last executing test programs: 13m21.82431492s ago: executing program 0 (id=152): setxattr$system_posix_acl(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x24, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000180)={{{@in=@empty, @in6=@mcast1, 0xce22, 0x0, 0x4e20, 0x48, 0x2, 0x0, 0x0, 0x1}, {0xfffffffffffffffb, 0xfffffffffffffffd, 0x2, 0x2, 0x5, 0x2, 0x5}, {0x0, 0xffffffffffff90df, 0x800000000000000, 0x20000000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@dev={0xfe, 0x80, '\x00', 0x3c}, 0x4d5, 0x32}, 0xa, @in6=@remote, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x200000}}, 0xe8) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0xffffff1c, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xfc}}, 0x5}, 0x1c) 13m19.160805834s ago: executing program 0 (id=155): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x1011f, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) keyctl$revoke(0x3, r4) add_key$user(0x0, 0x0, 0x0, 0x0, r4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x5f0, 0xe0, 0xe0, 0x0, 0x0, 0x1c0, 0x520, 0x520, 0x520, 0x520, 0x520, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x1}, {0xffffffffffffffff, 0x4, 0x1}, {0xffffffffffffffff, 0x4}, 0x5, 0x7ff}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0xa}, [0x0, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1, 0x4}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x0, 0x7}}}}, {{@uncond, 0x0, 0x108, 0x130, 0x48000000, {}, [@common=@inet=@udp={{0x30}, {[0x4e20, 0x4e23], [0x4e21, 0x4e21]}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty, @ipv4=@empty, 0x2c, 0x16, 0x4}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x7ff, 0x2, 0x1, [0xff, 0x4239, 0x1, 0x8001, 0xb1, 0xfff5, 0x5, 0xd, 0xfff, 0x3, 0xb, 0xa, 0x5, 0x10, 0x2, 0xc], 0xd}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) 13m18.126212999s ago: executing program 0 (id=159): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000001c0)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x6, 0xffe0}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x5c, 0x2, [@TCA_MATCHALL_ACT={0x58, 0x2, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_METALST={0xc, 0x6, [@IFE_META_PRIO={0x8, 0x3, @val=0x3}]}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x8, 0x92, 0x20000000, 0x4, 0xfffffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x90}}, 0x4800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x101001, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\r', 0x1}], 0x1}, 0x4) 13m15.354977756s ago: executing program 0 (id=164): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xc, 0xb}, {0x7, 0xffe2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x0, 0x69, 0x9}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x2004c090) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 13m14.942871526s ago: executing program 0 (id=166): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) dup(0xffffffffffffffff) listen(0xffffffffffffffff, 0x1ff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xe61e2840a154f0c4, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) chdir(&(0x7f0000000380)='./file0\x00') setpgid(r0, r0) setpgid(0x0, r0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x10142, 0x0) 13m14.684921882s ago: executing program 0 (id=168): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, 0x0) 12m59.542129367s ago: executing program 32 (id=168): r0 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) r1 = syz_open_dev$radio(&(0x7f0000000400), 0x3, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) ioctl$VIDIOC_G_EXT_CTRLS(r1, 0xc0205648, 0x0) 11m4.711939932s ago: executing program 1 (id=419): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0xc001) prlimit64(0x0, 0xd, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x2800005d) io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x43cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r0 = socket(0x1e, 0x3, 0x2) sendmmsg(r0, 0x0, 0x0, 0x4000800) r1 = socket(0x2a, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}, 0x1, 0x0, 0x0, 0x8080}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 11m1.512375519s ago: executing program 1 (id=424): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001200010000", @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x8, 0x2) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) socket(0x1, 0x1, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) socket$inet6_sctp(0xa, 0x1, 0x84) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/comedi0\x00', 0x440, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 11m0.502569964s ago: executing program 1 (id=426): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$mtd(0x0, 0x48a99fbe, 0x500) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffc) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000000c0)={[{@quota}, {@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x33]}}]}) chdir(&(0x7f0000000100)='./file0\x00') r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 10m56.09207916s ago: executing program 1 (id=431): socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_buf(0xffffffffffffffff, 0x3a, 0xcc, 0x0, 0x57) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000003540)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000003740)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x8800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x800008, 0xfffffffffffffbff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000780)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040c4}, 0x7a712bfc07b8374c) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) io_setup(0x8, &(0x7f0000004200)) r4 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000001000)={0x0, 0x0, 0x5, &(0x7f0000000080)={0x9, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) 10m54.617237295s ago: executing program 1 (id=436): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, 0x0, 0x20000000) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x804e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a00000010000300686173683a69702c6d616300140007800500150001000000080012"], 0x5c}}, 0x0) r4 = add_key$keyring(0x0, &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r4, 0xffffffffffffffff, 0xb0) keyctl$setperm(0x5, r4, 0x1830827) r5 = add_key$user(0x0, &(0x7f0000000440)={'syz', 0x0}, 0x0, 0xfffffffffffffecb, r4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4004) keyctl$dh_compute(0x17, &(0x7f0000000000)={r5, r5, r5}, 0x0, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x200100, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 10m53.619458579s ago: executing program 1 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x90041) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r4], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 10m38.127247782s ago: executing program 33 (id=438): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x90041) syz_emit_ethernet(0x36, &(0x7f0000000180)=ANY=[], 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000080)='net/raw6\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$vim2m(&(0x7f00000000c0), 0x7, 0x2) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r3 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r4], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 6m34.448040631s ago: executing program 3 (id=891): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socket$kcm(0xa, 0x5, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc4}, 0x4040058) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x1f, 0x5, 0x2) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40200, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) sendmmsg(r2, 0x0, 0x0, 0x24008094) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f00000002c0)='./bus\x00', 0x12a) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r3, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) rmdir(&(0x7f0000000180)='./file1\x00') linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) chdir(&(0x7f0000000000)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) 6m33.009603235s ago: executing program 3 (id=895): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x14445, &(0x7f0000000000)={[{@noauto_da_alloc}, {@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@data_journal}, {@usrjquota}, {}]}, 0x3, 0x43b, &(0x7f0000000200)="$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") 6m31.726016306s ago: executing program 3 (id=897): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(&(0x7f0000000340), 0x2, 0x2) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000003840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x6, 0xa68d7c51df802ff5, 0xffbc, 0x6, 0x1d46, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) writev(r3, &(0x7f0000001500)=[{&(0x7f00000021c0)="bcc8", 0x2}], 0x1) close(r1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r4, 0x93bdb000) kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, 0xffffffffffffffff, &(0x7f0000000280)={0xffffffffffffffff, r4, 0xfffffb6e}) prlimit64(r5, 0x0, &(0x7f0000000000)={0x4ffb, 0x3}, &(0x7f0000000080)) openat$procfs(0xffffffffffffff9c, &(0x7f0000004240)='/proc/cgroups\x00', 0x0, 0x0) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 6m26.749575386s ago: executing program 3 (id=905): pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x5405, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) close(0x4) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setresgid(0xee00, 0xee01, 0x0) setgroups(0x0, 0x0) 6m25.639894622s ago: executing program 3 (id=910): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet6(0xa, 0x3, 0x7) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpgrp(0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x1000000}, 0x0, [0x0, 0x2, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x2, 0x0, 0xfffffffffffffffd, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x1, 0x5, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x3, 0x40800000000000, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000000000, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x3, 0x10, 0xfffffffffffffffe, 0x0, 0x80000000, 0x4, 0x0, 0x0, 0x40, 0x0, 0x59ed, 0x1000000000000000, 0x0, 0x4001ff, 0x0, 0x0, 0x0, 0x3, 0xd, 0x100000000, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000000000000, 0x0, 0x8, 0x2, 0x0, 0x80000000000, 0x0, 0x3f92, 0x0, 0x0, 0xb4b, 0x1, 0x0, 0x80000000, 0x5, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) 6m24.125409739s ago: executing program 3 (id=913): syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) chdir(&(0x7f0000000000)='./cgroup\x00') syz_mount_image$exfat(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1070425, 0x0, 0x3, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') r0 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$chown(0x4, r3, 0xee01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000280)=0xe6e8, 0x4) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$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") socket$packet(0x11, 0x3, 0x300) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r5, &(0x7f0000000280)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r5, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) 6m9.079815821s ago: executing program 34 (id=913): syz_io_uring_complete(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) chdir(&(0x7f0000000000)='./cgroup\x00') syz_mount_image$exfat(0x0, &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1070425, 0x0, 0x3, 0x0, &(0x7f0000000000)) rename(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)='./file0\x00') r0 = getpid() sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) setgroups(0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) keyctl$chown(0x4, r3, 0xee01, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x40, &(0x7f0000000280)=0xe6e8, 0x4) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$eJzs3AucjtX2OPC19t7PGJLeJrkMe+/18CaXTZKEkuSSJEmS5JaQJDmSkBhySxqSkFyG5DKE5DIxadzv90tCkjRJEpJbsv+fifmro/M/5/zq5Px/s76fz/uZvWa/az9rz3ovz/vM8G3nIdUb1qhSn4jgD8ELXxIAIBYABgDANQAQAEDZuLJxGfPZJSb8sYOwP9fDyVe6AnYlcf+zNu5/1sb9z9q4/1kb9z9r4/5nbdz/rI37z1hWtmla/mv5lnVvfP0/K+P3//9F0kuO+XJNyeu7AMT8qync////4R/I5f7/rxX8K3fi/mdt3P+sKvZKF8D+C/DzPyvI9g9nuP9ZG/efsazs19eCu+Y7nx3+C65J/5U3iPwnfwfie174KV/5ff7D/TPGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY3+B0/4SBQCZ4ytdF2OMMcYYY4wxxv48PtuVroAxxhhjjDHGGGP/eQgCJCgIIAayQSxkhxwgAGIy56+FOLgOcsP1kAfyQj7ID/FQAAqCBgMWCEIoBIUhCjdAEbgRikIxKA4lwEFJKAU3QWm4GcrALVAWboVycBuUhwpQEW6HO6AS3AmV4S6oAndDVagG1aEG3AM14V6oBfdBbbgf6sADUBcehHrwENSHh6EBPAIN4VFoBI9BY2gCTaEZNP8f5b8I3eEl6AE9IQF6QW94GfpAX+gH/WEAvAID4VUYBK9BIgyGIfA6DIU3YBi8CcNhBIyEt2AUvA2jYQyMhXGQBONhArwDE+FdmASTYQpMhWSYBtPhPZgBM2EWvA+z4QOYA3NhHsyHFPgQFsBCSIWPYBF8DGmwGJbAUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW2AbbYQd8AjvhU9gFu2EPfAZ74fN/M//U3+V3QUBAgQIVKozBGIzFWMyBOTAn5sRcmAsjGME4jMPcmBvzYB7Mh/kwHuOxIBZEgwYJCQthIYxiFItgESyKRbE4FkeHDkthKSyNN2MZLINlsSyWw3JYHitgBZnxsKuElbAyVsYqWAWrYlWsjtXxHrwHe2EtrIW1sTbWwTqZl6ewPtbHBtgAG2JDbISNsDE2xqbYFJtjc2yBLbAltsTW2BrbYBtsi22xHbbD9tgeO2AH7IgdsRN2ws7YGbtgV+ya/mI2wJfwJeyJVUUv7I29sQ8mZuuH/bE/voID8VV8FV/DRByMQ/B1fB3fwGF4EoefH4EjcSRWEm/jaByDJMZhEibhBJyAE3EiTsLJOBmnYjJOw+k4HWfgTJyJ7+Ns/AA/wLk4F+djCqbgAlyIqZiKi/AUpuFiXIJLcRkux2W4ElfhSlyDa3ENrsf1uBE34mbcjFtxK27H7fgJKgD8FHfjbkzEvbgX9+E+3I/78QAewHRMx4N4EA/hITyMh/EIHsGjeAyP4zE8gSfwJJ7C03gaz+JZPIfPx3/d4JNiqxNBZFBCiRgRI2JFrMghcoicIqfIJXKJiIiIOBEncovcIo/II/KJfCJexIuCoqAwwggSYcYrhYiKqCgiioiioqgoLooLJ5woJUqJ0qK0KCPKiLLiVlFO3CbKiwqilbtd3C4qidausrhLVBFVRFVRTVQXNUQNUVPUFLVELVFb1BZ1RB1RVzwo6ole2A8fFhmdaSgGYyMxBBuLJkJefIVqIYZhS9FKtBZPihE4HNuKFq6deEa0F6Oxg/ibGIPPiU5iHHYWL4guoqvoJl4U3UVL10P0FJOwl+gtpmIf0Vf0E/3FDKwm3sfZ2auL10SiGCyGiNfFfHxDDBNXieFihBgp3hKjxNtitBgjxopxIkmMFxPEO2KieFdMEpPFFDFVJItpYrp4T8wQM8Us8b6YLT4Qc8RcMU/MFyniQ7FALBSp4iOxSHws0gDEErFULBPLxQqxUqwSq8UasVasE+vFBrFRbBKbxRaxVWwT28UO8YnYKT4Vu8RusUd8JvaKz8U+8YXYL74UB8RXIl18LQ6Kb8Qh8a04LL4TR8T34qg4Jo6LH8QJ8aM4KU6J0+KMOCt+EufEz+K88AIkSiGlVDKQMTKbjJXZZQ55lcwpg8zXfxknr5O55fUyj8wr88n8Ml4WkAWllkZaSTKUhWRhGZU3yCLyRllUFpPFZQnpZEkJ6iZZWt4sy8hbZFl5qywnb5PlZQVZUd4u75CV5J0SIheOUVVWk9VlDXmPTIB7ZS15n6wt75d15AOyrnxQ1pMPyfryYdlAPiIbykdlI/mYbCybyKaymWwuH5ct5BOypWwlW8snZRv5lGwrn5bt5DOyvfQXHyLPyU7yedlZviC7yK6ym/xZnpde9pA9JfQC2Vu+LPvIvrKf7C8HyFfkQPmqHCRfk4lysBwiX5dD5RtymHxTDpcj5Ej5lhwl35aj5Rg5Vo6TSXK8nCDfkRPlu3KSnCynyKkyWU6T/S6uNEvKf5r/zu/kD/rl6BvlJrlZbpFb5Ta5Xe6Qn8idcqfcJXfJPXKP3Cv3yn1yn9wv98sD8oBMl+nyoDwoD8lD8rA8LI/II/KoPCbPyB/kCfmjPClPyVPyjDwrz8pzF38GoFAJJZVSgYpR2VSsyq5yqKtUTnW1yqWuURF1rYpT16nc6nqVR+VV+VR+Fa8KqIJKK6OsIhWqQqqwiqob8OIDRhVXJZRTJVUpddO/k6+KqBtVUVXsN/mZ9SX8g/qaq+aqhWqhWqqWqrVqrdqoNqqtaqvaqXaqvWqvOqgOqqPqqDqpTqqz6qy6qC6qm+qmuqvuqofqoRJUguqtXlZ9VF/VT/VXA9QrImMPg9QglagS1RA1RA1VQ9UwNUwNV8PVSDVSjVKj1Gg1Wo1VY1WSSlIT1AQ1UU1Uk9QkNUVNUckqWU1X09UMNUPNUrPUbDVbzVFz1Dw1T6WoFLVALVCpKlUtUotUmlqsFqulaqlarparlWqlWq1Wq7VqrVqv1qs0tUltUlvUFrVNbVM71A61U+1Uu9QutUftUXvVXrVP7VP71X51QB1Q6SpdHVQH1SF1SB1Wh9URdUQdVUfVcXVcnVAn1El1Up1Wp9VZdVadU+fUeXU+47QvEIEIVKCCmCAmiA1igxxBjiBnkDPIFeQKIkEkiAvigtzB9UGeIG+QL8gfxAcFgoKBDkxgA3Gx6dHghqBIcGNQNCgWFA9KBC4oGZQKbgpKBzcHZYJbgrLBrUG54LagfFAhqBjcHtwRVAruDCoHdwVVgruDqkG1oHpQI7gnqBncG9QK7gtqB/cHdYIHgrrBg0G94KGgfvBw0CB4JGgYPBo0Ch4LGgdNgqZBs6D5n7q+9yfzPuF66J46QffSvfXLuo/uq/vp/nqAfkUP1K/qQfo1nagH6yH6dT1Uv6GH6Tf1cD1Cj9Rv6VH6bT1aj9Fj9TidpMfrCfodPVG/qyfpyXqKnqqT9TQ9Xb+nZ+iZepZ+X8/WH+g5eq6ep+frFP2hXqAX6lT9kV6kP9ZperFeopfqZXq5XqFX6lV6tV6j1+p1er3eoDfqTXqz3qK36m16u96hP9E79ad6l96t9+jP9F79ud6nv9D79Zf6gP5Kp+uv9UH9jT6kv9WH9Xf6iP5eH9XHdBn9gz6hf9Qn9Sl9Wp/RZ/VP+pz+WZ/XPuPkPuPt3SijTIyJMbEm1uQwOUxOk9PkMrlMxERMnIkzuU1uk8fkMflMPhNv4k1BU9BkIEOmkClkoiZqipgipqgpaoqb4sYZZ0qZUqa0KW3KmDKmrClryplyprwpbyqaiuYOc4e509xp7jJ3mbvN3aaaqWZqmBqmpqlpaplaprapbeqYOqauqWvqmXqmvqlvGpgGpuGuhqaRaWQam8amqWlqmpvmpoVpYVqalqa1aW3amDamrWlr2pl2pr1pbzqYDqaj6Wg6mU6ms+lsupguppvpZrqb7qaH6WESTILpbXqbPqaP6Wf6mQFmgBloBppBZpBJNIlmiBlihpqhZpgZZoabEWZkxomqeduMNmPMWDPOJJkkM8FMMBPNRDPJTDJTzBSTbJLNdDPdzDAzzCwzy8w2s80cM8fMM/NMikkxC8wCk2pSzSKzyKSZNLPELDHLzDKzwqwwq8wqs8asMetgndlgNphNZpPZYraYbWab2WF2mJ1mp9lldpk9Zo/Za/aafWaf2W/2mwPmgEk36eagOWgOmUPmsDlsjpgj5qg5ao6b4+aEOWFOmpPmtDltzpq8F98vvYm12W0Oe5XNaa+2uew19u/jfDa/jbcFbEGrbR6b9zexsdYWtcVscVvCOlvSlrI3XRaXtxVsRXu7vcNWsnfaypfFNe29tpa9z9a299sa9p7fxHXsA7aufdTWQwSwTWwD28w2tI/aRvYx29g2sU1tM9vGPmXb2qdtO/uMbW+fvSxeYBfaVXa1XWPX2l12tz1tz9hD9lt71v5ke9iedoB9xQ60r9pB9jWbaAdfFo+0b9lR9m072o6xY+24y+IpdqpNttPsdPuenWFnXhan2A/tbJtq59i5dp6d/0ucUVOq/cgush/bNBvAErvULrPL7Qq78v/WutSutxvsRrvTfmq32K12m91ud2SeCNvddo/9zO61n9uD9hu7335pD9jDNt1+/Uucsb/D9jt7xH5vj9pj9rj9wZ6wP6rM7Iy9/2B/tuett0BIQJIUBRRD2SiWslMOuopy0tWUi66hCF1LcXQd5abrKQ/lpXyUn+KpABUkTYYsEYVUiApTlG6gzPKKUwlyVJJK0U1Umm6mMnQLlaVbqRzdRuWpAlWk2+kOqkR3UmW6i6rQ3VSVqlF1qkH3UE26l2rRfVSb7qc69ADVpQepHj1E9elhakCPUEN6lBrRY9SYmlBTakbN6XFqQU9QS2pFrelJakNPUVt6mtrRM9SenqUO9DfqSM9RJ3qeOtML1IW6Ujd6kbrTS9SDelIC9aLe9DL1ob7Uj/rTAHqFBtKrNIheo0QaTEPodRpKb9AwepOG0wgaSW/RKHqbRtMYGkvjKInG0wR6hybSuzSJJtMUmkrJNI2m03s0g2bSLHqfZtMHNIfm0jyaTyn0IS2ghZRKH9Ei+pjSaDEtoaW0jJbTClpJq2g1raG1tI7W0wbaSJtoM22hrbSNttMO+oR20qe0i3bTHvqM9tLntI++oP30JR2gryidvqaD9A0dom/pMH3ne9L3dJSO0XH6gU7Qj3SSTtFpOkNn6Sc6Rz/TefIEIYYilKEKgzAmzBbGhtnDHOFVYc7w6jBXeE0YCa8N48Lrwtzh9WGeMG+YL8wfxocFwoKhDk1oQwrDsFBYOIyGN4RFwhvDomGxsHhYInRhybBUeFNYOrw5LBPeEpYNbw3LhbeF5cMK4aP33x7eEVYK7wwrh3eFVcK7w6phtbB6WCO8J6wZ3hvWCu8La4f3h2XCB8K64YNhvfChsH74cNggfCRsGD4aNgofCxuHTcKmYbOwefh42CJ8ImwZtgpbh1eFbcKnwrbh02G78JmwffjsL/MPLMycf/Ky+YSwV9g7fDl8OfT+PjkvOj+aEv0wuiC6MJoa/Si6KPpxNC26OLokujS6LLo8uiK6Mroqujq6Jro2ui66ProhujHqfY1s4NAJJ51ygYtx2Vysy+5yuKtcTne1y+WucRF3rYtz17nc7nqXx+V1+Vx+F+8KuIJOO+OsIxe6Qq6wi7obXBF3oyvqirniroRzrqQr5Zq55q65a+GecC1dK9faPemedE+5p9zT7mn3jGvvnnUd3N9cR/ec6+Sed8+7F1wX19V1cy+67m58rgvPyQTX2/V2fVwf18/1cwPcADfQDXSD3CCX6BLdEDfEDXVD3TA3zA13w91IN9KNcqPcaDfajXVjXZJLchPcBDfRTXST3CQ3xU1xyS7ZTXfT3Qw3w1WaeeEoc9wcN8/NcykuxS1wGeeMqW6RW+TSXJpb4pa4ZW6ZW+FWuFVulVvj1rh1bp3b4Da4TW6T2+K2uG1um9vhdridbqfb5a+5sKjb6/a5fW6/2+8OuK9cuvvaHXTfuEPuW3fYfeeOuO/dUXfMHXc/uBPuR3fSnXKn3Rl31v3kzrmf3XnnXVJkfGRC5J3IxMi7kUmRyZEpkamR5Mi0yPTIe5EZkZmRWZH3I7MjH0TmROZG5kXmR1IiH0YWRBZGUiMfRRZFPo6kRRZHlkSWRpZFlke8L7Al9IV8YR/1N/gi/kZf1BfzxX0J73xJX8rf5EtfqDvN+1t9OX+bL+8r+Ir+Md/YN/FNfTPf3D/uW/gnfEvfyrf2T/o2/inf1j/t2/lnfHv/rO/g/+Y7+ud8J/+87+xf8F18V9/Nv+i7+5d8D9/TJ/hevrd/2ffxfX0/398P8K/4gf5VP8i/5hP9YD/Ev+6H+jf8MP+mH+5H+JExb/lRmR+RYZxP8uP9BP+On+jf9ZP8ZD/FT/XJfpqf7t/zM/xMP8u/72f7D/wcP9fP8/N9iv/QL/ALfar/yC/yH/s0vzjzorFf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+E/8Tv9p36X3+33+M/8Xv+53+e/8Pv9l/6A/8qn+6/9Qf+NP+S/9Yf9d/6I/94f9cf8cf+DP+F/9Cf9KX/an/Fn/U/+nP/Zn+d/s8YYY4wx9i8Zf2kofjtz4XJ+r9/JEb+6c28AuHpr/vRfz2ecUa7Lc2HcV8THZnx9pmfnhzNvVasmJCRcvG+ahKDwXIDM3wRl+OVPDy7Gi6E1PAXtoBWU/t36+4quZ+mfrB+9FSDHr3IyCsqML63/BQAmXLbfvuLxJ0cuKBeejvt/rD8XoGjhSznZ4VK8GFr/cn2lFZT5B/XnbfFP6s/+ZRJAy1/l5IRL8aX6S8ET8Cy0+809GWOMMcYYY4yxC/qKih0zP39m/sXn730+j1eXcrLBpfiffT5njDHGGGOMMcbYlfdc125PP96uXauO//6g8v8o618eNIL/1Mo8+N2B9wCZ31EA8AcXBMgYyL9yF5v/kmMlXnzq/P3UsjM+gP+OVv4Zgyv8wsQYY4wxxhj701066f/t99WVKogxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGMuC/or/TuxK75ExxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhi70v5PAAAA//8unPrs") socket$packet(0x11, 0x3, 0x300) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendto$inet(r5, &(0x7f0000000280)="02", 0x1, 0x14, 0x0, 0x0) shutdown(r5, 0x1) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r6, 0x0, 0x7ffff000, 0x0) 2m33.056463744s ago: executing program 7 (id=1954): socket$packet(0x11, 0x3, 0x300) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="5001", @ANYRES8=r1, @ANYRES16=r4], 0x14) 2m31.870486823s ago: executing program 7 (id=1960): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4048044) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) ptrace(0x10, 0x1) r4 = syz_open_dev$media(&(0x7f0000000040), 0x7fdffffe, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$VIDIOC_G_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) ioctl$MEDIA_REQUEST_IOC_REINIT(r5, 0x7c81, 0x0) 2m30.923676867s ago: executing program 7 (id=1968): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080320000c4e28ddc8dcd000000c182fd3f0000c8b950020000b801000000b9a6080000b800000100ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x62}], 0x1, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd9000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0xa, 0x0, 0x1}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x7, 0x10003, 0x2, 0x8000000200000001, 0x58f, 0x5, 0x2, 0x9, 0xfffffffffffffff8, 0x100000000, 0xd29a, 0x800000009, 0x8, 0xfffffffffffffff9, 0xb07, 0x9], 0x8000000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m30.627919504s ago: executing program 7 (id=1969): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80), 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x90100, 0x141) getdents(r0, &(0x7f0000000280)=""/237, 0xed) 2m30.39030121s ago: executing program 7 (id=1971): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000240)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0e, &(0x7f0000000000)) 2m29.268472547s ago: executing program 7 (id=1977): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./bus\x00') open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) 2m29.128737251s ago: executing program 35 (id=1977): syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000200)=ANY=[@ANYRES16=0x0, @ANYRES16], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) chdir(&(0x7f0000000140)='./bus\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000001240)='./file1\x00', 0x2) link(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)='./bus\x00') open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) 19.005468897s ago: executing program 4 (id=2682): openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x88002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x2}, &(0x7f00000002c0)="f5", 0x30, 0xfffffffffffffffe) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 18.163728208s ago: executing program 4 (id=2685): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x82200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) socket$inet_udp(0x2, 0x2, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlockall(0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) syz_open_dev$vbi(0x0, 0x0, 0x2) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x0, @local}]}) 16.076799449s ago: executing program 4 (id=2690): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0xa, 0x10}, 0xc) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0xe652, 0x5, 0x134, 0x48, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x6fcd, 0x1, 0xf06, 0x3, 0x95, 0x7c, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 13.800208664s ago: executing program 4 (id=2700): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r4, &(0x7f0000007700), 0x318, 0xfc0, 0x0) 12.604294164s ago: executing program 4 (id=2702): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x60, 0x20, 0x1, 0x2, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x60}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 11.568711669s ago: executing program 4 (id=2707): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x777) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) listen(r0, 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='-2 -3 +4\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='3\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0\x00', 0x2) close(r3) 6.106984381s ago: executing program 8 (id=2734): r0 = syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x1, 0x6e5, &(0x7f0000000680)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x7991e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(0x0, 0x8000, 0x0) r4 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$FUSE_DIRENTPLUS(r4, &(0x7f0000006d40)=ANY=[], 0x10) 5.800722259s ago: executing program 2 (id=2738): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5.033808398s ago: executing program 8 (id=2739): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x60, 0x20, 0x1, 0x2, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x60}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 4.040063392s ago: executing program 5 (id=2741): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f0000000140)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c0d23266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/43, 0x0}) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000300)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/220, &(0x7f00000000c0)=""/80, &(0x7f0000000780)=""/82}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="10010100000000000100000001"], 0x10, 0x4000050}, 0x4000000) 3.998699973s ago: executing program 2 (id=2742): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c3"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="7f454c4604070001040000000000040002000600030000000903000038000104ce0000000e0000000b"], 0x58) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x44}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0xff, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x81, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.997834863s ago: executing program 8 (id=2743): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRES64=0x0, @ANYRESHEX], 0xff, 0x5534, &(0x7f0000006040)="$eJzs3EtvG1UUAODrpOmbEiEW7DpShZRItVWnSQW7AK14iFQRjwUr6tiO5db2RLHjhKxYsEQs+CcIJFYs+Q0sWLNDLEDskIo89wY1PCpQHJsk3ydNz8yd6zPnjqpEZyZyAM6s+ezXn0vhWrgUQpgNIVwNodgvpa2wGsMLIYTrIYSZJ7ZSGv9j4HwI4XII4dooecxZSqc+vzm8sfLTW798892Fc1e++Pr76a0amLYXQwjdrbi/240xb8X4MI3Xhu0idpeHKcYT3UfpOI9xt7lRZNitHcyrFfF2K87Pt3b6o7jZqdVHsdXeLMa3evGC/WHrIE/xgYe17eK40dwoYrufF7G1H+va248/2/b7g5inkfJ9VKQPg8FBjOPNvWZcz9ajItZ7gzQe8+aN5t4oDlNMlwv1vNMo6tg4yp3+f3u73dvZy4bN7X4772UrlepLleqdcnU7bzQHzeVyrdu4s5wttDqjaeVBs9ZdbeV5q9Os1PPuYrbQqtfL1Wq2cLe50a71smq1crtyq7yymPZuZq/ffz/rNLKFUXy13dsZtDv9bDPfzuInFrOlyu2XF7Mb1ezdtfVs/Z1799bW3/vw7gf3X1l787U06S9lZQtLt5aWytVb5aXq4sld/+h3/X9a/yep6DGuH46k9LSTDyZXB8AJov8HpmGi/f9cGHv/H/T/Y6H/P7Prf5wc7QZytj21/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT7Ye7LN4qd+Xh8JY0/k4aeS8elEMJMCOHx35gN5w/lnE155v5h/tyfavi2FIoMo2tcSNvlEMJq2n579rjvAgAAAJxeX318/bPYrcd/5qddEJMUH9rMXH0wpnylEMLc/I9jyBLSw6bw/NGrikb/v8+FvTFlKx5gXRxTsvjI7dy4sv0rs4fCxSdCKYaZg5nnJ1oXAABwnA53ApPtQgAAAJikT6ddANNRvGlNf4ufXvNdiCG9ELx06AgAAAA4gUrTLgAAAAA4dkX/7/v/AAAA4HSL3/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL+zcze5aQNRAICfbVxo6Q+quu9VuoNj9AhddllxFY5Ar9ALcAa667a7CCLsSRSiECA2JiTfJ9nD2NbzA7GZmacBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE7pbzmf/P71ddA0zmrdzCHvKJomCQAAAK/UspxPqg+juj9M1z+kS59TP4uIPCIeGrsX8WYrZpHilDueL+/l8CeiirB5Rz8d7yLiWzquPp36VwAAAICXazGdjdOqenUanTshulRP2uTvv7cUL4uIcvSvpWj55vTloEfX++eHNv/vXvzccTc7LrVqYisal8zcqKbcem1F26+4raRJzeBOk9VN3l06AABAV7ZHAh2OQgAAAOjYj3MnwHlUq56pFj8V8PfrJi0Ivt3qAQAAABfo2KpnAAAA4DkaPnq3Gv9fwP5/H//b/w8AAACerN7/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgFNalvPJYjobN42zWjfTzrcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAArtmfdxSGYTAIg5tEeXVCF/D9b2kW7NatmxkQfPxbCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAK4/j5XnGqzGTbfQ6k7x7Xkk+nRrfTo1f58Y/yVh3/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY2Z+XFAxhMAaA+R8q7qT3P6yE6hlEmIFCSOjiAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeKPP9fK9w6/hSPJv27C0HknWTg1bpzGHae+H8dgZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDJzv37xk3FAQD/3vl8pQVECChDEKISAyw0vZaWrgygiIE/ASlKryVw5UebgVYVKAsbytwFwYgQEihs/R86t1KXsnW4oUhMDCD77OT1KOKgin0kn4/0/L62HL/vc6IoXz/nAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgyfnMvzorNwiTuVsduP7i+XvR3pvrCze27y0Ur4s7fXP+L/Up8/r2Y7nSW2ksEAACAwyOr6/uIfuQ7q0XQXSjr/7w+p6j5v3l6Etf1/HTdX/d17V+0n3+6//zuQAuTcYqLXtgYDU/+NZVeto/znGfP/OMZvfLOl89esvIb0n1n67lxXt7Pzle3br3VL8MjTWQLAPwXJ+q+Cuq/h4p+0GZiABwavaoV7lX1f7bQbk4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATehvxZN13ImI5d5eXLjz4Pp62U/t39y+u1y3szdubKfXLC6RR8SFjdHwZFMT+R+4cvXah2uj0fBy88FLEdHe6FXw3gznRLSZoeBxg271sz7bVx2PiPZzbj9o+RcTAAAHTl61oq6/l++sFsc6ixF/fPtw/f9KEkda/0/1af1///2zt9Ox0vp/0NgM59/K5qVPVq5cvfbaxqW1i8OLw49ePzV4Y3D63Jkz51bKZyUrnpgAAADwePpVS+v/7mLEeGr9/1gSx4z1/6dfDz5Px8rU/4+0t+jXdiYAAACH27PHf/u184jjnX4/Plvb3Lw8mGx3909Nti2k+q8dqVpa/2eLbWcFAAAANGG81Xlo/f98EseM6/9PfffCD+k1s4g4Wq3/n1j/eHS+uem05PeZzmri34n3faoAAADMtaNVS9f/8/L9/+7uKw/diHj15UlcfQzgTPV/9vaX36djpe//n25uinOpuzS5H2W/FNFbajsjAAAADrInqlYU+7/kO6sf/Hjs3b73/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa9mcAAAD//6iKRJw=") mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x800714, &(0x7f00000000c0)={[{@test_dummy_encryption}]}, 0x1, 0x4c0, &(0x7f00000006c0)="$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") openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0) pwritev2(r0, 0x0, 0x0, 0x7ffffe, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) openat(0xffffffffffffff9c, 0x0, 0x4, 0x80) openat(0xffffffffffffff9c, 0x0, 0x183341, 0x0) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000300)={0x40, 0x144, 0x5}, 0x18) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) llistxattr(&(0x7f0000000040)='./file0/file2\x00', &(0x7f0000001400)=""/97, 0x61) 3.824028837s ago: executing program 5 (id=2744): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8000000000000001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB, @ANYBLOB="0800260090150000080057"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/81, 0xfffffffffffffef6, 0x0, &(0x7f00000002c0)=""/78, 0x4e}, &(0x7f0000000500)=0x40) syz_usbip_server_init(0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000520006000500010000000800", @ANYRES16], 0x2c}}, 0x20008000) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) io_uring_setup(0x400025e0, &(0x7f0000000240)={0x0, 0x9ab0, 0x10000, 0xffffffff, 0x29}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1a, 0xa, 0xffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r2], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) 3.735976919s ago: executing program 2 (id=2745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) 2.622761566s ago: executing program 5 (id=2746): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x8}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xfffffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x0, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0xff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x8c1, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x401, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x5, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r9, {0xffff}, {}, {0x2, 0xc}}, [@qdisc_kind_options=@q_cbq={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 2.613602237s ago: executing program 6 (id=2747): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/160, 0xa0}], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x5, @loopback}, 0x1c) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400), 0x0, 0x0, &(0x7f0000000480)={0xa, 0x4e25, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0x2}, 0x1c) r1 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r1, 0x0, 0x2) syz_ublk_setup_io_uring(0x668a, 0x0, 0x0, 0x0, 0x0) 2.523889179s ago: executing program 2 (id=2748): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') creat(&(0x7f0000000240)='./file1\x00', 0x0) 2.47577621s ago: executing program 6 (id=2749): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) io_setup(0x7d, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) chroot(&(0x7f0000000a40)='./file0\x00') mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@xino_auto}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r0, &(0x7f0000002600)=""/4113, 0x1011) 2.409686511s ago: executing program 5 (id=2751): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000140)={@rand_addr, @initdev}, &(0x7f00000001c0)=0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r2, 0xae9a) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB='(n', @ANYBLOB="02"], 0x28}, 0x1, 0x0, 0x0, 0x4008000}, 0x8000) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x7f, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x8, 0x2, 0xffffffffffffffff], 0x0, 0x200}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000380)={[0x101, 0xaec4, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x20000, 0x1c, 0x0, 0x5, 0x1], 0x0, 0x41981}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.299992374s ago: executing program 6 (id=2752): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0xd, 0x8b, 0xd, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xe, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x4, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x7, 0x4, 0x2, 0x8, 0x6, 0x6, 0x1, 0x7, 0x4, 0x10, 0x4], 0x3, [0x2, 0x5, 0x7fff, 0x56, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x8000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0x3, 0x5, 0x2, 0xfff5, 0x4, 0x8, 0x7, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffe00, {0x0, 0x0, 0x0, r7, {0xffff}, {0x8}, {0xfff2, 0xffe1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xe, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x6, 0x1, 0xc, 0x4, 0x10, 0x4], 0x3, [0xb, 0x5, 0x7fff, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x4000, 0xb, 0x3, 0x5, 0x6, 0xd, 0x1], [0x2, 0x5, 0x2, 0xfff5, 0x4, 0x108, 0x7, 0x9, 0x5, 0x6, 0x7fff, 0x40, 0x1, 0x3, 0x1, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.05398468s ago: executing program 8 (id=2753): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x10c000) syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M") r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x103042, 0x80) pwritev2(r4, &(0x7f0000002580), 0x0, 0x5405, 0x5, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000005c0)={[0x5836, 0x1000000000000008, 0x2, 0x4000000000000e52, 0x1, 0xf, 0x1043, 0x200000000006, 0x10, 0x1, 0xfffffffffffffffe, 0x100000000, 0x9ca6, 0x1, 0x8000000000005, 0x5c], 0x8080000, 0x42590}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x8000, &(0x7f0000000740)={[{@barrier}]}, 0x3, 0x547, &(0x7f0000001240)="$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") syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') 1.498012974s ago: executing program 2 (id=2754): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000180)={0x73622a85, 0xb}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x30, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000600)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000007c0)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2fc0}], 0x0, 0x0, 0x0}) 1.415786696s ago: executing program 6 (id=2755): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x60, 0x20, 0x1, 0x2, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x60}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 1.415253486s ago: executing program 8 (id=2756): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x6c, &(0x7f0000000540)={@local, @remote, @void, {@llc={0x4, {@snap={0xaa, 0x0, "18", "83dee9", 0x60, "2332432051fa23f220e95aa9eba74df731c0235aea9c15d287ed9ac34438c474eca2f2a4d79d50bd486000308be30525bf29ca8ed1c7fa482d4a697305412f86c7dbd2473fe0264804e862b61796ee788af2d060f2d6"}}}}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe, 0xa93}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dddbbd, {0x0, 0x0, 0x0, r4, {0xfff1, 0x3da48c8682330ab8}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x3, 0x0, 0x0, {{0xa, 0x4, 0x400}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0xf1}, {0x6, 0x10, 0x1}}}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xa263}}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20045080}, 0x8840) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0b00000005"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000880)=ANY=[@ANYBLOB="1800000003000000000000000040000018110000", @ANYRES32=r5], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x32, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r6}, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0xec, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa043}, [@NFTA_TABLE_USERDATA={0xd7, 0x6, "5dc9cfa48ca17f33f6ee2df8346c73cbc4475ddaadf0fda3e2b9e68e73fe25e1ec4a7491a58cf0899b8236640206b8e3580c7bd091a259916fa56f68114cbd9ef4378dce8cd320841fd46c614c0779b5cc2a0e12c7553fc73a5c3bd01259f82edf05367cc3301f80b3eed7fbec9f1ea105464431d03502186cb2a0f33f6bba72dfdc1040e71ba978395cae472147b5ca34b8cd776142940e0e6bbb497f702fc67ce088918d070f86892446464ee7e248dac493155302552e843a4a37eec3649b4483a18a6fce41008b77b6094ec4b84a32207a"}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x60, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0xffffffff}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x1a0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x41, 0x1, 0x70bd26, 0x4, {0x1}, [@typed={0xc, 0x2, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) 1.2315219s ago: executing program 5 (id=2757): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r0, 0x1, 0x12, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) close(0x3) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x4, &(0x7f0000000640)=@framed={{}, [@ldst={0x1, 0x0, 0x4}]}, 0x0}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)=@ipv6_newrule={0x60, 0x20, 0x1, 0x2, 0x0, {0xa, 0x80, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10018}, [@FRA_DST={0x14, 0x1, @private1}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}, @FRA_SRC={0x14, 0x2, @rand_addr=' \x01\x00'}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'syzkaller0\x00'}]}, 0x60}}, 0x0) write$binfmt_misc(r0, &(0x7f0000000300), 0x6) 380.182201ms ago: executing program 8 (id=2758): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x8000000000000001) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB, @ANYBLOB="0800260090150000080057"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000340)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f00000006c0)=""/81, 0xfffffffffffffef6, 0x0, &(0x7f00000002c0)=""/78, 0x4e}, &(0x7f0000000500)=0x40) syz_usbip_server_init(0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000520006000500010000000800", @ANYRES16], 0x2c}}, 0x20008000) syz_usbip_server_init(0x2) syz_usbip_server_init(0x2) io_uring_setup(0x400025e0, &(0x7f0000000240)={0x0, 0x9ab0, 0x10000, 0xffffffff, 0x29}) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1a, 0xa, 0xffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYRES32=r2], 0x3c}}, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x20}}, 0x40000c0) sendmsg$nl_route(r1, 0x0, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) 375.649021ms ago: executing program 6 (id=2759): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = getpgrp(0x0) kcmp(r2, r1, 0x4, 0xffffffffffffffff, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) syz_clone(0xca700, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r3, 0x0, 0x2000800) 285.281743ms ago: executing program 5 (id=2760): pipe2$9p(0x0, 0x84880) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000380), 0x1c0002, 0x0) getpid() write$vga_arbiter(r3, &(0x7f0000000240), 0xf) 72.952779ms ago: executing program 6 (id=2761): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x1403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x8, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x8020, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x887, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x1, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7e, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x6, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x9, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000804, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x3, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) sendmsg$ETHTOOL_MSG_RINGS_SET(0xffffffffffffffff, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_XSAVE(r0, 0x5000aea5, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)=0x4) r2 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r2, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x10}}}, 0x1e) connect$pptp(r2, &(0x7f0000000700)={0x18, 0x2, {0x0, @multicast1}}, 0x1e) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7f}, 0x90) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r3, 0x4004743a, &(0x7f0000000300)) 0s ago: executing program 2 (id=2762): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00') symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00') symlink(&(0x7f0000001600)='streaming/header/h\x00', &(0x7f0000001700)='streaming/class/fs/h\x00') kernel console output (not intermixed with test programs): uct=0025, bcdDevice=29.40 [ 703.365814][ T9286] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 703.385244][ T9286] usb 8-1: config 0 descriptor?? [ 703.650791][ T9286] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 703.668358][ T9286] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 703.719678][ T9286] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 703.766854][ T9286] usb 8-1: media controller created [ 704.372147][ T9286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 704.450143][ T9286] az6027: usb out operation failed. (-71) [ 704.509942][ T9286] az6027: usb out operation failed. (-71) [ 704.526434][T10952] Dead loop on virtual device ip6_vti0, fix it urgently! [ 704.534507][ T9286] stb0899_attach: Driver disabled by Kconfig [ 704.582981][T10954] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 704.719829][ T9286] az6027: no front-end attached [ 704.719829][ T9286] [ 704.740020][ T9286] az6027: usb out operation failed. (-71) [ 704.748450][ T9286] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 705.265051][T10958] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[10958] [ 705.728379][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 705.786547][ T9286] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input33 [ 705.870774][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.050184][ T9286] dvb-usb: schedule remote query interval to 400 msecs. [ 706.059831][ T9286] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 706.071814][ T9286] usb 8-1: USB disconnect, device number 15 [ 706.524443][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 706.760504][ T4230] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 707.888616][ T9286] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 710.018109][T11017] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[11017] [ 710.082577][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.475485][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 711.495888][T11028] netlink: 'syz.2.1525': attribute type 6 has an invalid length. [ 711.829981][ T4230] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 711.877823][T11055] loop7: detected capacity change from 0 to 64 [ 712.034290][T11055] hfs: unable to load iocharset "cp864.part=0x0000000000000008" [ 712.044208][T11055] hfs: unable to parse mount options [ 712.069897][ T4230] usb 6-1: Using ep0 maxpacket: 32 [ 712.092978][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 712.343209][T11055] loop7: detected capacity change from 0 to 512 [ 712.602306][ T4230] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 712.610543][ T4230] usb 6-1: config 0 has no interface number 0 [ 713.380238][ T4230] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 713.400985][ T4230] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 713.426856][ T4230] usb 6-1: Product: syz [ 713.440639][ T4230] usb 6-1: Manufacturer: syz [ 713.459016][ T4230] usb 6-1: SerialNumber: syz [ 713.585311][ T4230] usb 6-1: config 0 descriptor?? [ 713.601500][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 713.647403][ T4230] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 713.759973][T10858] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 713.862396][ T4230] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 713.875204][ T4230] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 713.901181][T10857] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 714.769941][ T1334] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 715.041236][ T4234] usb 6-1: USB disconnect, device number 16 [ 715.059858][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 715.090593][ T4234] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 715.119265][ T4234] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 715.136282][ T4234] quatech2 6-1:0.51: device disconnected [ 715.190097][T10858] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 715.200193][T10858] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.210681][T10858] usb 5-1: config 0 descriptor?? [ 715.230903][ T1334] usb 8-1: Using ep0 maxpacket: 32 [ 715.236178][T10857] usb 3-1: Using ep0 maxpacket: 32 [ 715.280133][T10859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 715.350038][ T1334] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 8 [ 715.360072][T10857] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 715.371376][T10857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.387415][T10857] usb 3-1: config 0 descriptor?? [ 715.540104][ T1334] usb 8-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 715.553718][ T1334] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 715.583528][ T1334] usb 8-1: Product: syz [ 715.593909][ T1334] usb 8-1: Manufacturer: syz [ 715.604333][ T1334] usb 8-1: SerialNumber: syz [ 715.630282][T11082] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 715.650115][T10857] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 715.660304][T10857] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 715.680249][T10857] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 715.699278][T10858] samsung 0003:0419:0001.000E: hidraw0: USB HID vf0.00 Device [HID 0419:0001] on usb-dummy_hcd.4-1/input0 [ 715.711269][T10857] usb 3-1: media controller created [ 715.746727][T10857] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 715.870060][T10857] az6027: usb out operation failed. (-71) [ 715.890055][T10857] az6027: usb out operation failed. (-71) [ 715.909289][T10857] stb0899_attach: Driver disabled by Kconfig [ 715.920625][ T4234] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 715.929336][T10857] az6027: no front-end attached [ 715.929336][T10857] [ 715.951375][T10858] usb 5-1: USB disconnect, device number 16 [ 716.027995][T10857] az6027: usb out operation failed. (-71) [ 716.807968][ T1334] usb 8-1: MIDIStreaming interface descriptor not found [ 716.846401][T10857] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 716.866268][T10856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.876506][T10859] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 716.904525][T10857] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input34 [ 716.909103][ T4234] usb 6-1: Using ep0 maxpacket: 16 [ 716.950247][ T1334] usb 8-1: USB disconnect, device number 16 [ 716.979691][T10857] dvb-usb: schedule remote query interval to 400 msecs. [ 717.211544][ T4355] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.358497][T11116] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by ""[11116] [ 717.374664][T10857] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 717.823142][T10857] usb 3-1: USB disconnect, device number 17 [ 717.841791][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 717.900176][ T4234] usb 6-1: config 0 has an invalid interface number: 148 but max is 0 [ 717.908412][ T4234] usb 6-1: config 0 has no interface number 0 [ 717.921120][ T4234] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 26, changing to 8 [ 717.937843][ T4234] usb 6-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid maxpacket 50458, setting to 1024 [ 717.950522][ T4234] usb 6-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 718.026100][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.098807][ T4234] usb 6-1: config 0 descriptor?? [ 718.201453][T11097] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 718.842593][T10857] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 718.883605][T11129] Error parsing options; rc = [-22] [ 718.972748][ T4234] usb 6-1: USB disconnect, device number 17 [ 719.945775][ T1334] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 720.365364][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 720.599963][ T1334] usb 8-1: Using ep0 maxpacket: 8 [ 720.760132][ T1334] usb 8-1: unable to get BOS descriptor or descriptor too short [ 720.840188][ T1334] usb 8-1: config 4 interface 0 has no altsetting 0 [ 720.993066][ T9291] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 721.080139][ T1334] usb 8-1: string descriptor 0 read error: -22 [ 721.086655][ T1334] usb 8-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 721.096275][ T1334] usb 8-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 721.147655][ T1334] usb 8-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 721.165933][ T1334] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 721.178133][ T1334] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 721.191786][ T1334] usb 8-1: media controller created [ 721.217020][ T1334] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 721.280020][ T9291] usb 6-1: Using ep0 maxpacket: 32 [ 721.410074][ T9291] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 721.419421][ T9291] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 721.440993][ T9291] usb 6-1: config 0 descriptor?? [ 721.706491][ T9291] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 721.717514][ T9291] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 721.933595][ T9291] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 721.940992][ T9291] usb 6-1: media controller created [ 722.484887][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 722.708443][ T9291] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 722.763463][ T1334] zl10353_read_register: readreg error (reg=127, ret==0) [ 722.792355][T11125] usb 8-1: dvb_usb_au6610: wlen=0, aborting [ 722.800620][T11184] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[11184] [ 722.901349][T11125] usb 8-1: dvb_usb_au6610: wlen=4100, aborting [ 723.638698][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 723.710679][ T5572] udevd[5572]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 723.731447][ T1334] usb 8-1: USB disconnect, device number 17 [ 723.774052][ T9291] az6027: usb out operation failed. (-71) [ 723.889845][T11199] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by ""[11199] [ 724.938629][T11200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.947192][T11200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.955657][T11200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.964115][T11200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.972571][T11200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.981021][T11200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 724.989471][T11200] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 725.117478][ T9291] az6027: usb out operation failed. (-71) [ 725.123612][ T9291] stb0899_attach: Driver disabled by Kconfig [ 725.591517][ T9291] az6027: no front-end attached [ 725.591517][ T9291] [ 725.645225][ T9291] az6027: usb out operation failed. (-71) [ 725.663454][ T9291] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 725.672215][ T9291] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input35 [ 725.807414][ T9291] dvb-usb: schedule remote query interval to 400 msecs. [ 726.002385][ T9291] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 726.547837][ T9291] usb 6-1: USB disconnect, device number 18 [ 726.795939][T10856] net_ratelimit: 739 callbacks suppressed [ 726.795959][T10856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 726.898598][ T9291] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 727.007909][T11231] loop7: detected capacity change from 0 to 512 [ 727.152430][ T4178] udevd[4178]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.148/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 727.482752][T11231] Quota error (device loop7): find_tree_dqentry: Getting block too big (196613 >= 6) [ 727.539883][T11231] Quota error (device loop7): qtree_read_dquot: Can't read quota structure for id 0 [ 727.619143][T11231] EXT4-fs error (device loop7): ext4_acquire_dquot:6236: comm syz.7.1591: Failed to acquire dquot type 1 [ 727.646357][T11231] EXT4-fs (loop7): 1 truncate cleaned up [ 727.658911][T11231] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 727.677458][T11231] ext4 filesystem being mounted at /111/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 728.090370][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 728.110054][ T9291] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 728.369966][ T9291] usb 8-1: Using ep0 maxpacket: 16 [ 728.681675][T11262] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by ""[11262] [ 729.713300][ T9291] usb 8-1: config 0 has an invalid interface number: 148 but max is 0 [ 729.722148][ T9291] usb 8-1: config 0 has no interface number 0 [ 729.751479][ T9291] usb 8-1: config 0 interface 148 altsetting 0 endpoint 0x4 has an invalid bInterval 26, changing to 8 [ 729.833383][ T9291] usb 8-1: config 0 interface 148 altsetting 0 endpoint 0x4 has invalid maxpacket 50458, setting to 1024 [ 729.840218][T10856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 729.926240][ T9291] usb 8-1: New USB device found, idVendor=0499, idProduct=8206, bcdDevice=f4.55 [ 729.943705][ T9291] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.977113][ T9291] usb 8-1: config 0 descriptor?? [ 730.003183][T11241] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 248: padding at end of block bitmap is not set [ 730.060183][ T9291] usb 8-1: can't set config #0, error -71 [ 730.078121][ T9291] usb 8-1: USB disconnect, device number 18 [ 730.220224][T10856] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 730.477438][T10856] usb 6-1: Using ep0 maxpacket: 8 [ 731.029935][T10856] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 731.049875][T10856] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 731.059731][T10856] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 731.079872][T10856] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 731.099869][T10856] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 731.119127][T10856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.512461][T10856] usb 6-1: GET_CAPABILITIES returned 0 [ 731.518257][T10856] usbtmc 6-1:16.0: can't read capabilities [ 731.785741][T10856] usb 6-1: USB disconnect, device number 19 [ 731.923069][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.212828][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.336311][T10856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 733.389944][ T8092] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 733.639904][ T1334] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 733.750007][ T8092] usb 8-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00 [ 733.759219][ T8092] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.771007][T10856] usb 6-1: new full-speed USB device number 20 using dummy_hcd [ 733.782897][ T8092] usb 8-1: config 0 descriptor?? [ 733.929979][ T1334] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 734.020150][ T1334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.029208][ T1334] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.041029][ T1334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 734.120133][ T1334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.129055][ T1334] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.140406][T10856] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 734.150398][ T1334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 734.157061][T10856] usb 6-1: config 0 interface 0 has no altsetting 0 [ 734.230081][ T1334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.239321][ T1334] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.255406][ T8092] samsung 0003:0419:0001.000F: hidraw0: USB HID vf0.00 Device [HID 0419:0001] on usb-dummy_hcd.7-1/input0 [ 734.266816][ T1334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 734.330228][T10856] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 734.339672][T10856] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 734.348020][T10856] usb 6-1: Product: syz [ 734.352463][ T1334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.361411][T10856] usb 6-1: Manufacturer: syz [ 734.366026][T10856] usb 6-1: SerialNumber: syz [ 734.370970][ T1334] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.382761][ T1334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 734.391171][T10856] usb 6-1: config 0 descriptor?? [ 734.434711][T10856] usb 6-1: selecting invalid altsetting 0 [ 734.468749][ T9291] usb 8-1: USB disconnect, device number 19 [ 734.470041][ T1334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.488513][ T1334] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.510188][ T1334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 734.517214][T10856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 734.596044][ T1334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 734.615383][ T1334] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 734.657505][ T1334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 734.690124][T10856] usb 6-1: USB disconnect, device number 20 [ 734.980482][ T1334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 735.033484][ T1334] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 735.090224][ T1334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 735.200275][ T1334] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 735.222948][ T1334] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 735.312475][ T1334] usb 3-1: config 0 interface 0 has no altsetting 0 [ 735.660487][ T1334] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 735.670378][ T1334] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 735.679343][ T1334] usb 3-1: Product: syz [ 735.684056][ T1334] usb 3-1: Manufacturer: syz [ 735.689000][ T1334] usb 3-1: SerialNumber: syz [ 735.707309][ T1334] usb 3-1: config 0 descriptor?? [ 736.534248][ T1334] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 736.541643][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 736.552508][ T1334] usb 3-1: USB disconnect, device number 18 [ 736.561574][ T1334] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 737.732991][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 737.832300][T11384] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1636'. [ 738.444333][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.452617][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.460862][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.469043][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.477245][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.485453][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.493661][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.501885][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.510085][T11389] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 738.779168][T11395] udc-core: couldn't find an available UDC or it's busy [ 739.092664][T11409] IPVS: stopping master sync thread 11411 ... [ 739.094357][T11411] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 740.006332][T11431] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1651'. [ 742.601701][T11451] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 742.608277][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 742.641562][T11451] vhci_hcd vhci_hcd.0: Device attached [ 742.700631][T11451] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 742.707197][T11451] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 742.730639][T11451] vhci_hcd vhci_hcd.0: Device attached [ 742.776931][T11454] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 742.783523][T11454] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 742.805734][T11454] vhci_hcd vhci_hcd.0: Device attached [ 742.850144][T11457] vhci_hcd: connection closed [ 742.850368][T11455] vhci_hcd: connection closed [ 742.855282][T11452] vhci_hcd: connection closed [ 742.872211][ T6401] vhci_hcd: stop threads [ 742.922929][ T6401] vhci_hcd: release socket [ 742.930941][ T9286] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 742.938773][T11453] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 742.952087][ T6401] vhci_hcd: disconnect device [ 742.960383][ T8092] net_ratelimit: 739 callbacks suppressed [ 742.960398][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 742.970216][ T6401] vhci_hcd: stop threads [ 743.008768][ T9291] hid-generic 0000:0000:0000.0010: unknown main item tag 0x0 [ 743.023135][ T6401] vhci_hcd: release socket [ 743.040109][ T6401] vhci_hcd: disconnect device [ 743.053817][ T6401] vhci_hcd: stop threads [ 743.081655][ T6401] vhci_hcd: release socket [ 743.087488][ T9291] hid-generic 0000:0000:0000.0010: hidraw0: HID v0.00 Device [syz1] on syz0 [ 743.099096][ T6401] vhci_hcd: disconnect device [ 743.520421][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.723940][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 744.812543][T11468] loop6: detected capacity change from 0 to 40427 [ 744.891038][T11468] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 744.936986][T11468] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 746.101054][T11468] F2FS-fs (loop6): invalid crc value [ 746.126547][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 746.132717][T11468] F2FS-fs (loop6): Failed to start F2FS issue_checkpoint_thread (-12) [ 747.284192][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.294653][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.997309][T11506] loop7: detected capacity change from 0 to 32768 [ 748.057144][T11506] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1672 (11506) [ 748.099924][ T9286] vhci_hcd: vhci_device speed not set [ 748.538779][T11506] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 748.561396][T11506] BTRFS info (device loop7): using free space tree [ 748.589952][T11506] BTRFS info (device loop7): has skinny extents [ 748.626759][T11537] device syzkaller1 entered promiscuous mode [ 748.751421][T11546] loop6: detected capacity change from 0 to 1024 [ 748.808220][T11546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 748.914234][T11560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1682'. [ 748.949325][T11506] BTRFS info (device loop7): enabling ssd optimizations [ 749.074364][T11506] overlayfs: workdir and upperdir must reside under the same mount [ 749.200791][ T4354] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 749.209384][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.044102][T11581] loop6: detected capacity change from 0 to 2048 [ 750.200815][T11581] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 750.480892][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 750.827027][T11585] loop7: detected capacity change from 0 to 32768 [ 750.901374][T11585] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 scanned by syz.7.1684 (11585) [ 750.948193][T11585] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 750.967622][T11585] BTRFS info (device loop7): using free space tree [ 750.998514][T11585] BTRFS info (device loop7): has skinny extents [ 751.221759][T11585] BTRFS info (device loop7): enabling ssd optimizations [ 752.410192][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 752.533327][T11657] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1707'. [ 752.669452][T11659] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1707'. [ 753.025612][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.036898][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.450371][T11677] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1713'. [ 753.554461][T11684] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.563700][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 753.775311][T11690] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1716'. [ 754.511347][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 754.546349][T11702] sctp: failed to load transform for md5: -2 [ 755.649384][T11723] loop7: detected capacity change from 0 to 32768 [ 755.800613][T11723] XFS (loop7): Mounting V5 Filesystem [ 755.948578][T11723] XFS (loop7): Ending clean mount [ 756.106457][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.203560][ T8867] XFS (loop7): Unmounting Filesystem [ 756.256431][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 756.604970][T11769] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1741'. [ 756.630111][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 756.712826][T11769] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1741'. [ 756.748491][T11769] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 757.216372][T11784] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1734'. [ 757.524125][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.546514][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.933975][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 757.993063][T11791] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1745'. [ 758.203301][T11804] device gretap0 entered promiscuous mode [ 758.237739][T11804] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1751'. [ 758.580556][T11821] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 758.587134][T11821] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 758.595833][T11821] vhci_hcd vhci_hcd.0: Device attached [ 758.628935][T11821] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 758.635514][T11821] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 758.667873][T11827] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8) [ 758.674440][T11827] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 758.688473][T11830] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6495] was attempted by ""[11830] [ 758.760233][T11821] vhci_hcd vhci_hcd.0: Device attached [ 758.764705][T11832] loop7: detected capacity change from 0 to 256 [ 758.781586][T11827] vhci_hcd vhci_hcd.0: Device attached [ 758.807971][T11828] vhci_hcd: connection closed [ 758.808209][ T4355] vhci_hcd: stop threads [ 758.808737][T11824] vhci_hcd: connection closed [ 758.813433][ T4355] vhci_hcd: release socket [ 758.826829][T11822] vhci_hcd: connection closed [ 758.840060][T11832] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 758.859969][T10857] usb 41-1: new low-speed USB device number 9 using vhci_hcd [ 758.867493][T11823] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 758.878564][ T4355] vhci_hcd: disconnect device [ 758.897393][ T4355] vhci_hcd: stop threads [ 758.902315][T11832] exFAT-fs (loop7): Medium has reported failures. Some data may be lost. [ 758.912638][ T4355] vhci_hcd: release socket [ 758.925665][T11832] exFAT-fs (loop7): Invalid exboot-signature(sector = 3): 0x00000000 [ 758.928473][ T4355] vhci_hcd: disconnect device [ 758.947905][T11832] exFAT-fs (loop7): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0xad19abcb) [ 758.968752][ T4355] vhci_hcd: stop threads [ 758.976804][T11832] exFAT-fs (loop7): invalid boot region [ 758.985607][ T4355] vhci_hcd: release socket [ 758.995097][T11832] exFAT-fs (loop7): failed to recognize exfat type [ 759.003291][ T4355] vhci_hcd: disconnect device [ 759.059884][ T1334] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 759.166237][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 759.319871][ T1334] usb 6-1: Using ep0 maxpacket: 32 [ 759.446330][ T1334] usb 6-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 759.466003][ T1334] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.497377][ T1334] usb 6-1: config 0 descriptor?? [ 759.571255][ T1334] as10x_usb: device has been detected [ 759.577064][ T1334] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 759.626472][T11842] loop7: detected capacity change from 0 to 8192 [ 759.650802][ T1334] usb 6-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 759.676551][T11842] REISERFS (device loop7): found reiserfs format "3.6" with non-standard journal [ 759.697895][T11842] REISERFS (device loop7): using ordered data mode [ 759.704926][T11842] reiserfs: using flush barriers [ 759.727391][T11842] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 759.744896][T11842] REISERFS (device loop7): checking transaction log (loop7) [ 759.885443][ T1334] as10x_usb: error during firmware upload part1 [ 759.910231][ T1334] Registered device nBox DVB-T Dongle [ 759.913480][ T1334] usb 6-1: USB disconnect, device number 21 [ 759.938157][T11842] REISERFS (device loop7): Using tea hash to sort names [ 759.986066][T11842] REISERFS (device loop7): Created .reiserfs_priv - reserved for xattr storage. [ 760.032545][ T1334] Unregistered device nBox DVB-T Dongle [ 760.034988][ T1334] as10x_usb: device has been disconnected [ 760.097535][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 760.479889][ T8092] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 760.534433][T11855] batman_adv: batadv0: Local translation table size (128) exceeds maximum packet size (-320); Ignoring new local tt entry: 80:00:00:00:00:85 [ 760.601332][T11855] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1765'. [ 760.790404][T11870] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 760.796979][T11870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 760.809439][T11870] vhci_hcd vhci_hcd.0: Device attached [ 760.835726][T11870] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 760.842297][T11870] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 760.850604][T11870] vhci_hcd vhci_hcd.0: Device attached [ 760.858825][T11870] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 760.865370][T11870] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 760.873890][ T8092] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 760.882233][ T8092] usb 5-1: config 0 has no interface number 0 [ 760.888532][ T8092] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 760.900037][T11870] vhci_hcd vhci_hcd.0: Device attached [ 760.905680][ T8092] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 760.922044][T11877] vhci_hcd: connection closed [ 760.922268][ T4354] vhci_hcd: stop threads [ 760.922439][T11875] vhci_hcd: connection closed [ 760.926981][ T4354] vhci_hcd: release socket [ 760.931798][T11871] vhci_hcd: connection closed [ 760.950042][ T4354] vhci_hcd: disconnect device [ 760.977432][ T4354] vhci_hcd: stop threads [ 760.989906][ T4354] vhci_hcd: release socket [ 760.993823][ T8092] usb 5-1: config 0 interface 255 has no altsetting 0 [ 761.000133][ T4354] vhci_hcd: disconnect device [ 761.016804][ T4354] vhci_hcd: stop threads [ 761.027041][ T4354] vhci_hcd: release socket [ 761.037002][ T4354] vhci_hcd: disconnect device [ 761.318877][ T8092] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 761.328298][ T8092] usb 5-1: New USB device strings: Mfr=241, Product=2, SerialNumber=3 [ 761.337023][ T8092] usb 5-1: Product: syz [ 761.341844][ T8092] usb 5-1: Manufacturer: syz [ 761.346479][ T8092] usb 5-1: SerialNumber: syz [ 761.366902][ T8092] usb 5-1: config 0 descriptor?? [ 761.690778][ T8092] ch341 5-1:0.255: ch341-uart converter detected [ 761.867244][T11897] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5166] was attempted by ""[11897] [ 762.240436][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 762.809948][ T8092] ch341-uart ttyUSB0: failed to read break control: -71 [ 762.824738][ T8092] ch341-uart: probe of ttyUSB0 failed with error -71 [ 762.860040][ T8092] usb 5-1: USB disconnect, device number 17 [ 762.910765][ T8092] ch341 5-1:0.255: device disconnected [ 763.068115][T11904] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1778'. [ 763.290521][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 763.655192][T11903] loop7: detected capacity change from 0 to 32768 [ 763.725356][T11903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 scanned by syz.7.1779 (11903) [ 763.809896][T11903] BTRFS info (device loop7): using crc32c (crc32c-intel) checksum algorithm [ 763.839389][T11903] BTRFS warning (device loop7): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 763.891051][T11903] BTRFS info (device loop7): trying to use backup root at mount time [ 763.899227][T11903] BTRFS info (device loop7): enabling ssd optimizations [ 763.938772][T11903] BTRFS info (device loop7): using spread ssd allocation scheme [ 763.967310][T11903] BTRFS info (device loop7): use no compression [ 763.988522][T11903] BTRFS info (device loop7): turning off barriers [ 763.999967][T10857] vhci_hcd: vhci_device speed not set [ 764.029827][T11903] BTRFS info (device loop7): disabling tree log [ 764.095133][T11927] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[11927] [ 764.120214][T11903] BTRFS info (device loop7): using free space tree [ 764.145691][T11903] BTRFS info (device loop7): has skinny extents [ 764.587833][T11948] Illegal XDP return value 4294967274, expect packet loss! [ 765.619609][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 765.840597][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 766.688788][T12009] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1806'. [ 766.778025][T12012] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by ""[12012] [ 767.083711][T12018] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 767.296247][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 767.487150][T12032] device syzkaller1 entered promiscuous mode [ 767.877417][T12042] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 767.883993][T12042] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 767.936885][T12047] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 767.943467][T12047] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 767.999137][T12047] vhci_hcd vhci_hcd.0: Device attached [ 768.009427][T12042] vhci_hcd vhci_hcd.0: Device attached [ 768.028919][T12053] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(9) [ 768.035487][T12053] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 768.080002][T12053] vhci_hcd vhci_hcd.0: Device attached [ 768.110099][T12055] vhci_hcd: connection closed [ 768.110381][ T4355] vhci_hcd: stop threads [ 768.114673][T12048] vhci_hcd: connection closed [ 768.115745][ T4355] vhci_hcd: release socket [ 768.128827][T12043] vhci_hcd: connection closed [ 768.156311][ T4355] vhci_hcd: disconnect device [ 768.175506][ T4355] vhci_hcd: stop threads [ 768.190258][ T4355] vhci_hcd: release socket [ 768.194833][ T4355] vhci_hcd: disconnect device [ 768.290627][ T4355] vhci_hcd: stop threads [ 768.295109][ T4355] vhci_hcd: release socket [ 768.300182][ T9274] usb 45-1: new low-speed USB device number 5 using vhci_hcd [ 768.324755][ T4355] vhci_hcd: disconnect device [ 768.832616][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 769.040272][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 770.933705][T12127] loop6: detected capacity change from 0 to 16 [ 770.967296][T12127] erofs: (device loop6): mounted with root inode @ nid 36. [ 770.996926][T12127] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 771.149897][ T9271] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 771.332997][T12139] device syzkaller1 entered promiscuous mode [ 771.443316][ T9271] usb 6-1: Using ep0 maxpacket: 16 [ 771.595814][ T9271] usb 6-1: config 0 has an invalid interface number: 216 but max is 3 [ 771.605289][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 771.617582][ T9271] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 771.659012][ T9271] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 4 [ 771.709608][ T9271] usb 6-1: config 0 has no interface number 0 [ 771.723122][ T9271] usb 6-1: config 0 interface 216 altsetting 96 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 771.767068][ T9271] usb 6-1: config 0 interface 216 has no altsetting 0 [ 771.855662][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 772.010495][ T9271] usb 6-1: New USB device found, idVendor=0193, idProduct=e4a8, bcdDevice=62.d7 [ 772.030241][ T9271] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 772.082294][ T9271] usb 6-1: Product: syz [ 772.096045][ T9271] usb 6-1: Manufacturer: syz [ 772.922557][ T9271] usb 6-1: SerialNumber: syz [ 772.932087][ T9271] usb 6-1: config 0 descriptor?? [ 773.445342][ T9271] usb 6-1: bad CDC descriptors [ 773.450287][ T9274] vhci_hcd: vhci_device speed not set [ 773.467845][ T9271] usb 6-1: bad CDC descriptors [ 773.517704][ T9271] usb 6-1: USB disconnect, device number 22 [ 773.991532][T12186] device syzkaller1 entered promiscuous mode [ 774.200638][T12193] loop6: detected capacity change from 0 to 2048 [ 774.304323][T12197] device sit1 entered promiscuous mode [ 774.356816][T12195] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[12195] [ 774.419877][T12201] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 774.913207][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.483006][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 775.524247][T12215] loop7: detected capacity change from 0 to 256 [ 776.044012][T12237] device wlan0 entered promiscuous mode [ 776.089740][T12236] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 776.166276][T12242] loop6: detected capacity change from 0 to 2048 [ 776.524890][T12242] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found! [ 776.720420][ T4261] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 776.769734][T12242] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 777.290147][ T26] audit: type=1800 audit(2000000579.910:17): pid=12242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1877" name="file2" dev="loop6" ino=1347 res=0 errno=0 [ 777.292748][ T1334] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.581624][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.738323][T12278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.747430][T12278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.756273][T12278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.765362][T12278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.773899][T12278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.782399][T12278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 778.790909][T12278] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 781.012727][T12330] syzkaller0: tun_chr_ioctl cmd 2147767506 [ 781.437098][T12342] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 781.443666][T12342] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 781.458742][T12342] vhci_hcd vhci_hcd.0: Device attached [ 781.507136][T12342] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 781.513709][T12342] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 781.581818][T12342] vhci_hcd vhci_hcd.0: Device attached [ 781.616264][T12352] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(8) [ 781.622832][T12352] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 781.625417][T12356] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1908'. [ 781.678965][T12352] vhci_hcd vhci_hcd.0: Device attached [ 781.786248][T12343] vhci_hcd: connection closed [ 781.786469][T12347] vhci_hcd: connection closed [ 781.791481][T12353] vhci_hcd: connection closed [ 781.810172][ T6401] vhci_hcd: stop threads [ 781.841378][ T6401] vhci_hcd: release socket [ 781.843474][ T1334] usb 43-1: new low-speed USB device number 4 using vhci_hcd [ 781.865948][ T6401] vhci_hcd: disconnect device [ 781.875613][ T6401] vhci_hcd: stop threads [ 781.879971][ T6401] vhci_hcd: release socket [ 781.884471][ T6401] vhci_hcd: disconnect device [ 781.889469][ T6401] vhci_hcd: stop threads [ 781.893839][ T6401] vhci_hcd: release socket [ 781.898327][ T6401] vhci_hcd: disconnect device [ 782.483476][ T4369] net_ratelimit: 740 callbacks suppressed [ 782.483528][ T4369] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 783.747599][T12393] loop6: detected capacity change from 0 to 16 [ 783.991457][T12393] erofs: (device loop6): mounted with root inode @ nid 36. [ 784.780097][T12405] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.790291][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 784.881362][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.081823][T12416] device syzkaller1 entered promiscuous mode [ 785.120365][ T4192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.129704][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.140662][ T4192] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.148958][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.158609][T12300] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 785.166895][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 787.159893][ T1334] vhci_hcd: vhci_device speed not set [ 787.399662][T12453] loop6: detected capacity change from 0 to 256 [ 787.468589][T12458] input: syz0 as /devices/virtual/input/input36 [ 787.493768][T12453] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 787.576264][T12453] exFAT-fs (loop6): Medium has reported failures. Some data may be lost. [ 787.665327][T12453] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 787.803656][ T26] audit: type=1800 audit(2000000590.460:18): pid=12453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1940" name="file1" dev="loop6" ino=1048714 res=0 errno=0 [ 788.026128][T10858] net_ratelimit: 10 callbacks suppressed [ 788.026146][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.041376][ T4345] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.050396][ T9271] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.059139][T10858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.259724][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 788.482721][T12484] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 788.489301][T12484] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 788.525882][ T26] audit: type=1326 audit(2000000591.180:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12463 comm="syz.7.1943" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd39d69de99 code=0x7fc00000 5[ 788.570906][T12484] vhci_hcd vhci_hcd.0: Device attached [ 788.586754][T12488] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 788.593326][T12488] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 788.606907][T12488] vhci_hcd vhci_hcd.0: Device attached [ 788.631501][T12484] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(5) [ 788.638061][T12484] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 788.746525][T12484] vhci_hcd vhci_hcd.0: Device attached [ 788.755356][T12492] vhci_hcd: connection closed [ 788.755580][ T4261] vhci_hcd: stop threads [ 788.755727][T12489] vhci_hcd: connection closed [ 788.761093][ T4261] vhci_hcd: release socket [ 788.773971][T12485] vhci_hcd: connection closed [ 788.800180][ T4261] vhci_hcd: disconnect device [ 788.810791][ T4261] vhci_hcd: stop threads [ 788.815072][ T4261] vhci_hcd: release socket [ 788.819720][ T4261] vhci_hcd: disconnect device [ 788.824962][ T4261] vhci_hcd: stop threads [ 788.829231][ T4261] vhci_hcd: release socket [ 788.834315][ T4261] vhci_hcd: disconnect device [ 788.899834][ T9271] usb 45-1: new low-speed USB device number 6 using vhci_hcd [ 788.917756][ T9271] usb 45-1: enqueue for inactive port 0 [ 789.009886][ T9271] vhci_hcd: vhci_device speed not set [ 789.040785][T12510] using random self ethernet address [ 789.062565][T12510] using random host ethernet address [ 790.118822][T12527] device syzkaller1 entered promiscuous mode [ 790.216507][T12529] kvm: vcpu 1: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer. [ 790.548191][T12537] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[8867] was attempted by ""[12537] [ 790.560880][T12539] netlink: 'syz.4.1962': attribute type 4 has an invalid length. [ 790.605447][T12539] netlink: 'syz.4.1962': attribute type 4 has an invalid length. [ 790.829893][ T9271] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 791.081755][T12551] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 791.088316][T12551] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 791.096750][T12551] vhci_hcd vhci_hcd.0: Device attached [ 791.106127][T12551] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 791.112646][T12551] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 791.128882][T12551] vhci_hcd vhci_hcd.0: Device attached [ 791.183271][T12551] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 791.189854][T12551] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 791.196899][ T8092] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 791.205488][T12551] vhci_hcd vhci_hcd.0: Device attached [ 791.208118][T12556] vhci_hcd: connection closed [ 791.214131][ T4352] vhci_hcd: stop threads [ 791.233774][ T4352] vhci_hcd: release socket [ 791.238298][T12554] vhci_hcd: connection closed [ 791.238500][T12552] vhci_hcd: connection closed [ 791.250997][ T4352] vhci_hcd: disconnect device [ 791.266177][ T4352] vhci_hcd: stop threads [ 791.272321][ T4352] vhci_hcd: release socket [ 791.276948][ T4352] vhci_hcd: disconnect device [ 791.287115][ T4352] vhci_hcd: stop threads [ 791.293032][ T4352] vhci_hcd: release socket [ 791.297647][ T4352] vhci_hcd: disconnect device [ 791.361751][ T9274] usb 43-1: new low-speed USB device number 5 using vhci_hcd [ 791.370015][ T9274] usb 43-1: enqueue for inactive port 0 [ 791.394424][T12559] kvm [12558]: vcpu1, guest rIP: 0x9114 vmx_set_msr: BTF|LBR in IA32_DEBUGCTLMSR 0x6fc6, nop [ 791.459910][ T9274] vhci_hcd: vhci_device speed not set [ 791.465925][ T9271] usb 3-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 791.475616][ T9271] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.484463][ T9271] usb 3-1: Product: syz [ 791.488645][ T9271] usb 3-1: Manufacturer: syz [ 791.493324][ T9271] usb 3-1: SerialNumber: syz [ 791.546226][T12562] loop7: detected capacity change from 0 to 1024 [ 791.551384][ T9271] usbtest 3-1:1.0: EZ-USB device [ 791.557560][ T9271] usbtest 3-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 791.628903][T12562] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 791.774565][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 791.813540][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 791.835087][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 791.848685][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 791.865386][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 791.880614][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 791.897783][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 791.940592][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 791.960642][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 792.069455][ T8867] EXT4-fs error (device loop7): ext4_empty_dir:3136: inode #11: comm syz-executor: invalid size [ 792.090239][ T4352] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 792.649474][T12578] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1974'. [ 792.759600][ T4354] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 792.903823][ T4354] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.099189][ T4354] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.146341][T12588] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[12588] [ 793.167241][ T4354] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 793.375966][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.385072][T10857] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.394255][T10856] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 793.671893][T12591] chnl_net:caif_netlink_parms(): no params data found [ 793.873669][T12614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1983'. [ 793.886519][ T9274] usb 3-1: USB disconnect, device number 19 [ 794.000427][ T6401] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 794.042809][T12591] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.050655][T12591] bridge0: port 1(bridge_slave_0) entered disabled state [ 794.059228][T12591] device bridge_slave_0 entered promiscuous mode [ 794.078600][T12591] bridge0: port 2(bridge_slave_1) entered blocking state [ 794.087215][T12591] bridge0: port 2(bridge_slave_1) entered disabled state [ 794.102810][T12591] device bridge_slave_1 entered promiscuous mode [ 794.137557][T12591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 794.156107][T12591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 794.273423][T12591] team0: Port device team_slave_0 added [ 794.303404][T12591] team0: Port device team_slave_1 added [ 794.378453][T12591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 794.386037][T12591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.425436][T12591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 794.443833][T12591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 794.457307][T12591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 794.517271][T12591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 794.752913][T12644] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1988'. [ 794.890824][T12591] device hsr_slave_0 entered promiscuous mode [ 794.897776][T12591] device hsr_slave_1 entered promiscuous mode [ 794.906171][T12591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 794.914670][T12591] Cannot create hsr debugfs directory [ 794.987428][ T4354] device hsr_slave_0 left promiscuous mode [ 795.003741][ T4354] device hsr_slave_1 left promiscuous mode [ 795.017313][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.036350][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.045081][ T4354] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.053058][ T4354] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 795.061094][ T4354] device bridge_slave_1 left promiscuous mode [ 795.067586][ T4354] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.076863][ T4354] device bridge_slave_0 left promiscuous mode [ 795.086702][ T4354] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.160723][ T4354] device veth1_macvtap left promiscuous mode [ 795.193048][ T4354] device veth0_macvtap left promiscuous mode [ 795.218285][ T4354] device veth1_vlan left promiscuous mode [ 795.228092][ T4354] device veth0_vlan left promiscuous mode [ 795.258328][T12662] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[12662] [ 795.290036][ T9275] Bluetooth: hci0: command 0x0409 tx timeout [ 795.476692][T12674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.485891][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.494937][T12674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.503290][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.513021][T12674] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 795.521444][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 796.058397][T12691] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 796.095645][ T4354] team0 (unregistering): Port device team_slave_1 removed [ 796.123363][ T4354] team0 (unregistering): Port device team_slave_0 removed [ 796.139207][ T4354] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 796.158176][ T4354] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 796.283225][ T4354] bond0 (unregistering): Released all slaves [ 796.365375][T12676] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 796.397797][T12676] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 796.440981][T12686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1997'. [ 796.457501][T12688] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1997'. [ 796.651733][T12715] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 796.658310][T12715] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 796.667165][T12707] 9pnet: bogus RWRITE count (2 > 1) [ 796.680132][T12715] vhci_hcd vhci_hcd.0: Device attached [ 796.695037][T12711] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 796.701610][T12711] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 796.797326][T12711] vhci_hcd vhci_hcd.0: Device attached [ 796.947233][T12724] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 796.953814][T12724] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 796.962227][T12727] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6495] was attempted by ""[12727] [ 796.972731][ T9275] vhci_hcd: vhci_device speed not set [ 796.983122][T12724] vhci_hcd vhci_hcd.0: Device attached [ 797.007081][T12726] vhci_hcd: connection closed [ 797.007444][ T4261] vhci_hcd: stop threads [ 797.017031][ T4261] vhci_hcd: release socket [ 797.026109][T12716] vhci_hcd: connection closed [ 797.026191][T12714] vhci_hcd: connection closed [ 797.038642][ T4261] vhci_hcd: disconnect device [ 797.050504][ T9275] usb 37-2: new full-speed USB device number 5 using vhci_hcd [ 797.068141][T12718] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 797.115375][T12591] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 797.132875][ T4261] vhci_hcd: stop threads [ 797.230751][ T4261] vhci_hcd: release socket [ 797.241193][T12591] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 797.254424][ T4261] vhci_hcd: disconnect device [ 797.269314][T12736] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[5166] was attempted by ""[12736] [ 797.291446][ T4261] vhci_hcd: stop threads [ 797.301114][T12591] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 797.332797][ T4261] vhci_hcd: release socket [ 797.342692][ T4261] vhci_hcd: disconnect device [ 797.354991][T12591] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 797.401626][ T7529] Bluetooth: hci0: command 0x041b tx timeout [ 797.567493][T12591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 797.631943][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 797.675594][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 797.715543][T12591] 8021q: adding VLAN 0 to HW filter on device team0 [ 797.759373][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 797.786861][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 797.814286][ T4352] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.821427][ T4352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.032963][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 798.060733][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 798.102768][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 798.143795][ T4352] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.150966][ T4352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 798.222526][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 798.259255][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2017'. [ 798.319643][T12769] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2017'. [ 798.588651][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 798.606129][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 798.635885][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 798.644565][T12783] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[6495] was attempted by ""[12783] [ 798.685453][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 798.708319][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 798.717335][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 798.726151][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 798.741774][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 798.761002][T12591] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 798.803543][T12591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 798.852513][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 798.870273][ T6401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 799.250033][T12799] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by ""[12799] [ 799.982253][ T1108] Bluetooth: hci0: command 0x040f tx timeout [ 800.080362][T12805] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2027'. [ 800.631444][T12591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 800.818254][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 800.860205][ T4369] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 800.946871][T12826] device ip6gre1 entered promiscuous mode [ 801.034234][T12826] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 801.391049][T12841] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2031'. [ 801.591764][T12845] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2031'. [ 801.644832][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 801.664589][ T4261] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 801.730794][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2032'. [ 801.781690][T12846] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.791321][T12846] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.800106][T12846] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.808823][T12846] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 801.926953][T10857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 801.955726][T10857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 801.989884][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2032'. [ 802.009834][ T1108] Bluetooth: hci0: command 0x0419 tx timeout [ 802.012812][T10858] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 802.038713][T12591] device veth0_vlan entered promiscuous mode [ 802.076118][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 802.093641][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 802.114000][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 802.124869][T10856] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 802.142090][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 802.164112][T12591] device veth1_vlan entered promiscuous mode [ 802.179907][ T9275] vhci_hcd: vhci_device speed not set [ 802.279568][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 802.302059][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 802.332010][T12591] device veth0_macvtap entered promiscuous mode [ 802.378264][T12591] device veth1_macvtap entered promiscuous mode [ 802.491271][T10857] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 802.506726][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.569149][T12863] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[12863] [ 802.804359][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.149811][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.229841][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.303977][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 803.365098][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 803.706397][T12591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 803.980922][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.213734][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.342524][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.379867][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.540413][T12591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 804.608921][T12591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 804.673380][T12591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 804.821704][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 804.831291][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 804.841152][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 804.851822][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 804.881192][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 804.893780][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 804.926842][T12591] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.959574][T12591] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 804.989866][T12591] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.040124][T12591] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 805.350850][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.378460][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.443949][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 805.477372][T12906] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 805.483947][T12906] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 805.510447][T12904] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 805.517013][T12904] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 805.525285][ T4261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 805.570094][ T4261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 805.577663][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 805.596135][T12904] vhci_hcd vhci_hcd.0: Device attached [ 805.700466][T12906] vhci_hcd vhci_hcd.0: Device attached [ 805.786783][T12912] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 805.793357][T12912] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 805.807349][T12924] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 805.813908][T12924] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 805.822481][T12912] vhci_hcd vhci_hcd.0: Device attached [ 805.869907][ T8092] usb 37-1: new high-speed USB device number 6 using vhci_hcd [ 805.888460][T12924] vhci_hcd vhci_hcd.0: Device attached [ 805.919195][T12913] vhci_hcd: connection closed [ 805.919481][ T4261] vhci_hcd: stop threads [ 805.959457][T12930] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 805.966028][T12930] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 805.968621][ T4261] vhci_hcd: release socket [ 805.990304][ T4261] vhci_hcd: disconnect device [ 806.001743][T12907] vhci_hcd: connection closed [ 806.002038][T12905] vhci_hcd: connection reset by peer [ 806.021583][ T4352] vhci_hcd: stop threads [ 806.026329][ T4352] vhci_hcd: release socket [ 806.032083][T12930] vhci_hcd vhci_hcd.0: Device attached [ 806.036945][ T4352] vhci_hcd: disconnect device [ 806.072518][ T4352] vhci_hcd: stop threads [ 806.076872][ T4352] vhci_hcd: release socket [ 806.079990][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 806.086314][ T4352] vhci_hcd: disconnect device [ 806.232937][T12924] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5) [ 806.239517][T12924] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 806.247710][ T9271] usb 43-1: new low-speed USB device number 6 using vhci_hcd [ 807.100807][T12924] vhci_hcd vhci_hcd.0: Device attached [ 807.118006][T12944] vhci_hcd: connection closed [ 807.120336][T12926] vhci_hcd: connection reset by peer [ 807.130416][T12931] vhci_hcd: connection closed [ 807.152146][ T4345] vhci_hcd: stop threads [ 807.210276][ T4345] vhci_hcd: release socket [ 807.234854][ T4345] vhci_hcd: disconnect device [ 807.278352][ T4345] vhci_hcd: stop threads [ 807.283298][ T4345] vhci_hcd: release socket [ 807.287813][ T4345] vhci_hcd: disconnect device [ 807.300254][ T4345] vhci_hcd: stop threads [ 807.304543][ T4345] vhci_hcd: release socket [ 807.309141][ T4345] vhci_hcd: disconnect device [ 807.777561][T12968] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 807.925691][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2056'. [ 807.952901][T12973] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2056'. [ 808.044926][T12976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2056'. [ 808.072736][T12976] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2056'. [ 808.442014][T12988] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 808.480295][T12988] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 808.725015][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.731428][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.305509][T13027] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 810.312088][T13027] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 810.395294][T13027] vhci_hcd vhci_hcd.0: Device attached [ 810.505183][T13027] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(5) [ 810.511760][T13027] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 810.689929][ T7529] usb 41-1: new low-speed USB device number 10 using vhci_hcd [ 810.841847][T13036] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6) [ 810.848423][T13036] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 811.256782][T13052] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2071'. [ 811.350084][T13027] vhci_hcd vhci_hcd.0: Device attached [ 811.360134][ T8092] vhci_hcd: vhci_device speed not set [ 811.360150][ T9271] vhci_hcd: vhci_device speed not set [ 811.367743][T13036] vhci_hcd vhci_hcd.0: Device attached [ 811.469994][ T23] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 811.545265][T13073] fuse: Bad value for 'fd' [ 811.589005][T13042] vhci_hcd: connection closed [ 811.589312][ T4352] vhci_hcd: stop threads [ 811.607411][T13041] vhci_hcd: connection closed [ 811.607608][ T4352] vhci_hcd: release socket [ 811.618596][T13032] vhci_hcd: connection reset by peer [ 811.643800][ T4352] vhci_hcd: disconnect device [ 811.657856][ T4352] vhci_hcd: stop threads [ 811.667043][ T4352] vhci_hcd: release socket [ 811.695721][ T4352] vhci_hcd: disconnect device [ 811.702109][T13077] fuse: Bad value for 'fd' [ 811.713029][ T4352] vhci_hcd: stop threads [ 811.729842][ T23] usb 6-1: Using ep0 maxpacket: 8 [ 811.738241][ T4352] vhci_hcd: release socket [ 811.754535][ T4352] vhci_hcd: disconnect device [ 811.880090][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 812.791774][ T23] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 812.816774][T13090] fuse: Bad value for 'fd' [ 812.852900][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.902596][ T23] usb 6-1: config 0 descriptor?? [ 813.199247][ T23] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 814.235046][T13104] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2084'. [ 814.479895][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 814.572004][ T23] usb 6-1: USB disconnect, device number 23 [ 815.059871][T10857] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 815.237075][T13137] user requested TSC rate below hardware speed [ 815.309932][ T23] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 815.610097][ T23] usb 9-1: Using ep0 maxpacket: 16 [ 815.770795][ T23] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 815.823876][ T23] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 815.942866][ T7529] vhci_hcd: vhci_device speed not set [ 816.189944][T10857] usb 3-1: Using ep0 maxpacket: 16 [ 816.234327][ T23] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 816.244588][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.252777][ T23] usb 9-1: Product: syz [ 816.257413][ T23] usb 9-1: Manufacturer: syz [ 816.270446][ T23] usb 9-1: SerialNumber: syz [ 816.310799][T10857] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.357812][T13159] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4189] was attempted by ""[13159] [ 816.529693][T10857] usb 3-1: config 0 interface 0 has no altsetting 0 [ 816.840994][T10857] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 817.002297][T10857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.070608][T10857] usb 3-1: config 0 descriptor?? [ 817.192031][ T23] usb 9-1: 0:2 : does not exist [ 817.227441][ T23] usb 9-1: USB disconnect, device number 2 [ 817.352007][T13168] overlayfs: workdir and upperdir must reside under the same mount [ 817.461459][T11459] udevd[11459]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 817.612417][T10857] hid-generic 0003:1E71:2009.0011: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 817.758765][T13184] loop8: detected capacity change from 0 to 128 [ 817.869535][T13189] udc-core: couldn't find an available UDC or it's busy [ 817.881896][T13189] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 817.896842][T13184] FAT-fs (loop8): bogus logical sector size 0 [ 817.926134][T13184] FAT-fs (loop8): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 817.966100][T13184] FAT-fs (loop8): Can't find a valid FAT filesystem [ 818.368213][T13204] netlink: 16402 bytes leftover after parsing attributes in process `syz.6.2112'. [ 818.582154][T13210] fuse: Bad value for 'fd' [ 819.310855][T10857] usb 3-1: USB disconnect, device number 20 [ 819.639542][T13232] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 819.669269][T13237] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 819.675843][T13237] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 819.686700][T13237] vhci_hcd vhci_hcd.0: Device attached [ 819.696189][T13237] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(5) [ 819.702739][T13237] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 819.711164][T13237] vhci_hcd vhci_hcd.0: Device attached [ 819.735336][T13232] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 819.750137][T13237] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(7) [ 819.756701][T13237] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 819.765103][T13237] vhci_hcd vhci_hcd.0: Device attached [ 819.779343][T13232] overlayfs: inode number too big (/, ino=4611686018427387905, xinobits=3) [ 819.789858][T13243] vhci_hcd: connection closed [ 819.790138][T13240] vhci_hcd: connection closed [ 819.795241][T13238] vhci_hcd: connection closed [ 819.803037][ T4369] vhci_hcd: stop threads [ 819.804764][T13232] overlayfs: d_ino too big (., ino=4611686018427387912, xinobits=3) [ 819.807747][ T4369] vhci_hcd: release socket [ 819.812792][ T4369] vhci_hcd: disconnect device [ 819.834032][ T4369] vhci_hcd: stop threads [ 819.838315][ T4369] vhci_hcd: release socket [ 819.839872][T13232] overlayfs: d_ino too big (snd_seq, ino=4611686018427400257, xinobits=3) [ 819.854926][T13232] overlayfs: d_ino too big (netdevsim, ino=4611686018427432350, xinobits=3) [ 819.864092][T13232] overlayfs: d_ino too big (serio, ino=4611686018427400148, xinobits=3) [ 819.874486][T13232] overlayfs: d_ino too big (ulpi, ino=4611686018427400101, xinobits=3) [ 819.883537][T13232] overlayfs: d_ino too big (coreboot, ino=4611686018427455596, xinobits=3) [ 819.891481][ T4369] vhci_hcd: disconnect device [ 819.892666][T13232] overlayfs: d_ino too big (hdaudio, ino=4611686018427400263, xinobits=3) [ 819.905790][T13232] overlayfs: d_ino too big (iio, ino=4611686018427400226, xinobits=3) [ 819.916346][T13232] overlayfs: d_ino too big (firewire, ino=4611686018427432362, xinobits=3) [ 819.928210][ T4369] vhci_hcd: stop threads [ 819.932709][T13232] overlayfs: d_ino too big (gpio, ino=4611686018427389088, xinobits=3) [ 819.940877][T13247] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2125'. [ 819.958813][ T4369] vhci_hcd: release socket [ 819.959841][ T9271] usb 41-1: new low-speed USB device number 11 using vhci_hcd [ 819.971217][ T4369] vhci_hcd: disconnect device [ 820.751920][T13267] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 821.576391][T13300] binder: 13297:13300 ioctl c0306201 200000000080 returned -14 [ 821.973045][T13300] binder: 13297:13300 ioctl c0306201 2000000003c0 returned -14 [ 822.139131][T13310] fuse: Bad value for 'fd' [ 822.219201][T13313] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 822.225773][T13313] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 822.286072][T10857] usb 6-1: new full-speed USB device number 24 using dummy_hcd [ 822.311663][T13313] vhci_hcd vhci_hcd.0: Device attached [ 822.400607][T13313] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 822.407187][T13313] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 822.447477][T13322] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 822.454036][T13322] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 822.461791][T13313] vhci_hcd vhci_hcd.0: Device attached [ 822.469633][T13322] vhci_hcd vhci_hcd.0: Device attached [ 822.580458][ T8092] usb 37-1: new low-speed USB device number 7 using vhci_hcd [ 822.620319][T10857] usb 6-1: not running at top speed; connect to a high speed hub [ 822.770897][T10857] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 4 [ 822.963937][T13323] vhci_hcd: connection closed [ 822.965378][T10857] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 1023 [ 822.986578][T13320] vhci_hcd: connection closed [ 822.989461][T13314] vhci_hcd: connection reset by peer [ 823.029994][ T4345] vhci_hcd: stop threads [ 823.035082][ T4345] vhci_hcd: release socket [ 823.089835][ T4345] vhci_hcd: disconnect device [ 823.268213][T10857] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 144, changing to 4 [ 823.273336][ T4345] vhci_hcd: stop threads [ 823.473109][ T4345] vhci_hcd: release socket [ 823.525487][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2148'. [ 823.585557][ T4345] vhci_hcd: disconnect device [ 823.721336][ T4345] vhci_hcd: stop threads [ 823.842055][ T4345] vhci_hcd: release socket [ 823.872048][ T4345] vhci_hcd: disconnect device [ 824.089990][T10857] usb 6-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 824.111369][T10857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.135444][T13349] device geneve2 entered promiscuous mode [ 824.142024][T10857] usb 6-1: Product: syz [ 824.146227][T10857] usb 6-1: Manufacturer: syz [ 824.171827][T10857] usb 6-1: SerialNumber: syz [ 824.570037][T10857] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 824.589959][T10857] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 825.140172][ T9271] vhci_hcd: vhci_device speed not set [ 825.231600][ T23] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 825.460011][T10857] usb 6-1: USB disconnect, device number 24 [ 825.660065][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.683224][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 825.713338][ T23] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 825.721493][T11459] udevd[11459]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 825.939926][ T23] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 825.950269][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.988000][ T23] usb 3-1: Product: syz [ 826.001172][ T23] usb 3-1: Manufacturer: syz [ 826.022632][ T23] usb 3-1: SerialNumber: syz [ 826.064647][ T23] usb 3-1: config 0 descriptor?? [ 826.250883][T13390] ALSA: mixer_oss: invalid OSS volume 'syz_t' [ 827.411401][T13413] device gre1 entered promiscuous mode [ 827.504583][ T7529] usb 3-1: USB disconnect, device number 21 [ 827.759948][ T8092] vhci_hcd: vhci_device speed not set [ 828.069007][T13446] loop8: detected capacity change from 0 to 1764 [ 828.098159][T13451] fuse: Bad value for 'fd' [ 828.140304][T13453] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by ""[13453] [ 830.479958][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 831.601669][T13536] netlink: 64 bytes leftover after parsing attributes in process `syz.8.2193'. [ 831.637963][T13508] block device autoloading is deprecated and will be removed. [ 831.689069][T13541] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 831.695644][T13541] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 831.723274][T13533] device syzkaller1 entered promiscuous mode [ 831.755400][T13541] vhci_hcd vhci_hcd.0: Device attached [ 831.810090][T13548] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 831.816674][T13548] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 831.883077][T13548] vhci_hcd vhci_hcd.0: Device attached [ 831.920114][T13541] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5) [ 831.926687][T13541] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 831.939694][T13541] vhci_hcd vhci_hcd.0: Device attached [ 831.983788][T13553] vhci_hcd: connection closed [ 831.984070][T13549] vhci_hcd: connection closed [ 831.989196][T13542] vhci_hcd: connection closed [ 831.994332][ T4369] vhci_hcd: stop threads [ 832.014606][ T4369] vhci_hcd: release socket [ 832.023789][ T4369] vhci_hcd: disconnect device [ 832.038886][ T4369] vhci_hcd: stop threads [ 832.049877][ T9274] usb 43-1: new low-speed USB device number 7 using vhci_hcd [ 832.057417][T13543] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 832.076329][ T4369] vhci_hcd: release socket [ 832.088096][ T4369] vhci_hcd: disconnect device [ 832.116162][ T4369] vhci_hcd: stop threads [ 832.127889][ T4369] vhci_hcd: release socket [ 832.137487][ T4369] vhci_hcd: disconnect device [ 832.383923][T10859] usb 9-1: new full-speed USB device number 3 using dummy_hcd [ 834.199497][T13604] fuse: Bad value for 'fd' [ 834.510278][T10859] usb 9-1: no configurations [ 834.514929][T10859] usb 9-1: can't read configurations, error -22 [ 834.737712][T13616] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 834.759237][T13616] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 834.951946][T13628] binfmt_misc: register: failed to install interpreter file ./file2 [ 835.242139][T13645] device syzkaller0 entered promiscuous mode [ 835.502781][T13582] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 835.864709][T13665] device ip6gretap1 entered promiscuous mode [ 837.148614][T13693] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 837.155188][T13693] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 837.191553][T13693] vhci_hcd vhci_hcd.0: Device attached [ 837.198669][T13700] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 837.205209][T13700] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 837.213303][T13700] vhci_hcd vhci_hcd.0: Device attached [ 837.222378][ T9274] vhci_hcd: vhci_device speed not set [ 837.485333][T13693] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(5) [ 837.491906][T13693] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 837.644605][T13693] vhci_hcd vhci_hcd.0: Device attached [ 837.775482][T13703] vhci_hcd: connection closed [ 837.776186][ T4355] vhci_hcd: stop threads [ 837.789061][ T4355] vhci_hcd: release socket [ 837.824632][T13694] vhci_hcd: connection closed [ 837.969896][T13701] vhci_hcd: connection closed [ 837.995640][ T4355] vhci_hcd: disconnect device [ 838.060051][ T4355] vhci_hcd: stop threads [ 838.064358][ T4355] vhci_hcd: release socket [ 838.103354][ T4355] vhci_hcd: disconnect device [ 838.126178][ T4355] vhci_hcd: stop threads [ 838.130517][ T4355] vhci_hcd: release socket [ 838.135414][ T4355] vhci_hcd: disconnect device [ 838.174234][T10856] usb 37-1: new low-speed USB device number 8 using vhci_hcd [ 838.202496][T10856] usb 37-1: enqueue for inactive port 0 [ 838.289965][T10856] vhci_hcd: vhci_device speed not set [ 838.413461][T13719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2233'. [ 838.787101][T13736] Mass Storage Function, version: 2009/09/11 [ 838.793354][T13736] LUN: removable file: (no medium) [ 838.806476][T13736] udc-core: couldn't find an available UDC or it's busy [ 838.861856][T13739] udc-core: couldn't find an available UDC or it's busy [ 838.935532][T13746] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 838.939393][T13747] file system registered [ 838.942094][T13746] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 838.944063][T13746] vhci_hcd vhci_hcd.0: Device attached [ 838.967758][T13746] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 838.974435][T13746] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 838.981769][T13747] read descriptors [ 838.983517][T13746] vhci_hcd vhci_hcd.0: Device attached [ 839.003787][T13746] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 839.010348][T13746] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 839.022904][ T4195] ffs_data_put(): freeing [ 839.025753][T13746] vhci_hcd vhci_hcd.0: Device attached [ 839.036272][T13753] vhci_hcd: connection closed [ 839.036512][ T4355] vhci_hcd: stop threads [ 839.036860][T13748] vhci_hcd: connection closed [ 839.041485][T13750] vhci_hcd: connection closed [ 839.067801][ T4355] vhci_hcd: release socket [ 839.080107][ T4355] vhci_hcd: disconnect device [ 839.096161][ T4355] vhci_hcd: stop threads [ 839.100553][ T4355] vhci_hcd: release socket [ 839.107790][ T4355] vhci_hcd: disconnect device [ 839.118739][ T4355] vhci_hcd: stop threads [ 839.128186][ T4355] vhci_hcd: release socket [ 839.141761][ T4355] vhci_hcd: disconnect device [ 839.150033][ T9274] vhci_hcd: vhci_device speed not set [ 839.251696][ T26] audit: type=1804 audit(2000000641.900:20): pid=13758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2247" name="/newroot/467/file0" dev="fuse" ino=1 res=1 errno=0 [ 839.489352][T13767] (unnamed net_device) (uninitialized): up delay (9) is not a multiple of miimon (5), value rounded to 5 ms [ 839.523939][T13767] device ip6gretap1 entered promiscuous mode [ 839.530281][T13767] bond1: (slave ip6gretap1): no link monitoring support [ 839.539320][T13767] bond1: (slave ip6gretap1): MII and ETHTOOL support not available for slave, and arp_interval/arp_ip_target module parameters not specified, thus bonding will not detect link failures! see bonding.txt for details [ 839.561999][T13767] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 840.938266][T13799] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 840.944834][T13799] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 841.010478][T13799] vhci_hcd vhci_hcd.0: Device attached [ 841.066586][T13799] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 841.073157][T13799] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 841.089599][T13802] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 841.096166][T13802] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 841.105327][T13799] vhci_hcd vhci_hcd.0: Device attached [ 841.106484][T13802] vhci_hcd vhci_hcd.0: Device attached [ 841.129088][T13805] vhci_hcd: connection closed [ 841.129132][T13803] vhci_hcd: connection closed [ 841.135518][T13800] vhci_hcd: connection closed [ 841.140571][ T4355] vhci_hcd: stop threads [ 841.159873][ T4355] vhci_hcd: release socket [ 841.164323][ T4355] vhci_hcd: disconnect device [ 841.190632][ T4355] vhci_hcd: stop threads [ 841.194923][ T4355] vhci_hcd: release socket [ 841.217276][ T4355] vhci_hcd: disconnect device [ 841.222599][ T4355] vhci_hcd: stop threads [ 841.226875][ T4355] vhci_hcd: release socket [ 841.231846][ T4355] vhci_hcd: disconnect device [ 841.253376][ T8092] vhci_hcd: vhci_device speed not set [ 842.264129][T13834] netlink: 'syz.8.2273': attribute type 13 has an invalid length. [ 842.290784][T13834] netlink: 'syz.8.2273': attribute type 17 has an invalid length. [ 842.461186][T13834] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 842.495805][T13834] net_ratelimit: 2043 callbacks suppressed [ 842.495817][T13834] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 844.019832][ T1108] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 844.119938][ T8092] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 844.206527][T13860] fuse: Bad value for 'fd' [ 844.289791][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 844.302635][T13864] fuse: Bad value for 'fd' [ 844.355606][T13866] fuse: Bad value for 'fd' [ 844.440202][ T1108] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 844.500127][ T8092] usb 6-1: config 0 has an invalid descriptor of length 23, skipping remainder of the config [ 844.516779][ T8092] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 844.536539][ T8092] usb 6-1: config 0 interface 0 has no altsetting 0 [ 844.543856][ T8092] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 844.559410][ T8092] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.585099][ T8092] usb 6-1: config 0 descriptor?? [ 844.620008][ T1108] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 844.629157][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 844.633544][ T8092] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 844.660962][ T1108] usb 5-1: Product: syz [ 844.665179][ T1108] usb 5-1: Manufacturer: syz [ 844.676921][ T1108] usb 5-1: SerialNumber: syz [ 844.685115][ T1108] r8152-cfgselector 5-1: config 0 descriptor?? [ 844.695010][T13870] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 844.701553][T13870] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 844.715242][T13870] vhci_hcd vhci_hcd.0: Device attached [ 844.723463][T13870] vhci_hcd vhci_hcd.0: pdev(8) rhport(1) sockfd(5) [ 844.729995][T13870] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 844.739922][T13870] vhci_hcd vhci_hcd.0: Device attached [ 844.747415][T13870] vhci_hcd vhci_hcd.0: pdev(8) rhport(2) sockfd(7) [ 844.753950][T13870] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 844.765702][T13870] vhci_hcd vhci_hcd.0: Device attached [ 844.773653][T13875] vhci_hcd: connection closed [ 844.773705][T13873] vhci_hcd: connection closed [ 844.778621][T13871] vhci_hcd: connection closed [ 844.783842][ T4261] vhci_hcd: stop threads [ 844.795923][ T4261] vhci_hcd: release socket [ 844.800517][ T4261] vhci_hcd: disconnect device [ 844.805326][ T4261] vhci_hcd: stop threads [ 844.809573][ T4261] vhci_hcd: release socket [ 844.817902][ T4261] vhci_hcd: disconnect device [ 844.824471][ T4261] vhci_hcd: stop threads [ 844.828787][ T4261] vhci_hcd: release socket [ 844.837347][ T4261] vhci_hcd: disconnect device [ 844.975848][ T1108] r8152-cfgselector 5-1: Unknown version 0x0000 [ 845.078365][T13884] fuse: Bad value for 'fd' [ 845.118264][T13889] fuse: Bad value for 'fd' [ 845.259962][ T1108] r8152-cfgselector 5-1: Unknown version 0x0000 [ 845.277527][ T1108] r8152-cfgselector 5-1: USB disconnect, device number 18 [ 846.620941][T13921] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2301'. [ 847.410225][ T1108] usb 6-1: USB disconnect, device number 25 [ 847.795603][T13938] kvm: pic: non byte write [ 847.812372][T13951] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 847.818933][T13951] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 847.859441][T13941] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 847.866012][T13941] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 847.877390][T13951] vhci_hcd vhci_hcd.0: Device attached [ 847.888256][T13947] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 847.894844][T13947] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 847.902748][T13947] vhci_hcd vhci_hcd.0: Device attached [ 847.908463][T13941] vhci_hcd vhci_hcd.0: Device attached [ 847.925258][T13952] vhci_hcd: connection closed [ 847.925398][T13942] vhci_hcd: connection closed [ 847.925489][T13950] vhci_hcd: connection closed [ 847.955120][ T4355] vhci_hcd: stop threads [ 848.007321][ T4355] vhci_hcd: release socket [ 848.084864][ T4355] vhci_hcd: disconnect device [ 848.171805][ T4355] vhci_hcd: stop threads [ 848.234750][ T4355] vhci_hcd: release socket [ 848.307232][ T4355] vhci_hcd: disconnect device [ 848.441350][ T4355] vhci_hcd: stop threads [ 848.449639][ T4355] vhci_hcd: release socket [ 848.589958][ T4355] vhci_hcd: disconnect device [ 850.342763][T13976] x_tables: ip_tables: osf match: only valid for protocol 6 [ 851.419863][T13998] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 851.426441][T13998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 851.445266][T13998] vhci_hcd vhci_hcd.0: Device attached [ 851.456584][T13998] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 851.463144][T13998] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 851.477773][T13998] vhci_hcd vhci_hcd.0: Device attached [ 852.237217][T13998] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(7) [ 852.243798][T13998] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 852.258521][T14007] vhci_hcd: connection closed [ 852.258819][T13998] vhci_hcd vhci_hcd.0: Device attached [ 852.258880][T14003] vhci_hcd: connection closed [ 852.264340][T13999] vhci_hcd: connection closed [ 852.299876][ T23] usb 45-1: new low-speed USB device number 8 using vhci_hcd [ 852.399271][ T4345] vhci_hcd: stop threads [ 852.404374][ T4345] vhci_hcd: release socket [ 852.410205][T14000] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 852.431008][ T4345] vhci_hcd: disconnect device [ 852.435763][ T4345] vhci_hcd: stop threads [ 852.468161][ T4345] vhci_hcd: release socket [ 852.478567][ T4345] vhci_hcd: disconnect device [ 852.493734][ T4345] vhci_hcd: stop threads [ 852.498027][ T4345] vhci_hcd: release socket [ 852.524053][ T4345] vhci_hcd: disconnect device [ 852.534017][T14025] overlayfs: failed to clone upperpath [ 852.732536][T10859] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 853.903174][T10859] usb 3-1: Using ep0 maxpacket: 32 [ 854.450220][T10859] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 854.510734][T10859] usb 3-1: config 0 has no interface number 0 [ 854.663316][T10859] usb 3-1: config 0 interface 12 has no altsetting 0 [ 854.960229][T14067] read descriptors [ 855.077590][T10859] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 855.468261][ T5166] ffs_data_put(): freeing [ 855.622531][T10859] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 855.630660][T10859] usb 3-1: Product: syz [ 855.634847][T10859] usb 3-1: Manufacturer: syz [ 855.639455][T10859] usb 3-1: SerialNumber: syz [ 855.647507][T10859] usb 3-1: config 0 descriptor?? [ 855.669994][T10859] usb 3-1: can't set config #0, error -71 [ 855.703768][T10859] usb 3-1: USB disconnect, device number 22 [ 855.744520][T14082] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 855.751083][T14082] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 855.794046][T14082] vhci_hcd vhci_hcd.0: Device attached [ 855.896398][T14095] ffs_data_put(): freeing [ 855.912457][T14097] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(8) [ 855.919022][T14097] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 855.986180][T14082] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(5) [ 855.992751][T14082] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 856.028876][T14097] vhci_hcd vhci_hcd.0: Device attached [ 856.046652][T14082] vhci_hcd vhci_hcd.0: Device attached [ 856.061858][T14100] vhci_hcd: connection closed [ 856.062214][ T4261] vhci_hcd: stop threads [ 856.076811][T14096] vhci_hcd: connection closed [ 856.078030][T14084] vhci_hcd: connection closed [ 856.086873][ T4261] vhci_hcd: release socket [ 856.103860][ T4261] vhci_hcd: disconnect device [ 856.108937][ T4261] vhci_hcd: stop threads [ 856.116346][ T4261] vhci_hcd: release socket [ 856.127410][ T4261] vhci_hcd: disconnect device [ 856.137722][ T4261] vhci_hcd: stop threads [ 856.146799][ T4261] vhci_hcd: release socket [ 856.154367][ T4261] vhci_hcd: disconnect device [ 856.332994][T14085] kvm: pic: single mode not supported [ 856.437768][T14111] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 856.739429][T14125] read descriptors [ 856.810426][ T6495] ffs_data_put(): freeing [ 857.859169][T14145] overlayfs: failed to resolve './file0': -2 [ 858.245265][ T23] vhci_hcd: vhci_device speed not set [ 858.300569][T14160] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 858.307137][T14160] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 858.365157][T14160] vhci_hcd vhci_hcd.0: Device attached [ 858.401696][T14168] vhci_hcd vhci_hcd.0: pdev(6) rhport(1) sockfd(6) [ 858.408276][T14168] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 858.470354][T14168] vhci_hcd vhci_hcd.0: Device attached [ 858.496806][T14160] vhci_hcd vhci_hcd.0: pdev(6) rhport(2) sockfd(5) [ 858.503349][T14160] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 858.542417][T14160] vhci_hcd vhci_hcd.0: Device attached [ 858.557070][T14176] vhci_hcd: connection closed [ 858.557301][T14163] vhci_hcd: connection closed [ 858.557339][T14172] vhci_hcd: connection closed [ 858.577292][ T4354] vhci_hcd: stop threads [ 858.598935][ T4354] vhci_hcd: release socket [ 858.609341][ T4354] vhci_hcd: disconnect device [ 858.623303][ T4354] vhci_hcd: stop threads [ 858.636175][ T4354] vhci_hcd: release socket [ 858.645420][ T4354] vhci_hcd: disconnect device [ 858.657091][ T4354] vhci_hcd: stop threads [ 858.663096][ T4354] vhci_hcd: release socket [ 858.668188][ T4354] vhci_hcd: disconnect device [ 858.689833][ T23] usb 45-1: device descriptor read/64, error -110 [ 858.899938][ T23] vhci_hcd: vhci_device speed not set [ 859.023161][T14198] clocksource: Switched to clocksource acpi_pm [ 860.560058][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 861.365421][T14236] device syzkaller0 entered promiscuous mode [ 863.400562][T14267] MPTCP: addr_signal error, rm_addr=1 [ 863.517819][T14265] device syzkaller0 entered promiscuous mode [ 864.338452][T14297] device syzkaller0 entered promiscuous mode [ 865.098826][T14323] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 865.105996][T14323] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 865.125409][T14323] vhci_hcd vhci_hcd.0: Device attached [ 865.156771][T14323] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 865.163338][T14323] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 865.177985][T14323] vhci_hcd vhci_hcd.0: Device attached [ 865.215671][T14323] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 865.222228][T14323] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 865.240830][T14323] vhci_hcd vhci_hcd.0: Device attached [ 865.263169][T14330] vhci_hcd: connection closed [ 865.263532][ T4369] vhci_hcd: stop threads [ 865.272955][T14328] vhci_hcd: connection closed [ 865.273240][T14325] vhci_hcd: connection closed [ 865.273432][ T4369] vhci_hcd: release socket [ 865.301944][ T4369] vhci_hcd: disconnect device [ 865.313247][ T4369] vhci_hcd: stop threads [ 865.320098][ T4369] vhci_hcd: release socket [ 865.330144][ T4369] vhci_hcd: disconnect device [ 865.339797][ T4369] vhci_hcd: stop threads [ 865.347010][ T4369] vhci_hcd: release socket [ 865.355686][ T4369] vhci_hcd: disconnect device [ 865.403554][ T1108] usb 43-1: new low-speed USB device number 8 using vhci_hcd [ 865.416003][ T1108] usb 43-1: enqueue for inactive port 0 [ 865.520017][ T1108] vhci_hcd: vhci_device speed not set [ 867.183952][T14366] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 868.669218][T14436] device syzkaller0 entered promiscuous mode [ 869.194709][T10859] hid-generic 0000:0000:0000.0012: unknown main item tag 0x0 [ 869.231206][T10859] hid-generic 0000:0000:0000.0012: hidraw0: HID v0.00 Device [syz1] on syz0 [ 870.000507][T14469] fuse: Bad value for 'fd' [ 870.032711][T14472] tipc: Enabling of bearer rejected, failed to enable media [ 870.219636][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.225994][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.433810][T14513] fuse: Bad value for 'fd' [ 873.457018][T14516] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 873.734281][T14536] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2465'. [ 874.245884][ T1108] usb 3-1: new full-speed USB device number 23 using dummy_hcd [ 875.075032][T14562] xt_TCPMSS: Only works on TCP SYN packets [ 876.163141][T14585] fuse: Bad value for 'fd' [ 876.549263][T14600] type mismatch for 10000000,10000000 old: write-back new: write-combining [ 876.561586][T14600] type mismatch for 20000000,20000000 old: write-back new: write-combining [ 877.609919][ T1108] usb 3-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 879.090493][ T1108] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 879.098526][ T1108] usb 3-1: Product: syz [ 879.103321][ T1108] usb 3-1: Manufacturer: syz [ 879.107959][ T1108] usb 3-1: SerialNumber: syz [ 879.170442][ T1108] usb 3-1: config 0 descriptor?? [ 879.706779][ T1108] usb 3-1: can't set config #0, error -71 [ 880.020938][ T1108] usb 3-1: USB disconnect, device number 23 [ 880.224533][T14633] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 880.257066][T14630] device syzkaller0 entered promiscuous mode [ 880.579684][T10858] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 880.839693][T10858] usb 6-1: Using ep0 maxpacket: 32 [ 880.961055][T10858] usb 6-1: config 0 has no interfaces? [ 880.970543][T10858] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 881.026427][T10858] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 881.350651][T10858] usb 6-1: config 0 descriptor?? [ 881.456305][ T26] audit: type=1326 audit(2000000684.113:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffe902d5a88 code=0x7ffc0000 [ 881.509818][ T26] audit: type=1326 audit(2000000684.143:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafaa37e99 code=0x7ffc0000 [ 881.557595][ T26] audit: type=1326 audit(2000000684.143:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffe902d5a88 code=0x7ffc0000 [ 881.655024][ T26] audit: type=1326 audit(2000000684.143:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7fbafaa37e99 code=0x7ffc0000 [ 881.694112][ T26] audit: type=1326 audit(2000000684.143:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffe902d5a88 code=0x7ffc0000 [ 881.728642][ T26] audit: type=1326 audit(2000000684.143:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafaa37e99 code=0x7ffc0000 [ 881.754507][ T26] audit: type=1326 audit(2000000684.143:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffe902d5a88 code=0x7ffc0000 [ 881.766553][ T1108] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 881.780219][ T26] audit: type=1326 audit(2000000684.143:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fbafaa37e99 code=0x7ffc0000 [ 881.813944][ T26] audit: type=1326 audit(2000000684.143:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ffe902d5a88 code=0x7ffc0000 [ 881.839976][ T26] audit: type=1326 audit(2000000684.143:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14657 comm="syz.8.2508" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbafaa37e99 code=0x7ffc0000 [ 882.069656][ T1108] usb 5-1: Using ep0 maxpacket: 32 [ 882.589689][ T1108] usb 5-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 882.607614][ T1108] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 882.842862][ T1108] usb 5-1: Product: syz [ 882.947400][ T1108] usb 5-1: Manufacturer: syz [ 883.056775][ T1108] usb 5-1: SerialNumber: syz [ 883.307609][ T1108] usb 5-1: config 0 descriptor?? [ 883.696032][ T1108] RobotFuzz Open Source InterFace, OSIF 5-1:0.0: version d4.15 found at bus 005 address 019 [ 883.909149][ T7529] usb 6-1: USB disconnect, device number 26 [ 886.020021][T14655] i2c i2c-1: failure sending STOP [ 886.443815][ T1108] usb 5-1: USB disconnect, device number 19 [ 886.746161][T14737] xt_CONNSECMARK: invalid mode: 66 [ 887.992258][T14740] device syzkaller0 entered promiscuous mode [ 893.371032][T14805] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 894.426840][T14833] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2550'. [ 896.150722][T14847] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 896.157278][T14847] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 896.175083][T14847] vhci_hcd vhci_hcd.0: Device attached [ 896.256270][T14847] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 896.262820][T14847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 896.449690][ T8092] usb 37-1: new low-speed USB device number 10 using vhci_hcd [ 897.311870][T14847] vhci_hcd vhci_hcd.0: Device attached [ 897.349744][T14847] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 897.356431][T14847] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 897.369516][T14847] vhci_hcd vhci_hcd.0: Device attached [ 897.447216][T14860] vhci_hcd: connection closed [ 897.447336][T14855] vhci_hcd: connection closed [ 897.456297][ T4369] vhci_hcd: stop threads [ 897.465469][ T4369] vhci_hcd: release socket [ 897.475278][T14848] vhci_hcd: connection reset by peer [ 897.493282][ T4369] vhci_hcd: disconnect device [ 897.525234][ T4369] vhci_hcd: stop threads [ 897.543000][ T4369] vhci_hcd: release socket [ 897.563418][ T4369] vhci_hcd: disconnect device [ 897.666888][ T4369] vhci_hcd: stop threads [ 897.674773][ T4369] vhci_hcd: release socket [ 897.685607][ T4369] vhci_hcd: disconnect device [ 897.729632][T14864] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 900.073965][T14909] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2567'. [ 900.572032][T14923] device syzkaller0 entered promiscuous mode [ 900.611818][T14919] pit: kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 900.636539][T14919] pit: kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 900.835817][ C1] Unknown status report in ack skb [ 900.947215][T14938] device geneve2 entered promiscuous mode [ 901.000886][T14947] binder_alloc: 14941: binder_alloc_buf, no vma [ 902.479635][ T8092] vhci_hcd: vhci_device speed not set [ 903.738658][T14998] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 903.745219][T14998] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 903.789226][T10858] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 903.820026][T14998] vhci_hcd vhci_hcd.0: Device attached [ 904.029490][T10858] usb 5-1: Using ep0 maxpacket: 8 [ 904.285070][T15003] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 904.291620][T15003] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 904.320525][T10858] usb 5-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 904.435199][ T8092] usb 37-1: new low-speed USB device number 11 using vhci_hcd [ 904.529571][T10858] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.539897][T15003] vhci_hcd vhci_hcd.0: Device attached [ 904.569947][T10858] usb 5-1: Product: syz [ 904.578053][T14998] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(8) [ 904.584583][T14998] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 904.599524][T10858] usb 5-1: Manufacturer: syz [ 904.604522][T14998] vhci_hcd vhci_hcd.0: Device attached [ 904.609161][T10858] usb 5-1: SerialNumber: syz [ 904.634887][T15010] vhci_hcd: connection closed [ 904.635136][T15005] vhci_hcd: connection closed [ 904.640061][T14420] vhci_hcd: stop threads [ 904.640159][T14999] vhci_hcd: connection reset by peer [ 904.644804][T14420] vhci_hcd: release socket [ 904.650706][T10858] usb 5-1: config 0 descriptor?? [ 904.660602][T14420] vhci_hcd: disconnect device [ 904.690219][T14420] vhci_hcd: stop threads [ 904.694489][T14420] vhci_hcd: release socket [ 904.707717][T14420] vhci_hcd: disconnect device [ 904.716454][T10858] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 904.724559][T14420] vhci_hcd: stop threads [ 904.728934][T14420] vhci_hcd: release socket [ 904.740649][T14420] vhci_hcd: disconnect device [ 904.749473][T10858] pctv452e: pctv452e_power_ctrl: 1 [ 904.749473][T10858] [ 904.765230][T10858] usb 5-1: selecting invalid altsetting 3 [ 904.776648][T10858] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 904.776648][T10858] [ 904.795748][T10858] dvb-usb: bulk message failed: -22 (5/0) [ 904.822016][T10858] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 904.869444][T10858] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 904.898370][T10858] usb 5-1: media controller created [ 904.924119][T10858] dvb-usb: bulk message failed: -22 (8/0) [ 904.947173][T10858] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 904.958098][T14992] pctv452e: I2C error -22; AA 02 00 00 EA -> 00 00 00 00 00 00 00 [ 904.966987][T10858] dvb-usb: MAC address reading failed. [ 905.032875][T10858] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 905.169392][T10858] DVB: Unable to find symbol stb0899_attach() [ 905.178919][T10858] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 905.399162][T10858] rc_core: IR keymap rc-tt-1500 not found [ 905.403318][T15020] pit: kvm: requested 19276 ns i8254 timer period limited to 200000 ns [ 905.405071][T10858] Registered IR keymap rc-empty [ 905.446499][T10858] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 905.456667][T15020] pit: kvm: requested 176838 ns i8254 timer period limited to 200000 ns [ 905.489925][T10858] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input37 [ 905.619710][T10858] dvb-usb: schedule remote query interval to 100 msecs. [ 905.688079][T10858] pctv452e: pctv452e_power_ctrl: 0 [ 905.688079][T10858] [ 905.724301][T10858] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 905.835293][T10858] usb 5-1: USB disconnect, device number 20 [ 906.144523][T10858] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 909.039159][ T1108] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 909.191504][T15098] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 909.403610][T15104] smc: net device veth0 applied user defined pnetid SYZ0 [ 909.680091][ T8092] vhci_hcd: vhci_device speed not set [ 910.181237][ T1108] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 910.217286][T15101] infiniband syz0: set active [ 910.239266][T15101] infiniband syz0: added veth0 [ 910.309370][ T1108] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 910.339383][ T1108] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.385904][ T1108] usb 6-1: config 0 descriptor?? [ 910.464180][T15114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2625'. [ 910.480906][ T1108] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 910.502506][T15101] RDS/IB: syz0: added [ 910.507893][T15101] smc: adding ib device syz0 with port count 1 [ 910.543652][T15101] smc: ib device syz0 port 1 has pnetid [ 910.713415][T15083] Invalid ELF header magic: != ELF [ 911.257902][ T7529] usb 6-1: USB disconnect, device number 27 [ 911.334985][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 911.341541][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 911.354667][T15131] vhci_hcd vhci_hcd.0: Device attached [ 911.375154][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(5) [ 911.381708][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 911.389648][T15131] vhci_hcd vhci_hcd.0: Device attached [ 911.397997][T15131] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(7) [ 911.404535][T15131] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 911.412386][T15131] vhci_hcd vhci_hcd.0: Device attached [ 911.423046][T15139] vhci_hcd: connection closed [ 911.423499][ T4369] vhci_hcd: stop threads [ 911.432741][T15137] vhci_hcd: connection closed [ 911.433131][T15133] vhci_hcd: connection closed [ 911.433318][ T4369] vhci_hcd: release socket [ 911.457153][ T4369] vhci_hcd: disconnect device [ 911.462290][ T4369] vhci_hcd: stop threads [ 911.466571][ T4369] vhci_hcd: release socket [ 911.481201][ T4369] vhci_hcd: disconnect device [ 911.496355][ T4369] vhci_hcd: stop threads [ 911.501126][ T4369] vhci_hcd: release socket [ 911.509356][ T4369] vhci_hcd: disconnect device [ 911.561171][ T1108] vhci_hcd: vhci_device speed not set [ 911.596201][T15150] device vlan2 entered promiscuous mode [ 914.987604][T15176] device syzkaller0 entered promiscuous mode [ 915.032874][T15175] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 915.048498][T15181] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 918.356248][ T7529] Bluetooth: hci0: command 0x0406 tx timeout [ 920.129892][T15240] netlink: 'syz.4.2664': attribute type 1 has an invalid length. [ 920.163800][T15237] kvm: pic: single mode not supported [ 920.164772][T15237] kvm: pic: single mode not supported [ 920.171360][T15237] kvm: pic: level sensitive irq not supported [ 920.245540][T15237] kvm: pic: level sensitive irq not supported [ 920.257938][T15237] kvm: pic: single mode not supported [ 920.264433][T15237] kvm: pic: level sensitive irq not supported [ 920.348240][T15237] kvm: pic: level sensitive irq not supported [ 920.385773][T15237] kvm: pic: single mode not supported [ 920.385795][T15237] kvm: pic: level sensitive irq not supported [ 920.414134][T15237] kvm: pic: level sensitive irq not supported [ 920.452906][T15237] kvm: pic: single mode not supported [ 920.453410][T15237] kvm: pic: single mode not supported [ 920.459001][T15237] kvm: pic: level sensitive irq not supported [ 920.499079][T15237] kvm: pic: single mode not supported [ 920.499099][T15237] kvm: pic: level sensitive irq not supported [ 920.506403][T15237] kvm: pic: single mode not supported [ 920.512850][T15237] kvm: pic: level sensitive irq not supported [ 920.519418][T15237] kvm: pic: single mode not supported [ 920.525574][T15237] kvm: pic: level sensitive irq not supported [ 920.539229][T15251] device syzkaller0 entered promiscuous mode [ 921.719898][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 921.719976][ T26] audit: type=1800 audit(2000000724.382:35): pid=15257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.2670" name="bus" dev="ramfs" ino=72704 res=0 errno=0 [ 922.176144][T15278] using random self ethernet address [ 922.203363][T15278] using random host ethernet address [ 922.243238][T15278] udc-core: couldn't find an available UDC or it's busy [ 923.042968][T15287] overlayfs: failed to clone upperpath [ 925.353307][T15312] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 925.359840][T15312] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 925.528802][T15312] vhci_hcd vhci_hcd.0: Device attached [ 925.799007][ T23] usb 37-1: new low-speed USB device number 13 using vhci_hcd [ 926.046627][T15320] vhci_hcd vhci_hcd.0: pdev(2) rhport(1) sockfd(6) [ 926.053188][T15320] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 926.100101][T15324] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(9) [ 926.106652][T15324] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 926.191112][T15320] vhci_hcd vhci_hcd.0: Device attached [ 926.197898][T15324] vhci_hcd vhci_hcd.0: Device attached [ 926.234132][T15325] vhci_hcd: connection closed [ 926.234540][ T4369] vhci_hcd: stop threads [ 926.259136][T15321] vhci_hcd: connection closed [ 926.372467][T15315] vhci_hcd: connection reset by peer [ 926.480226][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 927.429063][ T4369] vhci_hcd: release socket [ 927.442636][ T4369] vhci_hcd: disconnect device [ 927.487608][ T4369] vhci_hcd: stop threads [ 927.505301][ T4369] vhci_hcd: release socket [ 927.516950][T15354] device syzkaller0 entered promiscuous mode [ 927.534751][ T4369] vhci_hcd: disconnect device [ 927.557559][ T4369] vhci_hcd: stop threads [ 927.561942][ T4369] vhci_hcd: release socket [ 927.566660][ T4369] vhci_hcd: disconnect device [ 927.664316][T15359] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2695'. [ 928.718855][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'. [ 928.739449][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'. [ 928.749670][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'. [ 928.760816][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'. [ 928.772927][T15378] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2700'. [ 930.114025][T15393] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 930.120591][T15393] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 930.479060][T15388] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 930.485616][T15388] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 930.576354][T15393] vhci_hcd vhci_hcd.0: Device attached [ 930.583127][T15388] vhci_hcd vhci_hcd.0: Device attached [ 930.618563][T15395] vhci_hcd: connection closed [ 930.619315][T15389] vhci_hcd: connection closed [ 930.625064][T14412] vhci_hcd: stop threads [ 930.634583][T14412] vhci_hcd: release socket [ 930.660645][T14412] vhci_hcd: disconnect device [ 930.695170][T14412] vhci_hcd: stop threads [ 930.721713][T14412] vhci_hcd: release socket [ 930.746280][T14412] vhci_hcd: disconnect device [ 931.134753][ T23] vhci_hcd: vhci_device speed not set [ 931.601909][ T1431] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.623339][ T1431] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.982916][T15439] ffs_data_put(): freeing [ 932.084077][T15437] device syzkaller0 entered promiscuous mode [ 935.122623][T15486] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 935.129177][T15486] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 935.141931][T15486] vhci_hcd vhci_hcd.0: Device attached [ 935.148545][T15479] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 935.155099][T15479] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 935.164509][T15479] vhci_hcd vhci_hcd.0: Device attached [ 935.188800][T15479] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5) [ 935.194568][T15496] ffs_data_put(): freeing [ 935.195339][T15479] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 935.222661][T15479] vhci_hcd vhci_hcd.0: Device attached [ 935.240944][T15493] vhci_hcd: connection closed [ 935.241123][T15487] vhci_hcd: connection closed [ 935.244952][T15484] vhci_hcd: connection closed [ 935.251183][T14428] vhci_hcd: stop threads [ 935.260343][T14428] vhci_hcd: release socket [ 935.264782][T14428] vhci_hcd: disconnect device [ 935.282132][T14428] vhci_hcd: stop threads [ 935.286404][T14428] vhci_hcd: release socket [ 935.298942][T14428] vhci_hcd: disconnect device [ 935.309176][T14428] vhci_hcd: stop threads [ 935.313583][T14428] vhci_hcd: release socket [ 935.318084][T14428] vhci_hcd: disconnect device [ 935.458108][ T23] vhci_hcd: vhci_device speed not set [ 938.311221][T15540] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 938.317775][T15540] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 938.339270][T15540] vhci_hcd vhci_hcd.0: Device attached [ 938.352012][T15540] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(5) [ 938.358553][T15540] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 938.373063][T15540] vhci_hcd vhci_hcd.0: Device attached [ 938.383545][T15540] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(7) [ 938.390082][T15540] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 938.410364][T15540] vhci_hcd vhci_hcd.0: Device attached [ 938.422629][T15545] vhci_hcd: connection closed [ 938.423008][T14428] vhci_hcd: stop threads [ 938.486878][T14428] vhci_hcd: release socket [ 938.502067][T14428] vhci_hcd: disconnect device [ 938.573456][T15541] vhci_hcd: connection closed [ 938.573674][T15543] vhci_hcd: connection closed [ 938.597108][T14420] vhci_hcd: stop threads [ 938.622273][T14420] vhci_hcd: release socket [ 938.627130][T14420] vhci_hcd: disconnect device [ 938.635304][T14420] vhci_hcd: stop threads [ 938.645508][T14420] vhci_hcd: release socket [ 938.654241][T14420] vhci_hcd: disconnect device [ 938.670377][ T7529] vhci_hcd: vhci_device speed not set [ 939.712356][T15558] overlayfs: failed to clone lowerpath [ 939.760099][T15558] overlayfs: failed to clone lowerpath [ 939.768242][T15533] overlayfs: failed to clone upperpath [ 941.141085][T15580] netlink: 'syz.8.2756': attribute type 2 has an invalid length. [ 941.993795][T15576] syz.2.2754 (15576): drop_caches: 2 [ 942.838922][T15602] [ 942.841279][T15602] ====================================================== [ 942.848297][T15602] WARNING: possible circular locking dependency detected [ 942.855320][T15602] syzkaller #0 Not tainted [ 942.859738][T15602] ------------------------------------------------------ [ 942.866757][T15602] syz.2.2762/15602 is trying to acquire lock: [ 942.872825][T15602] ffffffff8ceceff0 (gadget_subsys.su_mutex){+.+.}-{3:3}, at: uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 942.884164][T15602] [ 942.884164][T15602] but task is already holding lock: [ 942.891532][T15602] ffff888070bf5fb0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0 [ 942.902065][T15602] [ 942.902065][T15602] which lock already depends on the new lock. [ 942.902065][T15602] [ 942.912474][T15602] [ 942.912474][T15602] the existing dependency chain (in reverse order) is: [ 942.921493][T15602] [ 942.921493][T15602] -> #2 (&sb->s_type->i_mutex_key#22){++++}-{3:3}: [ 942.930205][T15602] down_write+0x38/0x60 [ 942.935004][T15602] configfs_depend_item_unlocked+0x14f/0x430 [ 942.941516][T15602] usbg_make_tpg+0x1f3/0x580 [ 942.946679][T15602] target_fabric_make_tpg+0xa0/0x6d0 [ 942.952638][T15602] configfs_mkdir+0x511/0x9e0 [ 942.957850][T15602] vfs_mkdir+0x386/0x570 [ 942.962638][T15602] do_mkdirat+0x1dd/0x5c0 [ 942.967499][T15602] __x64_sys_mkdir+0x6a/0x80 [ 942.972619][T15602] do_syscall_64+0x4c/0xa0 [ 942.977593][T15602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 942.984018][T15602] [ 942.984018][T15602] -> #1 (&opts->dep_lock){+.+.}-{3:3}: [ 942.991680][T15602] __mutex_lock_common+0x1e5/0x2400 [ 942.997413][T15602] mutex_lock_nested+0x17/0x20 [ 943.002711][T15602] tcm_set_name+0x26/0x90 [ 943.007575][T15602] function_make+0x195/0x350 [ 943.012756][T15602] configfs_mkdir+0x511/0x9e0 [ 943.017970][T15602] vfs_mkdir+0x386/0x570 [ 943.022742][T15602] do_mkdirat+0x1dd/0x5c0 [ 943.027606][T15602] __x64_sys_mkdirat+0x85/0x90 [ 943.032903][T15602] do_syscall_64+0x4c/0xa0 [ 943.037852][T15602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 943.044274][T15602] [ 943.044274][T15602] -> #0 (gadget_subsys.su_mutex){+.+.}-{3:3}: [ 943.052540][T15602] __lock_acquire+0x2c66/0x7b50 [ 943.058002][T15602] lock_acquire+0x19e/0x400 [ 943.063038][T15602] __mutex_lock_common+0x1e5/0x2400 [ 943.068768][T15602] mutex_lock_nested+0x17/0x20 [ 943.074068][T15602] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 943.080754][T15602] configfs_symlink+0x5a4/0x13b0 [ 943.086225][T15602] vfs_symlink+0x245/0x3d0 [ 943.091171][T15602] do_symlinkat+0x1ab/0x6b0 [ 943.096204][T15602] __x64_sys_symlink+0x7a/0x90 [ 943.101504][T15602] do_syscall_64+0x4c/0xa0 [ 943.106453][T15602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 943.112874][T15602] [ 943.112874][T15602] other info that might help us debug this: [ 943.112874][T15602] [ 943.123107][T15602] Chain exists of: [ 943.123107][T15602] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#22 [ 943.123107][T15602] [ 943.137814][T15602] Possible unsafe locking scenario: [ 943.137814][T15602] [ 943.145268][T15602] CPU0 CPU1 [ 943.150635][T15602] ---- ---- [ 943.156008][T15602] lock(&sb->s_type->i_mutex_key#22); [ 943.161489][T15602] lock(&opts->dep_lock); [ 943.168435][T15602] lock(&sb->s_type->i_mutex_key#22); [ 943.176428][T15602] lock(gadget_subsys.su_mutex); [ 943.181467][T15602] [ 943.181467][T15602] *** DEADLOCK *** [ 943.181467][T15602] [ 943.189617][T15602] 2 locks held by syz.2.2762/15602: [ 943.194819][T15602] #0: ffff8881469b8460 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 943.204132][T15602] #1: ffff888070bf5fb0 (&sb->s_type->i_mutex_key#22){++++}-{3:3}, at: configfs_symlink+0x47b/0x13b0 [ 943.215036][T15602] [ 943.215036][T15602] stack backtrace: [ 943.220932][T15602] CPU: 1 PID: 15602 Comm: syz.2.2762 Not tainted syzkaller #0 [ 943.228415][T15602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 943.238478][T15602] Call Trace: [ 943.241822][T15602] [ 943.244807][T15602] dump_stack_lvl+0x188/0x250 [ 943.249563][T15602] ? load_image+0x410/0x410 [ 943.254112][T15602] ? show_regs_print_info+0x20/0x20 [ 943.259334][T15602] ? print_circular_bug+0x12b/0x1a0 [ 943.264549][T15602] check_noncircular+0x296/0x330 [ 943.269500][T15602] ? add_chain_block+0x9b0/0x9b0 [ 943.274456][T15602] ? lockdep_lock+0xf1/0x1f0 [ 943.279068][T15602] ? mark_lock+0x94/0x320 [ 943.283424][T15602] ? _find_first_zero_bit+0xd1/0xf0 [ 943.288700][T15602] __lock_acquire+0x2c66/0x7b50 [ 943.293691][T15602] ? stack_trace_save+0xf0/0xf0 [ 943.298622][T15602] ? arch_stack_walk+0xf2/0x140 [ 943.303558][T15602] ? verify_lock_unused+0x140/0x140 [ 943.308782][T15602] ? kmem_cache_free+0x8f/0x210 [ 943.313701][T15602] ? stack_trace_save+0xa6/0xf0 [ 943.318572][T15602] ? mark_lock+0x94/0x320 [ 943.322925][T15602] lock_acquire+0x19e/0x400 [ 943.327447][T15602] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 943.333797][T15602] ? __might_sleep+0xf0/0xf0 [ 943.338458][T15602] ? read_lock_is_recursive+0x10/0x10 [ 943.343844][T15602] ? verify_lock_unused+0x140/0x140 [ 943.349067][T15602] __mutex_lock_common+0x1e5/0x2400 [ 943.354284][T15602] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 943.360630][T15602] ? lock_chain_count+0x20/0x20 [ 943.365509][T15602] ? uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 943.371855][T15602] ? mutex_lock_io_nested+0x60/0x60 [ 943.377077][T15602] ? rwsem_write_trylock+0x135/0x1c0 [ 943.382377][T15602] ? clear_nonspinnable+0x60/0x60 [ 943.387422][T15602] mutex_lock_nested+0x17/0x20 [ 943.392202][T15602] uvcg_streaming_header_allow_link+0x6d/0x4a0 [ 943.398375][T15602] ? inode_permission+0xef/0x480 [ 943.403326][T15602] ? bpf_lsm_inode_permission+0x5/0x10 [ 943.408855][T15602] ? security_inode_permission+0xac/0xf0 [ 943.414554][T15602] configfs_symlink+0x5a4/0x13b0 [ 943.419512][T15602] ? end_current_label_crit_section+0x14b/0x170 [ 943.425800][T15602] ? common_perm+0x15d/0x1b0 [ 943.430403][T15602] ? from_kgid+0x14f/0x6a0 [ 943.434869][T15602] ? apparmor_path_symlink+0x1ac/0x230 [ 943.440349][T15602] ? lookup_one_qstr_excl+0x11c/0x240 [ 943.445740][T15602] ? detach_groups+0x370/0x370 [ 943.450519][T15602] ? inode_permission+0xef/0x480 [ 943.455470][T15602] ? bpf_lsm_inode_symlink+0x5/0x10 [ 943.460681][T15602] ? security_inode_symlink+0xb2/0x100 [ 943.466158][T15602] vfs_symlink+0x245/0x3d0 [ 943.470595][T15602] do_symlinkat+0x1ab/0x6b0 [ 943.475117][T15602] ? vfs_symlink+0x3d0/0x3d0 [ 943.479724][T15602] ? getname_flags+0x1f9/0x4f0 [ 943.484507][T15602] __x64_sys_symlink+0x7a/0x90 [ 943.489297][T15602] do_syscall_64+0x4c/0xa0 [ 943.493735][T15602] ? clear_bhb_loop+0x30/0x80 [ 943.498443][T15602] ? clear_bhb_loop+0x30/0x80 [ 943.503135][T15602] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 943.509048][T15602] RIP: 0033:0x7f45c1b07e99 [ 943.513550][T15602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 943.533226][T15602] RSP: 002b:00007f45bfd60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 943.541738][T15602] RAX: ffffffffffffffda RBX: 00007f45c1d8ffa0 RCX: 00007f45c1b07e99 [ 943.549736][T15602] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000001400 [ 943.557730][T15602] RBP: 00007f45c1b9deaf R08: 0000000000000000 R09: 0000000000000000 [ 943.565721][T15602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 943.573723][T15602] R13: 00007f45c1d90038 R14: 00007f45c1d8ffa0 R15: 00007ffc85194ec8 [ 943.581723][T15602]