last executing test programs: 19m47.567828158s ago: executing program 1 (id=378): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000001280)=@gettaction={0x14, 0x32, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xe}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19m46.590171267s ago: executing program 1 (id=380): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0xffffffffffffff6c, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9, 0x100000000000000}) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000014c0)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="a605bd7013bc808a4e69d208cabb1b5a3079b03170c679698d85cce117d62511c2377f8595f0a9180d1cb7de05bc9eb4a5b363fa7eb32d00ce58aea44e261f001a1962ed0d9f12287cc8df908b0129d5ba09f551b97873638e57cac70d014b2f615a5a5ce2eeae204629c201", 0x6c}, {&(0x7f00000004c0)="2ac111690434a58aeb2efe65defe6a51c4a0fefb3e7de9f542c422a696e630ebc0a21031ac439c833db59d17a4b646884de6e6fbc62e6e6f3e2713c0ac1fbf08ce711203f5c56f626e5e7474ca7660d606db39561d027bb1b9756606c08b9954f2957726baffad099964afdcf42a584baa853e774fba673eb706de68b45f185a1b25627fbb8e96", 0x87}, {&(0x7f0000000580)="ba8e5aa922934502e37e6edcb80f5ef8f4923549ed3e0b67405d91ecdd38a461350542638663c7955f5936ca6cf27dcc30aa1aa9a8972f186c0a8bde48abd8f3e88d6862e527f14ef927", 0x4a}, {&(0x7f0000000180)="22b7a442aaa5b52b65c61cd174ec811c3046aa0eacd9a9185855cc088dd1", 0x1e}, {&(0x7f0000000600)="8b9896357f05869b85180d4a2b2ec9f7cae1ae9371e9c507151b47f2f1aad061c13c537dddbff3659e05ca9eeeebc617073db422bcc1cba08bb27d6e6ca86b16cea2b8529f5e09bcd93939647c44e622aacc043d7baf8c8bc57d7bf1841b481c09274e2fff19c106f7cff9933cf7eebd96378cee04e519b4c033ce03277a7ca5817fb64839505cf022dde342fcc7947d79aa7a632deb3c99977481e001658423d22eeba1d32c8ec9e239df53b41b2fa390ff823113780e451b02ff99b92eb09fd74a2e417f21c6d909673b326ce759b577fbc07fbd40dba38911733955f10005454667a1c5a5f4ac8b268ad650b7739b59", 0xf1}, {&(0x7f0000000300)="0e", 0x1}, {&(0x7f0000000800)="acd984107f5bae68daada3a92463894436e8cf454aa8e547870eb9c624c9d7b412331c7874683a12cdfcafe285bddcee1514e2dffc", 0x35}], 0x7, 0x0, 0x0, 0x24005}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="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", 0xfc}, {&(0x7f0000000b00)="02d67f0ceb533d1179a4c5e8001a1689e1a9eaf769fac833de7b4ee6689a9a272b435c6b4730c0b6beea2f81032e41a60fba116e856117ecdefa33c4698c6b9e45e8f77f60e6e7d4d1816cde61dce14b07e2687e88a986f7284bf3de54a3be714634caa1508b388eec800a7a613150c85ffd", 0x72}, {&(0x7f0000000b80)="4d10f5c182ed79d0833bce61e7fb15a170cafec69648f3d4bcf5b3100be39b5a3398dc5a3ee85414865c9f5bd9351d8a00b4695aaa841d2b41b800c1985f4e44", 0x40}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50, 0x20060045}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000d40)="fb8b3d7a6ecb3235e1f3df788793e019730d7ded5f83a638ed66c7a91eac7b938ef7934db195cbb795b229e9339a8d1c3949dbbd00367f9d0e6d0acd4fb7d47d33639e4284300d4600531f9b87158b6941eda418517fb1003aa0f26a3880623080a417b5850a9a5eb7949886afedba1b4f7b570295ca10ab67b0e9d383ee9356be79df94856bda5b469e3b3c6251d4b7e4197098021dbcc686e80f7dce09e2504691", 0xa2}, {&(0x7f0000000e40)="9fa9878caacfde9220d630bae144633ebff00d785653d1fe86cc337e8bca08b2438e531f4efacbd940f29ad2485c78dc05917b510e4b97e5b4add986e402ffa50a2220faef9022d113f09792e4305daa22ffde1010a3954fc9a3115f37ee7aac55252f43edc39da506e853ad79c875b73edd5af731c17e41112416cd53b6323942183865e80881dae4ba8b64e30559f1c7a78b38db81385fd473f16aeb4a90940e80212e10f9e1375fa5b2346a292882ea756211a7458fceb586b4fae0db0f722ceabb0c7b8ddb12", 0xc8}, {&(0x7f0000000f40)="048c9e05a1d0d8de1b45569c595c0641556f14c5d7972f1f3ef4430876a13ed9e99cf1c967489e877b22ec2f9918ac58099830344e5a1e04ef7de0c0e858f1d066b189a58c27c49a3bf185aac8245228c7de6c0c4c5ea35afd63120be01d", 0x5e}, {&(0x7f0000000fc0)="59be3dc31e0d87a3e52624a0611e9ba663c530673731e7aac17361db1f255b1aac30b90283c53cd3260d0ba9", 0x2c}, {&(0x7f0000001000)="90d50988eca00e9c7398bd832fc150f31c7609d0a6a209a1ba045cd65f9c082c13911a679ad379a333", 0x29}, {&(0x7f0000001040)="f9afdc574bae4696abc1d5f952d9f6866e396861c4524acc030f73231ec6d21586106a3fa8009e7479c7a80d3e675ad59e3896244f43d833f5d2a14ae0450ae3d152e693fafb33faaaf94276244d6932f463dc2e5f3e2d906fd9503b0f9cea6e52df66a0a00c04ad4b8685ea3a8d709a0a0b6b4f84504dda9cea3731de399cccc31f8387b44f366b70b1abf2bcd4965059eb76ad97ec9a98235a30a6ea8183ac70504c6094b28ac1dce7c8ae99c5f83be51e0d4d612ea0e85bfdb4ec98421a421ba097e3cbdfb7853c1126dffac25e085c955bebcc5097f958ab0b52e7a205a02b7f89e60bd4384847dcae86f2c669bc0afcf4cf7fe77ebb1335f529f0b5cf", 0xff}, {0x0}, {&(0x7f00000011c0)="2e6d3cc331a75f2dcf4416afef411164981e571765881691d54942c6d0d18ceb9c98bbcba8b3fa346fa7faafbda0b9ae79d0c5114d48d923c86b814ad37e678f5fa8985b6cb76e49afa8add6497a3a36f13b68fb394ceb411ddd097692a1d0a87862590c0706a2dcce6fdd24f8f7e953f70830fa852f0f8471b35ac8f9a07bfb1306df5a15155cda8346614e66c19d55f524201d4546446d4dcec47da850c578e085a7eb37abe905d149d9e2", 0xac}], 0x8, &(0x7f0000001380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x2c, 0x1, 0x1, [r4, r5, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x110, 0x10}}], 0x3, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x28, 0x8001, 0x29, 0x9, 0x2000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0x7, 0x0, 0x201, 0x0, 'syz0\x00'}) 19m45.154605353s ago: executing program 1 (id=382): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x18) write(r0, &(0x7f0000000040)="3f000000010040", 0x7) 19m44.765915904s ago: executing program 1 (id=385): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x0) 19m44.535732193s ago: executing program 1 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000001280)=@gettaction={0x14, 0x32, 0x1, 0x70bd2b, 0x25dfdbfe}, 0x14}}, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdc01, {0x0, 0x0, 0x0, 0x0, {0x0, 0xe}, {0x2, 0xb}, {0x7, 0xb}}, [@qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x0, 0xe}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 19m44.184785171s ago: executing program 1 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000080)=0x9, 0x4) 19m43.82843296s ago: executing program 32 (id=391): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$ax25(0x3, 0x3, 0xcd) setsockopt$ax25_int(r3, 0x101, 0x4, &(0x7f0000000080)=0x9, 0x4) 19m25.212314914s ago: executing program 0 (id=433): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 19m24.230439493s ago: executing program 0 (id=435): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0xffffffffffffff6c, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9, 0x100000000000000}) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000014c0)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="a605bd7013bc808a4e69d208cabb1b5a3079b03170c679698d85cce117d62511c2377f8595f0a9180d1cb7de05bc9eb4a5b363fa7eb32d00ce58aea44e261f001a1962ed0d9f12287cc8df908b0129d5ba09f551b97873638e57cac70d014b2f615a5a5ce2eeae204629c201", 0x6c}, {&(0x7f00000004c0)="2ac111690434a58aeb2efe65defe6a51c4a0fefb3e7de9f542c422a696e630ebc0a21031ac439c833db59d17a4b646884de6e6fbc62e6e6f3e2713c0ac1fbf08ce711203f5c56f626e5e7474ca7660d606db39561d027bb1b9756606c08b9954f2957726baffad099964afdcf42a584baa853e774fba673eb706de68b45f185a1b25627fbb8e96", 0x87}, {&(0x7f0000000580)="ba8e5aa922934502e37e6edcb80f5ef8f4923549ed3e0b67405d91ecdd38a461350542638663c7955f5936ca6cf27dcc30aa1aa9a8972f186c0a8bde48abd8f3e88d6862e527f14ef927", 0x4a}, {&(0x7f0000000180)="22b7a442aaa5b52b65c61cd174ec811c3046aa0eacd9a9185855cc088dd1", 0x1e}, {&(0x7f0000000600)="8b9896357f05869b85180d4a2b2ec9f7cae1ae9371e9c507151b47f2f1aad061c13c537dddbff3659e05ca9eeeebc617073db422bcc1cba08bb27d6e6ca86b16cea2b8529f5e09bcd93939647c44e622aacc043d7baf8c8bc57d7bf1841b481c09274e2fff19c106f7cff9933cf7eebd96378cee04e519b4c033ce03277a7ca5817fb64839505cf022dde342fcc7947d79aa7a632deb3c99977481e001658423d22eeba1d32c8ec9e239df53b41b2fa390ff823113780e451b02ff99b92eb09fd74a2e417f21c6d909673b326ce759b577fbc07fbd40dba38911733955f10005454667a1c5a5f4ac8b268ad650b7739b59", 0xf1}, {&(0x7f0000000300)="0e", 0x1}, {&(0x7f0000000800)="acd984107f5bae68daada3a92463894436e8cf454aa8e547870eb9c624c9d7b412331c7874683a12cdfcafe285bddcee1514e2dffc", 0x35}], 0x7, 0x0, 0x0, 0x24005}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="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", 0xfc}, {&(0x7f0000000b00)="02d67f0ceb533d1179a4c5e8001a1689e1a9eaf769fac833de7b4ee6689a9a272b435c6b4730c0b6beea2f81032e41a60fba116e856117ecdefa33c4698c6b9e45e8f77f60e6e7d4d1816cde61dce14b07e2687e88a986f7284bf3de54a3be714634caa1508b388eec800a7a613150c85ffd", 0x72}, {&(0x7f0000000b80)="4d10f5c182ed79d0833bce61e7fb15a170cafec69648f3d4bcf5b3100be39b5a3398dc5a3ee85414865c9f5bd9351d8a00b4695aaa841d2b41b800c1985f4e44", 0x40}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50, 0x20060045}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000d40)="fb8b3d7a6ecb3235e1f3df788793e019730d7ded5f83a638ed66c7a91eac7b938ef7934db195cbb795b229e9339a8d1c3949dbbd00367f9d0e6d0acd4fb7d47d33639e4284300d4600531f9b87158b6941eda418517fb1003aa0f26a3880623080a417b5850a9a5eb7949886afedba1b4f7b570295ca10ab67b0e9d383ee9356be79df94856bda5b469e3b3c6251d4b7e4197098021dbcc686e80f7dce09e2504691", 0xa2}, {&(0x7f0000000e40)="9fa9878caacfde9220d630bae144633ebff00d785653d1fe86cc337e8bca08b2438e531f4efacbd940f29ad2485c78dc05917b510e4b97e5b4add986e402ffa50a2220faef9022d113f09792e4305daa22ffde1010a3954fc9a3115f37ee7aac55252f43edc39da506e853ad79c875b73edd5af731c17e41112416cd53b6323942183865e80881dae4ba8b64e30559f1c7a78b38db81385fd473f16aeb4a90940e80212e10f9e1375fa5b2346a292882ea756211a7458fceb586b4fae0db0f722ceabb0c7b8ddb12", 0xc8}, {&(0x7f0000000f40)="048c9e05a1d0d8de1b45569c595c0641556f14c5d7972f1f3ef4430876a13ed9e99cf1c967489e877b22ec2f9918ac58099830344e5a1e04ef7de0c0e858f1d066b189a58c27c49a3bf185aac8245228c7de6c0c4c5ea35afd63120be01d", 0x5e}, {&(0x7f0000000fc0)="59be3dc31e0d87a3e52624a0611e9ba663c530673731e7aac17361db1f255b1aac30b90283c53cd3260d0ba9", 0x2c}, {&(0x7f0000001000)="90d50988eca00e9c7398bd832fc150f31c7609d0a6a209a1ba045cd65f9c082c13911a679ad379a333", 0x29}, {&(0x7f0000001040)="f9afdc574bae4696abc1d5f952d9f6866e396861c4524acc030f73231ec6d21586106a3fa8009e7479c7a80d3e675ad59e3896244f43d833f5d2a14ae0450ae3d152e693fafb33faaaf94276244d6932f463dc2e5f3e2d906fd9503b0f9cea6e52df66a0a00c04ad4b8685ea3a8d709a0a0b6b4f84504dda9cea3731de399cccc31f8387b44f366b70b1abf2bcd4965059eb76ad97ec9a98235a30a6ea8183ac70504c6094b28ac1dce7c8ae99c5f83be51e0d4d612ea0e85bfdb4ec98421a421ba097e3cbdfb7853c1126dffac25e085c955bebcc5097f958ab0b52e7a205a02b7f89e60bd4384847dcae86f2c669bc0afcf4cf7fe77ebb1335f529f0b5cf", 0xff}, {0x0}, {&(0x7f00000011c0)="2e6d3cc331a75f2dcf4416afef411164981e571765881691d54942c6d0d18ceb9c98bbcba8b3fa346fa7faafbda0b9ae79d0c5114d48d923c86b814ad37e678f5fa8985b6cb76e49afa8add6497a3a36f13b68fb394ceb411ddd097692a1d0a87862590c0706a2dcce6fdd24f8f7e953f70830fa852f0f8471b35ac8f9a07bfb1306df5a15155cda8346614e66c19d55f524201d4546446d4dcec47da850c578e085a7eb37abe905d149d9e2", 0xac}], 0x8, &(0x7f0000001380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x2c, 0x1, 0x1, [r4, r5, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x110, 0x10}}], 0x3, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x28, 0x8001, 0x29, 0x9, 0x2000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40186f40, &(0x7f0000000080)={0x7, 0x0, 0x201, 0x0, 'syz0\x00'}) 19m23.135822562s ago: executing program 0 (id=438): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) syz_usb_disconnect(r0) 19m23.014670061s ago: executing program 3 (id=439): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x1c, 0x800) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x7, 0x8, 0x8}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYRES64=r5], 0x10) r6 = syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) ioctl$TCSETSW2(r8, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "234408020e90d1beaa82dc1ecf00"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, r11, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x28}}, 0x4000054) fanotify_mark(0xffffffffffffffff, 0x1, 0x1b, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) 19m21.039835801s ago: executing program 0 (id=441): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19m19.982615016s ago: executing program 0 (id=443): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 19m19.81728282s ago: executing program 3 (id=444): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) syz_open_dev$I2C(0x0, 0x10001, 0x240000) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0xfffffffffffffffe, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000200)="000039302ce8", 0xfffffffffffffffd, 0x80000800, 0x16, 0x0, 0x0}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000d40)={0x0, 0x0, r4, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x1, [0x0], [0x0, 0x7], [0x0, 0x80000002, 0x2], [0x0, 0x0, 0x1, 0x1]}) bind$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x4e23, 0x1, @empty, 0x3}, 0x1c) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={r6, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r7}) 19m18.883651975s ago: executing program 0 (id=446): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0xffffffffffffff6c, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9, 0x100000000000000}) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000014c0)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="a605bd7013bc808a4e69d208cabb1b5a3079b03170c679698d85cce117d62511c2377f8595f0a9180d1cb7de05bc9eb4a5b363fa7eb32d00ce58aea44e261f001a1962ed0d9f12287cc8df908b0129d5ba09f551b97873638e57cac70d014b2f615a5a5ce2eeae204629c201", 0x6c}, {&(0x7f00000004c0)="2ac111690434a58aeb2efe65defe6a51c4a0fefb3e7de9f542c422a696e630ebc0a21031ac439c833db59d17a4b646884de6e6fbc62e6e6f3e2713c0ac1fbf08ce711203f5c56f626e5e7474ca7660d606db39561d027bb1b9756606c08b9954f2957726baffad099964afdcf42a584baa853e774fba673eb706de68b45f185a1b25627fbb8e96", 0x87}, {&(0x7f0000000580)="ba8e5aa922934502e37e6edcb80f5ef8f4923549ed3e0b67405d91ecdd38a461350542638663c7955f5936ca6cf27dcc30aa1aa9a8972f186c0a8bde48abd8f3e88d6862e527f14ef927", 0x4a}, {&(0x7f0000000180)="22b7a442aaa5b52b65c61cd174ec811c3046aa0eacd9a9185855cc088dd1", 0x1e}, {&(0x7f0000000600)="8b9896357f05869b85180d4a2b2ec9f7cae1ae9371e9c507151b47f2f1aad061c13c537dddbff3659e05ca9eeeebc617073db422bcc1cba08bb27d6e6ca86b16cea2b8529f5e09bcd93939647c44e622aacc043d7baf8c8bc57d7bf1841b481c09274e2fff19c106f7cff9933cf7eebd96378cee04e519b4c033ce03277a7ca5817fb64839505cf022dde342fcc7947d79aa7a632deb3c99977481e001658423d22eeba1d32c8ec9e239df53b41b2fa390ff823113780e451b02ff99b92eb09fd74a2e417f21c6d909673b326ce759b577fbc07fbd40dba38911733955f10005454667a1c5a5f4ac8b268ad650b7739b59", 0xf1}, {&(0x7f0000000300)="0e", 0x1}, {&(0x7f0000000800)="acd984107f5bae68daada3a92463894436e8cf454aa8e547870eb9c624c9d7b412331c7874683a12cdfcafe285bddcee1514e2dffc", 0x35}], 0x7, 0x0, 0x0, 0x24005}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="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", 0xfc}, {&(0x7f0000000b00)="02d67f0ceb533d1179a4c5e8001a1689e1a9eaf769fac833de7b4ee6689a9a272b435c6b4730c0b6beea2f81032e41a60fba116e856117ecdefa33c4698c6b9e45e8f77f60e6e7d4d1816cde61dce14b07e2687e88a986f7284bf3de54a3be714634caa1508b388eec800a7a613150c85ffd", 0x72}, {&(0x7f0000000b80)="4d10f5c182ed79d0833bce61e7fb15a170cafec69648f3d4bcf5b3100be39b5a3398dc5a3ee85414865c9f5bd9351d8a00b4695aaa841d2b41b800c1985f4e44", 0x40}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50, 0x20060045}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000d40)="fb8b3d7a6ecb3235e1f3df788793e019730d7ded5f83a638ed66c7a91eac7b938ef7934db195cbb795b229e9339a8d1c3949dbbd00367f9d0e6d0acd4fb7d47d33639e4284300d4600531f9b87158b6941eda418517fb1003aa0f26a3880623080a417b5850a9a5eb7949886afedba1b4f7b570295ca10ab67b0e9d383ee9356be79df94856bda5b469e3b3c6251d4b7e4197098021dbcc686e80f7dce09e2504691", 0xa2}, {&(0x7f0000000e40)="9fa9878caacfde9220d630bae144633ebff00d785653d1fe86cc337e8bca08b2438e531f4efacbd940f29ad2485c78dc05917b510e4b97e5b4add986e402ffa50a2220faef9022d113f09792e4305daa22ffde1010a3954fc9a3115f37ee7aac55252f43edc39da506e853ad79c875b73edd5af731c17e41112416cd53b6323942183865e80881dae4ba8b64e30559f1c7a78b38db81385fd473f16aeb4a90940e80212e10f9e1375fa5b2346a292882ea756211a7458fceb586b4fae0db0f722ceabb0c7b8ddb12", 0xc8}, {&(0x7f0000000f40)="048c9e05a1d0d8de1b45569c595c0641556f14c5d7972f1f3ef4430876a13ed9e99cf1c967489e877b22ec2f9918ac58099830344e5a1e04ef7de0c0e858f1d066b189a58c27c49a3bf185aac8245228c7de6c0c4c5ea35afd63120be01d", 0x5e}, {&(0x7f0000000fc0)="59be3dc31e0d87a3e52624a0611e9ba663c530673731e7aac17361db1f255b1aac30b90283c53cd3260d0ba9", 0x2c}, {&(0x7f0000001000)="90d50988eca00e9c7398bd832fc150f31c7609d0a6a209a1ba045cd65f9c082c13911a679ad379a333", 0x29}, {&(0x7f0000001040)="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", 0xff}, {0x0}, {&(0x7f00000011c0)="2e6d3cc331a75f2dcf4416afef411164981e571765881691d54942c6d0d18ceb9c98bbcba8b3fa346fa7faafbda0b9ae79d0c5114d48d923c86b814ad37e678f5fa8985b6cb76e49afa8add6497a3a36f13b68fb394ceb411ddd097692a1d0a87862590c0706a2dcce6fdd24f8f7e953f70830fa852f0f8471b35ac8f9a07bfb1306df5a15155cda8346614e66c19d55f524201d4546446d4dcec47da850c578e085a7eb37abe905d149d9e2", 0xac}], 0x8, &(0x7f0000001380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x2c, 0x1, 0x1, [r4, r5, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x110, 0x10}}], 0x3, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x28, 0x8001, 0x29, 0x9, 0x2000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40186f40, &(0x7f0000000080)={0x7, 0x0, 0x201, 0x0, 'syz0\x00'}) 19m18.799292322s ago: executing program 3 (id=447): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0x0) userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = getpid() socket$nl_generic(0x10, 0x3, 0x10) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) 19m17.662462044s ago: executing program 33 (id=446): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0xffffffffffffff6c, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r3, 0x0, 0x10001, 0x0, 0x6, 0xa9613, 0x17e5e9, 0x100000000000000}) r4 = socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000014c0)=[{{&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000440)="a605bd7013bc808a4e69d208cabb1b5a3079b03170c679698d85cce117d62511c2377f8595f0a9180d1cb7de05bc9eb4a5b363fa7eb32d00ce58aea44e261f001a1962ed0d9f12287cc8df908b0129d5ba09f551b97873638e57cac70d014b2f615a5a5ce2eeae204629c201", 0x6c}, {&(0x7f00000004c0)="2ac111690434a58aeb2efe65defe6a51c4a0fefb3e7de9f542c422a696e630ebc0a21031ac439c833db59d17a4b646884de6e6fbc62e6e6f3e2713c0ac1fbf08ce711203f5c56f626e5e7474ca7660d606db39561d027bb1b9756606c08b9954f2957726baffad099964afdcf42a584baa853e774fba673eb706de68b45f185a1b25627fbb8e96", 0x87}, {&(0x7f0000000580)="ba8e5aa922934502e37e6edcb80f5ef8f4923549ed3e0b67405d91ecdd38a461350542638663c7955f5936ca6cf27dcc30aa1aa9a8972f186c0a8bde48abd8f3e88d6862e527f14ef927", 0x4a}, {&(0x7f0000000180)="22b7a442aaa5b52b65c61cd174ec811c3046aa0eacd9a9185855cc088dd1", 0x1e}, {&(0x7f0000000600)="8b9896357f05869b85180d4a2b2ec9f7cae1ae9371e9c507151b47f2f1aad061c13c537dddbff3659e05ca9eeeebc617073db422bcc1cba08bb27d6e6ca86b16cea2b8529f5e09bcd93939647c44e622aacc043d7baf8c8bc57d7bf1841b481c09274e2fff19c106f7cff9933cf7eebd96378cee04e519b4c033ce03277a7ca5817fb64839505cf022dde342fcc7947d79aa7a632deb3c99977481e001658423d22eeba1d32c8ec9e239df53b41b2fa390ff823113780e451b02ff99b92eb09fd74a2e417f21c6d909673b326ce759b577fbc07fbd40dba38911733955f10005454667a1c5a5f4ac8b268ad650b7739b59", 0xf1}, {&(0x7f0000000300)="0e", 0x1}, {&(0x7f0000000800)="acd984107f5bae68daada3a92463894436e8cf454aa8e547870eb9c624c9d7b412331c7874683a12cdfcafe285bddcee1514e2dffc", 0x35}], 0x7, 0x0, 0x0, 0x24005}}, {{0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000a00)="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", 0xfc}, {&(0x7f0000000b00)="02d67f0ceb533d1179a4c5e8001a1689e1a9eaf769fac833de7b4ee6689a9a272b435c6b4730c0b6beea2f81032e41a60fba116e856117ecdefa33c4698c6b9e45e8f77f60e6e7d4d1816cde61dce14b07e2687e88a986f7284bf3de54a3be714634caa1508b388eec800a7a613150c85ffd", 0x72}, {&(0x7f0000000b80)="4d10f5c182ed79d0833bce61e7fb15a170cafec69648f3d4bcf5b3100be39b5a3398dc5a3ee85414865c9f5bd9351d8a00b4695aaa841d2b41b800c1985f4e44", 0x40}], 0x3, &(0x7f0000000c40)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50, 0x20060045}}, {{&(0x7f0000000cc0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000001280)=[{&(0x7f0000000d40)="fb8b3d7a6ecb3235e1f3df788793e019730d7ded5f83a638ed66c7a91eac7b938ef7934db195cbb795b229e9339a8d1c3949dbbd00367f9d0e6d0acd4fb7d47d33639e4284300d4600531f9b87158b6941eda418517fb1003aa0f26a3880623080a417b5850a9a5eb7949886afedba1b4f7b570295ca10ab67b0e9d383ee9356be79df94856bda5b469e3b3c6251d4b7e4197098021dbcc686e80f7dce09e2504691", 0xa2}, {&(0x7f0000000e40)="9fa9878caacfde9220d630bae144633ebff00d785653d1fe86cc337e8bca08b2438e531f4efacbd940f29ad2485c78dc05917b510e4b97e5b4add986e402ffa50a2220faef9022d113f09792e4305daa22ffde1010a3954fc9a3115f37ee7aac55252f43edc39da506e853ad79c875b73edd5af731c17e41112416cd53b6323942183865e80881dae4ba8b64e30559f1c7a78b38db81385fd473f16aeb4a90940e80212e10f9e1375fa5b2346a292882ea756211a7458fceb586b4fae0db0f722ceabb0c7b8ddb12", 0xc8}, {&(0x7f0000000f40)="048c9e05a1d0d8de1b45569c595c0641556f14c5d7972f1f3ef4430876a13ed9e99cf1c967489e877b22ec2f9918ac58099830344e5a1e04ef7de0c0e858f1d066b189a58c27c49a3bf185aac8245228c7de6c0c4c5ea35afd63120be01d", 0x5e}, {&(0x7f0000000fc0)="59be3dc31e0d87a3e52624a0611e9ba663c530673731e7aac17361db1f255b1aac30b90283c53cd3260d0ba9", 0x2c}, {&(0x7f0000001000)="90d50988eca00e9c7398bd832fc150f31c7609d0a6a209a1ba045cd65f9c082c13911a679ad379a333", 0x29}, {&(0x7f0000001040)="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", 0xff}, {0x0}, {&(0x7f00000011c0)="2e6d3cc331a75f2dcf4416afef411164981e571765881691d54942c6d0d18ceb9c98bbcba8b3fa346fa7faafbda0b9ae79d0c5114d48d923c86b814ad37e678f5fa8985b6cb76e49afa8add6497a3a36f13b68fb394ceb411ddd097692a1d0a87862590c0706a2dcce6fdd24f8f7e953f70830fa852f0f8471b35ac8f9a07bfb1306df5a15155cda8346614e66c19d55f524201d4546446d4dcec47da850c578e085a7eb37abe905d149d9e2", 0xac}], 0x8, &(0x7f0000001380)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, r4, r4]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r6]}}, @rights={{0x2c, 0x1, 0x1, [r4, r5, r3, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}], 0x110, 0x10}}], 0x3, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x28, 0x8001, 0x29, 0x9, 0x2000, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2284, 0x0) ppoll(0x0, 0x0, &(0x7f0000000040)={0x0, 0x3938700}, 0x0, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, 0x0, 0x0) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r7, 0x40186f40, &(0x7f0000000080)={0x7, 0x0, 0x201, 0x0, 'syz0\x00'}) 19m16.583825641s ago: executing program 2 (id=451): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 19m16.571979422s ago: executing program 3 (id=452): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19m15.944047792s ago: executing program 3 (id=453): r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x1c, 0x800) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20000) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, r1}) ioctl$DMA_BUF_SET_NAME_A(r3, 0x40046201, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x12, 0x7, 0x8, 0x8}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYRES32=r5, @ANYRES64=r5], 0x10) r6 = syz_usb_connect(0x3, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000092df5510ac05269289b201020301090222000100000000090400000103e900000907000000000000000705d77b5d"], 0x0) syz_usb_control_io$cdc_ncm(r6, 0x0, &(0x7f0000000100)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TCSBRKP(r7, 0x5425, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x3) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='erofs\x00', 0x0, 0x0) ioctl$TCSETSW2(r8, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "234408020e90d1beaa82dc1ecf00"}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x28, r11, 0x9c3fa077fa966179, 0xfffffffd, 0x0, {{0x7e}, {@val={0x8}, @val={0xc, 0x99, {0x916d, 0x15}}}}}, 0x28}}, 0x4000054) fanotify_mark(0xffffffffffffffff, 0x1, 0x1b, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000100)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) sendmsg$NL80211_CMD_DEL_INTERFACE(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000340)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) ioctl$TIOCGPGRP(r7, 0x5437, 0x0) 19m15.904288336s ago: executing program 2 (id=454): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r4, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0x10400}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f0000000140)={0x30, 0x5, 0x0, {0x0, 0x1, 0x3, 0x67a7}}, 0x30) 19m15.10587285s ago: executing program 3 (id=456): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001500034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 19m14.842621371s ago: executing program 2 (id=457): ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x89}, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f0000000480)={0x10, 0x3ed, 0x100, 0x70bd28, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f00000018c0)=""/102400, 0x19000) r1 = socket(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newchain={0x24, 0x64, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x9}, {0x8, 0x7}, {0xe, 0xfff1}}}, 0x24}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x25dfdbf9, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0x0, 0x7}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x8201, 0x3}, 0x18, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004d00)='./file1\x00', 0x351142, 0x1cd) quotactl_fd$Q_GETQUOTA(r4, 0xffffffff80000701, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6}, 0x94) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f00000020c0)={0x34, &(0x7f0000000400)=ANY=[@ANYBLOB="7b6ac00cb212ca9cb5e5963d90dd63be450b7999e68652196ea4d0b17202187b2e41bf648a982fc840b7bbcf7f5f638d2aaecf806dd6b946e1cc461688780ea1ff8884f3628ed1702156f320079ea7870000"], 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(0x0, &(0x7f00000002c0)) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0x5450, 0x0) write(r1, &(0x7f0000000580)="19aa9d6ae35d2018579f6be01d6ceac57a6cfc32ed5376b9aab66a92f91897ce77a25577b7fe537466e8ae635e9d277bee623bab4a0a4926bd3030d829d618917e7d44d8dfaad1b2177ba11c1d1781c16d50926e35ba9256fecc458ef8de2653f13bd98471", 0x65) 19m13.664666197s ago: executing program 34 (id=456): r0 = socket$netlink(0x10, 0x3, 0x15) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)="390000001500034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 19m12.543983897s ago: executing program 2 (id=460): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = syz_clone(0x88200200, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, 0x0) setpgid(0x0, r0) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) 19m12.393227139s ago: executing program 2 (id=461): socket(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xe, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180)) 19m11.822154966s ago: executing program 2 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4, 0x81, 0x47}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd7000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470"], 0x40}}, 0x8080) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x100010, r2, 0xb3d2d000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@cpuid={0x14, 0x18, {0x5, 0xff0}}, @code={0xa, 0x4e, {"b9430a00000f320f481736460f0966ba200066b8060066ef66ba430066b8950366ef67660f38813af2440faef0c423856c0502000000620f01c2f3e03e"}}, @uexit={0x0, 0x18, 0xe}, @wrmsr={0x1e, 0x20, {0x8a8, 0x7}}, @cpuid={0x14, 0x18, {0x9, 0x8cf}}, @rdmsr={0x32, 0x18, {0x29}}, @wrmsr={0x1e, 0x20, {0xba6, 0x7}}, @wrmsr={0x1e, 0x20, {0x97d}}, @rdmsr={0x32, 0x18, {0xa57}}, @rdmsr={0x32, 0x18, {0x374}}, @wr_crn={0x46, 0x20, {0x2, 0x6}}, @code={0xa, 0x64, {"66ba4300b80f300000eff3f30f01580ac4417dd9be000000000f0d8133720000c4c1cd73f100640f01ca410f019c8a5f0000000fc0fc66ba430066b8777e66efc744240073000000c74424020131af2cff1c24"}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @cpuid={0x14, 0x18, {0x18, 0x6}}, @rdmsr={0x32, 0x18, {0xa56}}, @rdmsr={0x32, 0x18, {0x118}}, @uexit={0x0, 0x18, 0x100000001}], 0x23a}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x840) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) 19m11.567256746s ago: executing program 35 (id=462): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x4, 0x81, 0x47}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB="400000001000010429bd7000000000", @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100677470"], 0x40}}, 0x8080) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x100010, r2, 0xb3d2d000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='pstore\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, 0x0) r4 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000200)=[@cpuid={0x14, 0x18, {0x5, 0xff0}}, @code={0xa, 0x4e, {"b9430a00000f320f481736460f0966ba200066b8060066ef66ba430066b8950366ef67660f38813af2440faef0c423856c0502000000620f01c2f3e03e"}}, @uexit={0x0, 0x18, 0xe}, @wrmsr={0x1e, 0x20, {0x8a8, 0x7}}, @cpuid={0x14, 0x18, {0x9, 0x8cf}}, @rdmsr={0x32, 0x18, {0x29}}, @wrmsr={0x1e, 0x20, {0xba6, 0x7}}, @wrmsr={0x1e, 0x20, {0x97d}}, @rdmsr={0x32, 0x18, {0xa57}}, @rdmsr={0x32, 0x18, {0x374}}, @wr_crn={0x46, 0x20, {0x2, 0x6}}, @code={0xa, 0x64, {"66ba4300b80f300000eff3f30f01580ac4417dd9be000000000f0d8133720000c4c1cd73f100640f01ca410f019c8a5f0000000fc0fc66ba430066b8777e66efc744240073000000c74424020131af2cff1c24"}}, @uexit={0x0, 0x18, 0xfffffffffffffff7}, @cpuid={0x14, 0x18, {0x18, 0x6}}, @rdmsr={0x32, 0x18, {0xa56}}, @rdmsr={0x32, 0x18, {0x118}}, @uexit={0x0, 0x18, 0x100000001}], 0x23a}) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000801}, 0x840) ioctl$KVM_KVMCLOCK_CTRL(r4, 0xaead) 36.558084795s ago: executing program 5 (id=5111): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000006c0)={0x73622a85, 0x100b}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000280)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = dup3(r3, r2, 0x0) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000740)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000680)={0x4c, 0x0, &(0x7f0000005900)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1400}], 0x0, 0x0, 0x0}) 36.354462611s ago: executing program 5 (id=5116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=@newtfilter={0x70, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xf}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x8, 0x9, 0x40}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}, @TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 36.239423631s ago: executing program 5 (id=5120): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4ffe6, 0x0) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000000)={0x2, 0x3234564e, 0x3, @discrete={0x1, 0x8}}) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl818\x00', [0x4f27, 0x5, 0x10000, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0xa, 0x100, 0x2, 0x1, 0x1, 0x1, 0x6, 0x102, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e58, 0xb, 0xe69, 0x3c, 0x8, 0x6, 0x7, 0xfffffff8]}) 22.227119563s ago: executing program 5 (id=5123): syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000007c0)='./file0\x00', 0x2000002, &(0x7f0000004100)=ANY=[@ANYBLOB='shortad,gid=forget,adinicb,adinicb,uid=forget,undelete,volume=00000000000000000004,iocharset=cp949,iocharset=maccroatian,noadinicb,unhide,gid=', @ANYRESDEC=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB="2c00173b9fb6f204005cea103d4753"], 0xfc, 0xc2d, &(0x7f0000000f40)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0) mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 21.77269792s ago: executing program 5 (id=5220): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x6, &(0x7f0000000380)=ANY=[@ANYRES32=0x0], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) 18.915917841s ago: executing program 5 (id=5258): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0x8}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) 18.595131187s ago: executing program 36 (id=5258): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x3, 0x8}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001ac0)={0x1b, 0x0, 0x0, 0x2000000, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) 13.884926227s ago: executing program 7 (id=5298): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) 13.783924176s ago: executing program 7 (id=5299): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000011000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000230000009500000000000000"], &(0x7f0000000080)='GPL\x00'}, 0x65) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 13.776581066s ago: executing program 4 (id=5300): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d19, &(0x7f0000000140)=0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x60, 0x0, 0x0) 13.654610406s ago: executing program 7 (id=5301): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x8810) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) close(r4) 13.531884536s ago: executing program 7 (id=5302): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1, 0x0, 0x0, 0x10}, 0x810) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008000000000008"], 0x54}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 6.714058037s ago: executing program 4 (id=5309): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1, 0x0, 0x0, 0x10}, 0x810) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006007272000008000800000000000800"], 0x54}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 6.713239137s ago: executing program 7 (id=5310): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d19, &(0x7f0000000140)=0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x60, 0x0, 0x0) 6.558711469s ago: executing program 4 (id=5312): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x323020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) setxattr$incfs_metadata(0x0, &(0x7f00000001c0), &(0x7f0000000140)="54c11dc704", 0x5, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 6.504340454s ago: executing program 7 (id=5304): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15], 0x0}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a00000001000000e27f00000100000012"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000001c0)='test_pages_isolated\x00', r1, 0x0, 0x3}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000005c0)='kfree_skb\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f00000002c0)='sched_kthread_work_queue_work\x00', r3}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000280)={'wg2\x00'}) 6.304646579s ago: executing program 4 (id=5305): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x18) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 1.963939811s ago: executing program 8 (id=5313): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1, 0x0, 0x0, 0x10}, 0x810) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006007272000008000800000000000800"], 0x54}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 1.826688362s ago: executing program 8 (id=5315): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x323020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)="54c11dc704", 0x5, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 1.583794962s ago: executing program 6 (id=5317): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xe, 0x4, 0x4, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x18) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='percpu_create_chunk\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) 1.502250798s ago: executing program 4 (id=5318): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000022c0)={[{@errors_remount}, {@nobarrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@block_validity}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) ftruncate(r1, 0x2007ffa) sendfile(r1, r1, 0x0, 0x800000009) 1.501397568s ago: executing program 8 (id=5325): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x323020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)="54c11dc704", 0x5, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 1.116246019s ago: executing program 8 (id=5319): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000c00)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000c00000009"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000280), 0x84, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 1.056057824s ago: executing program 6 (id=5320): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ec0)={&(0x7f0000000d80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@struct]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000002600)=""/4096, 0x2e, 0x1000, 0x1}, 0x28) 787.719855ms ago: executing program 8 (id=5321): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000300)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @link_local}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r3}, 0x10) close(r1) 771.230757ms ago: executing program 6 (id=5322): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000700)=ANY=[@ANYBLOB="240000002e0001002aab70000000000008"], 0x24}], 0x1, 0x0, 0x0, 0x10}, 0x810) r0 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c00070000000000000000000800090071000000070006007272000008000800000000000800"], 0x54}}, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f0000000280), &(0x7f00000002c0)=0xc) 380.548818ms ago: executing program 6 (id=5323): r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0044d19, &(0x7f0000000140)=0x48) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg$inet(r1, &(0x7f00000039c0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10, 0x0}}], 0x1, 0x2000c044) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRES32=0x0, @ANYBLOB="8000000002000200080004000000000008001b"], 0x30}}, 0x0) sendto$inet(r1, 0x0, 0x0, 0x60, 0x0, 0x0) 282.716957ms ago: executing program 6 (id=5324): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x14, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x76, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x28) 56.819115ms ago: executing program 8 (id=5326): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x37, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000000)='rss_stat\x00', r0}, 0x18) syz_clone(0x638c1100, 0x0, 0x0, 0x0, 0x0, 0x0) 56.669965ms ago: executing program 4 (id=5327): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x323020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) setxattr$incfs_metadata(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000140)="54c11dc704", 0x5, 0x0) getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50) 0s ago: executing program 6 (id=5328): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x31, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@fallback, 0xffffffffffffffff, 0x10}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)=ANY=[], 0x10) kernel console output (not intermixed with test programs): r's value: 3 [ 881.713635][T15159] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 881.721889][T14005] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 881.754573][T14005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.783992][T14005] usbtmc 6-1:16.0: bulk endpoints not found [ 881.847186][T15170] syz_tun: entered allmulticast mode [ 881.855842][T15169] syz_tun: left allmulticast mode [ 881.927556][T15174] erofs: (device nbd7): erofs_read_superblock: cannot find valid erofs superblock [ 882.021600][T15178] syz_tun: entered allmulticast mode [ 882.030061][T15177] syz_tun: left allmulticast mode [ 882.149478][T14005] usb 8-1: USB disconnect, device number 35 [ 883.978524][ T6233] usb 6-1: USB disconnect, device number 24 [ 884.095415][T14486] usb 5-1: USB disconnect, device number 43 [ 884.489805][T15214] fuse: Bad value for 'rootmode' [ 885.261266][T14486] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 886.099816][ T7804] usb 8-1: new full-speed USB device number 36 using dummy_hcd [ 886.129591][T14486] usb 7-1: Using ep0 maxpacket: 16 [ 886.164129][T14486] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 886.202983][T14486] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 886.213574][T14486] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.274909][T14486] usb 7-1: Product: syz [ 886.281771][T14486] usb 7-1: Manufacturer: syz [ 886.287420][T14486] usb 7-1: SerialNumber: syz [ 886.315588][ T7804] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 886.327642][ T7804] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 886.338328][ T7804] usb 8-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 886.355366][ T7804] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 886.365372][ T7804] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.365490][ T6233] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 886.438731][ T7804] usbtmc 8-1:16.0: bulk endpoints not found [ 886.440403][T14486] usb 7-1: config 0 descriptor?? [ 886.563593][T14486] appledisplay 7-1:0.0: Could not find int-in endpoint [ 886.612646][T14486] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 886.700377][ T6233] usb 6-1: Using ep0 maxpacket: 32 [ 886.709256][ T6233] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 886.730901][ T6233] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 886.741555][ T6233] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 886.750076][ T6233] usb 6-1: Product: syz [ 886.754617][ T6233] usb 6-1: Manufacturer: syz [ 886.759230][ T6233] usb 6-1: SerialNumber: syz [ 886.774144][ T6233] usb 6-1: config 0 descriptor?? [ 886.779994][T15230] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 886.854760][T15235] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 887.364020][ T7804] usb 7-1: USB disconnect, device number 36 [ 887.815443][T15247] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 888.361597][T15249] syz_tun: entered allmulticast mode [ 888.378732][T15248] syz_tun: left allmulticast mode [ 888.795155][T15258] fuse: Unknown parameter 'use00000000000000000000' [ 889.355267][T14005] usb 8-1: USB disconnect, device number 36 [ 889.432089][ T5833] usb 6-1: USB disconnect, device number 25 [ 890.690387][ T23] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 890.939684][ T23] usb 8-1: Using ep0 maxpacket: 16 [ 890.947572][ T23] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 890.965789][T15283] syz_tun: entered allmulticast mode [ 890.976279][T15282] syz_tun: left allmulticast mode [ 890.984265][ T23] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 890.999529][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 891.018432][ T23] usb 8-1: Product: syz [ 891.023562][ T23] usb 8-1: Manufacturer: syz [ 891.028188][ T23] usb 8-1: SerialNumber: syz [ 891.052743][ T23] usb 8-1: config 0 descriptor?? [ 891.082482][ T23] appledisplay 8-1:0.0: Could not find int-in endpoint [ 891.104174][ T23] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 891.347531][T15289] erofs: (device nbd7): erofs_read_superblock: cannot find valid erofs superblock [ 891.505557][T15292] fuse: Unknown parameter 'use00000000000000000000' [ 892.103661][ T23] usb 8-1: USB disconnect, device number 37 [ 892.169487][T14486] usb 6-1: new full-speed USB device number 26 using dummy_hcd [ 892.377122][T14486] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 892.389461][T14486] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 892.399242][T14486] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 892.412332][T14486] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 892.422450][T14486] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.439020][T14486] usbtmc 6-1:16.0: bulk endpoints not found [ 893.574959][ T23] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 893.840709][ T23] usb 7-1: Using ep0 maxpacket: 32 [ 893.869819][ T23] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 893.905504][ T23] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 893.923916][ T23] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 893.942651][ T23] usb 7-1: Product: syz [ 893.951448][ T23] usb 7-1: Manufacturer: syz [ 893.998063][ T23] usb 7-1: SerialNumber: syz [ 894.011648][ T23] usb 7-1: config 0 descriptor?? [ 894.069057][T15320] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 894.098295][T15301] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 894.476297][ T5866] usb 7-1: USB disconnect, device number 37 [ 894.618986][T15333] fuse: Unknown parameter 'use00000000000000000000' [ 895.218722][ T5866] usb 6-1: USB disconnect, device number 26 [ 898.579603][ T23] usb 5-1: new full-speed USB device number 44 using dummy_hcd [ 900.801631][ T23] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 900.814261][ T23] usb 5-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 900.826058][ T23] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 900.839493][ T23] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 900.848639][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.947950][ T23] usbtmc 5-1:16.0: bulk endpoints not found [ 901.089660][ T6233] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 901.635005][ T6233] usb 8-1: Using ep0 maxpacket: 32 [ 901.695193][ T6233] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 901.717405][ T6233] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 901.731287][ T6233] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 901.745216][ T6233] usb 8-1: Product: syz [ 901.750676][ T6233] usb 8-1: Manufacturer: syz [ 901.756729][ T6233] usb 8-1: SerialNumber: syz [ 901.781957][ T6233] usb 8-1: config 0 descriptor?? [ 901.807867][T15391] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 901.917510][T15412] syz_tun: entered allmulticast mode [ 902.155060][ T6233] usb 8-1: USB disconnect, device number 38 [ 902.332182][T15421] fuse: Unknown parameter 'user_i00000000000000000000' [ 903.149125][ T6233] usb 5-1: USB disconnect, device number 44 [ 903.674305][T15436] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 905.227768][T15454] fuse: Unknown parameter 'user_i00000000000000000000' [ 905.829557][ T7731] usb 7-1: new high-speed USB device number 38 using dummy_hcd [ 906.029441][ T7731] usb 7-1: Using ep0 maxpacket: 32 [ 906.041726][ T7731] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 906.085735][ T7731] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 906.109318][ T7731] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 906.118099][ T7731] usb 7-1: Product: syz [ 906.125296][ T7731] usb 7-1: Manufacturer: syz [ 906.131760][ T7731] usb 7-1: SerialNumber: syz [ 906.142152][ T7731] usb 7-1: config 0 descriptor?? [ 906.162222][T15451] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 906.229834][ T6233] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 906.271309][T15459] syz_tun: entered allmulticast mode [ 906.285120][T15458] syz_tun: left allmulticast mode [ 906.436172][ T6233] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 906.492463][ T6233] usb 6-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 906.506549][ T6233] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 906.526928][ T6233] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 906.649000][ T7731] usb 7-1: USB disconnect, device number 38 [ 906.674537][ T6233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 906.710953][ T6233] usbtmc 6-1:16.0: bulk endpoints not found [ 907.968132][T15487] fuse: Unknown parameter 'user_id00000000000000000000' [ 908.559571][ T6233] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 908.737365][T15491] syz_tun: entered allmulticast mode [ 908.746971][T15490] syz_tun: left allmulticast mode [ 908.869801][ T6233] usb 5-1: Using ep0 maxpacket: 16 [ 908.936081][ T6233] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 908.967684][ T6233] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 909.000724][ T6233] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 909.266906][ T6233] usb 5-1: Product: syz [ 909.294733][ T6233] usb 5-1: Manufacturer: syz [ 909.300101][ T6233] usb 5-1: SerialNumber: syz [ 909.315091][ T6233] usb 5-1: config 0 descriptor?? [ 909.330177][ T5833] usb 6-1: USB disconnect, device number 27 [ 909.331656][ T6233] appledisplay 5-1:0.0: Could not find int-in endpoint [ 909.345459][ T6233] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 909.681254][T15503] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 909.789723][ T5833] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 910.016391][ T5833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 910.027480][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 910.038755][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 910.053000][ T5833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 910.063294][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.064894][T14486] usb 5-1: USB disconnect, device number 45 [ 910.108956][ T5833] usbtmc 6-1:16.0: bulk endpoints not found [ 910.529660][ T5833] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 910.719891][ T5833] usb 8-1: Using ep0 maxpacket: 32 [ 910.739360][ T5833] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 910.776535][ T5833] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 910.797298][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 910.813657][ T5833] usb 8-1: Product: syz [ 910.818415][ T5833] usb 8-1: Manufacturer: syz [ 910.823503][ T5833] usb 8-1: SerialNumber: syz [ 910.834579][ T5833] usb 8-1: config 0 descriptor?? [ 910.844245][T15508] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 911.190521][T14486] usb 8-1: USB disconnect, device number 39 [ 911.315842][T15523] fuse: Unknown parameter 'user_id00000000000000000000' [ 912.534915][ T6233] usb 6-1: USB disconnect, device number 28 [ 912.571028][T15532] syz_tun: entered allmulticast mode [ 912.583631][T15531] syz_tun: left allmulticast mode [ 913.178257][T15547] 9pnet_fd: Insufficient options for proto=fd [ 913.319841][ T6233] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 913.847851][ T6233] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 913.885079][ T6233] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 914.007028][ T6233] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 914.119840][ T6233] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 914.154293][ T6233] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.184823][ T6233] usbtmc: probe of 6-1:16.0 failed with error -22 [ 914.969279][T15564] fuse: Unknown parameter 'user_id00000000000000000000' [ 915.770269][ T6233] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 916.190055][ T6233] usb 5-1: Using ep0 maxpacket: 32 [ 916.198927][ T6233] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 916.214965][ T6233] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 916.227106][ T6233] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 916.238581][ T6233] usb 5-1: Product: syz [ 916.242893][ T6233] usb 5-1: Manufacturer: syz [ 916.247508][ T6233] usb 5-1: SerialNumber: syz [ 916.460299][ T6233] usb 5-1: config 0 descriptor?? [ 916.466460][T15562] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 916.548520][T15578] 9pnet_fd: Insufficient options for proto=fd [ 917.181299][ T5833] usb 6-1: USB disconnect, device number 29 [ 917.182701][ T6233] usb 5-1: USB disconnect, device number 46 [ 918.243247][ T5833] usb 6-1: new full-speed USB device number 30 using dummy_hcd [ 918.470021][ T5833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 918.480714][ T5833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 918.491557][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 918.505230][ T5833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 918.514486][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.560144][ T5833] usbtmc: probe of 6-1:16.0 failed with error -22 [ 918.943466][T15606] fuse: Bad value for 'fd' [ 918.980250][ T5833] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 919.291841][ T5833] usb 5-1: Using ep0 maxpacket: 16 [ 919.454110][ T5833] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 919.596174][ T5833] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 919.605455][ T5833] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 919.613739][ T5833] usb 5-1: Product: syz [ 919.618185][ T5833] usb 5-1: Manufacturer: syz [ 919.623217][ T5833] usb 5-1: SerialNumber: syz [ 919.662166][ T5833] usb 5-1: config 0 descriptor?? [ 919.781694][ T5833] appledisplay 5-1:0.0: Could not find int-in endpoint [ 919.797526][ T5833] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 920.182449][T15620] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 920.470055][T15626] 9pnet_fd: Insufficient options for proto=fd [ 920.840495][ T7731] usb 5-1: USB disconnect, device number 47 [ 921.099454][ T5833] usb 6-1: USB disconnect, device number 30 [ 921.557788][ T6233] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 921.773909][ T6233] usb 8-1: Using ep0 maxpacket: 32 [ 921.908702][ T6233] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 922.143891][T15646] fuse: Bad value for 'fd' [ 922.831038][ T6233] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 922.924250][ T6233] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 922.945607][ T6233] usb 8-1: Product: syz [ 922.977416][ T6233] usb 8-1: Manufacturer: syz [ 922.999479][ T6233] usb 8-1: SerialNumber: syz [ 923.367112][ T6233] usb 8-1: config 0 descriptor?? [ 923.436329][T15631] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 923.741879][ T6233] usb 8-1: USB disconnect, device number 40 [ 923.977037][T15665] 9pnet_fd: Insufficient options for proto=fd [ 924.635865][T15670] syz_tun: entered allmulticast mode [ 924.647297][T15669] syz_tun: left allmulticast mode [ 925.059573][T14486] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 925.140058][T14005] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 925.145526][T15681] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 925.259555][T14486] usb 7-1: Using ep0 maxpacket: 16 [ 925.294712][T14486] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 925.450883][T14005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 925.466314][T14005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 925.476628][T14005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 925.490508][T14005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 925.503249][T14005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.529008][T14486] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 925.566817][T14005] usbtmc: probe of 5-1:16.0 failed with error -22 [ 925.639519][T14486] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.688176][T14486] usb 7-1: Product: syz [ 925.713309][T14486] usb 7-1: Manufacturer: syz [ 925.821832][T14486] usb 7-1: SerialNumber: syz [ 925.867435][T14486] usb 7-1: config 0 descriptor?? [ 925.881785][T14486] appledisplay 7-1:0.0: Could not find int-in endpoint [ 925.891121][T14486] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 926.179696][ T7731] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 926.200289][T15696] 9pnet_fd: Insufficient options for proto=fd [ 926.481883][ T7731] usb 8-1: Using ep0 maxpacket: 32 [ 926.516876][ T7731] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 926.553672][ T7731] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 926.573911][ T7731] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 926.589116][ T7731] usb 8-1: Product: syz [ 926.603990][ T7731] usb 8-1: Manufacturer: syz [ 926.609013][ T7731] usb 8-1: SerialNumber: syz [ 926.625239][T15700] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 926.629757][ T7731] usb 8-1: config 0 descriptor?? [ 926.648631][T15690] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 926.722948][T14005] usb 7-1: USB disconnect, device number 39 [ 926.940910][ T7731] usb 8-1: USB disconnect, device number 41 [ 928.246215][T14005] usb 5-1: USB disconnect, device number 48 [ 928.547315][T15725] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 930.744484][T15743] 9pnet_fd: Insufficient options for proto=fd [ 931.112375][T14486] usb 7-1: new full-speed USB device number 40 using dummy_hcd [ 931.311476][T14486] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 931.976777][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.983221][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.985249][T14486] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 932.049515][ T7731] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 932.057197][T14486] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 932.076717][T14486] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 932.259910][ T7731] usb 8-1: Using ep0 maxpacket: 32 [ 932.390664][ T7731] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 932.401099][T14486] usb 7-1: usb_control_msg returned -32 [ 932.408017][T14486] usbtmc 7-1:16.0: can't read capabilities [ 932.429737][ T7731] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 932.480938][ T7731] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 932.532826][ T7731] usb 8-1: Product: syz [ 932.570533][ T7731] usb 8-1: Manufacturer: syz [ 932.580902][ T7731] usb 8-1: SerialNumber: syz [ 932.728017][ T7731] usb 8-1: config 0 descriptor?? [ 932.789057][T15754] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 932.892634][T15761] syz.4.2573: attempt to access beyond end of device [ 932.892634][T15761] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 932.905792][T15761] FAT-fs (nbd4): unable to read boot sector [ 932.973966][T15768] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 933.035765][T15754] usbtmc 7-1:16.0: send_request_dev_dep_msg_in returned -90 [ 933.055924][ T7731] usb 8-1: USB disconnect, device number 42 [ 933.086035][T14486] usb 7-1: USB disconnect, device number 40 [ 936.959665][ T5833] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 937.071057][T14486] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 937.199260][ T5833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 937.209513][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 937.265741][ T5833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 937.295482][T14486] usb 8-1: Using ep0 maxpacket: 32 [ 937.299649][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.328332][T14486] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 937.808551][T14486] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 937.830093][T14486] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 937.838414][T14486] usb 8-1: Product: syz [ 937.843191][T14486] usb 8-1: Manufacturer: syz [ 937.847824][T14486] usb 8-1: SerialNumber: syz [ 937.856865][ T5833] usb 6-1: usb_control_msg returned -32 [ 937.863840][T14486] usb 8-1: config 0 descriptor?? [ 937.869548][ T5833] usbtmc 6-1:16.0: can't read capabilities [ 937.897450][T15815] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 938.576609][T15815] usbtmc 6-1:16.0: send_request_dev_dep_msg_in returned -90 [ 938.586462][T14486] usb 8-1: USB disconnect, device number 43 [ 939.084532][ T7731] usb 6-1: USB disconnect, device number 31 [ 940.030389][T15848] syz_tun: entered allmulticast mode [ 940.038250][T15847] syz_tun: left allmulticast mode [ 943.669936][ T23] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 943.749717][ T5833] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 944.010970][ T23] usb 5-1: Using ep0 maxpacket: 32 [ 944.029686][ T23] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 944.668936][ T5833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 944.679132][ T23] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 944.689611][T15888] comedi comedi3: Buffer allocation failed [ 944.753220][ T23] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 944.761741][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 944.775319][ T23] usb 5-1: Product: syz [ 944.784539][ T23] usb 5-1: Manufacturer: syz [ 944.789307][ T23] usb 5-1: SerialNumber: syz [ 944.799635][ T5833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 944.808918][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.831704][ T23] usb 5-1: config 0 descriptor?? [ 944.846551][T15875] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 945.074278][ T5833] usb 6-1: usb_control_msg returned -32 [ 945.082161][ T5833] usbtmc 6-1:16.0: can't read capabilities [ 945.330546][ T7731] usb 5-1: USB disconnect, device number 49 [ 946.680694][T14005] usb 6-1: USB disconnect, device number 32 [ 948.894110][T15927] syz_tun: entered allmulticast mode [ 951.179568][T14486] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 951.964957][ T5833] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 952.016996][T14486] usb 7-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65 [ 952.144270][T14486] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.151530][ T5833] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 952.154854][T14486] usb 7-1: Product: syz [ 952.162382][ T5833] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 952.179248][T14486] usb 7-1: Manufacturer: syz [ 952.189172][ T5833] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 952.219481][ T5833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 952.448395][T14486] usb 7-1: SerialNumber: syz [ 952.519211][T14486] usb 7-1: config 0 descriptor?? [ 952.607881][ T5833] usb 8-1: usb_control_msg returned -32 [ 952.617895][ T5833] usbtmc 8-1:16.0: can't read capabilities [ 952.807391][T15950] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2631'. [ 952.825123][T15950] dummy0: entered promiscuous mode [ 952.832362][T15950] macvtap0: entered promiscuous mode [ 952.837860][T15950] macvtap0: entered allmulticast mode [ 952.844427][T15950] dummy0: entered allmulticast mode [ 952.852540][T15967] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2631'. [ 952.864589][T15967] dummy0: left allmulticast mode [ 952.869999][T15967] dummy0: left promiscuous mode [ 952.899164][T14486] cx82310_eth: probe of 7-1:0.0 failed with error -22 [ 952.909894][T14486] cxacru 7-1:0.0: usbatm_usb_probe: bind failed: -19! [ 952.927891][T14486] usb 7-1: USB disconnect, device number 41 [ 953.224262][T14005] usb 8-1: USB disconnect, device number 44 [ 954.126794][T15990] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 954.949397][ C0] hrtimer: interrupt took 82648 ns [ 956.619605][T14005] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 956.877393][T14005] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 956.890496][T16032] qrtr: Invalid version 109 [ 956.921208][T14005] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 956.994262][T14005] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 957.040944][T14005] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.511545][T14005] usb 5-1: usb_control_msg returned -32 [ 957.517504][T14005] usbtmc 5-1:16.0: can't read capabilities [ 958.296782][T14486] usb 5-1: USB disconnect, device number 50 [ 958.309562][ T968] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 958.536991][ T968] usb 8-1: Using ep0 maxpacket: 16 [ 958.547618][ T968] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 958.581558][ T968] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 958.604292][ T968] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.613172][ T968] usb 8-1: Product: syz [ 958.617473][ T968] usb 8-1: Manufacturer: syz [ 958.625220][ T968] usb 8-1: SerialNumber: syz [ 958.649532][ T968] usb 8-1: config 0 descriptor?? [ 958.664435][ T968] appledisplay 8-1:0.0: Could not find int-in endpoint [ 958.673094][ T968] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 959.038177][T16066] erofs: (device nbd7): erofs_read_superblock: cannot find valid erofs superblock [ 959.766724][T14005] usb 8-1: USB disconnect, device number 45 [ 959.904915][T16077] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 963.489629][T14486] usb 7-1: new high-speed USB device number 42 using dummy_hcd [ 964.149529][T14486] usb 7-1: Using ep0 maxpacket: 16 [ 964.156779][T14486] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 964.171785][T14486] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 964.182330][T14486] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 964.190788][T14486] usb 7-1: Product: syz [ 964.195201][T14486] usb 7-1: Manufacturer: syz [ 964.201598][T14486] usb 7-1: SerialNumber: syz [ 964.208834][T14486] usb 7-1: config 0 descriptor?? [ 964.222892][T14486] appledisplay 7-1:0.0: Could not find int-in endpoint [ 964.233995][T14486] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 964.309592][T14005] usb 5-1: new full-speed USB device number 51 using dummy_hcd [ 964.480740][T16133] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 964.499165][T14005] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 964.516919][T14005] usb 5-1: config 0 interface 0 has no altsetting 0 [ 964.532603][T14005] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 964.541810][T14005] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 964.553392][T14005] usb 5-1: Product: syz [ 964.557590][T14005] usb 5-1: Manufacturer: syz [ 964.562650][T14005] usb 5-1: SerialNumber: syz [ 964.571599][T14005] usb 5-1: config 0 descriptor?? [ 964.597015][T14005] usb 5-1: selecting invalid altsetting 0 [ 964.719612][ T968] usb 7-1: USB disconnect, device number 42 [ 964.804401][T14486] usb 5-1: USB disconnect, device number 51 [ 966.029703][ T5833] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 966.300098][ T5833] usb 8-1: Using ep0 maxpacket: 32 [ 966.323627][ T5833] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 966.350048][T16160] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 966.394642][ T5833] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 966.407988][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 966.474627][ T5833] usb 8-1: Product: syz [ 966.494335][ T5833] usb 8-1: Manufacturer: syz [ 966.500295][ T5833] usb 8-1: SerialNumber: syz [ 966.557599][ T5833] usb 8-1: config 0 descriptor?? [ 966.574296][T16153] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 967.011298][T14486] usb 8-1: USB disconnect, device number 46 [ 968.789481][T14005] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 969.012301][T14005] usb 5-1: Using ep0 maxpacket: 16 [ 969.081859][T14005] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 969.105139][T14005] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 969.126279][T14005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.139597][T14005] usb 5-1: Product: syz [ 969.143868][T14005] usb 5-1: Manufacturer: syz [ 969.148970][T14005] usb 5-1: SerialNumber: syz [ 969.194615][T14005] usb 5-1: config 0 descriptor?? [ 969.312258][T14005] appledisplay 5-1:0.0: Could not find int-in endpoint [ 969.327786][T14005] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 969.553220][T16196] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 969.772923][T14005] usb 5-1: USB disconnect, device number 52 [ 970.189684][ T5833] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 970.646009][ T5833] usb 8-1: Using ep0 maxpacket: 32 [ 970.653668][ T5833] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 970.671617][ T5833] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 970.680833][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 970.703725][ T5833] usb 8-1: Product: syz [ 970.708295][ T5833] usb 8-1: Manufacturer: syz [ 970.713103][ T5833] usb 8-1: SerialNumber: syz [ 970.789706][T16214] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2716'. [ 971.469268][ T5833] usb 8-1: config 0 descriptor?? [ 971.478224][T16204] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 971.720109][T14486] usb 8-1: USB disconnect, device number 47 [ 972.135348][T16226] 9pnet_fd: Insufficient options for proto=fd [ 972.480846][T16228] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 973.667489][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 973.667504][ T28] audit: type=1326 audit(1756640923.149:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 973.719492][ T28] audit: type=1326 audit(1756640923.149:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 973.763454][ T28] audit: type=1326 audit(1756640923.179:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 973.812681][ T28] audit: type=1326 audit(1756640923.179:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 973.898321][ T28] audit: type=1326 audit(1756640923.179:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 973.981858][ T28] audit: type=1326 audit(1756640923.189:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 973.999473][ T5833] usb 7-1: new high-speed USB device number 43 using dummy_hcd [ 974.067092][ T28] audit: type=1326 audit(1756640923.189:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 974.121908][ T28] audit: type=1326 audit(1756640923.189:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 974.163655][ T28] audit: type=1326 audit(1756640923.189:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 974.209452][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 974.217258][ T28] audit: type=1326 audit(1756640923.189:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16248 comm="syz.5.2727" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ce898ebe9 code=0x7ffc0000 [ 974.242803][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 974.257041][ T5833] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 974.266322][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 974.274440][ T5833] usb 7-1: Product: syz [ 974.278780][ T5833] usb 7-1: Manufacturer: syz [ 974.284647][ T5833] usb 7-1: SerialNumber: syz [ 974.298270][ T5833] usb 7-1: config 0 descriptor?? [ 974.312471][ T5833] appledisplay 7-1:0.0: Could not find int-in endpoint [ 974.320081][ T5833] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 974.584822][T16255] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 975.321682][T16247] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 975.547599][ T7731] usb 7-1: USB disconnect, device number 43 [ 976.648304][T16267] 9pnet_fd: Insufficient options for proto=fd [ 978.574757][T16286] netlink: 360 bytes leftover after parsing attributes in process `syz.5.2738'. [ 978.755320][ T7731] usb 7-1: new high-speed USB device number 44 using dummy_hcd [ 979.430411][ T7731] usb 7-1: Using ep0 maxpacket: 32 [ 979.437231][ T7731] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 979.450078][ T7731] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 979.459132][ T7731] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 979.478016][ T7731] usb 7-1: Product: syz [ 979.482596][ T7731] usb 7-1: Manufacturer: syz [ 979.487647][ T7731] usb 7-1: SerialNumber: syz [ 979.500191][ T7731] usb 7-1: config 0 descriptor?? [ 979.508191][T16279] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 979.730868][ T5833] usb 7-1: USB disconnect, device number 44 [ 979.844949][T16298] 9pnet_fd: Insufficient options for proto=fd [ 979.879634][T14005] usb 6-1: new full-speed USB device number 33 using dummy_hcd [ 980.423404][T14005] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 980.433860][T14005] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 980.463839][T14005] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 980.473110][T14005] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 980.738881][T14005] usb 6-1: usb_control_msg returned -32 [ 980.745778][T14005] usbtmc 6-1:16.0: can't read capabilities [ 980.879769][T14486] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 981.089703][T14486] usb 5-1: Using ep0 maxpacket: 16 [ 981.123332][T14486] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 981.300026][T14486] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 981.369000][T14486] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 981.477854][T14486] usb 5-1: Product: syz [ 981.561108][T14486] usb 5-1: Manufacturer: syz [ 981.655762][T16312] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 981.738038][T14486] usb 5-1: SerialNumber: syz [ 981.777531][T14486] usb 5-1: config 0 descriptor?? [ 981.795394][T14486] appledisplay 5-1:0.0: Could not find int-in endpoint [ 981.810779][T14486] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 982.179073][T16315] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 982.385274][T14486] usb 5-1: USB disconnect, device number 53 [ 982.615192][T14486] usb 6-1: USB disconnect, device number 33 [ 983.432007][T16343] sctp: [Deprecated]: syz.6.2754 (pid 16343) Use of int in maxseg socket option. [ 983.432007][T16343] Use struct sctp_assoc_value instead [ 985.318075][T16361] 9pnet_fd: Insufficient options for proto=fd [ 986.779685][ T7804] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 986.986405][ T7804] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 987.012137][ T7804] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 987.039585][ T7804] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 987.059110][ T7804] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.281923][ T7804] usb 5-1: usb_control_msg returned -32 [ 987.287843][ T7804] usbtmc 5-1:16.0: can't read capabilities [ 987.969571][T14486] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 988.179436][T14486] usb 8-1: Using ep0 maxpacket: 16 [ 988.188156][T14486] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 988.204570][T14486] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 988.213757][T14486] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 988.221876][T14486] usb 8-1: Product: syz [ 988.226055][T14486] usb 8-1: Manufacturer: syz [ 988.230873][T14486] usb 8-1: SerialNumber: syz [ 988.238363][T14486] usb 8-1: config 0 descriptor?? [ 988.246212][T14486] appledisplay 8-1:0.0: Could not find int-in endpoint [ 988.254124][T14486] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 988.299569][ T7804] usb 7-1: new high-speed USB device number 45 using dummy_hcd [ 988.490846][ T7804] usb 7-1: Using ep0 maxpacket: 32 [ 988.498265][ T7804] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 988.512480][T16400] erofs: (device nbd7): erofs_read_superblock: cannot find valid erofs superblock [ 988.515468][ T7804] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 988.531363][ T7804] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 988.539784][ T7804] usb 7-1: Product: syz [ 988.544066][ T7804] usb 7-1: Manufacturer: syz [ 988.548734][ T7804] usb 7-1: SerialNumber: syz [ 988.574553][ T7804] usb 7-1: config 0 descriptor?? [ 988.630992][T16392] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 988.668672][T16402] 9pnet_fd: Insufficient options for proto=fd [ 989.127446][T16392] usbtmc 5-1:16.0: send_request_dev_dep_msg_in returned -90 [ 989.140691][T14005] usb 8-1: USB disconnect, device number 48 [ 989.143369][T14486] usb 7-1: USB disconnect, device number 45 [ 989.467944][T14486] usb 5-1: USB disconnect, device number 54 [ 990.721004][T16416] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 992.311549][T16441] 9pnet_fd: Insufficient options for proto=fd [ 993.159573][ T7731] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 993.349742][ T7731] usb 6-1: Using ep0 maxpacket: 16 [ 993.356760][ T7731] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 993.369449][ T5866] usb 8-1: new full-speed USB device number 49 using dummy_hcd [ 993.379010][ T7731] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 993.388368][ T7731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.396726][ T7731] usb 6-1: Product: syz [ 993.402015][ T7731] usb 6-1: Manufacturer: syz [ 993.406704][ T7731] usb 6-1: SerialNumber: syz [ 993.413204][ T7731] usb 6-1: config 0 descriptor?? [ 993.421927][ T7731] appledisplay 6-1:0.0: Could not find int-in endpoint [ 993.424865][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.430483][ T7731] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 993.436444][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.569728][T14486] usb 7-1: new high-speed USB device number 46 using dummy_hcd [ 993.580219][ T5866] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 993.590563][ T5866] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 993.603925][ T5866] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 993.613709][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 993.684040][T16451] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 993.779738][T14486] usb 7-1: Using ep0 maxpacket: 32 [ 993.786999][T14486] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 993.800171][T14486] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 993.809545][T14486] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 993.818503][T14486] usb 7-1: Product: syz [ 993.822952][T14486] usb 7-1: Manufacturer: syz [ 993.827657][T14486] usb 7-1: SerialNumber: syz [ 993.836666][ T5866] usb 8-1: usb_control_msg returned -32 [ 993.905085][T14005] usb 6-1: USB disconnect, device number 34 [ 993.909258][T14486] usb 7-1: config 0 descriptor?? [ 993.925929][ T5866] usbtmc 8-1:16.0: can't read capabilities [ 993.940080][T16450] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 994.307858][T16450] usbtmc 8-1:16.0: send_request_dev_dep_msg_in returned -90 [ 994.358091][T14486] usb 7-1: USB disconnect, device number 46 [ 996.236268][T14486] usb 8-1: USB disconnect, device number 49 [ 996.740791][T14005] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 997.019789][T14005] usb 5-1: Using ep0 maxpacket: 16 [ 997.107788][T14005] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 997.159269][T14005] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 997.294080][T14005] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 997.339555][T14005] usb 5-1: Product: syz [ 997.359993][T14005] usb 5-1: Manufacturer: syz [ 997.364645][T14005] usb 5-1: SerialNumber: syz [ 997.404593][T14005] usb 5-1: config 0 descriptor?? [ 997.437100][T14005] appledisplay 5-1:0.0: Could not find int-in endpoint [ 997.461343][T14005] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 997.664620][T12893] syz_tun (unregistering): left allmulticast mode [ 997.738320][T16501] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 997.873007][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 997.883924][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 997.896163][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 998.079879][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 998.102928][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 998.142582][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 998.472903][ T5793] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 998.498483][ T5793] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 998.507517][ T5793] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 998.517953][ T5793] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 998.535926][ T5793] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 998.544046][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 998.599226][ T5905] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.776441][ T7804] usb 5-1: USB disconnect, device number 55 [ 998.883578][ T5905] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 998.992652][ T5905] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.074902][ T5905] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 999.099590][ T5866] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 999.115906][T16514] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 999.300900][ T5866] usb 8-1: Using ep0 maxpacket: 32 [ 999.346657][ T5866] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 999.408620][ T5866] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 999.432548][ T5866] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 999.444379][ T5866] usb 8-1: Product: syz [ 999.448729][ T5866] usb 8-1: Manufacturer: syz [ 999.458361][ T5866] usb 8-1: SerialNumber: syz [ 999.471458][ T5866] usb 8-1: config 0 descriptor?? [ 999.492210][T16500] chnl_net:caif_netlink_parms(): no params data found [ 999.524155][T16510] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 999.619739][T16500] bridge0: port 1(bridge_slave_0) entered blocking state [ 999.627175][T16500] bridge0: port 1(bridge_slave_0) entered disabled state [ 999.634991][T16500] bridge_slave_0: entered allmulticast mode [ 999.642822][T16500] bridge_slave_0: entered promiscuous mode [ 999.703782][T16500] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.713215][T16500] bridge0: port 2(bridge_slave_1) entered disabled state [ 1000.230395][T16500] bridge_slave_1: entered allmulticast mode [ 1000.255093][T16500] bridge_slave_1: entered promiscuous mode [ 1000.350316][ T5866] usb 8-1: USB disconnect, device number 50 [ 1000.491361][ T5905] tipc: Left network mode [ 1000.514917][T16500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1000.550801][T16500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1000.612469][ T5786] Bluetooth: hci3: command tx timeout [ 1000.688220][T16500] team0: Port device team_slave_0 added [ 1000.720032][T16500] team0: Port device team_slave_1 added [ 1000.884653][T16500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1000.902163][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1000.928877][T16500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1000.980292][T16500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1000.999635][T16500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1001.063525][T16500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1001.862008][T16500] hsr_slave_0: entered promiscuous mode [ 1001.901336][T16500] hsr_slave_1: entered promiscuous mode [ 1002.701761][ T5786] Bluetooth: hci3: command tx timeout [ 1003.495063][ T7731] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 1003.505284][ T5905] hsr_slave_0: left promiscuous mode [ 1003.512467][ T5905] hsr_slave_1: left promiscuous mode [ 1003.520751][ T5905] bridge_slave_1: left allmulticast mode [ 1003.526436][ T5905] bridge_slave_1: left promiscuous mode [ 1003.533194][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1003.546835][ T5905] bridge_slave_0: left allmulticast mode [ 1003.554245][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1004.259625][ T7731] usb 5-1: Using ep0 maxpacket: 16 [ 1004.271627][ T7731] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1004.332300][ T7731] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1004.345824][ T7731] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1004.361465][ T7731] usb 5-1: Product: syz [ 1004.481754][ T7731] usb 5-1: Manufacturer: syz [ 1004.488685][ T7731] usb 5-1: SerialNumber: syz [ 1004.530655][ T7731] usb 5-1: config 0 descriptor?? [ 1004.557810][ T7731] appledisplay 5-1:0.0: Could not find int-in endpoint [ 1004.566666][ T7731] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1004.769989][ T5786] Bluetooth: hci3: command tx timeout [ 1004.780405][ T5905] veth1_macvtap: left promiscuous mode [ 1004.785980][ T5905] veth0_macvtap: left allmulticast mode [ 1004.794471][ T5905] veth0_macvtap: left promiscuous mode [ 1004.801903][ T5905] veth1_vlan: left promiscuous mode [ 1004.804126][T16573] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 1004.807467][ T5905] veth0_vlan: left promiscuous mode [ 1004.925952][ T5905] pimreg (unregistering): left allmulticast mode [ 1004.989868][ T55] usb 7-1: new high-speed USB device number 47 using dummy_hcd [ 1005.206656][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 1005.213895][ T55] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1005.226911][ T55] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1005.239148][ T55] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1005.250720][ T55] usb 7-1: Product: syz [ 1005.254934][ T55] usb 7-1: Manufacturer: syz [ 1005.259966][ T55] usb 7-1: SerialNumber: syz [ 1005.267027][ T55] usb 7-1: config 0 descriptor?? [ 1005.278361][T16571] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1005.530104][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 1005.568019][ T5866] usb 7-1: USB disconnect, device number 47 [ 1005.605649][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 1005.660288][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1005.714932][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1006.274158][ T5905] bond0 (unregistering): Released all slaves [ 1006.852274][ T5786] Bluetooth: hci3: command tx timeout [ 1006.984684][T16575] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1007.097709][T16575] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1007.121519][T16575] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1007.222402][ T5866] usb 5-1: USB disconnect, device number 56 [ 1008.543390][ T5905] IPVS: stop unused estimator thread 0... [ 1008.676343][T16500] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1008.727000][T16500] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1008.764715][T16500] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1008.914531][T16500] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1009.465153][T16500] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1009.586051][T16500] 8021q: adding VLAN 0 to HW filter on device team0 [ 1009.657433][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.664616][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1009.743100][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1009.750309][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1009.904256][T16500] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1010.553927][T16500] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1011.421829][T16500] veth0_vlan: entered promiscuous mode [ 1011.483231][T16500] veth1_vlan: entered promiscuous mode [ 1011.589886][T16500] veth0_macvtap: entered promiscuous mode [ 1011.618761][T16500] veth1_macvtap: entered promiscuous mode [ 1011.727279][T16500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1011.739011][T16500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.753820][T16500] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1011.768465][T16500] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1011.781827][T16500] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1011.812503][T16500] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1011.835938][T16500] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.866893][T16500] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.891053][T16500] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.940878][T16500] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1012.187516][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.204742][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.247755][ T5904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.259618][ T55] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 1012.264168][ T5904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.924190][T16682] 9pnet_fd: Insufficient options for proto=fd [ 1013.369543][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 1013.399806][ T55] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1013.546845][ T55] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1013.589479][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1013.632021][ T55] usb 5-1: Product: syz [ 1013.637559][ T55] usb 5-1: Manufacturer: syz [ 1013.646638][ T55] usb 5-1: SerialNumber: syz [ 1014.341037][ T5833] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1014.383422][ T55] usb 5-1: config 0 descriptor?? [ 1014.394141][ T55] appledisplay 5-1:0.0: Could not find int-in endpoint [ 1014.403010][ T55] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1014.560064][ T5833] usb 8-1: Using ep0 maxpacket: 32 [ 1014.577468][ T5833] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1014.651213][ T5833] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1014.687910][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1014.709633][ T5833] usb 8-1: Product: syz [ 1014.714261][ T5833] usb 8-1: Manufacturer: syz [ 1014.723664][ T5833] usb 8-1: SerialNumber: syz [ 1014.782064][ T5833] usb 8-1: config 0 descriptor?? [ 1014.799759][T16685] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1014.836891][T16698] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 1015.053143][ T5833] usb 5-1: USB disconnect, device number 57 [ 1015.131550][ T968] usb 8-1: USB disconnect, device number 51 [ 1015.266234][T16710] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1016.233770][ T5793] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1016.247292][ T5793] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1016.262191][ T5793] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1016.287128][ T5793] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1016.296174][ T5793] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1016.303785][ T5793] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1017.296454][T16724] chnl_net:caif_netlink_parms(): no params data found [ 1017.442426][ T7194] syz_tun (unregistering): left allmulticast mode [ 1017.488061][T16738] syz_tun: entered allmulticast mode [ 1017.507597][T16737] syz_tun: left allmulticast mode [ 1017.536913][T16724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1017.566060][T16724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1017.597349][T16724] bridge_slave_0: entered allmulticast mode [ 1017.612156][T16724] bridge_slave_0: entered promiscuous mode [ 1017.777964][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1017.863140][T16742] 9pnet_fd: Insufficient options for proto=fd [ 1018.431186][ T5793] Bluetooth: hci4: command tx timeout [ 1018.473897][T16724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1018.481424][T16724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1018.493526][T16724] bridge_slave_1: entered allmulticast mode [ 1018.506140][T16724] bridge_slave_1: entered promiscuous mode [ 1018.681705][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.746169][T16724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1018.798236][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1018.822521][T16724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1018.928942][T16724] team0: Port device team_slave_0 added [ 1018.973953][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.006308][T16724] team0: Port device team_slave_1 added [ 1019.132960][T16724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1019.140472][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.167152][T16724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1019.181875][T16724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1019.189515][T16724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1019.216637][T16724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1019.291464][T16724] hsr_slave_0: entered promiscuous mode [ 1019.301511][T16724] hsr_slave_1: entered promiscuous mode [ 1019.313584][T16724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1019.321539][T16724] Cannot create hsr debugfs directory [ 1019.330481][ T55] usb 7-1: new high-speed USB device number 48 using dummy_hcd [ 1019.529451][ T55] usb 7-1: Using ep0 maxpacket: 16 [ 1019.546950][ T11] tipc: Left network mode [ 1019.640555][ T55] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1019.664951][ T55] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1019.677772][ T55] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1019.688959][ T55] usb 7-1: Product: syz [ 1019.699092][ T55] usb 7-1: Manufacturer: syz [ 1019.704336][ T55] usb 7-1: SerialNumber: syz [ 1019.744614][ T55] usb 7-1: config 0 descriptor?? [ 1019.779113][ T55] appledisplay 7-1:0.0: Could not find int-in endpoint [ 1020.253481][ T55] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1020.297040][T16756] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 1020.449663][ T5793] Bluetooth: hci4: command tx timeout [ 1020.639989][ T7731] usb 7-1: USB disconnect, device number 48 [ 1021.789481][ T55] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1021.992851][ T55] usb 8-1: Using ep0 maxpacket: 32 [ 1022.002854][ T55] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1022.057275][ T55] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1022.067395][ T55] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1022.090764][ T55] usb 8-1: Product: syz [ 1022.124971][ T55] usb 8-1: Manufacturer: syz [ 1022.161971][ T55] usb 8-1: SerialNumber: syz [ 1022.202516][T16785] 9pnet_fd: Insufficient options for proto=fd [ 1022.404751][ T55] usb 8-1: config 0 descriptor?? [ 1022.529436][ T5793] Bluetooth: hci4: command tx timeout [ 1022.608397][T16771] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1022.914055][ T7731] usb 8-1: USB disconnect, device number 52 [ 1023.079084][T16724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1023.098122][T16724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1023.117647][T16724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1023.794496][T16724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1024.076557][ T11] hsr_slave_0: left promiscuous mode [ 1024.088390][ T11] hsr_slave_1: left promiscuous mode [ 1024.103827][ T11] bridge_slave_1: left allmulticast mode [ 1024.111179][ T11] bridge_slave_1: left promiscuous mode [ 1024.138714][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 1024.166130][ T11] bridge_slave_0: left allmulticast mode [ 1024.172218][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 1024.226229][ T11] veth1_macvtap: left promiscuous mode [ 1024.232138][ T11] veth0_macvtap: left promiscuous mode [ 1024.237963][ T11] veth1_vlan: left promiscuous mode [ 1024.244491][ T11] veth0_vlan: left promiscuous mode [ 1024.620711][ T5793] Bluetooth: hci4: command tx timeout [ 1025.397686][ T11] pimreg (unregistering): left allmulticast mode [ 1025.463523][ T11] pim6reg (unregistering): left allmulticast mode [ 1026.372128][ T968] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1026.572527][ T968] usb 8-1: Using ep0 maxpacket: 16 [ 1026.581482][ T968] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1026.610481][ T968] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1026.630587][ T968] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.638694][ T968] usb 8-1: Product: syz [ 1026.651920][ T968] usb 8-1: Manufacturer: syz [ 1026.656722][ T968] usb 8-1: SerialNumber: syz [ 1026.671481][ T968] usb 8-1: config 0 descriptor?? [ 1026.688470][ T968] appledisplay 8-1:0.0: Could not find int-in endpoint [ 1026.711397][ T968] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1026.819269][ T11] team0 (unregistering): Port device team_slave_1 removed [ 1026.920581][ T11] team0 (unregistering): Port device team_slave_0 removed [ 1026.943933][T16834] erofs: (device nbd7): erofs_read_superblock: cannot find valid erofs superblock [ 1027.004266][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1027.077931][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1027.784077][ T11] bond0 (unregistering): Released all slaves [ 1027.982627][ T968] usb 8-1: USB disconnect, device number 53 [ 1028.072004][T16724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.092349][T16724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1028.204546][ T5904] bridge0: port 1(bridge_slave_0) entered blocking state [ 1028.211788][ T5904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1028.251229][ T5904] bridge0: port 2(bridge_slave_1) entered blocking state [ 1028.258359][ T5904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1028.365317][T16841] 9pnet_fd: Insufficient options for proto=fd [ 1029.252382][ T11] IPVS: stop unused estimator thread 0... [ 1029.455093][T16724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1029.915087][T16724] veth0_vlan: entered promiscuous mode [ 1029.931269][T16724] veth1_vlan: entered promiscuous mode [ 1030.007486][T16724] veth0_macvtap: entered promiscuous mode [ 1030.037606][T16724] veth1_macvtap: entered promiscuous mode [ 1030.101608][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.112605][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.122551][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1030.133192][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.153192][T16724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1030.302594][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.859461][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.884497][T16724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1030.899015][T16724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1030.911931][T16724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1030.923125][T16724] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.936348][T16724] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.945241][T16724] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1030.953995][T16724] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.122468][ T5904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.133400][ T5904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.286503][T16889] 9pnet_fd: Insufficient options for proto=fd [ 1032.925074][ T42] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.961711][ T42] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1033.069421][T14005] usb 7-1: new high-speed USB device number 49 using dummy_hcd [ 1033.157394][T16894] syz_tun: entered allmulticast mode [ 1033.188621][T16894] pimreg: entered allmulticast mode [ 1033.280319][T14005] usb 7-1: Using ep0 maxpacket: 16 [ 1033.288714][T14005] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1033.306929][T14005] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1033.316862][T14005] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1033.328796][T14005] usb 7-1: Product: syz [ 1033.333695][T14005] usb 7-1: Manufacturer: syz [ 1033.339292][T14005] usb 7-1: SerialNumber: syz [ 1033.370721][T14005] usb 7-1: config 0 descriptor?? [ 1033.381402][T14005] appledisplay 7-1:0.0: Could not find int-in endpoint [ 1033.389310][T14005] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1033.646588][T16901] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 1033.980714][ T6233] usb 7-1: USB disconnect, device number 49 [ 1036.094330][T16924] 9pnet_fd: Insufficient options for proto=fd [ 1036.133546][T12976] syz_tun (unregistering): left allmulticast mode [ 1036.724696][T16926] syz_tun: entered allmulticast mode [ 1036.869045][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1036.913371][T16926] pimreg: entered allmulticast mode [ 1036.997274][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.133642][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.315452][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1037.479679][ T5786] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1037.492937][ T5786] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1037.514753][ T5786] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1037.526521][ T5786] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1037.538526][ T5786] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1037.547123][ T5786] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1038.020508][ T6233] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1038.163515][ T12] tipc: Left network mode [ 1038.321208][ T6233] usb 8-1: Using ep0 maxpacket: 16 [ 1038.333340][ T6233] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1038.398366][ T6233] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1038.418518][ T6233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1038.432319][ T6233] usb 8-1: Product: syz [ 1038.437743][ T6233] usb 8-1: Manufacturer: syz [ 1038.509525][ T6233] usb 8-1: SerialNumber: syz [ 1038.675475][ T6233] usb 8-1: config 0 descriptor?? [ 1038.909789][ T6233] appledisplay 8-1:0.0: Could not find int-in endpoint [ 1038.917805][ T6233] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1039.146784][T16937] chnl_net:caif_netlink_parms(): no params data found [ 1039.171578][T16960] erofs: (device nbd7): erofs_read_superblock: cannot find valid erofs superblock [ 1039.405502][ T55] usb 8-1: USB disconnect, device number 54 [ 1039.662909][T16975] 9pnet_fd: Insufficient options for proto=fd [ 1039.678936][ T5786] Bluetooth: hci0: command tx timeout [ 1040.300453][T16937] bridge0: port 1(bridge_slave_0) entered blocking state [ 1040.307726][T16937] bridge0: port 1(bridge_slave_0) entered disabled state [ 1040.339961][T16937] bridge_slave_0: entered allmulticast mode [ 1040.364139][T16937] bridge_slave_0: entered promiscuous mode [ 1040.373312][T16937] bridge0: port 2(bridge_slave_1) entered blocking state [ 1040.383021][T16937] bridge0: port 2(bridge_slave_1) entered disabled state [ 1040.391561][T16937] bridge_slave_1: entered allmulticast mode [ 1040.398723][T16937] bridge_slave_1: entered promiscuous mode [ 1041.513340][T16981] overlayfs: failed to resolve './file1/file0': -2 [ 1041.729829][ T5786] Bluetooth: hci0: command tx timeout [ 1042.083122][T16995] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1042.175582][T16937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1042.256248][T16937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.013406][T16937] team0: Port device team_slave_0 added [ 1043.030370][T16937] team0: Port device team_slave_1 added [ 1043.136974][T16937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.154421][T16937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.213913][T16937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.223632][ T7804] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1043.232643][ T23] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1043.259998][ T12] hsr_slave_0: left promiscuous mode [ 1043.276000][ T12] hsr_slave_1: left promiscuous mode [ 1043.296392][ T12] bridge_slave_1: left allmulticast mode [ 1043.306142][ T12] bridge_slave_1: left promiscuous mode [ 1043.319611][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.337467][ T12] bridge_slave_0: left allmulticast mode [ 1043.347443][ T12] bridge_slave_0: left promiscuous mode [ 1043.360348][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.422870][ T12] veth1_macvtap: left promiscuous mode [ 1043.428508][ T12] veth0_macvtap: left allmulticast mode [ 1043.439443][ T7804] usb 8-1: Using ep0 maxpacket: 32 [ 1043.444780][ T23] usb 6-1: Using ep0 maxpacket: 16 [ 1043.450086][ T12] veth0_macvtap: left promiscuous mode [ 1043.464532][ T7804] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1043.475596][ T23] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1043.487202][ T12] veth1_vlan: left promiscuous mode [ 1043.501937][ T12] veth0_vlan: left promiscuous mode [ 1043.508858][ T23] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1043.527216][ T7804] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1043.537344][ T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1043.545666][ T7804] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1043.574362][ T23] usb 6-1: Product: syz [ 1043.579708][ T7804] usb 8-1: Product: syz [ 1043.583920][ T7804] usb 8-1: Manufacturer: syz [ 1043.599137][ T23] usb 6-1: Manufacturer: syz [ 1043.605636][ T23] usb 6-1: SerialNumber: syz [ 1043.611034][ T7804] usb 8-1: SerialNumber: syz [ 1043.623094][ T23] usb 6-1: config 0 descriptor?? [ 1043.633999][ T7804] usb 8-1: config 0 descriptor?? [ 1043.639928][T17003] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1043.658003][ T23] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1043.671594][ T23] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1043.819513][ T5786] Bluetooth: hci0: command tx timeout [ 1043.983185][T17023] 9pnet_fd: Insufficient options for proto=fd [ 1044.092275][ T23] usb 8-1: USB disconnect, device number 55 [ 1044.100681][T17024] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1044.412581][ T12] pimreg (unregistering): left allmulticast mode [ 1045.078482][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1045.136673][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1045.195856][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1045.271341][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1045.889939][ T5786] Bluetooth: hci0: command tx timeout [ 1045.938786][ T12] bond0 (unregistering): Released all slaves [ 1046.016993][T16937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1046.024290][T16937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1046.052433][T16937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1046.141294][T16937] hsr_slave_0: entered promiscuous mode [ 1046.151955][T16937] hsr_slave_1: entered promiscuous mode [ 1046.158323][T16937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1046.166501][T16937] Cannot create hsr debugfs directory [ 1046.173151][T17004] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1046.201804][T17004] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1046.227061][T17004] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1046.328788][ T9] usb 6-1: USB disconnect, device number 35 [ 1046.728924][T17037] overlayfs: failed to resolve './file1/file0': -2 [ 1049.005296][T17066] 9pnet_fd: Insufficient options for proto=fd [ 1049.909455][T14005] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1049.999739][ T55] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1050.103211][T16937] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1050.125592][T14005] usb 8-1: Using ep0 maxpacket: 32 [ 1050.133727][T16937] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1050.144893][T14005] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1050.167130][T14005] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1050.177228][T16937] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1050.179287][T14005] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1050.202517][ T55] usb 6-1: Using ep0 maxpacket: 16 [ 1050.219377][T14005] usb 8-1: Product: syz [ 1050.222979][T16937] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1050.230963][ T55] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1050.248351][T14005] usb 8-1: Manufacturer: syz [ 1050.264097][T14005] usb 8-1: SerialNumber: syz [ 1050.273206][ T55] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1050.292675][T14005] usb 8-1: config 0 descriptor?? [ 1050.317887][ T55] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.332276][T17072] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 1050.353103][ T55] usb 6-1: Product: syz [ 1050.374177][ T55] usb 6-1: Manufacturer: syz [ 1050.390764][ T55] usb 6-1: SerialNumber: syz [ 1050.419023][ T55] usb 6-1: config 0 descriptor?? [ 1050.438499][ T55] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1050.457883][ T55] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1050.515863][T16937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1050.563504][T16937] 8021q: adding VLAN 0 to HW filter on device team0 [ 1050.598594][ T1131] bridge0: port 1(bridge_slave_0) entered blocking state [ 1050.605878][ T1131] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1050.626877][ T1131] bridge0: port 2(bridge_slave_1) entered blocking state [ 1050.634153][ T1131] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1050.654028][ T9] usb 8-1: USB disconnect, device number 56 [ 1050.706867][T17102] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1050.932654][ T9] usb 6-1: USB disconnect, device number 36 [ 1051.151684][T16937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.755871][T17131] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1051.801264][T17134] overlayfs: failed to resolve './file1/file0': -2 [ 1052.583165][T16937] veth0_vlan: entered promiscuous mode [ 1052.759247][T16937] veth1_vlan: entered promiscuous mode [ 1052.852417][T17155] 9pnet_fd: Insufficient options for proto=fd [ 1054.014255][T16937] veth0_macvtap: entered promiscuous mode [ 1054.095506][T16937] veth1_macvtap: entered promiscuous mode [ 1054.145284][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.188088][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.216592][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.244929][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.270807][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1054.304080][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.329405][T14005] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 1054.332763][T16937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1054.372064][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.396107][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.418056][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.440262][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.459742][ T7804] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1054.465496][T16937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1054.491785][T16937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1054.509638][T14005] usb 5-1: Using ep0 maxpacket: 32 [ 1054.513802][T16937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1054.521352][T14005] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1054.547625][T14005] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1054.559598][T16937] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.574284][T14005] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1054.582937][T16937] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.593101][T14005] usb 5-1: Product: syz [ 1054.597315][T14005] usb 5-1: Manufacturer: syz [ 1054.602899][T16937] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.607126][T14005] usb 5-1: SerialNumber: syz [ 1054.618777][T16937] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1054.622301][T14005] usb 5-1: config 0 descriptor?? [ 1054.646371][ T7804] usb 6-1: Using ep0 maxpacket: 16 [ 1054.652672][T17160] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1054.677191][ T7804] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1054.702191][ T7804] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1054.711821][ T7804] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.740965][ T7804] usb 6-1: Product: syz [ 1054.754039][ T7804] usb 6-1: Manufacturer: syz [ 1054.758697][ T7804] usb 6-1: SerialNumber: syz [ 1054.800651][ T7804] usb 6-1: config 0 descriptor?? [ 1054.818805][ T7804] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1054.830930][ T2115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.844336][ T7804] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1054.860778][ T2115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1054.874115][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.883295][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1054.949573][ T2115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1054.959937][ T7731] usb 5-1: USB disconnect, device number 58 [ 1054.973466][ T2115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1055.101262][T17185] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1055.368265][ T9] usb 6-1: USB disconnect, device number 37 [ 1056.428516][T17208] overlayfs: failed to resolve './file1/file0': -2 [ 1057.360034][T17222] 9pnet_fd: Insufficient options for proto=fd [ 1059.881140][T17253] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1060.039570][ T7731] usb 7-1: new high-speed USB device number 50 using dummy_hcd [ 1060.348576][T17266] 9pnet_fd: Insufficient options for proto=fd [ 1060.389459][ T7731] usb 7-1: Using ep0 maxpacket: 16 [ 1060.408253][ T7731] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1060.620926][ T7731] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1060.776983][ T7731] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1060.964043][ T7731] usb 7-1: Product: syz [ 1060.968265][ T7731] usb 7-1: Manufacturer: syz [ 1061.095783][ T7731] usb 7-1: SerialNumber: syz [ 1061.125034][ T7731] usb 7-1: config 0 descriptor?? [ 1061.505285][ T7731] appledisplay 7-1:0.0: Could not find int-in endpoint [ 1061.540431][ T7731] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1062.592874][T17249] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 1062.735640][T14486] usb 7-1: USB disconnect, device number 50 [ 1064.635495][T17318] 9pnet_fd: Insufficient options for proto=fd [ 1065.872920][T17327] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1066.974006][ T5793] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1066.984198][ T5793] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1066.995347][ T5793] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1067.007361][ T5793] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1067.018920][ T5793] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1067.027770][ T5793] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1067.710336][ T7586] syz_tun (unregistering): left allmulticast mode [ 1067.860557][T17346] 9pnet_fd: Insufficient options for proto=fd [ 1069.063746][ T2968] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.094718][ T5793] Bluetooth: hci1: command tx timeout [ 1069.195521][ T2968] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.371686][ T2968] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.489173][ T2968] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.574977][T17338] chnl_net:caif_netlink_parms(): no params data found [ 1069.756602][T17368] overlayfs: failed to resolve './file1/file0': -2 [ 1070.592531][T17338] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.614847][T17338] bridge0: port 1(bridge_slave_0) entered disabled state [ 1070.630550][T17338] bridge_slave_0: entered allmulticast mode [ 1070.648071][T17338] bridge_slave_0: entered promiscuous mode [ 1070.662294][T17338] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.679447][T17338] bridge0: port 2(bridge_slave_1) entered disabled state [ 1070.697170][T17338] bridge_slave_1: entered allmulticast mode [ 1070.708218][T17338] bridge_slave_1: entered promiscuous mode [ 1070.732669][ T2968] tipc: Left network mode [ 1070.764697][ T9] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1070.885211][T17338] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1070.939475][ T9] usb 7-1: device descriptor read/64, error -71 [ 1071.046483][T17338] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1071.276333][ T5793] Bluetooth: hci1: command tx timeout [ 1071.542175][T17393] 9pnet_fd: Insufficient options for proto=fd [ 1071.949416][ T9] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1072.129035][ T9] usb 7-1: device descriptor read/64, error -71 [ 1072.171660][T17338] team0: Port device team_slave_0 added [ 1072.258449][T17338] team0: Port device team_slave_1 added [ 1072.286906][ T9] usb usb7-port1: attempt power cycle [ 1072.785723][T17338] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1072.792820][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1072.819527][T17338] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1072.830407][ T9] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1072.860155][ T9] usb 7-1: device descriptor read/8, error -71 [ 1072.969815][T17338] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1072.976864][T17338] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.008636][T17406] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1073.029679][T17338] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.169637][ T9] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1073.200790][ T9] usb 7-1: device descriptor read/8, error -71 [ 1073.211537][T17414] overlayfs: failed to resolve './file1/file0': -2 [ 1073.231479][T17338] hsr_slave_0: entered promiscuous mode [ 1073.239063][T17338] hsr_slave_1: entered promiscuous mode [ 1073.255856][T17338] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1073.265928][T17338] Cannot create hsr debugfs directory [ 1073.319598][ T9] usb usb7-port1: unable to enumerate USB device [ 1073.334832][ T5793] Bluetooth: hci1: command tx timeout [ 1073.868195][T17426] 9pnet_fd: Insufficient options for proto=fd [ 1074.712913][ T2968] hsr_slave_0: left promiscuous mode [ 1074.723203][ T2968] hsr_slave_1: left promiscuous mode [ 1074.753230][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1074.778247][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1074.817662][ T2968] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1074.850051][ T2968] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1074.902196][ T2968] bridge_slave_1: left allmulticast mode [ 1074.907889][ T2968] bridge_slave_1: left promiscuous mode [ 1074.949824][ T2968] bridge0: port 2(bridge_slave_1) entered disabled state [ 1074.994611][ T2968] bridge_slave_0: left allmulticast mode [ 1075.011345][ T2968] bridge0: port 1(bridge_slave_0) entered disabled state [ 1075.125285][ T2968] veth1_macvtap: left promiscuous mode [ 1075.149865][ T2968] veth0_macvtap: left allmulticast mode [ 1075.178625][ T2968] veth0_macvtap: left promiscuous mode [ 1075.189482][ T2968] veth1_vlan: left promiscuous mode [ 1075.195083][ T2968] veth0_vlan: left promiscuous mode [ 1075.412096][ T5793] Bluetooth: hci1: command tx timeout [ 1075.728164][ T2968] pimreg (unregistering): left allmulticast mode [ 1077.024372][T17457] overlayfs: failed to resolve './file1/file0': -2 [ 1077.482224][ T2968] team0 (unregistering): Port device team_slave_1 removed [ 1077.547505][ T2968] team0 (unregistering): Port device team_slave_0 removed [ 1077.579552][ T9] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1077.611083][ T2968] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1077.672340][ T2968] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1077.750869][ T9] usb 7-1: device descriptor read/64, error -71 [ 1078.029610][ T9] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1078.196159][ T9] usb 7-1: device descriptor read/64, error -71 [ 1078.326692][ T2968] bond0 (unregistering): Released all slaves [ 1078.327011][ T9] usb usb7-port1: attempt power cycle [ 1078.752801][ T9] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1078.845930][ T9] usb 7-1: device descriptor read/8, error -71 [ 1078.910729][T17474] 9pnet_fd: Insufficient options for proto=fd [ 1079.149956][ T9] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1079.382079][ T9] usb 7-1: device descriptor read/8, error -71 [ 1079.536437][ T9] usb usb7-port1: unable to enumerate USB device [ 1080.402345][T17338] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1080.507244][T17338] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1080.563139][T17338] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1080.602848][T17338] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1080.613519][T17495] overlayfs: overlapping lowerdir path [ 1080.808319][T17338] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1080.869923][T17338] 8021q: adding VLAN 0 to HW filter on device team0 [ 1080.889277][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1080.896530][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1081.088428][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1081.095645][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1081.096070][T17510] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1081.538637][T17338] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1082.519992][T17528] 9pnet_fd: Insufficient options for proto=fd [ 1082.934069][T17338] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1083.650032][ T6233] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 1083.672771][T17549] overlayfs: overlapping lowerdir path [ 1083.830581][ T6233] usb 5-1: device descriptor read/64, error -71 [ 1084.150388][ T6233] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 1084.179477][T17565] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1084.461819][ T6233] usb 5-1: device descriptor read/64, error -71 [ 1084.619876][ T6233] usb usb5-port1: attempt power cycle [ 1084.625921][T17338] veth0_vlan: entered promiscuous mode [ 1084.674198][T17338] veth1_vlan: entered promiscuous mode [ 1084.884190][T17338] veth0_macvtap: entered promiscuous mode [ 1084.897852][T17338] veth1_macvtap: entered promiscuous mode [ 1084.924331][T17577] syz_tun: entered allmulticast mode [ 1084.944300][T17338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.964218][T17338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.976081][T17338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.995897][T17338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.012140][T17338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1085.023115][T17338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.029601][ T6233] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 1085.035079][T17338] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1085.081060][ T6233] usb 5-1: device descriptor read/8, error -71 [ 1085.083347][T17574] syz_tun: left allmulticast mode [ 1085.163589][T17338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.215821][T17338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.240257][T17338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.295359][T17338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.335123][T17338] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1085.359561][ T6233] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 1085.362928][T17338] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1085.411241][ T6233] usb 5-1: device descriptor read/8, error -71 [ 1085.414544][T17338] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1085.521980][T17338] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.567459][T17338] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.587061][T17338] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.602118][T17338] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.684225][ T6233] usb usb5-port1: unable to enumerate USB device [ 1085.860688][T17592] 9pnet_fd: Insufficient options for proto=fd [ 1086.410777][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1086.439939][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1086.978707][T17598] overlayfs: overlapping lowerdir path [ 1086.996626][T17197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.004627][T17197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.639607][ T5833] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1087.889770][ T5833] usb 8-1: Using ep0 maxpacket: 16 [ 1087.924677][ T5833] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1088.070962][ T5833] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1088.136312][ T5833] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1088.145032][ T5833] usb 8-1: Product: syz [ 1088.149236][ T5833] usb 8-1: Manufacturer: syz [ 1088.155208][ T5833] usb 8-1: SerialNumber: syz [ 1088.200476][ T5833] usb 8-1: config 0 descriptor?? [ 1088.232551][ T5833] appledisplay 8-1:0.0: Could not find int-in endpoint [ 1088.255044][ T5833] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1088.672685][T17613] erofs: (device nbd7): erofs_read_superblock: cannot find valid erofs superblock [ 1088.886795][ T55] usb 8-1: USB disconnect, device number 57 [ 1089.070051][ T5833] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 1089.251731][T17640] 9pnet_fd: Insufficient options for proto=fd [ 1089.264950][ T5833] usb 5-1: device descriptor read/64, error -71 [ 1089.569841][ T5833] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 1089.865504][ T5833] usb 5-1: device descriptor read/64, error -71 [ 1089.977599][T17649] syz_tun: entered allmulticast mode [ 1089.985635][T17648] syz_tun: left allmulticast mode [ 1089.985825][T17645] overlayfs: overlapping lowerdir path [ 1090.031161][ T5833] usb usb5-port1: attempt power cycle [ 1090.489529][ T5833] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 1090.520047][ T5833] usb 5-1: device descriptor read/8, error -71 [ 1090.839478][ T5833] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 1090.923885][ T5833] usb 5-1: device descriptor read/8, error -71 [ 1091.080930][ T5833] usb usb5-port1: unable to enumerate USB device [ 1091.374312][T17666] syz_tun: entered allmulticast mode [ 1091.386253][T17666] pimreg: entered allmulticast mode [ 1091.396857][T17665] syz_tun: left allmulticast mode [ 1091.463842][T17670] syz_tun: entered allmulticast mode [ 1092.511943][T17686] 9pnet_fd: Insufficient options for proto=fd [ 1092.822247][T17688] syz_tun: entered allmulticast mode [ 1092.836556][T17687] syz_tun: left allmulticast mode [ 1092.859607][ T5833] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1093.069909][T17695] overlayfs: overlapping lowerdir path [ 1093.139603][ T5833] usb 7-1: Using ep0 maxpacket: 16 [ 1093.179445][ T5833] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1093.201538][ T5833] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1093.215394][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.228398][ T5833] usb 7-1: Product: syz [ 1093.236097][ T5833] usb 7-1: Manufacturer: syz [ 1093.244123][ T5833] usb 7-1: SerialNumber: syz [ 1093.298212][ T5833] usb 7-1: config 0 descriptor?? [ 1093.332567][ T5833] appledisplay 7-1:0.0: Could not find int-in endpoint [ 1093.352096][ T5833] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1093.740408][T17703] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 1093.921461][ T5833] usb 7-1: USB disconnect, device number 59 [ 1094.058089][T17709] syz_tun: entered allmulticast mode [ 1094.070666][T17709] pimreg: entered allmulticast mode [ 1094.080111][T17708] syz_tun: left allmulticast mode [ 1095.740036][ T5833] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1095.887089][T17725] 9pnet_fd: Insufficient options for proto=fd [ 1095.920168][ T5833] usb 7-1: device descriptor read/64, error -71 [ 1096.252934][ T5833] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1096.549496][ T5833] usb 7-1: device descriptor read/64, error -71 [ 1096.669903][ T5833] usb usb7-port1: attempt power cycle [ 1097.082053][ T5833] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1097.122205][ T5833] usb 7-1: device descriptor read/8, error -71 [ 1097.389468][ T5833] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1097.422660][ T5833] usb 7-1: device descriptor read/8, error -71 [ 1097.543710][ T5833] usb usb7-port1: unable to enumerate USB device [ 1098.269175][T17733] overlayfs: overlapping lowerdir path [ 1098.611445][T17738] 9pnet_fd: Insufficient options for proto=fd [ 1100.019688][ T6233] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1100.240690][ T6233] usb 8-1: Using ep0 maxpacket: 16 [ 1100.251125][ T6233] usb 8-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1100.366237][ T6233] usb 8-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1100.730355][ T6233] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.749579][ T6233] usb 8-1: Product: syz [ 1100.753890][ T6233] usb 8-1: Manufacturer: syz [ 1100.759000][ T6233] usb 8-1: SerialNumber: syz [ 1100.785288][ T6233] usb 8-1: config 0 descriptor?? [ 1100.802989][ T6233] appledisplay 8-1:0.0: Could not find int-in endpoint [ 1100.829853][ T6233] usbhid 8-1:0.0: couldn't find an input interrupt endpoint [ 1101.070535][T17760] erofs: (device nbd7): erofs_read_superblock: cannot find valid erofs superblock [ 1101.259397][ T6233] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1101.283975][ T27] usb 8-1: USB disconnect, device number 58 [ 1101.419460][ T6233] usb 7-1: device descriptor read/64, error -71 [ 1101.699492][ T6233] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1102.374342][ T6233] usb 7-1: device descriptor read/64, error -71 [ 1102.579829][ T6233] usb usb7-port1: attempt power cycle [ 1102.709563][T17776] 9pnet_fd: Insufficient options for proto=fd [ 1103.629597][ T6233] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1103.753307][ T6233] usb 7-1: device descriptor read/8, error -71 [ 1104.059560][ T6233] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1104.353775][ T6233] usb 7-1: device descriptor read/8, error -71 [ 1104.684430][ T6233] usb usb7-port1: unable to enumerate USB device [ 1106.667924][T17806] comedi comedi3: Buffer allocation failed [ 1106.823531][ T27] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1107.156577][T17818] 9pnet_fd: Insufficient options for proto=fd [ 1107.880864][ T27] usb 6-1: Using ep0 maxpacket: 16 [ 1107.925272][ T27] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1107.951590][ T6233] usb 5-1: new high-speed USB device number 67 using dummy_hcd [ 1107.954950][ T27] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1107.969243][ T27] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1107.978335][ T27] usb 6-1: Product: syz [ 1107.986834][ T27] usb 6-1: Manufacturer: syz [ 1107.991970][ T27] usb 6-1: SerialNumber: syz [ 1108.030675][ T27] usb 6-1: config 0 descriptor?? [ 1108.055933][ T27] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1108.071471][ T27] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1108.233954][ T6233] usb 5-1: Using ep0 maxpacket: 32 [ 1108.304206][ T6233] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1108.320505][ T6233] usb 5-1: config 0 has no interfaces? [ 1108.337819][T17808] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1108.340239][ T6233] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1108.386700][ T6233] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1108.471204][ T6233] usb 5-1: Product: syz [ 1108.479816][ T6233] usb 5-1: Manufacturer: syz [ 1108.484490][ T6233] usb 5-1: SerialNumber: syz [ 1108.587155][ T27] usb 6-1: USB disconnect, device number 38 [ 1108.855580][ T6233] usb 5-1: config 0 descriptor?? [ 1109.295714][ T6233] usb 5-1: USB disconnect, device number 67 [ 1109.350937][T17837] syz_tun: entered allmulticast mode [ 1109.358317][T17836] syz_tun: left allmulticast mode [ 1110.217239][T17847] 9pnet_fd: Insufficient options for proto=fd [ 1110.931539][T17850] netlink: 16 bytes leftover after parsing attributes in process `syz.7.3077'. [ 1111.808800][T17862] syz_tun: entered allmulticast mode [ 1112.018821][T17859] syz_tun: left allmulticast mode [ 1112.489926][T17878] 9pnet_fd: Insufficient options for proto=fd [ 1113.222533][ T6233] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1113.899380][ T6233] usb 6-1: Using ep0 maxpacket: 16 [ 1113.907146][ T6233] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1113.921794][ T6233] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1113.931694][ T6233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.939834][ T6233] usb 6-1: Product: syz [ 1113.944088][ T6233] usb 6-1: Manufacturer: syz [ 1113.948868][ T6233] usb 6-1: SerialNumber: syz [ 1113.956266][ T6233] usb 6-1: config 0 descriptor?? [ 1113.959590][ T27] usb 8-1: new high-speed USB device number 59 using dummy_hcd [ 1113.964579][ T6233] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1113.976720][ T6233] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1114.229401][ T27] usb 8-1: Using ep0 maxpacket: 32 [ 1114.239220][ T27] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.255951][T17899] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1114.265288][ T27] usb 8-1: config 0 has no interfaces? [ 1114.306455][ T27] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1114.339989][ T27] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1114.360934][ T27] usb 8-1: Product: syz [ 1114.362347][T17902] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1114.365240][ T27] usb 8-1: Manufacturer: syz [ 1114.409608][ T27] usb 8-1: SerialNumber: syz [ 1114.450882][ T27] usb 8-1: config 0 descriptor?? [ 1114.506157][ T6233] usb 6-1: USB disconnect, device number 39 [ 1114.820548][ T6233] usb 8-1: USB disconnect, device number 59 [ 1115.141203][T17912] Trying to write to read-only block-device nullb0 [ 1116.281027][T17933] 9pnet_fd: Insufficient options for proto=fd [ 1116.294104][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.514815][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.055773][T17941] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1117.780989][T17823] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1117.849613][ T27] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 1118.047217][T17954] tipc: Started in network mode [ 1118.060338][T17954] tipc: Node identity 36a360607599, cluster identity 4711 [ 1118.074212][T17954] tipc: Enabled bearer , priority 0 [ 1118.086068][T17954] tipc: Resetting bearer [ 1118.103812][T17953] tipc: Disabling bearer [ 1118.112873][T17823] usb 6-1: Using ep0 maxpacket: 16 [ 1118.120831][T17823] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1118.137900][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 1118.150825][ T27] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.172142][T17823] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1118.185079][ T27] usb 5-1: config 0 has no interfaces? [ 1118.191109][T17823] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.218313][ T27] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1118.242729][T17823] usb 6-1: Product: syz [ 1118.247013][T17823] usb 6-1: Manufacturer: syz [ 1118.263364][ T27] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1118.272638][T17823] usb 6-1: SerialNumber: syz [ 1118.285276][T17823] usb 6-1: config 0 descriptor?? [ 1118.290391][ T27] usb 5-1: Product: syz [ 1118.294567][ T27] usb 5-1: Manufacturer: syz [ 1118.299176][ T27] usb 5-1: SerialNumber: syz [ 1118.318432][T17823] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1118.342454][T17823] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1118.361712][ T27] usb 5-1: config 0 descriptor?? [ 1118.693585][T17823] usb 5-1: USB disconnect, device number 68 [ 1118.912457][T17948] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1118.953540][ T6233] usb 6-1: USB disconnect, device number 40 [ 1119.495805][T17975] 9pnet_fd: Insufficient options for proto=fd [ 1119.952206][T17981] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3115'. [ 1119.961452][T17981] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3115'. [ 1121.239530][T17988] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1122.252597][T18002] overlayfs: missing 'lowerdir' [ 1122.692064][T18009] 9pnet_fd: Insufficient options for proto=fd [ 1123.489509][ T5793] Bluetooth: hci3: command 0x0406 tx timeout [ 1123.689605][ T7804] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1123.992489][ T6233] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1124.189393][ T7804] usb 7-1: Using ep0 maxpacket: 16 [ 1124.206215][ T7804] usb 7-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1124.209809][ T6233] usb 6-1: Using ep0 maxpacket: 32 [ 1124.236747][ T7804] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1124.239039][ T6233] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.385818][ T6233] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1124.385918][ T7804] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.401079][ T6233] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1124.418647][ T6233] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1124.427795][ T6233] usb 6-1: Product: syz [ 1124.432043][ T7804] usb 7-1: Product: syz [ 1124.432093][ T7804] usb 7-1: Manufacturer: syz [ 1124.432107][ T7804] usb 7-1: SerialNumber: syz [ 1124.450672][ T7804] usb 7-1: config 0 descriptor?? [ 1124.469954][ T7804] appledisplay 7-1:0.0: Could not find int-in endpoint [ 1124.478200][ T6233] usb 6-1: Manufacturer: syz [ 1124.486589][ T6233] usb 6-1: SerialNumber: syz [ 1124.503225][ T7804] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1124.510292][ T6233] usb 6-1: config 0 descriptor?? [ 1124.756941][T18019] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 1124.784125][ T6233] usb 6-1: USB disconnect, device number 41 [ 1124.958814][ T7804] usb 7-1: USB disconnect, device number 68 [ 1125.899869][T18032] overlayfs: missing 'lowerdir' [ 1126.479747][T18041] 9pnet_fd: Insufficient options for proto=fd [ 1129.789565][ T7804] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 1130.080391][ T7804] usb 5-1: Using ep0 maxpacket: 32 [ 1130.105992][ T7804] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1130.135440][T18080] overlayfs: missing 'lowerdir' [ 1130.140609][ T7804] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1130.168313][ T7804] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1130.189406][ T7804] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1130.197622][ T7804] usb 5-1: Product: syz [ 1130.205348][ T7804] usb 5-1: Manufacturer: syz [ 1130.212187][ T7804] usb 5-1: SerialNumber: syz [ 1130.222941][ T7804] usb 5-1: config 0 descriptor?? [ 1130.467070][T17823] usb 5-1: USB disconnect, device number 69 [ 1130.529612][ T5833] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1130.719601][ T5833] usb 6-1: Using ep0 maxpacket: 16 [ 1130.732022][ T5833] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1130.749940][ T5833] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1130.764080][ T5833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1130.773830][ T5833] usb 6-1: Product: syz [ 1130.783027][ T5833] usb 6-1: Manufacturer: syz [ 1130.787759][ T5833] usb 6-1: SerialNumber: syz [ 1130.800744][ T5833] usb 6-1: config 0 descriptor?? [ 1130.807683][ T5833] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1130.815899][ T5833] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1130.906404][T18088] 9pnet_fd: Insufficient options for proto=fd [ 1131.587330][T18089] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1132.137094][ T7731] usb 6-1: USB disconnect, device number 42 [ 1132.289052][T18102] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1132.843608][T18104] loop7: detected capacity change from 0 to 8192 [ 1132.868043][T18104] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1133.256537][T18110] overlayfs: missing 'lowerdir' [ 1133.925443][T18124] 9pnet_fd: Insufficient options for proto=fd [ 1134.454842][T18132] loop7: detected capacity change from 0 to 512 [ 1134.756444][ T5866] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1134.967444][T18132] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3160: casefold flag without casefold feature [ 1134.981228][ T5866] usb 6-1: Using ep0 maxpacket: 32 [ 1134.992786][T18132] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3160: couldn't read orphan inode 15 (err -117) [ 1135.034110][T18132] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.174624][T18137] loop6: detected capacity change from 0 to 32768 [ 1135.197954][ T5866] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.208542][ T5866] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1135.250724][ T5866] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1135.264485][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1135.276709][ T5866] usb 6-1: Product: syz [ 1135.287015][ T5866] usb 6-1: Manufacturer: syz [ 1135.303754][ T5866] usb 6-1: SerialNumber: syz [ 1135.350469][ T5866] usb 6-1: config 0 descriptor?? [ 1135.703042][ T5866] usb 6-1: USB disconnect, device number 43 [ 1135.879022][T17338] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.970468][T17823] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 1136.012975][T18144] overlayfs: missing 'lowerdir' [ 1136.159672][T17823] usb 5-1: Using ep0 maxpacket: 16 [ 1136.184615][T17823] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1136.212117][T17823] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1136.225299][T17823] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.243765][T17823] usb 5-1: Product: syz [ 1136.253928][T17823] usb 5-1: Manufacturer: syz [ 1136.258570][T17823] usb 5-1: SerialNumber: syz [ 1136.350257][T17823] usb 5-1: config 0 descriptor?? [ 1136.376439][T17823] appledisplay 5-1:0.0: Could not find int-in endpoint [ 1136.415527][T17823] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1136.963899][T18154] erofs: (device nbd4): erofs_read_superblock: cannot find valid erofs superblock [ 1137.264907][T18158] 9pnet_fd: Insufficient options for proto=fd [ 1137.833699][ T7804] usb 5-1: USB disconnect, device number 70 [ 1138.696403][T18177] overlayfs: missing 'lowerdir' [ 1138.929499][ T5793] Bluetooth: hci4: command 0x0406 tx timeout [ 1139.179696][ T7804] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1139.399579][ T7804] usb 8-1: Using ep0 maxpacket: 32 [ 1139.439420][ T7804] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1139.551817][ T7804] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1139.625511][ T7804] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1139.801794][ T7804] usb 8-1: Product: syz [ 1139.806077][ T7804] usb 8-1: Manufacturer: syz [ 1139.813282][ T7804] usb 8-1: SerialNumber: syz [ 1139.852431][ T7804] usb 8-1: config 0 descriptor?? [ 1140.439229][ T7804] usb 8-1: USB disconnect, device number 60 [ 1141.072397][T18194] 9pnet_fd: Insufficient options for proto=fd [ 1141.818200][T18195] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1142.276044][T18197] 0: reclassify loop, rule prio 0, protocol 800 [ 1142.310241][T18196] 0: reclassify loop, rule prio 0, protocol 800 [ 1142.399839][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1142.530363][ T6233] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1142.629429][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1143.059401][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1143.299712][T18207] comedi comedi3: Buffer allocation failed [ 1143.413387][ T6233] usb 6-1: Using ep0 maxpacket: 16 [ 1143.455808][ T6233] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1143.552883][ T6233] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1143.619446][ T6233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.640287][ T6233] usb 6-1: Product: syz [ 1143.649822][ T6233] usb 6-1: Manufacturer: syz [ 1143.654442][ T6233] usb 6-1: SerialNumber: syz [ 1143.674037][ T6233] usb 6-1: config 0 descriptor?? [ 1143.681941][ T6233] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1143.699304][ T6233] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1143.969417][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1143.997359][T18218] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1144.759569][T18225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3186'. [ 1145.420515][T18227] 9pnet_fd: Insufficient options for proto=fd [ 1145.729421][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1145.772335][ T5866] usb 6-1: USB disconnect, device number 44 [ 1145.854781][T18230] 0: reclassify loop, rule prio 0, protocol 800 [ 1147.458267][ T7731] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1147.527537][T18247] 0: reclassify loop, rule prio 0, protocol 800 [ 1147.729806][ T6233] 0: reclassify loop, rule prio 0, protocol 800 [ 1147.879529][ T7731] usb 8-1: Using ep0 maxpacket: 32 [ 1147.932623][ T7731] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1147.996565][ T7731] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1148.032891][ T7731] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1148.056478][ T7731] usb 8-1: Product: syz [ 1148.074701][ T7731] usb 8-1: Manufacturer: syz [ 1148.355840][ T7731] usb 8-1: SerialNumber: syz [ 1148.560173][ T7731] usb 8-1: config 0 descriptor?? [ 1148.609593][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1148.765116][ T55] usb 8-1: USB disconnect, device number 61 [ 1148.878812][T18260] loop5: detected capacity change from 0 to 64 [ 1149.137450][T18266] overlayfs: missing 'lowerdir' [ 1149.169383][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1149.399492][ T7731] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1149.609460][ T7731] usb 6-1: Using ep0 maxpacket: 16 [ 1149.659505][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1149.762231][ T7731] usb 6-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 1149.977446][ T7731] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 1149.989893][ T7731] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.999219][ T7731] usb 6-1: Product: syz [ 1150.004003][ T7731] usb 6-1: Manufacturer: syz [ 1150.009640][ T7731] usb 6-1: SerialNumber: syz [ 1150.018186][ T7731] usb 6-1: config 0 descriptor?? [ 1150.028133][ T7731] appledisplay 6-1:0.0: Could not find int-in endpoint [ 1150.037158][ T7731] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1150.470850][T18278] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1150.675755][ T7731] usb 6-1: USB disconnect, device number 45 [ 1150.998356][T18289] loop4: detected capacity change from 0 to 512 [ 1151.025241][ T55] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1151.050827][T18289] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.3208: casefold flag without casefold feature [ 1151.068138][T18290] loop7: detected capacity change from 0 to 4096 [ 1151.089827][T18290] ntfs3: loop7: Different NTFS sector size (2048) and media sector size (512). [ 1151.093527][T18289] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3208: couldn't read orphan inode 15 (err -117) [ 1151.124030][T18289] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1151.209758][ T55] usb 7-1: Using ep0 maxpacket: 32 [ 1151.235962][ T55] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1151.251069][T18290] ntfs3: loop7: Failed to initialize $Extend/$ObjId. [ 1151.278811][ T55] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1151.300747][ T55] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1151.321320][ T55] usb 7-1: Product: syz [ 1151.325537][ T55] usb 7-1: Manufacturer: syz [ 1151.339323][ T55] usb 7-1: SerialNumber: syz [ 1151.354902][ T55] usb 7-1: config 0 descriptor?? [ 1151.535452][T18298] loop7: detected capacity change from 0 to 64 [ 1151.569078][T18299] erofs: (device nbd5): erofs_read_superblock: cannot find valid erofs superblock [ 1151.598949][ T55] usb 7-1: USB disconnect, device number 69 [ 1151.947117][T18307] tipc: Started in network mode [ 1151.952623][T18307] tipc: Node identity 9635d2c47591, cluster identity 4711 [ 1151.960384][T18307] tipc: Enabled bearer , priority 0 [ 1151.970898][T18307] tipc: Resetting bearer [ 1151.978846][T18306] tipc: Disabling bearer [ 1152.051323][T16724] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1152.539978][T18316] 9pnet_fd: Insufficient options for proto=fd [ 1153.680721][T18326] loop7: detected capacity change from 0 to 64 [ 1153.730478][T18314] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present [ 1153.935187][ T5786] Bluetooth: hci4: unexpected event 0x14 length: 20 > 6 [ 1154.240140][T18338] erofs: (device nbd6): erofs_read_superblock: cannot find valid erofs superblock [ 1154.699784][T18345] 9pnet_fd: Insufficient options for proto=fd [ 1154.860859][ T7731] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 1155.173066][ T7731] usb 5-1: Using ep0 maxpacket: 32 [ 1155.238850][ T7731] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1155.276990][ T7731] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1155.345860][ T7731] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1155.369342][ T7731] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1155.398705][ T7731] usb 5-1: Product: syz [ 1155.411193][ T7731] usb 5-1: Manufacturer: syz [ 1155.415846][ T7731] usb 5-1: SerialNumber: syz [ 1155.550333][ T7731] usb 5-1: config 0 descriptor?? [ 1155.693294][T18355] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3229'. [ 1155.979486][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1157.275065][ T55] usb 5-1: USB disconnect, device number 71 [ 1157.413667][ T7731] 0: reclassify loop, rule prio 0, protocol 800 [ 1157.708037][T18362] loop7: detected capacity change from 0 to 64 [ 1157.892760][ T7731] 0: reclassify loop, rule prio 0, protocol 800 [ 1157.998386][T18372] overlayfs: missing 'lowerdir' [ 1158.199649][T17823] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1158.238466][T18381] erofs: (device nbd7): erofs_read_superblock: cannot find valid erofs superblock [ 1158.244626][T18383] loop5: detected capacity change from 0 to 16 [ 1158.288498][T18383] erofs: (device loop5): mounted with root inode @ nid 36. [ 1158.314388][T18383] erofs: (device loop5): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1158.343001][T18383] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -21 in[56, 4040] out[1851] [ 1158.362567][T18383] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1158.409482][T17823] usb 7-1: Using ep0 maxpacket: 32 [ 1158.438149][T17823] usb 7-1: config 0 has no interfaces? [ 1158.480463][T17823] usb 7-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 1158.505583][T17823] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.514428][T17823] usb 7-1: Product: syz [ 1158.518634][T17823] usb 7-1: Manufacturer: syz [ 1158.524601][T17823] usb 7-1: SerialNumber: syz [ 1158.538738][T18389] fuse: Bad value for 'fd' [ 1158.540851][T17823] usb 7-1: config 0 descriptor?? [ 1158.621804][T18390] 9pnet_fd: Insufficient options for proto=fd [ 1158.907217][T17823] usb 7-1: USB disconnect, device number 70 [ 1159.283723][T18392] loop7: detected capacity change from 0 to 64 [ 1159.580824][T18401] overlayfs: missing 'workdir' [ 1159.882035][T18407] loop6: detected capacity change from 0 to 32768 [ 1159.960040][T18407] JBD2: Ignoring recovery information on journal [ 1160.038152][T18407] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode. [ 1160.187767][T16937] ocfs2: Unmounting device (7,6) on (node local) [ 1160.489735][ T7731] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1160.715590][ T7731] usb 8-1: device descriptor read/64, error -71 [ 1160.946167][T18430] loop6: detected capacity change from 0 to 64 [ 1161.009597][ T7731] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1161.125059][T18435] overlayfs: missing 'workdir' [ 1161.189613][ T7731] usb 8-1: device descriptor read/64, error -71 [ 1161.319802][ T7731] usb usb8-port1: attempt power cycle [ 1161.579892][T17823] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1161.779683][T17823] usb 7-1: Using ep0 maxpacket: 32 [ 1161.832422][T17823] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 1161.886596][T17823] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 1161.972382][T17823] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1162.038681][T17823] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1162.131029][T17823] usb 7-1: Product: syz [ 1162.183372][T17823] usb 7-1: Manufacturer: syz [ 1162.225079][T17823] usb 7-1: SerialNumber: syz [ 1162.232519][T17823] usb 7-1: config 0 descriptor?? [ 1162.302242][ T7731] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1162.344459][ T7731] usb 8-1: device descriptor read/8, error -71 [ 1162.380566][T14486] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 1162.441688][T18464] overlayfs: missing 'workdir' [ 1162.448287][T17823] usb 7-1: USB disconnect, device number 71 [ 1162.569367][T14486] usb 5-1: Using ep0 maxpacket: 8 [ 1162.575888][T14486] usb 5-1: too many endpoints for config 0 interface 0 altsetting 254: 242, using maximum allowed: 30 [ 1162.586964][T14486] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 1162.598341][T14486] usb 5-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1162.608449][T14486] usb 5-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 242 [ 1162.621751][ T7731] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1162.629458][T14486] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1162.636092][T14486] usb 5-1: New USB device found, idVendor=045e, idProduct=00f9, bcdDevice= 0.00 [ 1162.650210][T14486] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.660223][T14486] usb 5-1: config 0 descriptor?? [ 1162.680038][ T7731] usb 8-1: device descriptor read/8, error -71 [ 1162.800660][ T7731] usb usb8-port1: unable to enumerate USB device [ 1163.079357][T14486] microsoft 0003:045E:00F9.0006: hidraw0: USB HID v0.03 Device [HID 045e:00f9] on usb-dummy_hcd.4-1/input0 [ 1163.095008][T14486] microsoft 0003:045E:00F9.0006: no inputs found [ 1163.102817][T14486] microsoft 0003:045E:00F9.0006: could not initialize ff, continuing anyway [ 1163.212589][T18467] loop7: detected capacity change from 0 to 16 [ 1163.249776][T18467] erofs: (device loop7): mounted with root inode @ nid 36. [ 1163.281466][ T7804] usb 5-1: USB disconnect, device number 72 [ 1163.313654][T18467] erofs: (device loop7): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1163.357932][T18467] erofs: (device loop7): z_erofs_lz4_decompress_mem: failed to decompress -21 in[56, 4040] out[1851] [ 1163.363039][T18471] loop6: detected capacity change from 0 to 2048 [ 1163.369316][T18467] erofs: (device loop7): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1163.382925][T18471] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=18576, location=18576 [ 1163.457163][T18471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1164.452914][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1166.630925][T18497] loop4: detected capacity change from 0 to 16 [ 1166.651579][T18497] erofs: (device loop4): mounted with root inode @ nid 36. [ 1166.700688][T18497] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1166.744587][T18497] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -21 in[56, 4040] out[1851] [ 1166.779540][T18497] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1166.851586][ T7731] 0: reclassify loop, rule prio 0, protocol 800 [ 1167.092688][T18514] overlayfs: failed to clone upperpath [ 1168.284779][T18530] loop6: detected capacity change from 0 to 256 [ 1168.338875][T18530] FAT-fs (loop6): Directory bread(block 64) failed [ 1168.351049][T18530] FAT-fs (loop6): Directory bread(block 65) failed [ 1168.358397][T18530] FAT-fs (loop6): Directory bread(block 66) failed [ 1168.367806][T18530] FAT-fs (loop6): Directory bread(block 67) failed [ 1168.377976][T18530] FAT-fs (loop6): Directory bread(block 68) failed [ 1168.385244][T18530] FAT-fs (loop6): Directory bread(block 69) failed [ 1168.393136][T18530] FAT-fs (loop6): Directory bread(block 70) failed [ 1168.424958][T18530] FAT-fs (loop6): Directory bread(block 71) failed [ 1168.446157][T18530] FAT-fs (loop6): Directory bread(block 72) failed [ 1168.470382][T18530] FAT-fs (loop6): Directory bread(block 73) failed [ 1168.636233][T18540] overlayfs: failed to clone upperpath [ 1168.671977][T18542] loop6: detected capacity change from 0 to 16 [ 1168.690488][T18542] erofs: (device loop6): mounted with root inode @ nid 36. [ 1168.732020][T18542] erofs: (device loop6): z_erofs_extent_lookback: bogus lookback distance 1388 @ lcn 42 of nid 36 [ 1168.764615][T18542] erofs: (device loop6): z_erofs_lz4_decompress_mem: failed to decompress -21 in[56, 4040] out[1851] [ 1168.789853][T18542] erofs: (device loop6): z_erofs_read_folio: read error -117 @ 43 of nid 36 [ 1170.049572][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1170.091321][T18570] overlayfs: failed to clone upperpath [ 1170.174163][T18573] netlink: 'syz.5.3315': attribute type 15 has an invalid length. [ 1170.199431][T18573] netlink: 723 bytes leftover after parsing attributes in process `syz.5.3315'. [ 1172.049185][T18596] overlayfs: failed to clone upperpath [ 1173.830773][T18628] overlayfs: failed to clone upperpath [ 1174.482506][T18648] netlink: 'syz.5.3346': attribute type 4 has an invalid length. [ 1174.536282][T18648] netlink: 'syz.5.3346': attribute type 4 has an invalid length. [ 1175.230656][T18652] fuse: Bad value for 'fd' [ 1175.367738][T18658] overlayfs: failed to clone upperpath [ 1176.508120][T14486] 0: reclassify loop, rule prio 0, protocol 800 [ 1176.594757][T18678] 0: reclassify loop, rule prio 0, protocol 800 [ 1176.598453][T18682] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3360'. [ 1176.742984][T18690] overlayfs: failed to clone upperpath [ 1177.089721][ T7731] 0: reclassify loop, rule prio 0, protocol 800 [ 1177.100922][ T48] 0: reclassify loop, rule prio 0, protocol 800 [ 1177.734553][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.741176][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1178.507899][T18717] overlayfs: failed to clone upperpath [ 1178.706061][T18730] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3380'. [ 1178.798417][T18736] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1179.855872][T18757] overlayfs: failed to clone upperpath [ 1181.349201][T18782] overlayfs: failed to clone upperpath [ 1181.775406][T18800] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3406'. [ 1181.887774][T18805] overlayfs: failed to clone upperpath [ 1182.007058][T18807] IPv6: NLM_F_CREATE should be specified when creating new route [ 1182.446766][ T2115] 0: reclassify loop, rule prio 0, protocol 800 [ 1182.822122][T18828] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3418'. [ 1182.870362][ T7731] 0: reclassify loop, rule prio 0, protocol 800 [ 1182.876836][ T7731] 0: reclassify loop, rule prio 0, protocol 800 [ 1183.014995][T18830] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.392844][T18830] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1183.702033][T18830] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1184.757176][T18830] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1185.114583][T18830] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.143815][T18830] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.218476][T18872] 9pnet_fd: Insufficient options for proto=fd [ 1185.776715][T18830] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1185.882423][T18830] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1187.477116][T18911] 9pnet_fd: Insufficient options for proto=fd [ 1188.119186][ T42] 0: reclassify loop, rule prio 0, protocol 800 [ 1189.624066][T18945] 9pnet_fd: Insufficient options for proto=fd [ 1190.168693][ T5793] Bluetooth: hci1: command 0x0406 tx timeout [ 1191.826139][T18984] 9pnet_fd: Insufficient options for proto=fd [ 1192.482550][ T9] 0: reclassify loop, rule prio 0, protocol 800 [ 1193.731626][ T48] 0: reclassify loop, rule prio 0, protocol 800 [ 1194.592914][T19020] 9pnet_fd: Insufficient options for proto=fd [ 1195.158369][T19032] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1195.167425][T19032] bridge2: entered promiscuous mode [ 1195.178799][T19032] CIFS: Unable to determine destination address [ 1196.725680][T19055] 9pnet_fd: Insufficient options for proto=fd [ 1197.569562][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1198.210419][ C0] 0: reclassify loop, rule prio 0, protocol 800 [ 1198.236259][T17197] 0: reclassify loop, rule prio 0, protocol 800 [ 1199.542717][T19106] 9pnet_fd: Insufficient options for proto=fd [ 1199.624137][ T5905] 0: reclassify loop, rule prio 0, protocol 800 [ 1200.985819][T19140] 9pnet_fd: Insufficient options for proto=fd [ 1203.165233][T19182] 9pnet_fd: Insufficient options for proto=fd [ 1203.819963][ T136] 0: reclassify loop, rule prio 0, protocol 800 [ 1205.250080][ T1131] 0: reclassify loop, rule prio 0, protocol 800 [ 1205.346286][T19215] 9pnet_fd: Insufficient options for proto=fd [ 1207.839748][T19248] 9pnet_fd: Insufficient options for proto=fd [ 1209.039127][T19274] 9pnet_fd: Insufficient options for proto=fd [ 1209.628447][ T5905] 0: reclassify loop, rule prio 0, protocol 800 [ 1210.429460][ T1131] 0: reclassify loop, rule prio 0, protocol 800 [ 1211.645687][T19317] 9pnet_fd: Insufficient options for proto=fd [ 1214.180688][T19357] 9pnet_fd: Insufficient options for proto=fd [ 1214.849668][ T48] 0: reclassify loop, rule prio 0, protocol 800 [ 1216.130185][ T2115] 0: reclassify loop, rule prio 0, protocol 800 [ 1216.194111][T19382] 0: reclassify loop, rule prio 0, protocol 800 [ 1217.259079][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 1217.259092][ T28] audit: type=1326 audit(1756641166.739:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1217.455749][ T28] audit: type=1326 audit(1756641166.789:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7811f85ba7 code=0x7ffc0000 [ 1217.496577][ T28] audit: type=1326 audit(1756641166.789:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f7811f2adb9 code=0x7ffc0000 [ 1217.544238][ T28] audit: type=1326 audit(1756641166.789:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1217.597909][ T28] audit: type=1326 audit(1756641166.789:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1217.629626][ T28] audit: type=1326 audit(1756641166.789:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=59 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1217.706784][ T28] audit: type=1326 audit(1756641166.789:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1217.937060][ T28] audit: type=1326 audit(1756641166.789:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1217.960133][ T28] audit: type=1326 audit(1756641166.789:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1217.988902][ T28] audit: type=1326 audit(1756641166.789:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19393 comm="syz.5.3617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1219.955684][T19437] netlink: 7 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1219.988795][T19437] netlink: 116 bytes leftover after parsing attributes in process `syz.5.3633'. [ 1220.621138][ T136] 0: reclassify loop, rule prio 0, protocol 800 [ 1221.472850][T17197] 0: reclassify loop, rule prio 0, protocol 800 [ 1222.094237][T19473] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3646'. [ 1223.539819][T19506] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3658'. [ 1225.169822][T19537] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3670'. [ 1225.815763][ T48] 0: reclassify loop, rule prio 0, protocol 800 [ 1226.667003][T19566] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3680'. [ 1227.020363][ T1131] 0: reclassify loop, rule prio 0, protocol 800 [ 1230.156998][T19642] TCP: TCP_TX_DELAY enabled [ 1231.515227][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1231.925918][T19674] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3722'. [ 1231.996092][T19678] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3724'. [ 1232.095992][T19681] overlayfs: failed to clone upperpath [ 1232.780105][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1233.229954][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3732'. [ 1233.328591][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3732'. [ 1233.668012][T19696] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3732'. [ 1234.855489][T19729] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 1237.251295][ T136] 0: reclassify loop, rule prio 0, protocol 800 [ 1237.330860][T19786] 9pnet_fd: Insufficient options for proto=fd [ 1238.570948][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1238.965864][T19804] netlink: 120 bytes leftover after parsing attributes in process `syz.7.3774'. [ 1239.173551][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.181641][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.904614][T19810] 9pnet_fd: Insufficient options for proto=fd [ 1242.201526][T19841] 9pnet_fd: Insufficient options for proto=fd [ 1243.010882][ T136] 0: reclassify loop, rule prio 0, protocol 800 [ 1243.455438][T19793] Set syz1 is full, maxelem 65536 reached [ 1244.059011][T19871] 9pnet_fd: Insufficient options for proto=fd [ 1244.414735][ T48] 0: reclassify loop, rule prio 0, protocol 800 [ 1244.959304][T19885] overlayfs: failed to clone upperpath [ 1245.947561][T19897] 9pnet_fd: Insufficient options for proto=fd [ 1247.127985][T19918] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3819'. [ 1247.402626][T19924] 9pnet_fd: Insufficient options for proto=fd [ 1248.197404][T17197] 0: reclassify loop, rule prio 0, protocol 800 [ 1249.024231][T19956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3834'. [ 1249.146099][T19958] 9pnet_fd: Insufficient options for proto=fd [ 1250.051442][T18044] 0: reclassify loop, rule prio 0, protocol 800 [ 1250.516478][T19990] 9pnet_fd: Insufficient options for proto=fd [ 1252.214171][T20027] 9pnet_fd: Insufficient options for proto=fd [ 1253.679603][T20057] 9pnet_fd: Insufficient options for proto=fd [ 1253.900721][ T48] 0: reclassify loop, rule prio 0, protocol 800 [ 1254.850881][T20090] 9pnet_fd: Insufficient options for proto=fd [ 1255.809949][ T48] 0: reclassify loop, rule prio 0, protocol 800 [ 1256.562116][T20119] 9pnet_fd: Insufficient options for proto=fd [ 1257.332449][T20127] syz.5.3904 uses obsolete (PF_INET,SOCK_PACKET) [ 1257.345038][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 1257.345053][ T28] audit: type=1326 audit(1756641206.829:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20124 comm="syz.4.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1257.409582][ T28] audit: type=1326 audit(1756641206.829:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20124 comm="syz.4.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1257.456850][ T28] audit: type=1326 audit(1756641206.829:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20124 comm="syz.4.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1257.494992][ T28] audit: type=1326 audit(1756641206.829:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20124 comm="syz.4.3903" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1258.059950][T20151] 9pnet_fd: Insufficient options for proto=fd [ 1258.830976][T20156] overlayfs: failed to resolve './file0': -2 [ 1259.345645][T20170] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3922'. [ 1259.392587][T20170] bridge1: port 1(veth0_to_bond) entered blocking state [ 1259.416928][T20170] bridge1: port 1(veth0_to_bond) entered disabled state [ 1259.428816][T20170] veth0_to_bond: entered allmulticast mode [ 1259.444243][T20170] veth0_to_bond: entered promiscuous mode [ 1259.656543][ T1131] 0: reclassify loop, rule prio 0, protocol 800 [ 1259.852260][T20181] 9pnet_fd: Insufficient options for proto=fd [ 1260.475864][ T28] audit: type=1326 audit(1756641209.959:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20183 comm="syz.7.3925" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6bf778ebe9 code=0x0 [ 1261.316044][T20214] 9pnet_fd: Insufficient options for proto=fd [ 1261.577687][ T48] 0: reclassify loop, rule prio 0, protocol 800 [ 1262.792049][T20243] 9pnet_fd: Insufficient options for proto=fd [ 1263.543002][T20249] netlink: 'syz.5.3950': attribute type 1 has an invalid length. [ 1263.569390][T20249] netlink: 'syz.5.3950': attribute type 4 has an invalid length. [ 1263.579421][T20249] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1263.615916][T20249] netlink: 'syz.5.3950': attribute type 1 has an invalid length. [ 1263.640885][T20249] netlink: 'syz.5.3950': attribute type 4 has an invalid length. [ 1263.663133][T20249] netlink: 9462 bytes leftover after parsing attributes in process `syz.5.3950'. [ 1264.227380][T20273] 9pnet_fd: Insufficient options for proto=fd [ 1265.415999][T18025] 0: reclassify loop, rule prio 0, protocol 800 [ 1265.735822][T20299] 9pnet_fd: Insufficient options for proto=fd [ 1266.769640][ T5905] 0: reclassify loop, rule prio 0, protocol 800 [ 1270.332759][T20371] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 1270.367884][T20370] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1270.396922][T20374] netlink: 'syz.6.4005': attribute type 1 has an invalid length. [ 1270.546495][T20374] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1270.597879][T20381] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4005'. [ 1271.172399][T17197] 0: reclassify loop, rule prio 0, protocol 800 [ 1271.507965][T20381] bond1 (unregistering): Released all slaves [ 1272.452400][ T1131] 0: reclassify loop, rule prio 0, protocol 800 [ 1274.024239][T20442] 9pnet_fd: Insufficient options for proto=fd [ 1275.191736][T20467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4040'. [ 1275.448009][T20480] sctp: [Deprecated]: syz.4.4045 (pid 20480) Use of int in max_burst socket option. [ 1275.448009][T20480] Use struct sctp_assoc_value instead [ 1276.292000][ T12] 0: reclassify loop, rule prio 0, protocol 800 [ 1277.773572][T20520] 9pnet: Could not find request transport: fd01777777777777777777777 [ 1278.210746][T18044] 0: reclassify loop, rule prio 0, protocol 800 [ 1279.133061][T20551] 9pnet: Could not find request transport: fd01777777777777777777777 [ 1280.525169][T20584] 9pnet: Could not find request transport: fd01777777777777777777777 [ 1282.049856][T17197] 0: reclassify loop, rule prio 0, protocol 800 [ 1282.474548][T20627] 9pnet_fd: Insufficient options for proto=fd [ 1282.484546][ T5833] IPVS: starting estimator thread 0... [ 1282.629623][T20625] IPVS: using max 17 ests per chain, 40800 per kthread [ 1284.145786][T18044] 0: reclassify loop, rule prio 0, protocol 800 [ 1284.510030][T20663] 9pnet_fd: Insufficient options for proto=fd [ 1286.485437][T20695] 9pnet_fd: Insufficient options for proto=fd [ 1287.811256][T18044] 0: reclassify loop, rule prio 0, protocol 800 [ 1288.332438][T20730] 9pnet_fd: Insufficient options for proto=fd [ 1288.983332][ T28] audit: type=1326 audit(1756641238.469:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1289.046833][ T28] audit: type=1326 audit(1756641238.489:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1289.090458][ T28] audit: type=1326 audit(1756641238.499:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1289.115750][T20740] 9pnet_fd: p9_fd_create_unix (20740): problem connecting socket: ./file0/file0: -2 [ 1289.123670][ T28] audit: type=1326 audit(1756641238.499:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1289.209004][ T28] audit: type=1326 audit(1756641238.499:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1289.246014][ T28] audit: type=1326 audit(1756641238.499:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1289.483990][ T28] audit: type=1326 audit(1756641238.499:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20734 comm="syz.4.4143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7624f8ebe9 code=0x7ffc0000 [ 1289.887482][T20755] 9pnet_fd: Insufficient options for proto=fd [ 1290.349021][ T42] 0: reclassify loop, rule prio 0, protocol 800 [ 1290.408234][T20764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4155'. [ 1292.035404][T20801] 9pnet_fd: Insufficient options for proto=fd [ 1293.093353][T20817] 9pnet_fd: p9_fd_create_unix (20817): problem connecting socket: ./file0/file0: -2 [ 1293.223727][T20822] netlink: 'syz.7.4178': attribute type 4 has an invalid length. [ 1293.383865][T20823] netlink: 'syz.7.4178': attribute type 4 has an invalid length. [ 1293.581143][T18044] 0: reclassify loop, rule prio 0, protocol 800 [ 1294.157782][T20826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1294.318768][T20836] 9pnet_fd: Insufficient options for proto=fd [ 1295.501061][T18044] 0: reclassify loop, rule prio 0, protocol 800 [ 1296.221780][T20867] overlayfs: failed to clone upperpath [ 1296.710959][T20884] 9pnet_fd: Insufficient options for proto=fd [ 1297.620091][T20897] overlayfs: failed to clone upperpath [ 1298.688093][T20911] overlayfs: failed to clone upperpath [ 1299.036793][T20922] overlayfs: failed to clone upperpath [ 1299.340013][T18025] 0: reclassify loop, rule prio 0, protocol 800 [ 1300.223180][T20952] overlayfs: failed to clone upperpath [ 1300.620309][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.626849][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.662832][T20967] overlayfs: failed to resolve './file0': -2 [ 1301.296005][T20979] 9pnet_fd: Insufficient options for proto=fd [ 1301.393632][T18025] 0: reclassify loop, rule prio 0, protocol 800 [ 1302.022778][T20983] overlayfs: failed to clone upperpath [ 1302.505565][T20995] IPVS: persistence engine module ip_vs_pe_ not found [ 1302.832119][T21009] 9pnet_fd: Insufficient options for proto=fd [ 1303.512427][T21014] overlayfs: failed to clone upperpath [ 1303.680762][T21023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4259'. [ 1303.905503][T21032] IPVS: persistence engine module ip_vs_pe_ not found [ 1304.178816][T21040] overlayfs: failed to resolve './file0': -2 [ 1304.362991][T21048] overlayfs: failed to clone upperpath [ 1304.446626][T21049] 9pnet_fd: Insufficient options for proto=fd [ 1305.090141][T18025] 0: reclassify loop, rule prio 0, protocol 800 [ 1305.167111][T21060] bridge0: port 1(bridge_slave_0) entered disabled state [ 1305.346874][T21066] IPVS: persistence engine module ip_vs_pe_ not found [ 1305.381692][T21072] overlayfs: failed to clone upperpath [ 1305.719649][T21086] 9pnet_fd: Insufficient options for proto=fd [ 1306.490523][T21094] bridge0: port 1(bridge_slave_0) entered disabled state [ 1306.606030][T21100] overlayfs: failed to clone upperpath [ 1306.692268][T21103] overlayfs: failed to clone upperpath [ 1306.895071][T21108] IPVS: persistence engine module ip_vs_pe_ not found [ 1307.253818][T21133] bridge0: port 1(bridge_slave_0) entered disabled state [ 1307.306387][T21137] overlayfs: failed to clone upperpath [ 1307.800587][T21165] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.412114][T21190] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.147485][T21214] bridge0: port 1(bridge_slave_0) entered disabled state [ 1309.537352][T21221] IPVS: persistence engine module ip_vs_pe_ not found [ 1309.670345][T21234] overlayfs: failed to resolve './file1': -2 [ 1309.905037][T21242] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.101767][ T5786] Bluetooth: hci0: unexpected event 0x04 length: 83 > 10 [ 1310.325493][ T28] audit: type=1326 audit(1756641259.809:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.365506][ T28] audit: type=1326 audit(1756641259.809:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.391426][ T28] audit: type=1326 audit(1756641259.809:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.395441][T21257] IPVS: persistence engine module ip_vs_pe_ not found [ 1310.414499][ T28] audit: type=1326 audit(1756641259.809:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.457545][ T28] audit: type=1326 audit(1756641259.809:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.480629][ T28] audit: type=1326 audit(1756641259.809:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.509951][ T28] audit: type=1326 audit(1756641259.809:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.535262][ T28] audit: type=1326 audit(1756641259.809:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.617564][ T28] audit: type=1326 audit(1756641259.809:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.666437][ T28] audit: type=1326 audit(1756641259.809:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21252 comm="syz.7.4356" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6bf778ebe9 code=0x7fc00000 [ 1310.814714][T21280] bridge0: port 1(bridge_slave_0) entered disabled state [ 1310.905445][T21265] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4359'. [ 1311.529470][T21297] IPVS: persistence engine module ip_vs_pe_ not found [ 1311.604560][T21307] bridge0: port 1(bridge_slave_0) entered disabled state [ 1311.612810][T21305] netlink: 36779 bytes leftover after parsing attributes in process `syz.4.4373'. [ 1312.189323][ T5786] Bluetooth: hci0: command 0x0406 tx timeout [ 1312.340242][T21336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.171469][T21360] bridge0: port 1(bridge_slave_0) entered disabled state [ 1313.780083][ T5786] Bluetooth: hci1: unexpected event for opcode 0x080d [ 1314.089357][T21395] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4415'. [ 1314.942499][T21395] team0 (unregistering): Port device team_slave_0 removed [ 1315.020391][T21395] team0 (unregistering): Port device team_slave_1 removed [ 1315.368804][T21428] netdevsim netdevsim4: Direct firmware load for € failed with error -2 [ 1315.379457][T21428] netdevsim netdevsim4: Falling back to sysfs fallback for: € [ 1316.085098][T21451] netlink: 32 bytes leftover after parsing attributes in process `syz.5.4441'. [ 1316.119511][ T5786] Bluetooth: hci0: Unknown advertising packet type: 0x5d [ 1316.119587][ T5786] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1316.127321][ T5786] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 1316.135615][ T5786] Bluetooth: hci0: Malformed LE Event: 0x0d [ 1316.345484][T21464] netlink: 36 bytes leftover after parsing attributes in process `syz.5.4445'. [ 1316.376379][T21467] syz_tun: entered allmulticast mode [ 1316.394890][T21467] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4447'. [ 1316.524912][T21467] syz_tun (unregistering): left allmulticast mode [ 1317.812193][ T5786] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 1317.821035][ T5786] Bluetooth: hci1: Injecting HCI hardware error event [ 1317.831644][ T5786] Bluetooth: hci1: hardware error 0x00 [ 1318.085077][T21502] bridge0: port 1(bridge_slave_0) entered disabled state [ 1318.255484][T21515] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4461'. [ 1319.498007][T21542] bridge0: port 1(bridge_slave_0) entered disabled state [ 1319.530904][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1319.563341][T21543] syz_tun: entered promiscuous mode [ 1319.589731][T21543] macvtap1: entered promiscuous mode [ 1319.608456][T21543] macvtap1: entered allmulticast mode [ 1319.710049][T21549] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4471'. [ 1319.738807][T21549] syz_tun: left promiscuous mode [ 1320.113545][ T5786] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1320.540373][T21559] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.618600][T21559] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.626182][T21567] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4478'. [ 1320.696192][T21559] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.784004][T21559] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1320.849559][T21577] o2cb: This node has not been configured. [ 1320.856996][T21577] o2cb: Cluster check failed. Fix errors before retrying. [ 1320.865105][T21577] (syz.7.4481,21577,0):user_dlm_register:674 ERROR: status = -22 [ 1320.880982][T21577] (syz.7.4481,21577,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus" [ 1320.948222][T21559] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1320.996342][T21559] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.064474][T21559] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1321.107739][T21559] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1322.013038][T21595] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4487'. [ 1322.134850][T21595] syz_tun (unregistering): left allmulticast mode [ 1322.729383][T21615] 9pnet_fd: Insufficient options for proto=fd [ 1324.640364][T21644] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1324.862362][T21644] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.514102][T21644] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.664582][T21644] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1325.780701][T21644] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.798828][T21644] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.814637][T21644] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1325.827827][T21644] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1327.415774][T21691] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.584779][T21691] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.691520][T21706] fuse: Bad value for 'fd' [ 1327.752643][T21691] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1327.893936][T21691] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1328.013767][T21691] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.046770][T21691] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.074033][T21691] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.092501][T21691] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.276707][T21720] IPVS: persistence engine module ip_vs_pe_ not found [ 1328.704284][T21738] bridge0: port 1(bridge_slave_0) entered disabled state [ 1329.826219][ T55] IPVS: starting estimator thread 0... [ 1329.929283][T21757] IPVS: using max 20 ests per chain, 48000 per kthread [ 1330.631561][T21781] 9pnet_fd: Insufficient options for proto=fd [ 1331.302745][T21789] bridge0: port 1(bridge_slave_0) entered disabled state [ 1331.454629][T21795] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4574'. [ 1331.528569][T21795] syz_tun (unregistering): left allmulticast mode [ 1331.595418][T21797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1332.200099][T21813] 9pnet_fd: Insufficient options for proto=fd [ 1332.629882][ T6233] IPVS: starting estimator thread 0... [ 1332.840400][T21817] IPVS: using max 18 ests per chain, 43200 per kthread [ 1333.021567][T21831] bridge0: port 1(bridge_slave_0) entered disabled state [ 1335.009862][T21885] overlayfs: failed to clone upperpath [ 1335.170481][T21903] 9pnet_fd: Insufficient options for proto=fd [ 1335.653317][T21930] overlayfs: failed to clone upperpath [ 1336.599485][ T55] IPVS: starting estimator thread 0... [ 1336.737345][T21957] IPVS: using max 22 ests per chain, 52800 per kthread [ 1337.052529][T21978] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.576608][T21998] overlayfs: missing 'lowerdir' [ 1337.797556][T22004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.608422][T22022] bridge0: port 1(bridge_slave_0) entered disabled state [ 1338.786341][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 1338.786354][ T28] audit: type=1326 audit(1756641288.259:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1338.849312][ T28] audit: type=1326 audit(1756641288.269:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1338.922621][ T28] audit: type=1326 audit(1756641288.269:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1338.955514][ T28] audit: type=1326 audit(1756641288.269:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1338.997330][T22037] netlink: 'syz.7.4689': attribute type 2 has an invalid length. [ 1339.019497][ T28] audit: type=1326 audit(1756641288.269:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1339.059244][ T28] audit: type=1326 audit(1756641288.269:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1339.120003][ T28] audit: type=1326 audit(1756641288.269:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1339.169743][ T28] audit: type=1326 audit(1756641288.279:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1339.215103][ T28] audit: type=1326 audit(1756641288.279:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1339.251724][ T28] audit: type=1326 audit(1756641288.279:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22029 comm="syz.5.4686" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7811f8ebe9 code=0x7ffc0000 [ 1339.380867][T22051] netlink: 'syz.5.4695': attribute type 10 has an invalid length. [ 1339.965259][T22078] overlayfs: failed to resolve './file1': -2 [ 1340.833948][T22101] overlayfs: failed to resolve './file1': -2 [ 1341.296833][T22119] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4725'. [ 1341.353963][T22119] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1341.376346][T22121] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4725'. [ 1341.532987][T22123] netlink: 'syz.5.4727': attribute type 3 has an invalid length. [ 1341.796517][T22125] overlayfs: failed to resolve './file1': -2 [ 1342.060355][T22121] bond1 (unregistering): Released all slaves [ 1343.258167][T22163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1343.282747][T22163] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4743'. [ 1344.874887][T22211] 9pnet_fd: p9_fd_create_unix (22211): problem connecting socket: ./file0/file0: -2 [ 1347.049187][T22278] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4791'. [ 1347.079356][T22278] 8021q: VLANs not supported on ip_vti0 [ 1347.176170][T22280] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4792'. [ 1349.811106][T22343] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1349.819102][T22343] IPv6: NLM_F_CREATE should be set when creating new route [ 1349.826370][T22343] IPv6: NLM_F_CREATE should be set when creating new route [ 1349.833682][T22343] IPv6: NLM_F_CREATE should be set when creating new route [ 1352.787545][T22434] IPv6: NLM_F_CREATE should be specified when creating new route [ 1354.426371][T22499] 9p: Unknown Cache mode or invalid value m [ 1354.504414][T22502] syz.5.4879: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz5,mems_allowed=0-1 [ 1354.635816][T22502] CPU: 1 PID: 22502 Comm: syz.5.4879 Not tainted syzkaller #0 [ 1354.643476][T22502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1354.653608][T22502] Call Trace: [ 1354.656904][T22502] [ 1354.659856][T22502] dump_stack_lvl+0x16c/0x230 [ 1354.664605][T22502] ? show_regs_print_info+0x20/0x20 [ 1354.669847][T22502] ? load_image+0x3b0/0x3b0 [ 1354.674408][T22502] ? __rcu_read_unlock+0x7c/0xd0 [ 1354.679385][T22502] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 1354.685815][T22502] ? cpuset_print_current_mems_allowed+0x2e3/0x360 [ 1354.692410][T22502] warn_alloc+0x210/0x300 [ 1354.696778][T22502] ? stack_trace_save+0x9c/0xe0 [ 1354.701643][T22502] ? zone_watermark_ok_safe+0x230/0x230 [ 1354.707199][T22502] ? kasan_set_track+0x5f/0x70 [ 1354.712000][T22502] ? kasan_set_track+0x4e/0x70 [ 1354.716758][T22502] ? __kasan_kmalloc+0x8f/0xa0 [ 1354.721517][T22502] ? xsk_init_queue+0xb0/0x110 [ 1354.726354][T22502] ? xsk_setsockopt+0x4db/0x6f0 [ 1354.731212][T22502] ? do_sock_setsockopt+0x175/0x1a0 [ 1354.736516][T22502] ? __x64_sys_setsockopt+0x184/0x200 [ 1354.741925][T22502] __vmalloc_node_range+0x126/0x1320 [ 1354.747243][T22502] ? free_vm_area+0x50/0x50 [ 1354.751765][T22502] vmalloc_user+0x74/0x80 [ 1354.756101][T22502] ? xskq_create+0xbf/0x170 [ 1354.760599][T22502] xskq_create+0xbf/0x170 [ 1354.764950][T22502] xsk_init_queue+0xb0/0x110 [ 1354.769557][T22502] xsk_setsockopt+0x4db/0x6f0 [ 1354.774251][T22502] ? xsk_poll+0x670/0x670 [ 1354.778583][T22502] ? __fget_files+0x28/0x4d0 [ 1354.783207][T22502] ? aa_sock_opt_perm+0x74/0x100 [ 1354.788173][T22502] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 1354.793742][T22502] ? security_socket_setsockopt+0x7e/0xa0 [ 1354.799488][T22502] ? xsk_poll+0x670/0x670 [ 1354.803826][T22502] do_sock_setsockopt+0x175/0x1a0 [ 1354.808856][T22502] ? __fdget+0x180/0x210 [ 1354.813101][T22502] __x64_sys_setsockopt+0x184/0x200 [ 1354.818676][T22502] do_syscall_64+0x55/0xb0 [ 1354.823105][T22502] ? clear_bhb_loop+0x40/0x90 [ 1354.827871][T22502] ? clear_bhb_loop+0x40/0x90 [ 1354.832544][T22502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1354.838512][T22502] RIP: 0033:0x7f7811f8ebe9 [ 1354.842933][T22502] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1354.862560][T22502] RSP: 002b:00007f7812d6d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1354.870977][T22502] RAX: ffffffffffffffda RBX: 00007f78121c5fa0 RCX: 00007f7811f8ebe9 [ 1354.878944][T22502] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 1354.886909][T22502] RBP: 00007f7812011e19 R08: 0000000000000004 R09: 0000000000000000 [ 1354.894907][T22502] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 1354.902910][T22502] R13: 00007f78121c6038 R14: 00007f78121c5fa0 R15: 00007ffe8d3d3178 [ 1354.910895][T22502] [ 1354.937324][T22502] Mem-Info: [ 1354.940529][T22502] active_anon:12837 inactive_anon:0 isolated_anon:0 [ 1354.940529][T22502] active_file:15063 inactive_file:40654 isolated_file:0 [ 1354.940529][T22502] unevictable:768 dirty:180 writeback:0 [ 1354.940529][T22502] slab_reclaimable:11745 slab_unreclaimable:96423 [ 1354.940529][T22502] mapped:27179 shmem:7056 pagetables:809 [ 1354.940529][T22502] sec_pagetables:0 bounce:0 [ 1354.940529][T22502] kernel_misc_reclaimable:0 [ 1354.940529][T22502] free:1326417 free_pcp:14845 free_cma:0 [ 1354.986385][T22502] Node 0 active_anon:51348kB inactive_anon:0kB active_file:60252kB inactive_file:162412kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:108716kB dirty:720kB writeback:0kB shmem:26688kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12352kB pagetables:3336kB sec_pagetables:0kB all_unreclaimable? no [ 1355.023089][T22502] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1355.072329][T22502] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1355.155871][T22502] lowmem_reserve[]: 0 2525 2526 2526 2526 [ 1355.161702][T22502] Node 0 DMA32 free:1407668kB boost:0kB min:34676kB low:43344kB high:52012kB reserved_highatomic:0KB active_anon:51400kB inactive_anon:0kB active_file:60252kB inactive_file:161100kB unevictable:7636kB writepending:720kB present:3129332kB managed:2589592kB mlocked:6100kB bounce:0kB free_pcp:19840kB local_pcp:1216kB free_cma:0kB [ 1355.194418][T22502] lowmem_reserve[]: 0 0 1 1 1 [ 1355.200891][T22502] Node 0 Normal free:16kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1312kB unevictable:0kB writepending:0kB present:1048576kB managed:1384kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 1355.228831][T22502] lowmem_reserve[]: 0 0 0 0 0 [ 1355.251652][T22502] Node 1 Normal free:3876576kB boost:0kB min:55208kB low:69008kB high:82808kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:39488kB local_pcp:15656kB free_cma:0kB [ 1355.287625][T22502] lowmem_reserve[]: 0 0 0 0 0 [ 1355.292591][T22502] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1355.325162][T22502] Node 0 DMA32: 958*4kB (UME) 296*8kB (UE) 130*16kB (UE) 333*32kB (UME) 236*64kB (UME) 140*128kB (UME) 57*256kB (UM) 30*512kB (UME) 20*1024kB (UME) 7*2048kB (UM) 315*4096kB (UM) = 1406968kB [ 1355.383430][T22502] Node 0 Normal: 0*4kB 0*8kB 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 16kB [ 1355.413840][T22502] Node 1 Normal: 164*4kB (UME) 42*8kB (UME) 24*16kB (UME) 68*32kB (UME) 18*64kB (UME) 7*128kB (UME) 1*256kB (M) 0*512kB 2*1024kB (UE) 1*2048kB (E) 944*4096kB (M) = 3876576kB [ 1355.460392][T22502] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.470000][T22502] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1355.487180][T22502] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1355.520005][T22502] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1355.529733][T22502] 60497 total pagecache pages [ 1355.534924][T22502] 0 pages in swap cache [ 1355.539098][T22502] Free swap = 124392kB [ 1355.557522][T22502] Total swap = 124996kB [ 1355.568009][T22502] 2097051 pages RAM [ 1355.571963][T22502] 0 pages HighMem/MovableOnly [ 1355.576661][T22502] 416139 pages reserved [ 1355.594826][T22502] 0 pages cma reserved [ 1357.874130][T22568] bridge0: port 1(bridge_slave_0) entered disabled state [ 1357.986252][T22562] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1358.043403][T22562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4903'. [ 1358.344278][T22574] team_slave_0: entered promiscuous mode [ 1358.350657][T22574] team_slave_1: entered promiscuous mode [ 1358.412563][T22576] overlayfs: missing 'lowerdir' [ 1358.428223][T22574] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1358.950395][T22591] bridge0: port 1(bridge_slave_0) entered disabled state [ 1359.297710][T22602] overlayfs: missing 'lowerdir' [ 1359.858206][T22627] overlayfs: missing 'lowerdir' [ 1360.916528][T22656] overlayfs: missing 'lowerdir' [ 1362.269783][T22684] netlink: 16 bytes leftover after parsing attributes in process `syz.7.4956'. [ 1362.283251][T22677] overlayfs: failed to clone upperpath [ 1362.422962][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.429645][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.459110][T22688] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4959'. [ 1362.745468][T22698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4962'. [ 1362.778352][T22698] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1363.470345][T22698] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1363.519304][T22715] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4969'. [ 1363.529937][T22713] bridge0: port 1(bridge_slave_0) entered disabled state [ 1364.273050][T22750] netlink: 48 bytes leftover after parsing attributes in process `syz.7.4982'. [ 1365.136838][T22773] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4995'. [ 1365.399429][ T5786] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 1365.623727][T22797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.818126][T22803] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.832350][T22803] batadv_slave_0: entered promiscuous mode [ 1366.291408][T22808] netlink: 68 bytes leftover after parsing attributes in process `syz.7.5008'. [ 1366.475261][T22820] bridge0: port 1(bridge_slave_0) entered disabled state [ 1367.208251][T22844] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.251841][T22865] bridge0: port 1(bridge_slave_0) entered disabled state [ 1369.501682][ T5786] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 1369.512062][ T5786] Bluetooth: hci0: Injecting HCI hardware error event [ 1369.522280][T21495] Bluetooth: hci0: hardware error 0x00 [ 1369.872028][T22919] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5058'. [ 1370.184881][T22932] overlayfs: missing 'lowerdir' [ 1370.360234][T22940] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5068'. [ 1370.515154][T22948] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 1370.524194][T22948] bridge2: entered promiscuous mode [ 1370.790864][T22957] overlayfs: missing 'workdir' [ 1371.257890][T22982] trusted_key: syz.6.5083 sent an empty control message without MSG_MORE. [ 1371.638945][T21495] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1371.920606][T22999] overlayfs: missing 'workdir' [ 1372.491501][T23013] netlink: 'syz.6.5096': attribute type 10 has an invalid length. [ 1372.509724][T23013] team_slave_0: left promiscuous mode [ 1372.515819][T23013] team_slave_1: left promiscuous mode [ 1372.558533][T23013] batman_adv: batadv0: Adding interface: team0 [ 1372.564805][T23013] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1372.590546][T23013] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 1372.996063][T23025] overlayfs: missing 'workdir' [ 1373.109631][T23032] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5105'. [ 1373.362068][T23040] tipc: Enabling of bearer rejected, failed to enable media [ 1374.253073][T23054] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5112'. [ 1374.269696][T23056] overlayfs: failed to clone upperpath [ 1374.342948][T23058] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5115'. [ 1375.762118][T23084] overlayfs: failed to clone upperpath [ 1376.162931][ T12] tipc: Subscription rejected, illegal request [ 1376.202636][ T136] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.240549][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1376.252370][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1376.271815][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1376.288236][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1376.301181][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1376.309497][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1376.378433][ T136] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1376.821419][ T136] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.215361][T23114] overlayfs: failed to clone upperpath [ 1377.291564][ T136] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1377.735625][T23126] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5141'. [ 1377.854511][T23126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5141'. [ 1377.997012][T23096] chnl_net:caif_netlink_parms(): no params data found [ 1378.215502][T23144] overlayfs: failed to clone upperpath [ 1378.345254][ T5786] Bluetooth: hci2: command tx timeout [ 1379.144466][T23096] bridge0: port 1(bridge_slave_0) entered blocking state [ 1379.182497][T23096] bridge0: port 1(bridge_slave_0) entered disabled state [ 1379.202899][T23096] bridge_slave_0: entered allmulticast mode [ 1379.227098][T23096] bridge_slave_0: entered promiscuous mode [ 1379.239395][T23151] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5147'. [ 1379.343281][T23096] bridge0: port 2(bridge_slave_1) entered blocking state [ 1379.369004][T23096] bridge0: port 2(bridge_slave_1) entered disabled state [ 1379.376266][T23096] bridge_slave_1: entered allmulticast mode [ 1379.438093][T23096] bridge_slave_1: entered promiscuous mode [ 1379.596198][T23096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1379.719393][T23096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1379.781087][T23180] overlayfs: failed to clone upperpath [ 1379.939804][T23096] team0: Port device team_slave_0 added [ 1380.020672][T23096] team0: Port device team_slave_1 added [ 1380.550560][ T5786] Bluetooth: hci2: command tx timeout [ 1380.813263][T23197] netlink: 32 bytes leftover after parsing attributes in process `syz.7.5160'. [ 1380.977315][T23096] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1380.994846][T23096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.026238][T23096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1381.055245][T23196] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5159'. [ 1381.132793][T23096] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1381.152088][T23096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1381.187305][T23096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1381.541818][T23096] hsr_slave_0: entered promiscuous mode [ 1381.581670][T23096] hsr_slave_1: entered promiscuous mode [ 1381.610127][T23096] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1381.653924][T23096] Cannot create hsr debugfs directory [ 1381.729618][T23228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5169'. [ 1382.596188][ T5786] Bluetooth: hci2: command tx timeout [ 1382.676250][T23243] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5173'. [ 1382.742123][ T136] hsr_slave_0: left promiscuous mode [ 1382.779020][ T136] hsr_slave_1: left promiscuous mode [ 1382.819114][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1382.829333][ T136] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1382.848128][ T136] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1382.859132][ T136] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1382.867492][ T136] bridge_slave_1: left allmulticast mode [ 1382.873177][ T136] bridge_slave_1: left promiscuous mode [ 1382.889503][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 1382.906159][ T136] bridge_slave_0: left allmulticast mode [ 1382.912645][ T136] bridge_slave_0: left promiscuous mode [ 1382.923700][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 1382.990638][ T136] veth1_macvtap: left promiscuous mode [ 1383.000943][ T136] veth0_macvtap: left promiscuous mode [ 1383.013752][ T136] veth1_vlan: left promiscuous mode [ 1383.025256][ T136] veth0_vlan: left promiscuous mode [ 1383.617905][ T136] pimreg (unregistering): left allmulticast mode [ 1384.293756][ T136] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1384.356880][ T136] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1384.691419][ T5786] Bluetooth: hci2: command tx timeout [ 1384.860977][ T136] bond0 (unregistering): Released all slaves [ 1384.982539][T23276] netlink: 'syz.7.5182': attribute type 6 has an invalid length. [ 1385.180925][T23285] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5183'. [ 1385.204182][T23287] syz.6.5184 (23287): attempted to duplicate a private mapping with mremap. This is not supported. [ 1385.766528][ T136] IPVS: stop unused estimator thread 0... [ 1385.880513][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 1385.880527][ T28] audit: type=1326 audit(1756641847.897:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23307 comm="syz.6.5188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fda1fd8ebe9 code=0x0 [ 1385.990168][T23096] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1386.001147][T23096] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1386.011017][T23096] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1386.022358][T23096] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1386.105264][T23096] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1386.139468][T23096] 8021q: adding VLAN 0 to HW filter on device team0 [ 1386.172854][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 1386.180087][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1386.250462][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1386.257668][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1386.353778][T23324] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5190'. [ 1386.562677][T23335] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5193'. [ 1386.699629][T23096] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1387.186090][T23096] veth0_vlan: entered promiscuous mode [ 1387.217910][T23365] netlink: 48 bytes leftover after parsing attributes in process `syz.7.5201'. [ 1387.222808][T23096] veth1_vlan: entered promiscuous mode [ 1387.231756][T23367] overlayfs: failed to clone upperpath [ 1387.330667][T23096] veth0_macvtap: entered promiscuous mode [ 1387.365159][T23096] veth1_macvtap: entered promiscuous mode [ 1387.417770][T23372] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5203'. [ 1387.440905][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.464335][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.497317][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1387.524258][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.559342][T23096] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1387.594659][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.623523][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.634038][T23096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.663603][T23096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.708683][T23096] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.741159][T23096] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.754303][T23096] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.763950][T23096] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.789301][T23096] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.817262][T23388] netlink: 'syz.7.5209': attribute type 4 has an invalid length. [ 1387.868523][T23394] netlink: 48 bytes leftover after parsing attributes in process `syz.6.5211'. [ 1388.044170][T23399] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5213'. [ 1388.059260][T23397] overlayfs: failed to clone upperpath [ 1388.084807][ T2115] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.103559][ T2115] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.191475][ T1131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.239838][ T1131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.684082][T23412] loop5: detected capacity change from 0 to 2048 [ 1388.730403][T23412] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1388.857086][T23096] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 1388.874877][T23096] UDF-fs: error (device loop5): udf_read_inode: (ino 1440) failed !bh [ 1389.112654][T23431] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5222'. [ 1389.162443][T23434] overlayfs: failed to clone upperpath [ 1389.742997][T23463] netlink: 'syz.7.5232': attribute type 1 has an invalid length. [ 1389.784066][T23463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5232'. [ 1389.968309][T23472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5233'. [ 1389.981475][T23473] overlayfs: failed to clone upperpath [ 1390.204348][T23482] syz.4.5237[23482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1390.204479][T23482] syz.4.5237[23482] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1390.328089][T23484] veth0_vlan: entered allmulticast mode [ 1390.400120][T23491] netlink: 'syz.7.5243': attribute type 1 has an invalid length. [ 1390.409214][T23491] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5243'. [ 1391.091144][T16937] syz_tun (unregistering): left allmulticast mode [ 1391.257348][T21495] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1391.270223][T21495] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1391.310325][T21495] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1391.319986][T21495] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1391.329416][T23517] netlink: 'syz.4.5253': attribute type 1 has an invalid length. [ 1391.334118][T21495] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1391.340643][T23517] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5253'. [ 1391.356066][T21495] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1391.771859][T23513] chnl_net:caif_netlink_parms(): no params data found [ 1391.969464][T23513] bridge0: port 1(bridge_slave_0) entered blocking state [ 1391.977993][T23513] bridge0: port 1(bridge_slave_0) entered disabled state [ 1391.987589][T23513] bridge_slave_0: entered allmulticast mode [ 1391.995410][T23513] bridge_slave_0: entered promiscuous mode [ 1392.019507][T23513] bridge0: port 2(bridge_slave_1) entered blocking state [ 1392.027755][T23513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1392.040624][T23513] bridge_slave_1: entered allmulticast mode [ 1392.050241][T23513] bridge_slave_1: entered promiscuous mode [ 1392.153225][T23513] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1392.187466][T23513] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1392.272040][T23543] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5262'. [ 1392.290864][T23513] team0: Port device team_slave_0 added [ 1392.326823][T23513] team0: Port device team_slave_1 added [ 1392.429114][T23513] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1392.446479][T23513] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.510818][T23513] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1392.534536][T23513] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1392.555794][T23513] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1392.591298][T23513] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1392.644225][ T5786] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1392.657075][ T5786] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1392.679345][ T5786] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1392.690009][ T5786] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1392.706585][ T5786] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1392.713996][ T5786] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1392.772445][T23513] hsr_slave_0: entered promiscuous mode [ 1392.780244][T23513] hsr_slave_1: entered promiscuous mode [ 1392.903255][ T1131] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.071266][ T1131] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.124368][T23564] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5270'. [ 1393.201203][ T1131] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.299037][ T1131] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.348923][T23513] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.417343][T21495] Bluetooth: hci0: command tx timeout [ 1393.630780][T23513] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.769819][T23583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5278'. [ 1393.851578][T23513] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.999417][T23513] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1394.080382][T23551] chnl_net:caif_netlink_parms(): no params data found [ 1394.377824][T23551] bridge0: port 1(bridge_slave_0) entered blocking state [ 1394.420388][T23551] bridge0: port 1(bridge_slave_0) entered disabled state [ 1394.427709][T23551] bridge_slave_0: entered allmulticast mode [ 1394.449577][T23551] bridge_slave_0: entered promiscuous mode [ 1394.480612][T23551] bridge0: port 2(bridge_slave_1) entered blocking state [ 1394.487787][T23551] bridge0: port 2(bridge_slave_1) entered disabled state [ 1394.529711][T23551] bridge_slave_1: entered allmulticast mode [ 1394.546863][T23551] bridge_slave_1: entered promiscuous mode [ 1394.567959][ T1131] tipc: Left network mode [ 1394.739229][T23551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1394.789214][T21495] Bluetooth: hci2: command tx timeout [ 1395.012831][T23551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1395.198720][T23621] syz.4.5287[23621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1395.198887][T23621] syz.4.5287[23621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1395.267304][T23622] tipc: Enabling of bearer rejected, failed to enable media [ 1395.326430][T23551] team0: Port device team_slave_0 added [ 1395.342772][T23551] team0: Port device team_slave_1 added [ 1395.500238][T21495] Bluetooth: hci0: command tx timeout [ 1395.553601][T23513] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1395.568074][T23513] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1395.603389][T23551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1395.619014][T23551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.654832][T23551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1395.732741][T23513] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1395.748161][T23551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1395.757542][T23551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1395.784299][T23551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1395.814653][T23513] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1396.148159][T23654] tipc: Enabling of bearer rejected, failed to enable media [ 1396.179053][T23551] hsr_slave_0: entered promiscuous mode [ 1396.192203][T23551] hsr_slave_1: entered promiscuous mode [ 1396.203399][T23551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1396.219074][T23551] Cannot create hsr debugfs directory [ 1396.860977][T21495] Bluetooth: hci2: command tx timeout [ 1397.054029][T23674] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5300'. [ 1397.299278][T23513] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1397.396595][T23513] 8021q: adding VLAN 0 to HW filter on device team0 [ 1397.464893][ T5905] bridge0: port 1(bridge_slave_0) entered blocking state [ 1397.472082][ T5905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1397.481394][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 1397.488616][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1397.561933][T23551] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1397.581893][T21495] Bluetooth: hci0: command tx timeout [ 1397.589930][T23551] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1397.610606][T23551] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1397.679169][ T1131] hsr_slave_0: left promiscuous mode [ 1397.692814][ T1131] hsr_slave_1: left promiscuous mode [ 1397.701068][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.716309][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.725055][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1397.733648][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1397.741639][ T1131] bridge_slave_1: left allmulticast mode [ 1397.748890][ T1131] bridge_slave_1: left promiscuous mode [ 1397.755115][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.777203][ T1131] bridge_slave_0: left allmulticast mode [ 1397.790132][ T1131] bridge_slave_0: left promiscuous mode [ 1397.796576][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.834964][ T1131] hsr_slave_0: left promiscuous mode [ 1397.840819][ T1131] hsr_slave_1: left promiscuous mode [ 1397.850610][ T1131] batman_adv: batadv0: Removing interface: team0 [ 1397.858683][ T1131] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1397.866691][ T1131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1397.874726][ T1131] bridge_slave_1: left allmulticast mode [ 1397.880390][ T1131] bridge_slave_1: left promiscuous mode [ 1397.886444][ T1131] bridge0: port 2(bridge_slave_1) entered disabled state [ 1397.895092][ T1131] bridge_slave_0: left allmulticast mode [ 1397.900736][ T1131] bridge_slave_0: left promiscuous mode [ 1397.906859][ T1131] bridge0: port 1(bridge_slave_0) entered disabled state [ 1397.945624][ T1131] veth1_macvtap: left promiscuous mode [ 1397.951194][ T1131] veth0_macvtap: left promiscuous mode [ 1397.958567][ T1131] veth1_vlan: left promiscuous mode [ 1397.964841][ T1131] veth0_vlan: left promiscuous mode [ 1397.971778][ T1131] veth1_macvtap: left promiscuous mode [ 1397.978350][ T1131] veth0_macvtap: left promiscuous mode [ 1397.985018][ T1131] veth1_vlan: left promiscuous mode [ 1398.759028][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1398.821915][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1398.888584][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1398.949412][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1398.953185][T21495] Bluetooth: hci2: command tx timeout [ 1399.642144][ T1131] bond0 (unregistering): Released all slaves [ 1399.664176][T21495] Bluetooth: hci0: command tx timeout [ 1399.877164][ T1131] pimreg (unregistering): left allmulticast mode [ 1400.392218][ T1131] team0 (unregistering): Port device team_slave_1 removed [ 1400.451842][ T1131] team0 (unregistering): Port device team_slave_0 removed [ 1400.509682][ T1131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1400.573767][ T1131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1401.032518][T21495] Bluetooth: hci2: command tx timeout [ 1401.279773][ T1131] bond0 (unregistering): Released all slaves [ 1401.368913][T23551] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1401.689728][T23551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1401.743899][T23551] 8021q: adding VLAN 0 to HW filter on device team0 [ 1401.787978][ T2115] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.795239][ T2115] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1401.852910][ T2115] bridge0: port 2(bridge_slave_1) entered blocking state [ 1401.860083][ T2115] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1402.002041][T23551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1402.064609][T23513] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.210229][ T1131] IPVS: stop unused estimator thread 0... [ 1402.445772][T23551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1402.832168][T23513] veth0_vlan: entered promiscuous mode [ 1402.871697][T23513] veth1_vlan: entered promiscuous mode [ 1402.945302][T23513] veth0_macvtap: entered promiscuous mode [ 1402.973861][T23513] veth1_macvtap: entered promiscuous mode [ 1403.017103][T23513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.029237][T23513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.041867][T23513] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.078394][T23513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.093758][T23513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.113803][T23513] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.125323][T23513] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.138369][T23513] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.182883][T23551] veth0_vlan: entered promiscuous mode [ 1403.209580][T23513] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.219422][T23513] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.233170][T23513] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.243019][T23513] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.264754][T23551] veth1_vlan: entered promiscuous mode [ 1403.405994][T23551] veth0_macvtap: entered promiscuous mode [ 1403.452801][T23551] veth1_macvtap: entered promiscuous mode [ 1403.495581][ T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.502191][T23551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.522403][ T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1403.530213][T23551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.541695][T23551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1403.552473][T23551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.564438][T23551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1403.584881][T23551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.603644][T23551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.614059][T23551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.629964][T23551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.641059][T23551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1403.656018][T23551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1403.673798][T23551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1403.713111][T23551] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.722813][T23551] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.732352][T23551] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.741246][T23551] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1403.782804][ T2115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1403.806992][ T2115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.018115][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.045297][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.063378][T23759] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5310'. [ 1404.173786][ T2115] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1404.186179][T23762] overlayfs: failed to clone upperpath [ 1404.207149][ T2115] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1404.251556][T23763] tipc: Started in network mode [ 1404.256481][T23763] tipc: Node identity 66c510ba74c7, cluster identity 4711 [ 1404.291539][T23763] tipc: Enabled bearer , priority 0 [ 1404.344973][T23763] syzkaller0: entered promiscuous mode [ 1404.350797][T23763] syzkaller0: entered allmulticast mode [ 1404.357819][T23763] tipc: Resetting bearer [ 1404.565272][T23775] loop8: detected capacity change from 0 to 512 [ 1404.616125][T23775] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 1404.660046][T23775] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1404.718483][ T136] tipc: Resetting bearer [ 1404.759852][T23761] tipc: Resetting bearer [ 1404.770765][T23775] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2867: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 1404.810303][T23775] EXT4-fs (loop8): 1 truncate cleaned up [ 1404.824563][T23775] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1404.942553][ T28] audit: type=1800 audit(1756641866.934:251): pid=23775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5260" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1405.361983][ T9] tipc: Node number set to 302125242 [ 1405.596067][ T5786] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1405.616638][T23551] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.633612][ T5786] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1405.643573][ T5786] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1405.684343][ T5786] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1405.732946][ T5786] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1405.757334][ T5786] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1407.995327][T21495] Bluetooth: hci3: command tx timeout [ 1408.390501][T23761] tipc: Disabling bearer [ 1408.604117][ T5905] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.754570][ T5905] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.769985][ T27] IPVS: starting estimator thread 0... [ 1408.786673][T23799] netlink: 16 bytes leftover after parsing attributes in process `syz.6.5314'. [ 1408.821731][ T5905] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1408.873021][T23805] IPVS: using max 24 ests per chain, 57600 per kthread [ 1408.965492][ T5905] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1409.678862][T23787] chnl_net:caif_netlink_parms(): no params data found [ 1409.866140][ T5905] tipc: Left network mode [ 1410.040921][T23798] IPVS: starting estimator thread 0... [ 1410.070823][T21495] Bluetooth: hci3: command tx timeout [ 1410.130704][T23841] IPVS: using max 22 ests per chain, 52800 per kthread [ 1410.153346][T23787] bridge0: port 1(bridge_slave_0) entered blocking state [ 1410.183678][T23787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1410.218128][T23787] bridge_slave_0: entered allmulticast mode [ 1410.254868][T23787] bridge_slave_0: entered promiscuous mode [ 1410.458195][T23787] bridge0: port 2(bridge_slave_1) entered blocking state [ 1410.480636][T23787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1410.488032][T23787] bridge_slave_1: entered allmulticast mode [ 1410.515305][T23787] bridge_slave_1: entered promiscuous mode [ 1410.708547][T23856] overlayfs: failed to clone upperpath [ 1412.161706][T21495] Bluetooth: hci3: command tx timeout [ 1414.232217][T21495] Bluetooth: hci3: command tx timeout [ 1414.232353][ T5905] hsr_slave_0: left promiscuous mode [ 1414.343124][ T5905] hsr_slave_1: left promiscuous mode [ 1414.445249][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1414.512199][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.563898][ T5905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1414.571355][ T5905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1414.753027][ T5905] bridge_slave_1: left allmulticast mode [ 1414.758713][ T5905] bridge_slave_1: left promiscuous mode [ 1414.852478][ T5905] bridge0: port 2(bridge_slave_1) entered disabled state [ 1414.933111][ T5905] bridge_slave_0: left allmulticast mode [ 1414.938803][ T5905] bridge_slave_0: left promiscuous mode [ 1415.035087][ T5905] bridge0: port 1(bridge_slave_0) entered disabled state [ 1415.373206][ T5905] veth1_macvtap: left promiscuous mode [ 1415.378829][ T5905] veth0_macvtap: left promiscuous mode [ 1415.462564][ T5905] veth1_vlan: left promiscuous mode [ 1415.467941][ T5905] veth0_vlan: left promiscuous mode [ 1416.943428][ T5905] pimreg (unregistering): left allmulticast mode [ 1423.215123][ T5905] team0 (unregistering): Port device team_slave_1 removed [ 1423.936537][ T5905] team0 (unregistering): Port device team_slave_0 removed [ 1424.035074][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1424.041408][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1424.796310][ T5905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1425.455307][ T5905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1434.234662][ T5905] bond0 (unregistering): Released all slaves [ 1436.164014][ T5905] IPVS: stop unused estimator thread 0... [ 1485.444007][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1485.450531][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1518.237373][T23518] Bluetooth: hci0: command 0x0406 tx timeout [ 1518.243620][T23518] Bluetooth: hci2: command 0x0406 tx timeout [ 1528.490206][T23864] Bluetooth: hci3: command 0x0406 tx timeout [ 1546.886017][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.892636][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1608.323764][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1608.330220][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.767762][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.774334][ T1279] ieee802154 phy1 wpan1: encryption failed: -22