last executing test programs: 8m38.630892634s ago: executing program 32 (id=165): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000060400000000000000000000010500000008000000000000000000000300000000010000000200000004000000000000000000000b"], 0x0, 0x5a}, 0x28) socket$inet6_udp(0xa, 0x2, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/mnt\x00') recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xb8}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x800, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b7"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x3e8, 0xe, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68888a8", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 8m11.803461754s ago: executing program 1 (id=384): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000007044f16c01b1fbfd000000000000008af65f0df9928941994cc8c173fac5688671085a86d143c59fed0e57feb97f422c51d8e63b4ed9e295df3ccd1a55752dfc2f32f14b6c8f0e7413c3e9caaad30dcb412d0f54623f388bb2c63d2b1f7d83cd0cc021867bb4aee9967a6ee83e1b18fd8beca7d7eddcd96634"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x80) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000002c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1a, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0x4}, 0x80) 8m11.530857455s ago: executing program 1 (id=387): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'bond0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="400000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000001200002000128008000100687372001400028008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r0], 0x40}, 0x1, 0x0, 0x0, 0x40010}, 0x4008044) 8m11.209444313s ago: executing program 1 (id=390): bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000e00000000400000002"], 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x10) 8m10.219176333s ago: executing program 1 (id=394): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tkill(r0, 0x13) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0xe, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfa11, 0xfeffffff}, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) 8m9.384230616s ago: executing program 1 (id=401): lseek(0xffffffffffffffff, 0x7, 0x4) bind$inet(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1b}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r1, r0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000740)=ANY=[], 0x0) 8m7.894473188s ago: executing program 1 (id=407): socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x10) 8m7.150563401s ago: executing program 33 (id=407): socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create1(0x80000) syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000380)={0x6, 0x2000027, 0x20000000, 0x1}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x10) 7m33.013926246s ago: executing program 0 (id=622): r0 = socket$inet(0x2, 0x2, 0x1) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000040)={r4, 0x1}, &(0x7f00000000c0)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r7, 0x0, &(0x7f00002ce000/0x1000)=nil, 0x1000, 0x1020800}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000000)=0xfffffffc, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @rand_addr=0x64010100}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) ioctl$BTRFS_IOC_GET_DEV_STATS(r8, 0xc4089434, &(0x7f00000004c0)={0x0, 0xf, 0x0, [0x8000000000000000, 0x7, 0x40, 0xffff, 0x6], [0x51, 0x2, 0x9, 0x9, 0x80000000, 0x1, 0xf0, 0x400, 0x10, 0x8000000000000000, 0xe2f, 0x7ff, 0xb7f8, 0xffffffff, 0xae9912d, 0x5c7ea413, 0x7, 0xb, 0x2, 0x8001, 0x76, 0xffffffffffffffc0, 0x4, 0x9, 0xb, 0x3, 0x456, 0x5, 0x0, 0x9, 0x1, 0x7fffffffffffffff, 0x0, 0x4, 0xffffffffffffffff, 0x8, 0x9, 0x2, 0x0, 0x8000000000000000, 0x3, 0xc0f7, 0xd41, 0x556a652b, 0x6, 0x7, 0x9, 0x1, 0x2, 0x4, 0x2, 0xffffffff, 0x9, 0x95, 0x6861, 0x1ff, 0x0, 0x7, 0x2, 0x5, 0xd3, 0x400, 0x7f0, 0x6, 0x9, 0xe3, 0x0, 0x2, 0xfffffffffffffff7, 0x9, 0x5, 0x8000000000000001, 0x3, 0xe, 0x8001, 0x3, 0x1ff, 0x4, 0x3, 0x5, 0x200, 0xfffffffffffffff4, 0x59, 0x3, 0x8, 0xfffffffffffffffe, 0x7, 0x1, 0xc, 0x1ff, 0x7, 0x8000, 0x9, 0x7, 0x0, 0x7ff1, 0x101, 0x6, 0x1, 0xffffffffffffff80, 0x4, 0x800000000000, 0x1, 0x8, 0x28c, 0x55, 0x8000000000000000, 0x4, 0x3bd850de, 0x9, 0x8, 0x1, 0x12d, 0x1, 0x80000000, 0xc5, 0xffffffff7fffffff, 0x8001, 0x8, 0x8, 0x4b6]}) syz_clone3(&(0x7f000000dd80)={0xa00400, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xfffffffffffffff7]}, 0x8, 0x0) 7m31.812017014s ago: executing program 0 (id=627): syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0xca200) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000001e40)={0xfff9, {"0d06d96fff2900", "3dfa7700", "0000ff4a70f300"}, 0x4000c, 0x2}) 7m31.486407066s ago: executing program 0 (id=631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 7m30.388878744s ago: executing program 0 (id=639): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tkill(r0, 0x13) waitid(0x1, r0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0xe, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfa11, 0xfeffffff}, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) 7m28.820775038s ago: executing program 0 (id=645): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20040051) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0x279}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2217, 0x7721, 0x16, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) 7m27.826065277s ago: executing program 0 (id=657): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tkill(r0, 0x13) waitid(0x1, r0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0xe, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfa11, 0xfeffffff}, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) 7m26.091552209s ago: executing program 34 (id=657): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noload}, {@stripe={'stripe', 0x3d, 0x30c}}, {@jqfmt_vfsv1}, {@nojournal_checksum}, {@jqfmt_vfsv1}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000080)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) tkill(r0, 0x13) waitid(0x1, r0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0xe, 0x3, 0x0, 0x9, 0x1, 0x9, 0xfa11, 0xfeffffff}, 0x0) waitid(0x0, r0, 0x0, 0x2, 0x0) 5m40.308425677s ago: executing program 4 (id=1333): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) close(r1) setxattr$trusted_overlay_nlink(&(0x7f0000000200)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x1) 5m40.044346589s ago: executing program 4 (id=1336): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5m38.818655991s ago: executing program 4 (id=1344): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, 0x1403, 0x1, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x8000) 5m37.726976738s ago: executing program 4 (id=1351): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x110) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 5m37.269480709s ago: executing program 4 (id=1356): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000007111ae00000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 5m36.926243917s ago: executing program 4 (id=1360): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, {0x42}, 0x1}) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) 5m35.689617533s ago: executing program 35 (id=1360): syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, {0x42}, 0x1}) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000480)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x428, 0x428, 0x428, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x3}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x729) 1m4.509636348s ago: executing program 9 (id=2965): r0 = socket(0xa, 0x1, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x80, 0x0, 0x227}, &(0x7f0000000180), &(0x7f0000000140), &(0x7f0000000280)) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}, 0xff7ffffd}}, {{0xa, 0x4e08, 0x4a3, @local, 0x9}}}, 0x108) socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000700)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03R\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\xe7\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xd4\xdc\xe6*\x9c\xfdV\x82\x05', 0x2) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x1, 0x0, 0x2000}) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x49084}, 0x4) writev(0xffffffffffffffff, &(0x7f0000000840), 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0) r3 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000040)={0x9, @raw_data="1f2047bf58d80ac5e0334aca89d688ac4f264cd585cca15d4a286134dde88a1fed7b2a0e0a2b98536d288eb3a6f5a392f6e054f2f277f7f49f7e117fbd4bd22af3d2f07f6753671ba0e7969cfc0fdbea9090c808ffb463ceb59a26db1b58d5aafac4f480dd3c9f46c0c2bd6a623aed6ef3ab2f24da84c5c34fdd07685165dd1ce1218f0e607a8fcb9bbb3f045591fcea7932f7bcb0d100155ff8621ab1b74db23cb76f283690bcff898f678ccdbe1474b0d9af0c6ba784bf90ca0c8d2521879cefad94607d6b505a"}) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1000, 0x1800, 0x6, 0x2}, 0x20) socket$nl_rdma(0x10, 0x3, 0x14) setns(0xc9, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$smc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100917b7000fbdbdf25030000000900010073797a3100000000"], 0x20}, 0x1, 0x0, 0x0, 0x20004081}, 0x20000000) 1m4.163240795s ago: executing program 9 (id=2969): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) recvmmsg(r1, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/255, 0xff}], 0x1}, 0x32}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001000)=""/171, 0xab}], 0x1}}], 0x2, 0x40010000, 0x0) 1m3.639206944s ago: executing program 9 (id=2971): r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1) r2 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1) keyctl$clear(0x7, r2) 1m3.427322032s ago: executing program 9 (id=2974): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="800100001000130700000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000ffff0000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d432000000fc02000000000000000000000000000002000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000a000400500000000000000048000200656362286369706865725f6e756c6c290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000048000100"], 0x180}, 0x1, 0x0, 0x0, 0x40}, 0x40082) 1m2.948800777s ago: executing program 9 (id=2976): r0 = socket(0x10, 0x803, 0x0) pipe2(&(0x7f0000000100), 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x20000, {0xa, 0x40, 0x22, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x17}}]}, 0x2c}}, 0x0) 1m2.621945578s ago: executing program 9 (id=2980): creat(&(0x7f0000000400)='./file0\x00', 0x128) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001280)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) 47.325565698s ago: executing program 36 (id=2980): creat(&(0x7f0000000400)='./file0\x00', 0x128) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x8fd2b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000001280)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) mount(&(0x7f0000000200)=@filename='mtd0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='jffs2\x00', 0x800000, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(0xffffffffffffffff, 0x3b87, 0x0) 20.00745521s ago: executing program 6 (id=3205): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) r1 = eventfd2(0xfffffffd, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1}) writev(r1, &(0x7f0000000340)=[{&(0x7f0000000100)="569534ab1bbe0e03", 0x8}], 0x1) 18.908908707s ago: executing program 3 (id=3216): timer_create(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$vsock_stream(0x28, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) syz_emit_ethernet(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={[{@test_dummy_encryption}, {@nogrpid}]}, 0xfd, 0x4b2, &(0x7f0000000e40)="$eJzs3M1rHOUfAPDvbDZJ35Nff/WltdpoFYsvSZNWLShUBcGDgqCHepKYpKU2baSJ0JZgo5R6EbTgXQQvon+BJ0+ingSvepdC0VxaPa1MZma7SXe3ed+8fD4w2Xl2npnn+c4zL8/M7CSATasn/ZNE7IiI3yOiKyJKtRm2ZkOa79b05NA/05NDSVQqb/6VpLPFzenJoSJrkn9uzxLldEGlK0m8WKfc8YuXzgyOjo6cz9N9E2ff7xu/eOnp02cHT42cGjk3cOzY0SP9zz078MyyxJnW6ea+D8f273317WuvD5249u7P3yUR24rptXEs0fNd1dHJ6jqZ67FlKmyt2FkznpRbWBEWpDMi0uZqn9n/u6Ltyq7qtK545eOWVg5YUZVKpTLQePJUBdjAkljMXG35sQNYv4oTfXr9Wwyr1PVYE268lF0ApXHfyodsSjm7D9KZXRvtXKHyeyLixNS/X6ZDLPg+RPsK1QoA2Mh+SPs/T9Xp/5Uj7s2y/H08Inblz4a6I+J/EbE7Iv4fEXsi4p7I8t4XEffXL6bnnQbl98xJ39n/KV1faozNpP2/F/JnW7P7f9WnYN1teWrnTPztycnToyOH83VyKNo703R/3aUnEVPp52+fNSq/tv+XDmn5RV8wr8f1cufseYYHJwaXHHjuxkcR+8r14k+ifDuK2BsR+xZZxuknvtk/+5u26tjd429iGZ4zVb6KeDxr/6mYE38haf58sm9LjI4c7iu2iojpOWX88uvVNxqVn8Vfiubxb116oA2k7b+t3vZ/vBp/d1L7vHb8jkV03K2Mq3980vCaZrHbf0fy1qzCLwxOTJzvj+hIXrvz+5ob3EX6wvC3M/nT+A8drL//787nSeN/ICLSjfjBiHgoIg7kdX84Ih6JiINN4v/p5Uffaxj/gflv/1PZx7I+XU3jH657/GvU/gsY2ZIv4cyP3zeMv2j/osHqtv/RIjFTqfkc/+Zb08WsMwAAAFhvShGxI5JSb3W8VOrtzX4vvye2lUbHxieePDn2wbnh7B2B7mgvFXe6umruh/bn94aL9ECevpynj+T3jb9o2zqT7h0aGx1udfCwyW1vsP+n/mxrde2AFVee+5papatVVQFWmfc1YfNa/P7vyAHr3V324tJq1QNYfc7isHnV2/8v1yaSyH4lD2w4zv+weVX3/8/nkbnmda+5L28C60+z87+fAsDGpv8Pm9Ki3utfSyPxdUTzPMlaqeqCRj5dyuzllapY5+1votTC9dPRkkYZaIto4SZRnu9/tYiLlctLLrTVRyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDl8V8AAAD//3Y422k=") syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, 0x0, 0x4001) syz_mount_image$ext4(&(0x7f00000009c0)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x800718, &(0x7f0000000880)={[{@nodioread_nolock}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@norecovery}, {@resgid}, {@acl}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x401}}]}, 0x0, 0x4b1, &(0x7f00000003c0)="$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") write$bt_hci(0xffffffffffffffff, 0x0, 0x6) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x2, 0x4, 0x10001, 0xfff, r0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0x2, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000005"], 0x0, 0x45}, 0x28) setsockopt$inet_mreqn(r4, 0x0, 0x27, 0x0, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e0000001ac1414aa0000000003"], 0x1c) setsockopt$inet_mreqn(r4, 0x0, 0x25, &(0x7f0000000080)={@multicast1, @local}, 0xc) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010a00"], 0x20}, 0x1, 0x0, 0x0, 0x20040041}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000010000104fcffffff8000000000000000", @ANYRES32=0x0, @ANYBLOB="0344020000000000140012800b0001006d616373beb583e507f377169d665ed230fca1650004000280080005000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) 14.636675528s ago: executing program 3 (id=3220): r0 = socket$rxrpc(0x21, 0x2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x2327, @empty}}, 0x24) listen(r0, 0x5) recvmsg(r0, 0x0, 0x0) 14.260368443s ago: executing program 3 (id=3224): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000400)="06f7c456", 0x4}, {&(0x7f0000000440)="1a53b960f237163b83f521b433ee2c217e644d8a45df0f7a295943137f14f641d312e2ccf95abee62bc1e3a7a97ffacc60f6fd0bcb8b0a8b68", 0x39}, {&(0x7f0000000840)="1f075b160317d9868596561002abb52a5823c7a2cc8e22e70a8f070593a7e2e2197611aa65f8cceea80c5fb4ba30652e0d2ab29d50b8a55c862e0a5ca71672203f7955971a7f60501a48f8e57454db30a6cd73bf31b3f538feca7116e378fdbdfe7ee184670b0a57c5b4d94bb9529da61193e955f1103be70d51520103ccf3051238d259ed5aafd0aa43ef703352cdd0c142aa6be022124ff1daf3b9ab8427", 0x9f}], 0x3, 0x0, 0x0, 0x20000015}], 0x1, 0x4040800) recvmmsg(r1, &(0x7f00000075c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000280)=""/255, 0xff}], 0x1}, 0x32}, {{0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001000)=""/171, 0xab}], 0x1}}], 0x2, 0x40010000, 0x0) 12.282099258s ago: executing program 3 (id=3228): openat$cuse(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x2}}, 0x2e) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 11.905537778s ago: executing program 3 (id=3229): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/sys/net/ipv4/ping_group_range\x00', 0x2, 0x0) write(r0, &(0x7f0000000280)="97", 0x1) 11.686791121s ago: executing program 6 (id=3231): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[], 0x2, 0x5524, &(0x7f00000108c0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000080)={'ip_vti0\x00', 0x0, 0x20, 0x20, 0x3, 0x1, {{0x1f, 0x4, 0x1, 0x3a, 0x7c, 0x68, 0x0, 0x3, 0x29, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x44, 0x8e, 0x1, 0x4, [{@rand_addr=0x64010100, 0x7}, {@loopback, 0x7ff}, {@rand_addr=0x64010102, 0x8}, {@local, 0x6}, {@local, 0x4}, {@empty, 0xdb6c}, {@rand_addr=0x64010100, 0x10001}, {@empty, 0x5e34996d}]}, @timestamp_addr={0x44, 0x24, 0x22, 0x1, 0x0, [{@multicast2, 0x21}, {@empty, 0x3}, {@rand_addr=0x64010101, 0xffff7236}, {@empty, 0x3}]}]}}}}}) newfstatat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', &(0x7f0000001280)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001300)={{{@in=@empty, @in6=@loopback, 0x4e20, 0x5, 0x2, 0x5, 0xa, 0xa0, 0xa0, 0x21, r1, r2}, {0x4, 0x2, 0x2, 0x1bd, 0x6, 0x1, 0x6, 0x4}, {0x800, 0x8000, 0xf000000000000000, 0x800}, 0x6, 0x6e6bb6, 0x1, 0x1, 0x3, 0x1}, {{@in6=@loopback, 0x4d5, 0xff}, 0xa, @in6=@mcast1, 0x3506, 0x0, 0x0, 0x80, 0x7, 0x100, 0x200}}, 0xe8) 11.59321352s ago: executing program 3 (id=3232): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ed56b6c5", 0x4) r3 = accept4(r2, 0x0, 0x0, 0x80000) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000740)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r4, @ANYBLOB="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"], 0x1d8}, 0x1, 0x0, 0x0, 0x24008885}, 0x0) 8.01221225s ago: executing program 7 (id=3239): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x2cc}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000010000/0x1000)=nil, 0x1000}, 0x1}) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/110, 0x6e}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee5, 0x8031, 0xffffffffffffffff, 0x2000) 7.905395413s ago: executing program 2 (id=3241): openat$cuse(0xffffffffffffff9c, &(0x7f0000000f40), 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e24, @remote}, 0x2}}, 0x2e) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 7.765487189s ago: executing program 6 (id=3242): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='ns\x00') fchdir(r0) exit(0x200020000ffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x40802, 0xa0) 7.622449404s ago: executing program 5 (id=3243): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1082100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f00000005c0)=ANY=[@ANYBLOB="86b18e730b837b45b10496270b25db25efab17ba19b68a2353abb7dc35f7f35763a2f2a03b5f8d23610ee8e01970304cc1388f0398771cadddeed112ad8a31e8a225749160257c75b858e7fded6257b35a3b8f6a49431aec71265b51759a5d0103d2795034c503c3af1e8357da26fde14bb2625fa96f9af3f3a838f7235865ffda175c"]) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x60000000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$AUDIT_USER_AVC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x453, 0x800, 0x70bd2b, 0x25dfdbff}, 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 7.581556358s ago: executing program 2 (id=3244): syz_mount_image$ext4(&(0x7f0000000380)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x4004, &(0x7f00000002c0), 0x2, 0xbdb, &(0x7f0000002340)="$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") 7.55719752s ago: executing program 8 (id=3245): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x36, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x61, 0x39, 0x65, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000480)={0x1, 0x0, @d}, 0x18, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 7.205507629s ago: executing program 8 (id=3246): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r4, &(0x7f0000000140)="9c91d7798c7f1b4ca046b42f0c3d", 0xe, 0x811, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 6.757116925s ago: executing program 2 (id=3247): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0x1, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x20) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0) 6.698367932s ago: executing program 6 (id=3248): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f0000006a80)="$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") r0 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f) write$FUSE_CREATE_OPEN(r0, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200006, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x1000000a, 0x6, 0xfff, 0xa000, 0x8, 0xee00, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0) sendfile(r0, r0, &(0x7f0000000100)=0x4, 0x8112) 6.26460498s ago: executing program 8 (id=3249): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000001ec0)={0x2020}, 0x2020) preadv(r0, &(0x7f0000001e80)=[{&(0x7f0000000080)=""/4089, 0xff9}], 0x1, 0x33, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4c0000001300050004000000000000000000000063bfa33cb3be3c2866bbd4188c59a09f6b13ff66f7ed19915aa85831a14f8e64dc46ac34029c82b5b44957c35f63a359fbe5c0cd913389830921e090243aab8fe1735b19744b91175e0920", @ANYRES32=0x0, @ANYBLOB="00000000010604000c002b8008000300000000001400030076657468305f766c616e0000000000000a000100aaaaaaaaaaaa00"], 0x4c}}, 0x48000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f00000000c0)={[{@test_dummy_encryption}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4}}, {@norecovery}]}, 0x3, 0x481, &(0x7f00000004c0)="$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") syz_open_dev$vcsn(0x0, 0x3, 0x40d00) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) dup3(r2, 0xffffffffffffffff, 0x80000) mount$overlay(0x0, 0x0, &(0x7f0000000b80), 0x8, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f0000000580)={0x26, {{0x2, 0x4e21, @empty=0xe0009eff}}, {{0x2, 0x4e24, @remote}}}, 0x108) close(r4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r5, 0x2400000) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e2']) 5.909284422s ago: executing program 5 (id=3250): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$nl_xfrm(r1, 0x0, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 5.843933378s ago: executing program 2 (id=3251): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) dup(r0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) userfaultfd(0x801) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103902) pipe(&(0x7f00000001c0)) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0x8001, 0x10e, 0x2, 0xff, 0x3}}) 5.592302054s ago: executing program 7 (id=3252): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001840)=@newtaction={0x48, 0x30, 0x12f, 0x0, 0x0, {}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x48}}, 0x0) 5.584131312s ago: executing program 5 (id=3253): r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_NET_GET(r0, &(0x7f0000002680)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002640)={&(0x7f0000001300)=ANY=[], 0x131c}, 0x1, 0x0, 0x0, 0x80}, 0x8000) 5.473961121s ago: executing program 2 (id=3254): syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x7fd, 0x4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x44, 0x10, 0x1, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x37}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x9, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x6, 0x49, 0x9, {0xa, 0x25, 0x25, 0x8, 0x6, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0x6, 0xa, 0x0, {0xa, 0x25, 0x25, 0xc9c, 0x0, 0x9}}}}}}}}]}}, 0x0) 5.279356876s ago: executing program 5 (id=3255): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) r0 = userfaultfd(0x1) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x641}) add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffb) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)={0x2, 0x8, 0x54, 0x9, 0xa, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e24, 0x5, @mcast2, 0x1ff}, @in6={0xa, 0x4e23, 0x7, @empty, 0x7fff}}]}, 0x50}}, 0x20000000) syz_clone3(&(0x7f00000003c0)={0x20020080, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000364000/0x1000)=nil, 0x400000, 0x2, 0x2}) mprotect(&(0x7f0000a10000/0x1000)=nil, 0x1000, 0x4) 5.159454864s ago: executing program 7 (id=3256): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000700)=ANY=[@ANYBLOB="180200000300000000000000000000008500000022000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0xd, 0x0, &(0x7f0000000280)="e0400000000d85ff9782762f88", 0x0, 0xadca, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 3.036471093s ago: executing program 7 (id=3257): r0 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x36, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x64, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x23}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) r1 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f00000005c0)={'fscrypt:', @auto=[0x37, 0x36, 0x31, 0x37, 0x66, 0x36, 0x30, 0x61, 0x122e50c9cecbd0b3, 0x61, 0x39, 0x65, 0x66, 0x30, 0x65, 0x36]}, &(0x7f0000000780)={0x0, "1b699af42db82c6710f15d09fa0ede2b461f72d024151675e76fedfc6ce85406fac0c4833efb1d72293c4e60c0cadb646c435e077ecbb2e7968117a70a9a1090", 0x2d}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x33, 0x39, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x62]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x62, 0x66, 0x30, 0x30, 0x30, 0x63, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x41}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x64, 0x33]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x3}, 0x0, 0x0, r0) add_key$fscrypt_provisioning(&(0x7f0000000180), &(0x7f00000002c0)={'syz', 0x0}, &(0x7f0000000480)={0x1, 0x0, @d}, 0x18, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) keyctl$unlink(0x9, r1, r0) 2.838796421s ago: executing program 8 (id=3258): bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00'}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r3, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x14) 2.834077371s ago: executing program 7 (id=3259): syz_usb_connect(0x1, 0x498, &(0x7f0000000740)=ANY=[@ANYBLOB="120100025db8cc080304e9ee9bc301020301090286040101f420150904cc070e252bf8060a24060001a9eb9ef97f05240009000d240f01000400000a0000000406241a750002052415000008241c02000209000424020c09050d0cbf03ff087c04032c630905010fff030901802f10d2011a28bb34953804af150a55bc791e9dc8127cf3fec4a03c852d9038a8f440902b29da3a05eb9a31df71da0e07250104080200090502"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) socket$inet6_tcp(0xa, 0x1, 0x0) 2.778940715s ago: executing program 5 (id=3260): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019440)=""/102400, 0x19000) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f00000001c0)=ANY=[], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0) r4 = socket(0x11, 0xa, 0x5) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendto$inet(r4, &(0x7f0000000140)="9c91d7798c7f1b4ca046b42f0c3d", 0xe, 0x811, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 1.202772829s ago: executing program 2 (id=3261): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300100000000000fbdbdf2500000000000000000000000000000001ac1414bb00000000000000000000000000000004000000000a0060"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x50) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1082100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x74, r4, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x401}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x17}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$afs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f00000002c0), 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mount$afs(0x0, &(0x7f000009df40)='.\x00', &(0x7f000009df80), 0x14000, &(0x7f00000005c0)=ANY=[@ANYBLOB="86b18e730b837b45b10496270b25db25efab17ba19b68a2353abb7dc35f7f35763a2f2a03b5f8d23610ee8e01970304cc1388f0398771cadddeed112ad8a31e8a225749160257c75b858e7fded6257b35a3b8f6a49431aec71265b51759a5d0103d2795034c503c3af1e8357da26fde14bb2625fa96f9af3f3a838f7235865ffda175c"]) r5 = syz_open_dev$sg(&(0x7f00000002c0), 0xe6, 0x2602) ioctl$SG_SET_RESERVED_SIZE(r5, 0x2275, &(0x7f0000000000)=0x8) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989}) setrlimit(0x40000000000008, &(0x7f0000000000)) socket$inet_smc(0x2b, 0x1, 0x0) unshare(0x60000000) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(camellia-generic)\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x80000) sendmsg$AUDIT_USER_AVC(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x453, 0x800, 0x70bd2b, 0x25dfdbff}, 0x20000}, 0x1, 0x0, 0x0, 0x8000}, 0x20000080) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r8 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r8, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 976.246109ms ago: executing program 6 (id=3262): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrusage(0x1, &(0x7f0000000600)) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0) ioctl$TCSBRKP(r3, 0x5425, 0x20) syz_emit_ethernet(0x56, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea0900001f0000000100000500000000000000000000ff020000000000220000000000000001e80031d011d87a694fbbe78dd859b2ee0139ec45dec850a230b1fcf734e1b720b6efde4d2749a21842a1c1a6ccec0bd9fd8766432494e4f3a71ed33c6ac3190fd5ba57e25064397f621b5ef055a9e57b2c4de30081a9dc086a46160495f1ac00b8c5adca1d3f9bb6ea35e929f045687e6530299c991a2fa043c33c58f06122eb57940c8a24d0536a4cb4c02df9273c651b34ef393daf3f09622097097bac75ee83d706209079f2cd84c8794ec3cacee3daf28da4914678f39bdd70f3f4a9324efee92c15d9061441134e95cc758bc0e6bb7a7fa877dd8161"], 0x0) 935.461108ms ago: executing program 7 (id=3263): sched_setaffinity(0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x8000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) write(r0, &(0x7f00000001c0)="6f66660a000329", 0x7) write(r0, &(0x7f0000000180)='on', 0x2) 801.118063ms ago: executing program 8 (id=3264): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060", @ANYRESOCT], 0xb8}}, 0x20040014) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b40000001300000200000000fbdbdf257f000001000000000000000000000000fe8000000400000000000000000000aa00000004000000000a006080"], 0xb4}, 0x1, 0x0, 0x0, 0x80}, 0x4051) sendmsg$nl_xfrm(r1, 0x0, 0x20004000) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000020000000000fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80c0}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001300e9990500000000000000fc000000000000000000000000000000fc00000000000000000000000000000000000000000000000a0030"], 0xb8}}, 0x4000) 476.252792ms ago: executing program 5 (id=3265): socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/key-users\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) dup(r0) syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0) userfaultfd(0x801) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x103902) pipe(&(0x7f00000001c0)) socket$inet_sctp(0x2, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0x8001, 0x10e, 0x2, 0xff, 0x3}}) 164.544729ms ago: executing program 8 (id=3266): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0) 0s ago: executing program 6 (id=3267): mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x11, &(0x7f0000000080)=0x3fd, 0x4) kernel console output (not intermixed with test programs): runcated to 1048576 [ 360.265499][ T1841] block nbd0: Possible stuck request ffff8880273055c0: control (read@3072,1024B). Runtime 210 seconds [ 360.330483][ T5894] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 360.503710][ T5894] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 360.544764][ T5894] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 360.593607][ T5894] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 360.630855][ T5894] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 360.689746][T11420] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 360.742127][ T5894] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 360.880124][T11459] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1759'. [ 360.986048][T11420] vivid-002: disconnect [ 361.986845][T11474] program syz.9.1763 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 362.004398][T11418] vivid-002: reconnect [ 362.048253][ T5738] usb 7-1: USB disconnect, device number 24 [ 362.424732][T11484] xt_hashlimit: size too large, truncated to 1048576 [ 364.002155][T11494] geneve1: entered promiscuous mode [ 364.007409][T11494] geneve1: entered allmulticast mode [ 364.032084][ T5801] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.050380][ T5801] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.067548][ T5801] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.095770][T11494] netlink: 'syz.7.1771': attribute type 1 has an invalid length. [ 364.217602][ T5801] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.229733][ T5842] IPVS: starting estimator thread 0... [ 364.319833][T11499] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1772'. [ 364.333639][T11497] IPVS: using max 25 ests per chain, 60000 per kthread [ 365.072397][T11515] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1778'. [ 365.619390][T11534] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1787'. [ 365.788547][T11538] xt_hashlimit: size too large, truncated to 1048576 [ 366.482716][T11546] program syz.6.1791 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 367.110075][T11565] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1774'. [ 367.248126][T11568] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1798'. [ 367.394850][T11577] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1803'. [ 367.655018][T11585] program syz.5.1807 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.495614][T11599] xt_hashlimit: size too large, truncated to 1048576 [ 368.717653][T11605] Bluetooth: hci0: unsupported parameter 255 [ 368.745441][T11605] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 368.836702][T11613] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1816'. [ 369.136433][T11624] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1821'. [ 369.349361][T11633] program syz.6.1825 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 369.427227][T11638] sg_write: data in/out 335936/136 bytes for SCSI command 0x0-- guessing data in; [ 369.427227][T11638] program syz.9.1826 not setting count and/or reply_len properly [ 369.455322][T11634] netlink: 14 bytes leftover after parsing attributes in process `syz.7.1822'. [ 370.919753][T11657] Bluetooth: hci0: unsupported parameter 255 [ 370.938448][T11657] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 372.955516][T11673] program syz.6.1841 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.024641][T11677] loop9: detected capacity change from 0 to 512 [ 373.076043][T11677] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.1839: iget: bad i_size value: 38620345925642 [ 373.097422][T11677] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 373.097968][T11677] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.1839: couldn't read orphan inode 15 (err -117) [ 373.107213][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 373.107238][ C1] EXT4-fs (loop9): last error at time 1786099475: ext4_orphan_get:1399: inode 15 [ 373.241279][T11677] loop9: lost filesystem error report for type 5 error -117 [ 373.245154][T11677] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.409834][T11666] EXT4-fs (loop9): shut down requested (1) [ 373.467494][T11666] program syz.9.1839 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 373.619808][T11696] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1848'. [ 373.738959][T10158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.748104][T11703] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1852'. [ 373.876533][T11703] bond0 (unregistering): Released all slaves [ 373.932172][T11706] Bluetooth: hci0: unsupported parameter 255 [ 373.962658][T11706] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 374.791350][T11736] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1865'. [ 375.666625][T11736] bond1: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 375.738585][T11736] bond1 (unregistering): Released all slaves [ 375.935777][T11757] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 376.026332][T11759] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1867'. [ 376.701079][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1878'. [ 377.138168][T11801] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 377.159043][T11804] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1885'. [ 377.199626][T11804] openvswitch: netlink: Flow actions attr not present in new flow. [ 377.881245][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.894351][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.323864][T11821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 378.331190][T11821] IPv6: NLM_F_CREATE should be set when creating new route [ 378.636781][T11827] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 379.267166][T11856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1900'. [ 379.283499][T11856] openvswitch: netlink: Flow actions attr not present in new flow. [ 379.403825][T11860] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 379.437706][T11846] team0: Device xfrm0 is of different type [ 379.522466][ T12] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.549251][T11827] syzkaller0 speed is unknown, defaulting to 1000 [ 379.556219][ T12] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.577085][ T12] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.622042][ T12] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.200939][T11898] netlink: 40 bytes leftover after parsing attributes in process `syz.9.1913'. [ 382.449423][ T5739] syzkaller0 speed is unknown, defaulting to 1000 [ 382.458415][ T5739] syz2: Port: 1 Link DOWN [ 382.708636][T11921] netlink: 14 bytes leftover after parsing attributes in process `syz.8.1914'. [ 382.822597][T11926] program syz.5.1921 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 384.411265][T11960] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1931'. [ 385.270667][T11964] fuse: Bad value for 'fd' [ 385.932356][T11954] syzkaller0 speed is unknown, defaulting to 1000 [ 386.037150][T11974] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 386.379196][T11974] syzkaller0 speed is unknown, defaulting to 1000 [ 386.520373][T11993] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1940'. [ 387.331917][ T30] audit: type=1326 audit(1786099489.888:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12011 comm="syz.3.1947" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04a3b9e0d9 code=0x0 [ 387.364062][T12013] gadgetfs: bound to dummy_udc driver [ 387.459884][T12022] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1950'. [ 387.670378][ T5606] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 387.696499][ C0] gadgetfs: connected [ 387.704831][ T5606] gadgetfs: disconnected [ 387.860850][ C0] gadgetfs: connected [ 387.881448][ T5606] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 387.906221][ T5606] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 387.927250][ T5606] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 387.954895][ C0] gadgetfs: configuration #1 [ 387.986037][T12011] gadgetfs: suspended from state 3 [ 388.050647][T12011] gadgetfs: disconnected [ 388.057820][ T5746] usb 1-1: USB disconnect, device number 6 [ 388.195763][ T10] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 388.348965][T12042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 388.357473][T12042] 8021q: adding VLAN 0 to HW filter on device team0 [ 388.368105][T12042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.687681][ T10] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 388.882876][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 388.962077][T12042] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 388.963629][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 388.974921][T12042] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.000818][T12042] veth1_vlan: left promiscuous mode [ 389.007310][T12042] veth0_vlan: left promiscuous mode [ 389.014491][T12042] veth0_vlan: entered promiscuous mode [ 389.022756][T12042] veth1_vlan: entered promiscuous mode [ 389.036771][T12042] veth1_macvtap: left promiscuous mode [ 389.043710][T12042] veth0_macvtap: left promiscuous mode [ 389.050501][T12042] veth0_macvtap: entered promiscuous mode [ 389.057517][T12042] veth1_macvtap: entered promiscuous mode [ 389.070143][T12042] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.078808][T12042] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.087589][T12042] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.093262][ T10] usb 7-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 389.096251][T12042] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.122556][ T5792] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.167993][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.222833][ T10] usb 7-1: Product: syz [ 389.265369][ T10] usb 7-1: Manufacturer: syz [ 389.300234][ T10] usb 7-1: SerialNumber: syz [ 389.437263][T12052] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1956'. [ 389.484701][ T5801] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.495264][ T1841] block nbd0: Possible stuck request ffff888027305080: control (read@0,1024B). Runtime 240 seconds [ 389.506043][ T1841] block nbd0: Possible stuck request ffff888027305240: control (read@1024,1024B). Runtime 240 seconds [ 389.526171][ T10] usb 7-1: config 0 descriptor?? [ 390.485328][ T1841] block nbd0: Possible stuck request ffff888027305400: control (read@2048,1024B). Runtime 240 seconds [ 390.489850][T12028] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 390.497281][ T1841] block nbd0: Possible stuck request ffff8880273055c0: control (read@3072,1024B). Runtime 240 seconds [ 390.515694][ T36] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.601616][ T36] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.520263][ T10] rc_core: IR keymap rc-streamzap not found [ 391.528179][ T10] Registered IR keymap rc-empty [ 391.546501][ T10] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 391.560595][ T10] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input14 [ 391.665563][T12076] syzkaller0 speed is unknown, defaulting to 1000 [ 391.714616][ T10] usb 7-1: USB disconnect, device number 25 [ 391.987019][T12097] gadgetfs: bound to dummy_udc driver [ 392.037436][ T30] audit: type=1326 audit(1786099494.598:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12095 comm="syz.8.1970" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d1959e0d9 code=0x0 [ 392.250929][ T5738] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 392.274457][ C0] gadgetfs: connected [ 392.278692][ T5738] gadgetfs: disconnected [ 392.451422][ C0] gadgetfs: connected [ 392.466343][ T5617] Bluetooth: hci4: unexpected cc 0x1407 length: 11 > 9 [ 392.470891][ T5738] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 392.473547][ T5617] Bluetooth: hci4: unexpected event for opcode 0x1407 [ 392.483436][T12111] netlink: 14 bytes leftover after parsing attributes in process `syz.9.1974'. [ 392.507646][ T5738] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 392.556855][ T5738] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.604516][ C0] gadgetfs: configuration #1 [ 392.714066][T12121] netlink: 14 bytes leftover after parsing attributes in process `syz.3.1975'. [ 392.797310][T12095] gadgetfs: suspended from state 3 [ 392.822726][T12095] gadgetfs: disconnected [ 392.916705][ T981] usb 1-1: USB disconnect, device number 7 [ 393.210429][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 394.322947][ T5801] Bluetooth: hci6: Frame reassembly failed (-84) [ 394.430552][T12144] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 394.442625][ T981] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 394.753538][ T981] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 394.804216][T12144] syzkaller0 speed is unknown, defaulting to 1000 [ 394.817683][ T981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 394.866725][ T981] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 394.924992][ T981] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 394.963322][ T981] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.010495][ T981] usb 9-1: Product: syz [ 395.034410][ T981] usb 9-1: Manufacturer: syz [ 395.055048][ T981] usb 9-1: SerialNumber: syz [ 395.097372][ T981] usb 9-1: config 0 descriptor?? [ 395.135599][T12138] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 395.482888][ T981] rc_core: IR keymap rc-streamzap not found [ 395.508782][ T981] Registered IR keymap rc-empty [ 395.536962][ T981] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 395.602858][T12158] program syz.3.1985 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 395.606794][ T981] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input15 [ 395.841057][ T5738] usb 9-1: USB disconnect, device number 12 [ 396.337539][ T5622] Bluetooth: hci6: command 0x1003 tx timeout [ 396.345837][ T5617] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 396.487291][T12183] netlink: 14 bytes leftover after parsing attributes in process `syz.5.1991'. [ 396.520166][T12185] gadgetfs: bound to dummy_udc driver [ 396.603813][ T30] audit: type=1326 audit(1786099499.168:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12184 comm="syz.8.1993" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3d1959e0d9 code=0x0 [ 396.747887][T12188] syzkaller0 speed is unknown, defaulting to 1000 [ 397.230395][ T5606] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 398.121691][T12206] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 399.302716][ T5606] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 399.328861][ T5606] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 399.421984][ T5606] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 399.725708][ T5606] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 399.735659][ T5606] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.743726][ T5606] usb 9-1: Product: syz [ 399.747914][ T5606] usb 9-1: Manufacturer: syz [ 399.761928][ T5606] usb 9-1: SerialNumber: syz [ 399.781823][T12205] syzkaller0 speed is unknown, defaulting to 1000 [ 399.801514][ T5606] usb 9-1: config 0 descriptor?? [ 399.824867][T12195] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 400.030616][ T5606] rc_core: IR keymap rc-streamzap not found [ 400.057952][ T5606] Registered IR keymap rc-empty [ 400.102773][ T5606] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 400.194799][ T5606] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input16 [ 400.274919][ T5606] usb 9-1: USB disconnect, device number 13 [ 400.673093][ T5606] usb 9-1: new full-speed USB device number 14 using dummy_hcd [ 400.715150][T12243] netlink: 14 bytes leftover after parsing attributes in process `syz.9.2008'. [ 400.843300][ T5606] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 400.879106][ T5606] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 400.899088][ T5606] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 400.914448][ T5606] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 400.926552][ T5606] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.949072][T12248] syzkaller0 speed is unknown, defaulting to 1000 [ 400.963410][ T5606] usb 9-1: Product: syz [ 400.969938][ T5606] usb 9-1: Manufacturer: syz [ 400.980391][ T5606] usb 9-1: SerialNumber: syz [ 401.016930][ T5606] usb 9-1: config 0 descriptor?? [ 401.036432][T12230] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 402.148251][ T5606] rc_core: IR keymap rc-streamzap not found [ 402.173292][ T5606] Registered IR keymap rc-empty [ 403.143963][ T5617] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 403.147596][ T5622] Bluetooth: hci6: command 0x1003 tx timeout [ 403.177675][ T5606] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 403.545092][ T5606] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input17 [ 403.758884][ T5842] usb 9-1: USB disconnect, device number 14 [ 404.167371][ T981] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 404.403824][ T981] usb 7-1: Using ep0 maxpacket: 8 [ 404.438334][ T981] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 404.474692][ T981] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 404.512017][ T981] usb 7-1: config 0 has no interface number 0 [ 404.525630][ T981] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 404.558843][ T981] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 404.650009][T12298] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2026'. [ 404.704038][T12295] syzkaller0 speed is unknown, defaulting to 1000 [ 404.800308][ T981] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 404.878793][ T981] usb 7-1: config 0 descriptor?? [ 404.901040][ T981] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 404.959802][T12306] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2030'. [ 405.853513][ T981] usb 7-1: USB disconnect, device number 26 [ 405.913781][ T12] Bluetooth: hci6: Frame reassembly failed (-84) [ 406.160343][ T5746] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 406.328801][ T5746] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 406.366747][ T5746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 406.388876][ T5746] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 408.077005][ T5622] Bluetooth: hci6: command 0x1003 tx timeout [ 408.084273][ T5617] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 408.149970][ T5746] usb 9-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 408.206173][ T5746] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.244606][ T5746] usb 9-1: Product: syz [ 408.260392][ T5746] usb 9-1: Manufacturer: syz [ 408.280477][ T5746] usb 9-1: SerialNumber: syz [ 408.324666][ T5746] usb 9-1: config 0 descriptor?? [ 408.428453][ T5746] usb 9-1: can't set config #0, error -71 [ 408.447827][ T5746] usb 9-1: USB disconnect, device number 15 [ 408.477907][T12339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2044'. [ 408.663712][T12344] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2043'. [ 410.410547][ T981] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 410.590338][ T981] usb 9-1: Using ep0 maxpacket: 8 [ 410.611668][ T981] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 410.646556][ T981] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 410.684897][ T981] usb 9-1: config 0 has no interface number 0 [ 410.709157][ T981] usb 9-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 410.753379][ T981] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 410.780591][ T981] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 410.814386][ T981] usb 9-1: config 0 descriptor?? [ 410.846567][ T981] iowarrior 9-1:0.1: no interrupt-in endpoint found [ 411.048874][ T981] usb 9-1: USB disconnect, device number 16 [ 412.338629][T12413] 9p: Bad value for 'rfdno' [ 412.680597][T12427] veth0: entered promiscuous mode [ 412.725547][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2067'. [ 412.742725][T12428] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2066'. [ 412.798993][T12427] team0: Port device team_slave_0 removed [ 412.902049][T12425] veth0: left promiscuous mode [ 413.464535][T12453] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 413.472594][T12453] UDF-fs: Scanning with blocksize 512 failed [ 413.502854][T12453] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 413.510581][T12453] UDF-fs: Scanning with blocksize 1024 failed [ 413.520266][T12453] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 413.527755][T12453] UDF-fs: Scanning with blocksize 2048 failed [ 413.540729][T12453] UDF-fs: warning (device nullb0): udf_load_vrs: No VRS found [ 413.548418][T12453] UDF-fs: Scanning with blocksize 4096 failed [ 414.300348][ T5738] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 414.472475][ T5738] usb 10-1: Using ep0 maxpacket: 8 [ 414.497854][ T5738] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 414.528341][ T5738] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 414.558000][ T5738] usb 10-1: config 0 has no interface number 0 [ 414.583170][ T5738] usb 10-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 414.649536][ T5738] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 414.688792][ T5738] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.714861][ T5738] usb 10-1: config 0 descriptor?? [ 414.738106][ T5738] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 414.969498][ T5738] usb 10-1: USB disconnect, device number 6 [ 415.135442][ T5622] Bluetooth: hci6: command 0x1003 tx timeout [ 415.143112][ T5617] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 417.782231][ T5738] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 417.940964][ T5738] usb 7-1: Using ep0 maxpacket: 8 [ 417.959898][ T5738] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 418.005913][ T5738] usb 7-1: config 0 has no interface number 0 [ 418.021652][ T5738] usb 7-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 418.051583][ T5738] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 418.072111][ T5738] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 418.100862][ T5738] usb 7-1: config 0 descriptor?? [ 418.124022][ T5738] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 419.860695][ T5609] Bluetooth: hci6: command 0x1003 tx timeout [ 419.872983][ T5617] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 419.935261][ T5738] usb 7-1: USB disconnect, device number 27 [ 420.094115][ T1841] block nbd0: Possible stuck request ffff888027305080: control (read@0,1024B). Runtime 270 seconds [ 420.105268][ T1841] block nbd0: Possible stuck request ffff888027305240: control (read@1024,1024B). Runtime 270 seconds [ 421.897329][ T1841] block nbd0: Possible stuck request ffff888027305400: control (read@2048,1024B). Runtime 270 seconds [ 421.909145][ T1841] block nbd0: Possible stuck request ffff8880273055c0: control (read@3072,1024B). Runtime 270 seconds [ 421.930457][ T5617] Bluetooth: hci5: command 0x0406 tx timeout [ 424.055739][T12571] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 425.735591][ T30] audit: type=1326 audit(1786099528.298:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12588 comm="syz.9.2126" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcef699e0d9 code=0x0 [ 426.108972][ T5617] Bluetooth: hci1: command 0x0406 tx timeout [ 426.217915][ T5606] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 426.421377][ T5606] usb 6-1: Using ep0 maxpacket: 8 [ 426.549570][ T5606] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 426.652342][ T5606] usb 6-1: config 0 has no interface number 0 [ 426.828840][ T5606] usb 6-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 427.020410][ T5606] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 427.079731][ T5606] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 427.155067][ T5606] usb 6-1: config 0 descriptor?? [ 427.195061][ T5606] iowarrior 6-1:0.1: no interrupt-in endpoint found [ 427.286554][T12615] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 427.405121][ T5746] usb 6-1: USB disconnect, device number 23 [ 429.659943][T12692] netlink: 'syz.6.2155': attribute type 2 has an invalid length. [ 429.682707][T12692] netlink: 'syz.6.2155': attribute type 2 has an invalid length. [ 430.181051][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 430.340522][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 430.354296][ T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 430.363583][ T9] usb 10-1: config 0 has no interface number 0 [ 430.369980][ T9] usb 10-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 430.384752][ T9] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 430.395065][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 430.413796][ T9] usb 10-1: config 0 descriptor?? [ 430.432276][ T9] iowarrior 10-1:0.1: no interrupt-in endpoint found [ 430.510078][T12728] netlink: 'syz.5.2171': attribute type 2 has an invalid length. [ 430.522136][T12728] netlink: 'syz.5.2171': attribute type 2 has an invalid length. [ 430.617904][T12732] gadgetfs: bound to dummy_udc driver [ 430.633325][ T30] audit: type=1326 audit(1786099533.198:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12731 comm="syz.5.2173" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f889299e0d9 code=0x0 [ 430.641128][ T981] usb 10-1: USB disconnect, device number 7 [ 430.801254][ T5746] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 430.870805][ T5842] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 430.881802][ C1] gadgetfs: connected [ 430.886037][ T5842] gadgetfs: disconnected [ 430.960949][ T5746] usb 9-1: Using ep0 maxpacket: 16 [ 430.991867][ T5746] usb 9-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 431.011247][ T5746] usb 9-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 431.026434][ T5746] usb 9-1: config 0 interface 0 has no altsetting 0 [ 431.033738][ T5746] usb 9-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00 [ 431.043086][ T5746] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.051657][ C1] gadgetfs: connected [ 431.065979][ T5842] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 431.087306][ T5842] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 431.100016][ T5746] usb 9-1: config 0 descriptor?? [ 431.109366][ T5842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.153794][ C1] gadgetfs: configuration #1 [ 431.438415][T12731] gadgetfs: suspended from state 3 [ 431.456093][ T981] usb 1-1: USB disconnect, device number 8 [ 431.462051][T12731] gadgetfs: disconnected [ 431.567592][ T5746] kye 0003:0458:5015.0007: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 431.598150][ T5746] hid_parser_main: 852 callbacks suppressed [ 431.598173][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.379219][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.439071][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.470483][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.493438][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.536227][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.578994][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.613160][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.640379][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.680678][ T5746] kye 0003:0458:5015.0007: unknown main item tag 0x0 [ 432.734100][ T5746] kye 0003:0458:5015.0007: hidraw0: USB HID v0.81 Device [HID 0458:5015] on usb-dummy_hcd.8-1/input0 [ 432.777327][ T5746] kye 0003:0458:5015.0007: tablet-enabling feature report not found [ 432.807760][ T5746] kye 0003:0458:5015.0007: tablet enabling failed [ 432.897408][ T5746] usb 9-1: USB disconnect, device number 17 [ 433.330740][ T5739] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 434.042830][T12797] gadgetfs: bound to dummy_udc driver [ 434.054285][ T5739] usb 7-1: Using ep0 maxpacket: 8 [ 434.061308][ T5739] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 434.069888][ T5739] usb 7-1: config 0 has no interface number 0 [ 434.076054][ T5739] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 434.087221][ T5739] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 434.096471][ T5739] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 434.115360][ T5739] usb 7-1: config 0 descriptor?? [ 434.179836][ T30] audit: type=1326 audit(1786099536.708:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12796 comm="syz.7.2200" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x0 [ 434.180004][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 434.204919][ T5739] iowarrior 7-1:0.1: no interrupt-in endpoint found [ 434.874719][ T5739] usb 7-1: USB disconnect, device number 28 [ 435.102209][T12816] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 435.292639][T12816] syzkaller0 speed is unknown, defaulting to 1000 [ 435.631353][T12835] block2mtd: error: cannot open device #! [ 435.985958][T12852] gadgetfs: bound to dummy_udc driver [ 436.033868][ T30] audit: type=1326 audit(1786099538.598:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12848 comm="syz.7.2220" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x0 [ 436.560451][ T9] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 436.583739][ C0] gadgetfs: connected [ 436.600889][ T9] gadgetfs: disconnected [ 436.750689][ T981] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 436.761408][ C0] gadgetfs: connected [ 436.770737][ T9] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 436.774418][T12848] gadgetfs: suspended from state 3 [ 436.789938][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 436.802922][T12848] gadgetfs: disconnected [ 436.823605][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.841312][ T9] usb 1-1: can't set config #1, error -71 [ 436.857717][ T9] usb 1-1: USB disconnect, device number 10 [ 436.933256][T12877] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 436.956074][ T981] usb 4-1: Using ep0 maxpacket: 8 [ 436.993442][ T981] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 437.076444][T12876] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 437.105866][T12876] CIFS: Attempting to mount //127.0.0.1/share [ 437.161628][T12880] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2233'. [ 437.202923][T12876] CIFS: VFS: Error connecting to socket. Aborting operation. [ 437.210777][T12876] CIFS: VFS: cifs_mount failed w/return code = -111 [ 437.741881][ T981] usb 4-1: config 0 has no interface number 0 [ 437.853342][ T981] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 437.864898][ T981] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 437.874970][ T981] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.876659][T12884] team0: Port device xfrm0 removed [ 437.897729][ T981] usb 4-1: config 0 descriptor?? [ 437.913429][ T981] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 437.958408][T12877] syzkaller0 speed is unknown, defaulting to 1000 [ 438.116505][ T5746] usb 4-1: USB disconnect, device number 24 [ 438.260868][ T981] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 438.431277][ T981] usb 10-1: Using ep0 maxpacket: 8 [ 438.439894][ T981] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 438.463352][ T981] usb 10-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 438.487996][ T981] usb 10-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 438.497891][ T981] usb 10-1: Product: syz [ 438.504988][ T981] usb 10-1: Manufacturer: syz [ 438.509836][ T981] usb 10-1: SerialNumber: syz [ 440.615488][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.695997][ T981] usb 10-1: palm_os_3_probe - error -110 getting connection information [ 440.704489][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.754070][ T981] visor 10-1:1.0: probe with driver visor failed with error -110 [ 440.887749][T12911] gadgetfs: bound to dummy_udc driver [ 440.916841][ T30] audit: type=1326 audit(1786099543.478:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12910 comm="syz.7.2248" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x0 [ 441.131068][ T981] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 441.153582][ C1] gadgetfs: connected [ 441.161897][ T981] gadgetfs: disconnected [ 441.311424][ C1] gadgetfs: connected [ 441.325647][ T981] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 441.346335][T12926] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2252'. [ 441.360780][ T981] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 441.373596][T12924] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 441.378012][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.436354][ C1] gadgetfs: configuration #1 [ 441.564087][T12924] syzkaller0 speed is unknown, defaulting to 1000 [ 441.698999][T12910] gadgetfs: suspended from state 3 [ 441.715197][T12910] gadgetfs: disconnected [ 441.719690][ T981] usb 1-1: USB disconnect, device number 11 [ 442.219085][ T5739] usb 10-1: USB disconnect, device number 8 [ 442.886798][T12960] netlink: 'syz.5.2265': attribute type 4 has an invalid length. [ 443.767310][ T30] audit: type=1326 audit(1786099546.318:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12969 comm="syz.7.2269" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x0 [ 443.769530][T12970] gadgetfs: bound to dummy_udc driver [ 445.232389][T12994] netlink: 104 bytes leftover after parsing attributes in process `syz.9.2278'. [ 445.350486][ T5842] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 445.528038][ T5842] usb 4-1: unable to get BOS descriptor or descriptor too short [ 445.537745][ T5842] usb 4-1: config 160 has an invalid interface number: 168 but max is 0 [ 445.557011][ T5842] usb 4-1: config 160 has no interface number 0 [ 445.568212][T13004] netlink: 92 bytes leftover after parsing attributes in process `syz.9.2282'. [ 445.578451][ T5842] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xF4, changing to 0x84 [ 445.599612][ T5842] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x84 has invalid maxpacket 49717, setting to 1024 [ 445.632771][ T5842] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0x84 has invalid maxpacket 1024 [ 445.640274][ T5739] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 445.652682][ T5842] usb 4-1: config 160 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 445.700148][ T5842] usb 4-1: config 160 interface 168 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 445.750774][ T5842] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0xA has invalid maxpacket 1023, setting to 64 [ 445.795679][ T5842] usb 4-1: config 160 interface 168 altsetting 8 has an endpoint descriptor with address 0xE9, changing to 0x89 [ 445.808289][ T5842] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has an invalid bInterval 206, changing to 11 [ 445.821223][ T5842] usb 4-1: config 160 interface 168 altsetting 8 endpoint 0x89 has invalid maxpacket 18397, setting to 1024 [ 445.836500][ T5842] usb 4-1: config 160 interface 168 altsetting 8 bulk endpoint 0xC has invalid maxpacket 64 [ 445.847461][ T5842] usb 4-1: config 160 interface 168 altsetting 8 has 8 endpoint descriptors, different from the interface descriptor's value: 6 [ 445.850440][ T5739] usb 9-1: Using ep0 maxpacket: 8 [ 445.868537][ T5842] usb 4-1: config 160 interface 168 has no altsetting 0 [ 445.880692][ T5842] usb 4-1: string descriptor 0 read error: -22 [ 445.890460][ T5739] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 445.899402][ T5842] usb 4-1: New USB device found, idVendor=0404, idProduct=0312, bcdDevice=42.c1 [ 445.899434][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.947534][T12986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.030484][T12986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.085359][T12986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.143838][ T5739] usb 9-1: config 0 has no interface number 0 [ 446.360794][ T5739] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 446.370553][T12986] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 446.613585][ T5739] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 446.618430][ T5842] io_edgeport 4-1:160.168: EPiC device converter detected [ 446.625225][ T5739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.681073][ T5842] usb 4-1: detected [ 446.684794][ T5739] usb 9-1: config 0 descriptor?? [ 446.748665][ T5739] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 446.760682][ T5842] usb 4-1: EPiC device converter now attached to ttyUSB0 [ 446.961354][ T5842] usb 4-1: USB disconnect, device number 25 [ 446.967354][ C1] usb 4-1: edge_interrupt_callback - Error -19 submitting control urb [ 447.029544][ T5842] epic ttyUSB0: EPiC device converter now disconnected from ttyUSB0 [ 447.074596][ T5842] io_edgeport 4-1:160.168: device disconnected [ 450.800731][ T1841] block nbd0: Possible stuck request ffff888027305080: control (read@0,1024B). Runtime 300 seconds [ 450.812629][ T1841] block nbd0: Possible stuck request ffff888027305240: control (read@1024,1024B). Runtime 300 seconds [ 451.103506][ T30] audit: type=1326 audit(1786099553.668:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 451.209539][ T30] audit: type=1326 audit(1786099553.698:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 451.320374][ T30] audit: type=1326 audit(1786099553.698:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 451.484278][ T30] audit: type=1326 audit(1786099553.698:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 451.627851][ T30] audit: type=1326 audit(1786099553.698:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 451.799905][ T30] audit: type=1326 audit(1786099553.718:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 451.857623][ T30] audit: type=1326 audit(1786099553.718:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 451.884069][ T30] audit: type=1326 audit(1786099553.718:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 451.932034][ T1841] block nbd0: Possible stuck request ffff888027305400: control (read@2048,1024B). Runtime 300 seconds [ 451.943721][ T1841] block nbd0: Possible stuck request ffff8880273055c0: control (read@3072,1024B). Runtime 300 seconds [ 451.972185][ T30] audit: type=1326 audit(1786099553.718:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 451.997720][ T30] audit: type=1326 audit(1786099553.718:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13073 comm="syz.9.2309" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef699e0d9 code=0x7ffc0000 [ 452.703470][ T5842] usb 9-1: USB disconnect, device number 18 [ 453.762512][ T5976] udevd[5976]: inotify_add_watch(7, /dev/nbd1, 10) failed: No such file or directory [ 453.998007][T13121] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2324'. [ 454.028823][T13119] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2322'. [ 455.507833][T13138] virt_wifi0: entered promiscuous mode [ 455.546989][T13138] batman_adv: batadv0: Adding interface: virt_wifi0 [ 455.566499][T13138] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 455.636844][T13138] batman_adv: batadv0: Interface activated: virt_wifi0 [ 455.640256][ T24] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 455.822407][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 455.849044][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.879977][ T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 455.920233][ T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 455.961497][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.999285][ T24] usb 4-1: config 0 descriptor?? [ 457.609786][ T24] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 457.904695][ T24] usb 4-1: USB disconnect, device number 26 [ 457.935775][T13162] fido_id[13162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:047F:FFFF.0008/report_descriptor': No such file or directory [ 457.992219][T13165] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2339'. [ 460.592959][T13199] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2352'. [ 463.541911][T13232] random: crng reseeded on system resumption [ 463.925089][T13257] ALSA: mixer_oss: invalid OSS volume '*' [ 465.238579][T13270] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2368'. [ 468.009653][T13293] 9pnet_fd: p9_fd_create_tcp (13293): problem binding to privport [ 468.024548][T13292] syzkaller0 speed is unknown, defaulting to 1000 [ 468.072654][T13293] syzkaller0 speed is unknown, defaulting to 1000 [ 468.451277][T13303] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2379'. [ 469.912806][T13324] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2386'. [ 470.532435][T13344] bridge0: port 1(erspan0) entered blocking state [ 470.540264][T13344] bridge0: port 1(erspan0) entered disabled state [ 470.548080][T13344] erspan0: entered allmulticast mode [ 470.567743][T13344] erspan0: entered promiscuous mode [ 470.575719][T13344] bridge0: port 1(erspan0) entered blocking state [ 470.582352][T13344] bridge0: port 1(erspan0) entered forwarding state [ 471.174817][T13345] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2395'. [ 471.947504][T13371] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.956399][T13371] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.985731][T13371] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.811209][T13371] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.821165][T13371] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.834808][T13371] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 472.845199][T13371] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 472.861635][T13371] veth1_vlan: left promiscuous mode [ 472.868132][T13371] veth0_vlan: left promiscuous mode [ 472.875432][T13371] veth0_vlan: entered promiscuous mode [ 472.883427][T13371] veth1_vlan: entered promiscuous mode [ 472.895171][T13371] veth1_macvtap: left promiscuous mode [ 472.902093][T13371] veth0_macvtap: left promiscuous mode [ 472.908766][T13371] veth0_macvtap: entered promiscuous mode [ 472.915777][T13371] veth1_macvtap: entered promiscuous mode [ 472.928120][T13371] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 472.936724][T13371] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 472.945282][T13371] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 472.953875][T13371] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 473.024862][ T152] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.107533][T13259] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.114717][T13259] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.159928][T13259] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.167108][T13259] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.300987][ T1000] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.375256][ T152] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.435261][ T152] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.647165][T13392] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2412'. [ 473.866671][T13398] bridge0: port 1(erspan0) entered blocking state [ 473.873853][T13398] bridge0: port 1(erspan0) entered disabled state [ 473.881628][T13398] erspan0: entered allmulticast mode [ 473.901528][T13398] erspan0: entered promiscuous mode [ 473.909328][T13398] bridge0: port 1(erspan0) entered blocking state [ 473.915902][T13398] bridge0: port 1(erspan0) entered forwarding state [ 476.458037][T13435] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2424'. [ 478.019632][T13440] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2429'. [ 478.100313][ T981] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 478.293874][ T981] usb 1-1: Dual-Role OTG device on HNP port [ 478.322047][ T981] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0001, bcdDevice= 7.02 [ 478.368073][ T981] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.461203][ T981] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 479.370475][T13469] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2441'. [ 479.433263][T13471] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2442'. [ 479.840371][ T5739] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 480.004352][ T5739] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 480.055682][ T5739] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 480.085085][ T5739] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 480.104287][ T5739] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.132867][T13477] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 480.179261][ T5739] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 480.547405][T13477] vivid-001: disconnect [ 481.277519][ T1841] block nbd0: Possible stuck request ffff888027305080: control (read@0,1024B). Runtime 330 seconds [ 481.288440][ T1841] block nbd0: Possible stuck request ffff888027305240: control (read@1024,1024B). Runtime 330 seconds [ 481.571305][T13512] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2459'. [ 481.717449][T13476] vivid-001: reconnect [ 481.752559][ T24] usb 9-1: USB disconnect, device number 19 [ 482.014887][ T1841] block nbd0: Possible stuck request ffff888027305400: control (read@2048,1024B). Runtime 330 seconds [ 482.026000][ T1841] block nbd0: Possible stuck request ffff8880273055c0: control (read@3072,1024B). Runtime 330 seconds [ 482.404744][T13539] netlink: 'syz.3.2472': attribute type 4 has an invalid length. [ 482.499522][T13542] netlink: 60 bytes leftover after parsing attributes in process `syz.9.2470'. [ 483.034700][T13543] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 483.310100][T13537] syzkaller0 speed is unknown, defaulting to 1000 [ 483.318991][T13547] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2475'. [ 485.083686][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2485'. [ 485.293216][T13577] team0: Device xfrm0 is of different type [ 486.305597][T13581] tipc: Started in network mode [ 486.320397][T13581] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 486.327925][T13581] tipc: Enabled bearer , priority 0 [ 486.335081][T13572] syzkaller0 speed is unknown, defaulting to 1000 [ 489.394185][ T5739] tipc: Node number set to 11578026 [ 489.854922][T13614] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2497'. [ 490.555905][T13624] bridge0: port 1(erspan0) entered disabled state [ 490.596246][T13626] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 490.761248][T13632] 9pnet_fd: Insufficient options for proto=fd [ 491.201601][T13640] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2503'. [ 492.686786][T13646] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2508'. [ 492.701492][ T5801] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.749669][T13646] team0: Device xfrm0 is of different type [ 492.810695][ T5801] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.838706][T13648] tipc: Started in network mode [ 492.850109][T13648] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 492.879031][T13648] tipc: Enabled bearer , priority 0 [ 492.914674][ T152] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.934509][ T152] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.554718][ T5606] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 493.830335][ T5606] usb 9-1: Using ep0 maxpacket: 16 [ 493.854372][ T5606] usb 9-1: unable to get BOS descriptor or descriptor too short [ 493.907966][ T5738] tipc: Node number set to 11578026 [ 493.919641][ T5606] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.967364][ T5606] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 493.999689][ T5606] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 494.025720][ T5606] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.056901][ T5606] usb 9-1: Product: syz [ 494.104999][ T5606] usb 9-1: Manufacturer: syz [ 494.558233][ T5606] usb 9-1: SerialNumber: syz [ 494.597987][T13673] 9pnet_fd: Insufficient options for proto=fd [ 496.377584][ T5606] usb 9-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 496.443260][ T5606] usb 9-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 496.535316][T13684] syzkaller0 speed is unknown, defaulting to 1000 [ 496.554102][T13691] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2526'. [ 496.604565][T13689] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 496.609077][T13691] team0: Port device xfrm0 added [ 496.689107][T13694] tipc: Enabled bearer , priority 0 [ 496.700640][ T5606] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 496.740662][ T5606] usb 9-1: USB disconnect, device number 20 [ 497.662234][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 497.850364][T13689] syzkaller0 speed is unknown, defaulting to 1000 [ 497.856964][ T981] tipc: Node number set to 3954118358 [ 499.227826][T13720] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2536'. [ 500.266446][T13725] 9pnet_fd: Insufficient options for proto=fd [ 500.822557][T13742] fuse: Bad value for 'fd' [ 501.386295][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.392827][ T5746] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 501.400599][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.960565][ T5746] usb 6-1: Using ep0 maxpacket: 16 [ 502.103230][ T5746] usb 6-1: unable to get BOS descriptor or descriptor too short [ 502.150352][ T5746] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 502.198481][ T5746] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 502.222545][ T5746] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 502.234777][ T5746] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 502.281474][ T5746] usb 6-1: Product: syz [ 502.293971][ T5746] usb 6-1: Manufacturer: syz [ 502.315390][ T5746] usb 6-1: SerialNumber: syz [ 502.340729][ T9] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 502.512357][ T9] usb 4-1: config index 0 descriptor too short (expected 63186, got 210) [ 502.537863][ T9] usb 4-1: config 0 has an invalid interface number: 106 but max is 0 [ 502.570102][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.605938][ T9] usb 4-1: config 0 has no interface number 0 [ 502.630797][ T9] usb 4-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 502.641297][ T5609] Bluetooth: hci5: unexpected event for opcode 0x1405 [ 502.701461][ T9] usb 4-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 502.751596][T13766] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 502.815122][ T9] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 503.401131][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.420990][T13765] syzkaller0 speed is unknown, defaulting to 1000 [ 503.452720][ T9] usb 4-1: config 0 descriptor?? [ 503.485241][T13748] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 503.633236][ T5746] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 503.677453][ T9] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 503.699511][ T5746] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 503.742387][ T9] usb 4-1: USB disconnect, device number 27 [ 503.745242][T13766] syzkaller0 speed is unknown, defaulting to 1000 [ 503.757237][ T5792] usb 4-1: Failed to submit usb control message: -71 [ 503.788290][ T5792] usb 4-1: unable to send the bmi data to the device: -71 [ 503.826618][ T5792] usb 4-1: unable to get target info from device [ 503.865317][ T5792] usb 4-1: could not get target info (-71) [ 503.885394][ T5792] usb 4-1: could not probe fw (-71) [ 504.826795][ T5746] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 504.874731][ T5746] usb 6-1: USB disconnect, device number 24 [ 507.223759][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 507.658504][T13823] netlink: 'syz.9.2572': attribute type 4 has an invalid length. [ 509.342656][ T9] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 509.414140][T13852] bridge0: port 3(erspan0) entered blocking state [ 509.421376][T13852] bridge0: port 3(erspan0) entered disabled state [ 509.429553][T13852] erspan0: entered allmulticast mode [ 509.455023][T13852] erspan0: entered promiscuous mode [ 509.463974][T13852] bridge0: port 3(erspan0) entered blocking state [ 509.470580][T13852] bridge0: port 3(erspan0) entered forwarding state [ 512.173637][T13213] block nbd0: Possible stuck request ffff888027305080: control (read@0,1024B). Runtime 360 seconds [ 512.184765][T13213] block nbd0: Possible stuck request ffff888027305240: control (read@1024,1024B). Runtime 360 seconds [ 512.213836][T13213] block nbd0: Possible stuck request ffff888027305400: control (read@2048,1024B). Runtime 360 seconds [ 512.225799][T13213] block nbd0: Possible stuck request ffff8880273055c0: control (read@3072,1024B). Runtime 360 seconds [ 512.721909][T13872] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 513.015993][T13872] syzkaller0 speed is unknown, defaulting to 1000 [ 513.340570][T13888] syzkaller0: entered promiscuous mode [ 513.412863][T13888] syzkaller0: entered allmulticast mode [ 515.164221][ T9] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 517.382227][ T9] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 517.402197][ T9] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 517.446175][ T9] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 517.484614][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 517.529617][T13916] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 517.589151][ T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 517.924952][T13916] vivid-000: disconnect [ 518.812949][T13955] syzkaller0: entered promiscuous mode [ 518.827931][T13955] syzkaller0: entered allmulticast mode [ 518.854757][T13955] tipc: Enabling of bearer rejected, failed to enable media [ 518.909121][T13957] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 519.028926][T13957] syzkaller0 speed is unknown, defaulting to 1000 [ 520.470428][ T9] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 520.571787][T13913] vivid-000: reconnect [ 520.585991][ T10] usb 6-1: USB disconnect, device number 25 [ 520.710708][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 520.738339][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 520.750389][ T12] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.779833][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 520.799559][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 520.805594][ T12] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 520.904360][ T12] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.014963][ T9] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 521.027237][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.043589][ T9] usb 9-1: Product: syz [ 521.049496][ T9] usb 9-1: Manufacturer: syz [ 521.051190][T12679] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.063940][ T9] usb 9-1: SerialNumber: syz [ 522.048311][T14003] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.115423][T14003] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 522.197843][T14006] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2642'. [ 522.736864][T14013] bridge0: port 3(erspan0) entered disabled state [ 522.847153][ T9] usb 9-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 522.880375][ T9] usb 9-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 522.917408][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.925066][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.044267][T14013] tipc: Resetting bearer [ 523.251509][ T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 523.263036][ T9] usb 9-1: USB disconnect, device number 22 [ 523.530924][T14013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 523.566803][T14013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 523.612130][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 523.970342][T12679] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.022423][T12679] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.082072][T12679] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.169329][T12679] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.821377][ T5746] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 524.990673][ T5746] usb 4-1: Using ep0 maxpacket: 16 [ 525.021990][ T5746] usb 4-1: unable to get BOS descriptor or descriptor too short [ 525.049575][ T5746] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 525.098170][ T5746] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 525.121103][ T5746] usb 4-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 525.356508][ T5746] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.364975][ T5746] usb 4-1: Product: syz [ 525.369168][ T5746] usb 4-1: Manufacturer: syz [ 525.374366][ T5746] usb 4-1: SerialNumber: syz [ 525.411982][T14078] ALSA: mixer_oss: invalid OSS volume '' [ 525.467862][T14078] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 525.505131][T14078] ALSA: mixer_oss: invalid OSS volume '' [ 525.551371][T14078] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 525.584134][T14078] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 525.844077][T14088] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 525.880036][T14088] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.128460][ T5746] usb 4-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 526.185630][ T5746] usb 4-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 526.641614][ T5746] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 527.600413][ T5746] usb 4-1: USB disconnect, device number 28 [ 527.637733][T14120] ALSA: mixer_oss: invalid OSS volume '' [ 527.643839][T14120] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 527.652299][T14120] ALSA: mixer_oss: invalid OSS volume '' [ 527.658433][T14120] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 527.706827][T14120] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 527.707298][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 529.355469][T14161] ALSA: mixer_oss: invalid OSS volume '' [ 529.372246][T14161] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 529.383066][T14161] ALSA: mixer_oss: invalid OSS volume '' [ 529.388918][T14161] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 529.390705][ T5739] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 529.399115][T14161] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 529.570458][ T5739] usb 10-1: Using ep0 maxpacket: 16 [ 529.587007][ T5739] usb 10-1: unable to get BOS descriptor or descriptor too short [ 529.619764][ T5739] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 529.657762][ T5739] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 529.695520][ T5739] usb 10-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 529.980322][T14173] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2709'. [ 530.340168][ T5739] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.348315][ T5739] usb 10-1: Product: syz [ 530.378455][ T5739] usb 10-1: Manufacturer: syz [ 530.414005][ T5739] usb 10-1: SerialNumber: syz [ 531.406145][T14157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 531.453508][T14157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 531.977582][ T5739] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 531.994420][ T5739] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 532.451625][ T5739] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 532.563908][ T5739] usb 10-1: USB disconnect, device number 9 [ 532.601751][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 532.861899][T14205] ALSA: mixer_oss: invalid OSS volume '' [ 532.884282][T14205] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 532.932462][T14205] ALSA: mixer_oss: invalid OSS volume '' [ 533.156760][T14205] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 533.170589][T14205] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 533.671480][T14223] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2728'. [ 535.273360][T14248] ALSA: mixer_oss: invalid OSS volume '' [ 535.279598][T14248] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 535.287957][T14248] ALSA: mixer_oss: invalid OSS volume '' [ 535.294254][T14248] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 535.303116][T14248] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 536.123583][T14267] netlink: 'syz.8.2751': attribute type 10 has an invalid length. [ 536.230630][T14267] veth1_virt_wifi: entered promiscuous mode [ 537.354492][T14282] ALSA: mixer_oss: invalid OSS volume '' [ 537.371868][T14282] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 537.383464][T14282] ALSA: mixer_oss: invalid OSS volume '' [ 537.389254][T14282] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 537.397833][T14282] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 537.470827][T14286] loop9: detected capacity change from 0 to 512 [ 537.509134][T14286] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 537.605756][T14286] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2758: bad orphan inode 3855 [ 537.627909][T14286] loop9: lost filesystem error report for type 5 error -117 [ 537.679595][T14286] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 537.756691][T10158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.885285][T14303] loop9: detected capacity change from 0 to 512 [ 537.900276][ T10] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 537.927556][T14303] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.2765: bad orphan inode 11862016 [ 537.942499][T14303] loop9: lost filesystem error report for type 5 error -117 [ 537.949116][T14303] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 537.969732][T14303] ext4 filesystem being mounted at /218/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 538.075040][ T10] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 538.084553][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.115178][ T10] usb 4-1: Product: syz [ 538.135308][ T10] usb 4-1: Manufacturer: syz [ 538.151505][ T10] usb 4-1: SerialNumber: syz [ 539.096980][T10158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 539.333470][T14329] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2775'. [ 539.457007][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE [ 539.497557][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE [ 540.123622][ T5842] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 541.222449][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -EPROTO [ 541.273439][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 541.342710][ T5842] usb 10-1: Using ep0 maxpacket: 16 [ 541.351425][ T5842] usb 10-1: unable to get BOS descriptor or descriptor too short [ 541.362124][ T5842] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.370924][ T10] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 541.410074][ T5842] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.422738][ T5842] usb 10-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 541.436199][ T5842] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.454130][ T5842] usb 10-1: Product: syz [ 541.459194][ T5842] usb 10-1: Manufacturer: syz [ 541.464004][ T5842] usb 10-1: SerialNumber: syz [ 541.505079][ T10] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71 [ 541.546386][ T10] usb 4-1: USB disconnect, device number 29 [ 541.776888][T14377] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 541.843509][T14377] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 542.045306][T14388] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 542.100567][T14388] syzkaller0 speed is unknown, defaulting to 1000 [ 542.183344][ T5842] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 542.233634][ T5842] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 542.331295][T13213] block nbd0: Possible stuck request ffff888027305080: control (read@0,1024B). Runtime 390 seconds [ 542.342101][T13213] block nbd0: Possible stuck request ffff888027305240: control (read@1024,1024B). Runtime 390 seconds [ 542.353575][T13213] block nbd0: Possible stuck request ffff888027305400: control (read@2048,1024B). Runtime 390 seconds [ 542.364641][T13213] block nbd0: Possible stuck request ffff8880273055c0: control (read@3072,1024B). Runtime 390 seconds [ 542.547000][ T5842] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 542.621970][ T5842] usb 10-1: USB disconnect, device number 10 [ 543.502294][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 544.105362][T14425] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 544.185075][T14429] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 544.192390][T14429] IPv6: NLM_F_CREATE should be set when creating new route [ 544.333947][T14431] syzkaller0 speed is unknown, defaulting to 1000 [ 546.740341][T14466] ALSA: mixer_oss: invalid OSS volume '' [ 546.746041][T14466] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 546.757393][T14466] ALSA: mixer_oss: invalid OSS volume '' [ 546.764670][T14466] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 546.774121][T14466] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 547.290784][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 547.290806][ T30] audit: type=1326 audit(1786099649.848:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.7.2834" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 547.408322][ T30] audit: type=1326 audit(1786099649.858:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.7.2834" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 547.443336][T14485] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 547.496287][T14487] loop9: detected capacity change from 0 to 512 [ 547.504388][ T30] audit: type=1326 audit(1786099649.858:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.7.2834" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 547.598932][T14487] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2835: iget: bad i_size value: 38620345925642 [ 547.617875][ T30] audit: type=1326 audit(1786099649.858:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.7.2834" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 547.642903][ T30] audit: type=1326 audit(1786099649.858:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14478 comm="syz.7.2834" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 547.673005][T14487] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 547.680138][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 547.695721][ C0] EXT4-fs (loop9): last error at time 1786099650: ext4_orphan_get:1399: inode 15 [ 547.712480][T14498] loop8: detected capacity change from 0 to 512 [ 547.720791][T14498] EXT4-fs: Ignoring removed bh option [ 547.753455][T14485] syzkaller0 speed is unknown, defaulting to 1000 [ 547.792502][T14487] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.2835: couldn't read orphan inode 15 (err -117) [ 547.816169][T14498] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #15: comm syz.8.2841: corrupted in-inode xattr: e_value size too large [ 547.835411][T14487] loop9: lost filesystem error report for type 5 error -117 [ 547.862552][T14487] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 547.874923][T14498] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 547.890144][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 547.905751][ C1] EXT4-fs (loop8): initial error at time 1786099650: ext4_iget_extra_inode:5180: inode 15 [ 547.915733][ C1] EXT4-fs (loop8): last error at time 1786099650: ext4_iget_extra_inode:5180: inode 15 [ 547.942736][T14498] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.2841: couldn't read orphan inode 15 (err -117) [ 547.973011][T14498] loop8: lost filesystem error report for type 5 error -117 [ 547.986906][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 548.532633][T14487] EXT4-fs (loop9): shut down requested (1) [ 548.552599][T14498] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 548.596073][T14498] EXT4-fs error (device loop8): ext4_iget_extra_inode:5180: inode #12: comm syz.8.2841: corrupted in-inode xattr: bad e_name length [ 548.629322][T14481] program syz.9.2835 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 548.720839][T14507] ALSA: mixer_oss: invalid OSS volume '' [ 548.726647][T14507] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 548.734872][T14507] ALSA: mixer_oss: invalid OSS volume '' [ 548.745281][T14507] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 548.753802][T14507] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 548.791435][ T8007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 548.918278][T10158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.449937][ T5609] Bluetooth: hci2: unexpected event for opcode 0x0000 [ 549.507533][T14538] ALSA: mixer_oss: invalid OSS volume '' [ 549.513492][T14538] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 549.521620][T14538] ALSA: mixer_oss: invalid OSS volume '' [ 549.527526][T14538] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 549.536142][T14538] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 550.849624][T14567] loop3: detected capacity change from 0 to 512 [ 550.977978][T14567] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 550.991283][T14567] ext4 filesystem being mounted at /526/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.077784][T14580] ALSA: mixer_oss: invalid OSS volume '' [ 551.083705][T14580] ALSA: mixer_oss: invalid OSS volume 'zT-nP(A-. m{q' [ 551.092945][T14580] ALSA: mixer_oss: invalid OSS volume '' [ 551.098784][T14580] ALSA: mixer_oss: invalid OSS volume 'beX:A]KqA8.:' [ 551.108717][T14580] ALSA: mixer_oss: invalid OSS volume 'X ?#zzMn٢w' [ 551.259458][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 551.297582][ T5609] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 551.452537][T14590] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 551.634568][T14594] syzkaller0 speed is unknown, defaulting to 1000 [ 551.875509][T14603] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2881'. [ 551.955340][T14614] binder: 14602:14614 unknown command 1078485779 [ 551.978287][T14614] binder: 14602:14614 ioctl c0306201 200000000480 returned -22 [ 552.013010][ T5609] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 552.024421][ T5609] Bluetooth: hci2: Injecting HCI hardware error event [ 552.033468][ T5609] Bluetooth: hci2: hardware error 0x00 [ 552.190777][ T5738] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 552.370176][ T5738] usb 10-1: Using ep0 maxpacket: 16 [ 552.378041][ T5738] usb 10-1: unable to get BOS descriptor or descriptor too short [ 552.397404][ T5738] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 552.439033][ T5738] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 552.456224][T14622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 552.463540][T14622] IPv6: NLM_F_CREATE should be set when creating new route [ 552.465345][ T5738] usb 10-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 552.527914][ T5738] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 552.543990][ T5738] usb 10-1: Product: syz [ 552.548305][ T5738] usb 10-1: Manufacturer: syz [ 552.555904][ T5738] usb 10-1: SerialNumber: syz [ 552.823120][ T5617] Bluetooth: hci1: unexpected event for opcode 0x0047 [ 552.863898][T14634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 552.911960][T14634] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 553.000724][T14637] xt_CT: You must specify a L4 protocol and not use inversions on it [ 553.157169][ T5738] usb 10-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 553.157246][ T5738] usb 10-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 553.336511][T14645] loop3: detected capacity change from 0 to 16 [ 553.358380][T14645] erofs (device loop3): mounted with root inode @ nid 36. [ 553.417959][ T5738] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 553.472309][T14643] loop8: detected capacity change from 0 to 256 [ 553.499439][ T5738] usb 10-1: USB disconnect, device number 11 [ 553.996696][T14643] FAT-fs (loop8): data area starts beyond volume (32 > 0) [ 554.003918][T14643] FAT-fs (loop8): Can't find a valid FAT filesystem [ 554.200090][ T5609] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 554.217262][T14651] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 554.633516][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 554.685145][T14655] syzkaller0 speed is unknown, defaulting to 1000 [ 555.341812][T14674] loop3: detected capacity change from 0 to 256 [ 555.370816][ T5609] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 555.384158][ T5609] Bluetooth: hci0: Injecting HCI hardware error event [ 555.393193][ T5617] Bluetooth: hci0: hardware error 0x00 [ 555.528872][T14674] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 555.591945][T14674] exFAT-fs (loop3): failed to load alloc-bitmap [ 555.639487][T14674] exFAT-fs (loop3): failed to recognize exfat type [ 555.663498][T14682] loop9: detected capacity change from 0 to 4096 [ 556.479903][T14688] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2911'. [ 556.715609][T14693] loop8: detected capacity change from 0 to 512 [ 556.739951][T14693] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 557.504450][T14682] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 557.534308][ T5617] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 559.476495][T10158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.071228][T14710] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.125744][T14707] loop9: detected capacity change from 0 to 4096 [ 560.156604][T14707] EXT4-fs (loop9): Test dummy encryption mode enabled [ 560.329939][ T5619] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 560.397249][T14707] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 560.529830][ T5619] usb 4-1: Using ep0 maxpacket: 32 [ 560.557981][ T5619] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 560.615275][ T5619] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 560.689209][ T5619] usb 4-1: config 0 has no interface number 0 [ 560.715027][ T5619] usb 4-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 560.748379][ T5619] usb 4-1: config 0 interface 67 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 560.807868][ T5619] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 560.836199][ T5619] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.871932][ T5619] usb 4-1: Product: syz [ 560.878334][T10158] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.892115][ T5619] usb 4-1: Manufacturer: syz [ 560.897095][ T5619] usb 4-1: SerialNumber: syz [ 560.950188][ T5619] usb 4-1: config 0 descriptor?? [ 560.993430][ T5619] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 561.034651][ T5619] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -22 [ 561.205679][ T5619] usb 4-1: USB disconnect, device number 30 [ 561.406510][T14748] loop6: detected capacity change from 0 to 1024 [ 561.432682][T14748] EXT4-fs: Ignoring removed orlov option [ 561.477755][T14748] ext4: Bad value for 'init_itable' [ 562.190305][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.198393][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.427697][T14761] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 562.602356][T14766] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2943'. [ 566.708138][T14819] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 566.715443][T14819] IPv6: NLM_F_CREATE should be set when creating new route [ 567.060894][T14819] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.068611][T14819] bridge0: port 1(bridge_slave_0) entered disabled state [ 567.640641][T14819] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 567.675215][T14819] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 568.420414][T12680] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.459415][T13259] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.478848][T13259] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.504214][T13259] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.510140][T14870] jffs2: notice: (14870) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 569.773533][T14880] gadgetfs: bound to dummy_udc driver [ 570.917093][T14897] loop5: detected capacity change from 0 to 256 [ 571.070091][T14897] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 571.126439][T14897] FAT-fs (loop5): Filesystem has been set read-only [ 572.514438][T13213] block nbd0: Possible stuck request ffff888027305080: control (read@0,1024B). Runtime 420 seconds [ 572.525568][T13213] block nbd0: Possible stuck request ffff888027305240: control (read@1024,1024B). Runtime 420 seconds [ 573.222026][T13213] block nbd0: Possible stuck request ffff888027305400: control (read@2048,1024B). Runtime 420 seconds [ 573.233095][T13213] block nbd0: Possible stuck request ffff8880273055c0: control (read@3072,1024B). Runtime 420 seconds [ 573.508180][T14930] gadgetfs: bound to dummy_udc driver [ 573.933696][ T30] audit: type=1326 audit(1786099676.490:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.7.3015" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 574.049582][ T30] audit: type=1326 audit(1786099676.490:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.7.3015" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 574.053037][T14950] loop5: detected capacity change from 0 to 512 [ 574.143669][T14950] EXT4-fs: Ignoring removed nomblk_io_submit option [ 574.188401][ T30] audit: type=1326 audit(1786099676.540:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.7.3015" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 574.199924][T14950] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal [ 575.019934][ T30] audit: type=1326 audit(1786099676.540:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.7.3015" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=48 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 575.167831][ T30] audit: type=1326 audit(1786099676.540:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14946 comm="syz.7.3015" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 576.324358][T14983] gadgetfs: bound to dummy_udc driver [ 576.561780][T14944] loop6: detected capacity change from 0 to 40427 [ 576.643996][T14944] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12 [ 576.708242][T14944] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 576.788536][T14944] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-4) [ 577.455900][T15017] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3038'. [ 577.487194][T15017] 8021q: adding VLAN 0 to HW filter on device bond0 [ 578.990600][T15033] gadgetfs: bound to dummy_udc driver [ 580.032873][T15048] netlink: 388 bytes leftover after parsing attributes in process `syz.7.3048'. [ 582.390563][T15061] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3053'. [ 582.580867][T15065] gadgetfs: bound to dummy_udc driver [ 582.995988][T15078] usb usb8: usbfs: process 15078 (syz.6.3063) did not claim interface 3 before use [ 583.313113][T15082] syzkaller0 speed is unknown, defaulting to 1000 [ 583.498162][T15091] loop8: detected capacity change from 0 to 512 [ 583.554329][T15091] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3067: iget: bad i_size value: 38620345925642 [ 583.579126][T15091] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 583.588429][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 583.604111][ C1] EXT4-fs (loop8): last error at time 1786099686: ext4_orphan_get:1399: inode 15 [ 583.613654][T15091] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3067: couldn't read orphan inode 15 (err -117) [ 583.628085][ T5619] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 583.706049][T15091] loop8: lost filesystem error report for type 5 error -117 [ 583.721477][T15091] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.832728][ T5619] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 583.860425][T15091] EXT4-fs (loop8): shut down requested (1) [ 583.885991][ T5619] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 583.895308][T15101] netlink: 83 bytes leftover after parsing attributes in process `syz.3.3069'. [ 583.920754][T15088] program syz.8.3067 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 583.952251][ T5619] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 583.977100][ T5619] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.012271][ T5619] usb 7-1: Product: syz [ 584.017097][ T5619] usb 7-1: Manufacturer: syz [ 584.027206][ T5619] usb 7-1: SerialNumber: syz [ 584.064863][ T5619] usb 7-1: config 0 descriptor?? [ 584.113743][T15085] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 584.145656][T15085] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 584.307880][ T8007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 584.408442][T15085] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 584.431239][ T5609] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 584.443143][ T5609] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 584.453423][ T5609] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 584.455965][T15085] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 584.488836][ T5609] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 584.500432][ T5609] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 584.656594][T15111] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3072'. [ 584.765922][ T5619] Error reading MAC address [ 584.820710][ T5619] usb 7-1: USB disconnect, device number 29 [ 585.881892][T15144] loop6: detected capacity change from 0 to 512 [ 585.931012][T15107] syzkaller0 speed is unknown, defaulting to 1000 [ 586.018075][T15144] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3083: iget: bad i_size value: 38620345925642 [ 586.126202][T15144] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 586.128233][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 586.143865][ C0] EXT4-fs (loop6): last error at time 1786099688: ext4_orphan_get:1399: inode 15 [ 586.163987][T15147] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 586.186522][T15144] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3083: couldn't read orphan inode 15 (err -117) [ 586.212865][T15144] loop6: lost filesystem error report for type 5 error -117 [ 586.235065][T15144] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.453667][T15144] EXT4-fs (loop6): shut down requested (1) [ 586.545505][T15142] program syz.6.3083 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 586.568286][ T5617] Bluetooth: hci6: command tx timeout [ 586.879288][ T6306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 586.959761][T15159] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 587.559093][T15159] syzkaller0 speed is unknown, defaulting to 1000 [ 587.650698][T15175] loop8: detected capacity change from 0 to 256 [ 587.701387][T15175] exfat: Deprecated parameter 'namecase' [ 587.791347][T15177] loop6: detected capacity change from 0 to 1024 [ 587.811151][ T36] erspan0: left allmulticast mode [ 587.814457][T15177] EXT4-fs: Ignoring removed bh option [ 587.833143][ T36] erspan0: left promiscuous mode [ 587.849692][T15177] EXT4-fs (loop6): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 587.861678][T15175] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc232f927, utbl_chksum : 0xe619d30d) [ 587.874482][ T36] bridge0: port 3(erspan0) entered disabled state [ 587.902766][ T36] bridge_slave_1: left allmulticast mode [ 587.917502][ T36] bridge_slave_1: left promiscuous mode [ 587.942763][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 587.983016][ T36] bridge_slave_0: left allmulticast mode [ 588.000076][ T36] bridge_slave_0: left promiscuous mode [ 588.000497][T15177] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 588.013383][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.394148][T15184] loop8: detected capacity change from 0 to 1024 [ 588.407253][T15184] EXT4-fs: quotafile must be on filesystem root [ 588.649023][ T5617] Bluetooth: hci6: command tx timeout [ 588.801645][ T6306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.991278][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 589.060171][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 589.096848][ T36] bond0 (unregistering): Released all slaves [ 589.362261][ T36] tipc: Disabling bearer [ 589.411010][ T36] tipc: Left network mode [ 589.596345][T15200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 589.673350][T15202] loop5: detected capacity change from 0 to 512 [ 589.724773][T15202] EXT4-fs error (device loop5): ext4_orphan_get:1399: inode #15: comm syz.5.3101: iget: bad i_size value: 38620345925642 [ 589.799254][T15202] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 589.799751][T15202] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.3101: couldn't read orphan inode 15 (err -117) [ 589.809006][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 589.809029][ C1] EXT4-fs (loop5): last error at time 1786099692: ext4_orphan_get:1399: inode 15 [ 589.924246][T15202] loop5: lost filesystem error report for type 5 error -117 [ 589.933753][T15202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 590.006377][T15107] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.020659][T15107] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.028660][T15107] bridge_slave_0: entered allmulticast mode [ 590.037430][T15107] bridge_slave_0: entered promiscuous mode [ 590.065396][T15198] EXT4-fs (loop5): shut down requested (1) [ 590.071548][T15107] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.092174][T15107] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.101991][T15107] bridge_slave_1: entered allmulticast mode [ 590.111397][T15107] bridge_slave_1: entered promiscuous mode [ 590.123153][T15198] program syz.5.3101 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 590.347465][T15107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.416931][T15107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.447354][T10233] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 590.534931][ T36] hsr_slave_0: left promiscuous mode [ 590.585304][ T36] hsr_slave_1: left promiscuous mode [ 590.611918][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 590.665921][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 590.728053][ T5617] Bluetooth: hci6: command tx timeout [ 591.768446][T15252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 591.792281][ T36] team0 (unregistering): Port device team_slave_1 removed [ 591.896891][ T36] team0 (unregistering): Port device team_slave_0 removed [ 592.093103][T15257] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 592.384650][T15262] loop3: detected capacity change from 0 to 512 [ 592.524752][T15262] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.3119: iget: bad i_size value: 38620345925642 [ 592.614657][T15262] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 592.615361][T15262] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.3119: couldn't read orphan inode 15 (err -117) [ 592.624631][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 592.624655][ C1] EXT4-fs (loop3): last error at time 1786099695: ext4_orphan_get:1399: inode 15 [ 592.662025][ T5266] 8021q: adding VLAN 0 to HW filter on device eth13 [ 592.735492][T15262] loop3: lost filesystem error report for type 5 error -117 [ 592.744827][T15262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 592.812022][T15107] team0: Port device team_slave_0 added [ 592.819288][ T5617] Bluetooth: hci6: command tx timeout [ 592.862679][T15107] team0: Port device team_slave_1 added [ 592.914454][T15257] syzkaller0 speed is unknown, defaulting to 1000 [ 592.972253][T15107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 592.993480][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.021815][T15107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 593.051986][T15260] EXT4-fs (loop3): shut down requested (1) [ 593.102888][T15107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 593.119444][T15107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 593.175932][T15260] program syz.3.3119 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 593.191733][T15107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 593.637434][ T5611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 593.973503][T15107] hsr_slave_0: entered promiscuous mode [ 594.001114][T15107] hsr_slave_1: entered promiscuous mode [ 594.914664][T15304] random: crng reseeded on system resumption [ 595.818883][ T5266] 8021q: adding VLAN 0 to HW filter on device eth14 [ 595.947804][T15328] loop6: detected capacity change from 0 to 256 [ 596.020451][ T10] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 596.032587][T15328] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x39601bbf, utbl_chksum : 0xe619d30d) [ 596.127024][T15328] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff) [ 596.225391][ T10] usb 9-1: Using ep0 maxpacket: 16 [ 596.241577][ T10] usb 9-1: unable to get BOS descriptor or descriptor too short [ 596.262099][ T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.294598][ T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 596.359536][ T10] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 596.374612][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.406034][ T10] usb 9-1: Product: syz [ 596.427467][ T10] usb 9-1: Manufacturer: syz [ 596.452510][ T10] usb 9-1: SerialNumber: syz [ 596.483968][T15302] loop5: detected capacity change from 0 to 40427 [ 596.563237][T15302] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 596.600805][T15302] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 596.646838][T15302] F2FS-fs (loop5): invalid crc_offset: 33558524 [ 596.787829][ T9] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 596.849428][T15343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 596.928338][T15343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 596.962735][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 596.977125][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 597.010900][ T9] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 597.046384][ T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 597.077527][T15107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 597.092657][ T9] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 597.124167][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.150086][T15107] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 597.156560][ T10] usb 9-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 597.174809][T15107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 597.191177][ T9] usb 7-1: Product: syz [ 597.212848][ T9] usb 7-1: Manufacturer: syz [ 597.217896][T15302] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 597.218064][ T9] usb 7-1: SerialNumber: syz [ 597.241777][ T10] usb 9-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 597.244727][T15107] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 597.301940][T15107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 597.310073][T15302] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 597.330168][T15302] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 597.343850][T15107] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 597.365798][T15107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 597.395100][T15107] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 597.453895][ T10] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 597.511911][ T10] usb 9-1: USB disconnect, device number 23 [ 597.564773][ T5976] udevd[5976]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 597.706838][T15336] loop6: detected capacity change from 0 to 512 [ 597.782072][ T30] audit: type=1804 audit(1786099700.351:108): pid=15302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.3130" name="/newroot/263/file1/bus" dev="loop5" ino=11 res=1 errno=0 [ 597.823831][T15107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 597.868853][ T5266] 8021q: adding VLAN 0 to HW filter on device eth15 [ 597.935187][T15336] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 597.959899][T15107] 8021q: adding VLAN 0 to HW filter on device team0 [ 597.969656][T15336] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 598.029289][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 598.036510][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 598.122423][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 598.129628][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 598.255296][T15368] random: crng reseeded on system resumption [ 598.420005][ T9] usb 7-1: 1:1: cannot get freq (v2/v3): err -71 [ 598.456890][ T9] usb 7-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 598.754588][ T9] usb 7-1: USB disconnect, device number 30 [ 598.926726][T15380] loop3: detected capacity change from 0 to 512 [ 598.951800][T15380] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 601.038837][ T6306] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.075285][ T5625] udevd[5625]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 601.997642][ T9] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 602.177876][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 602.201982][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 602.238931][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 602.284243][ T9] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 602.316849][ T9] usb 9-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 602.349098][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 602.579394][ T9] usb 9-1: Product: syz [ 602.698159][ T9] usb 9-1: Manufacturer: syz [ 602.838420][ T9] usb 9-1: SerialNumber: syz [ 603.129818][T13213] block nbd0: Possible stuck request ffff888027305080: control (read@0,1024B). Runtime 450 seconds [ 603.228874][T13213] block nbd0: Possible stuck request ffff888027305240: control (read@1024,1024B). Runtime 450 seconds [ 603.242010][T13213] block nbd0: Possible stuck request ffff888027305400: control (read@2048,1024B). Runtime 450 seconds [ 603.258184][T13213] block nbd0: Possible stuck request ffff8880273055c0: control (read@3072,1024B). Runtime 450 seconds [ 603.298504][ T5266] 8021q: adding VLAN 0 to HW filter on device eth16 [ 603.444088][T15107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 603.494594][T15435] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 603.540011][T15435] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 603.635916][ T9] usb 9-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 603.694774][ T9] usb 9-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 603.720700][T15107] veth0_vlan: entered promiscuous mode [ 603.800390][T15107] veth1_vlan: entered promiscuous mode [ 603.911409][ T9] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 603.937576][ T9] usb 9-1: USB disconnect, device number 24 [ 603.967476][T15107] veth0_macvtap: entered promiscuous mode [ 603.995526][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 604.012689][T15107] veth1_macvtap: entered promiscuous mode [ 604.101445][T15107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 604.171588][T15107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 604.332590][ T152] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.469484][ T152] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.560760][T12680] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.606992][T12680] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 604.773036][T12680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 604.815325][T12680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 604.992752][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 605.022311][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 606.061687][T15482] Illegal XDP return value 4294967294 on prog (id 260) dev syz_tun, expect packet loss! [ 606.070670][T15487] loop2: detected capacity change from 0 to 512 [ 606.115637][T15487] FAT-fs (loop2): data area starts beyond volume (3104 > 128) [ 606.182965][T15487] FAT-fs (loop2): Can't find a valid FAT filesystem [ 606.218754][T15490] loop8: detected capacity change from 0 to 1024 [ 606.226247][T15490] EXT4-fs: Ignoring removed nomblk_io_submit option [ 606.268960][T15490] EXT4-fs (loop8): unable to read superblock [ 606.323436][T15487] xt_hashlimit: size too large, truncated to 1048576 [ 606.485574][T15499] loop6: detected capacity change from 0 to 16 [ 606.606835][T15499] erofs (device loop6): mounted with root inode @ nid 36. [ 606.628174][ T5739] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 606.818450][ T5739] usb 6-1: Using ep0 maxpacket: 16 [ 606.866211][ T5739] usb 6-1: unable to get BOS descriptor or descriptor too short [ 606.891522][ T5739] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 606.926130][ T5739] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 606.974500][ T5739] usb 6-1: New USB device found, idVendor=1235, idProduct=8212, bcdDevice= 0.40 [ 607.003068][ T5739] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 607.027405][ T5739] usb 6-1: Product: syz [ 607.043757][ T5739] usb 6-1: Manufacturer: syz [ 607.058910][ T5739] usb 6-1: SerialNumber: syz [ 607.476143][T15526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 607.544491][T15526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 608.330098][ T5739] usb 6-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8212); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 608.415643][ T5739] usb 6-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 608.710097][ T5739] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 608.763934][ T5739] usb 6-1: USB disconnect, device number 26 [ 608.861586][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 608.865571][T15550] loop6: detected capacity change from 0 to 256 [ 608.957244][ T5842] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 609.036499][T15550] FAT-fs (loop6): data area starts beyond volume (274 > 64) [ 609.062454][T15550] FAT-fs (loop6): Can't find a valid FAT filesystem [ 609.139519][ T5842] usb 9-1: Using ep0 maxpacket: 8 [ 609.164035][ T5842] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 609.206339][ T5842] usb 9-1: New USB device found, idVendor=0582, idProduct=00eb, bcdDevice= 0.40 [ 609.236208][ T5842] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.274476][ T5842] usb 9-1: Product: syz [ 609.299639][ T5842] usb 9-1: Manufacturer: syz [ 609.324901][ T5842] usb 9-1: SerialNumber: syz [ 609.638141][ T5842] usb 9-1: unit 0 not found! [ 611.424669][ T5842] usb 9-1: USB disconnect, device number 25 [ 611.650566][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 612.266925][ T30] audit: type=1326 audit(1786099714.802:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.7.3215" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 612.405141][ T30] audit: type=1326 audit(1786099714.802:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.7.3215" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 612.533214][ T30] audit: type=1326 audit(1786099714.822:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.7.3215" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 612.802651][T15629] loop3: detected capacity change from 0 to 512 [ 613.612145][T15629] EXT4-fs (loop3): Test dummy encryption mode enabled [ 615.367975][ T30] audit: type=1326 audit(1786099714.822:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.7.3215" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 616.273860][T15629] EXT4-fs: error -4 creating inode table initialization thread [ 616.282052][T15629] EXT4-fs (loop3): mount failed [ 616.462360][ T30] audit: type=1326 audit(1786099714.862:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.7.3215" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 616.494725][ T30] audit: type=1326 audit(1786099714.862:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.7.3215" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 616.560389][ T30] audit: type=1326 audit(1786099714.862:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.7.3215" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 616.711861][ T30] audit: type=1326 audit(1786099714.912:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.7.3215" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 616.845908][ T30] audit: type=1326 audit(1786099714.922:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15618 comm="syz.7.3215" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8f2a19e0d9 code=0x7ffc0000 [ 618.803146][T15656] loop8: detected capacity change from 0 to 512 [ 618.823374][T15656] EXT4-fs (loop8): Test dummy encryption mode enabled [ 618.891157][T15656] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 619.006978][T15656] EXT4-fs (loop8): 1 truncate cleaned up [ 619.041561][T15656] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 619.301546][ T8007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 622.084313][ T5609] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 622.099808][ T5609] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 622.110884][ T5609] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 622.128088][ T5609] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 622.141207][ T5609] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 623.609404][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.620785][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.747271][T15740] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 623.839339][T15741] loop2: detected capacity change from 0 to 4096 [ 623.883095][T15697] syzkaller0 speed is unknown, defaulting to 1000 [ 623.903974][T15741] EXT4-fs warning (device loop2): ext4_enable_quotas:7276: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 623.931690][T15740] syzkaller0 speed is unknown, defaulting to 1000 [ 623.945142][T15741] EXT4-fs (loop2): mount failed [ 624.261150][ T5617] Bluetooth: hci5: command tx timeout [ 625.289295][T15769] loop8: detected capacity change from 0 to 512 [ 625.360566][T15769] EXT4-fs (loop8): Test dummy encryption mode enabled [ 625.441359][T15769] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 625.582429][T15769] EXT4-fs error (device loop8): ext4_orphan_get:1425: comm syz.8.3249: bad orphan inode 131072 [ 625.740757][T15769] loop8: lost filesystem error report for type 5 error -117 [ 625.788733][T15769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 625.976390][ T5619] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 625.989458][T15697] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.012873][T15697] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.026262][T15697] bridge_slave_0: entered allmulticast mode [ 626.050236][T15697] bridge_slave_0: entered promiscuous mode [ 626.086759][T15697] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.122819][T15697] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.154823][ T5619] usb 3-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice= 0.40 [ 626.178765][T15697] bridge_slave_1: entered allmulticast mode [ 626.201229][ T5619] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 626.216720][T15697] bridge_slave_1: entered promiscuous mode [ 626.275336][ T5619] usb 3-1: Product: syz [ 626.366163][ T5617] Bluetooth: hci5: command tx timeout [ 626.494272][T15799] 9pnet_fd: p9_fd_create_tcp (15799): problem connecting socket to 127.0.0.1 [ 627.251869][ T5619] usb 3-1: Manufacturer: syz [ 627.265440][ T5619] usb 3-1: SerialNumber: syz [ 628.137527][ T5619] usb 3-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 628.391481][T15697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.407606][ T5617] Bluetooth: hci5: command tx timeout [ 628.454934][ T5619] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 628.498646][ T8007] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 628.508607][T15697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.577070][ T5619] usb 3-1: USB disconnect, device number 6 [ 629.834851][T12146] udevd[12146]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 629.926552][T15697] team0: Port device team_slave_0 added [ 629.991266][T15697] team0: Port device team_slave_1 added [ 630.148773][T15815] afs: Unknown parameter 's {E' %%#S5Wc;_#ap0L8w1%t`%|uXbWZ;jICq&[Qu]yP4ïW&Kb_o8#Xe\' [ 630.271894][T15697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 630.314415][T15697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.466362][T15697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 630.486847][ T5617] Bluetooth: hci5: command tx timeout [ 630.557044][T15823] smpboot: CPU 1 is now offline [ 630.571526][T15697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 630.613381][T15697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 630.791858][T15697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.068972][T15825] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 631.120399][T15818] process 15822 (syz.6.3262) no longer affine to cpu1 [ 631.162177][T15755] ------------[ cut here ]------------ [ 631.163075][T15755] [ 631.163083][T15755] ====================================================== [ 631.163092][T15755] WARNING: possible circular locking dependency detected [ 631.163106][T15755] syzkaller #0 Tainted: G L [ 631.163119][T15755] ------------------------------------------------------ [ 631.163128][T15755] syz.8.3246/15755 is trying to acquire lock: [ 631.163141][T15755] ffffffff8eb4bf40 (console_owner){-.-.}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 631.163201][T15755] [ 631.163201][T15755] but task is already holding lock: [ 631.163209][T15755] ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 631.163272][T15755] [ 631.163272][T15755] which lock already depends on the new lock. [ 631.163272][T15755] [ 631.163281][T15755] [ 631.163281][T15755] the existing dependency chain (in reverse order) is: [ 631.163291][T15755] [ 631.163291][T15755] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 631.163323][T15755] _raw_spin_lock_nested+0x32/0x50 [ 631.163354][T15755] raw_spin_rq_lock_nested+0x2d/0x160 [ 631.163381][T15755] _task_rq_lock+0xc0/0x440 [ 631.163407][T15755] cgroup_move_task+0x9a/0x350 [ 631.163439][T15755] css_set_move_task+0x62d/0x820 [ 631.163473][T15755] cgroup_post_fork+0x209/0x9b0 [ 631.163506][T15755] copy_process+0x402b/0x4390 [ 631.163530][T15755] kernel_clone+0x2d7/0x940 [ 631.163556][T15755] user_mode_thread+0x110/0x180 [ 631.163582][T15755] rest_init+0x23/0x300 [ 631.163602][T15755] start_kernel+0x392/0x3e0 [ 631.163627][T15755] x86_64_start_reservations+0x24/0x30 [ 631.163662][T15755] x86_64_start_kernel+0x137/0x1b0 [ 631.163697][T15755] common_startup_64+0x13e/0x157 [ 631.163721][T15755] [ 631.163721][T15755] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 631.163752][T15755] _raw_spin_lock_irqsave+0x40/0x60 [ 631.163778][T15755] try_to_wake_up+0x67/0x14d0 [ 631.163809][T15755] __wake_up_common_lock+0x13a/0x1f0 [ 631.163830][T15755] tty_port_default_wakeup+0xc8/0x100 [ 631.163853][T15755] serial8250_tx_chars+0x70e/0x950 [ 631.163886][T15755] serial8250_handle_irq+0x166/0x550 [ 631.163925][T15755] serial8250_default_handle_irq+0xbf/0x1e0 [ 631.163949][T15755] serial8250_interrupt+0x8d/0x160 [ 631.163978][T15755] __handle_irq_event_percpu+0x216/0x9a0 [ 631.164000][T15755] handle_irq_event+0x8b/0x1e0 [ 631.164023][T15755] handle_edge_irq+0x1f4/0x8a0 [ 631.164041][T15755] __common_interrupt+0x141/0x1f0 [ 631.164068][T15755] common_interrupt+0xb6/0xe0 [ 631.164087][T15755] asm_common_interrupt+0x26/0x40 [ 631.164109][T15755] mas_store_prealloc+0x6b0/0xa30 [ 631.164136][T15755] commit_merge+0x5e3/0x700 [ 631.164166][T15755] vma_expand+0x81e/0xf40 [ 631.164195][T15755] vma_merge_new_range+0x6c0/0x8e0 [ 631.164224][T15755] mmap_region+0x10e8/0x2310 [ 631.164256][T15755] do_mmap+0xc3b/0x10c0 [ 631.164274][T15755] vm_mmap_pgoff+0x272/0x4e0 [ 631.164305][T15755] ksys_mmap_pgoff+0x4dc/0x760 [ 631.164326][T15755] do_syscall_64+0x174/0x580 [ 631.164354][T15755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 631.164375][T15755] [ 631.164375][T15755] -> #2 (&tty->write_wait){-.-.}-{3:3}: [ 631.164405][T15755] _raw_spin_lock_irqsave+0x40/0x60 [ 631.164429][T15755] __wake_up_common_lock+0x30/0x1f0 [ 631.164450][T15755] tty_port_default_wakeup+0xc8/0x100 [ 631.164471][T15755] serial8250_tx_chars+0x70e/0x950 [ 631.164504][T15755] serial8250_handle_irq+0x166/0x550 [ 631.164537][T15755] serial8250_default_handle_irq+0xbf/0x1e0 [ 631.164560][T15755] serial8250_interrupt+0x8d/0x160 [ 631.164589][T15755] __handle_irq_event_percpu+0x216/0x9a0 [ 631.164612][T15755] handle_irq_event+0x8b/0x1e0 [ 631.164633][T15755] handle_edge_irq+0x1f4/0x8a0 [ 631.164652][T15755] __common_interrupt+0x141/0x1f0 [ 631.164678][T15755] common_interrupt+0xb6/0xe0 [ 631.164697][T15755] asm_common_interrupt+0x26/0x40 [ 631.164717][T15755] pv_native_safe_halt+0xf/0x20 [ 631.164744][T15755] default_idle+0x9/0x20 [ 631.164774][T15755] default_idle_call+0x72/0xb0 [ 631.164805][T15755] do_idle+0x2e0/0x540 [ 631.164831][T15755] cpu_startup_entry+0x43/0x60 [ 631.164856][T15755] start_secondary+0x101/0x110 [ 631.164884][T15755] common_startup_64+0x13e/0x157 [ 631.164910][T15755] [ 631.164910][T15755] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 631.164939][T15755] _raw_spin_lock_irqsave+0x40/0x60 [ 631.164963][T15755] serial8250_console_write+0x153/0x1ba0 [ 631.164984][T15755] console_flush_all+0x6ea/0xaf0 [ 631.165005][T15755] console_unlock+0xd1/0x1c0 [ 631.165037][T15755] vprintk_emit+0x485/0x560 [ 631.165069][T15755] _printk+0xdd/0x130 [ 631.165088][T15755] register_console+0xbc3/0xfc0 [ 631.165109][T15755] univ8250_console_init+0x3a/0x70 [ 631.165132][T15755] console_init+0x10b/0x4a0 [ 631.165165][T15755] start_kernel+0x238/0x3e0 [ 631.165187][T15755] x86_64_start_reservations+0x24/0x30 [ 631.165219][T15755] x86_64_start_kernel+0x137/0x1b0 [ 631.165250][T15755] common_startup_64+0x13e/0x157 [ 631.165270][T15755] [ 631.165270][T15755] -> #0 (console_owner){-.-.}-{0:0}: [ 631.165300][T15755] __lock_acquire+0x1520/0x2cf0 [ 631.165328][T15755] lock_acquire+0x106/0x350 [ 631.165354][T15755] console_flush_all+0x693/0xaf0 [ 631.165375][T15755] console_unlock+0xd1/0x1c0 [ 631.165407][T15755] vprintk_emit+0x485/0x560 [ 631.165439][T15755] _printk+0xdd/0x130 [ 631.165457][T15755] __report_bug+0x349/0x570 [ 631.165485][T15755] report_bug+0x16a/0x220 [ 631.165513][T15755] handle_bug+0x9c/0x200 [ 631.165543][T15755] exc_invalid_op+0x1a/0x50 [ 631.165574][T15755] asm_exc_invalid_op+0x1a/0x20 [ 631.165594][T15755] update_rq_clock+0x34d/0x560 [ 631.165618][T15755] __schedule+0x388e/0x56c0 [ 631.165642][T15755] preempt_schedule_common+0x82/0xd0 [ 631.165668][T15755] preempt_schedule_thunk+0x16/0x40 [ 631.165690][T15755] _raw_spin_unlock+0x3f/0x50 [ 631.165713][T15755] filemap_map_pages+0x1a69/0x2090 [ 631.165735][T15755] do_pte_missing+0x20ae/0x34b0 [ 631.165761][T15755] handle_mm_fault+0x1b36/0x3080 [ 631.165782][T15755] __get_user_pages+0x1678/0x2720 [ 631.165815][T15755] get_dump_page+0x1b5/0x410 [ 631.165847][T15755] dump_user_range+0x20a/0x12c0 [ 631.165870][T15755] elf_core_dump+0x3485/0x3a90 [ 631.165893][T15755] coredump_write+0x1290/0x1960 [ 631.165920][T15755] vfs_coredump+0x36ff/0x44b0 [ 631.165940][T15755] get_signal+0x1094/0x12c0 [ 631.165961][T15755] arch_do_signal_or_restart+0xbb/0x860 [ 631.165987][T15755] irqentry_exit+0x2ba/0x8f0 [ 631.166014][T15755] asm_exc_page_fault+0x26/0x30 [ 631.166034][T15755] [ 631.166034][T15755] other info that might help us debug this: [ 631.166034][T15755] [ 631.166042][T15755] Chain exists of: [ 631.166042][T15755] console_owner --> &p->pi_lock --> &rq->__lock [ 631.166042][T15755] [ 631.166077][T15755] Possible unsafe locking scenario: [ 631.166077][T15755] [ 631.166084][T15755] CPU0 CPU1 [ 631.166091][T15755] ---- ---- [ 631.166098][T15755] lock(&rq->__lock); [ 631.166112][T15755] lock(&p->pi_lock); [ 631.166129][T15755] lock(&rq->__lock); [ 631.166145][T15755] lock(console_owner); [ 631.166160][T15755] [ 631.166160][T15755] *** DEADLOCK *** [ 631.166160][T15755] [ 631.166166][T15755] 8 locks held by syz.8.3246/15755: [ 631.166179][T15755] #0: ffff888077dbc450 (sb_writers#5){.+.+}-{0:0}, at: vfs_coredump+0x36ff/0x44b0 [ 631.166237][T15755] #1: ffff88807d51dcf8 (&mm->mmap_lock){++++}-{4:4}, at: dump_user_range+0x1c5/0x12c0 [ 631.166291][T15755] #2: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: do_pte_missing+0x140c/0x34b0 [ 631.166348][T15755] #3: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: filemap_map_pages+0x1d8/0x2090 [ 631.166402][T15755] #4: ffffffff8eb59c60 (rcu_read_lock){....}-{1:3}, at: __pte_offset_map+0x29/0x240 [ 631.166455][T15755] #5: ffff8880b863b160 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb2/0x160 [ 631.166513][T15755] #6: ffffffff8eb4bfa0 (console_lock){+.+.}-{0:0}, at: _printk+0xdd/0x130 [ 631.166563][T15755] #7: ffffffff8ea33838 (console_srcu){....}-{0:0}, at: console_flush_all+0x123/0xaf0 [ 631.166615][T15755] [ 631.166615][T15755] stack backtrace: [ 631.166629][T15755] CPU: 0 UID: 0 PID: 15755 Comm: syz.8.3246 Tainted: G L syzkaller #0 PREEMPT(full) [ 631.166659][T15755] Tainted: [L]=SOFTLOCKUP [ 631.166667][T15755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 631.166680][T15755] Call Trace: [ 631.166689][T15755] [ 631.166698][T15755] dump_stack_lvl+0xe8/0x150 [ 631.166729][T15755] print_circular_bug+0x2e1/0x300 [ 631.166767][T15755] check_noncircular+0x12e/0x150 [ 631.166806][T15755] __lock_acquire+0x1520/0x2cf0 [ 631.166850][T15755] ? console_flush_all+0x123/0xaf0 [ 631.166872][T15755] lock_acquire+0x106/0x350 [ 631.166900][T15755] ? console_flush_all+0x123/0xaf0 [ 631.166929][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.166957][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.166983][T15755] ? do_raw_spin_unlock+0xf5/0x210 [ 631.167008][T15755] ? console_flush_all+0x123/0xaf0 [ 631.167030][T15755] console_flush_all+0x693/0xaf0 [ 631.167052][T15755] ? console_flush_all+0x123/0xaf0 [ 631.167077][T15755] ? console_flush_all+0x123/0xaf0 [ 631.167103][T15755] ? __pfx_console_flush_all+0x10/0x10 [ 631.167128][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.167155][T15755] ? is_printk_cpu_sync_owner+0x32/0x40 [ 631.167184][T15755] console_unlock+0xd1/0x1c0 [ 631.167220][T15755] ? __pfx_console_unlock+0x10/0x10 [ 631.167253][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.167279][T15755] ? _raw_spin_unlock+0x40/0x50 [ 631.167304][T15755] ? _printk+0xdd/0x130 [ 631.167325][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.167354][T15755] vprintk_emit+0x485/0x560 [ 631.167388][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.167416][T15755] ? __pfx_vprintk_emit+0x10/0x10 [ 631.167457][T15755] _printk+0xdd/0x130 [ 631.167481][T15755] ? __pfx__printk+0x10/0x10 [ 631.167505][T15755] ? unwind_next_frame+0x8f/0x2550 [ 631.167526][T15755] ? find_bug+0xa5/0x370 [ 631.167554][T15755] ? update_rq_clock+0x34d/0x560 [ 631.167579][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.167607][T15755] ? update_rq_clock+0x34d/0x560 [ 631.167633][T15755] __report_bug+0x349/0x570 [ 631.167665][T15755] ? update_rq_clock+0x34d/0x560 [ 631.167694][T15755] ? __pfx___report_bug+0x10/0x10 [ 631.167723][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.167748][T15755] ? __lock_acquire+0x683/0x2cf0 [ 631.167784][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.167810][T15755] ? do_raw_spin_lock+0x12b/0x2f0 [ 631.167833][T15755] ? update_rq_clock+0x34d/0x560 [ 631.167859][T15755] report_bug+0x16a/0x220 [ 631.167889][T15755] ? update_rq_clock+0x34d/0x560 [ 631.167919][T15755] ? update_rq_clock+0x34f/0x560 [ 631.167944][T15755] handle_bug+0x9c/0x200 [ 631.167978][T15755] exc_invalid_op+0x1a/0x50 [ 631.168011][T15755] asm_exc_invalid_op+0x1a/0x20 [ 631.168032][T15755] RIP: 0010:update_rq_clock+0x34d/0x560 [ 631.168060][T15755] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 2b 19 a0 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 60 be 7b ff cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 631.168079][T15755] RSP: 0018:ffffc90006006278 EFLAGS: 00010046 [ 631.168098][T15755] RAX: 0000000000000000 RBX: ffff8880b873b100 RCX: 0000000000000002 [ 631.168113][T15755] RDX: 0000000000000000 RSI: ffffffff8e4ad510 RDI: ffffffff8c4bbd80 [ 631.168130][T15755] RBP: dffffc0000000000 R08: ffffffff90574437 R09: 1ffffffff20ae886 [ 631.168147][T15755] R10: dffffc0000000000 R11: ffffffff819fde60 R12: ffff88802e8e07e8 [ 631.168164][T15755] R13: dffffc0000000001 R14: ffff8880b873bfc8 R15: ffff8880b873b100 [ 631.168184][T15755] ? __pfx_pick_task_stop+0x10/0x10 [ 631.168215][T15755] ? update_rq_clock+0x8f/0x560 [ 631.168240][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.168269][T15755] __schedule+0x388e/0x56c0 [ 631.168302][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.168334][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.168362][T15755] ? __pfx___schedule+0x10/0x10 [ 631.168391][T15755] ? page_table_check_set+0x127/0x530 [ 631.168422][T15755] ? xas_find+0x843/0x980 [ 631.168454][T15755] ? preempt_schedule_thunk+0x16/0x40 [ 631.168479][T15755] preempt_schedule_common+0x82/0xd0 [ 631.168507][T15755] preempt_schedule_thunk+0x16/0x40 [ 631.168535][T15755] _raw_spin_unlock+0x3f/0x50 [ 631.168559][T15755] filemap_map_pages+0x1a69/0x2090 [ 631.168597][T15755] ? filemap_map_pages+0x1d8/0x2090 [ 631.168624][T15755] ? __pfx_filemap_map_pages+0x10/0x10 [ 631.168652][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.168680][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.168707][T15755] ? do_pte_missing+0x140c/0x34b0 [ 631.168734][T15755] ? __pfx_filemap_map_pages+0x10/0x10 [ 631.168758][T15755] ? do_pte_missing+0x140c/0x34b0 [ 631.168786][T15755] do_pte_missing+0x20ae/0x34b0 [ 631.168818][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.168846][T15755] ? handle_mm_fault+0xec/0x3080 [ 631.168871][T15755] handle_mm_fault+0x1b36/0x3080 [ 631.168901][T15755] ? handle_mm_fault+0xec/0x3080 [ 631.168933][T15755] ? __pfx_handle_mm_fault+0x10/0x10 [ 631.168957][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.168983][T15755] ? follow_page_pte+0x6c1/0xe70 [ 631.169011][T15755] ? __pfx_follow_page_pte+0x10/0x10 [ 631.169035][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.169066][T15755] __get_user_pages+0x1678/0x2720 [ 631.169120][T15755] get_dump_page+0x1b5/0x410 [ 631.169157][T15755] ? __pfx_get_dump_page+0x10/0x10 [ 631.169192][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.169219][T15755] ? down_read_killable+0x1bb/0x3b0 [ 631.169253][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.169279][T15755] ? iov_iter_bvec+0xb8/0x180 [ 631.169312][T15755] dump_user_range+0x20a/0x12c0 [ 631.169344][T15755] ? __pfx_dump_user_range+0x10/0x10 [ 631.169372][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.169398][T15755] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 631.169433][T15755] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 631.169468][T15755] ? elf_core_dump+0x2a8f/0x3a90 [ 631.169497][T15755] elf_core_dump+0x3485/0x3a90 [ 631.169533][T15755] ? __pfx_elf_core_dump+0x10/0x10 [ 631.169557][T15755] ? __kasan_kmalloc+0x93/0xb0 [ 631.169587][T15755] ? get_signal+0x1094/0x12c0 [ 631.169608][T15755] ? arch_do_signal_or_restart+0xbb/0x860 [ 631.169634][T15755] ? irqentry_exit+0x2ba/0x8f0 [ 631.169663][T15755] ? asm_exc_page_fault+0x26/0x30 [ 631.169689][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.169737][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.169765][T15755] ? 0xffffffffff600000 [ 631.169786][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.169816][T15755] coredump_write+0x1290/0x1960 [ 631.169849][T15755] ? __pfx_coredump_write+0x10/0x10 [ 631.169883][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.169913][T15755] ? unshare_files+0xab/0x140 [ 631.169943][T15755] vfs_coredump+0x36ff/0x44b0 [ 631.169965][T15755] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 631.170007][T15755] ? __pfx_vfs_coredump+0x10/0x10 [ 631.170037][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170063][T15755] ? __lock_acquire+0x683/0x2cf0 [ 631.170096][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170121][T15755] ? __lock_acquire+0x683/0x2cf0 [ 631.170155][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 631.170190][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170215][T15755] ? lock_acquire+0x106/0x350 [ 631.170248][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170274][T15755] ? lock_acquire+0x106/0x350 [ 631.170304][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170332][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170360][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 631.170393][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170420][T15755] ? is_bpf_text_address+0x292/0x2b0 [ 631.170450][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 631.170482][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170508][T15755] ? kernel_text_address+0xa5/0xe0 [ 631.170542][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170568][T15755] ? __kernel_text_address+0xd/0x30 [ 631.170600][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170626][T15755] ? unwind_get_return_address+0x4d/0x90 [ 631.170662][T15755] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 631.170689][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170715][T15755] ? arch_stack_walk+0xfb/0x150 [ 631.170756][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170782][T15755] ? stack_trace_save+0xa9/0x100 [ 631.170808][T15755] ? __pfx_stack_trace_save+0x10/0x10 [ 631.170834][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170860][T15755] ? stack_depot_save_flags+0x33/0x800 [ 631.170886][T15755] ? __lock_acquire+0x683/0x2cf0 [ 631.170922][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.170948][T15755] ? kasan_save_track+0x4f/0x80 [ 631.170975][T15755] ? kasan_save_track+0x3e/0x80 [ 631.171001][T15755] ? kasan_save_free_info+0x40/0x50 [ 631.171023][T15755] ? __kasan_slab_free+0x5c/0x80 [ 631.171051][T15755] ? kmem_cache_free+0x182/0x650 [ 631.171079][T15755] ? get_signal+0x9e7/0x12c0 [ 631.171101][T15755] ? arch_do_signal_or_restart+0xbb/0x860 [ 631.171127][T15755] ? irqentry_exit+0x2ba/0x8f0 [ 631.171156][T15755] ? asm_exc_page_fault+0x26/0x30 [ 631.171199][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.171225][T15755] ? proc_coredump_connector+0x187/0x4e0 [ 631.171267][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 631.171295][T15755] ? _raw_spin_unlock_irq+0x23/0x50 [ 631.171323][T15755] get_signal+0x1094/0x12c0 [ 631.171358][T15755] arch_do_signal_or_restart+0xbb/0x860 [ 631.171388][T15755] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 631.171429][T15755] irqentry_exit+0x2ba/0x8f0 [ 631.171457][T15755] ? trace_irq_disable+0x3b/0x140 [ 631.171488][T15755] asm_exc_page_fault+0x26/0x30 [ 631.171510][T15755] RIP: 0033:0x7f3d1959e0e1 [ 631.171528][T15755] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 631.171547][T15755] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 631.171565][T15755] RAX: 0000000000000000 RBX: 00007f3d19826090 RCX: 00007f3d1959e0d9 [ 631.171581][T15755] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 631.171596][T15755] RBP: 00007f3d19635024 R08: 0000000000000000 R09: 0000000000000000 [ 631.171610][T15755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 631.171624][T15755] R13: 00007f3d19826128 R14: 00007f3d19826090 R15: 00007ffe6cfe2ba8 [ 631.171651][T15755] [ 632.977137][T15755] debug_locks && !(lock_is_held(&(__rq_lockp(rq))->dep_map) != 0) [ 632.977157][T15755] WARNING: kernel/sched/sched.h:1641 at update_rq_clock+0x34d/0x560, CPU#0: syz.8.3246/15755 [ 632.995163][T15755] Modules linked in: [ 632.999072][T15755] CPU: 0 UID: 0 PID: 15755 Comm: syz.8.3246 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.010433][T15755] Tainted: [L]=SOFTLOCKUP [ 633.014736][T15755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 633.024784][T15755] RIP: 0010:update_rq_clock+0x34d/0x560 [ 633.030338][T15755] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 2b 19 a0 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 60 be 7b ff cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 633.049943][T15755] RSP: 0018:ffffc90006006278 EFLAGS: 00010046 [ 633.056008][T15755] RAX: 0000000000000000 RBX: ffff8880b873b100 RCX: 0000000000000002 [ 633.063965][T15755] RDX: 0000000000000000 RSI: ffffffff8e4ad510 RDI: ffffffff8c4bbd80 [ 633.071923][T15755] RBP: dffffc0000000000 R08: ffffffff90574437 R09: 1ffffffff20ae886 [ 633.079881][T15755] R10: dffffc0000000000 R11: ffffffff819fde60 R12: ffff88802e8e07e8 [ 633.087842][T15755] R13: dffffc0000000001 R14: ffff8880b873bfc8 R15: ffff8880b873b100 [ 633.095801][T15755] FS: 00007f3d1a4bb6c0(0000) GS:ffff888124f55000(0000) knlGS:0000000000000000 [ 633.104717][T15755] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 633.111286][T15755] CR2: 00007f1a91fed158 CR3: 00000000489fd000 CR4: 0000000000350ef0 [ 633.119246][T15755] Call Trace: [ 633.122512][T15755] [ 633.125423][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.131057][T15755] __schedule+0x388e/0x56c0 [ 633.135564][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.141200][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.146827][T15755] ? __pfx___schedule+0x10/0x10 [ 633.151673][T15755] ? page_table_check_set+0x127/0x530 [ 633.157039][T15755] ? xas_find+0x843/0x980 [ 633.161368][T15755] ? preempt_schedule_thunk+0x16/0x40 [ 633.166728][T15755] preempt_schedule_common+0x82/0xd0 [ 633.172005][T15755] preempt_schedule_thunk+0x16/0x40 [ 633.177193][T15755] _raw_spin_unlock+0x3f/0x50 [ 633.181863][T15755] filemap_map_pages+0x1a69/0x2090 [ 633.186983][T15755] ? filemap_map_pages+0x1d8/0x2090 [ 633.192171][T15755] ? __pfx_filemap_map_pages+0x10/0x10 [ 633.197624][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.203249][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.208872][T15755] ? do_pte_missing+0x140c/0x34b0 [ 633.213892][T15755] ? __pfx_filemap_map_pages+0x10/0x10 [ 633.219342][T15755] ? do_pte_missing+0x140c/0x34b0 [ 633.224445][T15755] do_pte_missing+0x20ae/0x34b0 [ 633.229292][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.234921][T15755] ? handle_mm_fault+0xec/0x3080 [ 633.239854][T15755] handle_mm_fault+0x1b36/0x3080 [ 633.244792][T15755] ? handle_mm_fault+0xec/0x3080 [ 633.249719][T15755] ? __pfx_handle_mm_fault+0x10/0x10 [ 633.254990][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.260613][T15755] ? follow_page_pte+0x6c1/0xe70 [ 633.265544][T15755] ? __pfx_follow_page_pte+0x10/0x10 [ 633.270820][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.276450][T15755] __get_user_pages+0x1678/0x2720 [ 633.281496][T15755] get_dump_page+0x1b5/0x410 [ 633.286088][T15755] ? __pfx_get_dump_page+0x10/0x10 [ 633.291200][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.296824][T15755] ? down_read_killable+0x1bb/0x3b0 [ 633.302021][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.307644][T15755] ? iov_iter_bvec+0xb8/0x180 [ 633.312316][T15755] dump_user_range+0x20a/0x12c0 [ 633.317167][T15755] ? __pfx_dump_user_range+0x10/0x10 [ 633.322456][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.328080][T15755] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 633.334321][T15755] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 633.340911][T15755] ? elf_core_dump+0x2a8f/0x3a90 [ 633.345849][T15755] elf_core_dump+0x3485/0x3a90 [ 633.350617][T15755] ? __pfx_elf_core_dump+0x10/0x10 [ 633.355735][T15755] ? __kasan_kmalloc+0x93/0xb0 [ 633.360494][T15755] ? get_signal+0x1094/0x12c0 [ 633.365157][T15755] ? arch_do_signal_or_restart+0xbb/0x860 [ 633.370865][T15755] ? irqentry_exit+0x2ba/0x8f0 [ 633.375630][T15755] ? asm_exc_page_fault+0x26/0x30 [ 633.380648][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.386291][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.391924][T15755] ? 0xffffffffff600000 [ 633.396068][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.401694][T15755] coredump_write+0x1290/0x1960 [ 633.406546][T15755] ? __pfx_coredump_write+0x10/0x10 [ 633.411743][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.417364][T15755] ? unshare_files+0xab/0x140 [ 633.422039][T15755] vfs_coredump+0x36ff/0x44b0 [ 633.426704][T15755] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 633.432865][T15755] ? __pfx_vfs_coredump+0x10/0x10 [ 633.437894][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.443555][T15755] ? __lock_acquire+0x683/0x2cf0 [ 633.448490][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.454113][T15755] ? __lock_acquire+0x683/0x2cf0 [ 633.459052][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 633.464249][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.469873][T15755] ? lock_acquire+0x106/0x350 [ 633.474550][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.480170][T15755] ? lock_acquire+0x106/0x350 [ 633.484841][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.490468][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.496094][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 633.501296][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.506918][T15755] ? is_bpf_text_address+0x292/0x2b0 [ 633.512199][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 633.517394][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.523020][T15755] ? kernel_text_address+0xa5/0xe0 [ 633.528131][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.533755][T15755] ? __kernel_text_address+0xd/0x30 [ 633.538951][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.544573][T15755] ? unwind_get_return_address+0x4d/0x90 [ 633.550208][T15755] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 633.556352][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.561973][T15755] ? arch_stack_walk+0xfb/0x150 [ 633.566832][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.572454][T15755] ? stack_trace_save+0xa9/0x100 [ 633.577382][T15755] ? __pfx_stack_trace_save+0x10/0x10 [ 633.582743][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.588365][T15755] ? stack_depot_save_flags+0x33/0x800 [ 633.593814][T15755] ? __lock_acquire+0x683/0x2cf0 [ 633.598746][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.604368][T15755] ? kasan_save_track+0x4f/0x80 [ 633.609210][T15755] ? kasan_save_track+0x3e/0x80 [ 633.614052][T15755] ? kasan_save_free_info+0x40/0x50 [ 633.619234][T15755] ? __kasan_slab_free+0x5c/0x80 [ 633.624165][T15755] ? kmem_cache_free+0x182/0x650 [ 633.629093][T15755] ? get_signal+0x9e7/0x12c0 [ 633.633669][T15755] ? arch_do_signal_or_restart+0xbb/0x860 [ 633.639379][T15755] ? irqentry_exit+0x2ba/0x8f0 [ 633.644137][T15755] ? asm_exc_page_fault+0x26/0x30 [ 633.649173][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.654793][T15755] ? proc_coredump_connector+0x187/0x4e0 [ 633.660432][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.666083][T15755] ? _raw_spin_unlock_irq+0x23/0x50 [ 633.671274][T15755] get_signal+0x1094/0x12c0 [ 633.675779][T15755] arch_do_signal_or_restart+0xbb/0x860 [ 633.681320][T15755] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 633.687503][T15755] irqentry_exit+0x2ba/0x8f0 [ 633.692088][T15755] ? trace_irq_disable+0x3b/0x140 [ 633.697108][T15755] asm_exc_page_fault+0x26/0x30 [ 633.701947][T15755] RIP: 0033:0x7f3d1959e0e1 [ 633.706348][T15755] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 633.725940][T15755] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 633.731994][T15755] RAX: 0000000000000000 RBX: 00007f3d19826090 RCX: 00007f3d1959e0d9 [ 633.739951][T15755] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 633.747911][T15755] RBP: 00007f3d19635024 R08: 0000000000000000 R09: 0000000000000000 [ 633.755865][T15755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 633.763821][T15755] R13: 00007f3d19826128 R14: 00007f3d19826090 R15: 00007ffe6cfe2ba8 [ 633.771790][T15755] [ 633.774796][T15755] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 633.782063][T15755] CPU: 0 UID: 0 PID: 15755 Comm: syz.8.3246 Tainted: G L syzkaller #0 PREEMPT(full) [ 633.792989][T15755] Tainted: [L]=SOFTLOCKUP [ 633.797294][T15755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 633.807333][T15755] Call Trace: [ 633.810597][T15755] [ 633.813513][T15755] vpanic+0x56c/0xa60 [ 633.817498][T15755] ? __pfx__printk+0x10/0x10 [ 633.822076][T15755] ? __pfx_vpanic+0x10/0x10 [ 633.826576][T15755] ? is_bpf_text_address+0x292/0x2b0 [ 633.831858][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 633.837063][T15755] panic+0xc5/0xd0 [ 633.840783][T15755] ? __pfx_panic+0x10/0x10 [ 633.845205][T15755] __warn+0x315/0x4c0 [ 633.849185][T15755] ? update_rq_clock+0x34d/0x560 [ 633.854121][T15755] ? update_rq_clock+0x34d/0x560 [ 633.859049][T15755] __report_bug+0x276/0x570 [ 633.863551][T15755] ? update_rq_clock+0x34d/0x560 [ 633.868486][T15755] ? __pfx___report_bug+0x10/0x10 [ 633.873502][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.879127][T15755] ? __lock_acquire+0x683/0x2cf0 [ 633.884074][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 633.889700][T15755] ? do_raw_spin_lock+0x12b/0x2f0 [ 633.894713][T15755] ? update_rq_clock+0x34d/0x560 [ 633.899642][T15755] report_bug+0x16a/0x220 [ 633.903968][T15755] ? update_rq_clock+0x34d/0x560 [ 633.908901][T15755] ? update_rq_clock+0x34f/0x560 [ 633.913830][T15755] handle_bug+0x9c/0x200 [ 633.918071][T15755] exc_invalid_op+0x1a/0x50 [ 633.922576][T15755] asm_exc_invalid_op+0x1a/0x20 [ 633.927420][T15755] RIP: 0010:update_rq_clock+0x34d/0x560 [ 633.932960][T15755] Code: 48 c1 e8 03 80 3c 28 00 74 08 48 89 df e8 2b 19 a0 00 4c 01 3b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d e9 60 be 7b ff cc 90 <0f> 0b 90 e9 42 fd ff ff 48 89 df 48 83 c4 10 5b 41 5c 41 5d 41 5e [ 633.952559][T15755] RSP: 0018:ffffc90006006278 EFLAGS: 00010046 [ 633.958619][T15755] RAX: 0000000000000000 RBX: ffff8880b873b100 RCX: 0000000000000002 [ 633.966689][T15755] RDX: 0000000000000000 RSI: ffffffff8e4ad510 RDI: ffffffff8c4bbd80 [ 633.974661][T15755] RBP: dffffc0000000000 R08: ffffffff90574437 R09: 1ffffffff20ae886 [ 633.982623][T15755] R10: dffffc0000000000 R11: ffffffff819fde60 R12: ffff88802e8e07e8 [ 633.990580][T15755] R13: dffffc0000000001 R14: ffff8880b873bfc8 R15: ffff8880b873b100 [ 633.998544][T15755] ? __pfx_pick_task_stop+0x10/0x10 [ 634.003748][T15755] ? update_rq_clock+0x8f/0x560 [ 634.008589][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.014217][T15755] __schedule+0x388e/0x56c0 [ 634.018723][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.024355][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.029979][T15755] ? __pfx___schedule+0x10/0x10 [ 634.034823][T15755] ? page_table_check_set+0x127/0x530 [ 634.040216][T15755] ? xas_find+0x843/0x980 [ 634.044555][T15755] ? preempt_schedule_thunk+0x16/0x40 [ 634.049932][T15755] preempt_schedule_common+0x82/0xd0 [ 634.055216][T15755] preempt_schedule_thunk+0x16/0x40 [ 634.060414][T15755] _raw_spin_unlock+0x3f/0x50 [ 634.065085][T15755] filemap_map_pages+0x1a69/0x2090 [ 634.070202][T15755] ? filemap_map_pages+0x1d8/0x2090 [ 634.075396][T15755] ? __pfx_filemap_map_pages+0x10/0x10 [ 634.080850][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.086477][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.092107][T15755] ? do_pte_missing+0x140c/0x34b0 [ 634.097125][T15755] ? __pfx_filemap_map_pages+0x10/0x10 [ 634.102573][T15755] ? do_pte_missing+0x140c/0x34b0 [ 634.107590][T15755] do_pte_missing+0x20ae/0x34b0 [ 634.112441][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.118069][T15755] ? handle_mm_fault+0xec/0x3080 [ 634.122997][T15755] handle_mm_fault+0x1b36/0x3080 [ 634.127931][T15755] ? handle_mm_fault+0xec/0x3080 [ 634.132860][T15755] ? __pfx_handle_mm_fault+0x10/0x10 [ 634.138137][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.143761][T15755] ? follow_page_pte+0x6c1/0xe70 [ 634.148690][T15755] ? __pfx_follow_page_pte+0x10/0x10 [ 634.153963][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.159591][T15755] __get_user_pages+0x1678/0x2720 [ 634.164636][T15755] get_dump_page+0x1b5/0x410 [ 634.169229][T15755] ? __pfx_get_dump_page+0x10/0x10 [ 634.174348][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.179978][T15755] ? down_read_killable+0x1bb/0x3b0 [ 634.185178][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.190802][T15755] ? iov_iter_bvec+0xb8/0x180 [ 634.195477][T15755] dump_user_range+0x20a/0x12c0 [ 634.200347][T15755] ? __pfx_dump_user_range+0x10/0x10 [ 634.205625][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.211249][T15755] ? elf_coredump_extra_notes_write+0x425/0x4b0 [ 634.217490][T15755] ? __pfx_elf_coredump_extra_notes_write+0x10/0x10 [ 634.224077][T15755] ? elf_core_dump+0x2a8f/0x3a90 [ 634.229010][T15755] elf_core_dump+0x3485/0x3a90 [ 634.233775][T15755] ? __pfx_elf_core_dump+0x10/0x10 [ 634.238873][T15755] ? __kasan_kmalloc+0x93/0xb0 [ 634.243634][T15755] ? get_signal+0x1094/0x12c0 [ 634.248295][T15755] ? arch_do_signal_or_restart+0xbb/0x860 [ 634.254006][T15755] ? irqentry_exit+0x2ba/0x8f0 [ 634.258763][T15755] ? asm_exc_page_fault+0x26/0x30 [ 634.263782][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.269433][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.275059][T15755] ? 0xffffffffff600000 [ 634.279203][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.284831][T15755] coredump_write+0x1290/0x1960 [ 634.289683][T15755] ? __pfx_coredump_write+0x10/0x10 [ 634.294881][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.300508][T15755] ? unshare_files+0xab/0x140 [ 634.305182][T15755] vfs_coredump+0x36ff/0x44b0 [ 634.309850][T15755] ? seqcount_lockdep_reader_access+0xd4/0x100 [ 634.316011][T15755] ? __pfx_vfs_coredump+0x10/0x10 [ 634.321029][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.326654][T15755] ? __lock_acquire+0x683/0x2cf0 [ 634.331589][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.337211][T15755] ? __lock_acquire+0x683/0x2cf0 [ 634.342147][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 634.347348][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.352969][T15755] ? lock_acquire+0x106/0x350 [ 634.357644][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.363267][T15755] ? lock_acquire+0x106/0x350 [ 634.367939][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.373564][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.379187][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 634.384381][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.390006][T15755] ? is_bpf_text_address+0x292/0x2b0 [ 634.395294][T15755] ? is_bpf_text_address+0x26/0x2b0 [ 634.400488][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.406108][T15755] ? kernel_text_address+0xa5/0xe0 [ 634.411216][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.416837][T15755] ? __kernel_text_address+0xd/0x30 [ 634.422034][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.427657][T15755] ? unwind_get_return_address+0x4d/0x90 [ 634.433290][T15755] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 634.439436][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.445060][T15755] ? arch_stack_walk+0xfb/0x150 [ 634.449917][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.455539][T15755] ? stack_trace_save+0xa9/0x100 [ 634.460469][T15755] ? __pfx_stack_trace_save+0x10/0x10 [ 634.465831][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.471472][T15755] ? stack_depot_save_flags+0x33/0x800 [ 634.476923][T15755] ? __lock_acquire+0x683/0x2cf0 [ 634.481858][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.487481][T15755] ? kasan_save_track+0x4f/0x80 [ 634.492323][T15755] ? kasan_save_track+0x3e/0x80 [ 634.497165][T15755] ? kasan_save_free_info+0x40/0x50 [ 634.502349][T15755] ? __kasan_slab_free+0x5c/0x80 [ 634.507279][T15755] ? kmem_cache_free+0x182/0x650 [ 634.512209][T15755] ? get_signal+0x9e7/0x12c0 [ 634.516785][T15755] ? arch_do_signal_or_restart+0xbb/0x860 [ 634.522496][T15755] ? irqentry_exit+0x2ba/0x8f0 [ 634.527254][T15755] ? asm_exc_page_fault+0x26/0x30 [ 634.532287][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.537908][T15755] ? proc_coredump_connector+0x187/0x4e0 [ 634.543548][T15755] ? srso_alias_return_thunk+0x5/0xfbef5 [ 634.549184][T15755] ? _raw_spin_unlock_irq+0x23/0x50 [ 634.554377][T15755] get_signal+0x1094/0x12c0 [ 634.558888][T15755] arch_do_signal_or_restart+0xbb/0x860 [ 634.564429][T15755] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 634.570587][T15755] irqentry_exit+0x2ba/0x8f0 [ 634.575172][T15755] ? trace_irq_disable+0x3b/0x140 [ 634.580191][T15755] asm_exc_page_fault+0x26/0x30 [ 634.585027][T15755] RIP: 0033:0x7f3d1959e0e1 [ 634.589427][T15755] Code: 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 634.609049][T15755] RSP: 002b:fffffffffffffe70 EFLAGS: 00010217 [ 634.615105][T15755] RAX: 0000000000000000 RBX: 00007f3d19826090 RCX: 00007f3d1959e0d9 [ 634.623067][T15755] RDX: 0000000000000000 RSI: fffffffffffffe70 RDI: 0000000000008000 [ 634.631028][T15755] RBP: 00007f3d19635024 R08: 0000000000000000 R09: 0000000000000000 [ 634.638985][T15755] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 634.646938][T15755] R13: 00007f3d19826128 R14: 00007f3d19826090 R15: 00007ffe6cfe2ba8 [ 634.654916][T15755] [ 634.658105][T15755] Kernel Offset: disabled [ 634.662416][T15755] Rebooting in 86400 seconds..