last executing test programs: 25m47.626345601s ago: executing program 32 (id=16): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x801, &(0x7f0000001180)=ANY=[], 0x2, 0x17d, &(0x7f0000000380)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = userfaultfd(0x80001) getpid() ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r3, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) 22m19.798559167s ago: executing program 5 (id=345): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x17, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000000)={r0, r1, 0x12}, 0x10) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r3, r2, 0x0, 0x1e) 22m19.388743399s ago: executing program 5 (id=347): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x10000, 0xe3bd}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c, 0x0) getsockopt$inet6_buf(r3, 0x29, 0x2e, &(0x7f00000003c0)=""/119, &(0x7f0000000440)=0x77) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) 22m17.244032529s ago: executing program 5 (id=349): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000096000a000200ab0600aaaa00000006"], 0x30}}, 0x0) 22m16.883327359s ago: executing program 5 (id=351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 22m1.221323365s ago: executing program 33 (id=351): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000000050005000a00000012000300686173683a6e65742c706f7274"], 0x4c}}, 0x2) 19m36.604051106s ago: executing program 34 (id=586): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file3\x00', 0x801, &(0x7f0000001180)=ANY=[], 0x2, 0x17d, &(0x7f0000000380)="$eJzskr1OOkEUxc/sLl///CXa0kBB/CiUZVFjpyX2djYSWJG4qLAkCqFYYwyFhbH0CXgNE19AC+MDUFMQa7NmZu9OBnwE51fsmXvmzp17B878jp8C8D0b1nEAgYks3hmDBSDPIm9qRPpE+kH6GAneKO+Q/DvSnN8fJCmngJXIOK95ntstAPgSnrT8/VsDU1Hqczas88UJgDAMQ+41AJ6O/0qOCaCj5OQsICOGCGUOH4QHawBKvfZVye8PNlvtWtNtuheOWdm1t217xymdtjzXjr5MuYJGAdcNAKk0JHw/AeCe4n+YQ4wet0b7LINjeTYZv2GWYRFDORsrw4vsK4X49wKOsAre1nXAFLcoqlgQI1XBYFJQtiiLybvSYmOrfuk1RmBg8bExLFmjPEFCBo4aVPYCLEWlRlSySFolHZNOSPMLfxkr4N8HitZ5/7ip9XrdclKuWLxypOcsB+qD8VufjfnhXo1fb6vRaDQajUaj0Wg0f42fAAAA//+JLnV4") mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) r3 = userfaultfd(0x80001) r4 = getpid() ptrace$setsig(0x4203, r4, 0x8, &(0x7f0000000480)={0x19, 0x4, 0x741}) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_COPY(r3, 0xc028aa03, 0x0) 12m33.278610662s ago: executing program 35 (id=1388): syz_usb_connect$cdc_ecm(0x2, 0x5e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a440000000010109024c00010106a00009040000ff02020000052406000005240002000d240f01000000f7060000080004381301042413030905810300020480040905820b0000cd0000090503"], 0x0) socket$netlink(0x10, 0x3, 0x0) 11m56.207431047s ago: executing program 8 (id=1547): r0 = socket$igmp(0x2, 0x3, 0x2) unshare(0x2c020400) sendto(r0, 0x0, 0x0, 0x1, &(0x7f0000000440)=@vsock={0x28, 0x0, 0x2710}, 0x80) 11m55.435089101s ago: executing program 8 (id=1552): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) rename(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a09040000000000000000020000000900020073797a32000000000900010073797a30000000002c0004802800018007000100637400001c0002800800024000000009080001"], 0x80}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000840)='objagg_obj_destroy\x00'}, 0x18) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) listen(r1, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) accept(r1, 0x0, 0x0) 11m53.862007155s ago: executing program 8 (id=1554): bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_open_procfs(0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x0) 11m51.588130828s ago: executing program 8 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x2000c860) 11m51.161991881s ago: executing program 8 (id=1565): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2008000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 11m51.039298649s ago: executing program 4 (id=1566): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet(0xa, 0x801, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x15, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f00000002c0)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2004cb, 0x200000000000, 0x0, 0x0, 0xfffffffffffffffd], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 11m49.842298016s ago: executing program 8 (id=1567): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa43, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='tlb_flush\x00', r3, 0x0, 0x8000000000000001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000002c0)="ebb2dc775814f65b005b78bb059dea310420ca15", 0x14) close_range(r6, 0xffffffffffffffff, 0x0) 11m49.356644847s ago: executing program 4 (id=1570): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) 11m49.09149522s ago: executing program 4 (id=1573): socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[], 0x50) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socketpair$unix(0x1, 0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6(0xa, 0x3, 0x6) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 11m47.852706847s ago: executing program 4 (id=1575): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000f40)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r0, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000000000)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x2000c860) 11m47.086719842s ago: executing program 4 (id=1577): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000300), 0x2008000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 11m46.130162605s ago: executing program 4 (id=1578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x1c, 0x4, 0x410, 0x108, 0x0, 0x0, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x6}}}}, {{@arp={@broadcast, @loopback, 0x0, 0xffffff00, 0xfe, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0xffff, 0x4000, 0xf7fe, 0x2, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @private=0xa010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x460) socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x3) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r3, &(0x7f0000000040)='\f\x00', 0xffeb, 0xb00, &(0x7f0000000340), 0x10) shmctl$IPC_SET(0x0, 0x1, 0x0) shmctl$IPC_RMID(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES16, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b805000000b9fd7ef9640f01d9c74424001f000000c744240246000000c7442406000000000f011424c4c22da98c70a664e0a80f2092eacc000000100166baa100b804000000ef3667f30f1ef8dbe10f01c4b8e27900000f23d80f21f835c00000b00f23f8", 0x65}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 11m41.816855947s ago: executing program 36 (id=1540): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000000000800000"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x7, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000008000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) syz_open_dev$MSR(&(0x7f0000000300), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0xe, 0x0, &(0x7f00000004c0)="0000000000005eefc9bb9fd1b208", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m38.239724778s ago: executing program 37 (id=1555): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r0, 0xffffffffffffffff, 0x6, 0x0, @val=@tracing={0x0, 0x2}}, 0x20) 11m34.396614413s ago: executing program 38 (id=1567): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x20}) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa43, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000300)=0xf) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x14) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x18) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000280)='tlb_flush\x00', r3, 0x0, 0x8000000000000001}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r5, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x1c, &(0x7f00000002c0)="ebb2dc775814f65b005b78bb059dea310420ca15", 0x14) close_range(r6, 0xffffffffffffffff, 0x0) 11m30.724551645s ago: executing program 39 (id=1578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000040)={0x190, 0x258, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, {}, {}, {0x0, 0x0, 0x1}}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x1c, 0x4, 0x410, 0x108, 0x0, 0x0, 0x328, 0x328, 0x328, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0x108, 0x0, {0x3ed}}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x81, 'syz1\x00', {0x6}}}}, {{@arp={@broadcast, @loopback, 0x0, 0xffffff00, 0xfe, 0x8, {@mac=@broadcast, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac, {[0x0, 0x0, 0xff, 0xff]}}, 0x0, 0x0, 0xffff, 0x4000, 0xf7fe, 0x2, 'gretap0\x00', 'bridge_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @empty, @multicast1, @private=0xa010101, 0x1, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}, @empty, @broadcast, 0x1, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x460) socket$nl_netfilter(0x10, 0x3, 0xc) iopl(0x3) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) setsockopt$inet_int(r3, 0x0, 0x3, &(0x7f0000000000)=0x6, 0x4) sendto$inet(r3, &(0x7f0000000040)='\f\x00', 0xffeb, 0xb00, &(0x7f0000000340), 0x10) shmctl$IPC_SET(0x0, 0x1, 0x0) shmctl$IPC_RMID(0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010003b1500"/20, @ANYRES16, @ANYBLOB="662700000000000024001280090001007866726d0000000014000280040003"], 0x44}}, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b805000000b9fd7ef9640f01d9c74424001f000000c744240246000000c7442406000000000f011424c4c22da98c70a664e0a80f2092eacc000000100166baa100b804000000ef3667f30f1ef8dbe10f01c4b8e27900000f23d80f21f835c00000b00f23f8", 0x65}], 0x1, 0x23, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 10m42.701316817s ago: executing program 5 (id=1596): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x4c4c0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0xc0205647, &(0x7f0000000240)=0x1) dup2(r7, r7) 10m40.649020349s ago: executing program 5 (id=1679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r3, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=@newtaction={0x60, 0x31, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000680), &(0x7f0000000080)=@udp6}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 10m24.589449468s ago: executing program 40 (id=1679): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc018937e, 0x0) bind$unix(r3, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) connect$unix(r3, &(0x7f0000000580)=@abs={0x1, 0x0, 0x4e20}, 0x15) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[], 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001940)=@newtaction={0x60, 0x31, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x80006}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYRESOCT=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r7, &(0x7f0000000680), &(0x7f0000000080)=@udp6}, 0x20) bind$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) 9m44.263441348s ago: executing program 1 (id=1819): socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x2c, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}]}, 0x2c}}, 0xc000) 9m37.55002399s ago: executing program 1 (id=1834): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0, 0x0, 0x0, 0x0, 0xd0}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 9m36.621086908s ago: executing program 1 (id=1836): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.idle\x00', 0x2, 0x0) futex(&(0x7f0000000000), 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 9m34.676471501s ago: executing program 1 (id=1840): fsopen(0x0, 0x1) r0 = syz_open_dev$vim2m(0x0, 0x1f, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, 0x0) pipe2(&(0x7f0000000080), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) bpf$BPF_LINK_CREATE(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0x7, @val=@netfilter={0x0, 0x0, 0x7}}, 0x20) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) prlimit64(0x0, 0x3cb68e62cdd4fb9c, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r6 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r6, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYRES16=r6]) 9m31.906443617s ago: executing program 1 (id=1845): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x4c4c0, 0x0) truncate(&(0x7f0000000280)='./file1\x00', 0x1) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0xc0205647, &(0x7f0000000240)=0x1) dup2(0xffffffffffffffff, 0xffffffffffffffff) 9m30.513336841s ago: executing program 9 (id=1847): unshare(0x22020600) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r0, 0x104, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000000206011e0000000000000000000000000e0003006269746d61703a6970000000050004000000000009"], 0x68}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r3, &(0x7f0000001040)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) connect$unix(0xffffffffffffffff, &(0x7f0000000380)=@abs, 0x6e) open(&(0x7f0000000480)='./bus\x00', 0x14927e, 0x0) open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) 9m30.415556338s ago: executing program 1 (id=1848): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x90}}, 0x0) 9m29.480298188s ago: executing program 9 (id=1849): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x679fd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b00000000000000001804", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r3}, 0x18) r4 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x1) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) openat$cgroup_int(r5, &(0x7f00000000c0)='cpu.idle\x00', 0x2, 0x0) futex(&(0x7f0000000000), 0x3, 0x0, &(0x7f0000fd7ff0), 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) 9m28.385707344s ago: executing program 9 (id=1851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() lseek(0xffffffffffffffff, 0x8ce, 0x1) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x7, 0x30}, 0xc) sendto$inet(r4, &(0x7f0000000040)='}', 0x1, 0x0, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r4, &(0x7f0000000280)='p', 0x29fcb, 0x0, 0x0, 0x0) sendto$inet(r4, &(0x7f0000000100)='\x00', 0x1, 0x0, 0x0, 0xffffff5a) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_open_dev$vbi(&(0x7f0000000080), 0x1, 0x2) ioctl$VIDIOC_S_OUTPUT(r7, 0xc004562f, &(0x7f00000000c0)=0x2000001) sendmsg$NL80211_CMD_JOIN_MESH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a80)={0x30, r5, 0x5, 0x70bd2d, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf}]}, 0x30}}, 0x40000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 9m26.53805652s ago: executing program 9 (id=1853): openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000005e80), 0x4, 0x42) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@enum={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x2b, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000001400)=@base={0xb, 0x6, 0x4, 0x3a7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r4, 0x0, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = io_uring_setup(0x4668, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, 0x0, 0x0) 9m24.015460171s ago: executing program 9 (id=1857): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x40049366, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(&(0x7f0000000280)='./file1\x00', 0x4c4c0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) ioctl$vim2m_VIDIOC_STREAMOFF(r7, 0xc0205647, &(0x7f0000000240)=0x1) dup2(r7, r7) 9m21.676907657s ago: executing program 9 (id=1861): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x19, 0x0, @fd=r0, 0x0, 0x0, 0x9, 0x18, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 9m15.274797204s ago: executing program 41 (id=1848): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) r1 = syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001"], 0x90}}, 0x0) 9m6.59622592s ago: executing program 42 (id=1861): r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x5885}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x19, 0x0, @fd=r0, 0x0, 0x0, 0x9, 0x18, 0x1}) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0x0) 17.876319253s ago: executing program 2 (id=3220): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x208, 0x1000600}, 0x0) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x5945, &(0x7f0000005cc0)="$eJzs3X+QXFW9IPBzu3synZlMMgnwiCCTIZD3ePA0E34V6qtn3tv39BXwqFi88hE2CgOZYDQJqSQIBJTgggsFWGhpKeofaCG1aLSoglUiJfJjE1ZQitWltpBa3EX/cAuRlECWslxna6bv6em503duT09PSMLnU8ncvqdvf8+5556+fb+ne6YDAAAAbwv7bt5+4ILj/umpz4y8ccM//3DzjaG3PF5ejRv0p8tr3qoWcjB1V5aOL7Pj4q+u+/ZvBi//h5/c3/OtN/euP3HDL//xqMsf/vi5e+762mOv9z3455eK4sbxdOrEevJKEkL1R/u/9Nm9Tx87VpaEEMpJ/64QFidLHlucZEIM/TGEsD4TL3rgjTM2jC1vvK17UvmizHbG+9tbNR1nOw9cfVp48e/X3vSzZd/7btful3dNbJJUG8ZTCAsvbXx8Vwhhfvp/TBxtS+OD0+WaEEJPw+POyWnP77/w1Fljy5NabP/KnPXj0+W8dNlbECfevzyzXspsl12PujLLnoL6ZiuvHe1uV2RBZn3iZPTloq5tSV47Y/nidPmDdHnqDOOX4/8klJJQqTd/UzIxRkLDcUtCMr59tb5eqh/bkO5/Zj3JrJcy6+WuzH6N15v2XjlJJpfH7TLl8XRcSctPbHLub3RhTvk70mU1faK+GddD9kZN75Qb9f0aF9u1f5q2HAylhnNQs/L6gU8PxtjujI6OjvYmS6Y8ZrSJeN/etbevKK97fF9/TjuS+5M0fjJe50zj7/zp4gUf/c6tVy3Ni39pKY1faiv+r8575tWLb/3mV3Pj3xnjl9uKf/ojPa+c98TNy3P7Z3/sn0pb8YdfevKOZUdftju3/XfH+NW24q/e80x334FHHs1t/1Dsn/ltxX/hfR/49X3PPfRybvwQ4/e0FX/dnq2f6x44cEpu/Edj//S2N35e23328wMDvx3Mi/9sjN/XVvx7d9313nsW3XZu7vFdE/unv63455/88E0LDjx0Qt65M7m7U6+cAG9PR6XXWLek6+3mmbPVkC98ZbBSuw5ckP7vC1/qXEWZi8+xehZ2LjoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjDvmtP/6wf/94f5XKul6d3rjhVJtGcvnhZDMDyFs3zG8bcfGLVcMfvzKq7ZtGd40OLxjcGTLjm3XDp75N4PbRrZuGr527N6hd51Re9ySkNSWyQlT6u4eHR0t9U8ui/X9u5N3v7jinP/zuxCGjvnFQCW3/Svv2nzP0U1+ZiSrR9+/+aoLfnHWN9L96k/b1d+kXaOjo6Mhp12/v+hP93xh/29OCWHoL6Zr15Mv/N2PJzVovGAiTqrUHWoN6k56mraj3uq0PbG/Khs2bhoZmr5/xx5fztmPf3/dy3/ccM3n/1Tr32rufrTYv/NXj24qfXnt+f/vy9fXCora9VYd96L+jnsR2xf7r5r298J0vxbm7FclZ79u/tmjz/3ouFtf3xWGKq8tm1p30X51pQOgK3lHS/XGGnqSxZPKq+n28YjHx63csXnryu3X7nzXxs3DV4xcMbLlPavOXHX20Flnn7VyfM9Xdnj/Y/1/2eL+H5zxtOiTu34Qf7Y2noraVdQfY+0q7o/GFuU9/3ou/OwX33PXExfUCorGedy6fj5Jlz1jx3lVaBhvU/uq2X4V9UMIYbBZP7z6+rnh2P+x8aai81DjkWn8mZGsHn16+R++cc7Xl/5treCgnOcbG9Tmeb7e6on2jPdXNT0eo4do/3aHcrpfvU3bterpJ7pu3/e7T9XbN29euGZ4x45tq2o/F6QtXZAc37Rd2dK4X8vGf5ZD2i2hPkybjNcxXaHWvuz5M26e7dXe9L7eZEnT/cqK9+1de/uK8rrH9+X1dHJ/rcb5oa+2TN6Zs+WmzAPL9QY3q/9Qff4VjY+BD379wQ8/+P0zp4yP02s/i/Yrydmv7z137xe/9fn/+P3O7dcH/+6Z/j/8z4+tqBUcLueVeqvT9iSN55XTQyh6/i0Lzfcj9/lXar4/Rc+/bD0T2zePN5hZ7w3ltp6vpz/S88p5T9y8PPf5ur/V5+v1k9bKBc/XQ2X8ZJ9fSWVyO+bu+TVpoCSrR39yy1G7HrthzXG1gqJxXd+62bg+o4X8I2e/fnzx8wNXDv6H/96588a3/+aBS345vPrTtYL2j3tsS2eOezXt32pO/9ZbHfPOxv599+VXblpfKz90r3/TZUH+E08l26/d+YnhTZtGtm1vbb9afT2N9WR7ud3X03h2W1KwX6Up+zV3N1rpr1afb2n7y9kY7T7fekPS1uvCzp8uXvDR79x6Vf+UR6UVXVpK45faiv+r85559eJbv/nV3Ph3xviVtuIPv/TkHcuOvmx3bvy7kzR+ta34q/c809134JFHc+MPxfbPbyv+C+/7wK/ve+6hl3Pjhxi/t73+f2332c8PDPw2N/6zSVrP2DVSCA+8ccaG2noSutLnW2xH16R2hex6klkvZdbLjeul2lxrvYJykkwuj9ul5Sc2tKWZf8spj1dh1aW15ZtxPWRvTF9+qCk1nPublRddpwIAHOni+//xGjS+/z+SXijlzzTAhNnmYUtz4sY8bGI+Z96k+5em8ePj4zzgwLvD0NjyxsHahf5M30eIz4fsPGes55STJsdod56zaP59eWY9tqs2X15pyENTU/OaSmhh/n1qPdPPv2d2v3h+fPCWKc0abJi3yh6/rnTGrNnnHTLtrYxFyBsf2Xmx+HmOgYVhzXh9LY6P7Odo4nHIfo4m1nNc5sTZ7udoZjs+YrOnGR/jTS5+f2Pq8QvT9O/E8WseLXv8ZnC8q2Pbz/X7sx2YN2x6Sjt484Zz+36Yecmc+OkT7FCfN4zlcT8qLc4nfjinvFPzifF0Edu1f5q2HAzmE4EjVcz/42vEWP4/dgH+fzPbFV2HZq8aY7zczwlNeYe3pijvmPo5vZ62XsfX7dn6ue6BA6fkXuc82urnfrZOWusp+NxPUT+uyKwX9mPOBE1Rvpetp6jfs5/L6A19bfX7vbvueu89i247N7ff19ReSIv7/YuT1voK+v0wyBeax5cvvC3yhbmeP3vL8pH0g09zlY/8a075TPORnik36vs17rDLR7oObrsAgMNHzP/r75+l+f//ihuk1xFFeeupmfUYLzdvzbk+yctb/yVdXpPZvjf9jYqZXjeff/LDNy048NAJuXnL3a3mof9p0lp/YR46u7w5N49Y05nPi+fmEfU8a3Z5Ym7763ni7PL03Pj1PH12eXRu/9Tz6NnNA+TGr88DHO55bsF8XaayuNrqfN0Rm0envz47V3n0hTnlM82je6fcqO/XOHk0AMBbK+b/8TIu5v9PZLab7fvsuXlBh67bs38PpB7/2YOVV8513jfXeetc5/VzPS9Ry4tL4XDNi+d6Xmhu58ne9nlxWqm8GACAQ1nM/+en6/n5/+zyk2b5W9ek/ER+3jT+EZafH7HvW+fEP3Tmv+T/80K4MZZ7X7w5+T8AwJEt5v/x1x7j3//7L+l69u/Wy9Nz4svT5enTjZ+W8/TOz7MFnwN4az8fP39ie/MAAAC8FbrGM6Wpv2f/kXSZ/T37vN/Lvzhn+1ZV0svjy3ZsGxm55Kqt64d3jFyy5cr1I9svuXrbxh07RrbUtptt3pibt6R5Y1eopP3RfLts3rYo/XsIi3L+HkJ2+xj2+PEbU/8eQrba+QV/R2Di+LXW3rzjV5pm+2bjI+9458X/t5zto/rxv/xjp1+yYfslG7ds3LFxeNPGnSOTtxvLWntm8L2ZsVtm9H2pmR9TlGb+/Z2daUdpSju60v7I+372JNOOxWlLFud9/0FOu5/6b1/45Mmjf7ovhKFjyu+cVf8lq0f/80Uj/7Jj3y+2jrW/NG3761um7Sr6vtLs9nF/Kpuu3L7jtA1XXrVlfW7bZyLOZ5Tq63M0n5E+/cstzk+syymf6ecUylNuHJpanp8AAGCS+P5/vJ6N7x9+Pr2AiuWt5+mze/84N08fai1Pz34vWVGent0+7m+reXp1lnl6tv6iPL3Z9s3y9Ly8Oy/+v+ZsP1Otj5PZfc4jd5xc2to4yX6fQdE4yW4/03GSzHKcZOsvGifNtm82TvKOe178D+Vsn6f18TC7z+Xkjoc7WxsPf51ZLxoP2e1nOh5KsxwP2fqLxkOz7ZuNh7zjmxf/gpztWzV5fIwNjPFxMXLJ1Vdu+0TDdnP9/RdjXpxV++b2+z/a1Xr75/ZzX3Pf/rn9XNnct392nyvLbf+zs5sJa739c/v9Lu06aPO16YfNij5/VjSPu3bqDoyb6TzuvCk3Dk3mceGtE/P/+HZPzP9vS5edfhuok9dJo4smbh+870nzPWZN43foe8yKrmMO+9fzVNHr+a57J2/v9RwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgyNJdWTq+3Hfz9gMXHPdPT31m5I0b/vmHm2/8q+u+/ZvBy//hJ/f3fOvNvetP3PDLfzzq8oc/fu6eu7722Ot9D/75pcLA/eM/K6emq9UQkleSEKo/2v+lz+59+tixsiSEUE76d4WwOFny2OIkE2HojyGE9fV2Tr7zgTfO2DC2vPG27knlizJBsvsVesuxPY3tDOGawj3iMFRNx9nOA1efFl78+7U3/WzZ977btfvlXRObJNWG8RTCwksbH98VQpif/h8TR9vS+OB0uSaE0NPwuHMK2nVSi+1fmbN+fLqcly57C+LE+5dn1kuZ7bLrUVdm2VNQ32zltaPd7YosyKxnT0azldfOWL44Xf4gXZ46w/jl+D8JpSRU6s3flEyMkdBw3JKQjB/Lan29VD+2Id3/zHqSWS9l1stdmf0arzcdaOUkmVwet8uUx9NxJS0/sfFc3cSFOeXvSJfV9In6ZlwP2Rs1vVNu1PdrXGzX/mnacjCUGs5BzcrrBz49GL1pWW+yZMpjRpuI9+1de/uK8rrH9/XntCO5P0njJ23F3/nTxQs++p1br1qaF//SUhq/1Fb8X533zKsX3/rNr+bGvzPGL7cV//RHel4574mbl+f2z/7YP5W24g+/9OQdy46+bHdu+++O8astx58XJuKv3vNMd9+BRx7Nbf9Q7J/5bbX/hfd94Nf3PffQy7nxQ4zf01b8dXu2fq574MApufEfjf3T2974eW332c8PDPx2MC/+szF+X1vx791113vvWXTbubnHd03sn/624p9/8sM3LTjw0Al5587k7k69cgK8PR2VXmPdkq435Jl9M8kzZ6shX/jKYKV2zbcg/d/XyYoyxupZOIfxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Mv38+jM/ctH7P7S2koSQ5Gwz2kS8rzxv9erBNuodfunJO5YdfdnuxrKlbcQBAAAAisU8vFQvqYal4epkfji+6fZxjuD4uJZMLs/OIcQ42TmCduOUOhSn3KE4lQ7F6epQnHkditPdoTjVgjjV0Fqc+dPEqYyNihbb0zNte1qP09uhOAs6FKevQ3EWdijOog7F6Z82TuvjcHGH4izpUJyjOhTn6A7FOaZDcf6iQ3GO7VCc7JzyTMdhX7rlcXlxxm+UC+NUknL9jmbz6cem9Zwwy3p6C+rpK3o9brGe+S3Wc1LmcaUZ1lNtsZ6/nGU9SYv1/PUs6ykV1BPH7TXZ9sV64lqL4//aDsXZ2aE413UozvUdivOpDsX5dIfi3DDLOACtivn/RL7XH7orfxt60jNOdhYg5rvLxn9Ofb3LOyHFeO/MlM8ripdN1DPxls20fdkJhEy85ZnyrknxKvV8ZJp41cZ4KzJ3Fu5vdkIh075TM+XdRfGyEwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMId+fv2ZH7no/R9aG5Iw9q+p0SbifeV5q1cPtlHv3rW3ryive3xfY1l3pY1AAAAAQKGYh3fVS6qhu7IqdCfzJm1XTecBqul6ub+2HFgY1owtk8HS+HpPsnjax1XSx63csXnryu3X7nzXxs3DV4xcMbLlPavOXHX20Flnn7Vyw8ZNI0O1nyF0F8QLIYxPP2y/ducnhjdtGtm2vVaYbf/S9HFL0/UkfdzAu8PQ2PLGtP1LCuorTalv7m4UHz0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/s2t3IXJeZRzAzzszOzPdNmalX9PQbIZ8lKhFk7iVVEv3BcFCm4QsBZmtriXYBIubJrRJiXVsA7Y1QRFaAiGSCyOx2Fq86YctYj8IVGo04MYgbdFe6IXSaiUtuZCUkezOmZ2ZncmsY2na9Pe7mHfmnOec5z1zsfB/dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPfXVHVkojI6Nj6YhJB0qal1EOey+TQt99H3q89u/2Fh+NTK5rFCro+NAAAAgJ5iDh9ojBRDIZcN2XDF9KeloWkizOZ+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgo2eqOjJRGR0bvzAJIelSU+sgzmXzaVruo+/rbz/+uVeGh//ePFbqYx8AAACgt5jDM42RYiiFZWEguaKlLj4bWNS2vr0u7rN4nnXtzw661S2bZ91V86z7RI+6DfXrrgAAAAAffjH/5xojQ6GQW9A1//fK9bFuSVtdtn7t57cCAAAAwP8n5v9CY6QUCrlSI6/PN+8vbauL63v93z6uX9Flfa//56+vX/2fHgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+PKaqIxOV0bHxbBJC0qWm1kGcy+bTtNxH3zXPDf7zpiMPLG0eK+T62AgAAADoKebw2ehdDIXcYBgIF07n/uEbDj755SefHgkhzMT8fD7s2rRjx51rZl5j3eqjRwZ+8NKb35lTt3rm9ZwdEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeM9MVUcmKqNj4xckISRdamodxLlsPk3LffR97Qtf+uujJ555o3ms1Mc+AAAAQG8xh89m/2IohXzIh8umPzVn/TMybeu7PTMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzh93feueb26anNx8pzfeeONN4825/ssEAAC815aEJNT+R5dvPNd3DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfBBMVUcmKqNj48UkhKRLTa2DOJfNp2m5j77ps8cKC04990LzWKmPfQAAAIDeYg6fzf7FUAoDYSBcOv2p0zOB6fw/9D7eJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCBMlUdmaiMjo0vSEJIutTUOohz2Xyalvvo+8juA58/vPD7NzaPFXJ9bAQAAAD0FHN4vjFSDIXcJ0MhXFn/PNm6IMnWr52fC8yu296ybHDe66ot67LzXren7WS5+mlm1hXjfkMz18a68tx15aZ1pdBoX25ZF/a1rFrQ4z4DAAAAnEMx/xcaI0OhkCs05dyftdQPybkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBdT1ZGJyujYeJKEkHSpqXUQ57L5NC330fee3338oq/9fO/O5rFSH/sAAAAAvcUcPpv9i6EUFoePhcXTuT8MtdbHun9VTh9++N9/WxnCqsuOD+fat/1xfPOb165/vv0lhExrdSaEhfV+SZd+v/3Dw3cvr51+NIRVl2avnNMvnL1f65Zp7anK5vU7toftPb4cAAAAOE/E/D/QGBkKhdwdXfN/TN498n/DdABfePfuX15Sf60n8rYVmaF6v0yXfl9c/vhfVqz9x5tn8v/Z+n3mwNbDl7Q0nBlpk6S10a07Nxy/5lAmnnqmf7atf/xevvLtN/6zZddDp2f6F0OxPr4o16n/3Nc2F6S1ycz+8XXv7q+29s91Of8Dv3/hxK8X7X3nTP+3lww2+l91lvOfvf/gzQ/uu/bAkQ2t/UMI5U7933rnxnD5n26/v/38g20bN3/zza9tkrR2dOnJQ2sPlq5r7Z+09Y/f/y9OPLLvpw997+nYP/5WZOWy+fbPtPV/ec/Fu1+8b+Oi1v6ZLud//pZXhreVv/vH9vPf1rJrrutdzD3/Y1c/ceurm9J726cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOL1PVkYnK6Nh4Jgkh6VJT6yDOZfNpWu6j7+s3HXvrlr0/+VHzWKmPfQAAAIDeYg6fzf7FUAr5kA+D07n/qcrm9TteOr49DM3MJvVrbnLbXTs+tWXbzjtuO0d3DgAAAMxXzP+5xshQKOSWh4F6/h/dunPD8WsOZWL+z8T8v+X2yc2rQqPu5T0X737xvo2LGs8JQpj+WUDxTN1nZ+tuuP7Y0Mk/f2NFx7o1s3VHl548tPZg6bpYF5rrVofG84nHrn7i1lc3pfc27q+57tNf3zZZfzwR9x28+cF91x44sqFxjvp1sL5vrJvM7B9f9+7+aqzL1q/F+rkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLmmqiMTldGx8ZANIelSU+sgzmXzaVruo++65b+6/6JTzyxuHivk+tgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWG//kKkquI4gJ8zs9uOO7u6q0Fb0bpaUdhDUhBRLxUVoSFCT4aEpfkQBUFEYQ+toZFY0UuQ9SJRQbWFUJCbJFqs0T/ppYcKCqyHQKSFcpGgP+zMuePs3blNXS0oPx8Yzpwz937nd885c2cGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/5S+npFGe2j7AzNrzrvp48fuPv7oLe/et/WSR177fmzjDR/t6X/5xNSmZZu/unHJxn33rJrc9cLBnwff/u1I1+CHm82K1K2FEI/FEGrvTT/7+NQn58yOxRBCNQ6NhzAcFx8cjrmElb+EEDa16pz74lvHr9w8227d2TdnfFEuJH9doV7N6mkamlsv/y+1tM+2zDx0Wfjm+nXbPlv65hu9E0fHTx4Sa237KYSFG9rP7w0hLEiPWdluG8lOTu3aEEJ/23lXd6nrwr9Y/+UF/fNTe1Zq611ysteX5/qV3HH5fqY3hF/XpPkIuWv9JxTVUfa4bgZy/fzN6FQV1ZmND6f2ndSu+Jv51ewRQyWGnlb598aTeyS0rVsMsbGWtVa/0lrbkK4/14+5fiXXr/bmrqvxvmmjVWOcO54dlxvPbsc9aXxZ+726g9sKxs9NbS19UE9k/ZB/0lSf96R1XQ1ZXdN/Usu/odJ2D+o03lr4tBj1NFaPi+ed83sH2WtT6568uLr+/UNDBXXEPTHlx+75Q2Fe/pZPhwfueH3HgyNF+RsqKb9Sqv5vVx/+8fYdLz5fmP9Mll8tlX/F/v5jqz/YvrzD/Cxs5E9n89NTKv/OIx8+tfTsuyY6rXUjf3eWXyuVf93k4b7Bmf0HCtd3ZTY/C0rlf33tzd+9+sXeo4X5IcvvL5W/fvL+p/tGZy4tzD/Q/CjUGzu0xP75aeKqL0dHfxgryv88m//BDvmxa/4r47uueWnRzlWF+3NtNj9Dpeq/9aJ92wZm9l5QdO+Mu0/XNyfAmWlJ+o31ROqX/Z95qtr+Lzw31tP8BhpIj8HT+UY5MfvBAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAHO3AsAAAAACDM37o3iA0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKYAAAD//3cKLp4=") r0 = open(&(0x7f0000000000)='.\x00', 0x10000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x4010bc07, 0x0) 14.283426068s ago: executing program 2 (id=3230): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f00000006c0)={0x40, 0x8, 0x2, "c638"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000340)={0x40, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000780)={0x18, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 12.860937156s ago: executing program 0 (id=3235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d64697361626c652c6d6f64653d6c66732c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c6e6f71756f74612c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c686561702c616c6c6f635f6d6f64653d72657573652c00d1d40380dcbac32451ce729413dffc8d82d943990413d56ca60200000000000000f37ab9e5f6fd"], 0x1, 0x5505, &(0x7f0000002480)="$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") symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) creat(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 11.180835893s ago: executing program 0 (id=3239): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r4, &(0x7f00000004c0)=""/185, 0xb9) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 9.815660551s ago: executing program 7 (id=3241): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x1000}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) write(r2, &(0x7f0000000780)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf173907862ea62f9226ccc41b6cbd09f3a38cd179d5d267802f7ac7a24cd35c2cc23082ee6e8d06e500000000638c7b9916424819b7116081ee3eb1e05154085cc989ffe901f161c4b650fd0bf5bc74dc2434264b52f423f0c2388402cc98712009e0b9942695234f3ec9dc7dbd00eb64863d5e03fd1cc211cb3814", 0x97) 8.776081003s ago: executing program 7 (id=3243): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x162) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r5, &(0x7f0000002400)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, 0x0, 0x0, 0x12141, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x14, &(0x7f00000000c0), 0x43) recvmsg$unix(r6, 0x0, 0x0) close(r7) sendmmsg(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000440)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)="ab6f431164d612e81bcc5e50404bb24631e6e36cb5b6a3e54315c3d3d86f0ab73a6d25bca6985584535d53b036f77bc6f70e8fa14daefc76bf23b1786913a8a9a1760c6a1c28f3311ae819718b1b250db8cf668fff98e94f4bc9b5ed71d8e521", 0x60}, {0x0}], 0x2}}], 0x1, 0x0) 7.53411207s ago: executing program 2 (id=3244): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424a", 0x2d, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 7.491307149s ago: executing program 7 (id=3245): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x20) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 7.04730997s ago: executing program 2 (id=3247): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0xffffffa9}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) 6.990493482s ago: executing program 3 (id=3248): setresgid(0xee01, 0x0, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x2001}, 0x10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x2e61a0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=ANY=[@ANYBLOB="060000000400000000800000600000000000"], 0x48) 6.627507347s ago: executing program 2 (id=3249): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file2\x00', 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c636865636b706f696e743d64697361626c652c6d6f64653d6c66732c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c6e6f71756f74612c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c686561702c616c6c6f635f6d6f64653d72657573652c00d1d40380dcbac32451ce729413dffc8d82d943990413d56ca60200000000000000f37ab9e5f6fd"], 0x1, 0x5505, &(0x7f0000002480)="$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") symlink(&(0x7f0000000dc0)='./file0\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000280)='./file0\x00', 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x12, r0, 0x0) creat(&(0x7f0000000880)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 6.155264411s ago: executing program 3 (id=3250): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x10000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000180)={0xfffd, 0x101, 0x100, 0x0, 0x4, 0x18, 0x36, "e75867a0aa45de1500", "39e8799918f836f17fc65c8b001f00"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 5.74467711s ago: executing program 7 (id=3251): pipe2(&(0x7f0000000080), 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES16=r3]) 5.444997168s ago: executing program 6 (id=3252): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) r0 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0, 0xeeef0000}) ioctl$VHOST_SET_LOG_FD(0xffffffffffffffff, 0x4004af07, &(0x7f0000000740)=r0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f0000000040)={0x1, r0}) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 5.255097709s ago: executing program 6 (id=3253): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000140)={0x1000}) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x15) write(r2, &(0x7f0000000780)="2f00000014000f3f00000000120f0a0011000000009a67ec53f737bf173907862ea62f9226ccc41b6cbd09f3a38cd179d5d267802f7ac7a24cd35c2cc23082ee6e8d06e500000000638c7b9916424819b7116081ee3eb1e05154085cc989ffe901f161c4b650fd0bf5bc74dc2434264b52f423f0c2388402cc98712009e0b9942695234f3ec9dc7dbd00eb64863d5e03fd1cc211cb3814", 0x97) 4.872900836s ago: executing program 7 (id=3254): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x14, r0, 0x1, 0x0, 0x0, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x0) 4.505477946s ago: executing program 3 (id=3255): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.pending_reads\x00', 0x0, 0x162) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r5, &(0x7f0000002400)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r5, 0x0, 0x0, 0x12141, 0x0) mkdir(0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x14, &(0x7f00000000c0), 0x43) recvmsg$unix(r6, 0x0, 0x0) close(r7) sendmmsg(r0, &(0x7f0000001cc0)=[{{&(0x7f0000000440)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x80, &(0x7f0000000380)=[{&(0x7f00000004c0)="ab6f431164d612e81bcc5e50404bb24631e6e36cb5b6a3e54315c3d3d86f0ab73a6d25bca6985584535d53b036f77bc6f70e8fa14daefc76bf23b1786913a8a9a1760c6a1c28f3311ae819718b1b250db8cf668fff98e94f4bc9b5ed71d8e521", 0x60}, {0x0}], 0x2}}], 0x1, 0x0) 4.218063013s ago: executing program 0 (id=3256): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ") 3.954323041s ago: executing program 6 (id=3257): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) sendto$packet(r0, &(0x7f0000000340)="05030006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b022543424aa6", 0x2e, 0x0, &(0x7f0000000a80)={0x11, 0x88a8, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 3.834390286s ago: executing program 7 (id=3258): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x208, 0x1000600}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f0000000a40)=ANY=[@ANYBLOB="61636c2c6669785f6572726f72733d61736b2c6e6f7265636f766572792c6669785f6572726f72733d6e6f2c7265636f766572795f706173735f6c6173743d636865636b5f657874656e74732c6e6f7265636f766572792c6572726f723d726f2c7265636f6e7374727563745f616c6c6f632c6e6f5f646174615f696f2c6673636f6e746578743d726f6f742c66736d616769633d3078303030303030303030303030383030302c61707072616973652c7375626a5f747990653d6e6f5f646174615f696f2c00b59ba3dc7bbd64cf1ca62d58cc2ee65dcef11e384bed58db423f661ac475e1edf48e9715f125f1ab862760524e2cbb0fe6fe3b33a703651061eedf21fdc6596e7a6f9c3e1c6eea624ea9ea9ea6fc8c85d320099b2b71a44825e990ecbace067e4aefba3e86efc5d412526bb782a0aaa29189c7a5f02806ba48a400000000"], 0x1, 0x5945, &(0x7f0000005cc0)="$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") r0 = open(&(0x7f0000000000)='.\x00', 0x10000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x4010bc07, &(0x7f0000000180)) 2.927713937s ago: executing program 6 (id=3259): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0xf, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0xffffffa9}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0) 2.927431785s ago: executing program 0 (id=3260): openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x5) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r6 = socket$inet_smc(0x2b, 0x1, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r6, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7, 0x2}, 0x20) 2.794970698s ago: executing program 3 (id=3261): bind$l2tp(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2.410491359s ago: executing program 2 (id=3262): openat$adsp1(0xffffffffffffff9c, 0x0, 0xa0201, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, &(0x7f0000000040)="0bbab5943069427e115d649869c6dc499dfff39b58af73235d3daf66b4916a072f95455507dfdf30054fb84a85037599beed58978b3b85430e9d6ec6b05811b44ad9fc49ced50b230b6f78a9a8310d0324faf93659f545a45c8a755fd12c529a52f5ac0b8d015b414499767a826fd78d85a3a72f5c42902cc7ba1f1d8bfafaaa8f280a96c45295bb75d4880719c48ffa59434adf3716f93225b92e1dbc1ca5004499de14e9d16ac5", 0xa8, 0x4000, &(0x7f0000000100), 0x10) 2.323544158s ago: executing program 6 (id=3263): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0, 0xeeef0000}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000740)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)={0x1, 0x0, [{0x0, 0xdd, &(0x7f0000000780)=""/221}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz0\x00', {}, 0x0, [0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x6], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x95, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c) 1.486327232s ago: executing program 3 (id=3264): pipe2(&(0x7f0000000080), 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_udp(0x2, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000008000000000000001000000940000000fad413ec50000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000001500)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0) r3 = syz_open_dev$sg(0x0, 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000200)=ANY=[@ANYRES32=r3, @ANYRES32=r3, @ANYRES16=r3]) 1.484721566s ago: executing program 0 (id=3265): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x10000000) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000180)={0xfffd, 0x101, 0x100, 0x0, 0x4, 0x18, 0x36, "e75867a0aa45de1500", "39e8799918f836f17fc65c8b001f00"}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) 1.179378206s ago: executing program 6 (id=3266): bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f00000000c0)={0x6000001f}) read$char_usb(r4, &(0x7f00000004c0)=""/185, 0xb9) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc000) 1.004709113s ago: executing program 3 (id=3267): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdir(&(0x7f0000000000)='./control\x00', 0x0) open$dir(&(0x7f00000002c0)='./control/file0\x00', 0x80840, 0x0) rename(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./control\x00') 0s ago: executing program 0 (id=3268): syz_usb_connect(0x0, 0x10e, &(0x7f0000000040)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e67e350e010000062404", @ANYRESHEX, @ANYRESOCT], 0x0) kernel console output (not intermixed with test programs): UME) 5*1024kB (UM) 7*2048kB (UME) 294*4096kB (M) = 1279604kB [ 1205.633273][T14823] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1205.644819][T14823] Node 1 Normal: 239*4kB (UE) 55*8kB (UE) 45*16kB (UME) 226*32kB (UME) 103*64kB (UME) 38*128kB (UME) 20*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 6*2048kB (UE) 942*4096kB (M) = 3904324kB [ 1205.663303][T14823] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1205.673880][T14823] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1205.683239][T14823] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1205.693310][T14823] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1205.702685][T14823] 60923 total pagecache pages [ 1205.707360][T14823] 0 pages in swap cache [ 1205.711537][T14823] Free swap = 124748kB [ 1205.715703][T14823] Total swap = 124996kB [ 1205.719915][T14823] 2097051 pages RAM [ 1205.723732][T14823] 0 pages HighMem/MovableOnly [ 1205.728481][T14823] 427564 pages reserved [ 1205.732674][T14823] 0 pages cma reserved [ 1206.183403][T14828] tipc: Enabling of bearer rejected, failed to enable media [ 1206.771020][T14477] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1206.946039][T14842] bridge0: port 4(vlan2) entered blocking state [ 1206.953021][T14842] bridge0: port 4(vlan2) entered disabled state [ 1206.992658][T14842] vlan2: entered allmulticast mode [ 1207.061018][T14842] bond0: entered allmulticast mode [ 1207.066392][T14842] bond_slave_0: entered allmulticast mode [ 1207.120188][T14847] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2074'. [ 1207.129662][T14847] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2074'. [ 1207.156956][T14842] bond_slave_1: entered allmulticast mode [ 1207.644685][T14842] vlan2: entered promiscuous mode [ 1207.700722][T14842] bond0: entered promiscuous mode [ 1207.706119][T14842] bond_slave_0: entered promiscuous mode [ 1207.754767][T14842] bond_slave_1: entered promiscuous mode [ 1207.785200][T14842] bridge0: port 4(vlan2) entered blocking state [ 1207.787053][T14842] bridge0: port 4(vlan2) entered forwarding state [ 1207.808040][ T9448] bridge0: port 4(vlan2) entered disabled state [ 1207.902555][T14477] 8021q: adding VLAN 0 to HW filter on device team0 [ 1207.970556][ T9492] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.970722][ T9492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1208.012397][ T5978] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.012531][ T5978] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1208.241291][T14864] vlan3: entered promiscuous mode [ 1208.241560][T14864] vlan3: entered allmulticast mode [ 1208.241577][T14864] hsr_slave_1: entered allmulticast mode [ 1208.430192][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2079'. [ 1209.617962][T14864] hsr_slave_1 (unregistering): left allmulticast mode [ 1210.636410][T14864] hsr_slave_1 (unregistering): left promiscuous mode [ 1210.789241][T14883] tipc: Enabling of bearer rejected, failed to enable media [ 1212.776184][T14477] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1214.960220][T14477] veth0_vlan: entered promiscuous mode [ 1215.051786][T14477] veth1_vlan: entered promiscuous mode [ 1215.479481][T14477] veth0_macvtap: entered promiscuous mode [ 1215.571366][T14477] veth1_macvtap: entered promiscuous mode [ 1215.905165][T14944] program syz.2.2095 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1215.918306][T14944] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1215.974290][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.267982][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.494209][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.556256][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.617802][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1216.887732][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1216.957221][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.361159][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.383974][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.485186][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.558007][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.617901][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.652207][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1217.672508][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.693460][T14477] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1217.856895][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1217.915373][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1217.977575][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.019636][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.064404][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.219105][T14966] Bluetooth: MGMT ver 1.23 [ 1218.230186][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.737670][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.749091][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.759067][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.809491][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.847656][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.897591][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.936109][T14477] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1218.958123][T14477] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1218.999837][T14477] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1219.097666][T14477] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.106445][T14477] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.162965][T14477] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.218057][T14477] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1219.722098][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.760978][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.888800][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.947584][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.049079][T14989] program syz.0.2106 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1220.067921][T14989] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1221.497054][T15012] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1705'. [ 1222.978963][T15030] evm: overlay not supported [ 1223.039790][ T29] audit: type=1804 audit(1739022070.539:12): pid=15030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2116" name="/newroot/29/bus/bus" dev="overlay" ino=175 res=1 errno=0 [ 1223.651412][T15041] dummy0: entered promiscuous mode [ 1223.658167][T15041] macsec1: entered allmulticast mode [ 1223.663978][T15041] dummy0: entered allmulticast mode [ 1224.258515][T15041] dummy0: left allmulticast mode [ 1224.263707][T15041] dummy0: left promiscuous mode [ 1224.699830][T15036] nlmon0: entered promiscuous mode [ 1224.705482][T15036] vlan2: entered promiscuous mode [ 1224.726968][T15036] nlmon0: left promiscuous mode [ 1227.035595][T15081] dummy0: entered promiscuous mode [ 1227.041537][T15081] macsec1: entered allmulticast mode [ 1227.047100][T15081] dummy0: entered allmulticast mode [ 1227.718247][T15081] dummy0: left allmulticast mode [ 1227.723275][T15081] dummy0: left promiscuous mode [ 1229.703062][T15103] dummy0: entered promiscuous mode [ 1229.708597][T15103] macsec1: entered allmulticast mode [ 1229.714184][T15103] dummy0: entered allmulticast mode [ 1230.212153][T15103] dummy0: left allmulticast mode [ 1230.217215][T15103] dummy0: left promiscuous mode [ 1231.953138][T15134] tipc: Enabling of bearer rejected, failed to enable media [ 1232.573634][T15135] lo speed is unknown, defaulting to 1000 [ 1237.554664][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2154'. [ 1239.209131][T15200] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2159'. [ 1241.233589][T15210] tipc: Enabling of bearer rejected, failed to enable media [ 1244.708142][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1244.718444][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1245.293701][T15271] : entered promiscuous mode [ 1246.767978][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 1249.519145][T15302] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1250.227955][T15305] netlink: 11 bytes leftover after parsing attributes in process `syz.7.2184'. [ 1252.497618][T15327] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 1253.321559][T15332] netlink: 'syz.2.2191': attribute type 13 has an invalid length. [ 1253.423274][T15332] gretap0: refused to change device tx_queue_len [ 1253.452966][T15332] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1253.894261][T15342] hub 2-0:1.0: USB hub found [ 1253.904591][T15342] hub 2-0:1.0: 1 port detected [ 1256.187898][T15365] Process accounting resumed [ 1256.677768][T11430] Bluetooth: hci4: command 0x0406 tx timeout [ 1258.923572][T15389] program syz.0.2206 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1259.325358][T15398] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 1259.994481][T15401] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2209'. [ 1260.649649][T15411] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2211'. [ 1262.502133][T15425] fuse: blksize only supported for fuseblk [ 1263.283839][ T25] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1264.048320][ T25] usb 1-1: Using ep0 maxpacket: 8 [ 1264.080141][ T25] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 1264.113291][ T25] usb 1-1: config 0 has no interface number 0 [ 1264.145579][T15440] program syz.2.2219 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1264.155377][T15441] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2220'. [ 1264.230945][ T25] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1264.244497][ T25] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 1264.256270][T15441] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1264.256321][T15441] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1264.272050][ T25] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1264.289522][T15441] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1264.325759][T15441] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1264.339955][ T25] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 1264.406113][ T25] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1264.434315][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.485276][ T25] usb 1-1: config 0 descriptor?? [ 1264.570007][ T25] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 1265.342012][T15459] xt_nfacct: accounting object `syz1' does not exists [ 1266.058501][T12817] usb 1-1: USB disconnect, device number 15 [ 1266.084642][T12817] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 1266.155046][T15461] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2224'. [ 1266.932106][T15470] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2225'. [ 1271.011564][T15507] warn_alloc: 2 callbacks suppressed [ 1271.011580][T15507] syz.6.2234: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1271.031656][T15507] CPU: 1 UID: 0 PID: 15507 Comm: syz.6.2234 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 1271.031677][T15507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1271.031687][T15507] Call Trace: [ 1271.031695][T15507] [ 1271.031702][T15507] dump_stack_lvl+0x241/0x360 [ 1271.031728][T15507] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1271.031746][T15507] ? __pfx__printk+0x10/0x10 [ 1271.031777][T15507] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1271.031796][T15507] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1271.031817][T15507] warn_alloc+0x278/0x410 [ 1271.031843][T15507] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 1271.031867][T15507] ? __pfx_warn_alloc+0x10/0x10 [ 1271.031891][T15507] ? kasan_save_track+0x3f/0x80 [ 1271.031913][T15507] ? __kasan_kmalloc+0x98/0xb0 [ 1271.031928][T15507] ? xsk_setsockopt+0x4ea/0x950 [ 1271.031942][T15507] ? do_sock_setsockopt+0x3af/0x720 [ 1271.031964][T15507] ? __x64_sys_setsockopt+0x1ee/0x280 [ 1271.031986][T15507] ? do_syscall_64+0xf3/0x230 [ 1271.032005][T15507] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.032036][T15507] __vmalloc_node_range_noprof+0x126/0x1380 [ 1271.032090][T15507] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1271.032118][T15507] ? __kasan_kmalloc+0x98/0xb0 [ 1271.032138][T15507] vmalloc_user_noprof+0x74/0x80 [ 1271.032160][T15507] ? xskq_create+0xb6/0x170 [ 1271.032175][T15507] xskq_create+0xb6/0x170 [ 1271.032194][T15507] xsk_init_queue+0xa1/0x100 [ 1271.032213][T15507] xsk_setsockopt+0x4ea/0x950 [ 1271.032232][T15507] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1271.032247][T15507] ? __pfx_aa_sk_perm+0x10/0x10 [ 1271.032266][T15507] ? aa_sock_opt_perm+0xfd/0x1b0 [ 1271.032303][T15507] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1271.032326][T15507] do_sock_setsockopt+0x3af/0x720 [ 1271.032357][T15507] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1271.032388][T15507] ? __fget_files+0x395/0x410 [ 1271.032405][T15507] ? __fget_files+0x2a/0x410 [ 1271.032433][T15507] __x64_sys_setsockopt+0x1ee/0x280 [ 1271.032465][T15507] do_syscall_64+0xf3/0x230 [ 1271.032486][T15507] ? clear_bhb_loop+0x35/0x90 [ 1271.032511][T15507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.032533][T15507] RIP: 0033:0x7f6bd638cde9 [ 1271.032548][T15507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1271.032561][T15507] RSP: 002b:00007f6bd72b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1271.032576][T15507] RAX: ffffffffffffffda RBX: 00007f6bd65a5fa0 RCX: 00007f6bd638cde9 [ 1271.032588][T15507] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1271.032597][T15507] RBP: 00007f6bd640e2a0 R08: 0000000000000052 R09: 0000000000000000 [ 1271.032606][T15507] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1271.032615][T15507] R13: 0000000000000000 R14: 00007f6bd65a5fa0 R15: 00007fff808e3d68 [ 1271.032644][T15507] [ 1271.032650][T15507] Mem-Info: [ 1271.323021][T15507] active_anon:12911 inactive_anon:0 isolated_anon:0 [ 1271.323021][T15507] active_file:15001 inactive_file:38848 isolated_file:0 [ 1271.323021][T15507] unevictable:768 dirty:136 writeback:0 [ 1271.323021][T15507] slab_reclaimable:11006 slab_unreclaimable:117973 [ 1271.323021][T15507] mapped:34987 shmem:7167 pagetables:1110 [ 1271.323021][T15507] sec_pagetables:0 bounce:0 [ 1271.323021][T15507] kernel_misc_reclaimable:0 [ 1271.323021][T15507] free:1297513 free_pcp:404 free_cma:0 [ 1271.368390][T15507] Node 0 active_anon:51644kB inactive_anon:0kB active_file:59992kB inactive_file:155320kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:139936kB dirty:644kB writeback:0kB shmem:27132kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12568kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no [ 1271.400753][T15507] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1271.432604][T15507] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.459856][T15507] lowmem_reserve[]: 0 2491 2491 0 0 [ 1271.465107][T15507] Node 0 DMA32 free:1270368kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:51608kB inactive_anon:0kB active_file:59992kB inactive_file:154748kB unevictable:1536kB writepending:644kB present:3129332kB managed:2550804kB mlocked:0kB bounce:0kB free_pcp:1636kB local_pcp:828kB free_cma:0kB [ 1271.495434][T15507] lowmem_reserve[]: 0 0 0 0 0 [ 1271.500191][T15507] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:572kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 1271.527992][T15507] lowmem_reserve[]: 0 0 0 0 0 [ 1271.532748][T15507] Node 1 Normal free:3904324kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1271.562252][T15507] lowmem_reserve[]: 0 0 0 0 0 [ 1271.566980][T15507] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1271.579692][T15507] Node 0 DMA32: 390*4kB (UME) 511*8kB (UE) 197*16kB (UM) 270*32kB (UME) 252*64kB (UME) 46*128kB (UME) 22*256kB (UME) 11*512kB (UME) 5*1024kB (UM) 7*2048kB (UME) 293*4096kB (UM) = 1270304kB [ 1271.598467][T15507] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1271.610366][T15507] Node 1 Normal: 239*4kB (UE) 55*8kB (UE) 45*16kB (UME) 226*32kB (UME) 103*64kB (UME) 38*128kB (UME) 20*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 6*2048kB (UE) 942*4096kB (M) = 3904324kB [ 1271.630295][T15507] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1271.639890][T15507] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1271.649209][T15507] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1271.658789][T15507] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1271.668098][T15507] 60998 total pagecache pages [ 1271.672783][T15507] 0 pages in swap cache [ 1271.676923][T15507] Free swap = 124748kB [ 1271.681112][T15507] Total swap = 124996kB [ 1271.685280][T15507] 2097051 pages RAM [ 1271.689119][T15507] 0 pages HighMem/MovableOnly [ 1271.693795][T15507] 427564 pages reserved [ 1271.697967][T15507] 0 pages cma reserved [ 1273.089585][T15516] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1273.106242][ T5915] IPVS: starting estimator thread 0... [ 1273.387736][T15520] IPVS: using max 18 ests per chain, 43200 per kthread [ 1274.515896][T15535] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2240'. [ 1277.383914][T15555] siw: device registration error -23 [ 1278.834715][T15575] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2251'. [ 1278.951436][T15536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1280.307166][T15593] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2258'. [ 1281.531241][T15604] siw: device registration error -23 [ 1283.841970][T15633] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2252'. [ 1286.281879][T15652] siw: device registration error -23 [ 1286.668542][ T5881] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1286.830645][ T5881] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1286.877814][ T5881] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1286.914717][ T5881] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1286.931774][ T5881] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1286.945174][ T5881] usb 1-1: SerialNumber: syz [ 1287.261026][ T5881] usb 1-1: 0:2 : does not exist [ 1287.864338][ T5881] usb 1-1: USB disconnect, device number 16 [ 1288.278229][T13795] udevd[13795]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1289.574776][T15685] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 1289.919153][T15691] lo: entered promiscuous mode [ 1292.361207][T15711] siw: device registration error -23 [ 1294.292491][T15732] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2292'. [ 1295.206190][T15737] x_tables: duplicate underflow at hook 1 [ 1297.849104][ T5837] Bluetooth: hci5: command 0x0406 tx timeout [ 1298.640236][T15761] siw: device registration error -23 [ 1298.740655][T15764] vlan2: entered promiscuous mode [ 1298.799364][T15764] vlan2: entered allmulticast mode [ 1298.804549][T15764] hsr_slave_1: entered allmulticast mode [ 1298.977373][T15772] loop7: detected capacity change from 0 to 128 [ 1299.564875][T15784] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 1302.312138][T15810] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2307'. [ 1303.330382][T15819] siw: device registration error -23 [ 1303.834613][T15824] lo speed is unknown, defaulting to 1000 [ 1304.159482][T13396] usb 8-1: new full-speed USB device number 4 using dummy_hcd [ 1304.280067][ T5845] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1304.579107][T13396] usb 8-1: not running at top speed; connect to a high speed hub [ 1304.611221][T13396] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1305.419446][T13396] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.564227][ T5845] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1305.576124][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.586604][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.798912][ T5845] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1305.831219][T13396] usb 8-1: Product: syz [ 1305.895128][T13396] usb 8-1: Manufacturer: syz [ 1305.966610][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1306.117534][T13396] usb 8-1: SerialNumber: syz [ 1306.118330][T15853] fuse: Bad value for 'fd' [ 1306.147523][T15853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1306.599475][ T5845] usb 7-1: config 0 descriptor?? [ 1306.652942][ T5845] pwc: Askey VC010 type 2 USB webcam detected. [ 1306.917869][T13396] cdc_ncm 8-1:1.0: bind() failure [ 1306.954097][T13396] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 1307.027790][T13396] cdc_ncm 8-1:1.1: bind() failure [ 1307.067866][ T5845] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1307.077649][T13396] usb 8-1: USB disconnect, device number 4 [ 1307.138448][ T5845] pwc: recv_control_msg error -32 req 02 val 2700 [ 1307.199539][ T5845] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1307.236363][T15865] siw: device registration error -23 [ 1307.289925][ T5845] pwc: recv_control_msg error -32 req 04 val 1000 [ 1307.324538][ T5845] pwc: recv_control_msg error -32 req 04 val 1300 [ 1307.360043][ T5845] pwc: recv_control_msg error -32 req 04 val 1400 [ 1307.387351][ T5845] pwc: recv_control_msg error -32 req 02 val 2000 [ 1307.400165][ T5845] pwc: recv_control_msg error -32 req 02 val 2100 [ 1307.411949][T15870] loop2: detected capacity change from 0 to 256 [ 1307.420182][ T5845] pwc: recv_control_msg error -32 req 04 val 1500 [ 1307.428017][ T5845] pwc: recv_control_msg error -32 req 02 val 2500 [ 1307.436195][ T5845] pwc: recv_control_msg error -32 req 02 val 2400 [ 1307.457298][ T5845] pwc: recv_control_msg error -32 req 02 val 2600 [ 1307.491554][ T5845] pwc: recv_control_msg error -32 req 02 val 2900 [ 1307.933157][ T5845] pwc: recv_control_msg error -71 req 04 val 1200 [ 1308.860041][ T5845] pwc: Registered as video103. [ 1308.927925][ T5845] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input30 [ 1308.972496][T15881] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2331'. [ 1309.069365][ T5845] usb 7-1: USB disconnect, device number 16 [ 1310.828269][ T5845] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1311.128003][ T5845] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1311.283475][ T5845] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1311.392787][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1311.559968][ T5845] usb 7-1: config 0 descriptor?? [ 1311.596254][ T5845] pwc: Askey VC010 type 2 USB webcam detected. [ 1312.015480][ T5845] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1312.048535][ T5845] pwc: recv_control_msg error -32 req 02 val 2700 [ 1312.088002][ T5845] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1312.110630][ T5845] pwc: recv_control_msg error -32 req 04 val 1000 [ 1312.140076][ T5845] pwc: recv_control_msg error -32 req 04 val 1300 [ 1312.205156][ T5845] pwc: recv_control_msg error -32 req 04 val 1400 [ 1312.218508][ T5845] pwc: recv_control_msg error -32 req 02 val 2000 [ 1312.236716][ T5845] pwc: recv_control_msg error -32 req 02 val 2100 [ 1312.475320][ T5845] pwc: recv_control_msg error -71 req 02 val 2500 [ 1312.509157][ T5845] pwc: recv_control_msg error -71 req 02 val 2400 [ 1312.548546][ T5845] pwc: recv_control_msg error -71 req 02 val 2600 [ 1312.598089][ T5845] pwc: recv_control_msg error -71 req 02 val 2900 [ 1312.625541][ T5845] pwc: recv_control_msg error -71 req 02 val 2800 [ 1312.662746][ T5845] pwc: recv_control_msg error -71 req 04 val 1100 [ 1312.699246][ T5845] pwc: recv_control_msg error -71 req 04 val 1200 [ 1312.729363][ T5845] pwc: Registered as video103. [ 1312.766727][ T5845] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input31 [ 1312.785555][T15915] siw: device registration error -23 [ 1312.865438][ T5845] usb 7-1: USB disconnect, device number 17 [ 1313.666320][ T5880] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 1314.160550][ T5880] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1314.258269][ T5880] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1314.520761][ T5880] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.570878][ T5880] usb 1-1: config 0 descriptor?? [ 1314.591640][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 1314.804936][T15946] dummy0: entered promiscuous mode [ 1314.811009][T15946] macsec1: entered allmulticast mode [ 1314.816566][T15946] dummy0: entered allmulticast mode [ 1315.499068][T15946] dummy0: left allmulticast mode [ 1315.504306][T15946] dummy0: left promiscuous mode [ 1315.549478][ T5880] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1315.577044][ T5880] pwc: recv_control_msg error -32 req 02 val 2700 [ 1315.612797][ T5880] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1315.634645][ T5880] pwc: recv_control_msg error -32 req 04 val 1000 [ 1315.654849][ T5880] pwc: recv_control_msg error -32 req 04 val 1300 [ 1315.682414][ T5880] pwc: recv_control_msg error -32 req 04 val 1400 [ 1315.703638][ T5880] pwc: recv_control_msg error -32 req 02 val 2000 [ 1316.320061][T15961] xt_CONNSECMARK: invalid mode: 0 [ 1316.687935][ T5880] pwc: recv_control_msg error -32 req 02 val 2100 [ 1316.710371][ T5880] pwc: recv_control_msg error -32 req 04 val 1500 [ 1317.306763][ T5880] pwc: recv_control_msg error -32 req 02 val 2500 [ 1317.856435][ T5880] pwc: recv_control_msg error -71 req 02 val 2600 [ 1317.884179][ T5880] pwc: recv_control_msg error -71 req 02 val 2900 [ 1317.908314][ T5880] pwc: recv_control_msg error -71 req 02 val 2800 [ 1317.917931][ T5880] pwc: recv_control_msg error -71 req 04 val 1100 [ 1317.962321][ T5880] pwc: recv_control_msg error -71 req 04 val 1200 [ 1318.017371][ T5880] pwc: Registered as video103. [ 1318.287994][ T5880] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input32 [ 1318.313841][ T5880] usb 1-1: USB disconnect, device number 17 [ 1321.468954][T15997] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2357'. [ 1322.822088][T16012] program syz.0.2362 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1322.831821][T16012] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1324.685828][T16002] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 1325.203473][T16040] dummy0: entered promiscuous mode [ 1325.209454][T16040] macsec1: entered allmulticast mode [ 1325.215061][T16040] dummy0: entered allmulticast mode [ 1325.528948][T16040] dummy0: left allmulticast mode [ 1325.534001][T16040] dummy0: left promiscuous mode [ 1325.749711][T16046] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2370'. [ 1325.861636][T16046] gre0: entered promiscuous mode [ 1325.888187][T16046] gre0: entered allmulticast mode [ 1328.894334][T16074] program syz.6.2376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1328.904107][T16074] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1331.650618][T16099] dummy0: entered promiscuous mode [ 1331.656503][T16099] macsec1: entered allmulticast mode [ 1331.662172][T16099] dummy0: entered allmulticast mode [ 1331.806682][T16099] dummy0: left allmulticast mode [ 1331.812132][T16099] dummy0: left promiscuous mode [ 1332.059238][T16101] xt_CONNSECMARK: invalid mode: 0 [ 1335.797168][T16109] dummy0: entered promiscuous mode [ 1336.071121][T16109] macsec1: entered allmulticast mode [ 1336.076796][T16109] dummy0: entered allmulticast mode [ 1336.571207][T16109] dummy0: left allmulticast mode [ 1336.576237][T16109] dummy0: left promiscuous mode [ 1341.113091][T16144] loop7: detected capacity change from 0 to 128 [ 1341.182355][T16144] VFS: Found a Xenix FS (block size = 1024) on device loop7 [ 1341.435658][T16144] syz.7.2391: attempt to access beyond end of device [ 1341.435658][T16144] loop7: rw=2049, sector=6491536, nr_sectors = 2 limit=128 [ 1341.639760][T13862] sysv_free_block: flc_count > flc_size [ 1341.645746][T13862] sysv_free_block: flc_count > flc_size [ 1341.667709][T13862] sysv_free_block: flc_count > flc_size [ 1341.673326][T13862] sysv_free_block: flc_count > flc_size [ 1341.697878][T13862] sysv_free_block: flc_count > flc_size [ 1341.716448][T13862] sysv_free_block: flc_count > flc_size [ 1341.746640][T13862] sysv_free_block: flc_count > flc_size [ 1341.768165][T13862] sysv_free_block: flc_count > flc_size [ 1341.774170][T13862] sysv_free_block: flc_count > flc_size [ 1341.795080][T13862] sysv_free_block: flc_count > flc_size [ 1341.837815][T13862] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 1342.177741][T16157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2396'. [ 1342.538466][T16163] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2393'. [ 1343.456400][T16174] dummy0: entered promiscuous mode [ 1343.462025][T16174] macsec1: entered allmulticast mode [ 1343.467753][T16174] dummy0: entered allmulticast mode [ 1344.038225][T16174] dummy0: left allmulticast mode [ 1344.043325][T16174] dummy0: left promiscuous mode [ 1347.456824][T16200] loop2: detected capacity change from 0 to 32768 [ 1347.501431][T16199] vlan2: entered promiscuous mode [ 1347.530805][T16200] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2405 (16200) [ 1347.566690][T16199] vlan2: entered allmulticast mode [ 1347.617816][T16200] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1347.631128][T16200] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm [ 1347.640499][T16200] BTRFS info (device loop2): using free-space-tree [ 1347.654687][T16199] hsr_slave_1: entered allmulticast mode [ 1347.788368][T16199] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2404'. [ 1348.028573][T16200] BTRFS info (device loop2): rebuilding free space tree [ 1348.246816][T16200] BTRFS info (device loop2): balance: start -susage=12582912,drange=65536..13,limit=22175,limit=22175..0 [ 1348.261752][T16200] BTRFS info (device loop2): balance: ended with status: 0 [ 1348.554077][T13945] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1348.646858][T16199] hsr_slave_1 (unregistering): left allmulticast mode [ 1348.899717][T16236] xt_CONNSECMARK: invalid mode: 0 [ 1348.905059][T16199] hsr_slave_1 (unregistering): left promiscuous mode [ 1349.008400][T16233] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2409'. [ 1349.875195][T16246] dummy0: entered promiscuous mode [ 1349.881299][T16246] macsec1: entered allmulticast mode [ 1349.886846][T16246] dummy0: entered allmulticast mode [ 1350.250638][T16246] dummy0: left allmulticast mode [ 1350.260697][T16246] dummy0: left promiscuous mode [ 1353.361011][T16279] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2421'. [ 1354.068489][T16293] dummy0: entered promiscuous mode [ 1354.073768][T16293] macsec1: entered allmulticast mode [ 1354.079532][T16293] dummy0: entered allmulticast mode [ 1354.157205][T16293] dummy0: left allmulticast mode [ 1354.163175][T16293] dummy0: left promiscuous mode [ 1354.365875][T16300] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2414'. [ 1355.860571][T16314] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2429'. [ 1358.859468][T12817] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1359.083751][T12817] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1359.126310][T12817] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1359.176328][T12817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1359.633738][T12817] usb 1-1: config 0 descriptor?? [ 1359.839810][T12817] pwc: Askey VC010 type 2 USB webcam detected. [ 1360.046013][T12817] pwc: send_video_command error -71 [ 1360.087984][T12817] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1360.122424][T12817] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71 [ 1360.174442][T12817] usb 1-1: USB disconnect, device number 18 [ 1360.281820][T16360] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2443'. [ 1361.379157][ T5915] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1361.775948][T16392] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2444'. [ 1361.817815][ T5915] usb 7-1: Using ep0 maxpacket: 32 [ 1361.949860][T16394] program syz.7.2451 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1361.959647][T16394] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1362.245288][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1362.267495][ T5915] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1362.277325][ T5915] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1362.294212][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.348669][ T5915] usb 7-1: config 0 descriptor?? [ 1362.369807][ T5915] hub 7-1:0.0: USB hub found [ 1362.596096][ T5915] hub 7-1:0.0: 1 port detected [ 1363.653196][ T5880] hub 7-1:0.0: activate --> -90 [ 1365.446654][ T5880] usb 7-1: USB disconnect, device number 18 [ 1366.918341][T16427] dummy0: entered promiscuous mode [ 1366.923716][T16427] macsec1: entered allmulticast mode [ 1366.929263][T16427] dummy0: entered allmulticast mode [ 1366.984366][T16427] dummy0: left allmulticast mode [ 1366.989694][T16427] dummy0: left promiscuous mode [ 1366.999320][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1367.009295][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.285940][T16436] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1367.824787][T16444] program syz.7.2463 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1367.834598][T16444] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1368.647158][T16451] netlink: 'syz.0.2466': attribute type 64 has an invalid length. [ 1368.686068][T16451] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2466'. [ 1369.807882][ T5880] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1370.271390][ T5880] usb 1-1: Using ep0 maxpacket: 16 [ 1370.728517][ T5880] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 1370.764210][ T5880] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1370.803167][ T5880] usb 1-1: Product: syz [ 1370.813983][ T5880] usb 1-1: Manufacturer: syz [ 1370.833374][ T5880] usb 1-1: SerialNumber: syz [ 1370.877664][ T5880] usb 1-1: config 0 descriptor?? [ 1370.948953][ T5880] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 1371.344509][ T5880] ssu100 1-1:0.0: probe with driver ssu100 failed with error -110 [ 1371.747955][T16483] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2467'. [ 1372.266599][T16496] dummy0: entered promiscuous mode [ 1372.274599][T16496] macsec1: entered allmulticast mode [ 1372.280305][T16496] dummy0: entered allmulticast mode [ 1372.898314][T16496] dummy0: left allmulticast mode [ 1372.903386][T16496] dummy0: left promiscuous mode [ 1373.026401][T13396] usb 1-1: USB disconnect, device number 19 [ 1377.435884][T16537] dummy0: entered promiscuous mode [ 1377.442048][T16537] macsec1: entered allmulticast mode [ 1377.447384][T16537] dummy0: entered allmulticast mode [ 1377.488568][T16537] dummy0: left allmulticast mode [ 1377.496242][T16537] dummy0: left promiscuous mode [ 1378.499095][T16554] dummy0: entered promiscuous mode [ 1378.504647][T16554] macsec1: entered allmulticast mode [ 1378.510216][T16554] dummy0: entered allmulticast mode [ 1379.092948][T16554] dummy0: left allmulticast mode [ 1379.098071][T16554] dummy0: left promiscuous mode [ 1380.709448][T16564] xt_CONNSECMARK: invalid mode: 0 [ 1384.268089][T16605] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2502'. [ 1384.841626][T16612] warn_alloc: 1 callbacks suppressed [ 1384.841645][T16612] syz.3.2497: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1384.862056][T16612] CPU: 1 UID: 0 PID: 16612 Comm: syz.3.2497 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 1384.862085][T16612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1384.862100][T16612] Call Trace: [ 1384.862108][T16612] [ 1384.862117][T16612] dump_stack_lvl+0x241/0x360 [ 1384.862154][T16612] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1384.862181][T16612] ? __pfx__printk+0x10/0x10 [ 1384.862226][T16612] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 1384.862253][T16612] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 1384.862285][T16612] warn_alloc+0x278/0x410 [ 1384.862325][T16612] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 1384.862368][T16612] ? __pfx_warn_alloc+0x10/0x10 [ 1384.862404][T16612] ? kasan_save_track+0x3f/0x80 [ 1384.862435][T16612] ? __kasan_kmalloc+0x98/0xb0 [ 1384.862458][T16612] ? xsk_setsockopt+0x4ea/0x950 [ 1384.862479][T16612] ? do_sock_setsockopt+0x3af/0x720 [ 1384.862510][T16612] ? __x64_sys_setsockopt+0x1ee/0x280 [ 1384.862542][T16612] ? do_syscall_64+0xf3/0x230 [ 1384.862569][T16612] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.862617][T16612] __vmalloc_node_range_noprof+0x126/0x1380 [ 1384.862701][T16612] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1384.862743][T16612] ? __kasan_kmalloc+0x98/0xb0 [ 1384.862774][T16612] vmalloc_user_noprof+0x74/0x80 [ 1384.862805][T16612] ? xskq_create+0xb6/0x170 [ 1384.862828][T16612] xskq_create+0xb6/0x170 [ 1384.862856][T16612] xsk_init_queue+0xa1/0x100 [ 1384.862886][T16612] xsk_setsockopt+0x4ea/0x950 [ 1384.862914][T16612] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1384.862938][T16612] ? __pfx_aa_sk_perm+0x10/0x10 [ 1384.862967][T16612] ? aa_sock_opt_perm+0xfd/0x1b0 [ 1384.863004][T16612] ? __pfx_xsk_setsockopt+0x10/0x10 [ 1384.863025][T16612] do_sock_setsockopt+0x3af/0x720 [ 1384.863071][T16612] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 1384.863130][T16612] ? __fget_files+0x395/0x410 [ 1384.863155][T16612] ? __fget_files+0x2a/0x410 [ 1384.863198][T16612] __x64_sys_setsockopt+0x1ee/0x280 [ 1384.863246][T16612] do_syscall_64+0xf3/0x230 [ 1384.863276][T16612] ? clear_bhb_loop+0x35/0x90 [ 1384.863314][T16612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1384.863353][T16612] RIP: 0033:0x7f436f78cde9 [ 1384.863374][T16612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1384.863394][T16612] RSP: 002b:00007f437062b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 1384.863417][T16612] RAX: ffffffffffffffda RBX: 00007f436f9a6160 RCX: 00007f436f78cde9 [ 1384.863434][T16612] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 1384.863447][T16612] RBP: 00007f436f80e2a0 R08: 0000000000000052 R09: 0000000000000000 [ 1384.863461][T16612] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1384.863475][T16612] R13: 0000000000000000 R14: 00007f436f9a6160 R15: 00007ffc9f999418 [ 1384.863520][T16612] [ 1385.161220][T16612] Mem-Info: [ 1385.166835][T16612] active_anon:14083 inactive_anon:0 isolated_anon:0 [ 1385.166835][T16612] active_file:17382 inactive_file:38892 isolated_file:0 [ 1385.166835][T16612] unevictable:768 dirty:86 writeback:0 [ 1385.166835][T16612] slab_reclaimable:11033 slab_unreclaimable:118225 [ 1385.166835][T16612] mapped:38303 shmem:9530 pagetables:1015 [ 1385.166835][T16612] sec_pagetables:0 bounce:0 [ 1385.166835][T16612] kernel_misc_reclaimable:0 [ 1385.166835][T16612] free:1292144 free_pcp:1378 free_cma:0 [ 1385.214035][T16612] Node 0 active_anon:56332kB inactive_anon:0kB active_file:69516kB inactive_file:155496kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:153200kB dirty:340kB writeback:0kB shmem:36584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12580kB pagetables:4060kB sec_pagetables:0kB all_unreclaimable? no [ 1385.247940][T16612] Node 1 active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:12kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1385.280190][T16612] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.309539][T16612] lowmem_reserve[]: 0 2491 2491 0 0 [ 1385.315105][T16612] Node 0 DMA32 free:1248892kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:56296kB inactive_anon:0kB active_file:69516kB inactive_file:154924kB unevictable:1536kB writepending:340kB present:3129332kB managed:2550804kB mlocked:0kB bounce:0kB free_pcp:5500kB local_pcp:5168kB free_cma:0kB [ 1385.345874][T16612] lowmem_reserve[]: 0 0 0 0 0 [ 1385.351118][T16612] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:572kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 1385.387045][T16612] lowmem_reserve[]: 0 0 0 0 0 [ 1385.402537][T16612] Node 1 Normal free:3904324kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:12kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1385.431526][T16612] lowmem_reserve[]: 0 0 0 0 0 [ 1385.436317][T16612] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1385.450035][T16612] Node 0 DMA32: 256*4kB (UE) 354*8kB (UME) 57*16kB (UME) 68*32kB (UME) 79*64kB (UME) 51*128kB (UME) 20*256kB (UM) 13*512kB (UME) 8*1024kB (UM) 9*2048kB (UME) 291*4096kB (UM) = 1248864kB [ 1385.468842][T16612] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1385.482723][T16612] Node 1 Normal: 239*4kB (UE) 55*8kB (UE) 45*16kB (UME) 226*32kB (UME) 103*64kB (UME) 38*128kB (UME) 20*256kB (UME) 7*512kB (UME) 4*1024kB (UM) 6*2048kB (UE) 942*4096kB (M) = 3904324kB [ 1385.501458][T16612] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1385.511221][T16612] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1385.521008][T16612] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1385.587764][T16612] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1385.616594][T16612] 65990 total pagecache pages [ 1385.621433][T16612] 0 pages in swap cache [ 1385.625608][T16612] Free swap = 124748kB [ 1385.629971][T16612] Total swap = 124996kB [ 1385.634152][T16612] 2097051 pages RAM [ 1385.638211][T16612] 0 pages HighMem/MovableOnly [ 1385.642903][T16612] 427564 pages reserved [ 1385.647075][T16612] 0 pages cma reserved [ 1387.343584][T16627] xt_CONNSECMARK: invalid mode: 0 [ 1390.918153][T16663] fuse: blksize only supported for fuseblk [ 1393.362934][T16686] dummy0: entered promiscuous mode [ 1393.370670][T16686] macsec1: entered allmulticast mode [ 1393.375979][T16686] dummy0: entered allmulticast mode [ 1393.416640][T16686] dummy0: left allmulticast mode [ 1393.421827][T16686] dummy0: left promiscuous mode [ 1394.636201][T16703] xt_CONNSECMARK: invalid mode: 0 [ 1398.450175][T16730] fuse: blksize only supported for fuseblk [ 1401.244147][T16752] autofs: Unknown parameter './file1' [ 1405.949532][T16792] fuse: blksize only supported for fuseblk [ 1406.762245][T16798] program syz.0.2543 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1406.772095][T16798] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1406.845831][T16801] dummy0: entered promiscuous mode [ 1406.853575][T16801] macsec1: entered allmulticast mode [ 1406.859077][T16801] dummy0: entered allmulticast mode [ 1406.873966][T16801] dummy0: left allmulticast mode [ 1406.879190][T16801] dummy0: left promiscuous mode [ 1408.047941][T16810] autofs: Unknown parameter './file1' [ 1409.876202][T16821] xt_CONNSECMARK: invalid mode: 0 [ 1410.778790][ T25] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1411.089435][ T25] usb 3-1: Using ep0 maxpacket: 32 [ 1411.233950][ T25] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1411.304834][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1411.336649][ T25] usb 3-1: Product: syz [ 1411.554347][ T25] usb 3-1: Manufacturer: syz [ 1411.560867][ T25] usb 3-1: SerialNumber: syz [ 1411.581028][ T25] usb 3-1: config 0 descriptor?? [ 1411.598552][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1411.927106][T16844] program syz.0.2555 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1411.936972][T16844] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1412.527836][T16858] dummy0: entered promiscuous mode [ 1412.533231][T16858] macsec1: entered allmulticast mode [ 1412.538873][T16858] dummy0: entered allmulticast mode [ 1412.558771][T16858] dummy0: left allmulticast mode [ 1412.563825][T16858] dummy0: left promiscuous mode [ 1412.812859][ T25] gspca_ov534_9: reg_w failed -71 [ 1413.149073][ T25] gspca_ov534_9: Unknown sensor 0000 [ 1413.149195][ T25] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1414.171272][T16876] autofs: Unknown parameter './file1' [ 1414.481268][ T25] usb 3-1: USB disconnect, device number 22 [ 1415.817200][T16886] xt_CONNSECMARK: invalid mode: 0 [ 1416.808415][T16904] program syz.0.2567 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1416.870111][T16902] loop6: detected capacity change from 0 to 1024 [ 1416.953720][T16902] EXT4-fs: Ignoring removed orlov option [ 1416.980616][T16904] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1417.120233][T16902] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1417.472044][T16902] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1417.852663][T14477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1421.164763][T16945] xt_CONNSECMARK: invalid mode: 0 [ 1421.865117][T16955] siw: device registration error -23 [ 1422.836912][T16966] loop0: detected capacity change from 0 to 1024 [ 1422.872514][T16966] EXT4-fs: Ignoring removed orlov option [ 1422.929962][T16966] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1423.052200][T16966] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1424.374249][T12661] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1425.284568][T16997] x_tables: duplicate underflow at hook 1 [ 1425.909600][T17006] xt_CONNSECMARK: invalid mode: 0 [ 1428.414725][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.426396][ T5935] kworker/1:7 (5935) used greatest stack depth: 16560 bytes left [ 1428.438147][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1428.458017][T13396] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1428.677533][T13396] usb 3-1: Using ep0 maxpacket: 32 [ 1428.714344][T13396] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 1428.739104][T13396] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1428.773159][T13396] usb 3-1: Product: syz [ 1428.787747][T13396] usb 3-1: Manufacturer: syz [ 1428.792408][T13396] usb 3-1: SerialNumber: syz [ 1428.841941][T13396] usb 3-1: config 0 descriptor?? [ 1428.869586][T13396] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 1430.133544][T13396] gspca_ov534_9: reg_w failed -71 [ 1430.172007][T17048] x_tables: duplicate underflow at hook 1 [ 1430.437871][T13396] gspca_ov534_9: Unknown sensor 0000 [ 1430.438002][T13396] ov534_9 3-1:0.0: probe with driver ov534_9 failed with error -22 [ 1430.507154][T13396] usb 3-1: USB disconnect, device number 23 [ 1430.653928][T17055] xt_CONNSECMARK: invalid mode: 0 [ 1431.267502][ T5880] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1431.997471][ T5880] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.067798][ T5880] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1432.080898][ T5880] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1432.527502][ T5880] usb 3-1: config 0 descriptor?? [ 1432.701889][ T5880] pwc: Askey VC010 type 2 USB webcam detected. [ 1433.328107][ T5880] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1433.344599][ T5880] pwc: recv_control_msg error -32 req 02 val 2700 [ 1433.361236][ T5880] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1433.377199][ T5880] pwc: recv_control_msg error -32 req 04 val 1000 [ 1433.434140][ T5880] pwc: recv_control_msg error -32 req 04 val 1300 [ 1433.474158][ T5880] pwc: recv_control_msg error -32 req 04 val 1400 [ 1433.519352][ T5880] pwc: recv_control_msg error -32 req 02 val 2000 [ 1433.910078][T17076] loop6: detected capacity change from 0 to 32768 [ 1433.921525][ T5880] pwc: recv_control_msg error -71 req 04 val 1500 [ 1433.931134][ T5880] pwc: recv_control_msg error -71 req 02 val 2500 [ 1433.940542][ T5880] pwc: recv_control_msg error -71 req 02 val 2400 [ 1433.947971][ T5880] pwc: recv_control_msg error -71 req 02 val 2600 [ 1433.955933][ T5880] pwc: recv_control_msg error -71 req 02 val 2900 [ 1433.966052][ T5880] pwc: recv_control_msg error -71 req 02 val 2800 [ 1433.994294][ T5880] pwc: recv_control_msg error -71 req 04 val 1100 [ 1434.017263][ T5880] pwc: recv_control_msg error -71 req 04 val 1200 [ 1434.048965][ T5880] pwc: Registered as video103. [ 1434.103246][ T5880] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input33 [ 1434.181361][T17076] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,compression=lz4,norecovery,reconstruct_alloc [ 1434.198191][T17076] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 1434.207073][T17076] bcachefs (loop6): Version upgrade required: [ 1434.207073][T17076] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1434.207073][T17076] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 1434.207073][T17076] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1434.281297][T17076] bcachefs (loop6): dropping and reconstructing all alloc info [ 1434.289483][T17076] bcachefs (loop6): insufficient writeable journal devices available: have 0, need 1 [ 1434.289483][T17076] rw journal devs: loop6 [ 1434.361811][T17076] bcachefs (loop6): accounting_read... done [ 1434.381495][T17076] bcachefs (loop6): alloc_read... done [ 1434.387258][T17076] bcachefs (loop6): stripes_read... done [ 1434.393366][T17076] bcachefs (loop6): snapshots_read... done [ 1434.401637][T17076] bcachefs (loop6): done starting filesystem [ 1434.535166][ T5880] usb 3-1: USB disconnect, device number 24 [ 1434.638264][T14477] bcachefs (loop6): shutting down [ 1434.863192][T14477] bcachefs (loop6): shutdown complete [ 1435.418335][T17094] program syz.2.2616 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1435.450860][T17094] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1436.067759][T17098] fuse: blksize only supported for fuseblk [ 1436.808873][T17101] program syz.0.2619 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1437.445964][T17108] xt_CONNSECMARK: invalid mode: 0 [ 1439.178103][T13396] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 1439.392702][T13396] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1439.424986][T13396] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1439.507978][T13396] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1439.809784][T17139] fuse: Bad value for 'group_id' [ 1439.814861][T17139] fuse: Bad value for 'group_id' [ 1440.495708][T13396] usb 8-1: config 0 descriptor?? [ 1440.541448][T13396] pwc: Askey VC010 type 2 USB webcam detected. [ 1441.179777][T13396] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1441.208805][T13396] pwc: recv_control_msg error -32 req 02 val 2700 [ 1441.218831][T13396] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1441.232102][T13396] pwc: recv_control_msg error -32 req 04 val 1000 [ 1441.293722][T13396] pwc: recv_control_msg error -32 req 04 val 1300 [ 1441.504890][T13396] pwc: recv_control_msg error -32 req 04 val 1400 [ 1441.676445][T13396] pwc: recv_control_msg error -32 req 02 val 2000 [ 1442.263615][T13396] pwc: recv_control_msg error -71 req 04 val 1500 [ 1442.299888][T13396] pwc: recv_control_msg error -71 req 02 val 2500 [ 1442.338708][T13396] pwc: recv_control_msg error -71 req 02 val 2400 [ 1442.371295][T13396] pwc: recv_control_msg error -71 req 02 val 2600 [ 1442.409336][T13396] pwc: recv_control_msg error -71 req 02 val 2900 [ 1442.436348][T13396] pwc: recv_control_msg error -71 req 02 val 2800 [ 1442.459297][T13396] pwc: recv_control_msg error -71 req 04 val 1100 [ 1442.475910][T13396] pwc: recv_control_msg error -71 req 04 val 1200 [ 1442.531825][T13396] pwc: Registered as video103. [ 1442.566081][T13396] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input35 [ 1442.681961][T13396] usb 8-1: USB disconnect, device number 5 [ 1443.326606][T17171] xt_CONNSECMARK: invalid mode: 0 [ 1444.533642][T17185] program syz.6.2637 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1444.608296][T17185] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1446.280730][T17202] program syz.7.2641 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1447.541782][T17208] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2643'. [ 1447.633423][T17208] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2643'. [ 1448.573080][T17223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2647'. [ 1449.090332][T17223] hsr_slave_1 (unregistering): left allmulticast mode [ 1449.260337][T17223] hsr_slave_1 (unregistering): left promiscuous mode [ 1453.739359][T17275] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2659'. [ 1453.748955][T17275] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2659'. [ 1455.674170][T17294] program syz.2.2663 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1455.724888][T17294] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1456.008859][T17292] loop7: detected capacity change from 0 to 32768 [ 1456.564774][T17292] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,compression=lz4,norecovery,reconstruct_alloc [ 1456.580469][T17292] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 1456.588916][T17292] bcachefs (loop7): Version upgrade required: [ 1456.588916][T17292] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1456.588916][T17292] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 1456.588916][T17292] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1456.664726][T17292] bcachefs (loop7): dropping and reconstructing all alloc info [ 1456.673023][T17292] bcachefs (loop7): insufficient writeable journal devices available: have 0, need 1 [ 1456.673023][T17292] rw journal devs: loop7 [ 1456.943648][T17292] bcachefs (loop7): accounting_read... done [ 1456.949765][T17292] bcachefs (loop7): alloc_read... done [ 1456.959080][T17292] bcachefs (loop7): stripes_read... done [ 1456.964842][T17292] bcachefs (loop7): snapshots_read... done [ 1456.972026][T17292] bcachefs (loop7): done starting filesystem [ 1457.295704][T13862] bcachefs (loop7): shutting down [ 1457.599633][T13862] bcachefs (loop7): shutdown complete [ 1461.089871][T17344] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2676'. [ 1461.099562][T17344] netlink: 80 bytes leftover after parsing attributes in process `syz.6.2676'. [ 1463.691508][T17363] dummy0: entered promiscuous mode [ 1463.696735][T17363] macsec1: entered allmulticast mode [ 1463.702178][T17363] dummy0: entered allmulticast mode [ 1463.740335][T17363] dummy0: left allmulticast mode [ 1463.745351][T17363] dummy0: left promiscuous mode [ 1465.816552][T17382] loop6: detected capacity change from 0 to 1024 [ 1465.826972][T17382] EXT4-fs: Ignoring removed orlov option [ 1465.889724][T17382] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1465.956549][T17382] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1466.051232][T14477] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1466.713649][T17403] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2690'. [ 1466.758370][T17403] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2690'. [ 1467.248860][T17407] x_tables: duplicate underflow at hook 1 [ 1468.812735][T17428] dummy0: entered promiscuous mode [ 1468.820753][T17428] macsec1: entered allmulticast mode [ 1468.826096][T17428] dummy0: entered allmulticast mode [ 1468.851764][T17428] dummy0: left allmulticast mode [ 1468.856828][T17428] dummy0: left promiscuous mode [ 1471.801260][T17459] loop7: detected capacity change from 0 to 1024 [ 1471.838838][T17459] EXT4-fs: Ignoring removed orlov option [ 1471.863654][T17459] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1471.966232][T17459] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1472.330794][T13862] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1472.351759][T17471] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2703'. [ 1472.361476][T17471] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2703'. [ 1472.959010][T17482] dummy0: entered promiscuous mode [ 1472.964310][T17482] macsec1: entered allmulticast mode [ 1472.969755][T17482] dummy0: entered allmulticast mode [ 1473.042535][T17482] dummy0: left allmulticast mode [ 1473.048433][T17482] dummy0: left promiscuous mode [ 1473.170074][T17454] loop0: detected capacity change from 0 to 32768 [ 1473.290012][T17454] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2698 (17454) [ 1473.406447][T17454] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1473.437814][T17454] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1473.476486][T17454] BTRFS info (device loop0): using free-space-tree [ 1473.897601][T17454] BTRFS info (device loop0): rebuilding free space tree [ 1474.105598][T17454] BTRFS info (device loop0): balance: start -susage=12582912,drange=65536..13,limit=22175,limit=22175..0 [ 1474.130303][T17454] BTRFS info (device loop0): balance: ended with status: 0 [ 1474.700839][T12661] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1476.149784][T17526] program syz.7.2707 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1476.159632][T17526] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1478.172557][T17554] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1478.195072][T17555] dummy0: entered promiscuous mode [ 1478.200457][T17555] macsec1: entered allmulticast mode [ 1478.205781][T17555] dummy0: entered allmulticast mode [ 1478.213886][T17554] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2718'. [ 1478.236174][T17555] dummy0: left allmulticast mode [ 1478.241711][T17555] dummy0: left promiscuous mode [ 1481.695812][T17590] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1482.229521][T17601] xt_CONNSECMARK: invalid mode: 0 [ 1483.207842][T17602] loop2: detected capacity change from 0 to 32768 [ 1483.426749][T17602] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,compression=lz4,norecovery,reconstruct_alloc [ 1483.442510][T17602] bcachefs (loop2): recovering from clean shutdown, journal seq 10 [ 1483.452341][T17602] bcachefs (loop2): Version upgrade required: [ 1483.452341][T17602] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1483.452341][T17602] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 1483.452341][T17602] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1483.525007][T17602] bcachefs (loop2): dropping and reconstructing all alloc info [ 1483.532923][T17602] bcachefs (loop2): insufficient writeable journal devices available: have 0, need 1 [ 1483.532923][T17602] rw journal devs: loop2 [ 1483.599428][T17602] bcachefs (loop2): accounting_read... done [ 1483.622614][T17602] bcachefs (loop2): alloc_read... done [ 1483.628691][T17602] bcachefs (loop2): stripes_read... done [ 1483.634435][T17602] bcachefs (loop2): snapshots_read... done [ 1483.641099][T17602] bcachefs (loop2): done starting filesystem [ 1483.799970][T13945] bcachefs (loop2): shutting down [ 1483.974624][T13945] bcachefs (loop2): shutdown complete [ 1484.250289][T17621] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2733'. [ 1484.259688][T17621] netlink: 80 bytes leftover after parsing attributes in process `syz.7.2733'. [ 1484.282486][T17616] loop6: detected capacity change from 0 to 4096 [ 1484.328040][T17616] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512). [ 1484.460231][T17616] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1484.499441][T17616] ntfs3(loop6): Failed to load $Extend (-2). [ 1484.531954][T17616] ntfs3(loop6): Failed to initialize $Extend. [ 1488.685099][T17655] fuse: blksize only supported for fuseblk [ 1489.517725][ T5881] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1489.860212][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.866844][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.016907][T17669] loop7: detected capacity change from 0 to 32768 [ 1490.051316][ T5881] usb 7-1: Using ep0 maxpacket: 32 [ 1490.069228][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1490.087566][ T5881] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1490.127654][ T5881] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1490.154123][ T5881] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1490.183635][ T5881] usb 7-1: config 0 descriptor?? [ 1490.199698][ T5881] hub 7-1:0.0: USB hub found [ 1490.402331][ T5881] hub 7-1:0.0: 1 port detected [ 1490.423236][T17669] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,compression=lz4,norecovery,reconstruct_alloc [ 1490.439002][T17669] bcachefs (loop7): recovering from clean shutdown, journal seq 10 [ 1490.449397][T17669] bcachefs (loop7): Version upgrade required: [ 1490.449397][T17669] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete [ 1490.449397][T17669] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size [ 1490.449397][T17669] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1490.523409][T17669] bcachefs (loop7): dropping and reconstructing all alloc info [ 1490.531660][T17669] bcachefs (loop7): insufficient writeable journal devices available: have 0, need 1 [ 1490.531660][T17669] rw journal devs: loop7 [ 1490.615896][T17669] bcachefs (loop7): accounting_read... done [ 1490.635022][T17669] bcachefs (loop7): alloc_read... done [ 1490.641685][T17669] bcachefs (loop7): stripes_read... done [ 1490.650432][T17669] bcachefs (loop7): snapshots_read... done [ 1490.656997][T17669] bcachefs (loop7): done starting filesystem [ 1490.893077][T13862] bcachefs (loop7): shutting down [ 1491.010453][ T5881] hub 7-1:0.0: activate --> -90 [ 1491.095389][T13862] bcachefs (loop7): shutdown complete [ 1491.215814][ T5881] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 1491.223843][ T5845] usb 7-1: USB disconnect, device number 19 [ 1491.601239][T17698] dummy0: entered promiscuous mode [ 1491.606501][T17698] macsec1: entered allmulticast mode [ 1491.612269][T17698] dummy0: entered allmulticast mode [ 1491.627019][T17698] dummy0: left allmulticast mode [ 1491.632822][T17698] dummy0: left promiscuous mode [ 1491.981517][T17702] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2746'. [ 1491.994338][T17702] netlink: 80 bytes leftover after parsing attributes in process `syz.2.2746'. [ 1494.479457][T17729] fuse: blksize only supported for fuseblk [ 1495.328885][T17741] netlink: 'syz.6.2752': attribute type 12 has an invalid length. [ 1495.336957][T17741] netlink: 'syz.6.2752': attribute type 29 has an invalid length. [ 1495.345569][T17741] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2752'. [ 1496.294575][T17753] loop2: detected capacity change from 0 to 1024 [ 1498.860927][T17769] loop2: detected capacity change from 0 to 40427 [ 1498.950725][T17769] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1498.959974][T17769] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1499.005725][T17769] F2FS-fs (loop2): invalid crc value [ 1499.067794][T17769] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1499.180472][T17769] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1499.190141][T17769] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1499.387955][ T29] audit: type=1804 audit(1739022346.859:13): pid=17769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2760" name="/newroot/145/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 1499.547992][ T29] audit: type=1804 audit(1739022346.859:14): pid=17769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2760" name="/newroot/145/bus/bus" dev="loop2" ino=10 res=1 errno=0 [ 1501.259662][T17797] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 3952. macoff=96 [ 1501.468075][T17805] netlink: 'syz.7.2768': attribute type 12 has an invalid length. [ 1501.476130][T17805] netlink: 'syz.7.2768': attribute type 29 has an invalid length. [ 1501.484671][T17805] netlink: 148 bytes leftover after parsing attributes in process `syz.7.2768'. [ 1507.961665][T17865] netlink: 'syz.6.2783': attribute type 12 has an invalid length. [ 1507.969951][T17865] netlink: 'syz.6.2783': attribute type 29 has an invalid length. [ 1507.978169][T17865] netlink: 148 bytes leftover after parsing attributes in process `syz.6.2783'. [ 1511.223400][T17891] fuse: Bad value for 'fd' [ 1513.253097][T17899] loop0: detected capacity change from 0 to 2048 [ 1513.971008][T17899] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1514.490276][T17922] kvm: user requested TSC rate below hardware speed [ 1519.328243][T17961] fuse: Bad value for 'fd' [ 1521.301085][T17974] loop0: detected capacity change from 0 to 4096 [ 1521.693201][T17985] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1523.548064][T18001] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2810'. [ 1526.989752][T18016] fuse: Bad value for 'fd' [ 1528.332454][T18024] loop2: detected capacity change from 0 to 32768 [ 1528.366265][T18024] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2816 (18024) [ 1529.107972][T18024] BTRFS error (device loop2): open_ctree failed: -4 [ 1529.688574][T18059] siw: device registration error -23 [ 1529.708772][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2822'. [ 1529.956650][T18063] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2821'. [ 1530.917753][ T5915] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1531.270014][ T5915] usb 7-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00 [ 1531.314742][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.374416][ T5915] usb 7-1: config 0 descriptor?? [ 1532.282652][ T5915] ntrig 0003:1B96:0003.0015: unknown main item tag 0x0 [ 1532.362705][ T5915] ntrig 0003:1B96:0003.0015: unknown main item tag 0x0 [ 1532.443832][ T5915] ntrig 0003:1B96:0003.0015: unknown main item tag 0x0 [ 1532.464782][ T5915] ntrig 0003:1B96:0003.0015: unknown main item tag 0x0 [ 1532.484264][ T5915] ntrig 0003:1B96:0003.0015: unknown main item tag 0x0 [ 1532.536934][ T5915] ntrig 0003:1B96:0003.0015: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.6-1/input0 [ 1532.646257][ T5915] usb 7-1: USB disconnect, device number 20 [ 1533.918860][T18100] loop0: detected capacity change from 0 to 32768 [ 1533.967995][T18100] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2832 (18100) [ 1534.056169][T18100] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1534.105667][T18100] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 1534.149342][T18100] BTRFS info (device loop0): using free-space-tree [ 1534.564718][T18100] BTRFS info (device loop0): rebuilding free space tree [ 1535.242369][T18100] BTRFS info (device loop0): balance: start -susage=12582912,drange=65536..13,limit=22175,limit=22175..0 [ 1535.317754][T18100] BTRFS info (device loop0): balance: ended with status: 0 [ 1535.787535][T18155] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2837'. [ 1536.534342][T12661] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 1537.318133][T18168] netlink: 64 bytes leftover after parsing attributes in process `syz.7.2843'. [ 1540.177562][T18210] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2851'. [ 1541.109030][ T5837] Bluetooth: hci3: adv larger than maximum supported [ 1541.109102][ T5837] Bluetooth: hci3: Malformed LE Event: 0x0d [ 1541.375684][T18232] loop6: detected capacity change from 0 to 256 [ 1541.421703][T18232] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1541.496185][T18232] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=512, location=512 [ 1541.786203][T18232] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found [ 1541.849925][T18232] UDF-fs: Scanning with blocksize 512 failed [ 1541.891499][T18232] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1541.945110][T18232] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1541.977103][T18241] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2860'. [ 1544.122080][ T5837] Bluetooth: hci1: adv larger than maximum supported [ 1544.122175][ T5837] Bluetooth: hci1: Malformed LE Event: 0x0d [ 1544.437175][T18281] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2868'. [ 1545.722302][T18295] loop0: detected capacity change from 0 to 512 [ 1545.789577][T18295] EXT4-fs: Ignoring removed nobh option [ 1545.851385][T18295] EXT4-fs: Mount option(s) incompatible with ext2 [ 1545.935433][T18300] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2876'. [ 1546.277903][ T5881] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1546.457747][ T5881] usb 1-1: Using ep0 maxpacket: 32 [ 1546.465582][ T5881] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 1546.475038][T18300] hsr_slave_1 (unregistering): left promiscuous mode [ 1546.483181][ T5881] usb 1-1: config 0 has no interface number 0 [ 1546.497539][ T5881] usb 1-1: config 0 interface 182 has no altsetting 0 [ 1546.515766][ T5881] usb 1-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa [ 1546.536446][ T5881] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1546.565149][ T5881] usb 1-1: Product: syz [ 1546.580387][ T5881] usb 1-1: Manufacturer: syz [ 1546.595801][ T5881] usb 1-1: SerialNumber: syz [ 1546.622820][ T5881] usb 1-1: config 0 descriptor?? [ 1546.648635][ T5881] usb-storage 1-1:0.182: USB Mass Storage device detected [ 1546.697862][ T5881] usb-storage 1-1:0.182: Quirks match for vid 07cf pid 1001: a [ 1546.955009][ T5881] usb 1-1: USB disconnect, device number 20 [ 1548.804359][T18337] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2883'. [ 1549.753121][T18346] loop0: detected capacity change from 0 to 40427 [ 1549.799256][T18346] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 1549.808010][T18346] F2FS-fs (loop0): heap/no_heap options were deprecated [ 1549.820585][T18346] F2FS-fs (loop0): invalid crc value [ 1549.829808][T18346] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1549.966161][T18346] F2FS-fs (loop0): Start checkpoint disabled! [ 1550.006330][T18346] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1550.081454][T18346] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x1af/0xcf0 [ 1550.457717][T18365] : entered promiscuous mode [ 1551.453042][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.463865][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.991083][T18378] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2896'. [ 1553.091397][ T11] kworker/u8:0: attempt to access beyond end of device [ 1553.091397][ T11] loop0: rw=2049, sector=40960, nr_sectors = 40 limit=40427 [ 1553.181197][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1553.198017][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1553.215347][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1553.233764][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1553.254001][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1554.930660][ T29] audit: type=1326 audit(1739022402.429:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9ab758cde9 code=0x7ffc0000 [ 1555.014771][ T29] audit: type=1326 audit(1739022402.449:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9ab758b750 code=0x7ffc0000 [ 1555.098025][ T29] audit: type=1326 audit(1739022402.459:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab758c9eb code=0x7ffc0000 [ 1555.161207][ T29] audit: type=1326 audit(1739022402.459:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab758c9eb code=0x7ffc0000 [ 1555.530875][T18427] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2894'. [ 1555.996229][T12817] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1556.092120][ T29] audit: type=1326 audit(1739022402.479:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab758c9eb code=0x7ffc0000 [ 1556.186458][T12817] usb 3-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 1556.225057][T12817] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1556.315584][T18437] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2908'. [ 1556.447973][ T29] audit: type=1326 audit(1739022402.479:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab758c9eb code=0x7ffc0000 [ 1556.858017][ T29] audit: type=1326 audit(1739022402.569:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab758c9eb code=0x7ffc0000 [ 1557.014499][ T29] audit: type=1326 audit(1739022402.639:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab758c9eb code=0x7ffc0000 [ 1557.038766][T12817] usb 3-1: Product: syz [ 1557.042977][T12817] usb 3-1: Manufacturer: syz [ 1557.058565][T12817] usb 3-1: SerialNumber: syz [ 1557.165211][T12817] usb 3-1: config 0 descriptor?? [ 1557.187567][ T29] audit: type=1326 audit(1739022403.519:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab758c9eb code=0x7ffc0000 [ 1557.226612][T12817] ims_pcu 3-1:0.0: Zero length descriptor [ 1557.263457][T12817] ims_pcu 3-1:0.0: probe with driver ims_pcu failed with error -22 [ 1557.282343][ T29] audit: type=1326 audit(1739022403.519:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18413 comm="syz.2.2906" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9ab758c9eb code=0x7ffc0000 [ 1557.464131][ T5879] usb 3-1: USB disconnect, device number 25 [ 1557.498301][T13875] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 1557.661313][T13875] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1557.709355][T13875] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1557.740232][T13875] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1557.811678][T13875] usb 7-1: config 0 descriptor?? [ 1557.846793][T13875] pwc: Askey VC010 type 2 USB webcam detected. [ 1558.168484][ T2152] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1558.244172][T13875] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1558.277141][T13875] pwc: recv_control_msg error -32 req 02 val 2700 [ 1558.297146][T13875] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1558.317116][T13875] pwc: recv_control_msg error -32 req 04 val 1000 [ 1558.345174][T13875] pwc: recv_control_msg error -32 req 04 val 1300 [ 1558.352099][ T2152] usb 1-1: Using ep0 maxpacket: 32 [ 1558.373050][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1558.413106][T13875] pwc: recv_control_msg error -32 req 04 val 1400 [ 1558.461152][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1558.478244][T13875] pwc: recv_control_msg error -32 req 02 val 2000 [ 1558.513113][T13875] pwc: recv_control_msg error -32 req 02 val 2100 [ 1558.553735][ T2152] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1558.626298][T13875] pwc: recv_control_msg error -32 req 04 val 1500 [ 1558.647436][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1558.656847][T13875] pwc: recv_control_msg error -32 req 02 val 2500 [ 1558.714262][T13875] pwc: recv_control_msg error -32 req 02 val 2400 [ 1558.725781][ T2152] usb 1-1: config 0 descriptor?? [ 1558.894450][ T2152] hub 1-1:0.0: USB hub found [ 1558.957885][T13875] pwc: recv_control_msg error -71 req 02 val 2900 [ 1558.976837][T13875] pwc: recv_control_msg error -71 req 02 val 2800 [ 1558.989167][T18465] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2914'. [ 1559.017123][T13875] pwc: recv_control_msg error -71 req 04 val 1100 [ 1559.028398][T13875] pwc: recv_control_msg error -71 req 04 val 1200 [ 1559.064818][T13875] pwc: Registered as video103. [ 1559.110928][T13875] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input41 [ 1559.128184][ T2152] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 1559.230625][T13875] usb 7-1: USB disconnect, device number 21 [ 1559.373106][ T2152] usbhid 1-1:0.0: can't add hid device: -71 [ 1559.398686][ T2152] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1559.461118][ T2152] usb 1-1: USB disconnect, device number 21 [ 1560.298961][T18484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2919'. [ 1560.355723][T18484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2919'. [ 1561.219090][T18496] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2920'. [ 1562.060854][T18498] netlink: 76 bytes leftover after parsing attributes in process `syz.7.2924'. [ 1562.818244][T13875] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 1563.013858][T13875] usb 8-1: Using ep0 maxpacket: 32 [ 1563.087673][T13875] usb 8-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1563.130691][T13875] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.175196][T13875] usb 8-1: Product: syz [ 1563.196496][T13875] usb 8-1: Manufacturer: syz [ 1563.216710][T13875] usb 8-1: SerialNumber: syz [ 1563.234942][T13875] usb 8-1: config 0 descriptor?? [ 1563.257179][T18514] loop2: detected capacity change from 0 to 164 [ 1563.591317][T13875] RobotFuzz Open Source InterFace, OSIF 8-1:0.0: version d4.15 found at bus 008 address 006 [ 1563.826002][T13875] usb 8-1: USB disconnect, device number 6 [ 1563.895922][T18531] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2931'. [ 1565.536076][T18548] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2935'. [ 1566.634406][T18556] netlink: 11 bytes leftover after parsing attributes in process `syz.0.2938'. [ 1566.787701][ T2152] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1566.968343][ T2152] usb 3-1: Using ep0 maxpacket: 8 [ 1566.980782][ T2152] usb 3-1: config 135 has an invalid interface number: 230 but max is 0 [ 1567.027508][ T2152] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config [ 1567.081224][ T2152] usb 3-1: config 135 has no interface number 0 [ 1567.113555][ T2152] usb 3-1: too many endpoints for config 135 interface 230 altsetting 126: 53, using maximum allowed: 30 [ 1567.179127][ T2152] usb 3-1: config 135 interface 230 altsetting 126 has 0 endpoint descriptors, different from the interface descriptor's value: 53 [ 1567.252325][ T2152] usb 3-1: config 135 interface 230 has no altsetting 0 [ 1567.282179][ T2152] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a [ 1567.339454][ T2152] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.371721][ T2152] usb 3-1: Product: syz [ 1567.375951][ T2152] usb 3-1: Manufacturer: syz [ 1567.433848][ T2152] usb 3-1: SerialNumber: syz [ 1567.711326][ T2152] usb 3-1: Found UVC 0.00 device syz (18ec:3288) [ 1567.748265][ T2152] usb 3-1: No valid video chain found. [ 1567.803838][ T2152] usb 3-1: USB disconnect, device number 26 [ 1567.810991][T18565] loop7: detected capacity change from 0 to 4096 [ 1568.138002][T18572] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1569.050128][T18583] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2943'. [ 1570.543450][T18604] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2948'. [ 1572.766370][T18625] fuse: blksize only supported for fuseblk [ 1573.352867][T18620] loop6: detected capacity change from 0 to 4096 [ 1573.588102][T18629] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1574.027070][T18637] loop2: detected capacity change from 0 to 256 [ 1575.449957][T18655] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2960'. [ 1578.109865][T18686] fuse: blksize only supported for fuseblk [ 1578.977526][ T5845] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1579.178626][ T5845] usb 7-1: Using ep0 maxpacket: 8 [ 1579.243477][ T5845] usb 7-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1579.298175][ T5845] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1579.410285][ T5845] usb 7-1: config 0 descriptor?? [ 1579.800246][ T5845] asix 7-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 1580.659871][ T5845] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1580.707839][ T5845] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 1580.896714][T18716] netlink: 52 bytes leftover after parsing attributes in process `syz.7.2974'. [ 1581.535074][T18718] bridge5: entered promiscuous mode [ 1581.571960][T18718] bridge5: entered allmulticast mode [ 1581.637626][ T5845] asix 7-1:0.0: probe with driver asix failed with error -71 [ 1581.659915][ T5845] usb 7-1: USB disconnect, device number 22 [ 1581.852563][T18718] team0: Port device bridge5 added [ 1582.015769][T18726] loop2: detected capacity change from 0 to 1024 [ 1582.131274][T18726] EXT4-fs: Ignoring removed mblk_io_submit option [ 1582.233367][T18726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1583.137090][T18738] fuse: blksize only supported for fuseblk [ 1583.907143][T13945] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1584.328930][T18752] loop2: detected capacity change from 0 to 1024 [ 1584.483230][T18752] __quota_error: 34 callbacks suppressed [ 1584.483255][T18752] Quota error (device loop2): do_check_range: Getting block 64 out of range 1-5 [ 1584.486396][T18759] loop0: detected capacity change from 0 to 164 [ 1584.531032][T18759] iso9660: Unknown parameter 'ÿÿÿÿÿÿÿÿ0x0000000000000000' [ 1584.554147][T18752] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 1584.631152][T18752] EXT4-fs error (device loop2): ext4_acquire_dquot:6927: comm syz.2.2986: Failed to acquire dquot type 0 [ 1584.869260][T18752] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt. [ 1585.034445][T18752] EXT4-fs error (device loop2): ext4_do_update_inode:5142: inode #13: comm syz.2.2986: corrupted inode contents [ 1585.084505][T13875] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 1585.135338][T18752] EXT4-fs error (device loop2): ext4_dirty_inode:6030: inode #13: comm syz.2.2986: mark_inode_dirty error [ 1585.178476][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2991'. [ 1585.224284][T18752] EXT4-fs error (device loop2): ext4_do_update_inode:5142: inode #13: comm syz.2.2986: corrupted inode contents [ 1585.248435][T18752] EXT4-fs error (device loop2): __ext4_ext_dirty:207: inode #13: comm syz.2.2986: mark_inode_dirty error [ 1585.286337][T18752] EXT4-fs error (device loop2): ext4_do_update_inode:5142: inode #13: comm syz.2.2986: corrupted inode contents [ 1585.304914][T18768] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2990'. [ 1585.322116][T13875] usb 1-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1585.351790][T18752] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem [ 1585.362639][T18768] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2990'. [ 1585.374979][T13875] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1585.398463][T18752] EXT4-fs error (device loop2): ext4_do_update_inode:5142: inode #13: comm syz.2.2986: corrupted inode contents [ 1585.407434][T13875] usb 1-1: Product: syz [ 1585.414856][T13875] usb 1-1: Manufacturer: syz [ 1585.430922][T13875] usb 1-1: SerialNumber: syz [ 1585.457229][T13875] usb 1-1: config 0 descriptor?? [ 1585.479651][T18752] EXT4-fs error (device loop2): ext4_truncate:4228: inode #13: comm syz.2.2986: mark_inode_dirty error [ 1585.505454][T13875] usb 1-1: selecting invalid altsetting 3 [ 1585.527995][T13875] comedi comedi0: could not set alternate setting 3 in high speed [ 1585.535869][T13875] usbdux 1-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1585.550309][T18752] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem [ 1585.594216][T13875] usbdux 1-1:0.0: probe with driver usbdux failed with error -22 [ 1585.645974][T18752] EXT4-fs (loop2): 1 truncate cleaned up [ 1585.707578][T13875] usb 1-1: USB disconnect, device number 22 [ 1585.804251][T18752] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1586.010957][T18752] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1591.276896][ T2152] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1591.457639][ T2152] usb 1-1: Using ep0 maxpacket: 16 [ 1591.465487][ T2152] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1591.524651][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1591.560041][ T2152] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1591.582337][ T2152] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.603423][ T2152] usb 1-1: Product: syz [ 1591.636694][ T2152] usb 1-1: Manufacturer: syz [ 1591.681094][ T2152] usb 1-1: SerialNumber: syz [ 1591.721371][ T2152] usb 1-1: config 0 descriptor?? [ 1592.041873][ T2152] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1592.215690][ T2152] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 1592.504623][T18864] loop6: detected capacity change from 0 to 32768 [ 1592.719011][T18864] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 1592.747250][T18864] bcachefs (loop6): recovering from clean shutdown, journal seq 10 [ 1592.755784][T18864] bcachefs (loop6): Version upgrade required: [ 1592.755784][T18864] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 1592.755784][T18864] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 1592.755784][T18864] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1592.757077][ T2152] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 1592.826605][T18864] bcachefs (loop6): dropping and reconstructing all alloc info [ 1592.901840][T18864] bcachefs (loop6): accounting_read... done [ 1592.926809][T18864] bcachefs (loop6): alloc_read... done [ 1592.933113][T18864] bcachefs (loop6): stripes_read... done [ 1592.939441][T18864] bcachefs (loop6): snapshots_read... done [ 1593.027839][T18864] bcachefs (loop6): done starting filesystem [ 1593.215239][ T5837] Bluetooth: hci1: command tx timeout [ 1593.216018][ T2152] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 1594.110039][ T2152] em28xx 1-1:0.0: Unknown AC97 audio processor detected! [ 1594.120050][T14477] bcachefs (loop6): shutting down [ 1594.142430][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 2 [ 1594.175884][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 4 [ 1594.210411][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 6 [ 1594.241439][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 54 [ 1594.300855][ T2152] em28xx 1-1:0.0: couldn't setup AC97 register 56 [ 1594.347085][T14477] bcachefs (loop6): shutdown complete [ 1594.371843][ T2152] usb 1-1: USB disconnect, device number 23 [ 1595.985375][T18894] team0 (unregistering): Port device team_slave_0 removed [ 1596.143553][T18894] team0 (unregistering): Port device team_slave_1 removed [ 1597.482289][T18929] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3033'. [ 1598.208867][ T5879] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1598.393072][ T5879] usb 1-1: Using ep0 maxpacket: 32 [ 1598.410564][ T5879] usb 1-1: config 0 has an invalid interface number: 182 but max is 0 [ 1598.425485][ T5879] usb 1-1: config 0 has no interface number 0 [ 1598.448348][ T5879] usb 1-1: config 0 interface 182 has no altsetting 0 [ 1598.496762][ T5879] usb 1-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa [ 1598.521544][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1598.583142][ T5879] usb 1-1: Product: syz [ 1598.606842][ T5879] usb 1-1: Manufacturer: syz [ 1598.672939][ T5879] usb 1-1: SerialNumber: syz [ 1598.720410][ T5879] usb 1-1: config 0 descriptor?? [ 1598.753556][ T5879] usb-storage 1-1:0.182: USB Mass Storage device detected [ 1598.762442][T18950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3040'. [ 1598.821712][ T5879] usb-storage 1-1:0.182: Quirks match for vid 07cf pid 1001: a [ 1599.008343][ T5879] usb 1-1: USB disconnect, device number 24 [ 1600.358158][T12817] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 1600.568673][T12817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1600.612904][T12817] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1600.663782][T12817] usb 1-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 1600.697909][T12817] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.743563][T18940] loop7: detected capacity change from 0 to 32768 [ 1600.762742][T12817] usb 1-1: config 0 descriptor?? [ 1601.014288][T18940] XFS (loop7): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1601.260828][T12817] usbhid 1-1:0.0: can't add hid device: -71 [ 1601.294149][T12817] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1601.734578][T18994] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3046'. [ 1602.430725][T12817] usb 1-1: USB disconnect, device number 25 [ 1602.553182][T13396] XFS (loop7): Metadata CRC error detected at xfs_agf_read_verify+0x171/0x240, xfs_agf block 0x1 [ 1602.623478][T13396] XFS (loop7): Unmount and run xfs_repair [ 1602.645401][T13396] XFS (loop7): First 128 bytes of corrupted metadata buffer: [ 1602.665342][T18999] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1602.681406][T13396] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00 XAGF............ [ 1602.736873][T19006] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3051'. [ 1602.795133][T13396] 00000010: 00 00 00 01 00 00 00 02 00 00 00 04 00 00 00 01 ................ [ 1603.325294][T13396] 00000020: 00 00 00 01 00 00 00 01 00 00 00 01 00 00 00 06 ................ [ 1603.372425][T13396] 00000030: 00 00 00 06 00 00 0d cb 00 00 0d ca 00 00 00 00 ................ [ 1603.407881][T13396] 00000040: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab ..*.w.B.....G.K. [ 1603.427012][T13396] 00000050: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1603.456929][T13396] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1603.523931][T13396] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 1603.572706][T18940] XFS (loop7): metadata I/O error in "xfs_read_agf+0x2dc/0x630" at daddr 0x1 len 1 error 74 [ 1603.638686][T18940] XFS (loop7): Error -117 reserving per-AG metadata reserve pool. [ 1603.661292][T18940] XFS (loop7): Corruption of in-memory data (0x8) detected at xfs_fs_reserve_ag_blocks+0x1ec/0x280 (fs/xfs/xfs_fsops.c:557). Shutting down filesystem. [ 1603.741256][T18940] XFS (loop7): Please unmount the filesystem and rectify the problem(s) [ 1603.777951][T18940] XFS (loop7): Ending clean mount [ 1603.814386][T18940] XFS (loop7): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 1605.362238][T19042] fuse: Bad value for 'fd' [ 1605.377823][T19042] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1607.041690][T19053] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3059'. [ 1607.633242][ T9] kworker/0:1 (9) used greatest stack depth: 14032 bytes left [ 1608.659183][T19062] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 1608.979608][T19068] program syz.6.3062 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1608.989898][T19068] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1610.497482][ T2152] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1610.860665][T19090] loop0: detected capacity change from 0 to 32768 [ 1611.020495][ T2152] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1611.042067][ T2152] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1611.051935][ T2152] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.199108][T19090] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 1611.222831][T19090] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 1611.231194][T19090] bcachefs (loop0): Version upgrade required: [ 1611.231194][T19090] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 1611.231194][T19090] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 1611.231194][T19090] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1611.304955][T19090] bcachefs (loop0): dropping and reconstructing all alloc info [ 1611.336076][ T2152] usb 7-1: config 0 descriptor?? [ 1611.349789][T19090] bcachefs (loop0): accounting_read... [ 1611.357271][ T2152] pwc: Askey VC010 type 2 USB webcam detected. [ 1611.431340][T19090] done [ 1611.434248][T19090] bcachefs (loop0): alloc_read... done [ 1611.444512][T19090] bcachefs (loop0): stripes_read... done [ 1611.450378][T19090] bcachefs (loop0): snapshots_read... done [ 1611.457135][T19090] bcachefs (loop0): done starting filesystem [ 1611.688203][T12661] bcachefs (loop0): shutting down [ 1611.857170][T12661] bcachefs (loop0): shutdown complete [ 1611.889664][ T2152] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1611.900246][ T2152] pwc: recv_control_msg error -32 req 02 val 2700 [ 1611.915150][ T2152] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1611.946959][ T2152] pwc: recv_control_msg error -32 req 04 val 1000 [ 1611.988465][ T2152] pwc: recv_control_msg error -32 req 04 val 1300 [ 1612.048058][ T2152] pwc: recv_control_msg error -32 req 04 val 1400 [ 1612.075517][ T2152] pwc: recv_control_msg error -32 req 02 val 2000 [ 1612.105312][ T2152] pwc: recv_control_msg error -32 req 02 val 2100 [ 1612.115747][ T2152] pwc: recv_control_msg error -32 req 04 val 1500 [ 1612.128431][ T2152] pwc: recv_control_msg error -32 req 02 val 2500 [ 1612.334332][T19082] loop2: detected capacity change from 0 to 32768 [ 1612.360402][ T2152] pwc: recv_control_msg error -71 req 02 val 2600 [ 1612.453422][ T2152] pwc: recv_control_msg error -71 req 02 val 2900 [ 1612.622172][ T2152] pwc: recv_control_msg error -71 req 02 val 2800 [ 1612.741450][ T2152] pwc: recv_control_msg error -71 req 04 val 1100 [ 1612.748425][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.748503][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1612.834465][ T2152] pwc: recv_control_msg error -71 req 04 val 1200 [ 1613.020410][T19082] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop2": -EINTR [ 1613.046148][ T2152] pwc: Registered as video103. [ 1613.154118][ T2152] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input45 [ 1613.248403][ T2152] usb 7-1: USB disconnect, device number 23 [ 1616.767695][T12817] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1616.950155][T12817] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1616.988571][T12817] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1617.038088][T12817] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.096039][T12817] usb 7-1: config 0 descriptor?? [ 1617.130920][T12817] pwc: Askey VC010 type 2 USB webcam detected. [ 1617.551196][T12817] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1617.615853][T12817] pwc: recv_control_msg error -32 req 02 val 2700 [ 1617.704917][T12817] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1617.767266][T12817] pwc: recv_control_msg error -32 req 04 val 1000 [ 1617.902769][T12817] pwc: recv_control_msg error -32 req 04 val 1300 [ 1617.945016][T12817] pwc: recv_control_msg error -32 req 04 val 1400 [ 1617.969831][T12817] pwc: recv_control_msg error -32 req 02 val 2000 [ 1617.997548][T12817] pwc: recv_control_msg error -32 req 02 val 2100 [ 1618.022162][T12817] pwc: recv_control_msg error -32 req 04 val 1500 [ 1618.073998][T12817] pwc: recv_control_msg error -32 req 02 val 2500 [ 1618.290932][T12817] pwc: recv_control_msg error -71 req 02 val 2600 [ 1618.324712][T12817] pwc: recv_control_msg error -71 req 02 val 2900 [ 1618.345167][T12817] pwc: recv_control_msg error -71 req 02 val 2800 [ 1618.383833][T12817] pwc: recv_control_msg error -71 req 04 val 1100 [ 1618.419258][T12817] pwc: recv_control_msg error -71 req 04 val 1200 [ 1618.446663][T12817] pwc: Registered as video103. [ 1618.480404][T12817] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input46 [ 1618.564491][T12817] usb 7-1: USB disconnect, device number 24 [ 1621.380190][T19225] loop0: detected capacity change from 0 to 32768 [ 1621.398929][ T5879] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1621.611872][T19225] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=no,norecovery,recovery_pass_last=check_extents,nojournal_transaction_names,reconstruct_alloc,no_data_io [ 1621.637729][T19225] bcachefs (loop0): recovering from clean shutdown, journal seq 10 [ 1621.639786][ T5879] usb 3-1: Using ep0 maxpacket: 32 [ 1621.646019][T19225] bcachefs (loop0): Version upgrade required: [ 1621.646019][T19225] Version upgrade from 0.8: (unknown version) to 1.7: mi_btree_bitmap incomplete [ 1621.646019][T19225] Doing incompatible version upgrade from 0.8: (unknown version) to 1.20: directory_size [ 1621.646019][T19225] running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance [ 1621.727132][T19225] bcachefs (loop0): dropping and reconstructing all alloc info [ 1621.747109][T19225] bcachefs (loop0): accounting_read... [ 1621.757584][ T5879] usb 3-1: config 0 has an invalid interface number: 182 but max is 0 [ 1621.777798][T19225] done [ 1621.780662][T19225] bcachefs (loop0): alloc_read... done [ 1621.786216][T19225] bcachefs (loop0): stripes_read... done [ 1621.792514][T19225] bcachefs (loop0): snapshots_read... done [ 1621.803612][T19225] bcachefs (loop0): done starting filesystem [ 1621.848914][ T5879] usb 3-1: config 0 has no interface number 0 [ 1621.875867][ T5879] usb 3-1: config 0 interface 182 has no altsetting 0 [ 1621.901827][ T5879] usb 3-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa [ 1621.915363][T12661] bcachefs (loop0): shutting down [ 1621.959762][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1621.978344][T19159] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 1621.999274][ T5879] usb 3-1: Product: syz [ 1622.017878][ T5879] usb 3-1: Manufacturer: syz [ 1622.022553][ T5879] usb 3-1: SerialNumber: syz [ 1622.040842][T12661] bcachefs (loop0): shutdown complete [ 1622.065853][ T5879] usb 3-1: config 0 descriptor?? [ 1622.098550][ T5879] usb-storage 3-1:0.182: USB Mass Storage device detected [ 1622.173353][T19159] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1622.185102][ T5879] usb-storage 3-1:0.182: Quirks match for vid 07cf pid 1001: a [ 1622.208918][T19159] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1622.223516][T19159] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.241883][T19159] usb 8-1: config 0 descriptor?? [ 1622.254534][T19159] pwc: Askey VC010 type 2 USB webcam detected. [ 1622.344342][ T5879] usb 3-1: USB disconnect, device number 27 [ 1622.670436][T19159] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1622.689556][T19159] pwc: recv_control_msg error -32 req 02 val 2700 [ 1622.738578][T19159] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1622.759293][T19159] pwc: recv_control_msg error -32 req 04 val 1000 [ 1622.780178][T19159] pwc: recv_control_msg error -32 req 04 val 1300 [ 1622.798066][T19159] pwc: recv_control_msg error -32 req 04 val 1400 [ 1622.816069][T19159] pwc: recv_control_msg error -32 req 02 val 2000 [ 1622.906770][T19262] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3112'. [ 1623.066214][T19159] pwc: recv_control_msg error -71 req 04 val 1500 [ 1623.106050][T19159] pwc: recv_control_msg error -71 req 02 val 2500 [ 1623.141722][T19159] pwc: recv_control_msg error -71 req 02 val 2400 [ 1623.160210][T19159] pwc: recv_control_msg error -71 req 02 val 2600 [ 1623.188943][T19159] pwc: recv_control_msg error -71 req 02 val 2900 [ 1623.198280][T19159] pwc: recv_control_msg error -71 req 02 val 2800 [ 1623.216711][T19159] pwc: recv_control_msg error -71 req 04 val 1100 [ 1623.278916][T19159] pwc: recv_control_msg error -71 req 04 val 1200 [ 1623.300421][T19159] pwc: Registered as video103. [ 1623.329284][T19159] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input47 [ 1623.375971][T19159] usb 8-1: USB disconnect, device number 7 [ 1626.671482][T19314] dummy0: entered promiscuous mode [ 1626.678887][T19314] macsec1: entered allmulticast mode [ 1626.684484][T19314] dummy0: entered allmulticast mode [ 1627.100729][T19314] dummy0: left allmulticast mode [ 1627.105906][T19314] dummy0: left promiscuous mode [ 1627.280437][T19317] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3125'. [ 1627.820332][ T5837] Bluetooth: hci3: unexpected event for opcode 0x202f [ 1627.927521][T19247] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1628.113913][T19247] usb 8-1: Using ep0 maxpacket: 32 [ 1628.138809][T19247] usb 8-1: config 0 has an invalid interface number: 182 but max is 0 [ 1628.147042][T19247] usb 8-1: config 0 has no interface number 0 [ 1628.176682][T19247] usb 8-1: config 0 interface 182 has no altsetting 0 [ 1628.215755][T19247] usb 8-1: New USB device found, idVendor=07cf, idProduct=1001, bcdDevice=8d.fa [ 1628.267722][T19247] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.308741][T19247] usb 8-1: Product: syz [ 1628.312981][T19247] usb 8-1: Manufacturer: syz [ 1628.507577][T19247] usb 8-1: SerialNumber: syz [ 1628.570528][T19247] usb 8-1: config 0 descriptor?? [ 1628.629185][T19247] usb-storage 8-1:0.182: USB Mass Storage device detected [ 1628.640303][T19343] 9pnet_fd: Insufficient options for proto=fd [ 1628.713383][T19247] usb-storage 8-1:0.182: Quirks match for vid 07cf pid 1001: a [ 1628.988494][T19247] usb 8-1: USB disconnect, device number 8 [ 1629.433880][T19350] loop0: detected capacity change from 0 to 40427 [ 1629.475778][T19350] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 1629.485346][T19350] F2FS-fs (loop0): heap/no_heap options were deprecated [ 1629.497919][T19350] F2FS-fs (loop0): invalid crc value [ 1629.548532][T19350] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1629.630624][T19350] F2FS-fs (loop0): Start checkpoint disabled! [ 1629.658807][T19350] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1629.741624][T19350] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x1af/0xcf0 [ 1629.778815][ T29] audit: type=1804 audit(1739022477.279:59): pid=19350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3133" name="/newroot/344/file2/file0" dev="loop0" ino=17 res=1 errno=0 [ 1629.891714][ T29] audit: type=1804 audit(1739022477.299:60): pid=19350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3133" name="/newroot/344/file2/file0" dev="loop0" ino=17 res=1 errno=0 [ 1631.206220][T19368] dummy0: entered promiscuous mode [ 1631.211809][T19368] macsec1: entered allmulticast mode [ 1631.217138][T19368] dummy0: entered allmulticast mode [ 1631.282156][T19368] dummy0: left allmulticast mode [ 1631.287250][T19368] dummy0: left promiscuous mode [ 1631.442255][ T9448] kworker/u8:16: attempt to access beyond end of device [ 1631.442255][ T9448] loop0: rw=2049, sector=40960, nr_sectors = 32 limit=40427 [ 1631.525049][ T9448] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1631.578511][ T9448] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1631.671482][ T9448] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1631.748585][ T9448] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1635.386989][T19425] dummy0: entered promiscuous mode [ 1635.397611][T19425] macsec1: entered allmulticast mode [ 1635.403139][T19425] dummy0: entered allmulticast mode [ 1635.981245][T19425] dummy0: left allmulticast mode [ 1635.986398][T19425] dummy0: left promiscuous mode [ 1637.609702][T19453] 9pnet_fd: Insufficient options for proto=fd [ 1637.757829][T19159] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 1637.923383][T19159] usb 1-1: Using ep0 maxpacket: 32 [ 1637.955402][T19159] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 1637.997359][T19159] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1638.037259][T19159] usb 1-1: Product: syz [ 1638.046146][T19159] usb 1-1: Manufacturer: syz [ 1638.107207][T19159] usb 1-1: SerialNumber: syz [ 1638.131221][T19159] usb 1-1: config 0 descriptor?? [ 1638.389783][T19159] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 026 [ 1638.711177][T13396] usb 1-1: USB disconnect, device number 26 [ 1638.916974][T19481] dummy0: entered promiscuous mode [ 1638.924806][T19481] macsec1: entered allmulticast mode [ 1638.930360][T19481] dummy0: entered allmulticast mode [ 1639.180082][T19481] dummy0: left allmulticast mode [ 1639.186898][T19481] dummy0: left promiscuous mode [ 1640.061279][T19488] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 1640.248856][T19492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3171'. [ 1640.344726][T19494] 9pnet_fd: Insufficient options for proto=fd [ 1640.359075][T19492] nlmon0: Master is either lo or non-ether device [ 1640.524271][T19499] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3169'. [ 1642.148045][T19159] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1642.474363][T19159] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1642.509105][T19159] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1642.746895][T19159] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.268187][T19531] dummy0: entered promiscuous mode [ 1643.274795][T19531] macsec1: entered allmulticast mode [ 1643.280358][T19531] dummy0: entered allmulticast mode [ 1643.762294][T19159] usb 7-1: config 0 descriptor?? [ 1643.767149][T19531] dummy0: left allmulticast mode [ 1643.772712][T19531] dummy0: left promiscuous mode [ 1643.776063][T19159] pwc: Askey VC010 type 2 USB webcam detected. [ 1644.020934][T18853] Bluetooth: hci3: command tx timeout [ 1644.797058][T19159] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1644.849862][T19159] pwc: recv_control_msg error -32 req 02 val 2700 [ 1644.868854][T19159] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1644.898325][T19159] pwc: recv_control_msg error -32 req 04 val 1000 [ 1644.920980][T19159] pwc: recv_control_msg error -32 req 04 val 1300 [ 1644.960052][T19159] pwc: recv_control_msg error -32 req 04 val 1400 [ 1644.984788][T19159] pwc: recv_control_msg error -32 req 02 val 2000 [ 1645.011993][T19159] pwc: recv_control_msg error -32 req 02 val 2100 [ 1645.345728][T19159] pwc: recv_control_msg error -32 req 04 val 1500 [ 1646.476243][T19547] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3186'. [ 1646.890696][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3188'. [ 1646.923896][T19554] caif0: Master is either lo or non-ether device [ 1647.003438][T19159] pwc: recv_control_msg error -32 req 02 val 2500 [ 1647.027544][T19159] pwc: recv_control_msg error -71 req 02 val 2400 [ 1647.034828][T19159] pwc: recv_control_msg error -71 req 02 val 2600 [ 1647.104612][T19159] pwc: recv_control_msg error -71 req 02 val 2900 [ 1647.198412][T19159] pwc: recv_control_msg error -71 req 02 val 2800 [ 1647.216417][T19159] pwc: recv_control_msg error -71 req 04 val 1100 [ 1647.247200][T19159] pwc: recv_control_msg error -71 req 04 val 1200 [ 1647.324228][T19159] pwc: Registered as video103. [ 1647.341027][T19159] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input48 [ 1647.389100][T19560] 9pnet_fd: Insufficient options for proto=fd [ 1647.486044][T19159] usb 7-1: USB disconnect, device number 25 [ 1647.579109][T19565] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3192'. [ 1648.912887][T19584] dummy0: entered promiscuous mode [ 1648.918518][T19584] macsec1: entered allmulticast mode [ 1648.924054][T19584] dummy0: entered allmulticast mode [ 1649.438428][T19584] dummy0: left allmulticast mode [ 1649.443526][T19584] dummy0: left promiscuous mode [ 1650.896331][T19604] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1650.904453][T19604] IPv6: NLM_F_CREATE should be set when creating new route [ 1650.960062][ T2152] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 1651.245149][T19609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3200'. [ 1651.442615][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.612268][ T2152] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.739581][ T2152] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 1651.838610][ T2152] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1651.915729][ T2152] usb 1-1: config 0 descriptor?? [ 1652.040058][T19613] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3202'. [ 1652.049976][T19613] caif0: Master is either lo or non-ether device [ 1652.395720][ T2152] hid-thrustmaster 0003:044F:B65D.0016: unknown main item tag 0x0 [ 1652.450549][ T2152] hid-thrustmaster 0003:044F:B65D.0016: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.0-1/input0 [ 1652.487241][ T2152] hid-thrustmaster 0003:044F:B65D.0016: Wrong number of endpoints? [ 1653.206398][ C1] hid-thrustmaster 0003:044F:B65D.0016: URB to get model id failed with error -71 [ 1653.211186][T19247] usb 1-1: USB disconnect, device number 27 [ 1653.494722][T19633] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3207'. [ 1656.531260][T19665] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3215'. [ 1656.704666][T19670] 9pnet_fd: Insufficient options for proto=fd [ 1656.801661][T19672] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3219'. [ 1657.282748][T19681] team_slave_0: entered promiscuous mode [ 1657.289275][T19681] team_slave_1: entered promiscuous mode [ 1657.330712][T19681] macsec1: entered promiscuous mode [ 1657.361631][T19681] team0: entered promiscuous mode [ 1657.393538][T19681] macsec1: entered allmulticast mode [ 1657.424323][T19681] team0: entered allmulticast mode [ 1657.451092][T19681] team_slave_0: entered allmulticast mode [ 1657.501095][T19681] team_slave_1: entered allmulticast mode [ 1657.515333][T19681] team0: left allmulticast mode [ 1657.532526][T19681] team_slave_0: left allmulticast mode [ 1657.561458][T19681] team_slave_1: left allmulticast mode [ 1657.567124][T19681] team0: left promiscuous mode [ 1657.578258][T19681] team_slave_0: left promiscuous mode [ 1657.583791][T19681] team_slave_1: left promiscuous mode [ 1657.688667][T19692] program syz.7.3224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1657.747816][T19692] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 1659.591308][T19675] loop2: detected capacity change from 0 to 32768 [ 1659.966902][T19675] workqueue: Failed to create a rescuer kthread for wq "bcachefs": -EINTR [ 1659.967168][T19675] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete [ 1660.082171][T19675] bcachefs: bch2_fs_get_tree() error: ENOMEM_fs_other_alloc [ 1660.537593][T19721] netlink: 11 bytes leftover after parsing attributes in process `syz.0.3229'. [ 1661.569591][T19729] netlink: 76 bytes leftover after parsing attributes in process `syz.3.3233'. [ 1662.227519][ T5879] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1662.391099][T19739] loop0: detected capacity change from 0 to 40427 [ 1662.458012][T19739] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 1662.466639][T19739] F2FS-fs (loop0): heap/no_heap options were deprecated [ 1662.482182][T19739] F2FS-fs (loop0): invalid crc value [ 1662.539575][T19739] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1662.619706][T19739] F2FS-fs (loop0): Start checkpoint disabled! [ 1662.708838][T19739] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 1662.796128][ T5879] usb 3-1: Using ep0 maxpacket: 16 [ 1662.805429][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1662.834363][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1662.852937][ T5915] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 1662.866587][ T5879] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1662.961542][T19739] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_page of f2fs_new_node_page+0x1af/0xcf0 [ 1663.620173][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1663.629700][ T5879] usb 3-1: Product: syz [ 1663.633947][ T5879] usb 3-1: Manufacturer: syz [ 1663.638785][ T5879] usb 3-1: SerialNumber: syz [ 1663.926495][ T5879] usb 3-1: config 0 descriptor?? [ 1663.951235][ T5879] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1663.967566][ T5879] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1664.669973][ T5915] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1664.718930][ T5915] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1664.802504][ T11] kworker/u8:0: attempt to access beyond end of device [ 1664.802504][ T11] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1664.875424][ T5915] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1664.890190][ T5915] usb 7-1: config 0 descriptor?? [ 1664.906257][ T5915] pwc: Askey VC010 type 2 USB webcam detected. [ 1664.916808][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1664.943197][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1664.958993][ T11] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 1665.091807][ T5879] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1665.137115][T19764] netlink: 11 bytes leftover after parsing attributes in process `syz.7.3241'. [ 1665.193875][ T5879] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1665.627432][ T5915] pwc: send_video_command error -71 [ 1665.673845][ T5915] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 1665.891517][ T5915] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71 [ 1665.912863][ T5879] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1665.960945][ T5915] usb 7-1: USB disconnect, device number 26 [ 1665.968092][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1666.008646][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1666.041663][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1666.072639][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1666.097466][ T5879] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1666.399834][ T5879] usb 3-1: USB disconnect, device number 28 [ 1667.789083][T19790] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3247'. [ 1669.950509][T19816] netlink: 11 bytes leftover after parsing attributes in process `syz.6.3253'. [ 1670.795952][T19824] loop0: detected capacity change from 0 to 16 [ 1670.879500][T19824] erofs (device loop0): mounted with root inode @ nid 36. [ 1672.159853][T19839] netlink: 76 bytes leftover after parsing attributes in process `syz.6.3259'. [ 1674.201592][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1674.208224][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1674.703653][T19868] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN PTI [ 1674.716322][T19868] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 1674.724949][T19868] CPU: 1 UID: 0 PID: 19868 Comm: syz.3.3267 Not tainted 6.14.0-rc1-next-20250207-syzkaller #0 [ 1674.735227][T19868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1674.745325][T19868] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 1674.751267][T19868] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 0b c6 e4 ff 48 8b 1b 31 ff [ 1674.770918][T19868] RSP: 0018:ffffc9000ba17958 EFLAGS: 00010206 [ 1674.777032][T19868] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 1674.785048][T19868] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88806273a390 [ 1674.793058][T19868] RBP: 0000000000000000 R08: ffffffff8ea81da7 R09: 1ffffffff1d503b4 [ 1674.801069][T19868] R10: dffffc0000000000 R11: fffffbfff1d503b5 R12: ffff88806273a380 [ 1674.809081][T19868] R13: ffff88806273a3a0 R14: 1ffff1100f9c6a80 R15: ffff88807ce35400 [ 1674.817086][T19868] FS: 00007f437066d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1674.826030][T19868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1674.832631][T19868] CR2: 0000400000001000 CR3: 000000004a6dc000 CR4: 00000000003526f0 [ 1674.840711][T19868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1674.848708][T19868] DR3: 0000000000008044 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1674.856772][T19868] Call Trace: [ 1674.860057][T19868] [ 1674.863021][T19868] ? __die_body+0x5f/0xb0 [ 1674.867379][T19868] ? die_addr+0xb0/0xe0 [ 1674.871563][T19868] ? exc_general_protection+0x3dd/0x5d0 [ 1674.877169][T19868] ? asm_exc_general_protection+0x26/0x30 [ 1674.882951][T19868] ? clone_private_mount+0x184/0x3e0 [ 1674.888250][T19868] ? clone_private_mount+0x83/0x3e0 [ 1674.893459][T19868] ? _raw_spin_unlock+0x28/0x50 [ 1674.898324][T19868] ovl_fill_super+0xe4c/0x3560 [ 1674.903103][T19868] ? shrinker_register+0x118/0x230 [ 1674.908233][T19868] ? __pfx_lock_release+0x10/0x10 [ 1674.913283][T19868] ? __pfx_ovl_fill_super+0x10/0x10 [ 1674.918491][T19868] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 1674.924313][T19868] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1674.930330][T19868] ? sget_fc+0x909/0x9c0 [ 1674.934589][T19868] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1674.940062][T19868] ? __pfx_ovl_fill_super+0x10/0x10 [ 1674.945272][T19868] get_tree_nodev+0xb7/0x140 [ 1674.949880][T19868] vfs_get_tree+0x90/0x2b0 [ 1674.954338][T19868] do_new_mount+0x2be/0xb40 [ 1674.958857][T19868] ? __pfx_do_new_mount+0x10/0x10 [ 1674.963897][T19868] __se_sys_mount+0x2d6/0x3c0 [ 1674.968594][T19868] ? __pfx___se_sys_mount+0x10/0x10 [ 1674.973804][T19868] ? do_syscall_64+0x100/0x230 [ 1674.978583][T19868] ? __x64_sys_mount+0x20/0xc0 [ 1674.983355][T19868] do_syscall_64+0xf3/0x230 [ 1674.987875][T19868] ? clear_bhb_loop+0x35/0x90 [ 1674.992627][T19868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1674.998541][T19868] RIP: 0033:0x7f436f78cde9 [ 1675.002968][T19868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1675.022586][T19868] RSP: 002b:00007f437066d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1675.031011][T19868] RAX: ffffffffffffffda RBX: 00007f436f9a5fa0 RCX: 00007f436f78cde9 [ 1675.038990][T19868] RDX: 0000400000000080 RSI: 00004000000000c0 RDI: 0000000000000000 [ 1675.046966][T19868] RBP: 00007f436f80e2a0 R08: 0000400000000a00 R09: 0000000000000000 [ 1675.054953][T19868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1675.062931][T19868] R13: 0000000000000000 R14: 00007f436f9a5fa0 R15: 00007ffc9f999418 [ 1675.070944][T19868] [ 1675.073970][T19868] Modules linked in: [ 1675.079674][T19868] ---[ end trace 0000000000000000 ]--- [ 1675.162694][T19868] RIP: 0010:clone_private_mount+0x184/0x3e0 [ 1675.189292][T19868] Code: 89 d8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc 48 83 c3 48 48 89 d8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 4d 89 fc 74 08 48 89 df e8 0b c6 e4 ff 48 8b 1b 31 ff [ 1675.213242][T19868] RSP: 0018:ffffc9000ba17958 EFLAGS: 00010206 [ 1675.220016][T19868] RAX: 0000000000000009 RBX: 0000000000000048 RCX: dffffc0000000000 [ 1675.229971][T19868] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88806273a390 [ 1675.238570][T19868] RBP: 0000000000000000 R08: ffffffff8ea81da7 R09: 1ffffffff1d503b4 [ 1675.246723][T19868] R10: dffffc0000000000 R11: fffffbfff1d503b5 R12: ffff88806273a380 [ 1675.260212][T19868] R13: ffff88806273a3a0 R14: 1ffff1100f9c6a80 R15: ffff88807ce35400 [ 1675.270209][T19868] FS: 00007f437066d6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1675.284583][T19868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1675.296930][T19868] CR2: 0000559e1a8ab950 CR3: 000000004a6dc000 CR4: 00000000003526f0 [ 1675.309232][T19868] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1675.323775][T19868] DR3: 0000000000008044 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1675.334645][T19868] Kernel panic - not syncing: Fatal exception [ 1675.341047][T19868] Kernel Offset: disabled [ 1675.345380][T19868] Rebooting in 86400 seconds..