345506][ T4746] Bluetooth: hci3: command 0x040f tx timeout [ 353.437626][ T1591] bond1 (unregistering): (slave lo): Releasing backup interface [ 353.481013][ T1591] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 353.515995][ T1591] bond1 (unregistering): Released all slaves [ 353.583239][ T7410] loop6: detected capacity change from 0 to 2048 [ 353.699528][ T7410] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 353.720136][ T7410] EXT4-fs (loop6): resizing filesystem from 512 to 0 blocks [ 353.757837][ T7410] EXT4-fs warning (device loop6): ext4_resize_fs:2004: can't shrink FS - resize aborted [ 353.787091][ T1591] team0 (unregistering): Port device team_slave_1 removed [ 353.804055][ T1591] team0 (unregistering): Port device team_slave_0 removed [ 353.821110][ T1591] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.837907][ T1591] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.009946][ T1591] bond0 (unregistering): Released all slaves [ 354.052776][ T7221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.158298][ T7221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.259034][ T4746] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 354.294082][ T7221] team0: Port device team_slave_0 added [ 354.331240][ T7221] team0: Port device team_slave_1 added [ 354.423007][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.463395][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.535469][ T4746] usb 7-1: Using ep0 maxpacket: 32 [ 354.555279][ T7221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.580390][ T7221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.616962][ T7221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.643349][ T7221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.666850][ T4746] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 354.681282][ C0] vkms_vblank_simulate: vblank timer overrun [ 354.694191][ T4746] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 354.724112][ T4746] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 354.745798][ T7455] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 354.753252][ T7455] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 354.758492][ T4746] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.822930][ T7455] vhci_hcd vhci_hcd.0: Device attached [ 354.845279][ T4746] usb 7-1: config 0 descriptor?? [ 354.852197][ T7221] device hsr_slave_0 entered promiscuous mode [ 354.870471][ T7221] device hsr_slave_1 entered promiscuous mode [ 354.886661][ T4746] hub 7-1:0.0: USB hub found [ 354.891802][ T7460] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(14) [ 354.898459][ T7460] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 354.908964][ T7221] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.924271][ T7466] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(13) [ 354.927588][ T7221] Cannot create hsr debugfs directory [ 354.931543][ T7466] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 354.985379][ T1110] vhci_hcd: vhci_device speed not set [ 354.992592][ T7466] vhci_hcd vhci_hcd.0: Device attached [ 355.014385][ T7455] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(19) [ 355.021062][ T7455] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 355.055303][ T7460] vhci_hcd vhci_hcd.0: Device attached [ 355.060958][ T1110] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 355.099981][ T4746] hub 7-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 355.165385][ T7455] vhci_hcd vhci_hcd.0: Device attached [ 355.295240][ T7471] vhci_hcd: connection closed [ 355.298325][ T7457] vhci_hcd: connection reset by peer [ 355.300422][ T7468] vhci_hcd: connection closed [ 355.308815][ T7463] vhci_hcd: connection closed [ 355.318594][ T4325] vhci_hcd: stop threads [ 355.365579][ T4325] vhci_hcd: release socket [ 355.384334][ T4325] vhci_hcd: disconnect device [ 355.407576][ T4325] vhci_hcd: stop threads [ 355.415362][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 355.432099][ T7488] loop3: detected capacity change from 0 to 512 [ 355.444298][ T4325] vhci_hcd: release socket [ 355.455304][ T4325] vhci_hcd: disconnect device [ 355.464938][ T4325] vhci_hcd: stop threads [ 355.481831][ T4325] vhci_hcd: release socket [ 355.497227][ T4325] vhci_hcd: disconnect device [ 355.503971][ T4325] vhci_hcd: stop threads [ 355.516430][ T4325] vhci_hcd: release socket [ 355.522443][ T4325] vhci_hcd: disconnect device [ 355.563678][ T4767] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 355.599291][ T7488] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback. [ 355.618946][ T7221] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 355.639680][ T7221] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 355.658880][ T7221] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 355.672975][ T4746] hid-generic 0003:046D:C31C.0003: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.6-1/input0 [ 355.687869][ T7221] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 355.713613][ T7488] ext4 filesystem being mounted at /181/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 355.810125][ T4236] usb 7-1: USB disconnect, device number 2 [ 355.828265][ T4746] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 355.848542][ T4746] Bluetooth: hci2: Injecting HCI hardware error event [ 355.876633][ T26] audit: type=1800 audit(2000000090.778:53): pid=7488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.767" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 355.913935][ T4191] Bluetooth: hci2: hardware error 0x00 [ 355.923632][ T4767] usb 2-1: Using ep0 maxpacket: 16 [ 356.085457][ T4767] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xF3, skipping [ 356.097133][ T7221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.139618][ T7499] fido_id[7499]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 356.158625][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 356.164757][ T7506] loop3: detected capacity change from 0 to 64 [ 356.184425][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 356.228041][ T7221] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.267528][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 356.289085][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 356.298222][ T4767] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 356.335244][ T4767] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.352861][ T1197] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.360153][ T1197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.365686][ T4236] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 356.378955][ T4767] usb 2-1: Product: syz [ 356.383187][ T4767] usb 2-1: Manufacturer: syz [ 356.393723][ T4767] usb 2-1: SerialNumber: syz [ 356.431038][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 356.452419][ T4767] usb 2-1: config 0 descriptor?? [ 356.463904][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 356.480796][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 356.529177][ T1197] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.536371][ T1197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.569726][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 356.605729][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 356.629316][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 356.641854][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 356.642230][ T4236] usb 7-1: Using ep0 maxpacket: 32 [ 356.663109][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 356.677588][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 356.709851][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 356.734719][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 356.760259][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 356.778312][ T7221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 356.802265][ T7221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 356.806295][ T4236] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.821284][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 356.838967][ T1197] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 356.852167][ T4236] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.894013][ T4236] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 356.914239][ T4236] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.963516][ T4236] usb 7-1: config 0 descriptor?? [ 357.016512][ T4236] hub 7-1:0.0: USB hub found [ 357.095552][ T4236] hub 7-1:0.0: config failed, can't read hub descriptor (err -22) [ 357.225806][ T4236] usbhid 7-1:0.0: can't add hid device: -71 [ 357.264954][ T4236] usbhid: probe of 7-1:0.0 failed with error -71 [ 357.700604][ T4236] usb 7-1: USB disconnect, device number 3 [ 358.159339][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 358.175644][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 358.221951][ T7221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.306113][ T4236] usb 2-1: USB disconnect, device number 6 [ 358.405060][ T26] audit: type=1326 audit(2000000093.298:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7541 comm="syz.1.777" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fec587fdcb9 code=0x0 [ 358.583643][ T7556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.779'. [ 358.645365][ T13] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 358.895254][ T13] usb 4-1: Using ep0 maxpacket: 32 [ 358.913923][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 358.927155][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 358.981879][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 359.004377][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 359.018209][ T13] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 359.033354][ T13] usb 4-1: config 0 has no interface number 0 [ 359.041010][ T7221] device veth0_vlan entered promiscuous mode [ 359.054820][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 359.064111][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 359.107153][ T7221] device veth1_vlan entered promiscuous mode [ 359.154378][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 359.170713][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 359.183924][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 359.197871][ T4308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 359.206116][ T13] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=82.d8 [ 359.206152][ T13] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 359.206175][ T13] usb 4-1: Product: syz [ 359.206191][ T13] usb 4-1: Manufacturer: syz [ 359.258729][ T7221] device veth0_macvtap entered promiscuous mode [ 359.292581][ T13] usb 4-1: SerialNumber: syz [ 359.320922][ T7221] device veth1_macvtap entered promiscuous mode [ 359.354364][ T13] usb 4-1: config 0 descriptor?? [ 359.397441][ T13] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 359.422425][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.443814][ T13] usb 4-1: selecting invalid altsetting 1 [ 359.451235][ T13] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 359.458661][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.489792][ T13] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 359.505150][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.519916][ T13] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 359.528517][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.540356][ T13] usb 4-1: media controller created [ 359.547107][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.564693][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.580351][ T13] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 359.597338][ T7221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.675883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 359.696839][ T13] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 359.704486][ T7577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.711464][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 359.734625][ T13] zl10353_read_register: readreg error (reg=127, ret==-71) [ 359.765036][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.777971][ T13] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 359.785447][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.814910][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.828715][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.845304][ T7221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.872149][ T7221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.915525][ T13] usb 4-1: USB disconnect, device number 6 [ 359.939051][ T7221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.971651][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 359.986476][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 360.011137][ T7221] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.036939][ T7221] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.060609][ T7221] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.112876][ T7221] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.218710][ T1110] vhci_hcd: vhci_device speed not set [ 360.389621][ T1197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.411771][ T1197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.445070][ T4755] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 360.508988][ T4755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.527383][ T4755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.565084][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 360.651009][ T7625] loop1: detected capacity change from 0 to 128 [ 360.728129][ T7623] team0: Port device bridge1 added [ 360.748870][ T7625] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 360.766380][ T7626] bridge0: port 3(team0) entered blocking state [ 360.773329][ T7626] bridge0: port 3(team0) entered disabled state [ 360.784695][ T7626] device team0 entered promiscuous mode [ 360.790729][ T7626] device team_slave_0 entered promiscuous mode [ 360.799670][ T7626] device team_slave_1 entered promiscuous mode [ 360.806237][ T7625] ext4 filesystem being mounted at /153/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 360.845688][ T7626] device bridge1 entered promiscuous mode [ 360.857048][ T7626] bridge0: port 3(team0) entered blocking state [ 360.863857][ T7626] bridge0: port 3(team0) entered forwarding state [ 360.930717][ T7625] syz.1.799 (pid 7625) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 361.324495][ T7654] loop1: detected capacity change from 0 to 136 [ 361.335367][ T4442] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 361.906402][ T4767] usb 9-1: new full-speed USB device number 2 using dummy_hcd [ 362.495591][ T4442] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.538374][ T4442] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 362.595682][ T4442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.637287][ T4442] usb 4-1: config 0 descriptor?? [ 362.689490][ T4442] pwc: Askey VC010 type 2 USB webcam detected. [ 362.875536][ T4767] usb 9-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 362.889662][ T26] audit: type=1326 audit(2000000097.788:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc5c5cb9 code=0x7ffc0000 [ 362.912414][ T4767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.935719][ T4767] usb 9-1: Product: syz [ 362.945488][ T4767] usb 9-1: Manufacturer: syz [ 362.960510][ T4767] usb 9-1: SerialNumber: syz [ 362.965645][ T26] audit: type=1326 audit(2000000097.818:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc5c5cb9 code=0x7ffc0000 [ 363.005770][ T4767] usb 9-1: config 0 descriptor?? [ 363.041271][ T26] audit: type=1326 audit(2000000097.818:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc5c5cb9 code=0x7ffc0000 [ 363.080314][ T26] audit: type=1326 audit(2000000097.818:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3ccc5c5cb9 code=0x7ffc0000 [ 363.105913][ T4767] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 363.112480][ T26] audit: type=1326 audit(2000000097.818:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ccc5c5cb9 code=0x7ffc0000 [ 363.125932][ T4442] pwc: recv_control_msg error -32 req 02 val 2b00 [ 363.151587][ T26] audit: type=1326 audit(2000000097.818:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3ccc5c5cb9 code=0x7ffc0000 [ 363.194845][ T26] audit: type=1326 audit(2000000097.818:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7682 comm="syz.5.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3ccc5c5cb9 code=0x7ffc0000 [ 363.205612][ T4442] pwc: recv_control_msg error -32 req 02 val 2700 [ 363.265352][ T4442] pwc: recv_control_msg error -32 req 02 val 2c00 [ 363.307470][ T4442] pwc: recv_control_msg error -32 req 04 val 1000 [ 363.324749][ T7679] loop1: detected capacity change from 0 to 32768 [ 363.365464][ T4442] pwc: recv_control_msg error -32 req 04 val 1300 [ 363.379228][ T7679] loop1: p9 p11 p16 [ 363.625384][ T4442] pwc: recv_control_msg error -71 req 02 val 2000 [ 363.645475][ T4442] pwc: recv_control_msg error -71 req 02 val 2100 [ 363.665343][ T4442] pwc: recv_control_msg error -71 req 04 val 1500 [ 363.759240][ T4418] udevd[4418]: inotify_add_watch(7, /dev/loop1p16, 10) failed: No such file or directory [ 363.778660][ T4419] udevd[4419]: inotify_add_watch(7, /dev/loop1p11, 10) failed: No such file or directory [ 363.808216][ T4295] udevd[4295]: inotify_add_watch(7, /dev/loop1p9, 10) failed: No such file or directory [ 363.839477][ T4313] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 363.881937][ T4442] pwc: recv_control_msg error -71 req 02 val 2500 [ 363.905672][ T4442] pwc: recv_control_msg error -71 req 02 val 2400 [ 363.925369][ T4442] pwc: recv_control_msg error -71 req 02 val 2600 [ 363.955378][ T4442] pwc: recv_control_msg error -71 req 02 val 2900 [ 364.145602][ T4313] usb 2-1: Using ep0 maxpacket: 32 [ 364.288456][ T4313] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.415650][ T4313] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 364.656102][ T4313] usb 2-1: config 0 interface 0 has no altsetting 0 [ 364.695397][ T4442] pwc: recv_control_msg error -71 req 02 val 2800 [ 364.715368][ T4442] pwc: recv_control_msg error -71 req 04 val 1100 [ 364.755419][ T4442] pwc: recv_control_msg error -71 req 04 val 1200 [ 364.792656][ T4442] pwc: Registered as video103. [ 364.837564][ T7717] netlink: 40 bytes leftover after parsing attributes in process `syz.6.822'. [ 364.851050][ T4442] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input15 [ 364.865637][ T4313] usb 2-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00 [ 364.881041][ T4313] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 364.890402][ T4313] usb 2-1: SerialNumber: syz [ 364.900672][ T4313] usb 2-1: config 0 descriptor?? [ 364.925471][ T4442] usb 4-1: USB disconnect, device number 7 [ 364.966926][ T4313] usb-storage 2-1:0.0: USB Mass Storage device detected [ 365.017681][ T4313] usb-storage 2-1:0.0: Quirks match for vid 152d pid 0539: 4000000 [ 365.149225][ T7729] loop6: detected capacity change from 0 to 4096 [ 365.171614][ T4313] usb 2-1: USB disconnect, device number 7 [ 365.184676][ T7729] ntfs3: loop6: Different NTFS' sector size (4096) and media sector size (512) [ 365.257222][ T7729] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 365.756428][ T4767] gspca_stk1135: reg_w 0x300 err -71 [ 365.763862][ T4767] gspca_stk1135: serial bus timeout: status=0x00 [ 365.792389][ T4767] gspca_stk1135: Sensor write failed [ 365.824749][ T4767] gspca_stk1135: serial bus timeout: status=0x00 [ 365.851062][ T4767] gspca_stk1135: Sensor write failed [ 365.863359][ T4767] gspca_stk1135: serial bus timeout: status=0x00 [ 365.889891][ T4767] gspca_stk1135: Sensor read failed [ 365.900489][ T4767] gspca_stk1135: serial bus timeout: status=0x00 [ 365.910063][ T7751] loop3: detected capacity change from 0 to 128 [ 365.927671][ T4767] gspca_stk1135: Sensor read failed [ 365.933066][ T4767] gspca_stk1135: Detected sensor type unknown (0x0) [ 365.955267][ T4767] gspca_stk1135: serial bus timeout: status=0x00 [ 365.972137][ T4767] gspca_stk1135: Sensor read failed [ 365.982312][ T4767] gspca_stk1135: serial bus timeout: status=0x00 [ 366.002544][ T4767] gspca_stk1135: Sensor read failed [ 366.019801][ T4767] gspca_stk1135: serial bus timeout: status=0x00 [ 366.053491][ T4767] gspca_stk1135: Sensor write failed [ 366.073655][ T4767] gspca_stk1135: serial bus timeout: status=0x00 [ 366.094397][ T4767] gspca_stk1135: Sensor write failed [ 366.111750][ T4767] stk1135: probe of 9-1:0.0 failed with error -71 [ 366.131391][ T4767] usb 9-1: USB disconnect, device number 2 [ 366.188103][ T26] audit: type=1326 audit(2000000101.088:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc723740cb9 code=0x7ffc0000 [ 366.271940][ T26] audit: type=1326 audit(2000000101.088:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc723740cb9 code=0x7ffc0000 [ 366.403433][ T26] audit: type=1326 audit(2000000101.088:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7757 comm="syz.3.837" exe="/root/syz-executor" sig=0 arch=c000003e syscall=244 compat=0 ip=0x7fc723740cb9 code=0x7ffc0000 [ 366.474497][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.5.840'. [ 366.825418][ T4767] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 367.146381][ T7793] loop1: detected capacity change from 0 to 4096 [ 367.168263][ T4442] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 367.239115][ T4767] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 367.270028][ T4767] usb 9-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 367.313800][ T4767] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 367.545604][ T4442] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 367.555918][ T4767] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.568757][ T4767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.571177][ T4442] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.585786][ T4767] usb 9-1: Product: syz [ 367.594003][ T4767] usb 9-1: Manufacturer: syz [ 367.605353][ T4767] usb 9-1: SerialNumber: syz [ 367.617415][ T4442] usb 4-1: config 0 descriptor?? [ 367.666645][ T4767] cdc_mbim 9-1:1.0: skipping garbage [ 367.775409][ T4261] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 367.868761][ T7767] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 368.015298][ T4261] usb 2-1: Using ep0 maxpacket: 8 [ 368.106204][ T4442] ath6kl: Unsupported hardware version: 0x0 [ 368.116532][ T4442] ath6kl: Failed to init ath6kl core: -22 [ 368.145730][ T4442] ath6kl_usb: probe of 4-1:0.0 failed with error -22 [ 368.205462][ T4261] usb 2-1: unable to get BOS descriptor or descriptor too short [ 368.308818][ T4261] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.325916][ T4261] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 368.340070][ T4442] usb 4-1: USB disconnect, device number 8 [ 368.514944][ T5957] syz-executor invoked oom-killer: gfp_mask=0x1100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 368.535145][ T4261] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 368.544477][ T4261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.547090][ T7767] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 368.564104][ T4261] usb 2-1: Product: syz [ 368.582002][ T4261] usb 2-1: Manufacturer: syz [ 368.594470][ T4261] usb 2-1: SerialNumber: syz [ 368.610715][ T4261] usb 2-1: config 0 descriptor?? [ 368.842157][ T5957] CPU: 1 PID: 5957 Comm: syz-executor Not tainted syzkaller #0 [ 368.849793][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 368.860002][ T5957] Call Trace: [ 368.863311][ T5957] [ 368.866270][ T5957] dump_stack_lvl+0x188/0x250 [ 368.871101][ T5957] ? show_regs_print_info+0x20/0x20 [ 368.876343][ T5957] ? load_image+0x400/0x400 [ 368.881006][ T5957] ? local_lock_release+0x170/0x170 [ 368.886287][ T5957] ? __rwlock_init+0x140/0x140 [ 368.891089][ T5957] dump_header+0xd4/0x770 [ 368.895463][ T5957] oom_kill_process+0x20e/0x3d0 [ 368.900366][ T5957] out_of_memory+0xdbe/0x1180 [ 368.905187][ T5957] ? mutex_lock_io_nested+0x60/0x60 [ 368.910447][ T5957] ? unregister_oom_notifier+0x20/0x20 [ 368.916064][ T5957] mem_cgroup_out_of_memory+0x2bd/0x3b0 [ 368.921678][ T5957] ? mem_cgroup_oom_trylock+0x210/0x210 [ 368.927308][ T5957] ? do_raw_spin_unlock+0x11d/0x230 [ 368.932661][ T5957] try_charge_memcg+0xfcf/0x14f0 [ 368.937674][ T5957] ? get_mem_cgroup_from_objcg+0x120/0x120 [ 368.943559][ T5957] charge_memcg+0x100/0x2f0 [ 368.948105][ T5957] ? __lock_acquire+0x7d10/0x7d10 [ 368.953211][ T5957] ? __mem_cgroup_charge+0x80/0x80 [ 368.958559][ T5957] mem_cgroup_swapin_charge_page+0x1fe/0x310 [ 368.964598][ T5957] __read_swap_cache_async+0x663/0xa70 [ 368.970123][ T5957] swap_cluster_readahead+0x361/0x7c0 [ 368.975701][ T5957] ? read_swap_cache_async+0x90/0x90 [ 368.981193][ T5957] swapin_readahead+0xf1/0xac0 [ 368.986005][ T5957] ? rcu_lock_release+0x5/0x20 [ 368.990815][ T5957] ? __lock_acquire+0x7d10/0x7d10 [ 368.995891][ T5957] ? exit_swap_address_space+0x280/0x280 [ 369.001603][ T5957] ? put_swap_device+0x15c/0x200 [ 369.006675][ T5957] ? lookup_swap_cache+0x135/0x440 [ 369.011833][ T5957] ? get_swap_device+0x21b/0x360 [ 369.016826][ T5957] do_swap_page+0x4b6/0x1f40 [ 369.021475][ T5957] ? count_memcg_event_mm+0x324/0x370 [ 369.026909][ T5957] handle_mm_fault+0x1b16/0x4410 [ 369.031908][ T5957] ? get_page+0xe0/0xe0 [ 369.036126][ T5957] ? vmacache_find+0x53c/0x590 [ 369.040949][ T5957] ? vmacache_update+0xa0/0x100 [ 369.045855][ T5957] ? find_vma+0x1df/0x230 [ 369.050488][ T5957] do_user_addr_fault+0x489/0xc80 [ 369.055584][ T5957] exc_page_fault+0x60/0x100 [ 369.060230][ T5957] ? clear_bhb_loop+0x30/0x80 [ 369.065039][ T5957] asm_exc_page_fault+0x22/0x30 [ 369.069946][ T5957] RIP: 0033:0x7fecc398558e [ 369.074503][ T5957] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 369.094320][ T5957] RSP: 002b:00007ffea7674928 EFLAGS: 00010246 [ 369.100437][ T5957] RAX: 0000000000000000 RBX: 0000555559da9500 RCX: 00007fecc398558e [ 369.108445][ T5957] RDX: 00007ffea7674980 RSI: 0000000000000000 RDI: 0000000000000000 [ 369.116461][ T5957] RBP: 00007ffea76749ec R08: 0000000000000000 R09: 0000000000000000 [ 369.124767][ T5957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000045 [ 369.132814][ T5957] R13: 0000000000000016 R14: 00000000000596ae R15: 00007ffea7674a40 [ 369.141025][ T5957] [ 369.155501][ T4767] cdc_mbim 9-1:1.0: bind() failure [ 369.159829][ T4261] snd-usb-audio: probe of 2-1:0.0 failed with error -2 [ 369.175221][ T5957] memory: usage 296364kB, limit 307200kB, failcnt 110 [ 369.185337][ T4767] cdc_ncm: probe of 9-1:1.1 failed with error -71 [ 369.212908][ T4261] usb 2-1: USB disconnect, device number 8 [ 369.224320][ T5957] memory+swap: usage 296700kB, limit 9007199254740988kB, failcnt 0 [ 369.232708][ T4767] cdc_mbim: probe of 9-1:1.1 failed with error -71 [ 369.259332][ T5957] kmem: usage 296300kB, limit 9007199254740988kB, failcnt 0 [ 369.263334][ T4303] udevd[4303]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 369.277882][ T5957] Memory cgroup stats for /syz6 [ 369.295417][ T4767] usbtest: probe of 9-1:1.1 failed with error -71 [ 369.308264][ T5957] : [ 369.315787][ T4767] usb 9-1: USB disconnect, device number 3 [ 369.327288][ T5957] anon 0 [ 369.327288][ T5957] file 0 [ 369.327288][ T5957] kernel_stack 65536 [ 369.327288][ T5957] pagetables 208896 [ 369.327288][ T5957] percpu 0 [ 369.327288][ T5957] sock 0 [ 369.327288][ T5957] shmem 0 [ 369.327288][ T5957] file_mapped 0 [ 369.327288][ T5957] file_dirty 0 [ 369.327288][ T5957] file_writeback 0 [ 369.327288][ T5957] swapcached 4067328 [ 369.327288][ T5957] anon_thp 0 [ 369.327288][ T5957] file_thp 0 [ 369.327288][ T5957] shmem_thp 0 [ 369.327288][ T5957] inactive_anon 0 [ 369.327288][ T5957] active_anon 0 [ 369.327288][ T5957] inactive_file 4096 [ 369.327288][ T5957] active_file 0 [ 369.327288][ T5957] unevictable 0 [ 369.327288][ T5957] slab_reclaimable 382712 [ 369.327288][ T5957] slab_unreclaimable 1174136 [ 369.327288][ T5957] slab 1556848 [ 369.327288][ T5957] workingset_refault_anon 0 [ 369.327288][ T5957] workingset_refault_file 0 [ 369.327288][ T5957] workingset_activate_anon 0 [ 369.327288][ T5957] workingset_activate_file 0 [ 369.501169][ T5957] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=syz6,mems_allowed=0-1,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.829,pid=7739,uid=0 [ 369.520749][ T5957] Memory cgroup out of memory: Killed process 7741 (syz.6.829) total-vm:102320kB, anon-rss:1212kB, file-rss:22852kB, shmem-rss:0kB, UID:0 pgtables:132kB oom_score_adj:1000 [ 369.771455][ T7828] loop8: detected capacity change from 0 to 128 [ 369.897108][ T7828] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 369.911385][ T7828] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 369.943352][ T26] kauditd_printk_skb: 2 callbacks suppressed [ 369.943369][ T26] audit: type=1804 audit(2000000104.838:67): pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.863" name="/newroot/4/file1/file0" dev="loop8" ino=12 res=1 errno=0 [ 370.005350][ T4746] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 370.013313][ T4767] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 370.265623][ T4746] usb 4-1: Using ep0 maxpacket: 32 [ 370.385565][ T4767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 370.398553][ T4746] usb 4-1: config 0 has an invalid interface number: 196 but max is 0 [ 370.415304][ T4746] usb 4-1: config 0 has no interface number 0 [ 370.423546][ T4746] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 370.443374][ T4767] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 370.455633][ T4767] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 370.466949][ T4746] usb 4-1: config 0 interface 196 has no altsetting 0 [ 370.474764][ T4767] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.489253][ T4767] usb 2-1: config 0 descriptor?? [ 370.505671][ T4313] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 370.535441][ T4906] Bluetooth: hci5: command 0x0406 tx timeout [ 370.635627][ T4746] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 370.645116][ T4746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.660899][ T4746] usb 4-1: Product: syz [ 370.665150][ T4746] usb 4-1: Manufacturer: syz [ 370.673823][ T4746] usb 4-1: SerialNumber: syz [ 370.702640][ T4746] usb 4-1: config 0 descriptor?? [ 370.735735][ T7826] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 370.865540][ T4313] usb 9-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 370.880980][ T4313] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.908953][ T4313] usb 9-1: config 0 descriptor?? [ 370.957544][ T4313] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 370.968648][ T4767] cp2112 0003:10C4:EA90.0004: unknown main item tag 0x0 [ 370.992392][ T4767] cp2112 0003:10C4:EA90.0004: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 371.185508][ T4767] cp2112 0003:10C4:EA90.0004: Part Number: 0x82 Device Version: 0xFE [ 371.231710][ T4746] ipheth 4-1:0.196: Apple iPhone USB Ethernet device attached [ 371.405006][ T4236] usb 4-1: USB disconnect, device number 9 [ 371.495259][ T4236] ipheth 4-1:0.196: Apple iPhone USB Ethernet now disconnected [ 371.575285][ T4261] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 371.705486][ T4313] gp8psk: usb in 128 operation failed. [ 371.725474][ T4313] gp8psk: usb in 137 operation failed. [ 371.731030][ T4313] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 371.755684][ T4313] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 371.774926][ T4313] usb 9-1: media controller created [ 371.812829][ T4313] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 371.837262][ T4261] usb 7-1: Using ep0 maxpacket: 32 [ 371.861211][ T4767] cp2112 0003:10C4:EA90.0004: error reading lock byte: -71 [ 371.873968][ T4313] gp8psk_fe: Frontend attached [ 371.888789][ T4767] usb 2-1: USB disconnect, device number 9 [ 371.897277][ T4313] usb 9-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 371.914268][ T4313] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 371.975677][ T4261] usb 7-1: config 0 has an invalid interface number: 188 but max is 0 [ 371.983932][ T4261] usb 7-1: config 0 has no interface number 0 [ 372.043703][ T4261] usb 7-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 372.071428][ T7887] netlink: 8 bytes leftover after parsing attributes in process `syz.5.887'. [ 372.102469][ T7886] fido_id[7886]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 372.145450][ T4313] gp8psk: usb in 138 operation failed. [ 372.151512][ T4313] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 372.163205][ T4313] gp8psk: found Genpix USB device pID = 203 (hex) [ 372.209417][ T4313] usb 9-1: USB disconnect, device number 4 [ 372.258590][ T7893] loop8: detected capacity change from 0 to 128 [ 372.291281][ T4261] usb 7-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 372.308097][ T4261] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.331051][ T4261] usb 7-1: Product: syz [ 372.339901][ T4261] usb 7-1: Manufacturer: syz [ 372.346683][ T4313] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 372.370856][ T4261] usb 7-1: SerialNumber: syz [ 372.382656][ T7893] EXT4-fs (loop8): mounted filesystem without journal. Opts: usrquota,nodelalloc,,errors=continue. Quota mode: writeback. [ 372.416063][ T4261] usb 7-1: config 0 descriptor?? [ 372.446230][ T7866] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 372.453853][ T7893] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 372.682623][ T7866] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 373.172915][ T7921] netlink: 'syz.5.900': attribute type 1 has an invalid length. [ 373.258240][ T7921] 8021q: adding VLAN 0 to HW filter on device bond1 [ 373.363958][ T26] audit: type=1326 audit(2000000108.258:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 373.395721][ T26] audit: type=1326 audit(2000000108.298:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 373.423299][ T26] audit: type=1326 audit(2000000108.318:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 373.458579][ T7925] loop3: detected capacity change from 0 to 128 [ 373.460087][ T7923] bond1: (slave gretap1): making interface the new active one [ 373.510483][ T26] audit: type=1326 audit(2000000108.318:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 373.553777][ T7923] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 373.564226][ T1591] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 373.564444][ T26] audit: type=1326 audit(2000000108.318:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 373.600704][ T26] audit: type=1326 audit(2000000108.318:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 373.602199][ T7925] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 373.623247][ T26] audit: type=1326 audit(2000000108.318:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 373.623293][ T26] audit: type=1326 audit(2000000108.318:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 373.623342][ T26] audit: type=1326 audit(2000000108.318:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7926 comm="syz.1.902" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fec587fdcb9 code=0x7ffc0000 [ 373.764645][ T7925] ext4 filesystem being mounted at /206/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 373.815284][ T4261] asix 7-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 373.844719][ T4261] asix: probe of 7-1:0.188 failed with error -71 [ 373.872141][ T4261] usb 7-1: USB disconnect, device number 4 [ 374.170121][ T7951] Invalid option length (1039897) for dns_resolver key [ 374.245772][ T7954] loop1: detected capacity change from 0 to 736 [ 374.334530][ T7959] loop3: detected capacity change from 0 to 128 [ 374.450983][ T7954] rock: directory entry would overflow storage [ 374.498582][ T7954] rock: sig=0x3b10, size=4, remaining=3 [ 374.647746][ T7967] loop8: detected capacity change from 0 to 256 [ 374.822859][ T7967] exFAT-fs (loop8): failed to load upcase table (idx : 0x00002e7f, chksum : 0x03279930, utbl_chksum : 0xe619d30d) [ 374.852029][ T7981] loop6: detected capacity change from 0 to 64 [ 375.214546][ T7993] netlink: 8 bytes leftover after parsing attributes in process `syz.8.921'. [ 375.735294][ T4767] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 376.068298][ T8029] loop8: detected capacity change from 0 to 64 [ 376.078561][ T4261] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 376.111965][ T4767] usb 7-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 376.136012][ T4767] usb 7-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18 [ 376.162145][ T4767] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.227753][ T4767] gspca_main: stv0680-2.14.0 probing 041e:4007 [ 376.498708][ T4261] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 376.509608][ T4261] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 376.525828][ T4261] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.553701][ T4261] usb 4-1: config 0 descriptor?? [ 376.617681][ T4261] pwc: Askey VC010 type 2 USB webcam detected. [ 376.725254][ T1110] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 377.008516][ T1110] usb 9-1: Using ep0 maxpacket: 32 [ 377.045669][ T4261] pwc: recv_control_msg error -32 req 02 val 2b00 [ 377.108659][ T4261] pwc: recv_control_msg error -32 req 02 val 2700 [ 377.155963][ T1110] usb 9-1: config 0 has an invalid interface number: 85 but max is 0 [ 377.178512][ T1110] usb 9-1: config 0 has no interface number 0 [ 377.184712][ T1110] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 377.262806][ T1110] usb 9-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 377.281782][ T1110] usb 9-1: config 0 interface 85 has no altsetting 0 [ 377.365843][ T4261] pwc: recv_control_msg error -71 req 04 val 1000 [ 377.396752][ T4261] pwc: recv_control_msg error -71 req 04 val 1300 [ 377.417703][ T4261] pwc: recv_control_msg error -71 req 04 val 1400 [ 377.445308][ T4261] pwc: recv_control_msg error -71 req 02 val 2000 [ 377.472795][ T4261] pwc: recv_control_msg error -71 req 02 val 2100 [ 377.489858][ T1110] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 377.506000][ T1110] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.535055][ T1110] usb 9-1: Product: syz [ 377.540135][ T4261] pwc: recv_control_msg error -71 req 04 val 1500 [ 377.558024][ T1110] usb 9-1: Manufacturer: syz [ 377.562888][ T1110] usb 9-1: SerialNumber: syz [ 377.567761][ T4261] pwc: recv_control_msg error -71 req 02 val 2500 [ 377.585376][ T4261] pwc: recv_control_msg error -71 req 02 val 2400 [ 377.599654][ T1110] usb 9-1: config 0 descriptor?? [ 377.616982][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 377.625948][ T4261] pwc: recv_control_msg error -71 req 02 val 2600 [ 377.636492][ T4767] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -71 [ 377.667796][ T4261] pwc: recv_control_msg error -71 req 02 val 2900 [ 377.675392][ T4767] stv0680 7-1:4.0: last error: 2, command = 0x31 [ 377.689318][ T4261] pwc: recv_control_msg error -71 req 02 val 2800 [ 377.713748][ T4767] usb 7-1: USB disconnect, device number 5 [ 377.745491][ T4261] pwc: recv_control_msg error -71 req 04 val 1100 [ 377.795386][ T4261] pwc: recv_control_msg error -71 req 04 val 1200 [ 377.806131][ T8080] netlink: 8 bytes leftover after parsing attributes in process `syz.1.942'. [ 377.825093][ T4261] pwc: Registered as video103. [ 377.845307][ T4261] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18 [ 377.930365][ T4261] usb 4-1: USB disconnect, device number 10 [ 378.015537][ T1110] appletouch 9-1:0.85: Failed to read mode from device. [ 378.022699][ T1110] appletouch: probe of 9-1:0.85 failed with error -5 [ 378.131653][ T1110] usb 9-1: USB disconnect, device number 5 [ 378.280045][ T8099] loop6: detected capacity change from 0 to 2048 [ 378.344236][ T8099] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 378.369728][ T8099] UDF-fs: Scanning with blocksize 512 failed [ 378.418098][ T8099] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 378.699662][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.706118][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.718181][ T8098] UDF-fs: warning (device loop6): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134286193 lbcount: 134288384 extent 65+35840 [ 378.794955][ T4325] attempt to access beyond end of device [ 378.794955][ T4325] loop6: rw=1, want=2050, limit=2048 [ 378.834638][ T4325] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 378.865995][ T4325] attempt to access beyond end of device [ 378.865995][ T4325] loop6: rw=1, want=2050, limit=2048 [ 378.904249][ T4325] Buffer I/O error on dev loop6, logical block 1024, lost async page write [ 378.937303][ T8122] loop8: detected capacity change from 0 to 128 [ 378.948261][ T4325] attempt to access beyond end of device [ 378.948261][ T4325] loop6: rw=1, want=2052, limit=2048 [ 378.995602][ T4325] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 379.020915][ T4325] attempt to access beyond end of device [ 379.020915][ T4325] loop6: rw=1, want=2052, limit=2048 [ 379.032162][ T4325] Buffer I/O error on dev loop6, logical block 1025, lost async page write [ 379.047595][ T4325] attempt to access beyond end of device [ 379.047595][ T4325] loop6: rw=1, want=2054, limit=2048 [ 379.062354][ T4325] Buffer I/O error on dev loop6, logical block 1026, lost async page write [ 379.078404][ T4325] attempt to access beyond end of device [ 379.078404][ T4325] loop6: rw=1, want=2054, limit=2048 [ 379.090764][ T8122] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 379.128608][ T8122] ext4 filesystem being mounted at /18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 379.147114][ T4325] Buffer I/O error on dev loop6, logical block 1026, lost async page write [ 379.170001][ T4325] attempt to access beyond end of device [ 379.170001][ T4325] loop6: rw=1, want=2056, limit=2048 [ 379.183105][ T4325] Buffer I/O error on dev loop6, logical block 1027, lost async page write [ 379.192020][ T4325] attempt to access beyond end of device [ 379.192020][ T4325] loop6: rw=1, want=2056, limit=2048 [ 379.203284][ T4325] Buffer I/O error on dev loop6, logical block 1027, lost async page write [ 379.212676][ T4325] attempt to access beyond end of device [ 379.212676][ T4325] loop6: rw=1, want=2058, limit=2048 [ 379.223702][ T4325] Buffer I/O error on dev loop6, logical block 1028, lost async page write [ 379.232636][ T4325] attempt to access beyond end of device [ 379.232636][ T4325] loop6: rw=1, want=2058, limit=2048 [ 379.255341][ T4325] Buffer I/O error on dev loop6, logical block 1028, lost async page write [ 379.275342][ T4906] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 379.437471][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.953'. [ 379.463572][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.953'. [ 379.491496][ T8135] netlink: 8 bytes leftover after parsing attributes in process `syz.6.953'. [ 379.512063][ T8135] netlink: 12 bytes leftover after parsing attributes in process `syz.6.953'. [ 379.528020][ T4906] usb 4-1: Using ep0 maxpacket: 16 [ 379.555707][ T8122] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)" [ 379.645634][ T4906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 379.665876][ T4906] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 379.685847][ T4906] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 379.705305][ T4906] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.729791][ T4906] usb 4-1: config 0 descriptor?? [ 380.133158][ T8171] netlink: 20 bytes leftover after parsing attributes in process `syz.6.967'. [ 380.217430][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.225053][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.255257][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.262834][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.271036][ T8177] loop6: detected capacity change from 0 to 512 [ 380.277565][ T4767] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 380.285530][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.292987][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.309755][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.318242][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.326576][ T8177] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 380.336492][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.343963][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.356589][ T4906] hid-picolcd 0003:04D8:F002.0005: unknown main item tag 0x0 [ 380.367011][ T8177] EXT4-fs (loop6): invalid journal inode [ 380.372961][ T8177] EXT4-fs (loop6): can't get journal size [ 380.395349][ T8177] EXT4-fs (loop6): 1 truncate cleaned up [ 380.404001][ T8177] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,grpquota,sysvgroups,lazytime,,errors=continue. Quota mode: writeback. [ 380.426505][ T4906] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf3 found [ 380.444715][ T4906] hid-picolcd 0003:04D8:F002.0005: No report with id 0xf4 found [ 380.483050][ T4906] usb 4-1: USB disconnect, device number 11 [ 380.655504][ T4767] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.705079][ T4767] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.735702][ T4767] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 380.769882][ T4767] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 380.804166][ T4767] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.830651][ T4767] usb 9-1: config 0 descriptor?? [ 381.005517][ T1110] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 381.317924][ T4767] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 381.349358][ T4767] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.8-1/input0 [ 381.455598][ T1110] usb 7-1: config 0 has an invalid interface number: 43 but max is 0 [ 381.463850][ T1110] usb 7-1: config 0 has no interface number 0 [ 381.517058][ T1110] usb 7-1: too many endpoints for config 0 interface 43 altsetting 26: 53, using maximum allowed: 30 [ 381.582877][ T1110] usb 7-1: config 0 interface 43 altsetting 26 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 381.590090][ T4767] usb 9-1: USB disconnect, device number 6 [ 381.640887][ T1110] usb 7-1: config 0 interface 43 has no altsetting 0 [ 381.725361][ T8236] fido_id[8236]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 381.875553][ T1110] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 381.894382][ T1110] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.921278][ T8235] loop1: detected capacity change from 0 to 8192 [ 381.924143][ T1110] usb 7-1: Product: syz [ 381.942344][ T1110] usb 7-1: Manufacturer: syz [ 381.952468][ T1110] usb 7-1: SerialNumber: syz [ 381.979335][ T8235] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 381.998592][ T1110] usb 7-1: config 0 descriptor?? [ 382.108204][ T8259] loop3: detected capacity change from 0 to 256 [ 382.134007][ T8235] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 382.177250][ T8235] ntfs3: loop1: Failed to load $Extend. [ 382.278969][ T1110] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 382.292880][ T8259] FAT-fs (loop3): Directory bread(block 64) failed [ 382.326772][ T8259] FAT-fs (loop3): Directory bread(block 65) failed [ 382.345006][ T8259] FAT-fs (loop3): Directory bread(block 66) failed [ 382.373856][ T8259] FAT-fs (loop3): Directory bread(block 67) failed [ 382.381427][ T8259] FAT-fs (loop3): Directory bread(block 68) failed [ 382.388508][ T8259] FAT-fs (loop3): Directory bread(block 69) failed [ 382.396423][ T8259] FAT-fs (loop3): Directory bread(block 70) failed [ 382.403257][ T8259] FAT-fs (loop3): Directory bread(block 71) failed [ 382.413512][ T8259] FAT-fs (loop3): Directory bread(block 72) failed [ 382.420801][ T8259] FAT-fs (loop3): Directory bread(block 73) failed [ 382.807625][ T8287] loop8: detected capacity change from 0 to 1024 [ 382.875764][ T8287] EXT4-fs (loop8): Ignoring removed orlov option [ 382.955634][ T8287] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,user_xattr,,errors=continue. Quota mode: none. [ 383.168884][ T1110] gspca_stk1135: reg_w 0x5 err -71 [ 383.178701][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 383.195742][ T1110] gspca_stk1135: Sensor write failed [ 383.212771][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 383.221019][ T1110] gspca_stk1135: Sensor write failed [ 383.231980][ T8305] loop3: detected capacity change from 0 to 2048 [ 383.233888][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 383.258813][ T1110] gspca_stk1135: Sensor read failed [ 383.261905][ T8305] NILFS (loop3): invalid segment: Inconsistency found [ 383.267287][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 383.285024][ T1110] gspca_stk1135: Sensor read failed [ 383.290639][ T1110] gspca_stk1135: Detected sensor type unknown (0x0) [ 383.297122][ T8305] NILFS (loop3): trying rollback from an earlier position [ 383.309113][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 383.316236][ T1110] gspca_stk1135: Sensor read failed [ 383.321631][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 383.325933][ T8305] NILFS (loop3): recovery complete [ 383.328805][ T1110] gspca_stk1135: Sensor read failed [ 383.338799][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 383.347534][ T8306] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 383.359738][ T1110] gspca_stk1135: Sensor write failed [ 383.365416][ T1110] gspca_stk1135: serial bus timeout: status=0x00 [ 383.372370][ T1110] gspca_stk1135: Sensor write failed [ 383.387642][ T1110] stk1135: probe of 7-1:0.43 failed with error -71 [ 383.403648][ T1110] usb 7-1: USB disconnect, device number 6 [ 384.705583][ T8322] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 385.423335][ T8326] loop3: detected capacity change from 0 to 1024 [ 385.692154][ T8333] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 386.672337][ T8332] loop8: detected capacity change from 0 to 22 [ 386.741757][ T8326] EXT4-fs (loop3): Ignoring removed bh option [ 388.589319][ T8332] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 388.615382][ T8332] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 388.641113][ T8326] EXT4-fs warning (device loop3): ext4_multi_mount_protect:403: Unable to create kmmpd thread for loop3. [ 389.461732][ T8344] netlink: 'syz.3.1022': attribute type 3 has an invalid length. [ 389.574666][ T8347] netlink: 'syz.3.1022': attribute type 10 has an invalid length. [ 390.077717][ T8347] bridge0: port 3(team0) entered disabled state [ 390.180018][ T8347] device team0 left promiscuous mode [ 390.215563][ T8347] device team_slave_0 left promiscuous mode [ 390.231032][ T8347] device team_slave_1 left promiscuous mode [ 390.267941][ T8347] device bridge1 left promiscuous mode [ 390.276447][ T8353] loop6: detected capacity change from 0 to 764 [ 390.290714][ T8347] bridge0: port 3(team0) entered disabled state [ 391.254462][ T8367] loop8: detected capacity change from 0 to 16 [ 391.657498][ T8347] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.936167][ T8347] bond0: (slave team0): Enslaving as an active interface with an up link [ 392.368025][ T8351] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 392.394873][ T8347] syz.3.1022 (8347) used greatest stack depth: 19888 bytes left [ 392.411480][ T8367] erofs: (device loop8): mounted with root inode @ nid 36. [ 392.423527][ T8353] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.461685][ T8353] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.531460][ T8353] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.631910][ T8353] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.645413][ T8353] device geneve2 entered promiscuous mode [ 393.448184][ T8399] loop6: detected capacity change from 0 to 256 [ 393.524784][ T8399] FAT-fs (loop6): Directory bread(block 64) failed [ 393.536698][ T1110] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 393.555075][ T8399] FAT-fs (loop6): Directory bread(block 65) failed [ 393.572358][ T8399] FAT-fs (loop6): Directory bread(block 66) failed [ 393.587775][ T8403] loop8: detected capacity change from 0 to 512 [ 393.594373][ T8399] FAT-fs (loop6): Directory bread(block 67) failed [ 393.602619][ T8399] FAT-fs (loop6): Directory bread(block 68) failed [ 393.609970][ T8399] FAT-fs (loop6): Directory bread(block 69) failed [ 393.617593][ T8399] FAT-fs (loop6): Directory bread(block 70) failed [ 393.624316][ T8399] FAT-fs (loop6): Directory bread(block 71) failed [ 393.632058][ T8399] FAT-fs (loop6): Directory bread(block 72) failed [ 393.639764][ T8399] FAT-fs (loop6): Directory bread(block 73) failed [ 393.661138][ T8403] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 393.739841][ T8403] EXT4-fs (loop8): 1 truncate cleaned up [ 393.756739][ T8403] EXT4-fs (loop8): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,data_err=abort,noload,data_err=ignore,auto_da_alloc,,errors=continue. Quota mode: none. [ 393.816151][ T1110] usb 4-1: Using ep0 maxpacket: 16 [ 393.955471][ T1110] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 393.981695][ T1110] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 394.005264][ T1110] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 394.109881][ T8420] Bluetooth: hci0: invalid length 0, exp 2 for type 21 [ 394.138414][ T1110] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 394.154492][ T1110] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 394.164316][ T1110] usb 4-1: Manufacturer: syz [ 394.192678][ T1110] usb 4-1: config 0 descriptor?? [ 394.481786][ T1110] usb 4-1: USB disconnect, device number 12 [ 394.525488][ T4225] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 394.765408][ T4225] usb 7-1: Using ep0 maxpacket: 32 [ 394.765437][ T4746] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 394.851553][ T8440] tipc: Enabling of bearer rejected, failed to enable media [ 395.027427][ T4746] usb 9-1: Using ep0 maxpacket: 32 [ 395.050422][ T4225] usb 7-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 395.060226][ T4225] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.078599][ T4225] usb 7-1: Product: syz [ 395.104681][ T4225] usb 7-1: Manufacturer: syz [ 395.109620][ T4225] usb 7-1: SerialNumber: syz [ 395.130149][ T4225] usb 7-1: config 0 descriptor?? [ 395.165629][ T4746] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 395.179046][ T4746] usb 9-1: config 0 has no interface number 0 [ 395.203753][ T4746] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 395.403601][ T4225] RobotFuzz Open Source InterFace, OSIF 7-1:0.0: version d4.15 found at bus 007 address 007 [ 395.415439][ T4746] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 395.427108][ T4746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.435632][ T4746] usb 9-1: Product: syz [ 395.440016][ T4746] usb 9-1: Manufacturer: syz [ 395.453959][ T4746] usb 9-1: SerialNumber: syz [ 395.470002][ T4746] usb 9-1: config 0 descriptor?? [ 395.505865][ T8438] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 395.734555][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.741894][ T8469] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.746904][ T8438] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 396.095729][ T8426] i2c i2c-1: failure reading status [ 396.113219][ T23] usb 7-1: USB disconnect, device number 7 [ 396.205656][ T4746] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 396.219243][ T4746] asix: probe of 9-1:0.188 failed with error -71 [ 396.244521][ T4746] usb 9-1: USB disconnect, device number 7 [ 396.436945][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 396.493424][ T8469] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 396.822634][ T8490] program syz.8.1074 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 396.907545][ T8492] loop8: detected capacity change from 0 to 164 [ 396.973889][ T8469] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 396.992209][ T8469] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.041458][ T8469] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.064617][ T8469] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.074863][ T8492] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 397.371094][ T8475] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 397.759563][ T8528] tipc: Started in network mode [ 397.764619][ T8528] tipc: Node identity ac14140f, cluster identity 4711 [ 397.774040][ T8528] tipc: New replicast peer: 172.20.20.187 [ 397.784428][ T8528] tipc: Enabled bearer , priority 10 [ 398.544755][ T8562] loop3: detected capacity change from 0 to 4096 [ 398.665365][ T8562] ntfs3: loop3: Mark volume as dirty due to NTFS errors [ 398.708639][ T8562] ntfs3: loop3: Failed to load $Extend. [ 398.789673][ T4225] tipc: Node number set to 2886997007 [ 399.055118][ T8603] capability: warning: `syz.3.1118' uses deprecated v2 capabilities in a way that may be insecure [ 399.775369][ T4225] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 400.015406][ T4225] usb 9-1: Using ep0 maxpacket: 16 [ 400.136246][ T4225] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 400.149441][ T4225] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 400.160910][ T4225] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.189494][ T4225] usb 9-1: config 0 descriptor?? [ 400.238696][ T4225] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input19 [ 400.448787][ T8629] input: syz0 as /devices/virtual/input/input20 [ 400.476838][ T8661] sch_tbf: peakrate 7 is lower than or equals to rate 6829859379779001157 ! [ 401.045281][ T4767] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 401.171789][ T8686] overlayfs: failed to clone upperpath [ 401.275276][ T4767] usb 7-1: device descriptor read/64, error -71 [ 401.565394][ T4767] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 401.765415][ T4767] usb 7-1: device descriptor read/64, error -71 [ 401.906817][ T4767] usb usb7-port1: attempt power cycle [ 402.089045][ T8724] loop3: detected capacity change from 0 to 256 [ 402.154617][ T8724] FAT-fs (loop3): Directory bread(block 64) failed [ 402.164417][ T8724] FAT-fs (loop3): Directory bread(block 65) failed [ 402.172178][ T8724] FAT-fs (loop3): Directory bread(block 66) failed [ 402.180589][ T8724] FAT-fs (loop3): Directory bread(block 67) failed [ 402.187809][ T8724] FAT-fs (loop3): Directory bread(block 68) failed [ 402.200808][ T8724] FAT-fs (loop3): Directory bread(block 69) failed [ 402.220744][ T8724] FAT-fs (loop3): Directory bread(block 70) failed [ 402.237021][ T8724] FAT-fs (loop3): Directory bread(block 71) failed [ 402.252945][ T8724] FAT-fs (loop3): Directory bread(block 72) failed [ 402.266965][ T8724] FAT-fs (loop3): Directory bread(block 73) failed [ 402.356073][ T4767] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 402.481016][ T4767] usb 7-1: device descriptor read/8, error -71 [ 402.539526][ T6232] usb 9-1: USB disconnect, device number 8 [ 402.546037][ T3544] bcm5974 9-1:0.0: could not read from device [ 402.558242][ T8737] loop3: detected capacity change from 0 to 256 [ 402.570099][ T4425] bcm5974 9-1:0.0: could not read from device [ 402.646845][ T8743] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1181'. [ 402.765348][ T4767] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 402.804736][ T8747] netlink: 'syz.8.1183': attribute type 1 has an invalid length. [ 402.872731][ T4767] usb 7-1: device descriptor read/8, error -71 [ 402.908272][ T8755] loop3: detected capacity change from 0 to 128 [ 402.932214][ T8753] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 402.956903][ T8753] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 402.994592][ T8747] bond1: (slave gretap1): making interface the new active one [ 403.005818][ T4767] usb usb7-port1: unable to enumerate USB device [ 403.013111][ T8747] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 403.034056][ T8747] device macvlan2 entered promiscuous mode [ 403.042605][ T8747] device bond1 entered promiscuous mode [ 403.062209][ T8747] device gretap1 entered promiscuous mode [ 403.071148][ T8747] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 403.109590][ T8747] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 403.142057][ T8747] device bond1 left promiscuous mode [ 403.149706][ T8747] device gretap1 left promiscuous mode [ 403.215287][ T8747] syz.8.1183 (8747) used greatest stack depth: 19576 bytes left [ 403.269779][ T8767] loop8: detected capacity change from 0 to 64 [ 403.331214][ T8769] overlayfs: unrecognized mount option "verity=on" or missing value [ 403.532075][ T8780] overlayfs: failed to clone upperpath [ 403.804984][ T8800] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1205'. [ 403.830730][ T8800] netlink: 'syz.5.1205': attribute type 10 has an invalid length. [ 403.866851][ T8800] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 403.885391][ T4767] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 404.150652][ T4767] usb 9-1: Using ep0 maxpacket: 16 [ 404.275501][ T4767] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.292906][ T4767] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 404.342701][ T8830] 9pnet: Insufficient options for proto=fd [ 404.501606][ T26] audit: type=1326 audit(2000000139.398:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8837 comm="syz.3.1223" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc723740cb9 code=0x0 [ 404.545723][ T4767] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 404.558316][ T4767] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.567480][ T4767] usb 9-1: Product: syz [ 404.572290][ T4767] usb 9-1: Manufacturer: syz [ 404.578187][ T4767] usb 9-1: SerialNumber: syz [ 404.905604][ T4767] usb 9-1: 0:2 : does not exist [ 404.955952][ T4767] usb 9-1: USB disconnect, device number 9 [ 405.131052][ T8847] ------------[ cut here ]------------ [ 405.144913][ T8847] WARNING: CPU: 1 PID: 8847 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0 [ 405.154869][ T8847] Modules linked in: [ 405.166061][ T8847] CPU: 1 PID: 8847 Comm: syz.5.1227 Not tainted syzkaller #0 [ 405.173592][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.185194][ T8847] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 405.190729][ T8847] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 f5 b3 bf ff 0f 0b e9 62 fe ff ff e8 e9 b3 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 8a 89 8d 80 e1 07 80 c1 03 38 c1 [ 405.214607][ T4424] udevd[4424]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 405.239630][ T8847] RSP: 0018:ffffc9000160f8e0 EFLAGS: 00010287 [ 405.263842][ T8847] RAX: ffffffff81b95c67 RBX: 0000200000400000 RCX: 0000000000080000 [ 405.287243][ T8847] RDX: ffffc90013315000 RSI: 0000000000000473 RDI: 0000000000000474 [ 405.299470][ T8847] RBP: 0000000000000000 R08: ffff888078a64dbf R09: 1ffff1100f14c9b7 [ 405.311619][ T8847] R10: dffffc0000000000 R11: ffffed100f14c9b8 R12: ffff88801efd33b8 [ 405.324881][ T8847] R13: dffffc0000000000 R14: ffff88801efd3318 R15: ffff8880238c7d40 [ 405.376389][ T8847] FS: 00007f3cca7df6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000 [ 405.405245][ T8847] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 405.411994][ T8847] CR2: 00007ffd817b7cf0 CR3: 0000000047191000 CR4: 00000000003506e0 [ 405.427083][ T8847] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 405.445409][ T8847] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 405.453569][ T8847] Call Trace: [ 405.466314][ T8847] [ 405.469530][ T8847] __vma_adjust+0x2b6/0x1c10 [ 405.474166][ T8847] ? rcu_lock_acquire+0x30/0x30 [ 405.505070][ T8847] ? memset+0x1e/0x40 [ 405.509944][ T8847] __split_vma+0x34b/0x410 [ 405.514418][ T8847] userfaultfd_ioctl+0x32b4/0x43c0 [ 405.520014][ T8847] ? userfaultfd_poll+0x1c0/0x1c0 [ 405.525517][ T8847] ? kfree+0xef/0x2a0 [ 405.529566][ T8847] ? tomoyo_path_number_perm+0x5b4/0x660 [ 405.536907][ T8847] ? verify_lock_unused+0x140/0x140 [ 405.542201][ T8847] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 405.548397][ T8847] ? bpf_lsm_file_ioctl+0x5/0x10 [ 405.553474][ T8847] ? security_file_ioctl+0x7c/0xa0 [ 405.559086][ T8847] ? userfaultfd_poll+0x1c0/0x1c0 [ 405.564171][ T8847] __se_sys_ioctl+0xfa/0x170 [ 405.569197][ T8847] do_syscall_64+0x4c/0xa0 [ 405.573838][ T8847] ? clear_bhb_loop+0x30/0x80 [ 405.578937][ T8847] ? clear_bhb_loop+0x30/0x80 [ 405.583665][ T8847] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.590192][ T8847] RIP: 0033:0x7f3ccc5c5cb9 [ 405.594951][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.617477][ T8847] RSP: 002b:00007f3cca7df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.628674][ T8847] RAX: ffffffffffffffda RBX: 00007f3ccc841180 RCX: 00007f3ccc5c5cb9 [ 405.639410][ T8847] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 0000000000000005 [ 405.650930][ T8847] RBP: 00007f3ccc633bf7 R08: 0000000000000000 R09: 0000000000000000 [ 405.659519][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.667675][ T8847] R13: 00007f3ccc841218 R14: 00007f3ccc841180 R15: 00007ffdfbc88838 [ 405.675864][ T8847] [ 405.678939][ T8847] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 405.686353][ T8847] CPU: 1 PID: 8847 Comm: syz.5.1227 Not tainted syzkaller #0 [ 405.693766][ T8847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 405.704076][ T8847] Call Trace: [ 405.707399][ T8847] [ 405.710367][ T8847] dump_stack_lvl+0x188/0x250 [ 405.715093][ T8847] ? show_regs_print_info+0x20/0x20 [ 405.720429][ T8847] ? load_image+0x400/0x400 [ 405.724984][ T8847] panic+0x2e5/0x810 [ 405.728929][ T8847] ? bpf_jit_dump+0xd0/0xd0 [ 405.733533][ T8847] ? hugetlb_split+0x237/0x2a0 [ 405.738324][ T8847] __warn+0x248/0x2b0 [ 405.742376][ T8847] ? hugetlb_split+0x237/0x2a0 [ 405.747196][ T8847] report_bug+0x1b7/0x2e0 [ 405.751577][ T8847] handle_bug+0x3a/0x70 [ 405.755780][ T8847] exc_invalid_op+0x16/0x40 [ 405.760420][ T8847] asm_exc_invalid_op+0x16/0x20 [ 405.765574][ T8847] RIP: 0010:hugetlb_split+0x237/0x2a0 [ 405.770984][ T8847] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 f5 b3 bf ff 0f 0b e9 62 fe ff ff e8 e9 b3 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 84 8a 89 8d 80 e1 07 80 c1 03 38 c1 [ 405.790837][ T8847] RSP: 0018:ffffc9000160f8e0 EFLAGS: 00010287 [ 405.796966][ T8847] RAX: ffffffff81b95c67 RBX: 0000200000400000 RCX: 0000000000080000 [ 405.805035][ T8847] RDX: ffffc90013315000 RSI: 0000000000000473 RDI: 0000000000000474 [ 405.813058][ T8847] RBP: 0000000000000000 R08: ffff888078a64dbf R09: 1ffff1100f14c9b7 [ 405.821257][ T8847] R10: dffffc0000000000 R11: ffffed100f14c9b8 R12: ffff88801efd33b8 [ 405.829270][ T8847] R13: dffffc0000000000 R14: ffff88801efd3318 R15: ffff8880238c7d40 [ 405.837487][ T8847] ? hugetlb_split+0x237/0x2a0 [ 405.842394][ T8847] __vma_adjust+0x2b6/0x1c10 [ 405.847027][ T8847] ? rcu_lock_acquire+0x30/0x30 [ 405.851951][ T8847] ? memset+0x1e/0x40 [ 405.855986][ T8847] __split_vma+0x34b/0x410 [ 405.860461][ T8847] userfaultfd_ioctl+0x32b4/0x43c0 [ 405.865658][ T8847] ? userfaultfd_poll+0x1c0/0x1c0 [ 405.870738][ T8847] ? kfree+0xef/0x2a0 [ 405.874872][ T8847] ? tomoyo_path_number_perm+0x5b4/0x660 [ 405.880555][ T8847] ? verify_lock_unused+0x140/0x140 [ 405.885812][ T8847] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 405.891407][ T8847] ? bpf_lsm_file_ioctl+0x5/0x10 [ 405.896520][ T8847] ? security_file_ioctl+0x7c/0xa0 [ 405.901682][ T8847] ? userfaultfd_poll+0x1c0/0x1c0 [ 405.906858][ T8847] __se_sys_ioctl+0xfa/0x170 [ 405.911635][ T8847] do_syscall_64+0x4c/0xa0 [ 405.916097][ T8847] ? clear_bhb_loop+0x30/0x80 [ 405.920830][ T8847] ? clear_bhb_loop+0x30/0x80 [ 405.925549][ T8847] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 405.931496][ T8847] RIP: 0033:0x7f3ccc5c5cb9 [ 405.935944][ T8847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 405.955686][ T8847] RSP: 002b:00007f3cca7df028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 405.964349][ T8847] RAX: ffffffffffffffda RBX: 00007f3ccc841180 RCX: 00007f3ccc5c5cb9 [ 405.972385][ T8847] RDX: 0000200000000040 RSI: 00000000c020aa00 RDI: 0000000000000005 [ 405.980933][ T8847] RBP: 00007f3ccc633bf7 R08: 0000000000000000 R09: 0000000000000000 [ 405.989047][ T8847] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 405.997186][ T8847] R13: 00007f3ccc841218 R14: 00007f3ccc841180 R15: 00007ffdfbc88838 [ 406.005410][ T8847] [ 406.008749][ T8847] Kernel Offset: disabled [ 406.013554][ T8847] Rebooting in 86400 seconds..