last executing test programs: 2m20.525042303s ago: executing program 0 (id=1764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdbfc, {0x60, 0x0, 0x0, 0x0, {0xc, 0xffff}, {0xffe0, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x2000c0c1) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 2m20.515088014s ago: executing program 0 (id=1766): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x20, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x4, 0x1}, @nested={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 2m20.45452015s ago: executing program 0 (id=1767): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x20000080) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe800000000000000000000000000010ff02000000000000000000000000000189"], 0x340a) 2m20.269718108s ago: executing program 0 (id=1771): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) 2m20.24655512s ago: executing program 0 (id=1772): ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000800)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x2c}, @ptr={0x70742a85, 0x0, &(0x7f0000000400)=""/216, 0xd8, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 2m20.223308862s ago: executing program 0 (id=1773): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 2m19.960629918s ago: executing program 4 (id=1780): sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @empty, @multicast1}}}], 0x20}}], 0x1, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x1}, 0x94) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 2m19.931313111s ago: executing program 4 (id=1782): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r0) socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0) openat2$dir(0xffffff9c, &(0x7f00000000c0)='./file0/file1\x00', &(0x7f0000000140)={0x40, 0x110, 0x2}, 0x18) 2m19.886724045s ago: executing program 4 (id=1785): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380), 0x42, 0x0) mount$fuse(0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) newfstatat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x0, 0x0) write$FUSE_INIT(r0, &(0x7f0000000e00)={0x50, 0x0, 0x0, {0x7, 0x27, 0x0, 0x23072d}}, 0x50) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240), 0x0, 0x0, 0x0) close(r0) 2m19.846930139s ago: executing program 4 (id=1786): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @multicast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1e}, @empty}, {0x1f, 0x7c, 0x0, @loopback}}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 2m19.778522847s ago: executing program 4 (id=1787): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = socket(0x10, 0x3, 0x0) close(r3) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x7, 0x6361, 0x5, 0xffffffff, 0x2000006}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x2b65, 0x267, 0x0, 0x25, 0x19dd, 0x9}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240080c1}, 0x6000884) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2m19.731518181s ago: executing program 4 (id=1790): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000200), 0x12) bind$x25(r0, &(0x7f0000000080), 0x12) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003c00198008000100400200000800020081040000080002000401000008000100080000000800010040010000080001000000000008000200200f0000080003"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) write$rfkill(r2, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 2m4.913290529s ago: executing program 32 (id=1773): socket$inet_sctp(0x2, 0x5, 0x84) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010028bd7000070000000200000008000100", @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) write$nci(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="414601", @ANYRES8=r10], 0x4) 2m3.914245677s ago: executing program 33 (id=1790): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000200), 0x12) bind$x25(r0, &(0x7f0000000080), 0x12) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25GFACILITIES(r3, 0x89e2, &(0x7f0000000000)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="7c00000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000003c00198008000100400200000800020081040000080002000401000008000100080000000800010040010000080001000000000008000200200f0000080003"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) write$rfkill(r2, &(0x7f0000000080)={0x1100, 0x0, 0x3, 0x1}, 0x8) 5.842316924s ago: executing program 1 (id=2747): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1d, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) io_setup(0x8f0, &(0x7f0000002400)=0x0) io_submit(r6, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}]) 4.935411003s ago: executing program 1 (id=2751): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32, @ANYBLOB='jDA\v'], 0x1c}}, 0x20000080) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe8000000000"], 0x340a) 4.041869331s ago: executing program 1 (id=2754): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000000002) syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000001d80)=ANY=[@ANYBLOB="666d61736b3d30303030343030303030303030303030303133363134312c756d61736b3d30303030303030303030303030303030303030313737372c646973636172642c646973636172642c6572726f72733d72656d6f756e742d726f2c696d63686172735e743d6370313235352c756d61736b3d30303030303030303030312c646d61736b3d3030303030303030303030303030303030228c542830352c7569643d262a2288a81f8202f4193fb4c9000000000000000000000000fa01fe9e803baef955aebc1b8753", @ANYRESHEX=0x0, @ANYBLOB=',errors=remount-ro,\x00'], 0x5, 0x151c, &(0x7f00000006c0)="$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") faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x40000) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) sendmmsg$inet6(r2, &(0x7f0000003bc0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x2e800000, @empty, 0x3}, 0x1c, &(0x7f0000000540)=[{&(0x7f0000001e80)="5ba16811636c5a906c20eff0da816bb8e9e3c45a763ff2", 0x17}, {&(0x7f0000001f40)="6d963e8a941c4501105bf2e6d095b1d0f31452028c5b4d11ff51d779733bd09fc34351bbb4521a041a90352974ebd9c068d7f82b2d2e1476691f54b28193fb8045cd6db3f5c22cec7ade0add5a09ffee22dcf89b69c16b7bcae83779b0759851de5a8a967c18144072f2ce9aab6cb23cfcd63e26f38ea53e007ac67a23d7174c9ea996690bfc8d88bab6d68b2427065ba7192345d304b1c5810784057dc101b2dc91806ac59a13312368df0bdd8cbb0c8a6f737b1155b02a9edd9681c551", 0xbe}], 0x2, &(0x7f0000002040)=[@hopopts={{0x20, 0x29, 0x36, {0x21, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x3}, @ra={0x5, 0x2, 0x94}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts={{0x38, 0x29, 0x37, {0x89, 0x3, '\x00', [@generic={0x3}, @ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0x33c}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x26}}]}}}, @dstopts_2292={{0x18}}], 0x88}}, {{&(0x7f0000000580)={0xa, 0x4e24, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f0000001cc0)=[{&(0x7f0000002280)="6f086da0e06829eb26fdf5da3f7f05a7fd4decc1f05479727df2285c99224611dd524fe03f17f6dc9ddce3123669e1d8d007510c9e91c5f6dd2e30cf6661beac710e1415f54edc668cca5b72e1369478f90f81735ad52302ac7550fd24e2", 0x5e}, {&(0x7f0000000600)="e6c2911d116c46bdc18f31f3404b7fe7de367b8530d9d9d111e7fb0ad7fe38d6a7", 0x21}], 0x2}}], 0x2, 0x404c404) 3.668844948s ago: executing program 1 (id=2760): setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) sched_setscheduler(r0, 0x1, &(0x7f0000000080)=0x7) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r1, 0x40082102, 0x0) syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="636865636b706f696e743d64697361626c652c6a71666d743d7666736f6c642c64697361626c655f6578745f6964656e746966792c6e6f696e6c696e655f64656e7472792c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303033312c6e6f696f6c696e655f64656e7472792c70726a6a71756f74613d26000000000000ddff0089c5a82bc95815a00aeb55d44b962c6261636b67726f756e645f67633d73796e632c646973636172645f756e69743d7365676d656e742c746573745f64756d6d795f656e6372797074696f6e3d76312c6d6f64653d6c66732c6e6f696e6c696e655f78617474722c6163746976655f6c6f67733d342c636f6d70726573735f63616368652c00"], 0xfd, 0x5529, &(0x7f0000000600)="$eJzs3L1vG2UYAPDHSdOmH5QIMbD1pAopkWqrTj8EW4FWfIhWVYGBCRzbsdzavih2nJCJgREx8J8gkJgY+RsYmNkQA4gNCeR7L9BAkZDixKT5/aTzc/fe6+ee14oiPXeWAzixlrJff67ExTgbEfMRcSGi2K+UW+FWCi9ExKWImHtsq5Tjfw6cjohzEXFxkjzlrJSnPr8yvnzjp7d++ea7M6fOf/H197NbNTBrL0ZEfyPtb/dTzDspPizHG+NuEfvXx2VMJ3qL6Xw/T+Pb7bUiw3Zjb16jiNc6aX6+sTWcxPVeozmJne56Mb4xSBccjjt7eYo3PGxsFset9loRu8O8iJ3ddN2d3fS/bXc4SnlaZb6PivQxGu3FNN7eaaf1bDwqYnMwKsdT3rzV3pnEcRnLy0Uz77WKOtYO8EH/z73dHWztZOP25rCbD7IbtfpLtfrNan0zb7VH7evVRr9183q23OlNplVH7Ub/VifPO712rZn3V7LlTrNZrdez5dvttW5jkNXrtWu1q9UbK+Xelez1e+9lvVa2PImvdgdbo25vmK3nm1l6x0q2Wrv28kp2uZ69c/d+dv/BnTt377/7we33771y983Xykn/KCtbXr26ulqtX62u1ldO0Po/KYue4vrhQCqzLgDg+NH/A7NwkP6//6g8fmL/v/kg4vD7/9D/T8Wx6n9Pev9/COuHA9H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWD8sfPlGsbOUjs+X48+UQ8+Vx5WImIuI359gPk7vyzlf5ln4l/kLf6vh20oUGSbXOFNu5yLiVrn99uxhfwoAAADw9Prq40ufpW49vSzNuiCOUrppM3fhwynlW4yIhaUfp5RtbvLy/JSSFX/fp2JnStmKG1iLU0qWbrmdmla2/2R+X1h8LFRSmDvScgAAgCOxvxM42i4EAACAo/TprAtgNiqx9yhz71lw8c37vx4Int13BAAAABxDlVkXAAAAABy6ov/3+38AAADwdEu//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/s3M9t4kAUB+Bngxf2nxat9r6t7A3K2BJyzDGigDRBATlQQxqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06aFaV3Hz97Ztzm7fTp7RAAAAAJdsq/Wi/meW+t+b+z+bW7+bfhERZURcmruP4stZ5qjJqV6fvzt9vnpTw31EnXB4j0lzfYuIf8319KvrTwEAAAA+r81yNU+z9fRnNnRB9Ckt2pQ//mfKKyKimj1mSisPeX8yhdXf73FcZ0qrF7CmmcLSkts4V9q71D/346rd9KQpUlNefNmxyGxjBwAAejQ6a/qdhQAAANCnq6ELYBhFvGxlHrcCJ6lptve+nvUAAACAD6gYugAAAACgc/X8v6fz//bO/wMAAIBhpPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Wi82y9W8bc5u306e0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mz+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xs3FQcA/Nk+X0kBcQR0QxACiQEWer2Wlm6IARQx8CcgRem1BK78aDPQqkJkYUOZuyAYEUICha3/Q+dW6lK2DjcUCTEess++c9sILlFjH8nnIz2/ry3H7/t8UpSvn3MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBq9O4uTbNOZxHFx7PaD6+tZf+eRPnNz++5K1rI4qjPp/4eXqztRt7lEAAAAODqSsr4PIdxLd1azPu7k9X9anpPV/D88O4nLev7Rur/sy9o/a7//dv/F6UCdyTjZRS9sDAcnH0+ldXCzXGzP/ecZrfzO589ekvwDiT/YemGU5vcz+u7WrffaeXisjmwBgP04UfZFUP49lPX9JhMD4MhoVQrvsv5POs3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH0VZ4uoyjEMJKaxZn7jy4vr5bf3P77krZzt64sR2+mV0zu0QaQriwMRycrHU2i+3K1Wufrg2Hg8tPIFgqrjnnT70SQniCo+8peKdM9aM5Tg6hgQz3E/x9wEO0mp7g/oK4+LAXJZ/GgyTMcXJDv5AAADi00qJldf29dGc1OxYthzD+8eH6//VKHOas/+9/fPZ2daxq/d+vbYaLr7d56YvelavX3ty4tHZxcHHw2Vun+m/3T587c+ZcL39W0vPEBAAAgD0bj8fj6U67aNX6P15+fP3/eCUOc9b/X37f/7o6cKL+39Vs0a/pTAAAAI6251/9689ol+NRux2+WtvcvNyfbKf7pybbBlLds2NFq9b/yXLTWQEAAAB1GG1FD63/n6/EYc71/2d+eumX6jWTEMJSsf5/Yv3z4fn6prPQ6viX46bnCAAAQLOWilZd/0/z9//j6SsPcQjhjdcmcfE1gP9a/6dF/Z+8/+3P1bGq7/+frm+KCynuTu5H3ndDaHWbzggAAIDD7KmiZcX+H+nO6ie/Hv+w7f1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLr9EwAA//8qZjvb") r2 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x6) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x8004, &(0x7f0000000d80)=ANY=[], 0x1, 0x550f, &(0x7f0000000200)="$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") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r3, 0x40305828, 0x0) sendmsg$NFULNL_MSG_CONFIG(r3, 0x0, 0x40c0) truncate(&(0x7f0000000040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) read$FUSE(r3, &(0x7f0000005b40)={0x2020, 0x0, 0x0}, 0x2020) fstat(r1, 0x0) write$FUSE_CREATE_OPEN(r3, &(0x7f0000007c00)={0xa0, 0x0, r6, {{0x6, 0x0, 0x200, 0x2, 0xfffffff9, 0x2400, {0x6, 0x3, 0x800004, 0x80000001, 0x401, 0xb, 0x1, 0x1, 0x3, 0x6000, 0x4, 0xee00, 0x0, 0x1, 0x1000}}, {0x0, 0x3}}}, 0xa0) 3.494362275s ago: executing program 3 (id=2761): r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x21d, &(0x7f0000000240)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x80, 0x32) 3.271455107s ago: executing program 2 (id=2764): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) ptrace$ARCH_SHSTK_DISABLE(0x1e, 0x0, 0x6, 0x5002) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001f00)={0x30, r6, 0x1, 0x20000000, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x0, 0xffffffff, 0x5}}}}, 0x30}}, 0x0) 2.489229434s ago: executing program 3 (id=2765): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, 0x0, 0x0) 2.426429411s ago: executing program 3 (id=2766): pwritev(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000040)="fb9297531bc7b965969c23031cdb2a0fda45b0deaba3c0b3721e469cb34ff590efe34d5399d4ff54987c15c40374f830bbf98f570f6dcf6da9c3d50ad3ddb12ca7575618898e9e150d11f5dbeab7d878da10e3f2d8bff9b6bdd215396ff9", 0x5e}, {&(0x7f00000000c0)="9c3f954573c6be7570ea2752a36e10da1ddbfcc1a80ad9fe80046c637d0c2f58e7af659e7a0a2e73f71b05ed9b2190b038c8f40725386bb4e108558af9af2f9234e80ec1091d5157e919c1117e7d666f7082e41c64c66850b9413a78d0846a6e25bac86f8237a7320cb35757", 0x6c}, {&(0x7f00000001c0)="db50a31dd00e456fb93baf064a723a8b98287f8e40e7cd4ce6c2b1229b2131650077c493361de9474c63839f4f91812af9", 0x31}, {&(0x7f0000000200)="10eadaa387759a0f6fb025bf97cd37eaab0641f092983de417d68a43c83d7f9633973d85d991c960d93dbb608108244c57a8bee6dda86f151f58d334a7b7d5d39ac037d314116236fd759ffba9d4bbb2c6e59ba89f160c42c9a399afbd2c25e67550a31daf4911f0be6ce1ec203c11fdbf10e8282681932eac3118f9cd9a6d7a42b01bfec6ce22", 0x87}], 0x4, 0xffffffff, 0x7fff) r0 = syz_clone(0x40010011, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, 0x0) r1 = syz_pidfd_open(r0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0xff06, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000380), 0x98081, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x3) read(r2, &(0x7f0000000080)=""/1, 0x1) shutdown(r2, 0x1) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x1, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) read$FUSE(r5, &(0x7f0000002180)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r5, &(0x7f0000002140)=ANY=[@ANYBLOB="d000000000000000", @ANYRES64=r6, @ANYBLOB='\a\x00\x00\x00\x00\x00\x00@'], 0xd0) r7 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r7, &(0x7f0000000300)=ANY=[@ANYBLOB='-cpu'], 0x5) read$FUSE(r2, &(0x7f0000002680)={0x2020}, 0x2020) fgetxattr(r5, &(0x7f0000000140)=@known='trusted.overlay.nlink\x00', &(0x7f00000003c0)=""/123, 0x7b) 2.425938301s ago: executing program 3 (id=2767): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x7) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000440)=r0) r3 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x6) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x8004, &(0x7f0000000d80)=ANY=[], 0x1, 0x550f, &(0x7f0000000200)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000007d80)={&(0x7f0000007cc0)={0x10, 0x0, 0x0, 0x1410}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44014}, 0x40c0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d0000008500000008"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) write$FUSE_CREATE_OPEN(r4, &(0x7f0000007c00)={0xa0, 0x0, 0x0, {{0x6, 0x0, 0x200, 0x2, 0xfffffff9, 0x2400, {0x6, 0x3, 0x800004, 0x80000001, 0x401, 0xb, 0x1, 0x1, 0x3, 0x6000, 0x4, 0xee00, 0x0, 0x1, 0x1000}}, {0x0, 0x3}}}, 0xa0) 2.010790171s ago: executing program 2 (id=2768): r0 = socket(0x1, 0x5, 0x0) close(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x299be000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) 1.220746539s ago: executing program 1 (id=2769): syz_mount_image$fuse(0x0, &(0x7f0000002440)='./file0\x00', 0x2000000, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_INIT(r2, &(0x7f00000003c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x800000, 0x4, 0x400, 0x5, 0x1, 0x0, 0x0, 0x1, 0x74}}, 0x50) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = open$dir(&(0x7f0000000140)='./file0\x00', 0x500, 0x40) getdents64(r3, 0x0, 0x0) 1.22035769s ago: executing program 2 (id=2770): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x18) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 1.21981024s ago: executing program 2 (id=2771): write$uinput_user_dev(0xffffffffffffffff, &(0x7f00000003c0)={'syz0\x00', {0x9, 0x0, 0x1, 0x400}, 0x36, [0xfffffffe, 0x0, 0x0, 0x0, 0x1, 0xfffffffc, 0x8, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0xa, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x9f1, 0x0, 0x0, 0x4, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x6, 0x0, 0x58, 0x0, 0x9, 0x0, 0xffffbffc, 0xfffffff8, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x6], [0x2, 0x1, 0x0, 0xffffbffd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff57, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x40, 0x400, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x55], [0x0, 0x0, 0x2, 0x0, 0xfffffffe, 0xbd8f, 0x0, 0x4, 0x0, 0xfffffffd, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x10001, 0x810, 0x80000000, 0x0, 0x0, 0x800040, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0x1, 0x0, 0xc9d2, 0x0, 0x0, 0x0, 0x0, 0x1c00000, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x1, 0x0, 0x0, 0x1, 0x4, 0x2000000], [0x4, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0xb1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x1000, 0xfffffffc, 0x5, 0x0, 0x0, 0x0, 0x80, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x8f4]}, 0x45c) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7f, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xfdff) syz_mount_image$ext4(&(0x7f0000000300)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x8, 0x4eb, &(0x7f0000000540)="$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") socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4808, 0x0, 0x0, 0x0, &(0x7f0000000000)) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x852}, 0x94) r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSSOFTCAR(r6, 0x5453, 0x0) ioctl$TIOCMBIC(r6, 0x5415, 0x0) 150.710415ms ago: executing program 3 (id=2772): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32, @ANYBLOB='jDA\v'], 0x1c}}, 0x20000080) write$tun(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="000086dd03000a000000140000006c07010033d43afffe8000000000"], 0x340a) 150.296245ms ago: executing program 1 (id=2773): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000200)=r3) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 78.335162ms ago: executing program 3 (id=2774): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x801}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b00000007000000010001000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000200)='fdb_delete\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000000)={'bridge_slave_0\x00', @random="010000201000"}) 19.944418ms ago: executing program 2 (id=2775): openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x2d41, 0xd5) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000380), 0xa00000, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x202, 0x0, 0x0, 0x2}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006380)="7f5912d07634539c3b2e15a57b311187a3eb119eb4b279cacf0b94d44882da90bb8c7bf605806fd007bddf798e1fed05db9ef39d3dff16e6eb4e5e642774588b2020a414a4574d1e0aa3474184583a655385fb5e7e632304e818af022a134095ea51f1f77a9472dabe407b36f0c47e318bfdd7c6ecb5a5bc07f28701201245abe626ab4592fac5b1544570a665a5e559eecf9505a828f5b0199a5dc33934b75bebb03744f92918f93553eb072cd2a940a5931a5907f82fc99d519f02287cac4341c4637dd8110214e9634088fc6b5a77a5065c4798538f41b263c6329df4d668d018f7ac9634910969342c836d78c7baa9893cef90deb8cbaa8cac81c262016a8dac72fa5c3d5094a8b64abbf82594b8cb1dc876e01a39fc9a26874052c47ec3ed015bc85933a98a61bbc108292a6c7932421162c82ec64518ce13f0fda30adf97b5c0d70fb0c69398e78d9dabe99d3d408bfef6e2518c820217b4a1cee43704fa5b5c4d4013bb61f631b813b8272188d403821fafe0ee4b5e09671c177e34a2566939920fcda640007845e4d19e2ce3693cea27e7ec2482ee603589260503c567e3dd320923e651d2530afe927013724b1ccc22c390c9e53a47331789172fb44c442cf558f9990badcbf377b731aa83d7b73a6675c687f16c9b96b59e0a6e262da754b1bba316a31fc262561d4628e33de9969794b879eb7ceee36abb30f5f977198bed19fbc4c4f13f32a3909fa76a3beef541a5dfff9ff8609fbfaba986e3a02b23dc0938e7e5b476f5b256a3e3333caea34de6410f75d1daedf4176f6e5a9fb915647bb65302b49895cfb699131513e1d7d937f8e452fe350a78783de31c96535c742b35edc7b117bc2fd2df6cdbef0cfa1000bade8a6c8a06019592b7dc144ffa88a01fb1f6093e82f63b05830f414a07779226b4928f5edc6d592a294c030d518f7e350b2e2536a2bae2616a574b63415c952c28cf6a82553411d305fdc33d1447b7356b8726b67d23dc0749bbb1230b18abfdb6a0fd35cc1489fcdd90aa83edcc613a77db36dd42fc5b83635df5c2acfddab054303e7c859c8bd5a21493742d8fc1adb1ae3f68f6103d65709a8d917292e648c5621691425a203de2e82e9e6bcd53a7f3e90238e89b2b05202ceafc72bb2f997a99487aa993a72d0cb44b345b3982784a78aafe5e5b6ddf2a17e4dca9a5433481fd8e60195832b704a1c186dc3317888c8c0849f1029d0df6af3a5fc93c8e643287ee38580ff450a259dc4bd45343aa453f462e92302c020ce91f26b1c2b66764cac41d2e809a46e51ac50121172759ba4c791cfc8856f7676ad8020433e00bb80e46d9d7709e196565b3a7b18270508d1e0023960e5b335bd901465dc328a581ca918dd295a110aa9f25ebb51ae5523eb619431a9db2b6e046cd94aae4b985bd663c6c6769015f49cb40d3f4b520c1022683487b170c9e47ed306097f1208a92ecf6727f7f276d19bcdfb987ca8b7f54732d0908f98ccac0ba9f6905e194da99608598ee87a6992c4dd33fad2e5e463c995babd0c7dad010499ee2cbf0f2fb63c7678d681a8b63d8a1316fcac3a107f8723dc004aaf7d9224090b6c78212172884eda7089cac24f196db5d3bd2747649e6fee4ebafb3d883df077f99bb945220161a3323aaa09a5caba3348a2d78096a18625aece41aad5cf9fc9cdb590f0cabb882839474c53a14fdbd34772f69cdd369260309a9500af55572adb7b23d4fdbfaa807242ba1130f7029fbcffde2da9b8a0814840e9b241febe92d6247419ae4cd15f5b073c7dc03e4541e24291ac5b4e29cde2649ca6cb7952e81308ae249906ca9d97d8ceb129b0b2b44a84e268b12b8a373965b877028cae0ead133c8422052a8f91d92f6695b6a3e9c36661c0cb6d03dc795490b09f62210803d88dfb3777b16e1485c9c7ce4a4becc718c9da4aaa32f5d9da57ffbfe6633a302b10c676a0e047f1b24e8dac251dffc841a2906002abdd64334a2cc50db924e196b6cee0f9261a87793dcbf8dcf1363b91b33dfcbca15798e9089cab241884ddacd61fa07f8797cb21f9c1f4f1d7fd8d0f2e19b99b40173853282bbe94e5c867006949b55c1a27e12fef9f264d2a14700fb5c828e21293b38502dadfd2e96dbbe866547a460a737951e55803fe5ed0b448aa1fbe65de9117d066b2f46dbe658510434d2d3fabc734fc5632fd16a3ddf04a0da7067908f3fe7d9c046ec9d528808d0f4a755a4467609386b31104db69605b78507f83995c297d049d6b028ffe981f0ecd972f23ca43096a955d437f604355e49e1d9fac491f955fae46a150555bd91173091a016aeddc51399b8dd20bb6e8e3060da97180d79a8eea89562bbe4dd19f5c36686c3ab5de9cdce1a241b407c78b2a8886b3e316f5163ec082bb1de53ac1797a633587d9319f3626ce3b052107cd55a6c44b97e27aaf9bf5fe0d4475ae2090920865b0a0f32567351c4ac9859e57cdd8254a58d2dc5d67dd16b513a02954d7c99a9544ce5d8ea8a59a06321083690cf6007bb941cafccb17a3b81c96453964cb469e07e8543407f2c03105d88bbd2073cf9fdc51c9fcf58854417f49141efb66b0f98b36b89eccfb616992286ebaa8f325eb9ca85a45d8b1dfa7a18dd46516ad40d2f46365fac4cbb044624139bb5a0bb0ed062edfa0260ea03b9268f18a7d94d83d4411ee46896ef955aada3e31d29e83414ac0a64353b6498c8f1ef37d051b38291369f6f124913d3fef14af925ab93a34d58f569f3c4f12aa458c85b2b29249e4c868e0bce4791c7f7226bf050c23ad590f6231315f1c9a087b3041ce33f6971c4d5a20f85bb103edd586184e90a34dd5c9e3eb1fea74fe413c503c5d48c70e3fc1d210985644ce5ce0b5636751947ae22e3dd6fa39dcbe1ee3def6a3097c8d9836db3b9ce1bcff91451bc46ef3000b5dc66b007ff2ace898a81631c5728c9de7710c41691332a268b18f0eec37ed7944ad0049936e9fe4df157a8eb324ef0d9954ee8da259c700b05bea37e4238c7be1ead4ca18ef228a15d9828476e899b77821f27512ad3ca27e2bdc769890e6addc2bc1ade2a5434421d627d978b72ce2fab1ee5769646881a2ecea9743ec88b48442806e946c27213bd7fe137d3979dcf477eee9ebec8fbe72fd9b6123c0523e83045dc88ef385d961cb4b48320e16350846ebb36accdcfe95cf541347dbdd7817e3e7d91b71a1dcb23ba7156484f90f789ba880b8019cb6a248f3db56e5cf7af156c6e84f58e8ffdc322b76dcd1b4ca02cb6fdd1d210807c34febac4c49ddb8257aa18ad782efca3406f34c6500fb65cbfec98077b50ef7a21e366e0fad97c6f6ca5d69b93639f7c608dae3e6b5c282ce130a8ef23908a626ef98e38bb9255ab6db1fdb48ca0d8f2d469123acbf6a1a83ca4f08d21bbf638ffe553fb4faa83993d9fbff7a9af18e21c74ffb720f41e02912d4507aee16acd64a34d2727bed087fa30c34202b34003330c15fbde12d5ba8e7a88b23501c6b837d01b97d78ea66e323579f0ffa9cbb40ebef25deb8a88f82a4e29441fdfcdb743bf98d1ac091677fd8fd3f172116697db4b2d1186303f68b71eae90dbcbee1cbd6eb49702dbf2de4f7f247bd071446fc2edeb68df92fb4436a3773ccc865587202f13083008f1dd964fc912c29bb0072f381b9d042d0fa058faba9d68886cd9fba2f41dd084ed13fbfe9e97afca35024025a83a6c6bbd798c8dae5bffdf486e88b6c32357b20b4b0fbea04c8cef7178a05d64bfcf836cd919216accd05b99ed4390b0016accac7e0fedacefb7ef4580ba6202aa241989fba902b5502bd4d6a3fb0c62c236f78969d395c67cf1ad2f5c250d8f8076189766d6e20ae9de72be45c2d68b5733a6d1f467db1b16a55da3245160188a217306298e5a86a4c4cad1ae72d6287c6b56684ab4452d54995322eb19c15724447b39c196e2056937fb2b956684c06bda117908000000f4524ddfab9c9fa5872f9fab3a5c3e1de343cb59744978ff286e037b2b8a122c6774291d713cd5b233ea9359764c528676e092840cfd716d995bdbae8dded68c71b8865490946df93c6c617b77ce830a1fb17b3459917ddb1797641ad2e5fa12a4ea8fdd0c914024913ea45237010d8f725c0d6ca6775a22285dab06c48432cee3faccfeda5c7756001121286c6ba8f52740a76a66632142fd84a088f5a0809d49b4cb513630a94acd1f5f246a997c85e90c7b0f9e55b3454a13cbc30518d3979789b76492afd411574ed54f0e9858693dd29b96a20aa55c6835a40c44c84d523054dcaded22718e48708958f977f94cdb360421878f67e97fe2140233f15924071c78fe5ea27b7f9e7eb0cc08fe19703df61906177cb8377c16d50ede70d62f1d8c0f8068323cd5eab2f6fba57ab3574c4742e06031d5a75f3d000b56051f43f987472a5f582a83f4c99a4366ac8c66673da6a312fe4804fb185f3fcbf6f3ffda91f5ebf6467ce6baa992a850765d37de2b3f16fd3ca44854993082e987ca1f520e0c149cdf92f727566c4c5ebe3ecf376c67a5fa7d51942784ff35236a0940a5f275a9ab8c0c5caf68421a14834edc9c29fd3adaedf4cca2802aaa33283ac811d97ef4affbba7315ce7fa5dd2783a067f223a4a8235fd67c23fa535efb4547202d171b51050d508081be9fb6467e9e7d052a7fa8fa8534c440f9f22c8f3d763d89666046951fe85f977a7ad816fc42037adbbec0352ed2b3454fa433e31a30159b9a3d5777944258f01dfe9d38f67af3e85dbdf23e5bb841401b40afeaa708f0a06a2efa2289f9ebda77c2a1390b887bf4b3dd90e418955d05431fd524b481b8b51c523fb1a3d0339bc3999c0a14d643a6ea69346f46a554bd25be3263a3c5ac0848b152d3eed833e7f2a6ce3b0d4100e49319120d4c2b520205fa2a344ab087bec0f73968768d0188007603a77428f12026cf3b296823f3138315ff0f95f3c62c060acb1a11850b46d361ab41b7ad241e45246b091ee2d0c1d444290ff6669a34f1fd0020795fe89d4b67bf07f16c88c8987e7f72480ad42109b43f37e4c753495661b0514553532364638ca8152782b99804b6f9da69fb2b5b7f93acad94ccbadf6e6d9547852088945d3d8c4c5702b1323c47fdd4fc77fcfd61c7ea8b26cfd0954be063cca429cb9915b8a937833ff4c1f2bd620b08dc00ddaab4fa5e13a5f4f2127f0b63b7140dd14b1dee95f178d2bc33cef7e820e609aaa20a733931625227529c714530574bb8cb38e6baef0cefe9a9e3277a4e1534f249abed7f06c8470ff3723c9140f5ed466ba7b79ab2ed2e61d2f5826d72a560c8cc6cf6a64fb9e70b1d15b80f22cd86bbd38b5c46741e054204476f63651f3cc9bce975600abb3133e104fe0145383d0d320367df2dd202daeb7b51b4a1e4e7d36fd1c847965efd71430b8bcef773163b1e378e1381f05083304ea41ee8d37ecd988cc671270101ad4800706cf0387bd038a7164d1586ef5e8791cd6bc3a91bdcf35982d46d841acc8342544d557d369cb4a84589082bf9503d45659791e522bec6a5f61f740ca5540787dc4a6a9f567bb6c0b13d618e80b2b348adde16fc63b2052f381eab8c120f14ab623a4110030847db00ed2d19c0101991f82a8671738b68b6e0efaa8f771de3cb6c2165298df69383b775fafb7c249fd78ad2ee46390c1b905b3853680a80a1849952a10e69fa64d680cdeaf5a451408c5b5d64e0f244ee362f21f37c66b795d73647964d12e297f7f6b760ee4e4b46ef502a54483d3838674e1767eb93f91454f1dfb629e45ed71646f139b685cdac6c73afc20bf62b3b2dcd81d9adf65b4f4a5f2a2a2fa7e079d944739546462519521e523db10cbff9489d7ce84a78ed5fa80b2d5361f4829bfa4bef5c351c984cf58a5f227687eadceb8c0cdc51825a008f8bb8ebb549864b6fba1da22da5aa0a0161464695fad60e636e45091b6dee20498f33ff9f91c1ef927c90215cbf4f5711805eb13e0e65cf326627bcfdaf0bf07d5e9c53520b884411ed632f9f5169db46d674fd660637ab8ee1ca1aefee8ea4ab3b41e6fc18842a0a254db125243e4e996db939aab80b04d70fb22f3c1cf7edb1d18cb5af99be7dd4f01e2ee265109abc51845dcb3f5c8e8477fd7fa8fe41bd83809120428ea9dfef010005964d66ef96c1648516f1b0cacebd95ab20c2a2e2647c967c48c6c9b7977441a0dfeffba2beaec54a66f863c9ef3a4e2fc77928291753648b7abf3fc26128cb4eea246468b05cac113b3464546442e14d5aa760a3d7c481d238b2a5226bfe0dfd2dd5b2a9a5ad738c6a83e21312e0e11ea3daedaa7a6e527ec166337d24b083ccf97af580edb453dc1a7b841b7266ea143b294291ac5ed5dce7dac20d14bb6e53b64eec515515ef817611d22d3a306170d4f358f0b890411454e1bdf85ccc42589ba1a1d75289523e4aae1eb46328d0dac43539eab1d3aeca3db300e605c53cccf04d3688e5db58fe283b01745dc39baea5ff49db07deb7adeac2d3df45fa72f9fccc9d1947556fd8594faa393a2854691016eeea88e96272ee1156874b9ba78a4f71022e3ec2e0776f8db400e6b967be079684d3d80645125c488f5bc0a69a3d7e12bf187a41a8acc9b2f7a610798fb6e2e438b85a9012d6f6990c7b9a557b98d32753cc1786868dc864edd3f0edd8bbf48924fd09d0d7a2334bfcbb5786752765c8f33fc8cdab048b81607b1ba098ce44e6d99d8b1b08b5d19d177f6661c32031d475381c0c804c63d2b7ae9a2198c0d6114e7bdd0e01a4cbfc5c41e858d28f157efe5a52ffd6d70f2bef2066a2d65ec68ac1ea678588f1cf0c9eb030f34a2d99138c4a6a0f85edd8a382324c2c823a7bfc3db3e6822faa0ab1801361c1f23aff0fdb8fb27cdc1db4226d62c0101561e78b704854893c6bf0de79b45f87da7a8e4f65875842230d2bfa152e96fecbe4a7465fb400cb7790102d0a89f105e84a23173141245d641051b8d614d3be26423bc0d042990c62ea3b7392e7a8117e250348d3cf79be1529c8a764da382f019b5a750ab848ad03cf53921c8548318db7aaef2be3acce1a3d9a9715ebf6a5b53da18ef20b932d5926c3cb44c1a4e6ef83f2a84f8afa382d44ea35f17bc147ae1dc792784cfd9edeb9fe09f422aca81ec59688baf429509a6b27ad0f6e21c977756a022979c8a47d983d42a913d0ea6ecfd8bc0aaf9fba62a36d542710161a088656dca539a940ec6dc79ab197eebb803988674d93c8d604a5bcdcdeba44c331c72e58ff9320f39031fe711bca2e0269b1028862c2d2a6c8871a0f92dddd30629eafc739165a070c61c12be11bf3d3cabb31decf449059c99fcc12a1684d8cb48e496df33920dc0a4fd225981c0f45b7220fd9d9189808e4bb39e5accc10fd7a8f3cf1335cb9dc31043a1e2eaf75e0ba500d5ca4497b2924725c0892033eb0ef944e2fc204e9f1e177862af3d59190e2335061a76d4d3bd922d9bb72553a339dd1672b61a91a0d0e23ddf6b08bd13cdf82451b5e8fd3842ba71eebdde40f8563124fba86c3c500f2ceb7246967f497f1dd3e5e42f14774a909199dbec4b469b8b3b6b25a95caa86f334084d38d71d93a395acb14c145298c503f7f494bb9867c564ad7e32aa1ca7bcfa2181dc712165247462db25192f7cba05cee92826c0561303bc473c9485a989793b8bfc2d0285dfbb13c11a426dff4e404435e2e47760d45b76f91b6c7bf04d4504c2502293fc7b49d24fda5b5fcfabf714087582d25a69ead80222da1d574d599b39a0c54ea7709dea1798b9eddea5cff504cc5ae40c561976c11a514f2ba359f6791830926fa13ac7f71e7614d0233305d3ec694b7d31ef320a44079af2614956ba31a66b959a11a3bfbdb683037d6ca42d0e9bbd2d83af74fd4a73dd6537e393b7026169d3c0e017a9e3392e03e8d76cc0f5f0caad4926b3169d61ea09b6cd45e5f62aba4ecab5b053d54cdf8ec5a69320094d520f702cbd218125f24e38a5934a2f5f4d74c12df05cc0c7b3c36a37db2863e918a8cbc496fa77bf6109008e20602636ddbd53aec45741384aafd05ebbac9d6ddd8aeb3d75775bae5124cbc7fb5db4ce9c8af96ad05035a8dcb64c0b02f0669c65b07f60c9cb81e99462ef8318d0ab65b97d6a9271042f4d46a5d8ee42b90783db78827d018b8d392ab3eab88e06b409878fcf74067b1a1fede92874741cfde10bdb444819fb991c36c9dd458c8794e0b4bd9e3f7cd383c485e6a60fa4238b318e14896934d97b4b7993472f4f9f246ca7523e5979c984fd16248b087cc3eafd706328a3ec47f88247357c4b759a2a1f0efde24f4129fb612f8c3742847b39996487653d6bcaf5862dc1bca501abed2d0b5a23c1d2a62eb968acb01763718b27a57e99bcd66c9910d6d0bedc7e6197bd58267cb1a8c61eeef9f19aaa6a0cab7cc268e8bec46db3fbcf4de3e8abe483bb01811087fec18bbe471628c3bc80194d3661efa6d9130a524089b07d8cdf6198018a24d23bfee4a1664e68ae7c30f77bbbcc7116d9bda8a4e6c01f047a4ee60a09ab23a63e1bcdeb3869043efe60eb3b7a6beb366d11e786002b2e3d36d44f91ed87152697e456f8ebd2b0e15df21a773b1ea876319fada12bd340314944f8d9d90ea26380cd83692a2f634c241bfa0868fd7ba52a841ad418c97e818195047d6d11ade0aafabe0d627a68721f61f3758c40dd14498521966380d59e0cb621953f0ea908fd297178899b2e60c210479a4a9ef9a8cf1d2a0c2e909043ce75d2f4fb766eb166b995b714cfb71bad7462525aa15d3fc8462808f8a0cee080502765bb9d1e9912a9ba937a94e48708b531d5ba71bdddb97fe77dfc7fcbcc0ddbef56c1f78feff399eabe15aac18b95f0c88a40dd5ebbdcb3ae45ba66dc990e9267c5290f7b357e1ae5e354c72edab117bcc394e4e8a91d99ca2f000420ff9cb32f87c663c6bb9692cab44c5c26212dad70a5426ce7eee219cdeb6bcb65d9b1f957c3e495a1198a60dcf446f4b192fa50d8c4426b8ba3ef0e06be2d04d7e142e825718828617220349408bd313df2ae8f860058b169b7ec3416f4c73fbfe509b442b8332a7049e7dd59b77d199079c187f7afb9b869ddd27864fb1bd0ba7e0ff67ceefc88f86362540a3020b9a90d07b9634358142a4b095f3becfc810b2ca5d78361403cf09e59c3b747953ff3535bb9f99bfd20da8a64082fd8552739f622e5d24d2fee438083d839402aac872f3d98f394d56bb4564c8caac19ec4873ffd2dae20a0bd8f0781fb92984755014695ba1f3a2e01ce4fa33206b53138afdacf34c2be54b56cd76a9948013538c7ed8fa60055e9b60aafde90f50b4e0cc9b3009f45823f674f23ddd6cb2439c479e20ab975139055bc8ad72315c3c466093be1e06ad27f7601b9cfbce93f172143c6523e239fed636ece9407caa423db7e64d6ee1163976dd7f19c333d02d788111de7243b7dd6dba0a1d9957e758acd4ad9ceba61d0be6c2be89b65d18f1a7f1cee89f9fee5dc682e12e78d2822f99f4b2a920c36d0650604c545b76c9e5755032a8ea94d0fb21d513a138b5a1ad86acdf0097d5f289a9629c7a3e570a96383980c067a702cdc198712adade467e0baf05595108dff0b342d1b1fe243cf8145d024b46f8008c20ded574da9f49b49163591a6cd2fcad74caad0e95dc5714a15cfa88ff11a7d30028326575217447100f4c5c97f0cc25d79960e39b94f0ab60f986fa3c919865f8e231bd77c2c759b166d8874728e9e131b9b3aa5cd166a9ae330ca439ea3ffb7581f1f4389ebf9334810d07981c5ea03b42ef5615ebc17005a0c9c02478353c08f4cca0b6a2e98de3d51d3174ee8101387f52b12b699b57a4c50452a978eb43c3a101ae69213fe93f2606fc6bf7b771e3dea5e578b85e5642791e9aa281c8f91cebde1095cbc23ce174a1ceec151703a226749176d42d72468d48f88012d18e0f2640c3018e08c8a2df197f273596ca5d48cf976b7ee051189b8081f0863e613258f267a5bcf30509c6285fc37c0d045c29c471b04f189cb3c69914ba0591cfba1c71ed909362aa8840be28e624e3a6b8393170e809231e10820326ecd03e23e11dfe29ae47adddf3d4f858d51f9ca33ee85a5077a1463caac5d034293bcacafe15b3e6cac7247a33ace000f164cf8a5243f89b89b8b11220b35a07679e7af900e540d965669fa23ca0d0d3b47d9b2cb0fa31a90c69e686d582f6c9c8c628875c002cc5e288a5e1b738842258569fe2a4de3dfd7dfd13b1fd7c8c29dfa4f58ea8d0c7e56222fb9b0d29c68c7cb8ba3fd79b04a14366f83bbef2531311a3f385bdad440ee85e2dd947f32a349f9d1eb750ceb0f7211980b0b970c7b81f16935d4d3e764869edae7a45cb45a0445e8c8ec27fac4edd6ea269563b6f12f394782fd970cbfc2752fc9f4892c731eaac8e3a315797b0449b2a9ae3d4bd25d0e8f1a43e29630b4e2e882ece16dc542fcbc1f165b2cefc4deb40c23bf61f3e51d5acbc81135d35f0c055d8a003e03c0625e83f95ab2349c222dbc6d62d34e0119938d0b384a86dbdfd00c1226d0ff1f834c3529361c9db6d5612009bc39a0d654de2940ee2b8a96bd3c297ecad0a3df1b2a85a400fab889648315415c4ddbd0c9752146496d3769b3c9148330a8324453d4431d19727ddd12493003bd7eaeb05b2f5c333a33cba442df3dc11dc23c80292a52b040f5e707784b5d29f4c46d3ac8ae0e159517c1a196103bfd6bf6d32afd687773bf224ef00c844f1f36365e7220c57a97aa0904219a0ab84def7095b280b971b554e0142d154c5422c918b4744bb3b9e61721a983f4d63cc79fd88295b67b24fec0ec1ce8a2e80a1ca4e97cdda6d2df44a571a74b941f049886355e2bb5ed908e646850d85095d099e3a189a4298f4a25c0798b4dc25cd630695561a04f43ff009e4f49177e01c11442593fbc23657a46f918a77231b3405d4931b6f2c01f0207d6933304bb2106c5dbce23378bc7ca66ff4f57550bbc36500f6c4ce21dc22a4575c315d2f4c4fb1fb8e12ebc2c037451611718d4371c6d0a00bab9f68a1dea6bd654d49232ab3c85e07a6ec8e2b19012c31d540f81d666d0a236e9e2a4b6d85c0974efa172d13003b63e94cd7a5652f4703d88712fb63521abaf0e2a0dd4b2e457e42d4a811db6a77310b1aff1b9055c9995ce9a0fe2e0c3657c52ae562738b6c12693cb2bffd1d3c41b6a73feec4008e63562bbc38a8c56c10efdb2b67fcef74f6a6f7e35baa4685f7764977348db378b242ac5f81a8a69c666c0247d1d326faf3b7dd4f07bfb16c08bb2703f6997e1a6cf042c0ff0fea27217ac2c78328bd573e8dd86263de6ffcf3d26d45d8be7234da9f24f1a08ab16f3df9e85861fb1251933eb8982b81999234d6d56759acd528ffcaee5a300e711e0b7f0b208612caa6dfeddfe4557161933a1910ec4b35ed89760fb91de6c19f766845979e36855a11d7ba6b892a717b32e8e17b367c5fd11b940de937a975470bbf872f8a1cd637c76fe0a9aba5fb9e", 0x2000, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x28, 0x0, 0xffffffffffff6260, {{0x7, 0x5, 0x1, r4}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$lock(r5, 0x5, &(0x7f0000000200)={0x1}) 0s ago: executing program 2 (id=2776): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='sched_switch\x00', r3}, 0x10) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0x8004587d, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x3548, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{}, {0x0, 0x0, 0x1}}}]}]}]}}]}, 0x54}}, 0x0) kernel console output (not intermixed with test programs): : 67 bytes leftover after parsing attributes in process `syz.2.36'. [ 38.636870][ T4323] Bluetooth: hci0: command 0x040f tx timeout [ 38.637932][ T4323] Bluetooth: hci2: command 0x040f tx timeout [ 38.716757][ T4330] Bluetooth: hci3: command 0x040f tx timeout [ 38.717854][ T4330] Bluetooth: hci4: command 0x040f tx timeout [ 38.718791][ T4330] Bluetooth: hci1: command 0x040f tx timeout [ 38.777803][ T4595] device syzkaller0 entered promiscuous mode [ 40.726792][ T4323] Bluetooth: hci2: command 0x0419 tx timeout [ 40.727882][ T4323] Bluetooth: hci0: command 0x0419 tx timeout [ 40.806756][ T4330] Bluetooth: hci1: command 0x0419 tx timeout [ 40.806995][ T4323] Bluetooth: hci4: command 0x0419 tx timeout [ 40.807821][ T4330] Bluetooth: hci3: command 0x0419 tx timeout [ 49.945024][ T4602] netlink: 24 bytes leftover after parsing attributes in process `syz.3.57'. [ 50.123019][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 50.124657][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.4.64'. [ 50.156789][ T4628] netlink: 48 bytes leftover after parsing attributes in process `syz.4.66'. [ 50.233444][ T4632] netlink: 'syz.1.67': attribute type 1 has an invalid length. [ 50.237659][ T4632] team0: Device vxcan3 is of different type [ 50.277840][ T4636] netlink: 'syz.4.70': attribute type 1 has an invalid length. [ 50.288419][ T4639] netlink: 28 bytes leftover after parsing attributes in process `syz.1.67'. [ 50.289856][ T4639] device team0 entered promiscuous mode [ 50.290609][ T4639] device team_slave_0 entered promiscuous mode [ 50.291767][ T4639] device team_slave_1 entered promiscuous mode [ 50.297043][ T4639] device gretap1 entered promiscuous mode [ 50.302796][ T4639] team0: Port device gretap1 added [ 50.444984][ T4652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 50.447780][ T4652] netlink: 12 bytes leftover after parsing attributes in process `syz.2.76'. [ 50.660264][ T4666] netlink: 36 bytes leftover after parsing attributes in process `syz.4.82'. [ 50.903850][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 50.905340][ T4690] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 51.951595][ T4769] netlink: 'syz.0.121': attribute type 1 has an invalid length. [ 52.323068][ T4802] netlink: 'syz.3.134': attribute type 1 has an invalid length. [ 52.396295][ T4330] Bluetooth: hci4: command 0x0411 tx timeout [ 53.091611][ T4881] smc: net device ip_vti0 applied user defined pnetid SYZ0 [ 53.726865][ T4919] tipc: Started in network mode [ 53.727953][ T4919] tipc: Node identity d64d5ba713e7, cluster identity 4711 [ 53.729364][ T4919] tipc: Enabled bearer , priority 0 [ 53.732818][ T4919] device syzkaller0 entered promiscuous mode [ 53.770737][ T4918] tipc: Resetting bearer [ 53.887374][ T4918] tipc: Disabling bearer [ 53.976080][ T4935] netlink: 'syz.4.183': attribute type 1 has an invalid length. [ 54.029312][ T4945] netlink: 'syz.4.188': attribute type 2 has an invalid length. [ 54.273744][ T4964] tipc: Enabled bearer , priority 0 [ 54.275453][ T4964] device syzkaller0 entered promiscuous mode [ 54.548760][ T4963] tipc: Resetting bearer [ 54.637822][ T4963] tipc: Disabling bearer [ 54.640148][ T4974] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 54.698619][ T4976] netlink: 'syz.4.199': attribute type 2 has an invalid length. [ 55.038998][ T4996] device veth0_to_bridge entered promiscuous mode [ 55.291898][ T5024] netlink: 'syz.1.213': attribute type 2 has an invalid length. [ 55.357314][ T4993] device veth0_to_bridge left promiscuous mode [ 55.380848][ T5032] __nla_validate_parse: 7 callbacks suppressed [ 55.380859][ T5032] netlink: 112 bytes leftover after parsing attributes in process `syz.1.217'. [ 55.608328][ T5057] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 55.620019][ T5053] tipc: Enabled bearer , priority 0 [ 55.621620][ T5053] device syzkaller0 entered promiscuous mode [ 55.699654][ T5063] netlink: 'syz.0.229': attribute type 1 has an invalid length. [ 55.700988][ T5063] netlink: 'syz.0.229': attribute type 6 has an invalid length. [ 55.702379][ T5063] netlink: 44 bytes leftover after parsing attributes in process `syz.0.229'. [ 55.729144][ T5053] tipc: Resetting bearer [ 55.733624][ T5051] tipc: Resetting bearer [ 55.837283][ T5051] tipc: Disabling bearer [ 55.851249][ T5075] device syzkaller0 entered promiscuous mode [ 55.996123][ T5082] xt_bpf: check failed: parse error [ 64.479287][ T2060] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.482419][ T3430] cfg80211: failed to load regulatory.db [ 66.859885][ T5104] netlink: 'syz.3.244': attribute type 1 has an invalid length. [ 66.861057][ T5104] netlink: 'syz.3.244': attribute type 6 has an invalid length. [ 66.862328][ T5104] netlink: 52 bytes leftover after parsing attributes in process `syz.3.244'. [ 67.063498][ T5129] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 67.291783][ T5153] netlink: 16 bytes leftover after parsing attributes in process `syz.1.260'. [ 67.368782][ T5160] netlink: 'syz.2.258': attribute type 13 has an invalid length. [ 67.370033][ T5160] netlink: 'syz.2.258': attribute type 17 has an invalid length. [ 67.388515][ T5160] bridge0: port 3(macsec1) entered blocking state [ 67.389694][ T5160] bridge0: port 3(macsec1) entered forwarding state [ 67.392367][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.394935][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 67.400328][ T5160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.402412][ T5160] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.436453][ T5160] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 67.438963][ T5156] netlink: 8 bytes leftover after parsing attributes in process `syz.4.259'. [ 67.441788][ T5156] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 67.446882][ T5146] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 67.472282][ T5146] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 67.571300][ T5141] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 67.867444][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.872121][ T5205] netlink: 'syz.4.276': attribute type 1 has an invalid length. [ 67.873426][ T5205] netlink: 'syz.4.276': attribute type 6 has an invalid length. [ 67.877556][ T5205] netlink: 52 bytes leftover after parsing attributes in process `syz.4.276'. [ 68.032272][ T5219] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 68.035421][ T5219] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 68.042825][ T5207] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 68.052338][ T5207] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 68.266524][ T5233] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.280551][ T5233] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.439729][ T5245] netlink: 'syz.3.293': attribute type 1 has an invalid length. [ 68.443415][ T5245] netlink: 'syz.3.293': attribute type 6 has an invalid length. [ 68.446816][ T5245] netlink: 52 bytes leftover after parsing attributes in process `syz.3.293'. [ 68.560426][ T5255] netlink: 8 bytes leftover after parsing attributes in process `syz.2.297'. [ 68.563485][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 68.568880][ T5255] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 68.573824][ T5255] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 68.649833][ T5268] netlink: 'syz.0.295': attribute type 13 has an invalid length. [ 68.651208][ T5268] netlink: 'syz.0.295': attribute type 17 has an invalid length. [ 68.657691][ T5268] device erspan0 left promiscuous mode [ 68.683001][ T5268] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 68.717082][ T5268] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 68.822780][ T5288] netlink: 44 bytes leftover after parsing attributes in process `syz.1.306'. [ 68.895797][ T5248] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.987299][ T5294] netlink: 52 bytes leftover after parsing attributes in process `syz.2.307'. [ 69.102259][ T5310] netlink: 16 bytes leftover after parsing attributes in process `syz.1.316'. [ 69.198044][ T5324] xt_recent: hitcount (16777216) is larger than allowed maximum (255) [ 70.924771][ T5505] syz.3.403 (5505) used obsolete PPPIOCDETACH ioctl [ 71.226101][ T5541] Driver unsupported XDP return value 0 on prog (id 5) dev N/A, expect packet loss! [ 71.458185][ T5562] MPTCP: addr_signal error, rm_addr=4 [ 71.933697][ T5613] __nla_validate_parse: 20 callbacks suppressed [ 71.933717][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.452'. [ 72.043273][ T5625] validate_nla: 22 callbacks suppressed [ 72.043287][ T5625] netlink: 'syz.1.458': attribute type 1 has an invalid length. [ 72.053467][ T5625] netlink: 'syz.1.458': attribute type 6 has an invalid length. [ 72.054858][ T5625] netlink: 52 bytes leftover after parsing attributes in process `syz.1.458'. [ 72.155758][ T5639] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 72.205136][ T5642] netlink: 'syz.4.466': attribute type 1 has an invalid length. [ 72.367817][ T5657] netlink: 'syz.4.473': attribute type 1 has an invalid length. [ 72.369016][ T5657] netlink: 'syz.4.473': attribute type 6 has an invalid length. [ 72.376477][ T5657] netlink: 52 bytes leftover after parsing attributes in process `syz.4.473'. [ 72.472405][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.477'. [ 72.483414][ T5667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.477'. [ 72.634943][ T5671] tipc: Failed to remove unknown binding: 66,1,1/0:3020741531/3020741533 [ 72.636578][ T5671] tipc: Failed to remove unknown binding: 66,1,1/0:3020741531/3020741533 [ 72.705704][ T5686] netlink: 'syz.1.486': attribute type 1 has an invalid length. [ 72.706982][ T5686] netlink: 'syz.1.486': attribute type 6 has an invalid length. [ 72.708235][ T5686] netlink: 52 bytes leftover after parsing attributes in process `syz.1.486'. [ 72.710240][ T5688] netlink: 8 bytes leftover after parsing attributes in process `syz.3.488'. [ 72.711976][ T5688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.488'. [ 72.818042][ T5696] netlink: 28 bytes leftover after parsing attributes in process `syz.3.492'. [ 73.027130][ T5717] netlink: 'syz.3.501': attribute type 1 has an invalid length. [ 73.028568][ T5717] netlink: 'syz.3.501': attribute type 6 has an invalid length. [ 73.336995][ T5757] netlink: 'syz.3.519': attribute type 1 has an invalid length. [ 74.415559][ T5878] bridge0: port 3(macsec1) entered disabled state [ 75.648053][ T6020] bridge0: port 3(erspan0) entered blocking state [ 75.649145][ T6020] bridge0: port 3(erspan0) entered disabled state [ 75.651184][ T6020] device erspan0 entered promiscuous mode [ 75.652661][ T6020] bridge0: port 3(erspan0) entered blocking state [ 75.653831][ T6020] bridge0: port 3(erspan0) entered forwarding state [ 76.211632][ T6079] tipc: Started in network mode [ 76.212704][ T6079] tipc: Node identity 4, cluster identity 4711 [ 76.213661][ T6079] tipc: Node number set to 4 [ 77.039772][ T6172] tipc: Enabled bearer , priority 0 [ 77.057781][ T6172] device syzkaller0 entered promiscuous mode [ 78.156892][ T5316] tipc: Node number set to 2156334879 [ 88.141143][ T6179] tipc: Resetting bearer [ 88.148051][ T6171] tipc: Resetting bearer [ 88.196904][ T6171] tipc: Disabling bearer [ 88.202988][ T6209] validate_nla: 13 callbacks suppressed [ 88.203006][ T6209] netlink: 'syz.2.706': attribute type 1 has an invalid length. [ 88.205208][ T6209] netlink: 'syz.2.706': attribute type 6 has an invalid length. [ 88.207231][ T6209] __nla_validate_parse: 29 callbacks suppressed [ 88.207238][ T6209] netlink: 44 bytes leftover after parsing attributes in process `syz.2.706'. [ 88.336196][ T6224] netlink: 24 bytes leftover after parsing attributes in process `syz.2.713'. [ 88.550614][ T6241] netlink: 'syz.3.719': attribute type 1 has an invalid length. [ 88.552087][ T6241] netlink: 'syz.3.719': attribute type 6 has an invalid length. [ 88.553438][ T6241] netlink: 44 bytes leftover after parsing attributes in process `syz.3.719'. [ 88.598379][ T6245] tipc: Enabled bearer , priority 0 [ 88.604452][ T6245] device syzkaller0 entered promiscuous mode [ 88.696897][ T6249] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 88.703938][ T6251] tipc: Resetting bearer [ 88.713741][ T6244] tipc: Resetting bearer [ 88.797703][ T6244] tipc: Disabling bearer [ 88.971429][ T6268] netlink: 'syz.0.731': attribute type 1 has an invalid length. [ 88.972908][ T6268] netlink: 'syz.0.731': attribute type 6 has an invalid length. [ 88.974224][ T6268] netlink: 44 bytes leftover after parsing attributes in process `syz.0.731'. [ 89.050897][ T6278] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input2 [ 89.135258][ T6292] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 89.164024][ T6292] netlink: 'syz.1.739': attribute type 4 has an invalid length. [ 89.219914][ T6301] netlink: 'syz.1.743': attribute type 1 has an invalid length. [ 89.229704][ T6301] netlink: 'syz.1.743': attribute type 6 has an invalid length. [ 89.235427][ T6301] netlink: 44 bytes leftover after parsing attributes in process `syz.1.743'. [ 89.418478][ T6328] device syzkaller0 entered promiscuous mode [ 89.661886][ T6338] netlink: 44 bytes leftover after parsing attributes in process `syz.2.757'. [ 89.926855][ T6372] device ipvlan2 entered promiscuous mode [ 90.158437][ T6394] netlink: 68 bytes leftover after parsing attributes in process `syz.1.779'. [ 90.273124][ T6401] sch_tbf: burst 2 is lower than device lo mtu (11337746) ! [ 90.689672][ T6440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.692702][ T6440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.702221][ T6440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.704766][ T6440] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.027431][ T6467] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 91.038924][ T6458] netlink: 28 bytes leftover after parsing attributes in process `syz.4.807'. [ 91.058676][ T6458] nbd: must specify at least one socket [ 91.583312][ T6521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.640815][ T6521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.694406][ T6521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.722523][ T6592] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 92.913253][ T6611] device syzkaller0 entered promiscuous mode [ 104.146787][ T6632] netlink: 40 bytes leftover after parsing attributes in process `syz.0.878'. [ 104.224747][ T6647] device syzkaller0 entered promiscuous mode [ 104.349408][ T6659] tipc: Started in network mode [ 104.350281][ T6659] tipc: Node identity 320c92b5d721, cluster identity 4711 [ 104.352524][ T6659] tipc: Enabled bearer , priority 0 [ 104.373569][ T6641] tipc: Resetting bearer [ 104.416480][ T6672] netlink: 44 bytes leftover after parsing attributes in process `syz.3.890'. [ 104.418175][ T6672] smc: net device ip_vti0 erased user defined pnetid SYZ0 [ 104.429700][ T6641] tipc: Disabling bearer [ 104.458750][ T6666] device veth1_to_team entered promiscuous mode [ 104.509448][ T6666] device bond0 entered promiscuous mode [ 104.511142][ T6666] device bond_slave_0 entered promiscuous mode [ 104.512413][ T6666] device bond_slave_1 entered promiscuous mode [ 104.557894][ T6666] hsr1: Slave A (veth1_to_team) is not up; please bring it up to get a fully working HSR network [ 104.559804][ T6666] hsr1: Slave B (bond0) is not up; please bring it up to get a fully working HSR network [ 104.562485][ T6667] netlink: 40 bytes leftover after parsing attributes in process `syz.4.892'. [ 104.580937][ T6682] validate_nla: 17 callbacks suppressed [ 104.580952][ T6682] netlink: 'syz.0.897': attribute type 4 has an invalid length. [ 104.604157][ T6678] netlink: 'syz.0.897': attribute type 4 has an invalid length. [ 104.687616][ T6695] sock: sock_timestamping_bind_phc: sock not bind to device [ 104.771692][ T6695] IPVS: fo: FWM 3 0x00000003 - no destination available [ 104.793951][ T6700] device syzkaller1 entered promiscuous mode [ 104.951455][ T6709] device syzkaller0 entered promiscuous mode [ 104.954970][ T6711] netlink: 68 bytes leftover after parsing attributes in process `syz.4.910'. [ 104.973764][ T6713] netlink: 'syz.2.911': attribute type 4 has an invalid length. [ 104.987105][ T6713] netlink: 'syz.2.911': attribute type 4 has an invalid length. [ 105.075321][ T6715] netlink: 44 bytes leftover after parsing attributes in process `syz.4.912'. [ 105.107745][ T6725] netlink: 4 bytes leftover after parsing attributes in process `syz.2.917'. [ 105.520925][ T6738] netlink: 68 bytes leftover after parsing attributes in process `syz.1.922'. [ 105.522757][ T6744] netlink: 'syz.4.924': attribute type 4 has an invalid length. [ 105.533675][ T6746] netlink: 'syz.4.924': attribute type 4 has an invalid length. [ 105.635097][ T6761] device syzkaller0 entered promiscuous mode [ 116.640780][ T6775] netlink: 68 bytes leftover after parsing attributes in process `syz.4.937'. [ 116.647851][ T6786] netlink: 28 bytes leftover after parsing attributes in process `syz.3.934'. [ 116.818655][ T6812] netlink: 8 bytes leftover after parsing attributes in process `syz.3.950'. [ 116.823940][ T6812] netlink: 4 bytes leftover after parsing attributes in process `syz.3.950'. [ 116.830259][ T6812] netlink: 'syz.3.950': attribute type 12 has an invalid length. [ 116.831518][ T6812] netlink: 'syz.3.950': attribute type 13 has an invalid length. [ 116.954851][ T6828] netlink: 68 bytes leftover after parsing attributes in process `syz.0.956'. [ 116.989122][ T6829] device syzkaller0 entered promiscuous mode [ 128.112768][ T6848] tipc: Enabling of bearer rejected, failed to enable media [ 128.114439][ T6851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.967'. [ 128.115881][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.0.967'. [ 128.117531][ T6855] netlink: 68 bytes leftover after parsing attributes in process `syz.3.969'. [ 128.174467][ T6865] netlink: 32 bytes leftover after parsing attributes in process `syz.3.972'. [ 128.315046][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.0.983'. [ 128.494076][ T6893] netlink: 4 bytes leftover after parsing attributes in process `syz.4.985'. [ 128.585187][ T6904] netlink: 224 bytes leftover after parsing attributes in process `syz.0.986'. [ 128.900034][ T6920] netlink: 8 bytes leftover after parsing attributes in process `syz.1.993'. [ 128.901539][ T6920] netlink: 24 bytes leftover after parsing attributes in process `syz.1.993'. [ 128.947492][ T6925] netlink: 'syz.0.996': attribute type 10 has an invalid length. [ 128.954463][ T6927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 128.955963][ T6927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.130156][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1006'. [ 129.362500][ T6971] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.370717][ T6971] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 129.466364][ T4310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.646347][ T4310] usb 1-1: Using ep0 maxpacket: 32 [ 129.649116][ T4310] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 129.650740][ T4310] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.659930][ T4310] usb 1-1: config 0 descriptor?? [ 129.668756][ T4310] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 131.210093][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.211360][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 131.214158][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.220941][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 131.222385][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.223775][ T7128] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 131.355607][ T7142] binder: 7141:7142 tried to acquire reference to desc 0, got 1 instead [ 131.361334][ T7142] binder: 7141:7142 got transaction with invalid fd, 8 [ 131.362625][ T7142] binder: 7142:7141 translate fd failed [ 131.369583][ T7142] binder: 7141:7142 transaction call to 7141:0 failed 5/29201/-9, size 80-24 line 3424 [ 131.377490][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 131.474544][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 132.317274][ T7258] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.319850][ T7258] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.321770][ T7258] 0ªî{X¹¦: renamed from gretap0 [ 132.347118][ T7258] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 133.080696][ T4310] gspca_vc032x: reg_w err -71 [ 133.081589][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.082348][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.083189][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.083985][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.084924][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.085682][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.087079][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.088846][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.089838][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.090739][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.092762][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.093642][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.096832][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.098825][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.100841][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.102791][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.104730][ T4310] gspca_vc032x: I2c Bus Busy Wait 00 [ 133.106295][ T4310] gspca_vc032x: Unknown sensor... [ 133.108354][ T4310] vc032x: probe of 1-1:0.0 failed with error -22 [ 133.114897][ T4310] usb 1-1: USB disconnect, device number 2 [ 133.137873][ T7328] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 133.140396][ T7328] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.253761][ T7338] __nla_validate_parse: 39 callbacks suppressed [ 133.253771][ T7338] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1173'. [ 133.274462][ T7340] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1174'. [ 133.353162][ T7348] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1178'. [ 133.354733][ T7348] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1178'. [ 133.523866][ T7364] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1185'. [ 133.546935][ T7368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1186'. [ 133.595896][ T7372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 133.600886][ T7372] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 133.605074][ T7372] netlink: 'syz.3.1190': attribute type 12 has an invalid length. [ 133.633402][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.634707][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.643779][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.655191][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.664333][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.665662][ T7376] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.816413][ T7392] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1199'. [ 133.825748][ T7402] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1200'. [ 134.177150][ T7411] netlink: 'syz.4.1203': attribute type 12 has an invalid length. [ 134.426307][ T4377] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 134.597659][ T7441] netlink: 'syz.3.1216': attribute type 12 has an invalid length. [ 134.619203][ T4377] usb 1-1: Using ep0 maxpacket: 32 [ 134.624178][ T4377] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 134.625915][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.627701][ T4377] usb 1-1: Product: syz [ 134.628320][ T4377] usb 1-1: Manufacturer: syz [ 134.630264][ T4377] usb 1-1: SerialNumber: syz [ 134.640138][ T4377] usb 1-1: config 0 descriptor?? [ 134.644618][ T4377] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 134.669370][ T7448] tipc: Enabled bearer , priority 0 [ 134.674229][ T7448] device syzkaller0 entered promiscuous mode [ 134.681165][ T7448] tipc: Resetting bearer [ 134.684159][ T7447] tipc: Resetting bearer [ 134.737877][ T7447] tipc: Disabling bearer [ 135.137717][ T7492] netlink: 'syz.2.1238': attribute type 13 has an invalid length. [ 135.184715][ T7496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.188855][ T7496] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.600845][ T7517] netlink: 'syz.3.1250': attribute type 13 has an invalid length. [ 135.725188][ T7522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.727762][ T7522] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 135.811841][ T7530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 135.814049][ T7530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 136.585777][ T7564] netlink: 'syz.3.1271': attribute type 1 has an invalid length. [ 137.723198][ T7619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.725029][ T7619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.762325][ T7623] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.763992][ T7623] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.071668][ T4377] gspca_stk1135: reg_w 0x18 err -71 [ 138.073536][ T4377] gspca_stk1135: serial bus timeout: status=0x00 [ 138.074385][ T4377] gspca_stk1135: Sensor write failed [ 138.075220][ T4377] gspca_stk1135: serial bus timeout: status=0x00 [ 138.076195][ T4377] gspca_stk1135: Sensor write failed [ 138.079148][ T4377] gspca_stk1135: serial bus timeout: status=0x00 [ 138.080251][ T4377] gspca_stk1135: Sensor read failed [ 138.081057][ T4377] gspca_stk1135: serial bus timeout: status=0x00 [ 138.082118][ T4377] gspca_stk1135: Sensor read failed [ 138.082918][ T4377] gspca_stk1135: Detected sensor type unknown (0x0) [ 138.083878][ T4377] gspca_stk1135: serial bus timeout: status=0x00 [ 138.084810][ T4377] gspca_stk1135: Sensor read failed [ 138.085593][ T4377] gspca_stk1135: serial bus timeout: status=0x00 [ 138.089534][ T4377] gspca_stk1135: Sensor read failed [ 138.090312][ T4377] gspca_stk1135: serial bus timeout: status=0x00 [ 138.091357][ T4377] gspca_stk1135: Sensor write failed [ 138.092169][ T4377] gspca_stk1135: serial bus timeout: status=0x00 [ 138.093164][ T4377] gspca_stk1135: Sensor write failed [ 138.094037][ T4377] stk1135: probe of 1-1:0.0 failed with error -71 [ 138.097130][ T4377] usb 1-1: USB disconnect, device number 3 [ 138.871605][ T7695] __nla_validate_parse: 19 callbacks suppressed [ 138.871616][ T7695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 139.018878][ T7704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.021504][ T7704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 139.261091][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1334'. [ 139.538255][ T7725] netlink: 200 bytes leftover after parsing attributes in process `syz.1.1340'. [ 139.545298][ T7725] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1340'. [ 139.575583][ T7727] tipc: Started in network mode [ 139.581704][ T7727] tipc: Node identity a23028ac18fd, cluster identity 4711 [ 139.582942][ T7727] tipc: Enabled bearer , priority 0 [ 139.587533][ T7727] device syzkaller0 entered promiscuous mode [ 139.594338][ T7727] tipc: Resetting bearer [ 139.600997][ T7726] tipc: Resetting bearer [ 139.669394][ T7726] tipc: Disabling bearer [ 139.754603][ T7745] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1349'. [ 139.826693][ T7751] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1354'. [ 139.831377][ T7754] device syzkaller0 entered promiscuous mode [ 139.833183][ T7755] tipc: Enabling of bearer rejected, failed to enable media [ 150.856522][ T7783] tipc: Enabled bearer , priority 0 [ 150.858352][ T7787] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1363'. [ 150.910230][ T7792] device syzkaller0 entered promiscuous mode [ 150.990945][ T7811] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1366'. [ 150.998323][ T7802] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1368'. [ 151.002695][ T7797] tipc: Enabling of bearer rejected, already enabled [ 151.300313][ T7835] CUSE: unknown device info "ç" [ 151.301655][ T7835] CUSE: unknown device info "" [ 151.302611][ T7835] CUSE: unknown device info "&" [ 151.303338][ T7835] CUSE: unknown device info "" [ 151.304216][ T7835] CUSE: DEVNAME unspecified [ 151.365331][ T7837] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 151.423470][ T7839] binder: 7838:7839 tried to acquire reference to desc 0, got 1 instead [ 151.883473][ T7842] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1383'. [ 151.919733][ T7844] tipc: Enabled bearer , priority 0 [ 151.921243][ T7844] device syzkaller0 entered promiscuous mode [ 151.935381][ T7844] tipc: Resetting bearer [ 151.938075][ T7843] tipc: Resetting bearer [ 151.994231][ T7843] tipc: Disabling bearer [ 152.175746][ T7856] tipc: Enabled bearer , priority 0 [ 152.181174][ T7856] device syzkaller0 entered promiscuous mode [ 152.205270][ T4327] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 152.240290][ T3430] binder: release 7838:7839 transaction 14 out, still active [ 152.248681][ T7856] tipc: Resetting bearer [ 152.255160][ T7854] tipc: Resetting bearer [ 152.276299][ T3430] binder: undelivered TRANSACTION_COMPLETE [ 152.277271][ T3430] binder: send failed reply for transaction 14, target dead [ 152.328067][ T7854] tipc: Disabling bearer [ 152.332449][ T7862] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1391'. [ 152.439000][ T7875] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1394'. [ 152.974551][ T7911] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1405'. [ 153.061568][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1408'. [ 153.285274][ T7936] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1416'. [ 153.445345][ T7946] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1420'. [ 153.919712][ T7954] Bluetooth: MGMT ver 1.22 [ 154.069758][ T7969] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 155.141572][ T8020] tipc: Enabled bearer , priority 0 [ 155.144648][ T8022] device syzkaller0 entered promiscuous mode [ 155.192838][ T8014] tipc: Resetting bearer [ 155.250750][ T8013] tipc: Resetting bearer [ 155.307494][ T8013] tipc: Disabling bearer [ 155.391786][ T8038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.395485][ T8038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 155.614231][ T8061] process 'syz.4.1461' launched './file1' with NULL argv: empty string added [ 155.673413][ T8065] tipc: Enabling of bearer rejected, already enabled [ 155.716727][ T8070] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 155.718390][ T8070] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.280244][ T8097] tipc: Enabled bearer , priority 0 [ 156.281980][ T8097] device syzkaller0 entered promiscuous mode [ 156.316543][ T8096] __nla_validate_parse: 5 callbacks suppressed [ 156.316563][ T8096] netlink: 112 bytes leftover after parsing attributes in process `syz.4.1474'. [ 156.322458][ T8097] tipc: Resetting bearer [ 156.326014][ T8095] tipc: Resetting bearer [ 156.376929][ T8095] tipc: Disabling bearer [ 156.456143][ T8101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'. [ 156.503873][ T8111] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 156.626630][ T4327] Bluetooth: hci4: hardware error 0x00 [ 156.654590][ T8126] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 156.658899][ T8126] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 156.672645][ T8125] tipc: Enabled bearer , priority 0 [ 156.686177][ T8125] tipc: Disabling bearer [ 156.755710][ T8130] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1487'. [ 156.889739][ T8141] tipc: Enabled bearer , priority 0 [ 156.891400][ T8141] device syzkaller0 entered promiscuous mode [ 156.896870][ T8141] tipc: Resetting bearer [ 156.899233][ T8140] tipc: Resetting bearer [ 156.927357][ T8140] tipc: Disabling bearer [ 156.936459][ T4377] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 156.989374][ T8144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1492'. [ 156.991194][ T8144] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1492'. [ 157.116294][ T4377] usb 1-1: Using ep0 maxpacket: 8 [ 157.119101][ T4377] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 157.121866][ T4377] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 157.123441][ T4377] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.124760][ T4377] usb 1-1: Product: syz [ 157.125440][ T4377] usb 1-1: Manufacturer: syz [ 157.126170][ T4377] usb 1-1: SerialNumber: syz [ 157.131277][ T4377] usb 1-1: config 0 descriptor?? [ 157.133898][ T4377] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 157.191785][ T8151] overlayfs: filesystem on './file0' not supported as upperdir [ 157.639835][ T8166] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1499'. [ 157.838606][ T8175] device syzkaller0 entered promiscuous mode [ 158.092004][ T8181] binder: 8180:8181 tried to acquire reference to desc 0, got 1 instead [ 158.093849][ T8181] binder: 8180:8181 got new transaction with bad transaction stack, transaction 19 has target 8180:0 [ 158.095633][ T8181] binder: 8180:8181 transaction call to 8180:0 failed 20/29201/-71, size 0-0 line 3114 [ 158.100985][ T4310] binder: release 8180:8181 transaction 19 out, still active [ 158.102263][ T4310] binder: undelivered TRANSACTION_COMPLETE [ 158.103151][ T4310] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.117535][ T5605] binder: send failed reply for transaction 19, target dead [ 158.180267][ T8192] overlayfs: filesystem on './file0' not supported as upperdir [ 158.180624][ T8185] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1506'. [ 158.224045][ T8193] binder: 8191:8193 tried to acquire reference to desc 0, got 1 instead [ 158.225826][ T8193] binder: 8191:8193 got transaction with invalid fd, 1074029316 [ 158.230171][ T8193] binder: 8193:8191 translate fd array failed [ 158.231306][ T8193] binder: 8191:8193 transaction call to 8191:0 failed 25/29201/-9, size 112-24 line 3495 [ 158.233980][ T5605] binder: undelivered TRANSACTION_ERROR: 29201 [ 158.259456][ T8199] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1510'. [ 158.282994][ T8206] overlayfs: filesystem on './file0' not supported as upperdir [ 158.322216][ T8214] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1516'. [ 158.324156][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1516'. [ 158.716324][ T4330] Bluetooth: hci2: command 0x0406 tx timeout [ 158.726472][ T4323] Bluetooth: hci0: command 0x0406 tx timeout [ 158.726656][ T4330] Bluetooth: hci3: command 0x0406 tx timeout [ 158.727551][ T4323] Bluetooth: hci1: command 0x0406 tx timeout [ 158.796318][ T4327] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 159.033426][ T8232] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 159.152354][ T4377] gspca_zc3xx: reg_r err -32 [ 159.156164][ T8238] device syzkaller0 entered promiscuous mode [ 159.263535][ T8249] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 159.347210][ T8259] CUSE: unknown device info "t" [ 159.350899][ T8259] CUSE: unknown device info "" [ 159.351678][ T8259] CUSE: unknown device info "&" [ 159.352425][ T8259] CUSE: unknown device info "" [ 159.353153][ T8259] CUSE: DEVNAME unspecified [ 159.404415][ T8261] overlayfs: failed to resolve './bus': -2 [ 159.481968][ T8270] tipc: Enabled bearer , priority 0 [ 159.483425][ T8270] device syzkaller0 entered promiscuous mode [ 159.515242][ T8270] tipc: Resetting bearer [ 159.521223][ T8267] tipc: Resetting bearer [ 159.546927][ T8267] tipc: Disabling bearer [ 159.625797][ T8285] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 159.634291][ T8286] device syzkaller0 entered promiscuous mode [ 159.767256][ T8290] CUSE: unknown device info "@" [ 159.768149][ T8290] CUSE: unknown device info "" [ 159.768929][ T8290] CUSE: unknown device info "&" [ 159.769701][ T8290] CUSE: unknown device info "" [ 159.770388][ T8290] CUSE: DEVNAME unspecified [ 159.778427][ T4377] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 159.779592][ T4377] gspca_zc3xx: probe of 1-1:0.0 failed with error -32 [ 159.803241][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.804860][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 159.810165][ T8298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 159.812830][ T8298] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.440556][ T8316] tipc: Enabling of bearer rejected, already enabled [ 160.524532][ T8324] device syzkaller0 entered promiscuous mode [ 160.731957][ T8340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.733365][ T8340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.816023][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.817835][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.937234][ T8355] CUSE: unknown device info "†" [ 160.938084][ T8355] CUSE: unknown device info "" [ 160.938808][ T8355] CUSE: unknown device info "&" [ 160.939569][ T8355] CUSE: unknown device info "" [ 160.940322][ T8355] CUSE: DEVNAME unspecified [ 160.999144][ T8359] device syzkaller0 entered promiscuous mode [ 161.021785][ T8344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.023366][ T8344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.174332][ T8362] overlayfs: filesystem on './file0' not supported as upperdir [ 161.217202][ T8366] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.218664][ T8366] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.383974][ T5604] usb 1-1: USB disconnect, device number 4 [ 161.447767][ T8386] CUSE: unknown device info "\" [ 161.448552][ T8386] CUSE: unknown device info "" [ 161.449375][ T8386] CUSE: unknown device info "&" [ 161.450104][ T8386] CUSE: unknown device info "" [ 161.450975][ T8386] CUSE: DEVNAME unspecified [ 161.517864][ T8394] __nla_validate_parse: 17 callbacks suppressed [ 161.517875][ T8394] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1585'. [ 161.558802][ T8398] overlayfs: filesystem on './file0' not supported as upperdir [ 161.614123][ T8406] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1591'. [ 161.631537][ T8403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1589'. [ 161.675090][ T8408] CUSE: unknown device info "<" [ 161.675978][ T8408] CUSE: unknown device info "" [ 161.679842][ T8408] CUSE: unknown device info "&" [ 161.680762][ T8408] CUSE: unknown device info "" [ 161.681572][ T8408] CUSE: DEVNAME unspecified [ 161.693019][ T8416] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1596'. [ 161.723112][ T8419] tipc: Enabled bearer , priority 0 [ 161.724551][ T8419] device syzkaller0 entered promiscuous mode [ 161.728464][ T8417] tipc: Resetting bearer [ 161.772574][ T8425] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.774472][ T8425] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 161.787704][ T8417] tipc: Disabling bearer [ 161.857933][ T8432] overlayfs: filesystem on './file0' not supported as upperdir [ 161.861989][ T8434] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1604'. [ 161.892293][ T8437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1605'. [ 161.901531][ T8438] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1606'. [ 161.916724][ T8442] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1608'. [ 161.965220][ T8448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 161.966982][ T8448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 162.021883][ T8450] tipc: Enabled bearer , priority 0 [ 162.036042][ T8450] device syzkaller0 entered promiscuous mode [ 162.039591][ T8449] tipc: Resetting bearer [ 162.077531][ T8449] tipc: Disabling bearer [ 162.428639][ T8462] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1617'. [ 162.455805][ T8464] overlayfs: failed to create directory ./bus/work (errno: 22); mounting read-only [ 162.502462][ T8472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1622'. [ 162.561934][ T8476] tipc: Enabled bearer , priority 0 [ 162.563414][ T8476] device syzkaller0 entered promiscuous mode [ 162.568133][ T8475] tipc: Resetting bearer [ 162.627374][ T8475] tipc: Disabling bearer [ 162.889275][ T8492] overlayfs: filesystem on './file0' not supported as upperdir [ 163.033046][ T8505] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 163.033376][ T8504] tipc: Enabled bearer , priority 0 [ 163.035738][ T8505] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 163.037303][ T8504] device syzkaller0 entered promiscuous mode [ 163.067841][ T8501] tipc: Resetting bearer [ 163.127606][ T8501] tipc: Disabling bearer [ 163.455382][ T8521] netlink: 'syz.2.1642': attribute type 4 has an invalid length. [ 163.546349][ T3430] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 163.615222][ T8534] overlayfs: filesystem on './file0' not supported as upperdir [ 163.659530][ T8539] tipc: Enabling of bearer rejected, already enabled [ 163.746542][ T3430] usb 1-1: Using ep0 maxpacket: 8 [ 163.749428][ T3430] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 163.750744][ T3430] usb 1-1: config 179 has no interface number 0 [ 163.751804][ T3430] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 163.753536][ T3430] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 163.755195][ T3430] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 163.756896][ T3430] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 163.758635][ T3430] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 163.760513][ T3430] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 163.761926][ T3430] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.766629][ T8519] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 163.786024][ T8549] netlink: 'syz.4.1654': attribute type 4 has an invalid length. [ 163.949753][ T8557] overlayfs: filesystem on './file0' not supported as upperdir [ 163.975604][ T3430] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input3 [ 164.000994][ T8559] tipc: Enabling of bearer rejected, already enabled [ 164.174251][ T8579] netlink: 'syz.4.1665': attribute type 4 has an invalid length. [ 164.175263][ T7] usb 1-1: USB disconnect, device number 5 [ 164.175600][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 164.178450][ C1] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 164.179586][ T7] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 164.205276][ T8581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.207609][ T8581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.268710][ T8583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 164.270432][ T8583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 164.733328][ T8587] tipc: Enabling of bearer rejected, already enabled [ 164.801616][ T8474] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 164.885153][ T8603] netlink: 'syz.2.1677': attribute type 1 has an invalid length. [ 164.888921][ T8603] netlink: 'syz.2.1677': attribute type 3 has an invalid length. [ 164.911084][ T8605] netlink: 'syz.4.1678': attribute type 4 has an invalid length. [ 164.938717][ T8610] overlayfs: filesystem on './file0' not supported as upperdir [ 164.962795][ T8612] tipc: Enabling of bearer rejected, already enabled [ 165.002924][ T8618] netlink: 'syz.2.1683': attribute type 3 has an invalid length. [ 165.071444][ T8624] netlink: 'syz.2.1686': attribute type 10 has an invalid length. [ 165.072990][ T8624] device syz_tun entered promiscuous mode [ 165.076063][ T8624] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 165.158492][ T8635] netlink: 'syz.2.1691': attribute type 4 has an invalid length. [ 165.165254][ T8637] netlink: 'syz.1.1690': attribute type 1 has an invalid length. [ 165.196350][ T4327] Bluetooth: hci1: command 0x0405 tx timeout [ 165.226978][ T8643] overlayfs: filesystem on './file0' not supported as upperdir [ 165.259479][ T8647] tipc: Enabled bearer , priority 0 [ 165.265613][ T8647] tipc: Resetting bearer [ 165.359772][ T8645] tipc: Disabling bearer [ 165.583197][ T8687] tipc: Enabling of bearer rejected, already enabled [ 165.751130][ T8709] overlayfs: filesystem on './file0' not supported as upperdir [ 165.849115][ T8715] binder: 8714:8715 got transaction to invalid handle, 1 [ 165.850275][ T8715] binder: 8715:8714 cannot find target node [ 165.851209][ T8715] binder: 8714:8715 transaction call to 0:0 failed 29/29201/-22, size 112-24 line 3054 [ 165.861724][ T8716] tipc: Enabled bearer , priority 0 [ 165.867691][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 165.871337][ T8716] tipc: Resetting bearer [ 165.946869][ T8713] tipc: Disabling bearer [ 166.170017][ T8746] binder: tried to use weak ref as strong ref [ 166.171145][ T8746] binder: 8745:8746 Acquire 1 refcount change on invalid ref 0 ret -22 [ 166.172669][ T8746] binder: 8745:8746 got transaction to invalid handle, 1 [ 166.173762][ T8746] binder: 8746:8745 cannot find target node [ 166.174736][ T8746] binder: 8745:8746 transaction call to 0:0 failed 32/29201/-22, size 112-24 line 3054 [ 166.179441][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.325366][ T8759] device syzkaller0 entered promiscuous mode [ 166.332378][ T8760] fuse: Bad value for 'fd' [ 166.338862][ T8762] overlayfs: filesystem on './file0' not supported as upperdir [ 166.393349][ T8768] binder: tried to use weak ref as strong ref [ 166.394334][ T8768] binder: 8767:8768 Acquire 1 refcount change on invalid ref 0 ret -22 [ 166.396004][ T8768] binder: 8767:8768 got transaction to invalid handle, 1 [ 166.399357][ T8768] binder: 8768:8767 cannot find target node [ 166.400328][ T8768] binder: 8767:8768 transaction call to 0:0 failed 35/29201/-22, size 112-24 line 3054 [ 166.402353][ T4377] binder: undelivered TRANSACTION_ERROR: 29201 [ 166.581045][ T8780] __nla_validate_parse: 18 callbacks suppressed [ 166.581065][ T8780] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1753'. [ 166.729205][ T8793] fuse: Bad value for 'fd' [ 166.753027][ T8796] overlayfs: filesystem on './file0' not supported as upperdir [ 166.774385][ T8798] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.776181][ T8798] device batadv_slave_1 entered promiscuous mode [ 166.880242][ T8805] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1764'. [ 167.160061][ T8823] overlayfs: filesystem on './file0' not supported as upperdir [ 167.182698][ T8825] binder: 8824:8825 tried to acquire reference to desc 0, got 1 instead [ 167.184619][ T8825] binder_alloc: 8824: binder_alloc_buf, no vma [ 167.185798][ T8825] binder: cannot allocate buffer: vma cleared, target dead or dying [ 167.352918][ T8840] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1777'. [ 167.508002][ T8850] overlayfs: filesystem on './file0' not supported as upperdir [ 167.703145][ T8870] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1788'. [ 167.798884][ T8853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 167.801273][ T8853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 168.499171][ T8956] binder: tried to use weak ref as strong ref [ 168.500391][ T8956] binder: 8955:8956 Acquire 1 refcount change on invalid ref 0 ret -22 [ 168.932854][ T8985] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1801'. [ 168.938976][ T8986] device syzkaller0 entered promiscuous mode [ 169.078511][ T8995] validate_nla: 18 callbacks suppressed [ 169.078523][ T8995] netlink: 'syz.1.1804': attribute type 4 has an invalid length. [ 169.138553][ T8998] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1805'. [ 169.160889][ T9000] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1806'. [ 169.240245][ T9009] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 169.241844][ T9009] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 169.248498][ T9010] netlink: 'syz.1.1810': attribute type 1 has an invalid length. [ 169.253744][ T9010] device bond1 entered promiscuous mode [ 169.254813][ T9010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.264934][ T9010] bond1: (slave bridge1): making interface the new active one [ 169.266178][ T9010] device bridge1 entered promiscuous mode [ 169.269207][ T9010] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 169.270805][ T4608] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 169.313658][ T9016] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1812'. [ 169.360254][ T9022] netlink: 'syz.1.1815': attribute type 4 has an invalid length. [ 169.383450][ T9025] device syzkaller0 entered promiscuous mode [ 169.736538][ T9054] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1824'. [ 169.781408][ T9057] netlink: 'syz.1.1826': attribute type 4 has an invalid length. [ 169.783362][ T9060] device syzkaller0 entered promiscuous mode [ 170.101303][ T9081] netlink: 'syz.2.1836': attribute type 1 has an invalid length. [ 170.102708][ T9081] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1836'. [ 170.196095][ T9094] device syzkaller0 entered promiscuous mode [ 170.348927][ T9100] binder: BINDER_SET_CONTEXT_MGR already set [ 170.350057][ T9100] binder: 9099:9100 ioctl 4018620d 20000040 returned -16 [ 170.408696][ T9106] fuse: Bad value for 'group_id' [ 170.625377][ T9132] device syzkaller0 entered promiscuous mode [ 170.790841][ T9138] CUSE: unknown device info "P" [ 170.791797][ T9138] CUSE: unknown device info "" [ 170.792557][ T9138] CUSE: unknown device info "&" [ 170.793387][ T9138] CUSE: unknown device info "" [ 170.794155][ T9138] CUSE: DEVNAME unspecified [ 170.949825][ T9156] binder_user_error: 6 callbacks suppressed [ 170.949834][ T9156] binder: 9155:9156 got transaction to invalid handle, 1 [ 170.951901][ T9156] binder_debug: 14 callbacks suppressed [ 170.951913][ T9156] binder: 9156:9155 cannot find target node [ 170.953561][ T9156] binder: 9155:9156 transaction call to 0:0 failed 57/29201/-22, size 112-24 line 3054 [ 170.955482][ T5316] binder: undelivered TRANSACTION_ERROR: 29201 [ 170.996802][ T9161] fuse: Bad value for 'group_id' [ 171.048370][ T9167] device syzkaller0 entered promiscuous mode [ 171.388482][ T9182] binder: 9181:9182 got transaction to invalid handle, 1 [ 171.389748][ T9182] binder: 9182:9181 cannot find target node [ 171.390711][ T9182] binder: 9181:9182 transaction call to 0:0 failed 61/29201/-22, size 112-24 line 3054 [ 171.392393][ T5316] binder: undelivered TRANSACTION_ERROR: 29201 [ 171.547742][ T9196] device syzkaller0 entered promiscuous mode [ 171.918987][ T9212] binder: BINDER_SET_CONTEXT_MGR already set [ 171.920649][ T9212] binder: 9211:9212 ioctl 4018620d 20000040 returned -16 [ 171.922172][ T9212] binder: 9211:9212 got transaction to invalid handle, 1 [ 171.923490][ T9212] binder: 9212:9211 cannot find target node [ 171.924671][ T9212] binder: 9211:9212 transaction call to 0:0 failed 63/29201/-22, size 112-24 line 3054 [ 171.927840][ T7] binder: undelivered TRANSACTION_ERROR: 29201 [ 171.986609][ T9220] netlink: 'syz.1.1892': attribute type 4 has an invalid length. [ 171.995123][ T9222] netlink: 'syz.2.1891': attribute type 13 has an invalid length. [ 172.005978][ T9222] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 172.011988][ T9222] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 172.015549][ T9222] device gretap0 left promiscuous mode [ 172.023686][ T9222] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 172.025719][ T9222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.028514][ T9222] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.066868][ T9222] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 172.189621][ T9233] CUSE: unknown device info "Ÿ" [ 172.190609][ T9233] CUSE: unknown device info "" [ 172.191481][ T9233] CUSE: unknown device info "&" [ 172.192254][ T9233] CUSE: unknown device info "" [ 172.193084][ T9233] CUSE: DEVNAME unspecified [ 172.224506][ T9241] binder: BINDER_SET_CONTEXT_MGR already set [ 172.225522][ T9241] binder: 9240:9241 ioctl 4018620d 20000040 returned -16 [ 172.229648][ T9241] binder: 9240:9241 got transaction to invalid handle, 1 [ 172.230869][ T9241] binder: 9241:9240 cannot find target node [ 172.319023][ T9253] __nla_validate_parse: 3 callbacks suppressed [ 172.319036][ T9253] netlink: 404 bytes leftover after parsing attributes in process `syz.2.1905'. [ 172.344522][ T9249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.345999][ T9249] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.351234][ T9249] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1902'. [ 172.352739][ T9249] 0ªî{X¹¦: renamed from gretap0 [ 172.389969][ T9249] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 172.398777][ T9259] device syzkaller0 entered promiscuous mode [ 172.921202][ T9268] binder: BINDER_SET_CONTEXT_MGR already set [ 172.922164][ T9268] binder: 9267:9268 ioctl 4018620d 20000040 returned -16 [ 172.923658][ T9268] binder: 9267:9268 got transaction to invalid handle, 1 [ 172.927926][ T9266] CUSE: unknown device info "v" [ 172.928653][ T9266] CUSE: unknown device info "" [ 172.929454][ T9266] CUSE: unknown device info "&" [ 172.930304][ T9266] CUSE: unknown device info "" [ 172.931144][ T9266] CUSE: DEVNAME unspecified [ 173.302303][ T9286] device syzkaller0 entered promiscuous mode [ 173.446163][ T9290] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1922'. [ 173.497774][ T9292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 173.500377][ T9292] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 173.607363][ T9294] CUSE: unknown device info "~" [ 173.608175][ T9294] CUSE: unknown device info "" [ 173.608865][ T9294] CUSE: unknown device info "&" [ 173.609616][ T9294] CUSE: unknown device info "" [ 173.610318][ T9294] CUSE: DEVNAME unspecified [ 174.020782][ T9299] binder: 9298:9299 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 174.023713][ T9299] binder: 9298:9299 got transaction to invalid handle, 1 [ 174.181683][ T9315] device syzkaller0 entered promiscuous mode [ 174.264960][ T9317] CUSE: unknown device info "Q" [ 174.265859][ T9317] CUSE: unknown device info "" [ 174.267666][ T9317] CUSE: unknown device info "&" [ 174.268418][ T9317] CUSE: unknown device info "" [ 174.269134][ T9317] CUSE: DEVNAME unspecified [ 174.328135][ T9319] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 174.330629][ T9319] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 174.434478][ T9324] binder: 9323:9324 IncRefs 0 refcount change on invalid ref 0 ret -22 [ 174.439136][ T9324] binder: 9323:9324 got transaction to invalid handle, 1 [ 174.560854][ T9340] CUSE: unknown device info "‡" [ 174.561671][ T9340] CUSE: unknown device info "" [ 174.562487][ T9340] CUSE: unknown device info "&" [ 174.563220][ T9340] CUSE: unknown device info "" [ 174.563905][ T9340] CUSE: DEVNAME unspecified [ 174.608662][ T9342] device syzkaller0 entered promiscuous mode [ 185.884389][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1950'. [ 185.890031][ T9351] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 185.939607][ T9368] tipc: Enabled bearer , priority 0 [ 185.941066][ T9368] device syzkaller0 entered promiscuous mode [ 186.012182][ T9368] tipc: Resetting bearer [ 186.024732][ T9367] tipc: Resetting bearer [ 186.066741][ T9367] tipc: Disabling bearer [ 186.069281][ T9375] tipc: Enabled bearer , priority 0 [ 186.070990][ T9375] device syzkaller0 entered promiscuous mode [ 186.117899][ T9374] tipc: Resetting bearer [ 186.217344][ T9374] tipc: Disabling bearer [ 186.302476][ T9384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.304123][ T9384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.460321][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 186.555433][ T9398] tipc: Enabled bearer , priority 0 [ 186.560352][ T9398] device syzkaller0 entered promiscuous mode [ 186.600440][ T9398] tipc: Resetting bearer [ 186.603493][ T9397] tipc: Resetting bearer [ 186.647099][ T9397] tipc: Disabling bearer [ 186.707863][ T9400] tipc: Enabled bearer , priority 0 [ 186.709409][ T9400] device syzkaller0 entered promiscuous mode [ 186.714625][ T9400] tipc: Resetting bearer [ 186.718232][ T9399] tipc: Resetting bearer [ 186.737771][ T9399] tipc: Disabling bearer [ 186.825559][ T9404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.827457][ T9404] device batadv_slave_1 entered promiscuous mode [ 186.935948][ T9416] overlayfs: filesystem on './file0' not supported as upperdir [ 186.990690][ T9420] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1978'. [ 186.992079][ T9420] 0ªî{X¹¦: renamed from gretap0 [ 187.037350][ T9420] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 187.165827][ T9429] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.167700][ T9429] device batadv_slave_1 entered promiscuous mode [ 187.306033][ T9441] tipc: Enabled bearer , priority 0 [ 187.321963][ T9441] device syzkaller0 entered promiscuous mode [ 187.323253][ T9441] tipc: Resetting bearer [ 187.327665][ T9440] tipc: Resetting bearer [ 198.320034][ T9440] tipc: Disabling bearer [ 198.324554][ T9443] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1989'. [ 198.529025][ T9473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.532642][ T9473] bond0: (slave rose0): Enslaving as an active interface with an up link [ 198.536529][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 198.590254][ T9488] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2001'. [ 198.591843][ T9488] 0ªî{X¹¦: renamed from gretap0 [ 198.630318][ T9488] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 199.112911][ T9532] loop2: detected capacity change from 0 to 256 [ 199.114852][ T9532] ======================================================= [ 199.114852][ T9532] WARNING: The mand mount option has been deprecated and [ 199.114852][ T9532] and is ignored by this kernel. Remove the mand [ 199.114852][ T9532] option from the mount to silence this warning. [ 199.114852][ T9532] ======================================================= [ 199.125971][ T9532] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 199.128633][ T9532] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 199.744131][ T9541] loop1: detected capacity change from 0 to 256 [ 199.834169][ T9541] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 199.837370][ T9541] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 200.256975][ T9553] overlayfs: filesystem on './file0' not supported as upperdir [ 200.477929][ T9572] loop3: detected capacity change from 0 to 256 [ 200.482465][ T9572] exfat: Unknown parameter 'fsmagic' [ 201.512590][ T9584] overlayfs: filesystem on './file0' not supported as upperdir [ 201.514146][ T9578] tipc: Enabled bearer , priority 0 [ 201.515424][ T9579] device syzkaller0 entered promiscuous mode [ 201.560052][ T9576] tipc: Resetting bearer [ 201.564077][ T9575] tipc: Resetting bearer [ 201.607084][ T9575] tipc: Disabling bearer [ 201.627837][ T9588] netlink: 'syz.3.2027': attribute type 15 has an invalid length. [ 201.629221][ T9588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2027'. [ 201.630915][ T9588] netlink: 'syz.3.2027': attribute type 1 has an invalid length. [ 201.632096][ T9588] netlink: 'syz.3.2027': attribute type 2 has an invalid length. [ 201.678585][ T9597] loop1: detected capacity change from 0 to 256 [ 201.688759][ T9597] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 202.458824][ T9605] binder: 9604:9605 ioctl c0306201 0 returned -14 [ 202.461541][ T9605] binder: 9604:9605 got transaction to invalid handle, 1 [ 202.462685][ T9605] binder_debug: 11 callbacks suppressed [ 202.462690][ T9605] binder: 9605:9604 cannot find target node [ 202.464519][ T9605] binder: 9604:9605 transaction call to 0:0 failed 77/29201/-22, size 112-24 line 3054 [ 202.468747][ T5604] binder: undelivered TRANSACTION_ERROR: 29201 [ 202.491172][ T9607] overlayfs: filesystem on './file0' not supported as upperdir [ 202.605436][ T9615] loop3: detected capacity change from 0 to 16 [ 202.628729][ T9615] erofs: (device loop3): mounted with root inode @ nid 36. [ 202.714971][ T9622] loop2: detected capacity change from 0 to 512 [ 202.736787][ T9622] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 202.749395][ T9622] EXT4-fs (loop2): orphan cleanup on readonly fs [ 202.753485][ T9622] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.2041: bg 0: block 248: padding at end of block bitmap is not set [ 202.798319][ T9622] Quota error (device loop2): write_blk: dquota write failed [ 202.799696][ T9622] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 202.801317][ T9622] EXT4-fs error (device loop2): ext4_acquire_dquot:6816: comm syz.2.2041: Failed to acquire dquot type 1 [ 202.839843][ T9622] EXT4-fs (loop2): 1 truncate cleaned up [ 202.854886][ T9629] overlayfs: filesystem on './file0' not supported as upperdir [ 202.878962][ T9622] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.919923][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 202.998380][ T9635] binder: 9634:9635 ioctl c0306201 0 returned -14 [ 203.001115][ T9635] binder: 9634:9635 got transaction to invalid handle, 1 [ 203.002242][ T9635] binder: 9635:9634 cannot find target node [ 203.003101][ T9635] binder: 9634:9635 transaction call to 0:0 failed 81/29201/-22, size 112-24 line 3054 [ 203.005025][ T5604] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.401108][ T9649] overlayfs: filesystem on './file0' not supported as upperdir [ 203.639788][ T9657] binder: 9656:9657 ioctl c0306201 0 returned -14 [ 203.642573][ T9657] binder: 9656:9657 got transaction to invalid handle, 1 [ 203.643767][ T9657] binder: 9657:9656 cannot find target node [ 203.644619][ T9657] binder: 9656:9657 transaction call to 0:0 failed 85/29201/-22, size 112-24 line 3054 [ 203.647613][ T5605] binder: undelivered TRANSACTION_ERROR: 29201 [ 203.682653][ T9659] overlayfs: failed to resolve './bus': -2 [ 204.087980][ T9672] overlayfs: filesystem on './file0' not supported as upperdir [ 204.159189][ T9676] binder: 9675:9676 got transaction to invalid handle, 1 [ 204.160471][ T9676] binder: 9676:9675 cannot find target node [ 204.840304][ T9697] binder: 9696:9697 got transaction to invalid handle, 1 [ 204.933061][ T9711] loop2: detected capacity change from 0 to 256 [ 204.940657][ T9711] FAT-fs (loop2): Directory bread(block 64) failed [ 204.941791][ T9711] FAT-fs (loop2): Directory bread(block 65) failed [ 204.943042][ T9711] FAT-fs (loop2): Directory bread(block 66) failed [ 204.944140][ T9711] FAT-fs (loop2): Directory bread(block 67) failed [ 204.945310][ T9711] FAT-fs (loop2): Directory bread(block 68) failed [ 204.949623][ T9711] FAT-fs (loop2): Directory bread(block 69) failed [ 204.950817][ T9711] FAT-fs (loop2): Directory bread(block 70) failed [ 204.951986][ T9711] FAT-fs (loop2): Directory bread(block 71) failed [ 204.953068][ T9711] FAT-fs (loop2): Directory bread(block 72) failed [ 204.954225][ T9711] FAT-fs (loop2): Directory bread(block 73) failed [ 205.135068][ T9722] binder: 9721:9722 got transaction to invalid handle, 1 [ 205.231369][ T9726] loop1: detected capacity change from 0 to 512 [ 205.241655][ T9726] EXT4-fs (loop1): Test dummy encryption mode enabled [ 205.244980][ T9726] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 206.380778][ T9726] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802e01c, mo2=0102] [ 206.383004][ T9726] EXT4-fs (loop1): orphan cleanup on readonly fs [ 206.390204][ T9726] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.2083: bg 0: block 361: padding at end of block bitmap is not set [ 206.393898][ T9726] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6165: Corrupt filesystem [ 206.395401][ T9726] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.2083: attempt to clear invalid blocks 33619980 len 1 [ 206.400109][ T9726] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2083: invalid indirect mapped block 1811939328 (level 0) [ 206.402467][ T9726] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.2083: invalid indirect mapped block 2185560079 (level 1) [ 206.405133][ T9726] EXT4-fs (loop1): 1 truncate cleaned up [ 206.406116][ T9726] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 206.425356][ T9729] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 206.429361][ T9729] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 206.537844][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 206.638004][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2089'. [ 206.639632][ T9740] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2089'. [ 206.641027][ T9740] netlink: 'syz.2.2089': attribute type 3 has an invalid length. [ 206.642321][ T9740] netlink: 'syz.2.2089': attribute type 2 has an invalid length. [ 206.643489][ T9740] netlink: 31 bytes leftover after parsing attributes in process `syz.2.2089'. [ 207.117888][ T9749] loop2: detected capacity change from 0 to 40427 [ 207.134846][ T9749] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 207.136147][ T9749] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 207.150062][ T9749] F2FS-fs (loop2): invalid crc value [ 207.153266][ T9749] F2FS-fs (loop2): Found nat_bits in checkpoint [ 207.167590][ T9749] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 207.169036][ T9749] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 207.561462][ T9759] binder: 9758:9759 got transaction to invalid handle, 1 [ 207.562655][ T9759] binder_debug: 8 callbacks suppressed [ 207.562667][ T9759] binder: 9759:9758 cannot find target node [ 207.564570][ T9759] binder: 9758:9759 transaction call to 0:0 failed 101/29201/-22, size 112-24 line 3054 [ 207.566572][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 209.176317][ T27] audit: type=1326 audit(209.140:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 209.180279][ T27] audit: type=1326 audit(209.140:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 209.186541][ T27] audit: type=1326 audit(209.140:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 209.190071][ T27] audit: type=1326 audit(209.140:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 209.193908][ T27] audit: type=1326 audit(209.140:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9778 comm="syz.1.2102" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 209.920834][ T9790] binder: 9789:9790 got transaction to invalid handle, 1 [ 209.922260][ T9790] binder: 9790:9789 cannot find target node [ 209.923182][ T9790] binder: 9789:9790 transaction call to 0:0 failed 105/29201/-22, size 112-24 line 3054 [ 209.925291][ T4356] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.028289][ T9796] CUSE: unknown device info "L" [ 210.029199][ T9796] CUSE: unknown device info "" [ 210.030058][ T9796] CUSE: unknown device info "&" [ 210.030845][ T9796] CUSE: unknown device info "" [ 210.031634][ T9796] CUSE: DEVNAME unspecified [ 210.087386][ T9800] device syzkaller0 entered promiscuous mode [ 210.278571][ T9803] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2112'. [ 210.408529][ T9812] binder: 9811:9812 got transaction to invalid handle, 1 [ 210.409848][ T9812] binder: 9812:9811 cannot find target node [ 210.410774][ T9812] binder: 9811:9812 transaction call to 0:0 failed 109/29201/-22, size 112-24 line 3054 [ 210.412776][ T5605] binder: undelivered TRANSACTION_ERROR: 29201 [ 210.507246][ T9818] CUSE: unknown device info "[" [ 210.508145][ T9818] CUSE: unknown device info "" [ 210.508969][ T9818] CUSE: unknown device info "&" [ 210.509841][ T9818] CUSE: unknown device info "" [ 210.510651][ T9818] CUSE: DEVNAME unspecified [ 210.677516][ T9828] vhci_hcd: default hub control req: 8013 v0000 i0000 l31125 [ 210.722164][ T9832] binder: tried to use weak ref as strong ref [ 210.723194][ T9832] binder: 9831:9832 Acquire 1 refcount change on invalid ref 0 ret -22 [ 210.724865][ T9832] binder: 9831:9832 got transaction to invalid handle, 1 [ 210.726033][ T9832] binder: 9832:9831 cannot find target node [ 211.287657][ T9849] CUSE: unknown device info "Ì" [ 211.288509][ T9849] CUSE: unknown device info "" [ 211.289212][ T9849] CUSE: unknown device info "&" [ 211.290026][ T9849] CUSE: unknown device info "" [ 211.290786][ T9849] CUSE: DEVNAME unspecified [ 211.425887][ T9861] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2130'. [ 211.956651][ T9869] binder: tried to use weak ref as strong ref [ 211.957791][ T9869] binder: 9868:9869 Acquire 1 refcount change on invalid ref 0 ret -22 [ 211.959473][ T9869] binder: 9868:9869 got transaction to invalid handle, 1 [ 212.067738][ T9875] CUSE: unknown device info "!" [ 212.068592][ T9875] CUSE: unknown device info "" [ 212.069282][ T9875] CUSE: unknown device info "&" [ 212.070070][ T9875] CUSE: unknown device info "" [ 212.070811][ T9875] CUSE: DEVNAME unspecified [ 212.453473][ T9885] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2140'. [ 212.568887][ T9889] binder: tried to use weak ref as strong ref [ 212.569966][ T9889] binder: 9888:9889 Acquire 1 refcount change on invalid ref 0 ret -22 [ 212.571724][ T9889] binder: 9888:9889 got transaction to invalid handle, 1 [ 212.572876][ T9889] binder_debug: 5 callbacks suppressed [ 212.572889][ T9889] binder: 9889:9888 cannot find target node [ 212.574678][ T9889] binder: 9888:9889 transaction call to 0:0 failed 118/29201/-22, size 112-24 line 3054 [ 212.576497][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.677385][ T9895] CUSE: unknown device info "v" [ 212.678367][ T9895] CUSE: unknown device info "" [ 212.679425][ T9895] CUSE: unknown device info "&" [ 212.680288][ T9895] CUSE: unknown device info "" [ 212.681128][ T9895] CUSE: DEVNAME unspecified [ 212.851158][ T9907] binder: 9906:9907 ioctl 4018620d 0 returned -22 [ 212.852518][ T9907] binder: tried to use weak ref as strong ref [ 212.853539][ T9907] binder: 9906:9907 Acquire 1 refcount change on invalid ref 0 ret -22 [ 212.855141][ T9907] binder: 9906:9907 got transaction to invalid handle, 1 [ 212.856885][ T9907] binder: 9907:9906 cannot find target node [ 212.858169][ T9907] binder: 9906:9907 transaction call to 0:0 failed 121/29201/-22, size 112-24 line 3054 [ 212.860065][ T5605] binder: undelivered TRANSACTION_ERROR: 29201 [ 212.948263][ T9915] netlink: 'syz.2.2155': attribute type 4 has an invalid length. [ 212.951497][ T9915] netlink: 'syz.2.2155': attribute type 4 has an invalid length. [ 213.054007][ T9925] binder: 9924:9925 ioctl 4018620d 0 returned -22 [ 213.055371][ T9925] binder: tried to use weak ref as strong ref [ 213.057371][ T9925] binder: 9924:9925 Acquire 1 refcount change on invalid ref 0 ret -22 [ 213.058856][ T9925] binder: 9924:9925 got transaction to invalid handle, 1 [ 213.059973][ T9925] binder: 9925:9924 cannot find target node [ 213.060933][ T9925] binder: 9924:9925 transaction call to 0:0 failed 124/29201/-22, size 112-24 line 3054 [ 213.062910][ T24] binder: undelivered TRANSACTION_ERROR: 29201 [ 213.123688][ T9929] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2161'. [ 213.212799][ T9938] loop3: detected capacity change from 0 to 256 [ 213.216609][ T9938] FAT-fs (loop3): "posix" option is obsolete, not supported now [ 213.607762][ T9946] binder: 9945:9946 ioctl 4018620d 0 returned -22 [ 213.609251][ T9946] binder: tried to use weak ref as strong ref [ 213.610419][ T9946] binder: 9946:9945 cannot find target node [ 213.729431][ T9954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2172'. [ 213.847076][ T9966] binder: 9965:9966 ioctl c0306201 0 returned -14 [ 213.974042][ T9974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2181'. [ 214.093298][ T9982] loop2: detected capacity change from 0 to 4096 [ 214.105416][ T9982] EXT4-fs (loop2): Test dummy encryption mode enabled [ 214.108641][ T9982] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 214.110060][ T9982] System zones: 0-5 [ 214.113523][ T9982] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 214.135413][ T9988] binder: 9987:9988 ioctl c0306201 0 returned -14 [ 214.557986][ T27] audit: type=1326 audit(214.330:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.562587][ T9994] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce" [ 214.575774][ T9995] overlayfs: './file0' not a directory [ 214.577355][ T27] audit: type=1326 audit(214.330:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.581137][ T27] audit: type=1326 audit(214.340:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=114 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.584433][ T27] audit: type=1326 audit(214.340:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.609826][ T27] audit: type=1326 audit(214.340:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.669762][ T27] audit: type=1326 audit(214.340:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.723698][ T27] audit: type=1326 audit(214.340:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.786742][ T27] audit: type=1326 audit(214.340:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.798971][ T27] audit: type=1326 audit(214.350:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.808828][ T27] audit: type=1326 audit(214.350:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9977 comm="syz.2.2184" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 214.948176][ T4324] EXT4-fs (loop2): unmounting filesystem. [ 215.115514][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 215.117298][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 215.121142][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 215.123990][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 215.127552][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 215.130687][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2190'. [ 215.139285][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.140783][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.147689][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.149669][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.151588][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.152895][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.193928][T10011] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 216.918941][T10031] device syzkaller0 entered promiscuous mode [ 217.830504][T10061] __nla_validate_parse: 76 callbacks suppressed [ 217.830516][T10061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2210'. [ 218.550016][T10089] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2220'. [ 218.699491][T10093] device syzkaller0 entered promiscuous mode [ 218.886834][T10101] device syzkaller0 entered promiscuous mode [ 219.193955][T10112] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2231'. [ 219.291935][T10122] device syzkaller0 entered promiscuous mode [ 220.257386][ T27] kauditd_printk_skb: 29 callbacks suppressed [ 220.257395][ T27] audit: type=1326 audit(220.250:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5b3a8 code=0x7ffc0000 [ 220.262131][ T27] audit: type=1326 audit(220.250:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=279 compat=0 ip=0xffff7eb5b3a8 code=0x7ffc0000 [ 220.273551][T10133] loop3: detected capacity change from 0 to 256 [ 220.276116][ T27] audit: type=1326 audit(220.250:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=222 compat=0 ip=0xffff7eb5b3dc code=0x7ffc0000 [ 220.279768][ T27] audit: type=1326 audit(220.260:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=64 compat=0 ip=0xffff7eb59a90 code=0x7ffc0000 [ 220.289092][ T27] audit: type=1326 audit(220.260:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=215 compat=0 ip=0xffff7eb5b44c code=0x7ffc0000 [ 220.292186][ T27] audit: type=1326 audit(220.260:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=56 compat=0 ip=0xffff7eb59794 code=0x7ffc0000 [ 220.308897][T10133] exfat: Deprecated parameter 'namecase' [ 220.309832][T10133] exfat: Deprecated parameter 'utf8' [ 220.323125][ T27] audit: type=1326 audit(220.260:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=29 compat=0 ip=0xffff7eb5aed0 code=0x7ffc0000 [ 220.336119][ T27] audit: type=1326 audit(220.290:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff7eb59ccc code=0x7ffc0000 [ 220.342212][T10133] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 220.343661][ T27] audit: type=1326 audit(220.290:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=57 compat=0 ip=0xffff7eb59ccc code=0x7ffc0000 [ 220.351363][ T27] audit: type=1326 audit(220.290:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10132 comm="syz.3.2240" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=34 compat=0 ip=0xffff7eb59674 code=0x7ffc0000 [ 220.357330][T10133] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d) [ 220.394151][T10135] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2241'. [ 221.370772][T10158] device syzkaller0 entered promiscuous mode [ 222.078063][T10175] CUSE: unknown device info "" [ 222.078921][T10175] CUSE: unknown device info "" [ 222.079871][T10175] CUSE: unknown device info "&" [ 222.080630][T10175] CUSE: unknown device info "" [ 222.081332][T10175] CUSE: DEVNAME unspecified [ 222.103479][T10177] overlayfs: filesystem on './file0' not supported as upperdir [ 222.148813][T10181] device syzkaller0 entered promiscuous mode [ 222.398906][T10186] tipc: Enabling of bearer rejected, failed to enable media [ 222.566036][T10200] overlayfs: filesystem on './file0' not supported as upperdir [ 223.069895][T10210] device syzkaller0 entered promiscuous mode [ 223.519578][T10211] loop1: detected capacity change from 0 to 128 [ 223.521072][T10211] EXT4-fs: Ignoring removed nobh option [ 223.533656][T10211] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 223.568917][T10213] tipc: Enabling of bearer rejected, failed to enable media [ 223.597821][T10220] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2272'. [ 223.766872][T10233] overlayfs: failed to resolve './file0': -2 [ 223.786407][T10230] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 223.865684][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 224.118334][T10237] loop1: detected capacity change from 0 to 40427 [ 224.121123][T10237] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 224.122546][T10237] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 224.128589][T10237] F2FS-fs (loop1): Found nat_bits in checkpoint [ 224.145687][T10237] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 224.146870][T10237] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 224.220732][T10243] tipc: Enabling of bearer rejected, failed to enable media [ 224.222440][T10243] device syzkaller0 entered promiscuous mode [ 224.480158][T10251] device syzkaller0 entered promiscuous mode [ 224.525196][T10253] overlayfs: filesystem on './file0' not supported as upperdir [ 225.978640][T10274] tipc: Enabling of bearer rejected, failed to enable media [ 225.980363][T10274] device syzkaller0 entered promiscuous mode [ 226.430370][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 226.432006][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 226.433495][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 226.435000][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 226.436462][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 226.437959][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 226.439291][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 226.440576][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 226.441855][T10284] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2293'. [ 226.824785][T10300] loop3: detected capacity change from 0 to 256 [ 226.828305][T10300] exfat: Unknown parameter 'fsmagic' [ 228.023700][T10303] sched: RT throttling activated [ 228.739651][T10312] tipc: Enabling of bearer rejected, failed to enable media [ 228.959007][T10326] loop3: detected capacity change from 0 to 40427 [ 229.017168][T10333] loop1: detected capacity change from 0 to 256 [ 229.051042][T10333] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 229.053369][T10333] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 229.273352][T10326] F2FS-fs (loop3): Invalid SB checksum offset: 0 [ 229.274316][T10326] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 229.279341][T10326] F2FS-fs (loop3): invalid crc value [ 229.298296][T10326] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 229.318987][T10326] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0 [ 229.320298][T10326] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 229.442306][T10326] syz.3.2308: attempt to access beyond end of device [ 229.442306][T10326] loop3: rw=2049, sector=53248, nr_sectors = 2176 limit=40427 [ 229.452270][T10326] syz.3.2308: attempt to access beyond end of device [ 229.452270][T10326] loop3: rw=2049, sector=55424, nr_sectors = 1920 limit=40427 [ 229.469077][T10326] syz.3.2308: attempt to access beyond end of device [ 229.469077][T10326] loop3: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 229.491518][T10326] syz.3.2308: attempt to access beyond end of device [ 229.491518][T10326] loop3: rw=2049, sector=57344, nr_sectors = 4344 limit=40427 [ 229.532817][T10326] syz.3.2308: attempt to access beyond end of device [ 229.532817][T10326] loop3: rw=524288, sector=53248, nr_sectors = 256 limit=40427 [ 229.535510][T10326] syz.3.2308: attempt to access beyond end of device [ 229.535510][T10326] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 229.540367][T10326] syz.3.2308: attempt to access beyond end of device [ 229.540367][T10326] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 229.542596][T10326] syz.3.2308: attempt to access beyond end of device [ 229.542596][T10326] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 229.544533][T10326] syz.3.2308: attempt to access beyond end of device [ 229.544533][T10326] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 229.546550][T10326] syz.3.2308: attempt to access beyond end of device [ 229.546550][T10326] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 229.877238][T10352] tipc: Enabling of bearer rejected, failed to enable media [ 229.936785][T10347] futex_wake_op: syz.1.2314 tries to shift op by 32; fix this program [ 230.170499][T10372] __nla_validate_parse: 65 callbacks suppressed [ 230.170520][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.173891][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.176285][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.178738][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.180947][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.183451][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.186054][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.188679][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.191151][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.193541][T10372] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2322'. [ 230.257272][T10372] IPv6: ADDRCONF(NETDEV_CHANGE): gre2: link becomes ready [ 230.581045][T10384] tipc: Enabling of bearer rejected, failed to enable media [ 230.937030][ T27] kauditd_printk_skb: 9 callbacks suppressed [ 230.937039][ T27] audit: type=1326 audit(230.930:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 230.941807][ T27] audit: type=1326 audit(230.930:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 230.945469][ T27] audit: type=1326 audit(230.930:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=101 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 230.952706][ T27] audit: type=1326 audit(230.930:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 230.957003][ T27] audit: type=1326 audit(230.930:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 230.960776][ T27] audit: type=1326 audit(230.930:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=119 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 230.964243][ T27] audit: type=1326 audit(230.930:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 230.970220][ T27] audit: type=1326 audit(230.930:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 230.973723][ T27] audit: type=1326 audit(230.930:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=172 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 230.977560][ T27] audit: type=1326 audit(230.930:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10396 comm="syz.1.2333" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 231.014182][T10397] loop1: detected capacity change from 0 to 1024 [ 231.015793][T10397] EXT4-fs: Ignoring removed nobh option [ 231.024075][T10397] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #11: comm syz.1.2333: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512) [ 231.028064][T10397] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.2333: couldn't read orphan inode 11 (err -117) [ 231.030790][T10397] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 231.062220][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 231.145194][T10409] tipc: Enabling of bearer rejected, failed to enable media [ 231.155506][T10409] device syzkaller0 entered promiscuous mode [ 231.569348][T10425] device wg2 entered promiscuous mode [ 231.885947][T10450] overlayfs: missing 'lowerdir' [ 232.411523][T10464] x_tables: ip6_tables: NETMAP.0 target: invalid size 40 (kernel) != (user) 0 [ 232.921414][T10492] loop1: detected capacity change from 0 to 128 [ 233.156390][T10492] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 234.554308][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 235.171301][T10524] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 235.392660][T10533] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 235.394292][T10533] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 235.689821][T10541] __nla_validate_parse: 79 callbacks suppressed [ 235.689831][T10541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2389'. [ 235.719542][T10544] device syzkaller0 entered promiscuous mode [ 236.904909][T10570] loop3: detected capacity change from 0 to 512 [ 236.919165][T10570] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 236.929087][T10570] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 236.940537][T10570] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2819: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 236.942955][T10570] EXT4-fs (loop3): 1 truncate cleaned up [ 236.943795][T10570] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 236.966100][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 237.316606][T10578] overlayfs: missing 'lowerdir' [ 238.304090][T10597] loop3: detected capacity change from 0 to 512 [ 239.523740][T10597] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 239.670788][ T4320] EXT4-fs (loop3): unmounting filesystem. [ 239.751908][T10618] fuse: Invalid rootmode [ 239.841144][T10613] loop1: detected capacity change from 0 to 40427 [ 239.843757][T10613] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 239.844864][T10613] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 239.850188][T10613] F2FS-fs (loop1): invalid crc value [ 239.852342][T10613] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 239.864427][T10613] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 239.865771][T10613] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 239.979125][T10613] bio_check_eod: 11569 callbacks suppressed [ 239.979139][T10613] syz.1.2414: attempt to access beyond end of device [ 239.979139][T10613] loop1: rw=2049, sector=53248, nr_sectors = 2048 limit=40427 [ 239.989671][T10613] syz.1.2414: attempt to access beyond end of device [ 239.989671][T10613] loop1: rw=2049, sector=55296, nr_sectors = 2048 limit=40427 [ 240.005794][T10613] syz.1.2414: attempt to access beyond end of device [ 240.005794][T10613] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 240.038028][T10613] syz.1.2414: attempt to access beyond end of device [ 240.038028][T10613] loop1: rw=2049, sector=57344, nr_sectors = 6400 limit=40427 [ 240.071870][T10613] syz.1.2414: attempt to access beyond end of device [ 240.071870][T10613] loop1: rw=524288, sector=53248, nr_sectors = 256 limit=40427 [ 240.074794][T10613] syz.1.2414: attempt to access beyond end of device [ 240.074794][T10613] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 240.077573][T10613] syz.1.2414: attempt to access beyond end of device [ 240.077573][T10613] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 240.079701][T10613] syz.1.2414: attempt to access beyond end of device [ 240.079701][T10613] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 240.081780][T10613] syz.1.2414: attempt to access beyond end of device [ 240.081780][T10613] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 240.084194][T10613] syz.1.2414: attempt to access beyond end of device [ 240.084194][T10613] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 240.746740][T10642] xt_hashlimit: max too large, truncated to 1048576 [ 241.133054][T10647] fuse: Invalid rootmode [ 242.745878][T10674] fuse: Invalid rootmode [ 242.985221][T10686] loop1: detected capacity change from 0 to 256 [ 244.571977][T10705] fuse: Bad value for 'rootmode' [ 244.670323][T10710] tmpfs: Unknown parameter 'nr_blo' [ 244.929798][T10719] loop3: detected capacity change from 0 to 256 [ 245.121815][T10718] overlayfs: missing 'workdir' [ 245.971537][T10722] device syzkaller0 entered promiscuous mode [ 246.099006][T10727] capability: warning: `syz.2.2456' uses deprecated v2 capabilities in a way that may be insecure [ 246.638907][T10750] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2464'. [ 247.614411][T10755] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 247.821476][T10755] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.822945][T10755] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.824353][T10755] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.825778][T10755] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.057924][T10786] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2474'. [ 249.246490][T10801] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 249.249084][T10801] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 250.153539][T10817] fuse: Unknown parameter 'use00000000000000000000' [ 250.154505][T10818] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2485'. [ 252.029160][T10847] fuse: Unknown parameter 'use00000000000000000000' [ 252.506470][T10857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2500'. [ 252.746011][T10871] fuse: Unknown parameter 'use00000000000000000000' [ 254.765670][T10898] fuse: Unknown parameter 'user_i00000000000000000000' [ 254.795877][T10900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 255.108817][T10911] device syzkaller0 entered promiscuous mode [ 256.203243][T10920] overlayfs: failed to resolve './file0': -2 [ 256.535781][T10922] fuse: Unknown parameter 'user_i00000000000000000000' [ 256.671029][T10926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.065829][T10932] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 258.070379][T10947] fuse: Unknown parameter 'user_i00000000000000000000' [ 258.998830][T10957] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2537'. [ 267.315542][T10961] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 267.317198][T10961] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 267.509210][T10976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 267.511497][T10976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 268.700653][T10987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2546'. [ 268.883525][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2547'. [ 270.038266][T11012] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2555'. [ 270.707214][T11022] loop1: detected capacity change from 0 to 512 [ 270.919054][T11022] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 272.289050][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 273.384152][T11048] ªªªªªª: renamed from vlan0 [ 273.425029][T11052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2566'. [ 273.668703][T11059] netlink: 'syz.3.2568': attribute type 4 has an invalid length. [ 273.670029][T11059] netlink: 17 bytes leftover after parsing attributes in process `syz.3.2568'. [ 275.229781][T11082] loop1: detected capacity change from 0 to 256 [ 275.232271][T11082] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 277.169580][T11095] overlayfs: failed to clone upperpath [ 277.231143][ T27] kauditd_printk_skb: 36 callbacks suppressed [ 277.231158][ T27] audit: type=1326 audit(279.212:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5b3a8 code=0x7ffc0000 [ 277.235886][ T27] audit: type=1326 audit(279.212:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5b3a8 code=0x7ffc0000 [ 277.294133][T11110] loop1: detected capacity change from 0 to 256 [ 278.042803][ T27] audit: type=1326 audit(279.212:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=220 compat=0 ip=0xffff7eb5b3a8 code=0x7ffc0000 [ 278.050990][ T27] audit: type=1326 audit(279.222:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5b3a8 code=0x7ffc0000 [ 278.054407][ T27] audit: type=1326 audit(279.222:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=271 compat=0 ip=0xffff7eb5b3a8 code=0x7ffc0000 [ 278.069528][ T27] audit: type=1326 audit(279.222:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11107 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff7eb5b3a8 code=0x7ffc0000 [ 278.078855][ T27] audit: type=1326 audit(280.052:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=115 compat=0 ip=0xffff7eb85ac8 code=0x7ffc0000 [ 278.184538][ T27] audit: type=1326 audit(280.162:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11111 comm="syz.2.2589" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7fc00000 [ 278.223485][ T27] audit: type=1326 audit(280.202:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11109 comm="syz.3.2588" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=93 compat=0 ip=0xffff7eb5b3a8 code=0x7ffc0000 [ 278.538343][T11129] loop1: detected capacity change from 0 to 40427 [ 278.540606][T11129] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 278.541567][T11129] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 278.544333][T11129] F2FS-fs (loop1): invalid crc value [ 278.551092][T11129] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 278.572226][T11129] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 278.573536][T11129] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 278.651658][T11129] bio_check_eod: 24581 callbacks suppressed [ 278.651673][T11129] syz.1.2596: attempt to access beyond end of device [ 278.651673][T11129] loop1: rw=2049, sector=53248, nr_sectors = 2048 limit=40427 [ 278.663116][T11129] syz.1.2596: attempt to access beyond end of device [ 278.663116][T11129] loop1: rw=2049, sector=55296, nr_sectors = 2048 limit=40427 [ 278.675991][T11129] syz.1.2596: attempt to access beyond end of device [ 278.675991][T11129] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 278.684898][T11129] syz.1.2596: attempt to access beyond end of device [ 278.684898][T11129] loop1: rw=2049, sector=57344, nr_sectors = 1848 limit=40427 [ 278.707989][T11128] syz.1.2596: attempt to access beyond end of device [ 278.707989][T11128] loop1: rw=524288, sector=53248, nr_sectors = 256 limit=40427 [ 278.710523][T11128] syz.1.2596: attempt to access beyond end of device [ 278.710523][T11128] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 278.712618][T11128] syz.1.2596: attempt to access beyond end of device [ 278.712618][T11128] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 278.714900][T11128] syz.1.2596: attempt to access beyond end of device [ 278.714900][T11128] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 278.717134][T11128] syz.1.2596: attempt to access beyond end of device [ 278.717134][T11128] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 278.719441][T11128] syz.1.2596: attempt to access beyond end of device [ 278.719441][T11128] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 279.491100][T11148] overlayfs: failed to clone upperpath [ 279.975763][T11158] loop1: detected capacity change from 0 to 40427 [ 279.981772][T11158] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 279.983124][T11158] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 279.985199][T11158] F2FS-fs (loop1): invalid crc value [ 279.992229][T11158] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 280.006692][T11158] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 280.007886][T11158] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 280.119160][T11158] overlayfs: failed to resolve './bus': -2 [ 280.643294][T11174] overlayfs: failed to clone upperpath [ 281.329343][T11189] overlayfs: failed to clone upperpath [ 281.423090][T11194] overlayfs: filesystem on './file0' not supported as upperdir [ 281.572871][T11206] loop1: detected capacity change from 0 to 128 [ 281.992600][T11206] loop1: detected capacity change from 0 to 40427 [ 282.001414][T11206] F2FS-fs (loop1): Unrecognized mount option "whint_mode=fs-based" or missing value [ 282.127630][T11211] overlayfs: failed to clone upperpath [ 282.427623][T11219] loop1: detected capacity change from 0 to 4096 [ 282.431835][T11219] EXT4-fs (loop1): Test dummy encryption mode enabled [ 282.433891][T11219] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 282.435405][T11219] System zones: 0-5 [ 282.439122][T11219] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 282.459808][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 282.813244][T11229] overlayfs: filesystem on './file0' not supported as upperdir [ 283.019000][T11233] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 283.020609][T11233] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 283.453323][T11242] IPv6: NLM_F_CREATE should be specified when creating new route [ 283.978097][T11250] CUSE: unknown device info "]" [ 283.979035][T11250] CUSE: unknown device info "" [ 283.979810][T11250] CUSE: unknown device info "&" [ 283.980543][T11250] CUSE: unknown device info "" [ 283.981304][T11250] CUSE: DEVNAME unspecified [ 283.993144][T11252] fuse: Unknown parameter 'fd0x0000000000000003' [ 284.034023][T11259] sch_fq: defrate 6 ignored. [ 284.094602][T11261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2642'. [ 284.323860][T11270] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 284.325377][T11270] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 284.560045][T11269] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 3 [ 284.561704][T11269] FAT-fs (loop3): unable to read boot sector [ 285.144435][T11275] loop1: detected capacity change from 0 to 40427 [ 285.158651][T11275] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 285.159747][T11275] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 285.161709][T11275] F2FS-fs (loop1): invalid crc value [ 285.199498][T11275] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 285.212628][T11275] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 285.213848][T11275] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 285.634743][T11275] bio_check_eod: 36 callbacks suppressed [ 285.634758][T11275] syz.1.2646: attempt to access beyond end of device [ 285.634758][T11275] loop1: rw=2049, sector=53248, nr_sectors = 4096 limit=40427 [ 285.650839][T11275] syz.1.2646: attempt to access beyond end of device [ 285.650839][T11275] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 285.659384][T11275] syz.1.2646: attempt to access beyond end of device [ 285.659384][T11275] loop1: rw=2049, sector=57344, nr_sectors = 1416 limit=40427 [ 285.681872][T11275] syz.1.2646: attempt to access beyond end of device [ 285.681872][T11275] loop1: rw=524288, sector=53248, nr_sectors = 256 limit=40427 [ 285.684211][T11275] syz.1.2646: attempt to access beyond end of device [ 285.684211][T11275] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 285.686446][T11275] syz.1.2646: attempt to access beyond end of device [ 285.686446][T11275] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 285.688571][T11275] syz.1.2646: attempt to access beyond end of device [ 285.688571][T11275] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 285.690766][T11275] syz.1.2646: attempt to access beyond end of device [ 285.690766][T11275] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 285.692954][T11275] syz.1.2646: attempt to access beyond end of device [ 285.692954][T11275] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 285.695137][T11275] syz.1.2646: attempt to access beyond end of device [ 285.695137][T11275] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 286.499948][T11306] overlayfs: failed to clone lowerpath [ 287.017805][T11309] CUSE: unknown device info "o" [ 287.018721][T11309] CUSE: unknown device info "" [ 287.019390][T11309] CUSE: unknown device info "&" [ 287.020153][T11309] CUSE: unknown device info "" [ 287.020931][T11309] CUSE: DEVNAME unspecified [ 287.449294][T11318] loop1: detected capacity change from 0 to 40427 [ 287.458352][T11318] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 287.459533][T11318] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 287.465457][T11318] F2FS-fs (loop1): invalid crc value [ 287.477303][T11318] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 287.499266][T11318] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 287.500481][T11318] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 287.585915][T11318] overlayfs: failed to resolve './bus': -2 [ 287.763998][T11327] loop1: detected capacity change from 0 to 40427 [ 287.768549][T11327] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 287.769613][T11327] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 287.778815][T11327] F2FS-fs (loop1): invalid crc value [ 287.782729][T11327] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 287.817449][T11327] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 287.818700][T11327] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 288.021697][T11349] overlayfs: failed to clone upperpath [ 288.274498][T11348] overlayfs: failed to clone upperpath [ 288.967474][T11362] overlayfs: failed to resolve './file0': -2 [ 290.341162][ T27] audit: type=1326 audit(292.312:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 290.358109][ T27] audit: type=1326 audit(292.312:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 290.377589][ T27] audit: type=1326 audit(292.322:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=114 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 290.440473][ T27] audit: type=1326 audit(292.322:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 290.494021][ T27] audit: type=1326 audit(292.322:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 290.547754][ T27] audit: type=1326 audit(292.322:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 290.557640][ T27] audit: type=1326 audit(292.322:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 290.561093][ T27] audit: type=1326 audit(292.322:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11373 comm="syz.2.2678" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 291.200678][T11386] loop1: detected capacity change from 0 to 40427 [ 291.211166][T11386] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 291.212256][T11386] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 291.547061][T11386] F2FS-fs (loop1): invalid crc value [ 291.564536][T11386] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 291.595773][T11386] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 291.597673][T11386] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 291.682601][T11400] bio_check_eod: 31194 callbacks suppressed [ 291.682616][T11400] syz.1.2680: attempt to access beyond end of device [ 291.682616][T11400] loop1: rw=2049, sector=53248, nr_sectors = 2048 limit=40427 [ 291.692650][T11400] syz.1.2680: attempt to access beyond end of device [ 291.692650][T11400] loop1: rw=2049, sector=55296, nr_sectors = 2048 limit=40427 [ 292.005721][T11400] syz.1.2680: attempt to access beyond end of device [ 292.005721][T11400] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 292.051528][T11400] syz.1.2680: attempt to access beyond end of device [ 292.051528][T11400] loop1: rw=2049, sector=57344, nr_sectors = 6184 limit=40427 [ 292.055781][T11386] syz.1.2680: attempt to access beyond end of device [ 292.055781][T11386] loop1: rw=524288, sector=53248, nr_sectors = 256 limit=40427 [ 292.059141][T11386] syz.1.2680: attempt to access beyond end of device [ 292.059141][T11386] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 292.061564][T11386] syz.1.2680: attempt to access beyond end of device [ 292.061564][T11386] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 292.063664][T11386] syz.1.2680: attempt to access beyond end of device [ 292.063664][T11386] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 292.067315][T11386] syz.1.2680: attempt to access beyond end of device [ 292.067315][T11386] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 292.069667][T11386] syz.1.2680: attempt to access beyond end of device [ 292.069667][T11386] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 294.197576][T11432] tipc: Enabling of bearer rejected, failed to enable media [ 294.582346][T11442] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2697'. [ 296.225037][T11466] tipc: Enabled bearer , priority 0 [ 296.228436][T11466] device syzkaller0 entered promiscuous mode [ 296.234048][T11466] tipc: Resetting bearer [ 296.241463][T11465] tipc: Resetting bearer [ 296.309384][T11465] tipc: Disabling bearer [ 296.358509][T11472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2707'. [ 296.874396][T11496] tipc: Enabling of bearer rejected, failed to enable media [ 296.906189][T11498] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2718'. [ 297.507483][T11522] loop1: detected capacity change from 0 to 512 [ 297.831511][T11522] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 298.642119][ T4319] EXT4-fs (loop1): unmounting filesystem. [ 298.800590][T11530] tipc: Enabled bearer , priority 0 [ 298.802182][T11530] device syzkaller0 entered promiscuous mode [ 298.816785][T11530] tipc: Resetting bearer [ 298.818957][T11529] tipc: Resetting bearer [ 298.889674][T11529] tipc: Disabling bearer [ 299.118422][ T27] audit: type=1326 audit(301.102:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 299.121759][ T27] audit: type=1326 audit(301.102:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=43 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 299.124940][ T27] audit: type=1326 audit(301.102:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11535 comm="syz.1.2729" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9795b3a8 code=0x7ffc0000 [ 299.162390][T11538] binder_user_error: 4 callbacks suppressed [ 299.162402][T11538] binder: 11537:11538 tried to acquire reference to desc 0, got 1 instead [ 299.165730][ T3430] binder_debug: 8 callbacks suppressed [ 299.165738][ T3430] binder: release 11537:11538 transaction 140 out, still active [ 299.167897][ T3430] binder: undelivered TRANSACTION_COMPLETE [ 299.182540][ T5604] binder: send failed reply for transaction 140, target dead [ 299.717152][T11547] overlayfs: failed to resolve './file0': -2 [ 300.677567][T11551] loop1: detected capacity change from 0 to 40427 [ 300.685966][T11551] F2FS-fs (loop1): Invalid SB checksum offset: 0 [ 300.692156][T11551] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock [ 300.698480][T11551] F2FS-fs (loop1): invalid crc value [ 300.713097][T11551] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437) [ 300.734499][T11551] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0 [ 300.735710][T11551] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 300.911581][T11569] device wg2 entered promiscuous mode [ 300.936521][T11551] bio_check_eod: 6330 callbacks suppressed [ 300.936533][T11551] syz.1.2734: attempt to access beyond end of device [ 300.936533][T11551] loop1: rw=2049, sector=53248, nr_sectors = 2048 limit=40427 [ 300.948608][T11551] syz.1.2734: attempt to access beyond end of device [ 300.948608][T11551] loop1: rw=2049, sector=55296, nr_sectors = 2048 limit=40427 [ 300.962954][T11551] syz.1.2734: attempt to access beyond end of device [ 300.962954][T11551] loop1: rw=2049, sector=49152, nr_sectors = 4096 limit=40427 [ 300.994897][T11551] syz.1.2734: attempt to access beyond end of device [ 300.994897][T11551] loop1: rw=2049, sector=57344, nr_sectors = 10664 limit=40427 [ 301.025798][T11551] syz.1.2734: attempt to access beyond end of device [ 301.025798][T11551] loop1: rw=524288, sector=53248, nr_sectors = 256 limit=40427 [ 301.029907][T11551] syz.1.2734: attempt to access beyond end of device [ 301.029907][T11551] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 301.032318][T11551] syz.1.2734: attempt to access beyond end of device [ 301.032318][T11551] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 301.034682][T11551] syz.1.2734: attempt to access beyond end of device [ 301.034682][T11551] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 301.037161][T11551] syz.1.2734: attempt to access beyond end of device [ 301.037161][T11551] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 301.039391][T11551] syz.1.2734: attempt to access beyond end of device [ 301.039391][T11551] loop1: rw=0, sector=53248, nr_sectors = 8 limit=40427 [ 302.159483][T11596] xt_socket: unknown flags 0x50 [ 303.419566][ T27] audit: type=1326 audit(305.402:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 303.424814][ T27] audit: type=1326 audit(305.402:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 303.433928][ T27] audit: type=1326 audit(305.412:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 303.441332][ T27] audit: type=1326 audit(305.422:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 303.445759][ T27] audit: type=1326 audit(305.422:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 303.450658][ T27] audit: type=1326 audit(305.422:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 303.453913][ T27] audit: type=1326 audit(305.422:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11612 comm="syz.2.2753" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffac35b3a8 code=0x7ffc0000 [ 303.471929][T11615] loop1: detected capacity change from 0 to 256 [ 303.525870][T11615] exfat: Bad value for 'fmask' [ 303.724336][T11624] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2758'. [ 303.859187][T11630] loop1: detected capacity change from 0 to 40427 [ 303.891997][T11630] F2FS-fs (loop1): build fault injection attr: rate: 25, type: 0x3ffff [ 303.893463][T11630] F2FS-fs (loop1): Unrecognized mount option "noioline_dentry" or missing value [ 304.071051][T11630] loop1: detected capacity change from 0 to 40427 [ 304.079368][T11630] F2FS-fs (loop1): invalid crc value [ 304.092280][T11630] F2FS-fs (loop1): Found nat_bits in checkpoint [ 304.100141][T11630] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 307.108355][T11680] device syzkaller0 entered promiscuous mode [ 317.276330][ T28] INFO: task kworker/0:2:112 blocked for more than 143 seconds. [ 317.277595][ T28] Not tainted syzkaller #0 [ 317.278326][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.279765][ T28] task:kworker/0:2 state:D stack:0 pid:112 ppid:2 flags:0x00000008 [ 317.281217][ T28] Workqueue: events rfkill_global_led_trigger_worker [ 317.282224][ T28] Call trace: [ 317.282699][ T28] __switch_to+0x2f4/0x568 [ 317.283363][ T28] __schedule+0xddc/0x1b18 [ 317.284072][ T28] schedule+0xc4/0x170 [ 317.284736][ T28] schedule_preempt_disabled+0x18/0x2c [ 317.285675][ T28] __mutex_lock_common+0xad4/0x1f38 [ 317.288537][ T28] mutex_lock_nested+0x38/0x44 [ 317.289319][ T28] rfkill_global_led_trigger_worker+0x30/0xe4 [ 317.290351][ T28] process_one_work+0x7f4/0x13a8 [ 317.291124][ T28] worker_thread+0x8c8/0xfbc [ 317.291909][ T28] kthread+0x250/0x2d8 [ 317.292518][ T28] ret_from_fork+0x10/0x20 [ 317.293354][ T28] INFO: task syz.0.1773:8826 blocked for more than 143 seconds. [ 317.294587][ T28] Not tainted syzkaller #0 [ 317.295382][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.296797][ T28] task:syz.0.1773 state:D stack:0 pid:8826 ppid:4325 flags:0x00000009 [ 317.298168][ T28] Call trace: [ 317.298691][ T28] __switch_to+0x2f4/0x568 [ 317.299388][ T28] __schedule+0xddc/0x1b18 [ 317.300128][ T28] schedule+0xc4/0x170 [ 317.300764][ T28] schedule_preempt_disabled+0x18/0x2c [ 317.301664][ T28] __mutex_lock_common+0xad4/0x1f38 [ 317.302542][ T28] mutex_lock_nested+0x38/0x44 [ 317.303312][ T28] rfkill_unregister+0xb8/0x208 [ 317.304062][ T28] nfc_unregister_device+0x94/0x288 [ 317.304879][ T28] nci_unregister_device+0x1dc/0x21c [ 317.305618][ T28] virtual_ncidev_close+0x70/0xb0 [ 317.308117][ T28] __fput+0x1bc/0x7c0 [ 317.308754][ T28] ____fput+0x20/0x30 [ 317.309477][ T28] task_work_run+0x1ec/0x270 [ 317.310221][ T28] do_notify_resume+0x2038/0x2b28 [ 317.311009][ T28] el0_svc+0x98/0x138 [ 317.311600][ T28] el0t_64_sync_handler+0x84/0xf0 [ 317.312352][ T28] el0t_64_sync+0x18c/0x190 [ 317.313085][ T28] INFO: task syz.4.1790:8868 blocked for more than 143 seconds. [ 317.314229][ T28] Not tainted syzkaller #0 [ 317.315089][ T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 317.316654][ T28] task:syz.4.1790 state:D stack:0 pid:8868 ppid:4326 flags:0x00000009 [ 317.318198][ T28] Call trace: [ 317.318744][ T28] __switch_to+0x2f4/0x568 [ 317.319482][ T28] __schedule+0xddc/0x1b18 [ 317.320277][ T28] schedule+0xc4/0x170 [ 317.320957][ T28] schedule_preempt_disabled+0x18/0x2c [ 317.321862][ T28] __mutex_lock_common+0xad4/0x1f38 [ 317.322697][ T28] mutex_lock_nested+0x38/0x44 [ 317.323443][ T28] nfc_rfkill_set_block+0x4c/0x2a8 [ 317.324214][ T28] rfkill_set_block+0x18c/0x374 [ 317.325027][ T28] rfkill_fop_write+0x488/0x5a4 [ 317.325814][ T28] vfs_write+0x29c/0x7c4 [ 317.326644][ T28] ksys_write+0x120/0x210 [ 317.327321][ T28] __arm64_sys_write+0x7c/0x90 [ 317.328009][ T28] invoke_syscall+0x98/0x2bc [ 317.328771][ T28] el0_svc_common+0x138/0x258 [ 317.329560][ T28] do_el0_svc+0x58/0x13c [ 317.330263][ T28] el0_svc+0x58/0x138 [ 317.330893][ T28] el0t_64_sync_handler+0x84/0xf0 [ 317.331610][ T28] el0t_64_sync+0x18c/0x190 [ 317.332422][ T28] [ 317.332422][ T28] Showing all locks held in the system: [ 317.333758][ T28] 1 lock held by rcu_tasks_kthre/12: [ 317.334623][ T28] #0: ffff800015297870 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 317.338045][ T28] 1 lock held by rcu_tasks_trace/13: [ 317.338825][ T28] #0: ffff800015298090 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x40/0xbb4 [ 317.340729][ T28] 1 lock held by khungtaskd/28: [ 317.341459][ T28] #0: ffff800015296f00 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0xc/0x44 [ 317.343066][ T28] 3 locks held by kworker/0:2/112: [ 317.343836][ T28] #0: ffff0000c0020938 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 317.345398][ T28] #1: ffff800020497c20 ((work_completion)(&rfkill_global_led_trigger_work)){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 317.348795][ T28] #2: ffff8000179dfa28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_global_led_trigger_worker+0x30/0xe4 [ 317.350717][ T28] 2 locks held by getty/4078: [ 317.351423][ T28] #0: ffff0000d69af098 (&tty->ldisc_sem){++++}-{0:0}, at: ldsem_down_read+0x3c/0x4c [ 317.352821][ T28] #1: ffff80001cea32f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x2ec/0xf9c [ 317.354450][ T28] 3 locks held by kworker/u4:5/4368: [ 317.355305][ T28] #0: ffff0000c0029138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x6b4/0x13a8 [ 317.357311][ T28] #1: ffff800020b77c20 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x6f8/0x13a8 [ 317.359095][ T28] #2: ffff800017731108 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 317.360436][ T28] 2 locks held by syz.0.1773/8826: [ 317.361270][ T28] #0: ffff0000dc4be100 (&dev->mutex){....}-{3:3}, at: nfc_unregister_device+0x68/0x288 [ 317.362861][ T28] #1: ffff8000179dfa28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_unregister+0xb8/0x208 [ 317.364493][ T28] 2 locks held by syz.4.1790/8868: [ 317.365269][ T28] #0: ffff8000179dfa28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_fop_write+0x21c/0x5a4 [ 317.366925][ T28] #1: ffff0000dc4be100 (&dev->mutex){....}-{3:3}, at: nfc_rfkill_set_block+0x4c/0x2a8 [ 317.368410][ T28] 2 locks held by syz-executor/9361: [ 317.369279][ T28] #0: ffff0000dc573118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 317.370973][ T28] #1: ffff8000179dfa28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 317.372542][ T28] 2 locks held by syz-executor/9364: [ 317.373411][ T28] #0: ffff0000dbced918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 317.375009][ T28] #1: ffff8000179dfa28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 317.376698][ T28] 2 locks held by syz-executor/10676: [ 317.377555][ T28] #0: ffff0000dbfa0918 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 317.379190][ T28] #1: ffff8000179dfa28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 317.380899][ T28] 2 locks held by syz-executor/10692: [ 317.381735][ T28] #0: ffff0000d2d32118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 317.383376][ T28] #1: ffff8000179dfa28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 317.384989][ T28] 2 locks held by syz-executor/11618: [ 317.385884][ T28] #0: ffff0000dde5b118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 317.387615][ T28] #1: ffff8000179dfa28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 317.389170][ T28] 2 locks held by syz-executor/11635: [ 317.390057][ T28] #0: ffff0000c3574118 (&data->open_mutex){+.+.}-{3:3}, at: vhci_create_device+0x3c/0x6cc [ 317.391763][ T28] #1: ffff8000179dfa28 (rfkill_global_mutex){+.+.}-{3:3}, at: rfkill_register+0x44/0x77c [ 317.393414][ T28] 1 lock held by syz.1.2773/11679: [ 317.394221][ T28] #0: ffff800017731108 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 317.395701][ T28] 1 lock held by syz.3.2774/11682: [ 317.396641][ T28] #0: ffff800017731108 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_lock+0x20/0x2c [ 317.397985][ T28] 1 lock held by syz.2.2776/11686: [ 317.398839][ T28] #0: ffff800017731108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 317.400454][ T28] 1 lock held by syz.2.2776/11687: [ 317.401295][ T28] #0: ffff800017731108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 317.402984][ T28] 1 lock held by syz.2.2776/11688: [ 317.403816][ T28] #0: ffff800017731108 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6ec/0xce4 [ 317.405245][ T28] [ 317.405579][ T28] ============================================= [ 317.405579][ T28] [ 317.409071][ T28] Kernel panic - not syncing: hung_task: blocked tasks [ 317.410202][ T28] CPU: 1 PID: 28 Comm: khungtaskd Not tainted syzkaller #0 [ 317.411290][ T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 317.413014][ T28] Call trace: [ 317.413568][ T28] dump_backtrace+0x1c8/0x1f4 [ 317.414352][ T28] show_stack+0x2c/0x3c [ 317.415003][ T28] __dump_stack+0x30/0x40 [ 317.415659][ T28] dump_stack_lvl+0xf8/0x160 [ 317.416387][ T28] dump_stack+0x1c/0x5c [ 317.417010][ T28] panic+0x2e0/0x79c [ 317.417559][ T28] hung_task_panic+0x0/0x2c [ 317.418295][ T28] kthread+0x250/0x2d8 [ 317.418997][ T28] ret_from_fork+0x10/0x20 [ 317.419773][ T28] SMP: stopping secondary CPUs [ 317.420609][ T28] Kernel Offset: disabled [ 317.421239][ T28] CPU features: 0x080000,000f0097,a65bfea7 [ 317.422177][ T28] Memory Limit: none [ 317.771883][ T28] Rebooting in 86400 seconds..