last executing test programs: 5m14.837961575s ago: executing program 2 (id=3): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\bo-\x03Q`]o\x8cr\x9d_etl\xf9\xdd\a\xad\\H\xe94\b,H\xbf', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_score_adj\x00') lseek(r0, 0xffffffffffffffff, 0x1) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f0000000640)={0x0, 0xfff, 0x4, {0x9, @win={{0x3ac, 0x5, 0x34565348, 0x6d}, 0x5, 0xd, 0x0, 0x2, 0x0, 0x22}}, 0xfffffffd}) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, 0x0, 0x2, 0xa}}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1, 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000001f40)={0x0, 0x2904c, 0x29, 0x10003, '\x00', [{0x0, 0x5, 0x0, 0xffffffffffffffff}, {0xffffffff, 0x0, 0x9, 0xa}]}) ioctl$VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000500)=@mmap={0x2, 0xe, 0x4, 0x4, 0xfffffffb, {}, {0x0, 0x8, 0x2, 0x0, 0x1, 0x3, "a645a412"}, 0x2, 0x1, {}, 0x9, 0x0, r0}) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x4000006, 0x1, 0x4}) ioctl$vim2m_VIDIOC_CREATE_BUFS(r3, 0xc100565c, &(0x7f0000000340)={0x0, 0x2, 0x4, {0x1, @win={{0x0, 0x3, 0x4}, 0x1, 0x6, 0x0, 0x0, 0x0, 0xb}}}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="640000006bff10edbd91b6a476b0fc6dbee5c9e918e2e77071f1cd4ef82253778c76d91bf254b7adeb", @ANYRES32=r2, @ANYBLOB="31070000000000000000380000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008007300000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000200000"], 0x64}, 0x1, 0x2}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x9, 0x10000, 0x5, 0x7, 0x73e, 0xffffffffffffffff, 0x4, 0xfffffffffffffff8}, &(0x7f0000000180)={0x48, 0x7, 0x1ff, 0x8a9, 0x9, 0x90c5, 0x1, 0x3}, &(0x7f0000000200)={0xb0, 0x80000001, 0x1, 0xffffffffffffffff, 0x9, 0x1, 0x5, 0x7f}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x5]}, 0x8}) 5m14.546818073s ago: executing program 2 (id=9): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000106a053103000000000001090224000100008000090400101c0300010009210000000122f80409058103"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000"], &(0x7f0000000080)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x76, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x11, 0x50}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffff9}, 0x94) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000340)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x9, @empty, 0x4}}}, 0x108) r6 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x60, 0x10, 0x437, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, 0x40c89}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LOCAL={0x14, 0x6, @private1}, @IFLA_GRE_REMOTE={0x14, 0x7, @private0}]}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) sendmsg$nl_route_sched_retired(r5, &(0x7f0000002880)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002840)={&(0x7f0000004a80)=@delchain={0x2178, 0x65, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x9, 0xb}, {0x1, 0xb}, {0xa, 0xc}}, [@f_tcindex={{0xc}, {0x2130, 0x2, [@TCA_TCINDEX_ACT={0x71c, 0x7, [@m_csum={0x118, 0x11, 0x0, 0x0, {{0x9}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x101, 0x8, 0x8001, 0xb}, 0x17}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0xe1f4, 0x5, 0x7fffffff, 0x1000}, 0x54}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x8, 0x1, 0x5, 0x9}, 0x31}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x9, 0x5, 0x0, 0x4}, 0x7b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x5, 0x7, 0x8, 0x6}, 0x11}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xd, 0x7fff, 0x10000000, 0x83b8, 0x3e4a}, 0x5d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x800, 0x8001, 0x3, 0xaf, 0x1}, 0x57}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xbd, 0x5, 0x5, 0x4, 0x8000000}, 0x5e}}]}, {0xc, 0x6, "fa1614fb915d9e68"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_xt={0x1a0, 0x1e, 0x0, 0x0, {{0x7}, {0xc8, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_TARG={0x85, 0x6, {0x40cb, 'raw\x00', 0x0, 0x4, "39b96472f3bda34bf59feee9c469f6d390ec0f6cf675e83333aff71e412b04e62a223d221c142a283e453fc6250847071b784841e333f60b6979cd0d1801529da6b7a986f4a9549f3958c0a5befac5dafe4ce2c6572f9c3364792c"}}, @TCA_IPT_TARG={0x2a, 0x6, {0x1, 'filter\x00', 0x2, 0xe}}]}, {0xb4, 0x6, "91202d360a47f99cf698d59a7d158613a0bfc9aa38299e359b10e895bafb4f4fccadfc1057f49e33cdd39ea6ac03f9308a121d438bc32ea18a71ca409dc2e257eca4938fd0e2bfc372c97532591d3b7f9155536390b9e686dbfac1716b724d7d772dc5b198a1ae46dec151e1326a5f0c297b4d4918ffd479bd980f4c4b8545898e65bf473f303b5bbcba925a3279d4488fb33ff3e33b83493eb75347cc4666c19390fd5feb82464841a247e6098c9479"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_ctinfo={0x184, 0x2, 0x0, 0x0, {{0xb}, {0x6c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x1, 0x3, 0x7, 0x0, 0x9e76}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x6}, @TCA_CTINFO_ACT={0x18, 0x3, {0x781a79fb, 0x0, 0x2, 0x8000000, 0xb1b}}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x2, 0x6, 0xe6e}, @TCA_CTINFO_ZONE={0x6, 0x4, 0xff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x100, 0x1ff, 0x8, 0x9, 0x8}}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3ff}]}, {0xed, 0x6, "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"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_mirred={0xc4, 0x13, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4, 0x4, 0x1, 0x9}, 0x3}}]}, {0x77, 0x6, "781aacf142ca82a337a8d271da55759560eaac1bdbf17277a467ab868392e6f1a7497b95f8ff63398055708067af6596804d334d856d8491c44dae60d44426926eb1085bc4afd676419b3efb48e41f8c147317964a1c5f511c59b06ccae15d4a0db4e2cae77295574d706f186e90e2db9fb082"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_gact={0x140, 0xd, 0x0, 0x0, {{0x9}, {0x58, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x6, 0x10001, 0x1, 0x7, 0x8fb}}, @TCA_GACT_PARMS={0x18, 0x2, {0xfffffff6, 0x9, 0x5, 0xc590, 0x8969}}, @TCA_GACT_PARMS={0x18, 0x2, {0x10000, 0x3ff, 0x10000000, 0x7, 0x6}}, @TCA_GACT_PARMS={0x0, 0x2, {0x200, 0x1, 0x0, 0x8000, 0xd4}}]}, {0xbd, 0x6, "ceeb3e458e56d07a94e8a2a4f91e818e756fe1822cce1b1d289fd7a788e7d53fc81381fca2c0040617261512347bf08f93ed613665439d83676c1a69071cecc4fbcf2ffd2a77de6dd79e62b49d8256932b53e80fe92c946096a8dc695c620d90e04dc9b573545adbbcd3a23ae263e8e6dfc0c0c0371c0bf61b4c5a08030f9ced76cd7a2924216fe55fc8e1b3554ef9fc200d404d01b70547178feaa587fc76fa0c442c914550f146f99b1ffe133be0db458c781cb82771d947"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_mpls={0xd8, 0x5, 0x0, 0x0, {{0x9}, {0x2c, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0xec14b}, @TCA_MPLS_LABEL={0x8, 0x5, 0xdee75}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8035}, @TCA_MPLS_TC={0x5, 0x6, 0x4}]}, {0x81, 0x6, "f9c91c6e13fc1d5931736d98a89938beb9f1885b0d51b4fff2551de13775ba70360833d5ae7ff08ec532eebda1b0ef5d9e5145c55d1424f948c810d958052edd16bd3adab733a72959960c15e9b1d38ef88fb25f36c087a761295833ff2f1249bb24e6522fe82567baca22d1499e4e98365aec073d983906307b2733d0"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_FALL_THROUGH={0x8}, @TCA_TCINDEX_POLICE={0x41c, 0x6, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xd}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x7}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1, 0x9, 0xfffffff9, 0x10001, 0x7c, 0x6, 0x8, 0x53e, 0x0, 0x8, 0x8, 0x4, 0x10001, 0x1, 0xadda, 0x7fff, 0x9, 0x27, 0x7, 0x7fffffff, 0x2, 0x1, 0x0, 0x7, 0xe, 0x7, 0x0, 0x8, 0x8, 0x5000, 0xb0b, 0x64fb, 0x100, 0x7f, 0xae, 0x1, 0x4, 0x1, 0x80000001, 0x120000, 0x5, 0x1, 0x7, 0x4, 0x7, 0x4, 0xcf, 0x7, 0x4, 0xe7, 0x8, 0x7ff, 0x4299, 0x5, 0xb9, 0xffffeac5, 0x1, 0x0, 0xff, 0xc0b, 0xa, 0x2, 0x3, 0x9, 0x8, 0x7c5, 0x2, 0x1, 0x2, 0x1, 0xff, 0x0, 0x9, 0x8, 0x5, 0x80000001, 0x1, 0x0, 0x9, 0xfffffff9, 0x10, 0x0, 0x1, 0x2, 0x101, 0xc8, 0x4, 0x90, 0x3, 0x1, 0x1, 0x0, 0x9, 0x2, 0x2, 0x1b, 0x8, 0x10001, 0x7, 0xfffffffc, 0x2, 0x10001, 0x1, 0xcce, 0xf8e3, 0x40, 0x1, 0x8, 0x80000001, 0xd1d6, 0x1000, 0x8, 0xffff, 0x4d, 0x8, 0xa, 0x53e, 0x8, 0xf, 0x3ff, 0x7, 0x3, 0x9, 0x6, 0x6, 0x401, 0x0, 0x5, 0x80000001, 0x7, 0x8, 0x66, 0x3, 0x1, 0x81, 0x40, 0x6, 0xfffffd37, 0x100, 0x5, 0x0, 0xfffffffe, 0xff, 0x9, 0xff, 0x2, 0x3, 0xa, 0x80, 0xffffffa0, 0x7, 0x5, 0x4, 0x81, 0x7a, 0x6b7dacfc, 0x5, 0x1, 0xa, 0xa2f1, 0x1000, 0x2, 0x8c, 0x0, 0x1, 0x8, 0x8, 0xc2, 0x80, 0x9, 0x7, 0x2230f96, 0x8d28, 0x80200000, 0x6, 0x1, 0x1ff, 0x9, 0xb, 0xffff237e, 0x6, 0x0, 0x2, 0x80000000, 0xfffffffa, 0x3, 0x9, 0x1ff, 0xffffffff, 0x9aae, 0xc5b, 0x8, 0x5, 0x0, 0x6, 0x80000000, 0xfffffffc, 0xc, 0x1, 0x7fff, 0x4, 0x0, 0x8, 0x7, 0x9, 0xffffffff, 0x0, 0x6, 0x0, 0xcf02, 0x7f, 0x8, 0x3fe00000, 0x5, 0x6, 0x43d8, 0x59, 0x40, 0x5, 0x6, 0x3, 0xfffffe00, 0x5000000, 0x2, 0x9, 0x7fffffff, 0xe6, 0x6, 0xffff, 0x0, 0x4, 0xfffffffc, 0x6, 0x1000, 0x4, 0x8, 0x10000, 0x4, 0x0, 0x5981, 0x53, 0x78bc, 0x10, 0x9, 0x9d0, 0x0, 0x1c, 0x0, 0x1, 0x9, 0xffff, 0xe, 0x81, 0x5, 0x1db]}]}, @TCA_TCINDEX_POLICE={0x1474, 0x6, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x26, 0x6, 0x7fffffff, 0x1, 0xfffffff9, 0x8, 0x1, 0xc9, 0x3, 0x2, 0x2, 0x308408f7, 0x6, 0x8, 0x3, 0x1, 0x100, 0xd5, 0x3, 0x2, 0x9, 0x0, 0x8, 0x4971, 0x80, 0x6, 0x5, 0x7, 0x8, 0x2, 0x9, 0x8, 0x2c, 0xff800000, 0x1ff, 0x8, 0x774, 0x4, 0x5, 0x43d6, 0x8, 0x3be, 0x9, 0xa, 0x3, 0x7fff, 0x442, 0x19a, 0x6d95, 0x2, 0x2, 0xfffffff8, 0x3, 0x10, 0xffffffff, 0x1, 0x2, 0x8b, 0xfffffe00, 0x9bf, 0x2, 0x20000, 0x1, 0xfff, 0x7, 0x4, 0x1, 0x0, 0x18000000, 0xb, 0x80000001, 0xa9a5, 0x200, 0x9452, 0x1, 0x5, 0x401, 0xf1de, 0x0, 0x3, 0x0, 0x2, 0x6, 0x6, 0xc1, 0x6, 0x13a, 0x4, 0x3, 0x6, 0x6, 0x0, 0x80000000, 0x80000000, 0x13, 0x4, 0x3, 0x8, 0x1000, 0x200, 0x80000000, 0x462f, 0x5, 0x4, 0x19af, 0x7ff, 0x1, 0x0, 0x2c52, 0x10, 0x6, 0x3, 0x8, 0xc, 0x3, 0xd, 0x1000, 0x10000, 0xd344, 0x0, 0x0, 0x6, 0x6, 0x6, 0x8b, 0x8, 0x7, 0x4, 0x1, 0x3ff, 0x6, 0x10004, 0x80, 0x6, 0x4, 0x6dba1f48, 0x6, 0x5, 0xfa4, 0x5, 0xfff, 0x7554, 0x40, 0x0, 0x100, 0x82d0, 0x0, 0x3, 0x7, 0x9, 0x9, 0x1, 0x8, 0xe942, 0x6, 0xfffffc00, 0xff, 0x2, 0x9, 0x3, 0x1ff, 0x40, 0x3, 0x4d7, 0xfffffffa, 0x7, 0xfff, 0xa6, 0x2, 0xa9, 0x2, 0xecb, 0x9, 0x7fffffff, 0x408, 0x10, 0x4, 0x0, 0x825, 0x1, 0x2, 0x6, 0x4, 0x1, 0x1, 0x1, 0xc24, 0x4, 0x1, 0x2e09, 0x5, 0x4, 0x4, 0x401, 0x3, 0xae, 0x1, 0x4, 0x3ff, 0x17af3e96, 0x9, 0x401, 0xfffffff8, 0x3, 0x9a, 0x1, 0x7, 0xfffffffd, 0x8, 0x7, 0x9, 0x3ff, 0x8, 0x80000001, 0x6, 0x401, 0x8, 0x16ac, 0x2, 0x400, 0x3, 0x58, 0x1, 0x9, 0x3, 0x9, 0x6, 0x1020, 0x7, 0x7f, 0x8, 0xd, 0x4, 0x457, 0x101, 0x100, 0x6, 0x9, 0x406, 0x10000, 0x10fe, 0x9, 0x3, 0x4, 0x6, 0xfff, 0x4, 0xff, 0x8001, 0x9, 0x5, 0x9, 0x7, 0xcaf9, 0x80000000]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x401, 0x18d9, 0xdfa, 0x2, 0xffffff6c, 0x7, 0xe3, 0x5, 0x9, 0x4, 0x87, 0x7ff, 0x1, 0x4, 0x1000, 0x1ff, 0x7fffffff, 0x0, 0x3, 0x5294, 0xff, 0x3, 0x9, 0x0, 0x64, 0x80000000, 0x4, 0x3, 0x8, 0x0, 0x200, 0x4, 0x9, 0x7, 0x7c, 0x8, 0x6, 0x2, 0x9, 0x2, 0x4, 0x400, 0xffffffff, 0x3ff, 0xb7a7, 0x10001, 0x6, 0x812, 0x2, 0x913, 0x9ad, 0x9, 0x3, 0xf, 0x5, 0x10, 0x4, 0x8, 0xb, 0x27, 0x7, 0x8557, 0xfa6, 0x45, 0x1ff, 0x8, 0x10, 0x8000, 0x401, 0x5, 0x4, 0x9a, 0x3bb3, 0x2, 0x80, 0xffffffff, 0x8, 0x1, 0x3, 0x3dce, 0x10, 0xfff, 0x7, 0x2, 0x4a4c, 0x8, 0x4, 0x2, 0x5, 0x1, 0x76, 0x4, 0x3, 0x60, 0x5, 0x0, 0x1, 0x1, 0x8, 0x3, 0x6, 0x2, 0x1, 0xd52, 0x4c6, 0x8, 0x7, 0x5, 0x3, 0x5, 0x9861, 0xb, 0x8000, 0x4, 0x3, 0x4, 0x5, 0x8, 0x4, 0x612, 0x6, 0x1, 0x52, 0x0, 0x3, 0x4, 0x2, 0x6, 0x0, 0x1, 0x8, 0xfff, 0x4, 0xfff, 0x80000000, 0x9c, 0x4, 0xa, 0x35, 0xbc0, 0x3, 0x1, 0x7, 0x6, 0x7, 0xf7c6, 0x0, 0x5f7, 0x1, 0xb8b2d11, 0x0, 0x1, 0x5, 0x3, 0x8, 0x3, 0xfff, 0xc000, 0x1, 0x7f, 0xffff, 0xc1e1, 0xffff, 0x9, 0x5, 0x8, 0xe512, 0x6, 0x6f71, 0x80000000, 0x3, 0xc, 0x5, 0x81, 0x5000, 0x3, 0x10000, 0xfff, 0xfffffff9, 0x9, 0xfffffbff, 0x0, 0x5, 0xfffffffc, 0x4, 0x3, 0x1, 0x40, 0x100, 0x1, 0x7, 0x400000, 0x1, 0x6, 0x1, 0xfffffff7, 0x9, 0x6, 0x2, 0x5, 0xf1, 0x7, 0x9, 0x0, 0x8, 0x3, 0x1, 0x5, 0x36, 0xe644, 0x4, 0x0, 0x8, 0x8, 0x9, 0x4, 0x4, 0x1, 0x0, 0x4, 0xe, 0x7, 0x9, 0x9, 0x4, 0xafe, 0xab3, 0x3, 0x1, 0x1, 0x2, 0x3, 0xb9, 0x5, 0xe, 0x9, 0x3, 0x4f39, 0x3, 0x4, 0xfffffffe, 0x7, 0x0, 0xa, 0x7, 0x100, 0x5, 0x7, 0x7, 0x0, 0x6, 0x2, 0x7ff, 0x9, 0x7, 0xffffffff]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0x0, 0x2, 0x0, 0x3, {0x0, 0x1, 0x40, 0x409, 0xa, 0xe58}, {0x5, 0x2, 0x4, 0x2, 0x1, 0xffffffff}, 0x2, 0x5, 0x4}}, @TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x9}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x4a}, @TCA_POLICE_RATE={0x404, 0x2, [0xd23, 0x7, 0x8, 0xfffffffe, 0x967c, 0xfffffc01, 0x1ff, 0x1, 0x7, 0x6, 0x6, 0x1, 0xfe6, 0xffffffff, 0x2, 0x80000000, 0x3, 0x84, 0x100, 0x0, 0x9, 0x10001, 0x0, 0xfff, 0x1, 0x8, 0x7, 0x632, 0x1, 0x4, 0x5, 0x80, 0x4b9, 0x7, 0x7, 0xff, 0x8000000, 0x605, 0x7, 0x6c, 0x1, 0x6, 0x6, 0x3, 0x1, 0x9, 0x8001, 0x1, 0x1, 0xfdf, 0x0, 0xd4de, 0xc, 0xf, 0x200, 0x80000001, 0xaa4, 0x5, 0x0, 0x2, 0x6, 0x6, 0x5, 0x6, 0x7, 0x8000, 0x6, 0x0, 0x2d, 0x401, 0x6, 0x3, 0x800, 0x0, 0x2, 0x8, 0x3ff, 0xfffffff8, 0x1, 0x1, 0x1000, 0x4, 0xffffffff, 0x1, 0x813b, 0x100, 0x1000, 0x1, 0x8, 0xff, 0x5e17, 0xe4000000, 0x0, 0x6, 0x80000000, 0x1, 0xa1a6, 0x6, 0x9, 0x8, 0x5, 0x81, 0x3, 0x1000, 0x3, 0x3, 0x4d, 0x3ff, 0xfffff95e, 0x0, 0x5521, 0x3, 0x7, 0x9, 0x4, 0x6af, 0x5e400000, 0x4, 0xfffff001, 0xfffffff8, 0x2, 0x6, 0x1, 0x800, 0x8, 0x5, 0x8, 0x6, 0x4, 0x6, 0xff, 0x5, 0x3, 0xa, 0xe72, 0x9abc5a4, 0xb, 0x2, 0xc, 0xc1cb, 0xff, 0x5, 0x80000000, 0x8, 0x80, 0x4, 0x6, 0x4000, 0x3, 0x4, 0x6, 0x8, 0xf19, 0x4, 0x0, 0xaa, 0x6, 0x4, 0xffffffff, 0x7, 0x8, 0x4, 0x0, 0x6, 0x0, 0x6, 0x0, 0x7, 0x7, 0x23, 0x6, 0x6, 0x8, 0x0, 0x4, 0x6, 0x7ff, 0x2, 0x9a6, 0x3, 0x800, 0x0, 0x6, 0xce6d, 0x5c4, 0x3fe000, 0x4, 0xfffffffa, 0x9, 0x9, 0x8160, 0x4, 0x8, 0x4, 0xb, 0x7, 0xd, 0x9, 0xc70, 0x3, 0x8, 0x15, 0x1, 0x1200, 0xb5b5, 0x3, 0x5, 0x6, 0x3, 0x2, 0x8, 0x9, 0x2, 0x6, 0x7, 0x1, 0xca, 0xa5, 0x401, 0x8, 0x3, 0x2, 0x1, 0x3, 0x1000, 0x7, 0x5, 0x5, 0x8000, 0x1, 0xc, 0x1, 0x6, 0x9, 0x5, 0x8, 0x7, 0x6, 0x4, 0x9, 0x7fffffff, 0x9, 0xff, 0x8, 0x4999, 0x7, 0x4, 0x8, 0x6, 0x5, 0x8, 0xa, 0x9, 0xffffae98, 0x1, 0x2]}, @TCA_POLICE_RATE={0x404, 0x2, [0xb, 0xfffffc00, 0x4, 0x9, 0x80000000, 0x3ff, 0xc6, 0x101, 0x2, 0xfff, 0x7, 0x34, 0x6, 0x5, 0x6, 0x8, 0x7, 0xa, 0x7fff, 0x80, 0x81, 0x6e23, 0x5, 0x7fff, 0x8, 0x1, 0x5, 0x6, 0x400, 0x3, 0xdf3, 0x7, 0xffffffff, 0x761, 0x9e, 0x4, 0x0, 0x95b, 0x7, 0x6ac, 0x8, 0x28a, 0x8, 0x4d7, 0x4, 0x1, 0x0, 0x1, 0x7, 0xba83, 0x233, 0x7, 0x9, 0x80, 0x8, 0xc8480000, 0x2, 0x3451, 0x8, 0x10001, 0x2400000, 0x7, 0xf, 0x57f0, 0x754, 0x200, 0x910, 0x6, 0x7, 0x7, 0xc, 0x5, 0x0, 0xd73, 0x8, 0x7, 0x0, 0x3, 0x2, 0x4, 0xfffffffd, 0x101, 0x3, 0x7, 0x341b779a, 0x80, 0x1, 0x2, 0xd105, 0x9af, 0xef1, 0xdf5, 0x9, 0x7, 0x53, 0x200000, 0x8, 0x576c, 0x401, 0x4, 0x86, 0xfffffff9, 0x80, 0x1, 0x5, 0x220, 0x68b2, 0xd82, 0x800, 0xffffffff, 0x9, 0xb, 0xffffff71, 0x200, 0xffffff7d, 0x9e, 0x9, 0x8, 0x7, 0x6, 0xe, 0x9, 0x7fe, 0x9, 0xfffffffc, 0x9, 0x10001, 0x3, 0x6, 0xfff, 0x5, 0x6, 0xffff10a7, 0x8, 0x6b1, 0x0, 0x1, 0x6, 0x101, 0x6, 0x0, 0x1, 0x3, 0x401, 0x3, 0x1, 0x8001, 0x1, 0x7f, 0x0, 0x8c30, 0x88, 0xb7, 0x4, 0x81, 0x7, 0x4, 0x3, 0x10000, 0x2, 0x4, 0x400, 0x4, 0x9, 0x7fffffff, 0x9, 0x5, 0x9, 0x5, 0x3, 0x6, 0x401, 0x8, 0xa, 0x3, 0xe, 0x1, 0x10000, 0x46e, 0x5, 0x9, 0x0, 0x86, 0x3, 0x5, 0x7f, 0x8, 0x9a, 0x400, 0x1d, 0x4, 0x8, 0xfffffffc, 0x1, 0xb, 0xfffffffe, 0x8, 0x14, 0x0, 0x8, 0x100, 0x101, 0x4, 0x3, 0x9, 0xb904, 0x3, 0x0, 0x1, 0x4, 0x10001, 0x51, 0x4, 0x80000000, 0x10000, 0x5, 0x2, 0x401, 0xf3, 0x81, 0xfffffffa, 0xffffffff, 0x2, 0xfff, 0xdbc, 0x6, 0xffffffff, 0x8, 0x9, 0x7, 0x8, 0x4a, 0x4d, 0x8001, 0x7, 0x7, 0x101, 0x9, 0x2c, 0x5, 0x943, 0x7ff, 0x2, 0xff, 0x4, 0x8, 0x0, 0x3, 0x4, 0x0, 0x1db, 0x38e, 0xffffee5b, 0x81, 0x8, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0xf, 0x80000, 0x5, 0xfffffff8, 0x0, 0x8, 0x3a, 0x7, 0x13, 0x7, 0x6, 0x101, 0x2, 0x1e5, 0x2, 0x9, 0x0, 0x0, 0x3ff, 0x7, 0xb643, 0x9, 0x9, 0xffff8001, 0x4, 0xffffffff, 0x200, 0x8, 0xc, 0x6, 0x1, 0x1, 0x4, 0x5, 0x3, 0x3, 0x3, 0x8, 0x4, 0x4, 0x2, 0xff, 0x3, 0xfffffffe, 0x8, 0x4, 0x6, 0x915b, 0x6, 0x4, 0x5, 0x81, 0x9, 0xd, 0xf, 0x8, 0x8, 0xffffff2a, 0xa, 0x12, 0x4, 0x81, 0x8, 0x100, 0x9, 0x3, 0x1, 0x4, 0x0, 0x8000000, 0x8, 0x4, 0x6, 0x4, 0x8000, 0x2, 0x7fffffff, 0x8, 0xfe, 0x6, 0x8, 0x80, 0x100, 0x4, 0x7ff, 0x6, 0x6, 0x8, 0x8, 0x4, 0x400, 0x8, 0x6, 0x2, 0x0, 0x80d, 0x7, 0xc, 0xd, 0x2, 0x40, 0x2, 0x3, 0x0, 0xffff, 0x1, 0x9, 0x200, 0x1, 0x2, 0x3, 0xf, 0xb8, 0x8, 0x7fff, 0x9, 0x6, 0x1, 0x4, 0x2, 0x4, 0xd00, 0xffb, 0x6, 0x5, 0xb, 0x80, 0x1, 0x7fff, 0x80000000, 0xfff, 0x2, 0x3, 0x9cd, 0x8000, 0x101, 0x101, 0xd87, 0x6b6c, 0xa2, 0xc54, 0x4, 0x800, 0x7, 0x0, 0x6, 0x2, 0xfffffffe, 0x7fffffff, 0xa, 0xffffffff, 0xf, 0x9, 0x5, 0xffffeabf, 0x80000000, 0x401, 0x7, 0xffff, 0x5f1, 0x4, 0x3, 0xf397, 0x8, 0x1, 0x3, 0xfa, 0x93d, 0x1, 0x0, 0x1ff, 0xb, 0x0, 0xffff, 0xfff, 0x1ff, 0x1000, 0xffffffff, 0x9, 0x1, 0x241, 0x3, 0xdd3e, 0x2, 0x4, 0xffffc6bc, 0xd, 0xac, 0x8, 0x7, 0x1, 0x3ff, 0x7, 0x4, 0x7fff, 0x286707c6, 0x8000, 0x4, 0x3, 0x401, 0x6, 0x95d, 0x68c, 0x9, 0x1, 0x8, 0x2, 0xffffffbf, 0x6, 0xfffffffc, 0x83d, 0xfde, 0x6, 0x6, 0x7fffffff, 0x80000001, 0x18b92604, 0x1, 0xffff, 0x2, 0x0, 0x7f, 0x3, 0x647, 0x71a5, 0x81, 0xfffffffa, 0x7, 0x7f, 0x5, 0x5, 0x4, 0x6, 0x8, 0x9, 0xee, 0x37060df1, 0x2, 0x8, 0x100, 0x2, 0x81, 0x5, 0x80c7, 0x6, 0x80000000, 0x100, 0x80000001, 0x3, 0xfffffff9, 0x1, 0x81, 0x7, 0x2, 0x4]}]}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x8d6d}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}, @TCA_TCINDEX_HASH={0x8, 0x1, 0x9e7a}, @TCA_TCINDEX_ACT={0x150, 0x7, [@m_sample={0x84, 0x1f, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x4}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xe}, @TCA_SAMPLE_RATE={0x8, 0x3, 0x9}]}, {0x3e, 0x6, "37769d8bc184b6ff2336f79c6054e55de173bce6fb5b47090eb9835975db1d791138e7137ca7971fc27e84c9fce0fd3dd3cdd299262f0767d41a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_nat={0xc8, 0x3, 0x0, 0x0, {{0x8}, {0x7c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x7, 0x3, 0x10, 0x1468}, @rand_addr=0x64010102, @multicast2, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x9, 0x10000000, 0x5, 0x7}, @private=0xa010101, @rand_addr=0x64010101, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x1, 0x1, 0x2, 0x100}, @broadcast, @loopback, 0xff, 0x1}}]}, {0x27, 0x6, "1d8b27842d595d4804e83fe96fbb969aa68c4d19fb56c3a988f5bb95c6274ea64ba4cf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}]}, @TCA_TCINDEX_FALL_THROUGH={0x8, 0x4, 0x1}]}}, @f_rsvp={{0x9}, {0xc, 0x2, [@TCA_RSVP_SRC={0x8, 0x3, @loopback}]}}]}, 0x2178}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$igmp(0x2, 0x3, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r11, 0x89f8, &(0x7f0000000900)={'sit0\x00', &(0x7f00000007c0)={'syztnl1\x00', 0x0, 0x700, 0x10, 0x7, 0x5, {{0x5, 0x4, 0x1, 0x1a, 0x14, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010101, @local}}}}) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502"], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r8, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, r12, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffc, 0x1e}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8051}, 0x48000) setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e20, 0xa4fffffb, @loopback}}}, 0x108) r14 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r14, &(0x7f00000000c0)=[{&(0x7f0000000600)=""/128, 0x80}], 0x1, 0x111, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 5m12.58951792s ago: executing program 2 (id=12): r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000000)={0x1, @raw_data="20000000a54d24f15247474260608d70566e425a6c36af37b33fac9d31c8a9c7044410d324b03e044e454d2092a62fea8f13441431ce248bfc73a6726ee61ba491d15d8f392ff66fe0b17f0e11f5d2367d5593205ab1efa97d40619a553e7da2518125b850a186ef691daa55c9e50ffaf6ddc25220ded32aeba4524cec1afbd17abba1d15ea05e97ed3dcad452db6e08a991e2c78b057f55de7fdeba7411ce65700c0a1ad7946ff7c355db87566e3e5abb7a37a06731ed19ddfa970bb58a27fd9fa1810000000319"}) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) (async) bind$inet6(r2, &(0x7f0000000200)={0xa, 0x4e20, 0x440007, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff8000}, 0x1c) r3 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x22000003, @ipv4={'\x00', '\xff\xff', @local}, 0x11}, 0x1c) (async) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000400)=[{0x28, 0x0, 0x9, 0xfffff02c}, {0x6, 0x0, 0x20, 0x100002}]}, 0x10) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=ANY=[@ANYBLOB="300000001c000100040000000000000007000000", @ANYRES32=r5, @ANYBLOB="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"], 0x30}, 0x1, 0x1000000}, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x358, 0x178, 0x1170, 0x1398, 0x0, 0x1170, 0x288, 0x1398, 0x1398, 0x288, 0x1398, 0x3, 0x0, {[{{@uncond, 0x0, 0x108, 0x178, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x1, 0x0, 0xd, 0x5}}, @common=@unspec=@devgroup={{0x38}, {0x1d, 0x0, 0x0, 0x0, 0x3ff}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x7, 0xbb0, 0x6cb, 0x0, 0x0, "fe954ca536474eda31e2c118533a6cfcccea2fbd38e9b063904734f8bd5807384a362f204861e8950c1179ce6eac01f0127642699f27ee3538b95d794e325854"}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'veth1_vlan\x00', {}, {}, 0x84}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0xad84, 0xe, 0x2, 'snmp_trap\x00', 'syz0\x00', {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="5b5e26bd7000ffdbdf2501000000050004000100000008000600ac1414aa08000b00", @ANYRESOCT=r8], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x90) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f00000002c0)=0x20) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000a0000000d00000000000007000000000c0000000000000c04000000000034eaaffa1d1668f7"], &(0x7f0000000540)=""/209, 0x3a, 0xd1, 0x1, 0x2}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000008000000000000000900000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000b7768e0014000000b70300000000000085001d0083000000bf090000000000005509010000001000950000040000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00', 0xfbd, 0x0, &(0x7f00000004c0), 0x40f00, 0x10, '\x00', r5, 0x25, r10, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000680)={0x5, 0x9, 0x734, 0x9}, 0x10, 0x0, 0x0, 0x1, 0x0, &(0x7f00000006c0)=[{0x4, 0x4, 0xc, 0x9}], 0x10, 0x5}, 0x94) (async) r11 = accept4$netrom(r9, &(0x7f0000000140)={{0x3, @null}, [@rose, @default, @null, @null, @netrom, @default, @rose, @null]}, &(0x7f0000000340)=0x48, 0x0) getpeername$netrom(r11, &(0x7f0000000280)={{0x3, @rose}, [@bcast, @remote, @netrom, @remote, @default, @remote, @netrom, @null]}, &(0x7f0000000380)=0x48) 5m12.517511842s ago: executing program 2 (id=13): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000000), 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) 4m56.95017932s ago: executing program 32 (id=13): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_mtu(r0, 0x29, 0x1e, &(0x7f0000000000), 0x4) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e13d6a206419010015d4010203010902120001000000000904"], 0x0) 4m33.681371154s ago: executing program 0 (id=147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x9cdc2384056b48b8) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x4}, 0x80, 0x0}, 0x9cdc2384056b48b8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000000)='veth1\x00', 0x10) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) (async) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @local, 0x9}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) (async) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x204) r3 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r3, &(0x7f0000000180)="900000001d001f4d154a817393278bff0a80a578020000000404840014000100ac1414bb0542d6401051a2d708f37ac8da1a297e0099c5ac0000c5b068d0bf46d323456536016466fcb78dcaaf6c3efed495a46215be0000766436c0c80cefd28581d158ba86c9d2896c6d3bca2d0000000b0015009e49a6560641263da4de1df32c1739d7fbee9aa241731ae9e0b390", 0x90, 0x0, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000240)) (async) ioctl$XFS_IOC_FSGEOMETRY_V1(r2, 0x80705864, &(0x7f0000000240)) 4m33.538442878s ago: executing program 0 (id=149): openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x200002, [{0x3, 0x4, 0x200002}]}]}, {0x0, [0x0, 0x5f, 0x30, 0x5f, 0x2e]}}, 0x0, 0x37, 0x0, 0x0, 0xfff}, 0x28) syz_usb_connect$uac1(0x3, 0x93, &(0x7f0000000000)=ANY=[@ANYBLOB="1201da22000000406b1d0101400001020301090281000301f580040904000080010100000a240107000e020102072408020500980c2402020302020106007f33090401000001020000090401010101020000090501090800006102072501020304000904020000010200000904020101010200000524010205020008240201080407e80905820928000165ac0725"], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 4m31.727883302s ago: executing program 0 (id=161): r0 = fsopen(&(0x7f0000000000)='rpc_pipefs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) close(r0) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0_to_bridge\x00', 0x0}) sendto$packet(r1, &(0x7f0000002540)="0b040700e0ff0300020047", 0xb, 0x24040800, &(0x7f0000000080)={0x11, 0x0, r3, 0x1, 0x11, 0x6, @broadcast}, 0x14) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x90, &(0x7f0000003280)=ANY=[@ANYRES32=r0], 0x1, 0xd99, &(0x7f0000006900)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80800) write$P9_RVERSION(r5, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15) r6 = dup(r5) write$FUSE_BMAP(r6, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f00000000c0)={0x14c}, 0x137) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/vtconsole/vtcon1/bind\x00', 0x2, 0x0) write(r7, &(0x7f0000000400)='0\x00', 0x1) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) write(r8, &(0x7f0000000500)="1b5b3f356800", 0x5) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x2000008, &(0x7f0000000540)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[{@access_uid}, {@noextend}]}}) listxattr(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0/file0'}, 0x3a}], [], 0x2f}) r10 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r10, 0x40786e88, &(0x7f0000000640)={{&(0x7f0000000780), 0x1, 0x40, 0xd, 0xe2}, {0x0, 0x0, 0x10, 0x208, 0xfffffffffffffff8}, {0x0, 0x0, 0x8, 0x1, 0x2}, {0x0, 0x0, 0x28, 0x0, 0xffffffffffffff2e}, {&(0x7f0000000000)=[0x9], 0x35c, 0x8, 0x9, 0xffff}}) 4m31.033332849s ago: executing program 0 (id=163): setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000280)={0x6, 0xb, 0x0, 0x8b, 0x0, 0x5, 0x8, 0x0, 0x0, 0x6, 0x8, 0x4, 0x7c, 0x4}, 0xe) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040)={r0}, &(0x7f0000000180)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x800) pselect6(0x40, &(0x7f0000000240)={0x2, 0x0, 0x4, 0x3, 0x2, 0x0, 0x100, 0x5}, &(0x7f0000000040)={0x1d, 0xfffffffffffffffe, 0x40, 0x7eff, 0x0, 0xfffffffffffffffe, 0x71e7, 0x8}, 0x0, 0x0, 0x0) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000840)='./file0/foosyz\x00', 0x0, 0x8}, 0x18) r6 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000640), 0x20000, 0x0) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680), 0x4000, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f00000002c0)=0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xc, 0xc, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x3}, [@generic={0x9, 0x3, 0x7, 0x400, 0xfa4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0xffffffff}, @map_idx={0x18, 0x2, 0x5, 0x0, 0xc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000480)='GPL\x00', 0xfffffe01, 0x0, 0x0, 0x40f00, 0x5, '\x00', r2, @fallback=0x2d, r4, 0x8, &(0x7f0000000540)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x7, 0x0, 0x918a}, 0x10, 0xffffffffffffffff, r5, 0x6, &(0x7f00000006c0)=[r6, r7, r8], &(0x7f0000000700)=[{0x3, 0x3, 0x1, 0x4}, {0x1, 0x4, 0xe, 0x9}, {0x4, 0x2, 0x0, 0x3}, {0x2, 0x1, 0xb, 0xc}, {0x1, 0x1, 0x2, 0xa}, {0x5, 0x3, 0x10, 0x3}], 0x10, 0x7}, 0x94) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./proc/net/afs/sysname\x00', 0x2, 0x0) write(r9, &(0x7f0000000080)='syz\n\x00', 0x4) r10 = openat(0xffffffffffffff9c, &(0x7f00000000a0)='./proc/net/afs/cells\x00', 0x2, 0x0) write(r10, &(0x7f00000000c0)='add foosyz 127.0.0.1\n\x00', 0x15) mount$afs(&(0x7f0000000200)=@cell={0x25, '', 'syz0', '.readonly'}, &(0x7f0000000000)='./file0\x00', &(0x7f00000000e0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='d9n,\x00']) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r9, 0x84, 0x76, &(0x7f00000001c0)={r1, 0x26}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000380)={r11, 0x1b, "76f6e7812bd12a69545fc51d4b75f61e4437f8f3ec18c5517fd899"}, &(0x7f00000003c0)=0x23) openat$cgroup(r9, &(0x7f0000000140)='syz0\x00', 0x200002, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/foosyz\x00', 0x0, 0x0) 4m30.801915815s ago: executing program 0 (id=165): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@int=0x8011, 0x4) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x1ff}}, './file0\x00'}) ioctl$NBD_SET_BLKSIZE(r2, 0xab01, 0xd60e) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xe7, "ba0d828f66d34196168bf6c119f6225f5632eb88cd027e72f828153af5229dc1a706630799e0ed249fd280a029565062d6a1034e1a2f5ff7cf44ab22544bce806c45392848e0ed27329ee04a8d177da1a41fb4e4fc88bee5178bf6052cd36f9d232746e0dfe1dadacf7256ef1c44da02c6c342b98afd7a6d56ad83cafdf08d465389fbe62e7499f9ef0a9c025cd4cb506ec6535ceb91f4565ab5b8890eeb95a7c0a2ac7eaf9b35819d3ef7188cfd8c862e818409749337c9fec5eac1924b9d7f4057262dd56e71d79d2f50bd45d462ef6087191f1801debf5388a9ee6e89256a5f2616f6d0787d"}, &(0x7f00000001c0)=0xef) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000200)={r3, 0x2}, &(0x7f0000000240)=0x8) socket$inet6_icmp(0xa, 0x2, 0x3a) mremap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) socket$phonet(0x23, 0x2, 0x1) madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xe) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000280)) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000380)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f00000003c0)={r4, 0x4}, &(0x7f0000000400)=0x8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x40, 0x20) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000480)={0x4, 0x0, &(0x7f0000ffc000/0x3000)=nil}) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000500), r6) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000540)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000640)={'gretap0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x7, 0x6780, 0x1, {{0x1f, 0x4, 0x3, 0x4, 0x7c, 0x65, 0x0, 0xcb, 0x4, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0xe}, {[@timestamp={0x44, 0x20, 0x1f, 0x0, 0xd, [0x155, 0x7, 0x7, 0x200, 0xa396, 0x8, 0x401]}, @cipso={0x86, 0x25, 0x1, [{0x1, 0xe, "e46ac67ac8a22fb5b103e7ad"}, {0x0, 0x2}, {0x2, 0xf, "c80fd122f189859b4aa8c36a62"}]}, @timestamp_prespec={0x44, 0x1c, 0xc, 0x3, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x90}, {@rand_addr=0x64010102, 0x7}, {@loopback, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f00000007c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000680)={0xcc, r7, 0x800, 0x70bd2b, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r9}}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0xc4}, 0x80d0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000800)={r5, @in={{0x2, 0x4e24, @multicast1}}, 0x6, 0x2a}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{r2, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%+9llu \x00'}, 0x20) ioctl$BTRFS_IOC_GET_FEATURES(r10, 0x80189439, &(0x7f0000000980)) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f00000009c0)) bind$rds(r6, &(0x7f0000000a00)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f0000000a80)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000a40), r11) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r6, 0x84, 0x1c, &(0x7f0000000ac0), &(0x7f0000000b00)=0x4) 4m30.399266745s ago: executing program 0 (id=167): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x697acc14, 0x7}) (async) syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2014050, &(0x7f00000000c0)=ANY=[], 0x0, 0x205, &(0x7f0000000180)="$eJzslT1v00AYx/93cW0HVYK5C0hUogz4LYBYKoWFiQGJl4oBiYi6VcGlKPFAKyHgEyBWNgY+BhKsfAQGFJB4WWABJoZD5zs7l3BWoiSQgecn9fI/3/nx8zzn/g2CIP5bPrz/2Rc/1j/7AJaxCk9f/9IY7OHG/nf+twevL17YeHLjxRuvHzSHo3k4XPw+mvj5DoBX5xvI1dQVQghzfVX/XgGv9FVwnNR6AwyB1jfBcU3rFAzXtb5t6D25Pwi2drI0uLWXbUoRySGWQyKH1mh+Xx8zbOq5zI8pWdTe2z+408mytDsXsQzgzyVL27yh/Hxg3cjPOK+VT1DZRkb/YnDEWrfAcBltHANwDl7ZG9USo/4VB0tlfOPVsNTvYsZGfAQwuLI1n87ahSsfNdXtAJvk7HFEv45/s4pxIky7vadvrUsNFKI80bo47cUlP6OAM7eAwgMWXU6NeNlW51el+lDNRzcvWf1l3Cm7Rhzm2CNbOl/5k3jOcMLwJxXiWeFhYb57L+ztH5za2e1sp9vp3SRpnY1OR9GZJCyMSI0WCyzjNwt/OjSI36zb6zIX9zt53o3VWM0TNdoclxf+x7F2XPmfdFN3JO738mOg1+Uf/yUUWCv/ufyhm1htSQRBEP+Eo2DQTiWcUuivSbUgRHJpwXkSBEEQBEEQBEEQBDE9vwMAAP//duxdMA==") 4m30.048232723s ago: executing program 33 (id=167): r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x697acc14, 0x7}) (async) syz_mount_image$erofs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2014050, &(0x7f00000000c0)=ANY=[], 0x0, 0x205, &(0x7f0000000180)="$eJzslT1v00AYx/93cW0HVYK5C0hUogz4LYBYKoWFiQGJl4oBiYi6VcGlKPFAKyHgEyBWNgY+BhKsfAQGFJB4WWABJoZD5zs7l3BWoiSQgecn9fI/3/nx8zzn/g2CIP5bPrz/2Rc/1j/7AJaxCk9f/9IY7OHG/nf+twevL17YeHLjxRuvHzSHo3k4XPw+mvj5DoBX5xvI1dQVQghzfVX/XgGv9FVwnNR6AwyB1jfBcU3rFAzXtb5t6D25Pwi2drI0uLWXbUoRySGWQyKH1mh+Xx8zbOq5zI8pWdTe2z+408mytDsXsQzgzyVL27yh/Hxg3cjPOK+VT1DZRkb/YnDEWrfAcBltHANwDl7ZG9USo/4VB0tlfOPVsNTvYsZGfAQwuLI1n87ahSsfNdXtAJvk7HFEv45/s4pxIky7vadvrUsNFKI80bo47cUlP6OAM7eAwgMWXU6NeNlW51el+lDNRzcvWf1l3Cm7Rhzm2CNbOl/5k3jOcMLwJxXiWeFhYb57L+ztH5za2e1sp9vp3SRpnY1OR9GZJCyMSI0WCyzjNwt/OjSI36zb6zIX9zt53o3VWM0TNdoclxf+x7F2XPmfdFN3JO738mOg1+Uf/yUUWCv/ufyhm1htSQRBEP+Eo2DQTiWcUuivSbUgRHJpwXkSBEEQBEEQBEEQBDE9vwMAAP//duxdMA==") 3m47.879536617s ago: executing program 1 (id=227): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) (async) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000040)={0x0, 0xea60}, 0x10) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000000)=0x400000001, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0x1, 0x2}, 0x6) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(0xffffffffffffffff, 0xc2604111, &(0x7f0000000200)={0x2, [[0xffffffff, 0xffffffff, 0xfffffffe, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0xffffffff], [0x0, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac42, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x403, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) (async) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_extract_tcp_res$synack(&(0x7f0000000100)={0x41424344}, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000200)={@random="8ee98bd2db41", @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x20, 0x6, 0x40, @remote, @local, {[], {{0x4e20, 0x4e22, 0x0, r3, 0x0, 0x0, 0x8, 0x18, 0x1001, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x2800}]}}}}}}}}, 0x0) sendmmsg(r0, &(0x7f0000001100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) 3m46.740963474s ago: executing program 1 (id=232): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/51, 0x33}], 0x1) openat$sysfs(0xffffff9c, &(0x7f0000000500)='/sys/kernel/notes', 0x0, 0x0) (async) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/51, 0x33}], 0x1) (async) 3m46.595188868s ago: executing program 1 (id=233): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114200000000008510000002000000850000000500000095000d00000000009500a50000000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x6}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0xe0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001180)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f00000000c0)={0x0, 0x4, 0x3, 0x17, 0xffe3}) 3m46.353305343s ago: executing program 1 (id=234): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="6163746976655f6c6f67733d342c646174615f666c7573682c66617374626f6f742c6a71666d743d76667376312c6e6f696e6c696e655f64656e7472792c7573726a71756f74613d66326673002c00ff371013587045d0d273e856ce75c2b11120ece6d6a76856a2cdd8c835ef14aa3aea583b7f3affd12ff9abc9b21098874a75607f009920ad1a283ce7b8b528e239692ab156e30dd8365f708e6c98cfcd0b30d5304dd70f87da026e2d4e4df1ad07ba72683f43d76541d455d1fa118f0900000009fe28bfded255e7c5806f05b80ec0e186b4f72759eb096a1fe6793e734fe61555f01ff9f23bc11370aa247215e8f1410ea4728bb2a2c2d20bc5e61b0a4c7ddb25da21c75f35f711581d1f5b8db3be07c80000000000000000"], 0x1, 0x54f4, &(0x7f000000ab00)="$eJzs3M1rI2UYAPBn2u1+uxbx4G0HFqGFTdj0Y9Fb1V38wC7Fj4MnTZM0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJmZ6tYvhKaNtb8fTJ6ZN2+eed5QCs9MmADOrfn0px+SuBFXImI2Iq5H5PtJueXWivBMRNyMiJnHtqQc/23gYkRcjYgb4+RFzqR865Pbo1ur37/245dfX7pw7dMvvpneqoFpezYietvF/l6viFm7iA/L8fqok8feyqiMxRu9R+VxVsS91maeYa9+OK+ex+V2MT/b3h2MY5LUG+PY7mzl49v94oSDUfswT/6Bh/Wd/LjZ2sxjZ5DlsX1Q1LV/UPxvOxgMizzNMt/7efoYDg9jMd7abxXr2X6Ux0Z/WI4XebNma38cR2UsTxeNrNvM69g8zjf93/Z6p7+7n45aO4NO1k9Xq7XnqrW7ldpO1mwNWyuVeq95dyVdaHfH0yrDVr231s6ydrdVbWS9xXSh3WhUarV04V5rs1Pvp7Vadbl6p7K6WO7dTl9+8HbabaYL4/hip7877HQH6Va2kxafWEyXqsvPL6a3aumb6xvpxhv3769vvPXuvXcevLD+6kvlpD+VlS4s3VlaqtTuVJZqi+do/R+WRU9w/XAsybQLADh79P/ANEyj/9/qTq7/D/3/RJyp/ve89/8nsH44Fv0/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC59e3cZ6/kO/PF8bVy/ImIm+Ohp8rjJCJmIuKXvzAbF4/knC3zzP3N/Lk/1PBVEnmG8TkuldvViFgrt5+fPOlvAQAAAP6/Pv/g5sdFt168zE+7IE5TcdFm5vp7E8qXRMTc/HcTyjYzfnl6Qsnyv+8LsT+hbPkFrMsTSlZccrswqWz/yuyRcPmxkBRh5lTLAQAATsXRTuB0uxAAAABO00fTLoDpSOLwVubhveD8l/e/3xC8cuQIAAAAOIOSaRcAAAAAnLi8//+H5/+F5/8BAADA2Vc8/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiVnfvJSR2K4gB8Wuh7vD9GYpy7FWewDJfg0KFhAW6CJeAW3ABrwJlLMGBoS7QGE5PetpF8X9JebkN+nBIm515SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJzsZo/3l89tM3Z7tpJczcAAADAMZtiNS9fTKv5v/r6WX3pop5nEZFHxLHefRS/GpmjOqf44v3FpxqeIsqE/Wf8ro+/EXFdH6/nXX8LAAAAcLrWi+Ws6tar03ToguhTtWiT/79JlJdFRDF9SZSW70+XicLK3/c47hKllQtYk0Rh1ZLbOFXat4waw+TDkFVD3ms5AABAL5qdQL9dCAAAAH26HboAhpHFYSvzsBdc/vP+fUPwT2MGAAAA/EDZ0AUAAAAAnSv7f8//AwAAgNNWPf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACALm2K1Xy9WM7a5mx37aS5GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgjf15R4EQCIMw2Lu+M5n7H1YaNDU1qQLh428MBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu7nNY4qDgD4d2Z2trYqxig5RETBg17sdlNbe/WgBA/+CUJItzW69Ueagy1FyMWb5NyL6FFEUOKt/0PPLfRSbz3soYJnZWZnmmkacLV0Zpt8PvD2fWcY5n3fJIR8570EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA2eW8vzoqPhWmcVudu3b+2XvS39/WFGzt3lotWxEmbST8dXm0eJEvdJQIAAMDRkdX1fUTczXdXiz5dKOv/vL6mqPl/eH4a1/X8/rq/7uvav2i//3bv5QcDLUzHKW56YWM8OvVoKr0nN8v59sK/XtErn3z57iUrvyDph9svTfLyeSbf3bz5fr8Mj7WRLQDwf5ys+yqofx8q+mGXiQFwZPQahXdd/2cL3eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0IbJdjxbx0lELPf24sLt+9fWD+pv7NxZrtvZ69d3mvcsbpFHxIWN8ehUi3OZd5evXP1sbTwebbYfvBYR3Y1eBR/PcE1ElxkKHjdIq+/1ecnn6Qg6/sEEAMChk1etqOvv5rurxblkMeLvHx+u/99sxDFj/X/vk7O3mmM16/9hazOcf4OtS18OLl+5+vbGpbWLo4ujz99ZGb47PH3uzJlzg/JdycAbEwAAAB5PP4no76v/08VH1/9PNOKYsf7/6vvhN82xMvX/gfYW/brOBAAA4Gh78fW//kwOOJ/0+/H12tbW5nD6WR3H5kp5vNJBqv/Zsao16/9sseusAAAAgDZMtpOH1v/PN+KYcf3/uZ9e+aV5zywijlfr/yfXvxifb286c62NPyfueo4AAAB063jVmuv/ebn/P32w5SGNiLfemMbVvwGcqf7PPvj25+ZYzf3/p9ub4lxKl6bPo+yXInpLXWcEAADAYfZM1Ypi/498d/XTX0981Lf/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBt/wQAAP//K8ZAQg==") syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000892e79106d042107259c0102030109022200010000000009040000000e01000004240201010248"], 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mq_open(&(0x7f0000000180)='!se\x16lin\xdb\xa1\x02\xbf\xd9\x91\x1c&fQ\xcc,\xb8<\x1b\xcd\xce6\xbf\xfa;\xb9-a\xb8\xef\x8de\x14\xbc\x9ej\xa1q\xa2\xa5\t\x98\x8a\x8f>J\xb5D\x04\x18\xc7\t3\x7f\x83\x80\xcb\x19\x89\xec\xcf\x8c\xaamx\xfbi\xbf:\xb6,R\x18\xa0\xd5b\xa6\xcdmr\x9dF\xf3\x80O.F\x046\x0e\xa6U\xa8\xf2D\xac\x16\x1a\xe0?\xdf\x9ai\xac\xb7\xd2\x03\xb6\xb5%\x9et\b\r\xb1\xb9\x17\xa7\x01\xedX\x9bQ\xe3\xfdWI\a$RY\x9e\x90\xb3-\x91W\xe9\x9a\x1d1$\xda\xec.v\xc4\xf5#\x94\xdc$\xa6\x9c$\xcdkM\xed\x01\xde\x8f8\xe6\xd5k\xf3v=\xd7\x89v5A\xf9\xf9\x9bx\xa2\x9d\xccj\xbe\x87%RjFG\xd4\x94\xf7a{\xc9FY8-\x9ef\xa7\x8ax\x7f\xabR\x85\xaa\xc6a\xd09\x1f\x9c\x9bSde\"\xf6s&~h8\xefTp@\x03\xc7\x1a\xc2=Y\xf2~8n\xd1\xbb\x14R=\xacw2\xff\x99n\x17b\xe0\xd7zl\x89\xb7\x1b\vT\xe0\xfa[\xa6\x96\xaf\\\x18\x00\xb3\xd5\x88\x86\xd1\x8f\x13\x0e\x8b\xeb=', 0x6e93ebbbcc088cf2, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/kvm/kvm_entry/enable\x00', 0x2, 0x0) read$FUSE(r1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x2200008, &(0x7f00000003c0)={[{@data_err_abort}, {@init_itable}, {@norecovery}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@inlinecrypt}, {@grpquota}, {@init_itable_val={'init_itable', 0x3d, 0x7}}]}, 0x3, 0x5ad, &(0x7f0000001000)="$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") ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0xffff, 0x8000000000000}) 3m42.505371827s ago: executing program 1 (id=244): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000900)='./file1\x00', 0x200000, &(0x7f0000000180), 0x1, 0x566, &(0x7f0000002080)="$eJzs3V9rW+UfAPDvSdv9//3WwRjqhRR24WQuXVv/TBA2L0WHA72foc3KaLqMJh1rHWy7cDfeyBBEHIgvwHsvh2/AVyHoYMgoeuFN5aQnW9YkTZtlNvN8PnC25znnpN/z5DnPk+/JSUgAuTWR/lOIeDkivkoiDrdsG41s48TGfmuPbsymSxLr65/8kUSSrWvun2T/H8wqL0XEz19EnCy0x62trC6UKpXyUlafrC9enaytrJ66vFiaL8+Xr0zPzJx5a2b63XfeHlhbX7/w17cf3//gzJfH17758cGRu0mci0PZttZ2PINbrZWJmMiek7E4t2nHqQEEGyZJrx06nAPsvpFsnI9FOgccjpFs1AP/fTcjYh3IqcT4h5xq5gHNa/sBXQe/MB6+v3EB1N7+0Y33RmJf49rowFry1JVRer07PoD4aYyffr93N12ix/sQNwcQD6Dp1u2IOD062j7/Jdn817/T23jXb3OMvL3+wG66n+Y/b3TKfwqP85/okP8c7DB2+9F7/BceDCBMV2n+917H/Pfx1DU+ktX+18j5xpJLlyvl0xHx/4g4EWN703q/93Na8790SeM3c8HsOB6M7n36MXOleqnPcG0e3o545Un+m0Tb/L+vketu7v/0+biwzRjHyvde7batd/tbDT4DXv8h4rWO/f/kjlay9f3Jycb5MNk8K9r9eefYL93i76z9g5f2/4Gt2z+etN6vre08xvf7/i5329bv+b8n+bRR3pOtu16q15emIvYkH7Wvn37y2Ga9uX/a/hPHt57/Op3/+yPis222/87R7mnQMPT/3I76f+eFXz/8/Ltu8bfX/282SieyNduZ/7Z7gM/y3AEAAAAAAMCwKUTEoUgKxcflQqFY3Ph8x9E4UKhUa/WTl6rLV+ai8V3Z8RgrNO90H275PMRU9nnYZn16U30mIo5ExNcj+xv14my1MrfbjQcAAAAAAAAAAAAAAAAAAIAhcbDL9/9Tv43s9tEBz52f/Ib86jn+B/FLT8BQ8voP+WX8Q34Z/5Bfxj/kl/EP+WX8Q34Z/5Bfxj8AAAAAAAAAAAAAAAAAAAAAAAAAAAAM1IXz59Nlfe3Rjdm0PndtZXmheu3UXLm2UFxcni3OVpeuFuer1flKuThbXez19yrV6tWp6Vi+Plkv1+qTtZXVi4vV5Sv1i5cXS/Pli+Wxf6VVAAAAAAAAAAAAAAAAAAAA8GKprawulCqV8pJC18LZGIrD6LuQ9Orls9nJ0FeI0d1voMJzKOzyxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALf4JAAD//5CPL9Y=") r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000000)={0x0, 0x31384142, 0x0, @discrete={0x5, 0x3}}) r1 = open(&(0x7f0000000200)='./file1\x00', 0x101400, 0x163) ioctl$EXT4_IOC_SETFSUUID(r1, 0x4008662c, &(0x7f0000000280)={0x10, 0x0, "913100"}) bind$unix(r1, &(0x7f0000000080)=@abs={0x1, 0x0, 0x804e23}, 0x6e) 3m40.898517766s ago: executing program 1 (id=252): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') pread64(r0, &(0x7f00000010c0)=""/89, 0x59, 0x200) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2, &(0x7f0000000040), 0x7, 0x4eb, &(0x7f0000000140)="$eJzs3EFsVEUfAPD/225pC+WjHx8fSkUtorHR2EJB4WBiMJp40MSIBz02bSFIoaatiRACS2LwaEi8GuPRqwevarwYTiZe8WhiSIjhAnha87pvu9vt26W02660v1+y3Zm3897M7Lx5O2+muwFsWUPpnySiPyJuRsSuiCg0JhiqPN27c2ni/p1LE1Eql0/+laS7xd00nkmy5x1ZZLgQUfgsqb1QZ+7CxbPj09NTs1l8dP7cx6NzFy6+dObc+Omp01Pnx44fP3rk8LFXxl5++Erl5JfW6+7g5Zn9+9768Po7E8Xq9t7sub4e7TIUQ3lFWfBcuzPrsJ114aTYKuVr618YViw9/9Pm6l7o/7uiK1o2HrCJlMvlck8W7l7+cqnc6OqyLcAjK4lOlwDojOoHfXr/W33kjRO2rd8QpKNun6jcAKX1vpc9Ip5e2FidB+luuL9tp6Eoxgelv79OH2m8uA7zEAAA9X48UR0JNoz/BiL21qX7T7aGMhAR/42I3RHxv4jYExH/j0raxyLi8Ybjd0VEuUX+Qw3x5ePPwq211bC1dPz3ara2VRv/Rf0q2EBXFtsZUR0wTx3K3pPh6O45dWZ66nCLPH5647cvmr2W1r86/ksfaf7VsWBWjlvFnqX7TI7Pj6+6wg1uX40YLDbWPylGJIsrAUlE7IuIwZ+/WvFxB+rCZ174dv9ipGGS8cH1X1DOXUdrw1JF+ZuI5yvtX4ol7V/LMWm9PjnaG9NTh0bTs+BQbh43fr32bt72ZCX1//6Pxt3ePPbDyaxnrV3a/tvrzv+ort/W6j+QRCSL67VzTQ50pXke137/vOk9zWrP/23J+31Rd1/66fj8/OzhiG3J27Fs+1ht32o8fY5Spf7DB/P7/+5sn/SdeCIi0pP4yYh4Kip3iENRvnIgIp6JiIPNqx+/vP7sR6uv//pK6z+Ze/1b0v619fo0kG6dXbJlfDopVVLXtiwGus4euHl/MD//lbX/0YXQcLYl//qXLLlELC9FfmCNbx8AAAA8EgoR0V83l9QfhcLISGUOaE9sL0zPzM2/mMx8cn6y8h2Bgbq0lfng7qQ6/zlQFx9riB/J5o2/7OpbiI9MzExPdqjOQMWOhT6fFEYWrwWV/p/6sz1TzMC/ma/8wNb1oP6/9/oGFQTYcD7/YauavVwXKTVJVPKfMrA5reTz31wgbE55/b/F/3O7YYBNoqw7w5b2MP1/adobu9peGGBDFeO9xXChoyUBNprxP2xJK/qS/KoD5Z78l3pjeeLobX3ArlhdMfpy8upIIB1ZdST3vtXsVf01haZpovBwB+yp/WREspY2PbX2t+X03naf/N3lbH2s3S343Yb007xA6+vGWP/6XZMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa6Z8AAAD//74s2nc=") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0014"], 0x34}}, 0xc000) 3m40.499982346s ago: executing program 34 (id=252): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') pread64(r0, &(0x7f00000010c0)=""/89, 0x59, 0x200) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) preadv(r0, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x2, &(0x7f0000000040), 0x7, 0x4eb, &(0x7f0000000140)="$eJzs3EFsVEUfAPD/225pC+WjHx8fSkUtorHR2EJB4WBiMJp40MSIBz02bSFIoaatiRACS2LwaEi8GuPRqwevarwYTiZe8WhiSIjhAnha87pvu9vt26W02660v1+y3Zm3897M7Lx5O2+muwFsWUPpnySiPyJuRsSuiCg0JhiqPN27c2ni/p1LE1Eql0/+laS7xd00nkmy5x1ZZLgQUfgsqb1QZ+7CxbPj09NTs1l8dP7cx6NzFy6+dObc+Omp01Pnx44fP3rk8LFXxl5++Erl5JfW6+7g5Zn9+9768Po7E8Xq9t7sub4e7TIUQ3lFWfBcuzPrsJ114aTYKuVr618YViw9/9Pm6l7o/7uiK1o2HrCJlMvlck8W7l7+cqnc6OqyLcAjK4lOlwDojOoHfXr/W33kjRO2rd8QpKNun6jcAKX1vpc9Ip5e2FidB+luuL9tp6Eoxgelv79OH2m8uA7zEAAA9X48UR0JNoz/BiL21qX7T7aGMhAR/42I3RHxv4jYExH/j0raxyLi8Ybjd0VEuUX+Qw3x5ePPwq211bC1dPz3ara2VRv/Rf0q2EBXFtsZUR0wTx3K3pPh6O45dWZ66nCLPH5647cvmr2W1r86/ksfaf7VsWBWjlvFnqX7TI7Pj6+6wg1uX40YLDbWPylGJIsrAUlE7IuIwZ+/WvFxB+rCZ174dv9ipGGS8cH1X1DOXUdrw1JF+ZuI5yvtX4ol7V/LMWm9PjnaG9NTh0bTs+BQbh43fr32bt72ZCX1//6Pxt3ePPbDyaxnrV3a/tvrzv+ort/W6j+QRCSL67VzTQ50pXke137/vOk9zWrP/23J+31Rd1/66fj8/OzhiG3J27Fs+1ht32o8fY5Spf7DB/P7/+5sn/SdeCIi0pP4yYh4Kip3iENRvnIgIp6JiIPNqx+/vP7sR6uv//pK6z+Ze/1b0v619fo0kG6dXbJlfDopVVLXtiwGus4euHl/MD//lbX/0YXQcLYl//qXLLlELC9FfmCNbx8AAAA8EgoR0V83l9QfhcLISGUOaE9sL0zPzM2/mMx8cn6y8h2Bgbq0lfng7qQ6/zlQFx9riB/J5o2/7OpbiI9MzExPdqjOQMWOhT6fFEYWrwWV/p/6sz1TzMC/ma/8wNb1oP6/9/oGFQTYcD7/YauavVwXKTVJVPKfMrA5reTz31wgbE55/b/F/3O7YYBNoqw7w5b2MP1/adobu9peGGBDFeO9xXChoyUBNprxP2xJK/qS/KoD5Z78l3pjeeLobX3ArlhdMfpy8upIIB1ZdST3vtXsVf01haZpovBwB+yp/WREspY2PbX2t+X03naf/N3lbH2s3S343Yb007xA6+vGWP/6XZMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADa6Z8AAAD//74s2nc=") sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a3200000000140000001100"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x7, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b705000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000000047c0000ec0000000c00018006000600800a0000100002800c0014"], 0x34}}, 0xc000) 6.14523147s ago: executing program 5 (id=1170): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 5.499169546s ago: executing program 3 (id=1175): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) syz_usb_connect$hid(0x466ebb02bdbbaa6, 0x0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f00000003c0)={0x55, 0x8000, 0xfffd, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0x202}, {0xffff, 0x5, 0x1, 0x46, 0x2, 0x101}]}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250) 5.34949348s ago: executing program 6 (id=1177): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r2, 0x0, 0x0) write$nci(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="f0ddcbf099515b135b00c0f9c1bac0b07da73e0d8fcb50b3e4040be86075822c1a149c58b28d347a53eb978e10d1"], 0x5) 4.261740386s ago: executing program 5 (id=1178): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000340)=@NCI_OP_RF_DEACTIVATE_NTF={0x1, 0x0, 0x3, 0x6, 0x2, {0x5, 0x4}}, 0x5) 4.013461152s ago: executing program 4 (id=1179): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) close(0x3) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) socket$inet(0x2, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x63, &(0x7f0000000140)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) close(0x4) 3.938867174s ago: executing program 4 (id=1180): inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x165840, 0x2) mknod$loop(0x0, 0x0, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x9, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, 0x0, 0x0) 3.636419722s ago: executing program 3 (id=1181): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x40, @mcast2, 0x8}, 0x1c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000014000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0, 0x63}], 0x1, 0x7a, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.624384902s ago: executing program 4 (id=1182): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}], 0x1}}], 0x1, 0x41) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000140)=[{0x3, 0x3, {0x2}, {0x1, 0x0, 0x3}, 0xfe, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0x7, 0xc}, {0xfff1, 0xffff}, {0x3, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x4008050) 3.27267486s ago: executing program 4 (id=1183): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x35, 0x0, 0x4, 0x1, 0x2, 0x1000, 0xf1, 0x0, 0x7fffffffffffb, 0x1, 0x1, 0x40001, 0x0, 0xc12, 0x1, 0xbde], 0xa000, 0x3d4316}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.080929685s ago: executing program 4 (id=1184): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x138}, 0x1, 0x0, 0x0, 0x48801}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioprio_set$pid(0x3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x804) sendmsg$nl_xfrm(r4, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/stat\x00') mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil) 2.213434836s ago: executing program 5 (id=1185): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420014073483b00000000ffff"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400024073683a00000000ffffffff"], 0x0) 2.203977746s ago: executing program 6 (id=1186): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.142765368s ago: executing program 4 (id=1187): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYBLOB="f7", @ANYRESDEC], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) pselect6(0x40, &(0x7f0000000100), &(0x7f0000000000)={0x1f}, 0x0, 0x0, 0x0) 2.05032825s ago: executing program 5 (id=1188): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x5, 0x0) close(0x3) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) shutdown(r0, 0x1) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x63, &(0x7f0000000140)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) close(0x3) close(0x4) 1.994162041s ago: executing program 3 (id=1189): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x7, r2, 0x0}]) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x9d, 0x0, &(0x7f00000003c0)=[@request_death], 0x0, 0x0, 0x0}) 1.894581794s ago: executing program 5 (id=1190): inotify_init() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x80) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, 0x0, 0x165840, 0x2) mknod$loop(0x0, 0x0, 0x1) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r3, 0x29, 0xc8, 0x0, 0xc000000) setsockopt$MRT6_ADD_MFC(r3, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}, 0x0, {[0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x100]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, 0x0, 0x0) r4 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2a, &(0x7f00000001c0)={0x3, {{0xa, 0x4e23, 0x2, @mcast1, 0xff7ffffd}}, {{0xa, 0x4e21, 0x9, @local, 0x4f1}}}, 0x108) setsockopt$inet6_group_source_req(r4, 0x29, 0x2f, 0x0, 0x0) 1.713466788s ago: executing program 3 (id=1191): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000200)=0x12) close(r0) 1.551011072s ago: executing program 3 (id=1192): madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) 1.150934922s ago: executing program 3 (id=1193): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000002640)={[{@usrquota}, {@coherency_full}, {@err_cont}, {@heartbeat_none}, {@err_cont}, {@nointr}, {@grpquota}]}, 0x1, 0x4703, &(0x7f0000004800)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x20020c0, 0x0, 0x1, 0x0, &(0x7f0000001a00)) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) 1.045825265s ago: executing program 6 (id=1194): syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_train_complete={{0x4f, 0x1}, {0x7}}}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e) syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_pscan_rep_mode={{0x20, 0x7}, {@none, 0x60}}}, 0xa) 305.400403ms ago: executing program 6 (id=1195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@dellinkprop={0x38, 0x6d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x2000, 0xb00}, [@IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'team_slave_0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000850) 174.870015ms ago: executing program 6 (id=1196): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420004073483c00000000ffffffff"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123420014073483b00000000ffff"], 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00aabbccddee08004500001c123400024073683a00000000ffffffff"], 0x0) 42.758219ms ago: executing program 5 (id=1197): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56d43, 0x1, 0x25d7dbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000090}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r1, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 6 (id=1198): syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r1, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) kernel console output (not intermixed with test programs): 180.039220][ T7390] loop3: detected capacity change from 0 to 32768 [ 180.076267][ T7412] loop5: detected capacity change from 0 to 8 [ 180.125252][ T7390] BTRFS: device fsid db05bf05-c4f4-4d41-ba1f-eb57295b561b devid 1 transid 8 /dev/loop3 scanned by syz.3.263 (7390) [ 180.265198][ T7390] BTRFS info (device loop3): first mount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 180.365297][ T7390] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm [ 180.436456][ T7390] BTRFS info (device loop3): using free space tree [ 180.527991][ T7398] loop4: detected capacity change from 0 to 32768 [ 180.687098][ T7398] jfs_lookup: dtSearch returned -5 [ 180.776820][ T7390] BTRFS info (device loop3): enabling ssd optimizations [ 180.842106][ T7390] BTRFS info (device loop3): auto enabling async discard [ 180.909037][ T7439] loop5: detected capacity change from 0 to 21 [ 181.079466][ T7273] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.119448][ T9] IPVS: starting estimator thread 0... [ 181.171258][ T5773] BTRFS info (device loop3): last unmount of filesystem db05bf05-c4f4-4d41-ba1f-eb57295b561b [ 181.225149][ T7440] IPVS: using max 36 ests per chain, 86400 per kthread [ 181.239609][ T7348] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 181.327351][ T7348] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 181.402301][ T7348] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 181.506931][ T7348] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 181.610041][ T5769] Bluetooth: hci0: command tx timeout [ 182.039093][ T7348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.124963][ T7348] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.243674][ T3465] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.250831][ T3465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.337390][ T3465] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.344530][ T3465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.572868][ T7348] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 182.605231][ T7348] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 182.742996][ T7453] loop4: detected capacity change from 0 to 40427 [ 182.782447][ T7453] F2FS-fs (loop4): invalid crc value [ 182.806467][ T7453] F2FS-fs (loop4): Found nat_bits in checkpoint [ 182.920759][ T7453] F2FS-fs (loop4): Start checkpoint disabled! [ 182.931304][ T7348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.950209][ T7453] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 183.442176][ T7485] overlayfs: workdir and upperdir must be separate subtrees [ 183.507539][ T7348] veth0_vlan: entered promiscuous mode [ 183.557619][ T7348] veth1_vlan: entered promiscuous mode [ 183.658322][ T7348] veth0_macvtap: entered promiscuous mode [ 183.686002][ T5769] Bluetooth: hci0: command tx timeout [ 183.739870][ T7348] veth1_macvtap: entered promiscuous mode [ 183.794525][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.810349][ T7489] jffs2: notice: (7489) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 183.843809][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.868151][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.905655][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.932497][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.956675][ T7480] loop3: detected capacity change from 0 to 32768 [ 183.963205][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.994451][ T7480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.272 (7480) [ 184.016841][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.064910][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.098729][ T7480] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 184.126858][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.144367][ T7480] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 184.182271][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.195446][ T7480] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 184.225415][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.248290][ T7480] BTRFS info (device loop3): setting nodatasum [ 184.254488][ T7480] BTRFS info (device loop3): enabling ssd optimizations [ 184.265890][ T7494] loop5: detected capacity change from 0 to 4096 [ 184.281856][ T7348] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.318332][ T7480] BTRFS info (device loop3): using spread ssd allocation scheme [ 184.330638][ T7348] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.365236][ T7480] BTRFS info (device loop3): use zlib compression, level 3 [ 184.372513][ T7480] BTRFS info (device loop3): turning on flush-on-commit [ 184.393505][ T7348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.461130][ T7348] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.489111][ T7480] BTRFS error (device loop3): unrecognized metadata_ratio value 0x0000000100000000 [ 184.525713][ T7348] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.545439][ T7480] BTRFS error (device loop3): open_ctree failed: -34 [ 184.572507][ T7348] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.595752][ T7348] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.715738][ T5812] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 184.834471][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.872712][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.925351][ T5812] usb 6-1: Using ep0 maxpacket: 8 [ 184.947206][ T5812] usb 6-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 184.973373][ T6887] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.003087][ T5812] usb 6-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 185.032591][ T6887] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.092693][ T5812] usb 6-1: config 0 interface 0 has no altsetting 0 [ 185.133688][ T5812] usb 6-1: New USB device found, idVendor=05ac, idProduct=0269, bcdDevice= 0.00 [ 185.143343][ T7502] sctp: [Deprecated]: syz.3.277 (pid 7502) Use of int in max_burst socket option deprecated. [ 185.143343][ T7502] Use struct sctp_assoc_value instead [ 185.170498][ T5812] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.211547][ T5812] usb 6-1: config 0 descriptor?? [ 185.355374][ T172] usb 5-1: new low-speed USB device number 11 using dummy_hcd [ 185.556617][ T172] usb 5-1: config 0 has an invalid interface number: 9 but max is 0 [ 185.582420][ T172] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.611370][ T172] usb 5-1: config 0 has no interface number 0 [ 185.640899][ T172] usb 5-1: New USB device found, idVendor=026a, idProduct=00ef, bcdDevice= 0.00 [ 185.774136][ T5769] Bluetooth: hci0: command tx timeout [ 185.823512][ T172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.840761][ T5812] hid (null): report_id 3688329021 is invalid [ 185.860026][ T5812] hid (null): unknown global tag 0xc [ 185.868681][ T172] usb 5-1: config 0 descriptor?? [ 185.882116][ T5812] hid (null): nested delimiters [ 185.917313][ T5812] magicmouse 0003:05AC:0269.0007: report_id 3688329021 is invalid [ 185.941501][ T5812] magicmouse 0003:05AC:0269.0007: item 0 4 1 8 parsing failed [ 185.962383][ T5812] magicmouse 0003:05AC:0269.0007: magicmouse hid parse failed [ 185.981283][ T5812] magicmouse: probe of 0003:05AC:0269.0007 failed with error -22 [ 186.013488][ T7524] overlayfs: workdir and upperdir must be separate subtrees [ 186.138414][ T7529] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 186.196407][ T7529] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 186.237850][ T7529] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 186.283704][ T7529] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 186.310215][ T7532] netlink: 'syz.6.283': attribute type 8 has an invalid length. [ 186.321456][ T7529] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 186.350663][ T7529] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 186.394983][ T7529] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 186.426902][ T7532] loop6: detected capacity change from 0 to 512 [ 186.439475][ T5812] hid-generic 0005:4C4A:0007.0008: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 186.461327][ T7529] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 186.519415][ T7529] netlink: 'syz.3.282': attribute type 1 has an invalid length. [ 186.544110][ T7532] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 186.624338][ T7532] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 186.702260][ T7532] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.283: Corrupt directory, running e2fsck is recommended [ 186.801117][ T7532] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -117 [ 186.837110][ T7532] EXT4-fs error (device loop6): ext4_iget_extra_inode:4740: inode #15: comm syz.6.283: corrupted in-inode xattr: invalid ea_ino [ 186.887452][ T172] usb 5-1: string descriptor 0 read error: -71 [ 186.906780][ T7532] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.283: couldn't read orphan inode 15 (err -117) [ 186.941800][ T172] usbhid 5-1:0.9: couldn't find an input interrupt endpoint [ 186.981894][ T7532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 186.998171][ T172] usb 5-1: USB disconnect, device number 11 [ 187.112683][ T7532] EXT4-fs warning (device loop6): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 187.196661][ T8] usb 6-1: USB disconnect, device number 3 [ 187.241605][ T7544] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 187.261619][ T7532] EXT4-fs warning (device loop6): dx_probe:881: Enable large directory feature to access it [ 187.323169][ T7532] EXT4-fs warning (device loop6): dx_probe:966: inode #2: comm syz.6.283: Corrupt directory, running e2fsck is recommended [ 187.434831][ T7548] loop5: detected capacity change from 0 to 4096 [ 187.452777][ T7348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 188.176642][ T7546] loop4: detected capacity change from 0 to 32768 [ 188.206297][ T7554] netlink: 4 bytes leftover after parsing attributes in process `syz.6.289'. [ 188.241829][ T7546] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.286 (7546) [ 188.279719][ T7560] fuse: Bad value for 'fd' [ 188.288320][ T7554] batadv1: entered promiscuous mode [ 188.321984][ T7554] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 188.364955][ T7546] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.380949][ T7560] mmap: syz.3.291 (7560) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 188.457687][ T7546] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 188.543873][ T7546] BTRFS warning (device loop4): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 188.633811][ T7546] BTRFS info (device loop4): setting nodatasum [ 188.672829][ T7567] loop6: detected capacity change from 0 to 1764 [ 188.689642][ T7546] BTRFS info (device loop4): enabling ssd optimizations [ 188.729273][ T7546] BTRFS info (device loop4): using spread ssd allocation scheme [ 188.815186][ T7546] BTRFS info (device loop4): use zlib compression, level 3 [ 188.822415][ T7546] BTRFS info (device loop4): turning on flush-on-commit [ 188.909111][ T7573] loop5: detected capacity change from 0 to 1024 [ 188.943436][ T7546] BTRFS error (device loop4): unrecognized metadata_ratio value 0x0000000100000000 [ 189.018425][ T7546] BTRFS error (device loop4): open_ctree failed: -34 [ 189.189365][ T3465] hfsplus: bad catalog file entry [ 189.272680][ T7583] loop3: detected capacity change from 0 to 512 [ 189.314343][ T172] hid-generic 0005:4C4A:0007.0009: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 189.368459][ T7175] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by udevd (7175) [ 189.406245][ T7583] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 189.498972][ T7583] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 189.511002][ T172] kernel write not supported for file /uinput (pid: 172 comm: kworker/0:2) [ 189.602135][ T7583] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.297: Corrupt directory, running e2fsck is recommended [ 189.700315][ T7592] loop5: detected capacity change from 0 to 4096 [ 189.725673][ T7583] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -117 [ 189.765749][ T7592] ntfs3: loop5: Different NTFS sector size (4096) and media sector size (512). [ 189.774755][ T7592] ntfs3: loop5: RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only. [ 189.794282][ T7583] EXT4-fs error (device loop3): ext4_iget_extra_inode:4740: inode #15: comm syz.3.297: corrupted in-inode xattr: invalid ea_ino [ 189.921604][ T7583] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.297: couldn't read orphan inode 15 (err -117) [ 190.029050][ T7583] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 190.083127][ T7592] bridge_slave_0: left allmulticast mode [ 190.113363][ T7592] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.217839][ T7583] EXT4-fs warning (device loop3): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 190.312540][ T7583] EXT4-fs warning (device loop3): dx_probe:881: Enable large directory feature to access it [ 190.379688][ T7583] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.297: Corrupt directory, running e2fsck is recommended [ 190.465435][ T8] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 190.551015][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.705464][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 190.739012][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.782732][ T8] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 190.839667][ T8] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 190.903748][ T8] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 190.962509][ T8] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 191.012971][ T8] usb 6-1: string descriptor 0 read error: -22 [ 191.029268][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 191.088544][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.443228][ T8] cdc_ncm 6-1:1.0: bind() failure [ 191.480052][ T8] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 191.527301][ T8] cdc_ncm 6-1:1.1: bind() failure [ 191.578934][ T8] usb 6-1: USB disconnect, device number 4 [ 193.961520][ T7695] loop4: detected capacity change from 0 to 32768 [ 193.998371][ T7695] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.329 (7695) [ 194.116579][ T7695] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 194.171339][ T7695] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 194.234827][ T7695] BTRFS info (device loop4): enabling auto defrag [ 194.279652][ T7695] BTRFS info (device loop4): force clearing of disk cache [ 194.335468][ T7695] BTRFS info (device loop4): disabling log replay at mount time [ 194.364552][ T27] kauditd_printk_skb: 3 callbacks suppressed [ 194.364562][ T27] audit: type=1326 audit(1786403146.574:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 194.424693][ T7695] BTRFS info (device loop4): turning on async discard [ 194.433383][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.443085][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.464148][ T7695] BTRFS info (device loop4): setting nodatacow, compression disabled [ 194.493669][ T7695] BTRFS info (device loop4): turning off async discard [ 194.534414][ T7695] BTRFS info (device loop4): disabling free space tree [ 194.551711][ T27] audit: type=1326 audit(1786403146.614:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 194.618749][ T7695] BTRFS info (device loop4): disabling tree log [ 194.629125][ T7721] kvm: kvm [7720]: vcpu0, guest rIP: 0x55d80 Unhandled WRMSR(0x186) = 0xd637fe [ 194.660151][ T7695] BTRFS info (device loop4): enabling disk space caching [ 194.695379][ T7695] BTRFS info (device loop4): disk space caching is enabled [ 194.724952][ T27] audit: type=1326 audit(1786403146.674:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 194.820081][ T27] audit: type=1326 audit(1786403146.674:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 194.997623][ T27] audit: type=1326 audit(1786403146.674:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 195.177677][ T6026] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 195.205994][ T27] audit: type=1326 audit(1786403146.724:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58b555e90e code=0x7ffc0000 [ 195.388742][ T27] audit: type=1326 audit(1786403146.724:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58b555e90e code=0x7ffc0000 [ 195.595911][ T27] audit: type=1326 audit(1786403146.724:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58b555e90e code=0x7ffc0000 [ 195.795204][ T27] audit: type=1326 audit(1786403146.724:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58b555e90e code=0x7ffc0000 [ 196.000035][ T27] audit: type=1326 audit(1786403146.724:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7716 comm="syz.5.336" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58b555e90e code=0x7ffc0000 [ 198.510544][ T7777] loop6: detected capacity change from 0 to 512 [ 198.518157][ T7777] EXT4-fs: Ignoring removed orlov option [ 198.547903][ T7777] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a803c02c, mo2=0002] [ 198.556055][ T7777] System zones: 1-12 [ 198.576810][ T7777] EXT4-fs error (device loop6): ext4_xattr_inode_iget:446: comm syz.6.347: error while reading EA inode 32 err=-116 [ 198.596024][ T7777] EXT4-fs (loop6): Remounting filesystem read-only [ 198.602671][ T7777] EXT4-fs (loop6): 1 orphan inode deleted [ 198.609166][ T7777] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 198.767086][ T7348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.816595][ T7784] loop5: detected capacity change from 0 to 1024 [ 198.890274][ T7784] EXT4-fs (loop5): Can't support bigalloc feature without extents feature [ 198.890274][ T7784] [ 198.959861][ T7784] EXT4-fs (loop5): couldn't mount as ext2 due to feature incompatibilities [ 198.984449][ T7786] loop6: detected capacity change from 0 to 512 [ 199.065922][ T7786] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.349: inode has both inline data and extents flags [ 199.168779][ T7786] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.349: couldn't read orphan inode 15 (err -117) [ 199.214633][ T7786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.432982][ T7348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.272748][ T7808] syz_tun: entered allmulticast mode [ 200.300082][ T7805] syz_tun: left allmulticast mode [ 200.913908][ T7812] loop6: detected capacity change from 0 to 1024 [ 201.623334][ T5769] Bluetooth: hci2: command 0x0406 tx timeout [ 202.005788][ T7815] netlink: 36 bytes leftover after parsing attributes in process `syz.3.355'. [ 202.567654][ T7830] syzkaller0: entered promiscuous mode [ 202.599440][ T7830] syzkaller0: entered allmulticast mode [ 202.911494][ T7834] netlink: 12 bytes leftover after parsing attributes in process `syz.6.363'. [ 203.204033][ T7838] loop6: detected capacity change from 0 to 2048 [ 203.278671][ T7838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.504571][ T7348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.068256][ T7857] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 204.228319][ T7858] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 204.425278][ T7864] netlink: 20 bytes leftover after parsing attributes in process `syz.6.372'. [ 204.465857][ T5812] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 204.675238][ T5812] usb 6-1: Using ep0 maxpacket: 16 [ 204.689279][ T7860] netlink: 28 bytes leftover after parsing attributes in process `syz.5.370'. [ 204.749077][ T5812] usb 6-1: unable to get BOS descriptor or descriptor too short [ 204.776596][ T5812] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 204.795158][ T5812] usb 6-1: can't read configurations, error -71 [ 206.401742][ T7764] net_ratelimit: 3255 callbacks suppressed [ 206.401756][ T7764] Set syz0 is full, maxelem 65536 reached [ 207.033486][ T7896] syzkaller0: entered promiscuous mode [ 207.077018][ T7896] syzkaller0: entered allmulticast mode [ 208.745526][ T7906] loop4: detected capacity change from 0 to 1024 [ 208.862976][ T7909] loop3: detected capacity change from 0 to 1024 [ 209.265772][ T7916] netlink: 36 bytes leftover after parsing attributes in process `syz.4.392'. [ 209.684398][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.5.394'. [ 209.992040][ T7927] loop6: detected capacity change from 0 to 2048 [ 210.109134][ T7927] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 210.288314][ T7348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.412620][ T7940] loop5: detected capacity change from 0 to 256 [ 210.693753][ T7945] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 210.720079][ T7946] loop3: detected capacity change from 0 to 128 [ 210.774842][ T7948] loop4: detected capacity change from 0 to 1024 [ 210.855361][ T7945] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 210.900230][ T7172] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 211.131469][ T7953] syzkaller0: entered promiscuous mode [ 211.173065][ T7953] syzkaller0: entered allmulticast mode [ 211.207851][ T7958] netlink: 12 bytes leftover after parsing attributes in process `syz.4.406'. [ 211.526712][ T7962] loop4: detected capacity change from 0 to 2048 [ 211.599853][ T7962] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 211.783275][ T6026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 212.042418][ T7972] netlink: 36 bytes leftover after parsing attributes in process `syz.5.411'. [ 212.210614][ T7977] loop3: detected capacity change from 0 to 256 [ 212.747262][ T7979] loop3: detected capacity change from 0 to 32768 [ 212.831157][ T7979] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 214.386431][ T5773] ocfs2: Unmounting device (7,3) on (node local) [ 214.903426][ T8002] netlink: 12 bytes leftover after parsing attributes in process `syz.3.416'. [ 215.222570][ T8007] loop3: detected capacity change from 0 to 2048 [ 215.276612][ T8011] loop6: detected capacity change from 0 to 1024 [ 215.319749][ T8011] EXT4-fs: Ignoring removed orlov option [ 215.331920][ T8007] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.387329][ T8009] loop5: detected capacity change from 0 to 4096 [ 215.441728][ T8009] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512). [ 215.450992][ T27] kauditd_printk_skb: 14 callbacks suppressed [ 215.451001][ T27] audit: type=1326 audit(1786403167.654:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 215.514459][ T8011] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.572027][ T5773] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.612838][ T8009] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 215.671550][ T27] audit: type=1326 audit(1786403167.654:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 215.788595][ T7348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.865601][ T27] audit: type=1326 audit(1786403167.654:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 216.078817][ T27] audit: type=1326 audit(1786403167.654:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 216.253126][ T27] audit: type=1326 audit(1786403167.704:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfb6797e57 code=0x7ffc0000 [ 216.421360][ T27] audit: type=1326 audit(1786403167.704:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfb673f459 code=0x7ffc0000 [ 216.598659][ T27] audit: type=1326 audit(1786403167.704:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 216.768567][ T27] audit: type=1326 audit(1786403167.704:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 216.924356][ T27] audit: type=1326 audit(1786403167.704:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 216.974037][ T8042] loop6: detected capacity change from 0 to 1024 [ 217.167641][ T7175] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 217.415468][ T27] audit: type=1326 audit(1786403167.704:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.415" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 218.307117][ T8040] loop3: detected capacity change from 0 to 40427 [ 218.340365][ T8040] F2FS-fs (loop3): Invalid log sectors per block(1) log sectorsize(9) [ 218.377777][ T8068] loop6: detected capacity change from 0 to 1024 [ 218.416916][ T8040] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 218.426110][ T8070] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 218.468119][ T8040] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x7ffff [ 218.562348][ T8040] F2FS-fs (loop3): Image doesn't support compression [ 218.631011][ T8040] F2FS-fs (loop3): Image doesn't support compression [ 218.641881][ T8070] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 218.703481][ T8040] F2FS-fs (loop3): invalid crc value [ 218.739218][ T8040] F2FS-fs (loop3): Found nat_bits in checkpoint [ 218.890072][ T8040] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 218.960854][ T8040] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 219.206414][ T5773] F2FS-fs (loop3): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4c3/0x1910 [ 219.292980][ T5773] F2FS-fs (loop3): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 221.931076][ T8101] loop3: detected capacity change from 0 to 1024 [ 222.496820][ T8114] loop6: detected capacity change from 0 to 2048 [ 222.592102][ T8114] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 222.809493][ T7348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.150259][ T8128] loop5: detected capacity change from 0 to 40427 [ 224.195179][ T8128] F2FS-fs (loop5): Invalid log sectors per block(1) log sectorsize(9) [ 224.234937][ T8128] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 224.287332][ T8128] F2FS-fs (loop5): build fault injection attr: rate: 690, type: 0x7ffff [ 224.345224][ T8128] F2FS-fs (loop5): Image doesn't support compression [ 224.352169][ T8128] F2FS-fs (loop5): Image doesn't support compression [ 224.422601][ T8128] F2FS-fs (loop5): invalid crc value [ 224.481688][ T8128] F2FS-fs (loop5): Found nat_bits in checkpoint [ 226.910775][ T8165] loop6: detected capacity change from 0 to 1024 [ 226.982162][ T8165] EXT4-fs: Ignoring removed orlov option [ 227.106848][ T8165] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 227.206613][ T5769] Bluetooth: hci3: command 0x0406 tx timeout [ 227.306103][ T7348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.263000][ T8184] loop4: detected capacity change from 0 to 40427 [ 228.349450][ T8184] F2FS-fs (loop4): Invalid log sectors per block(1) log sectorsize(9) [ 228.401640][ T8184] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 228.466062][ T8184] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 228.520354][ T8184] F2FS-fs (loop4): Image doesn't support compression [ 228.560500][ T8184] F2FS-fs (loop4): Image doesn't support compression [ 228.567437][ T172] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 229.357014][ T8184] F2FS-fs (loop4): invalid crc value [ 229.457781][ T8184] F2FS-fs (loop4): Found nat_bits in checkpoint [ 229.535078][ T172] usb 6-1: Using ep0 maxpacket: 16 [ 229.589839][ T172] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 229.649856][ T8184] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 230.178423][ T172] usb 6-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 230.343221][ T8184] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 230.367878][ T172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.429823][ T172] usb 6-1: config 0 descriptor?? [ 230.553241][ T6026] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4c3/0x1910 [ 230.638551][ T6026] F2FS-fs (loop4): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 231.395297][ T172] usb 6-1: can't set config #0, error -71 [ 231.433679][ T172] usb 6-1: USB disconnect, device number 7 [ 233.226011][ T8246] loop4: detected capacity change from 0 to 1024 [ 233.269248][ T8246] EXT4-fs: Ignoring removed orlov option [ 233.363138][ T8246] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.533053][ T6026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.903416][ T8239] loop6: detected capacity change from 0 to 40427 [ 234.145488][ T8239] F2FS-fs (loop6): Invalid log sectors per block(1) log sectorsize(9) [ 234.197076][ T8239] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 234.251288][ T8239] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 234.302087][ T8239] F2FS-fs (loop6): Image doesn't support compression [ 234.336997][ T8239] F2FS-fs (loop6): Image doesn't support compression [ 234.360873][ T8239] F2FS-fs (loop6): invalid crc value [ 234.379683][ T8239] F2FS-fs (loop6): Found nat_bits in checkpoint [ 234.514944][ T8239] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 234.542839][ T8239] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 234.978553][ T7348] F2FS-fs (loop6): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x4c3/0x1910 [ 235.058210][ T7348] F2FS-fs (loop6): invalid blkaddr: 1535, type: 10, run fsck to fix. [ 235.168702][ T8277] loop4: detected capacity change from 0 to 1024 [ 235.232075][ T8277] EXT4-fs: Ignoring removed orlov option [ 235.328004][ T8277] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 235.537283][ T6026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.144202][ T8387] netlink: 60 bytes leftover after parsing attributes in process `syz.6.553'. [ 242.493347][ T8451] netlink: 164 bytes leftover after parsing attributes in process `syz.3.575'. [ 242.521882][ T8449] CUSE: unknown device info "n|zQC*" [ 242.632778][ T8449] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 242.822178][ T8449] CUSE: unknown device info "" [ 242.848541][ T8449] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 242.957936][ T8449] CUSE: DEVNAME unspecified [ 248.244557][ T8541] loop3: detected capacity change from 0 to 8192 [ 248.683561][ T5773] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1) [ 248.747284][ T5773] FAT-fs (loop3): Filesystem has been set read-only [ 249.731217][ T27] kauditd_printk_skb: 59 callbacks suppressed [ 249.731227][ T27] audit: type=1326 audit(1786403201.944:621): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 249.948287][ T8582] UBIFS error (pid: 8582): cannot open "./file0", error -22 [ 250.087815][ T27] audit: type=1326 audit(1786403201.944:622): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 250.275240][ T27] audit: type=1326 audit(1786403201.944:623): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 250.402305][ T27] audit: type=1326 audit(1786403201.944:624): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58b555e90e code=0x7ffc0000 [ 250.580062][ T8594] loop3: detected capacity change from 0 to 128 [ 250.626738][ T27] audit: type=1326 audit(1786403202.164:625): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f58b5597e57 code=0x7ffc0000 [ 250.827071][ T27] audit: type=1326 audit(1786403202.164:626): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58b553f459 code=0x7ffc0000 [ 250.961383][ T27] audit: type=1326 audit(1786403202.164:627): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 251.228461][ T27] audit: type=1326 audit(1786403202.164:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f58b5597e57 code=0x7ffc0000 [ 251.633111][ T8590] loop6: detected capacity change from 0 to 32768 [ 251.644377][ T27] audit: type=1326 audit(1786403202.164:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58b553f459 code=0x7ffc0000 [ 251.713480][ T8590] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.628 (8590) [ 251.813543][ T8590] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 251.834480][ T27] audit: type=1326 audit(1786403202.164:630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.5.610" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 251.900536][ T8590] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 251.968769][ T8590] BTRFS info (device loop6): enabling auto defrag [ 252.019316][ T8590] BTRFS info (device loop6): force clearing of disk cache [ 252.056173][ T8590] BTRFS info (device loop6): disabling log replay at mount time [ 252.063865][ T8590] BTRFS info (device loop6): turning on async discard [ 252.138433][ T8590] BTRFS info (device loop6): setting nodatacow, compression disabled [ 252.146684][ T172] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 252.174507][ T8590] BTRFS info (device loop6): turning off async discard [ 252.227597][ T8590] BTRFS info (device loop6): disabling free space tree [ 252.234488][ T8590] BTRFS info (device loop6): disabling tree log [ 252.296507][ T8590] BTRFS info (device loop6): enabling disk space caching [ 252.355130][ T172] usb 6-1: Using ep0 maxpacket: 8 [ 252.368844][ T8590] BTRFS info (device loop6): disk space caching is enabled [ 252.381351][ T172] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 252.415730][ T172] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.477308][ T172] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 252.539574][ T172] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 252.614817][ T8646] vim2m vim2m.0: Fourcc format (0x42474752) invalid. [ 252.623056][ T172] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 252.692083][ T7348] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 252.715332][ T172] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 252.868661][ T172] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.419898][ T172] usb 6-1: usb_control_msg returned -32 [ 253.456628][ T172] usbtmc 6-1:16.0: can't read capabilities [ 253.636218][ T172] usb 6-1: USB disconnect, device number 8 [ 255.315562][ T8676] loop3: detected capacity change from 0 to 4096 [ 255.336608][ T8683] loop5: detected capacity change from 0 to 128 [ 255.418278][ T8676] ntfs3: loop3: Failed to initialize $Extend/$Reparse. [ 255.562452][ T8676] ntfs3: loop3: failed to convert "0000" to iso8859-1 [ 255.605851][ T8676] ntfs3: loop3: failed to convert name for inode 1e. [ 255.848636][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.854963][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.079453][ T8682] CUSE: unknown device info "n|zQC*" [ 256.131323][ T8682] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 256.232481][ T8682] CUSE: unknown device info "" [ 256.278482][ T8682] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 256.331813][ T8686] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.356947][ T8682] CUSE: DEVNAME unspecified [ 256.382153][ T27] kauditd_printk_skb: 137 callbacks suppressed [ 256.382163][ T27] audit: type=1326 audit(1786403208.594:768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 256.546947][ T27] audit: type=1326 audit(1786403208.634:769): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f58b5597e57 code=0x7ffc0000 [ 256.684602][ T27] audit: type=1326 audit(1786403208.634:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58b553f459 code=0x7ffc0000 [ 256.833098][ T27] audit: type=1326 audit(1786403208.634:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 257.004589][ T27] audit: type=1326 audit(1786403208.634:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 257.151255][ T27] audit: type=1326 audit(1786403208.634:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58b555e90e code=0x7ffc0000 [ 257.297563][ T27] audit: type=1326 audit(1786403208.634:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 257.449162][ T27] audit: type=1326 audit(1786403208.634:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f58b5597e57 code=0x7ffc0000 [ 257.584342][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.596373][ T27] audit: type=1326 audit(1786403208.634:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58b553f459 code=0x7ffc0000 [ 257.738452][ T8686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.746271][ T27] audit: type=1326 audit(1786403208.634:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8687 comm="syz.5.651" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 258.909814][ T8686] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.960069][ T8686] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.997311][ T8686] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.050727][ T8686] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.297965][ T8760] 0x000000000007-0x000000020000 : "" [ 262.310994][ T8760] ftl_cs: FTL header corrupt! [ 266.385324][ T5812] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 267.117795][ T5812] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 267.151946][ T5812] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 267.201180][ T5812] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 267.253800][ T5812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 267.319902][ T5812] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 267.456480][ T5812] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 267.510710][ T5812] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 267.578221][ T5812] usb 5-1: Product: syz [ 267.605377][ T5812] usb 5-1: Manufacturer: syz [ 267.664373][ T5812] cdc_wdm 5-1:1.0: skipping garbage [ 267.702752][ T5812] cdc_wdm 5-1:1.0: skipping garbage [ 267.754332][ T5812] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 267.795294][ T5812] cdc_wdm 5-1:1.0: Unknown control protocol [ 268.296497][ T5812] usb 5-1: USB disconnect, device number 12 [ 268.970258][ T8863] loop6: detected capacity change from 0 to 128 [ 271.142916][ T8884] loop5: detected capacity change from 0 to 128 [ 271.195839][ T8884] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 271.290622][ T8884] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 271.310016][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 271.310028][ T27] audit: type=1326 audit(1786403223.524:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8885 comm="syz.6.714" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f700f79e0d9 code=0x0 [ 272.388526][ T8902] loop6: detected capacity change from 0 to 128 [ 273.177334][ T8917] loop6: detected capacity change from 0 to 128 [ 273.255136][ T8917] EXT4-fs (loop6): Test dummy encryption mode enabled [ 273.426399][ T8917] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 273.445217][ T8917] ext4 filesystem being mounted at /144/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 274.187741][ T8920] tty tty4: ldisc open failed (-12), clearing slot 3 [ 274.442085][ T7348] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 275.245109][ T5812] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 275.437054][ T5812] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 275.573787][ T5812] usb 4-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 275.596985][ T5812] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 275.894646][ T5812] usb 4-1: config 220 has no interface number 2 [ 275.926739][ T5812] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 277.358868][ T5812] usb 4-1: config 220 interface 0 has no altsetting 0 [ 277.398956][ T5812] usb 4-1: config 220 interface 76 has no altsetting 0 [ 277.435175][ T5812] usb 4-1: config 220 interface 1 has no altsetting 0 [ 277.479767][ T5812] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 277.520345][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.571677][ T5812] usb 4-1: Product: syz [ 277.592839][ T5812] usb 4-1: Manufacturer: syz [ 277.618818][ T5812] usb 4-1: SerialNumber: syz [ 277.867792][ T5812] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 277.874178][ T5812] usb 4-1: No valid video chain found. [ 277.939452][ T5812] usb 4-1: selecting invalid altsetting 0 [ 278.015853][ T5812] usb 4-1: selecting invalid altsetting 0 [ 278.021607][ T5812] usbtest: probe of 4-1:220.1 failed with error -22 [ 278.088747][ T27] audit: type=1326 audit(1786403230.304:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 278.128518][ T5812] usb 4-1: USB disconnect, device number 33 [ 278.245950][ T27] audit: type=1326 audit(1786403230.334:846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfb6797e57 code=0x7ffc0000 [ 278.307362][ T8979] syzkaller0: entered promiscuous mode [ 278.330256][ T8979] syzkaller0: entered allmulticast mode [ 278.364185][ T27] audit: type=1326 audit(1786403230.334:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfb673f459 code=0x7ffc0000 [ 278.531176][ T27] audit: type=1326 audit(1786403230.334:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 278.650342][ T27] audit: type=1326 audit(1786403230.334:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 278.778930][ T27] audit: type=1326 audit(1786403230.334:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 278.897010][ T27] audit: type=1326 audit(1786403230.334:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 279.012069][ T27] audit: type=1326 audit(1786403230.344:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 279.131244][ T27] audit: type=1326 audit(1786403230.344:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 279.252380][ T27] audit: type=1326 audit(1786403230.344:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8962 comm="syz.4.738" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 282.349705][ T8994] bridge_slave_1: left allmulticast mode [ 282.407273][ T8994] bridge_slave_1: left promiscuous mode [ 282.413037][ T8994] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.452576][ T8994] bond0: (slave bond_slave_0): Releasing backup interface [ 282.489423][ T8994] bond0: (slave bond_slave_1): Releasing backup interface [ 282.562706][ T9002] loop3: detected capacity change from 0 to 128 [ 282.571467][ T8994] team0: Port device team_slave_0 removed [ 282.695497][ T9002] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 282.708279][ T8994] team0: Port device team_slave_1 removed [ 282.752339][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.803196][ T9004] loop4: detected capacity change from 0 to 512 [ 282.812439][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 282.824030][ T9002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 282.844884][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.888956][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 282.898221][ T7175] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 282.919587][ T9004] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 284.961048][ T9017] syzkaller0: entered promiscuous mode [ 284.989663][ T9017] syzkaller0: entered allmulticast mode [ 285.127784][ T9020] 0x000000000007-0x000000020000 : "" [ 285.134754][ T9020] ftl_cs: FTL header corrupt! [ 285.453009][ T9030] netlink: 164 bytes leftover after parsing attributes in process `syz.6.760'. [ 285.465272][ T5834] IPVS: starting estimator thread 0... [ 285.506231][ T5812] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 285.561442][ T9031] IPVS: using max 36 ests per chain, 86400 per kthread [ 285.710595][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 285.754013][ T5812] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 285.799867][ T5812] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 285.865389][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.911154][ T5812] usb 5-1: config 0 descriptor?? [ 286.373019][ T5812] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 286.422673][ T5812] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 286.461769][ T5812] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 286.523309][ T5812] cp2112 0003:10C4:EA90.000A: unknown main item tag 0x0 [ 286.566762][ T5812] cp2112 0003:10C4:EA90.000A: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 286.716508][ T5812] cp2112 0003:10C4:EA90.000A: Part Number: 0x00 Device Version: 0x00 [ 286.889176][ T6785] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 287.031645][ T5812] cp2112 0003:10C4:EA90.000A: error requesting SMBus config [ 287.061296][ T5812] cp2112: probe of 0003:10C4:EA90.000A failed with error -32 [ 287.085267][ T6785] usb 4-1: Using ep0 maxpacket: 32 [ 287.112518][ T6785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 287.136815][ T6785] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.160303][ T6785] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 287.188820][ T6785] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.219355][ T6785] usb 4-1: config 0 descriptor?? [ 287.242916][ T6785] hub 4-1:0.0: USB hub found [ 287.448455][ T6785] hub 4-1:0.0: 1 port detected [ 288.084648][ T5812] hub 4-1:0.0: activate --> -90 [ 288.297512][ T5812] usb 4-1: USB disconnect, device number 34 [ 288.304594][ T6785] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 288.373895][ T6785] usb 5-1: USB disconnect, device number 13 [ 288.856878][ T6785] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 289.285597][ T6785] usb 5-1: Using ep0 maxpacket: 32 [ 289.313307][ T6785] usb 5-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 289.324642][ T6785] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 289.342995][ T6785] usb 5-1: Product: syz [ 289.350718][ T6785] usb 5-1: Manufacturer: syz [ 289.373039][ T6785] usb 5-1: SerialNumber: syz [ 289.389399][ T6785] usb 5-1: config 0 descriptor?? [ 289.409398][ T6785] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 289.429240][ T6785] dvb-usb: bulk message failed: -22 (2/0) [ 289.451966][ T6785] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 289.492938][ T6785] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 289.511921][ T6785] usb 5-1: media controller created [ 289.550734][ T6785] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 289.599382][ T6785] usb 5-1: selecting invalid altsetting 7 [ 289.619657][ T6785] cxusb: set interface failed [ 289.636515][ T9049] dvb-usb: bulk message failed: -22 (3/0) [ 289.658785][ T6785] dvb-usb: bulk message failed: -22 (1/0) [ 289.734422][ T6785] DVB: Unable to find symbol lgdt330x_attach() [ 289.751385][ T6785] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 289.985185][ T6785] rc_core: IR keymap rc-dvico-portable not found [ 290.026684][ T6785] Registered IR keymap rc-empty [ 290.066550][ T6785] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0 [ 290.135536][ T6785] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input11 [ 290.216758][ T6785] dvb-usb: schedule remote query interval to 100 msecs. [ 290.253576][ T5812] IPVS: starting estimator thread 0... [ 290.265953][ T9069] netlink: 164 bytes leftover after parsing attributes in process `syz.3.771'. [ 290.309394][ T6785] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 290.405120][ T9070] IPVS: using max 36 ests per chain, 86400 per kthread [ 291.021960][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 291.067015][ T6785] usb 5-1: USB disconnect, device number 14 [ 291.945539][ T9076] syzkaller0: entered promiscuous mode [ 292.018442][ T9076] syzkaller0: entered allmulticast mode [ 292.051030][ T6785] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 292.325368][ T5812] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 292.423669][ T9086] syzkaller0: entered promiscuous mode [ 292.449899][ T9086] syzkaller0: entered allmulticast mode [ 292.528859][ T5812] usb 4-1: config index 0 descriptor too short (expected 65183, got 72) [ 292.576848][ T5812] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 293.276708][ T9092] 0x000000000007-0x000000020000 : "" [ 293.881324][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.925088][ T5812] usb 4-1: Product: syz [ 293.945609][ T5812] usb 4-1: Manufacturer: syz [ 293.951593][ T9092] ftl_cs: FTL header corrupt! [ 293.970969][ T5812] usb 4-1: SerialNumber: syz [ 294.121785][ T5834] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 294.419384][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.443129][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.500052][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.540808][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.598163][ T9079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 294.660842][ T9079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 294.719131][ T5812] usb 4-1: USB disconnect, device number 35 [ 295.208667][ T5834] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 295.222644][ T5834] ath9k_htc: Failed to initialize the device [ 295.252013][ T5812] usb 4-1: ath9k_htc: USB layer deinitialized [ 295.625151][ T5812] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 295.825166][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 295.861340][ T5812] usb 4-1: config index 0 descriptor too short (expected 241, got 72) [ 295.892487][ T5812] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA1, skipping [ 295.927866][ T5812] usb 4-1: New USB device found, idVendor=110a, idProduct=2210, bcdDevice=bd.da [ 295.951121][ T5812] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.995637][ T5812] usb 4-1: config 0 descriptor?? [ 296.049167][ T5812] usb 4-1: can't set config #0, error -71 [ 296.089667][ T5812] usb 4-1: USB disconnect, device number 36 [ 296.112323][ T9113] loop3: detected capacity change from 0 to 128 [ 296.164765][ T9113] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 296.264254][ T9113] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 296.617702][ T9119] netlink: 164 bytes leftover after parsing attributes in process `syz.4.785'. [ 296.628873][ T5834] IPVS: starting estimator thread 0... [ 296.716250][ T9120] IPVS: using max 36 ests per chain, 86400 per kthread [ 298.375486][ T5812] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 298.580550][ T5812] usb 4-1: Using ep0 maxpacket: 32 [ 298.627387][ T5812] usb 4-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 298.639915][ T5812] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 298.660509][ T5812] usb 4-1: Product: syz [ 298.673949][ T5812] usb 4-1: Manufacturer: syz [ 298.682414][ T5812] usb 4-1: SerialNumber: syz [ 298.700398][ T5812] usb 4-1: config 0 descriptor?? [ 298.723930][ T5812] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 298.740746][ T5812] dvb-usb: bulk message failed: -22 (2/0) [ 298.759904][ T5812] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 298.783558][ T5812] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 298.803189][ T5812] usb 4-1: media controller created [ 298.843052][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 298.881465][ T5812] usb 4-1: selecting invalid altsetting 7 [ 298.898980][ T5812] cxusb: set interface failed [ 298.903688][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 298.988777][ T5812] DVB: Unable to find symbol lgdt330x_attach() [ 299.007117][ T5812] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 299.133722][ T5812] rc_core: IR keymap rc-dvico-portable not found [ 299.155924][ T5812] Registered IR keymap rc-empty [ 299.164248][ T5812] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0 [ 299.196322][ T5812] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.3/usb4/4-1/rc/rc0/input12 [ 299.220947][ T5812] dvb-usb: schedule remote query interval to 100 msecs. [ 299.239488][ T5812] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 299.278458][ T5812] usb 4-1: USB disconnect, device number 37 [ 299.352624][ T5812] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 302.667017][ T9154] syzkaller0: entered promiscuous mode [ 302.672517][ T9154] syzkaller0: entered allmulticast mode [ 302.885202][ T8] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 303.107667][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 303.147903][ T8] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.211272][ T8] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.254537][ T8] usb 4-1: config 0 interface 0 has no altsetting 0 [ 303.312292][ T8] usb 4-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 303.371636][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.406551][ T8] usb 4-1: config 0 descriptor?? [ 303.623513][ T9177] syzkaller0: entered promiscuous mode [ 303.642082][ T9177] syzkaller0: entered allmulticast mode [ 303.842772][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 303.871545][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 303.900954][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 303.923606][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 303.969139][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.007151][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.054708][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.089893][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.120752][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.148245][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.178533][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.202778][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.233405][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.259490][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.288000][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.318149][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.354868][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.382224][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.413414][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.441526][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.470182][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.497873][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.529090][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.562712][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.599937][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.648571][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.693788][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.730128][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.769319][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.807830][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.860008][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.905732][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 304.964337][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 305.022527][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 305.063204][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 305.104021][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 305.162057][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 305.213580][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 305.262398][ T8] elecom 0003:056E:00FB.000B: unknown main item tag 0x0 [ 305.323201][ T8] elecom 0003:056E:00FB.000B: hidraw0: USB HID v0.dc Device [HID 056e:00fb] on usb-dummy_hcd.3-1/input0 [ 305.442640][ T8] usb 4-1: USB disconnect, device number 38 [ 305.601333][ T9199] fido_id[9199]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 306.796422][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 307.035167][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 307.079804][ T8] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.126217][ T8] usb 7-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.175663][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 307.227358][ T8] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00 [ 307.271122][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.313362][ T8] usb 7-1: config 0 descriptor?? [ 307.392169][ T9232] netlink: 68 bytes leftover after parsing attributes in process `syz.5.823'. [ 307.775908][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 307.828260][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 307.856914][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 307.896272][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 307.926191][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 307.958908][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.000972][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.033598][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.068609][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.107238][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.138740][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.178495][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.211351][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.242387][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.275738][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.305162][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.333433][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.363235][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.380618][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.408171][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.435740][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.463076][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.483292][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.527980][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.578949][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.610233][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.750419][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 308.777799][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.085997][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.092973][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.186140][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.193146][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.291121][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.333116][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.379744][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.435332][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.442320][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.529728][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.580010][ T8] elecom 0003:056E:00FB.000C: unknown main item tag 0x0 [ 309.629106][ T8] elecom 0003:056E:00FB.000C: hidraw0: USB HID v0.dc Device [HID 056e:00fb] on usb-dummy_hcd.6-1/input0 [ 309.716141][ T8] usb 7-1: USB disconnect, device number 2 [ 309.830435][ T9257] fido_id[9257]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 309.925209][ T6397] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 310.000431][ T9258] CUSE: unknown device info "n|zQC*" [ 310.042644][ T9258] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 310.126569][ T6397] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 310.153530][ T9258] CUSE: unknown device info "" [ 310.164699][ T6397] usb 6-1: config 0 has no interface number 0 [ 310.210945][ T6397] usb 6-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x57, skipping [ 310.248161][ T9258] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 310.271289][ T6397] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 310.302948][ T6397] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 310.331656][ T9258] CUSE: DEVNAME unspecified [ 310.345735][ T6397] usb 6-1: Product: syz [ 310.366468][ T6397] usb 6-1: SerialNumber: syz [ 310.408312][ T6397] usb 6-1: config 0 descriptor?? [ 310.436291][ T6397] usbhid 6-1:0.8: couldn't find an input interrupt endpoint [ 310.679850][ T6397] usb 6-1: USB disconnect, device number 9 [ 312.280905][ T9299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.841'. [ 313.175360][ T8] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 313.193555][ T9310] CUSE: unknown device info "n|zQC*" [ 313.244262][ T9310] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 313.309715][ T9310] CUSE: unknown device info "" [ 313.368440][ T9310] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 313.390964][ T8] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 313.421592][ T8] usb 5-1: config 0 has no interface number 0 [ 313.452832][ T8] usb 5-1: config 0 interface 8 altsetting 0 has an invalid endpoint with address 0x57, skipping [ 313.474428][ T9310] CUSE: DEVNAME unspecified [ 313.496271][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 313.528928][ T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 313.556063][ T8] usb 5-1: Product: syz [ 313.560485][ T8] usb 5-1: SerialNumber: syz [ 313.632384][ T8] usb 5-1: config 0 descriptor?? [ 313.677118][ T8] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 313.915511][ T8] usb 5-1: USB disconnect, device number 15 [ 314.135411][ T6397] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 314.406733][ T6397] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 314.419306][ T6397] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 314.429984][ T6397] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 314.643436][ T6397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 314.692373][ T6397] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 314.759975][ T6397] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 314.796397][ T6397] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 314.826632][ T6397] usb 6-1: Product: syz [ 314.843501][ T6397] usb 6-1: Manufacturer: syz [ 314.860687][ T9345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.854'. [ 314.880471][ T6397] cdc_wdm 6-1:1.0: skipping garbage [ 314.893737][ T6397] cdc_wdm 6-1:1.0: skipping garbage [ 314.909295][ T6397] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 314.923812][ T6397] cdc_wdm 6-1:1.0: Unknown control protocol [ 315.165537][ T6397] usb 6-1: USB disconnect, device number 10 [ 315.250862][ T9353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.010043][ T9371] vivid-003: ================= START STATUS ================= [ 316.042494][ T9371] vivid-003: Radio HW Seek Mode: Bounded [ 316.060516][ T9371] vivid-003: Radio Programmable HW Seek: false [ 316.083536][ T9371] vivid-003: RDS Rx I/O Mode: Block I/O [ 316.102923][ T9371] vivid-003: Generate RBDS Instead of RDS: false [ 316.120888][ T9371] vivid-003: RDS Reception: true [ 316.133503][ T9371] vivid-003: RDS Program Type: 0 inactive [ 316.149426][ T9371] vivid-003: RDS PS Name: inactive [ 316.161941][ T9371] vivid-003: RDS Radio Text: inactive [ 316.178985][ T9371] vivid-003: RDS Traffic Announcement: false inactive [ 316.186008][ T9375] CUSE: unknown device info "n|zQC*" [ 316.199358][ T9371] vivid-003: RDS Traffic Program: false inactive [ 316.213404][ T9375] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 316.226044][ T9371] vivid-003: RDS Music: false inactive [ 316.236925][ T9371] vivid-003: ================== END STATUS ================== [ 316.273347][ T9375] CUSE: unknown device info "" [ 316.304431][ T9375] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 316.364661][ T9375] CUSE: DEVNAME unspecified [ 317.290087][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.296486][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.154151][ T9380] loop4: detected capacity change from 0 to 1024 [ 318.715227][ T9391] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 319.510354][ T9405] netlink: 8 bytes leftover after parsing attributes in process `syz.3.868'. [ 320.589416][ T9426] loop4: detected capacity change from 0 to 256 [ 320.683784][ T27] kauditd_printk_skb: 70 callbacks suppressed [ 320.683794][ T27] audit: type=1800 audit(1786403272.894:925): pid=9426 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.878" name="bus" dev="loop4" ino=1048635 res=0 errno=0 [ 321.506101][ T9432] CUSE: unknown device info "n|zQC*" [ 321.511940][ T9432] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 321.987211][ T9432] CUSE: unknown device info "" [ 322.024575][ T9432] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 322.108391][ T9432] CUSE: DEVNAME unspecified [ 322.141343][ T9451] kvm: pic: non byte write [ 323.333422][ T9467] syzkaller0: entered promiscuous mode [ 323.361064][ T9467] syzkaller0: entered allmulticast mode [ 324.364322][ T9488] kvm: pic: non byte write [ 324.808619][ T9491] loop5: detected capacity change from 0 to 32768 [ 324.855884][ T9491] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 324.923254][ T9491] XFS (loop5): Ending clean mount [ 325.048101][ T6627] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 325.885274][ T9504] CUSE: unknown device info "n|zQC*" [ 325.920465][ T9504] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 326.035837][ T9504] CUSE: unknown device info "" [ 326.078263][ T9504] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 326.154292][ T9504] CUSE: DEVNAME unspecified [ 328.437333][ T9526] loop3: detected capacity change from 0 to 1024 [ 330.794102][ T9569] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 330.803304][ T9569] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 331.248536][ T9575] CUSE: unknown device info "n|zQC*" [ 331.370987][ T9575] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 331.486608][ T9575] CUSE: unknown device info "" [ 333.054251][ T9575] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 333.258851][ T9575] CUSE: DEVNAME unspecified [ 334.725150][ T8] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 334.995560][ T8] usb 6-1: device descriptor read/64, error -71 [ 335.415570][ T8] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 335.597129][ T8] usb 6-1: device descriptor read/64, error -71 [ 335.754170][ T8] usb usb6-port1: attempt power cycle [ 335.826185][ T6397] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 336.255231][ T6397] usb 5-1: device descriptor read/64, error -71 [ 336.261693][ T8] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 336.310912][ T8] usb 6-1: device descriptor read/8, error -71 [ 336.535204][ T6397] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 336.585138][ T8] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 336.627685][ T8] usb 6-1: device descriptor read/8, error -71 [ 336.712151][ T6397] usb 5-1: device descriptor read/64, error -71 [ 336.760389][ T8] usb usb6-port1: unable to enumerate USB device [ 336.855399][ T6397] usb usb5-port1: attempt power cycle [ 336.969423][ T9648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.946'. [ 337.295489][ T6397] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 337.349258][ T6397] usb 5-1: device descriptor read/8, error -71 [ 337.635719][ T6397] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 337.695718][ T6397] usb 5-1: device descriptor read/8, error -71 [ 337.845820][ T6397] usb usb5-port1: unable to enumerate USB device [ 338.570579][ T9667] syzkaller0: entered promiscuous mode [ 338.626039][ T9667] syzkaller0: entered allmulticast mode [ 339.039150][ T5834] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 339.215704][ T5834] usb 7-1: device descriptor read/64, error -71 [ 339.495218][ T5834] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 339.686010][ T5834] usb 7-1: device descriptor read/64, error -71 [ 339.815298][ T5834] usb usb7-port1: attempt power cycle [ 340.031000][ T9692] syz.5.961 uses obsolete (PF_INET,SOCK_PACKET) [ 340.257030][ T5834] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 340.301140][ T5834] usb 7-1: device descriptor read/8, error -71 [ 340.585816][ T5834] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 340.630825][ T5834] usb 7-1: device descriptor read/8, error -71 [ 340.760499][ T5834] usb usb7-port1: unable to enumerate USB device [ 342.875126][ T6397] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 343.075055][ T6397] usb 7-1: device descriptor read/64, error -71 [ 343.112619][ T9721] CUSE: unknown device info "n|zQC*" [ 343.152868][ T9721] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 343.532853][ T9721] CUSE: unknown device info "" [ 343.586466][ T6397] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 343.616510][ T9721] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 343.634107][ T9731] syzkaller0: entered promiscuous mode [ 343.662821][ T9731] syzkaller0: entered allmulticast mode [ 343.669047][ T9721] CUSE: DEVNAME unspecified [ 343.785529][ T6397] usb 7-1: device descriptor read/64, error -71 [ 343.926440][ T6397] usb usb7-port1: attempt power cycle [ 344.029530][ T27] audit: type=1326 audit(1786403296.244:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 344.140163][ T27] audit: type=1326 audit(1786403296.244:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 344.256341][ T27] audit: type=1326 audit(1786403296.244:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 344.345075][ T6397] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 344.383163][ T27] audit: type=1326 audit(1786403296.274:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad9c797e57 code=0x7ffc0000 [ 344.427078][ T6397] usb 7-1: device descriptor read/8, error -71 [ 344.502584][ T27] audit: type=1326 audit(1786403296.274:930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad9c73f459 code=0x7ffc0000 [ 344.612549][ T27] audit: type=1326 audit(1786403296.274:931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 344.715643][ T6397] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 344.749142][ T27] audit: type=1326 audit(1786403296.274:932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 344.795997][ T6397] usb 7-1: device descriptor read/8, error -71 [ 344.866151][ T27] audit: type=1326 audit(1786403296.274:933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 344.935253][ T6397] usb usb7-port1: unable to enumerate USB device [ 344.997793][ T27] audit: type=1326 audit(1786403296.274:934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 345.145465][ T27] audit: type=1326 audit(1786403296.274:935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9735 comm="syz.3.975" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fad9c75e90e code=0x7ffc0000 [ 347.971766][ T9760] bridge_slave_0: left allmulticast mode [ 347.978886][ T9760] bridge_slave_0: left promiscuous mode [ 347.984605][ T9760] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.024070][ T9760] bridge_slave_1: left allmulticast mode [ 348.058747][ T9760] bridge_slave_1: left promiscuous mode [ 348.064475][ T9760] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.134668][ T9760] bond0: (slave bond_slave_0): Releasing backup interface [ 348.189423][ T9760] bond0: (slave bond_slave_1): Releasing backup interface [ 348.311555][ T9760] team0: Port device team_slave_0 removed [ 348.382707][ T9760] team0: Port device team_slave_1 removed [ 348.428818][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.481118][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.514680][ T9760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.547631][ T9760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.604471][ T9761] team0: Mode changed to "loadbalance" [ 350.425340][ T9787] binder: BINDER_SET_CONTEXT_MGR already set [ 350.431823][ T9787] binder: 9786:9787 ioctl 4018620d 2000000002c0 returned -16 [ 350.851414][ T27] kauditd_printk_skb: 66 callbacks suppressed [ 350.851498][ T27] audit: type=1326 audit(1786403303.064:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 350.927627][ T9802] syzkaller0: entered promiscuous mode [ 350.963767][ T9802] syzkaller0: entered allmulticast mode [ 351.051948][ T27] audit: type=1326 audit(1786403303.064:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 351.197757][ T27] audit: type=1326 audit(1786403303.064:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 351.337238][ T27] audit: type=1326 audit(1786403303.104:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f58b5597e57 code=0x7ffc0000 [ 351.480475][ T9814] loop5: detected capacity change from 0 to 7 [ 351.497900][ T27] audit: type=1326 audit(1786403303.104:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58b553f459 code=0x7ffc0000 [ 351.565941][ T9814] Dev loop5: unable to read RDB block 7 [ 351.584250][ T9814] loop5: unable to read partition table [ 351.639897][ T27] audit: type=1326 audit(1786403303.104:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 351.701864][ T9814] loop5: partition table beyond EOD, truncated [ 351.765296][ T9814] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 351.802211][ T27] audit: type=1326 audit(1786403303.104:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 351.985438][ T27] audit: type=1326 audit(1786403303.104:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 352.163106][ T27] audit: type=1326 audit(1786403303.104:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58b555e90e code=0x7ffc0000 [ 352.310361][ T27] audit: type=1326 audit(1786403303.104:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9791 comm="syz.5.989" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f58b555e90e code=0x7ffc0000 [ 352.865907][ T9825] binder: 9824:9825 ioctl c0306201 0 returned -14 [ 352.949599][ T9825] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 354.113165][ T9843] binder: BINDER_SET_CONTEXT_MGR already set [ 354.125550][ T9843] binder: 9842:9843 ioctl 4018620d 2000000002c0 returned -16 [ 355.577589][ T8] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 355.775179][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 355.795063][ T8] usb 5-1: no configurations [ 355.799692][ T8] usb 5-1: can't read configurations, error -22 [ 355.970581][ T8] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 356.180003][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 356.197066][ T8] usb 5-1: no configurations [ 356.209291][ T8] usb 5-1: can't read configurations, error -22 [ 356.221448][ T8] usb usb5-port1: attempt power cycle [ 356.647086][ T8] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 356.708100][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 356.739513][ T8] usb 5-1: no configurations [ 356.749160][ T8] usb 5-1: can't read configurations, error -22 [ 356.774198][ T9846] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 356.945188][ T8] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 356.994824][ T9866] loop5: detected capacity change from 0 to 2048 [ 357.008160][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 357.017315][ T27] kauditd_printk_skb: 84 callbacks suppressed [ 357.017324][ T27] audit: type=1326 audit(1786403309.234:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 357.064424][ T8] usb 5-1: no configurations [ 357.075308][ T9866] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.095401][ T9869] binder: BINDER_SET_CONTEXT_MGR already set [ 357.101418][ T9869] binder: 9868:9869 ioctl 4018620d 2000000002c0 returned -16 [ 357.109585][ T8] usb 5-1: can't read configurations, error -22 [ 357.144885][ T8] usb usb5-port1: unable to enumerate USB device [ 357.223422][ T27] audit: type=1326 audit(1786403309.274:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fad9c797e57 code=0x7ffc0000 [ 357.399966][ T27] audit: type=1326 audit(1786403309.274:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fad9c73f459 code=0x7ffc0000 [ 357.545603][ T27] audit: type=1326 audit(1786403309.274:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 357.636405][ T27] audit: type=1326 audit(1786403309.334:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 357.777984][ T27] audit: type=1326 audit(1786403309.334:1101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 357.901397][ T27] audit: type=1326 audit(1786403309.334:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 358.023543][ T27] audit: type=1326 audit(1786403309.334:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 358.156203][ T27] audit: type=1326 audit(1786403309.334:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 358.268808][ T27] audit: type=1326 audit(1786403309.334:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9860 comm="syz.3.1006" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fad9c79e0d9 code=0x7ffc0000 [ 359.177452][ T9902] bridge_slave_0: left promiscuous mode [ 359.203173][ T9902] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.249891][ T9902] bridge_slave_1: left allmulticast mode [ 359.273905][ T9902] bridge_slave_1: left promiscuous mode [ 359.311666][ T9902] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.354668][ T9902] bond0: (slave bond_slave_0): Releasing backup interface [ 359.516941][ T9902] bond0: (slave bond_slave_1): Releasing backup interface [ 359.750090][ T9907] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 359.759955][ T9907] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 359.823264][ T9902] team0: Port device team_slave_0 removed [ 359.851663][ T9902] team0: Port device team_slave_1 removed [ 359.876707][ T9902] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.913010][ T9902] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.995744][ T9903] team0: Mode changed to "loadbalance" [ 360.275395][ T9914] CUSE: unknown device info "n|zQC*" [ 360.281242][ T9914] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 360.374734][ T9914] CUSE: unknown device info "" [ 360.384840][ T9914] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 360.456165][ T9914] CUSE: DEVNAME unspecified [ 360.715118][ T6397] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 361.165128][ T6397] usb 4-1: Using ep0 maxpacket: 32 [ 361.172033][ T6397] usb 4-1: no configurations [ 361.184072][ T6397] usb 4-1: can't read configurations, error -22 [ 361.541848][ T9930] IPVS: Error connecting to the multicast addr [ 361.625498][ T6397] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 361.835264][ T6397] usb 4-1: Using ep0 maxpacket: 32 [ 361.930401][ T6397] usb 4-1: no configurations [ 361.951341][ T6397] usb 4-1: can't read configurations, error -22 [ 361.975268][ T6397] usb usb4-port1: attempt power cycle [ 362.415126][ T6397] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 362.468467][ T6397] usb 4-1: Using ep0 maxpacket: 32 [ 362.494592][ T6397] usb 4-1: no configurations [ 362.523907][ T6397] usb 4-1: can't read configurations, error -22 [ 362.726414][ T6397] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 362.819866][ T6397] usb 4-1: Using ep0 maxpacket: 32 [ 362.839034][ T6397] usb 4-1: no configurations [ 362.862151][ T6397] usb 4-1: can't read configurations, error -22 [ 362.898311][ T6397] usb usb4-port1: unable to enumerate USB device [ 363.109742][ T9966] CUSE: unknown device info "n|zQC*" [ 363.142176][ T9966] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 363.208298][ T9966] CUSE: unknown device info "" [ 363.224995][ T9966] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 363.273128][ T9966] CUSE: DEVNAME unspecified [ 363.583583][ T9971] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1041'. [ 363.875056][ T5834] usb 4-1: new full-speed USB device number 43 using dummy_hcd [ 364.086058][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 364.137662][ T5834] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 364.176736][ T5834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.213600][ T5834] usb 4-1: Product: syz [ 364.235134][ T5834] usb 4-1: Manufacturer: syz [ 364.253281][ T5834] usb 4-1: SerialNumber: syz [ 364.305729][ T5834] usb 4-1: config 0 descriptor?? [ 364.477961][ T27] kauditd_printk_skb: 96 callbacks suppressed [ 364.477971][ T27] audit: type=1326 audit(1786403316.694:1202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f79e0d9 code=0x7ffc0000 [ 364.567945][ T172] usb 4-1: USB disconnect, device number 43 [ 364.636739][ T9976] loop5: detected capacity change from 0 to 40427 [ 364.663703][ T27] audit: type=1326 audit(1786403316.694:1203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f79e0d9 code=0x7ffc0000 [ 364.710456][ T9976] F2FS-fs (loop5): Invalid SB checksum offset: 0 [ 364.750010][ T9976] F2FS-fs (loop5): Can't find valid F2FS filesystem in 2th superblock [ 364.808498][ T9976] F2FS-fs (loop5): invalid crc value [ 364.822702][ T27] audit: type=1326 audit(1786403316.694:1204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f79e0d9 code=0x7ffc0000 [ 364.971482][ T27] audit: type=1326 audit(1786403316.694:1205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f700f79e0d9 code=0x7ffc0000 [ 365.103223][ T9976] F2FS-fs (loop5): Try to recover 2th superblock, ret: 0 [ 365.137583][ T27] audit: type=1326 audit(1786403316.694:1206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f79e0d9 code=0x7ffc0000 [ 365.183586][ T9976] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 365.298526][T10007] team0: Unable to change to the same mode the team is in [ 365.327916][ T27] audit: type=1326 audit(1786403316.694:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f700f75e90e code=0x7ffc0000 [ 365.509371][ T27] audit: type=1326 audit(1786403316.734:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f700f797e57 code=0x7ffc0000 [ 365.688255][ T27] audit: type=1326 audit(1786403316.734:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f700f73f459 code=0x7ffc0000 [ 365.833121][ T27] audit: type=1326 audit(1786403316.734:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f700f79e0d9 code=0x7ffc0000 [ 365.977440][ T27] audit: type=1326 audit(1786403316.734:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9987 comm="syz.6.1047" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f700f75e90e code=0x7ffc0000 [ 366.160643][T10018] CUSE: unknown device info "n|zQC*" [ 366.215508][T10018] CUSE: unknown device info ">2a" V|#ySioL89IܥѮÇ[<^Q>nHw'0QV,${\d+" [ 366.366197][T10018] CUSE: unknown device info "" [ 366.433358][T10018] CUSE: unknown device info "LPt|%IOKu GǪ|Q(o9{u[赨" [ 366.537708][T10018] CUSE: DEVNAME unspecified [ 367.795747][T10043] team0: No ports can be present during mode change [ 367.951383][T10041] loop4: detected capacity change from 0 to 4096 [ 368.172474][T10045] kvm: pic: non byte write [ 368.209765][T10041] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 369.005117][T10055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 369.805110][ T27] kauditd_printk_skb: 100 callbacks suppressed [ 369.805119][ T27] audit: type=1326 audit(1786403322.014:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 370.280253][ T27] audit: type=1326 audit(1786403322.024:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 370.306480][T10071] team0: Unable to change to the same mode the team is in [ 370.421680][ T27] audit: type=1326 audit(1786403322.054:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f58b5597e57 code=0x7ffc0000 [ 370.509662][T10075] loop6: detected capacity change from 0 to 512 [ 370.537110][T10075] EXT4-fs: Ignoring removed nobh option [ 370.551388][ T27] audit: type=1326 audit(1786403322.054:1315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58b553f459 code=0x7ffc0000 [ 370.617430][T10075] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 370.711287][ T27] audit: type=1326 audit(1786403322.054:1316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 370.790116][T10075] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2855: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 370.883771][T10075] EXT4-fs (loop6): 1 truncate cleaned up [ 370.913905][T10075] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 370.935813][ T27] audit: type=1326 audit(1786403322.054:1317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 371.094484][ T27] audit: type=1326 audit(1786403322.054:1318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 371.251861][ T27] audit: type=1326 audit(1786403322.054:1319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58b559e0d9 code=0x7ffc0000 [ 371.386499][ T27] audit: type=1326 audit(1786403322.064:1320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f58b5597e57 code=0x7ffc0000 [ 371.485576][ T172] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 371.506603][ T27] audit: type=1326 audit(1786403322.064:1321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10058 comm="syz.5.1068" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f58b553f459 code=0x7ffc0000 [ 371.559208][ T7348] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 371.685974][ T172] usb 4-1: Using ep0 maxpacket: 32 [ 371.707573][ T172] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 371.747371][ T172] usb 4-1: config 0 has no interface number 0 [ 371.777693][ T172] usb 4-1: config 0 interface 12 has no altsetting 0 [ 371.845982][ T172] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 371.865303][ T172] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.915004][ T172] usb 4-1: Product: syz [ 371.929483][ T172] usb 4-1: Manufacturer: syz [ 371.963307][ T172] usb 4-1: SerialNumber: syz [ 371.987542][ T172] usb 4-1: config 0 descriptor?? [ 372.417222][T10095] binder: 10094:10095 unknown command 0 [ 372.435321][T10095] binder: 10094:10095 ioctl c0306201 2000000004c0 returned -22 [ 372.635305][ T8] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 372.648669][ T172] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 372.676117][ T172] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 372.701661][ T172] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 372.713323][T10102] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 372.719845][T10102] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.748319][ T172] f81534: probe of 4-1:0.12 failed with error -71 [ 372.780927][T10102] vhci_hcd vhci_hcd.0: Device attached [ 372.790834][ T172] usb 4-1: USB disconnect, device number 44 [ 372.931934][T10106] vhci_hcd vhci_hcd.0: pdev(5) rhport(1) sockfd(6) [ 372.938475][T10106] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 372.958660][ T8] usb 5-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00 [ 372.975549][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 372.992197][T10106] vhci_hcd vhci_hcd.0: Device attached [ 372.998702][ T8] usb 5-1: Product: syz [ 373.002948][T10102] vhci_hcd vhci_hcd.0: pdev(5) rhport(2) sockfd(5) [ 373.009441][T10102] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.017863][ T8] usb 5-1: Manufacturer: syz [ 373.031341][ T8] usb 5-1: SerialNumber: syz [ 373.084220][T10114] vhci_hcd vhci_hcd.0: pdev(5) rhport(3) sockfd(8) [ 373.090771][T10114] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 373.098754][ T5834] usb 43-1: new high-speed USB device number 2 using vhci_hcd [ 373.164578][T10102] vhci_hcd vhci_hcd.0: Device attached [ 373.297625][T10114] vhci_hcd vhci_hcd.0: Device attached [ 373.498636][ T8] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Unexpected init result length: 0 [ 373.697474][ T8] kalmia 5-1:1.0 (unnamed net_device) (uninitialized): Error sending init packet. Status -71 [ 373.758067][ T8] kalmia: probe of 5-1:1.0 failed with error -71 [ 373.814584][ T8] usb 5-1: USB disconnect, device number 24 [ 374.018920][T10122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.817951][ T27] kauditd_printk_skb: 91 callbacks suppressed [ 374.817960][ T27] audit: type=1326 audit(1786403327.034:1413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfb675e90e code=0x7ffc0000 [ 374.878495][T10107] vhci_hcd: connection closed [ 374.879762][T10115] vhci_hcd: connection closed [ 374.887991][T10103] vhci_hcd: connection reset by peer [ 374.903557][ T6880] vhci_hcd: stop threads [ 374.908963][T10110] vhci_hcd: connection closed [ 374.915987][T10139] binder: 10138:10139 unknown command 0 [ 374.937274][ T6880] vhci_hcd: release socket [ 374.957852][ T6880] vhci_hcd: disconnect device [ 374.971356][T10139] binder: 10138:10139 ioctl c0306201 2000000004c0 returned -22 [ 374.989895][ T6880] vhci_hcd: stop threads [ 375.004836][ T6880] vhci_hcd: release socket [ 375.012971][ T27] audit: type=1326 audit(1786403327.074:1414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfb6797e57 code=0x7ffc0000 [ 375.057499][ T6880] vhci_hcd: disconnect device [ 375.089497][ T6880] vhci_hcd: stop threads [ 375.107054][ T6880] vhci_hcd: release socket [ 375.127828][ T6880] vhci_hcd: disconnect device [ 375.158075][ T6880] vhci_hcd: stop threads [ 375.165504][ T27] audit: type=1326 audit(1786403327.074:1415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfb673f459 code=0x7ffc0000 [ 375.211020][ T6880] vhci_hcd: release socket [ 375.235204][ T6880] vhci_hcd: disconnect device [ 375.292295][ T27] audit: type=1326 audit(1786403327.074:1416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 375.420959][ T27] audit: type=1326 audit(1786403327.074:1417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbfb6797e57 code=0x7ffc0000 [ 375.554182][ T27] audit: type=1326 audit(1786403327.074:1418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbfb673f459 code=0x7ffc0000 [ 375.736920][ T27] audit: type=1326 audit(1786403327.074:1419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbfb679e0d9 code=0x7ffc0000 [ 375.911533][ T27] audit: type=1326 audit(1786403327.074:1420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfb675e90e code=0x7ffc0000 [ 376.043821][ T27] audit: type=1326 audit(1786403327.074:1421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfb675e90e code=0x7ffc0000 [ 376.160823][ T27] audit: type=1326 audit(1786403327.074:1422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10128 comm="syz.4.1088" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbfb675e90e code=0x7ffc0000 [ 376.255241][ T172] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 376.746224][ T172] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 376.773436][ T172] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 376.813485][ T172] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 376.858536][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.908014][T10152] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 377.074561][ T172] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 377.523224][ T6397] usb 4-1: USB disconnect, device number 45 [ 377.840306][T10171] capability: warning: `syz.5.1100' uses 32-bit capabilities (legacy support in use) [ 377.975164][ T6397] usb 4-1: new full-speed USB device number 46 using dummy_hcd [ 378.189311][ T6397] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 378.226276][T10177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.246283][ T6397] usb 4-1: config 0 has no interfaces? [ 378.252699][ T5834] vhci_hcd: vhci_device speed not set [ 378.278259][ T6397] usb 4-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 378.304279][ T6397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.337502][ T6397] usb 4-1: Product: syz [ 378.341687][ T6397] usb 4-1: Manufacturer: syz [ 378.380185][ T6397] usb 4-1: SerialNumber: syz [ 378.391687][ T6397] usb 4-1: config 0 descriptor?? [ 378.692202][ T8] usb 4-1: USB disconnect, device number 46 [ 378.740940][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.755632][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.885812][T10181] loop4: detected capacity change from 0 to 512 [ 378.916860][ T6397] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 378.941706][T10181] EXT4-fs warning (device loop4): ext4_xattr_inode_get:560: inode #11: comm syz.4.1105: EA inode hash validation failed [ 378.986993][T10181] EXT4-fs error (device loop4): ext4_do_update_inode:5256: inode #15: comm syz.4.1105: corrupted inode contents [ 379.044267][T10181] EXT4-fs (loop4): Remounting filesystem read-only [ 379.065018][T10181] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -5) [ 379.087798][T10181] EXT4-fs (loop4): 1 orphan inode deleted [ 379.115124][ T6397] usb 7-1: device descriptor read/64, error -71 [ 379.125859][T10181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 379.158861][T10187] loop5: detected capacity change from 0 to 128 [ 379.183666][T10187] EXT4-fs (loop5): Test dummy encryption mode enabled [ 379.242767][T10187] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 379.329201][T10187] ext4 filesystem being mounted at /199/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 379.350505][ T6026] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 379.390628][T10190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 379.533414][ T6397] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 379.855060][ T6397] usb 7-1: device descriptor read/64, error -71 [ 379.950092][T10195] loop4: detected capacity change from 0 to 2048 [ 380.040586][ T6397] usb usb7-port1: attempt power cycle [ 380.082505][ T6627] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.098432][T10195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 380.495472][ T6397] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 380.568989][ T6397] usb 7-1: device descriptor read/8, error -71 [ 380.748809][T10215] binder: 10214:10215 unknown command 0 [ 380.767684][T10215] binder: 10214:10215 ioctl c0306201 2000000004c0 returned -22 [ 380.795528][ T5812] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 380.855523][ T6397] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 380.905092][ T6397] usb 7-1: device descriptor read/8, error -71 [ 380.998920][ T5812] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.010590][ T5812] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 381.022120][ T5812] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 381.031907][ T5834] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 381.043311][ T6397] usb usb7-port1: unable to enumerate USB device [ 381.050203][ T5812] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.067713][ T5812] usb 5-1: config 0 descriptor?? [ 381.085848][ T5812] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 381.092546][ T5812] dvb-usb: bulk message failed: -22 (3/0) [ 381.110657][ T5812] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 381.127746][ T5812] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 381.139124][ T5812] usb 5-1: media controller created [ 381.146371][ T5812] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 381.168792][ T5812] dvb-usb: bulk message failed: -22 (6/0) [ 381.174686][ T5812] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 381.191370][ T5812] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input13 [ 381.232403][ T5812] dvb-usb: schedule remote query interval to 150 msecs. [ 381.242071][ T5834] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 381.253933][ T5812] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 381.263589][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.276446][ T5834] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.316743][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.334367][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.353707][ T5834] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.373683][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.381163][T10210] dvb-usb: bulk message failed: -22 (2/0) [ 381.392478][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.407759][ T5812] dvb-usb: bulk message failed: -22 (1/0) [ 381.418255][ T5812] dvb-usb: error while querying for an remote control event. [ 381.428700][ T6397] usb 5-1: USB disconnect, device number 25 [ 381.443129][ T5834] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.478034][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.491658][ T6397] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 381.521493][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.552965][ T5834] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.580275][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.591620][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.601039][ T5834] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.619226][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.628136][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.652149][ T5834] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.711794][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 381.740074][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 381.890163][ T5834] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 381.917841][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 382.133249][ T5834] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 382.154600][ T5834] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 382.180441][ T5834] usb 6-1: config 0 interface 0 has no altsetting 0 [ 382.200421][ T5834] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 382.229627][ T5834] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 382.263130][ T5834] usb 6-1: Product: syz [ 382.284003][ T5834] usb 6-1: Manufacturer: syz [ 382.306723][ T5834] usb 6-1: SerialNumber: syz [ 382.334232][ T5834] usb 6-1: config 0 descriptor?? [ 382.368776][ T5834] yurex 6-1:0.0: USB YUREX device now attached to Yurex #0 [ 383.899655][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 384.021131][ T5834] usb 6-1: USB disconnect, device number 15 [ 384.092954][ T5834] yurex 6-1:0.0: USB YUREX #0 now disconnected [ 384.388997][T10261] syzkaller0: entered promiscuous mode [ 384.424359][T10261] syzkaller0: entered allmulticast mode [ 384.583702][T10267] loop5: detected capacity change from 0 to 4096 [ 384.680294][T10267] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 384.769937][T10267] ntfs3: loop5: Failed to load $Extend (-22). [ 384.829014][T10267] ntfs3: loop5: Failed to initialize $Extend. [ 385.209268][T10274] autofs4:pid:10274:autofs_fill_super: called with bogus options [ 386.009153][T10284] binder: 10283:10284 unknown command 0 [ 386.031910][T10284] binder: 10283:10284 ioctl c0306201 2000000004c0 returned -22 [ 386.314779][T10293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.871357][T10310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1146'. [ 387.362508][T10320] binder: 10319:10320 unknown command 0 [ 387.388303][T10320] binder: 10319:10320 ioctl c0306201 2000000004c0 returned -22 [ 388.221403][T10322] loop5: detected capacity change from 0 to 32768 [ 388.258396][T10322] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.1151 (10322) [ 388.357530][T10322] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 388.406734][T10322] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 388.452305][T10322] BTRFS info (device loop5): setting nodatasum [ 388.555953][T10322] BTRFS info (device loop5): force zlib compression, level 3 [ 388.602453][T10322] BTRFS info (device loop5): turning on sync discard [ 388.638051][T10322] BTRFS info (device loop5): turning on flush-on-commit [ 388.685059][T10322] BTRFS info (device loop5): max_inline at 0 [ 388.691077][T10322] BTRFS info (device loop5): turning off discard [ 388.765060][T10322] BTRFS info (device loop5): using free space tree [ 388.977178][T10322] BTRFS info (device loop5): enabling ssd optimizations [ 389.231081][ T6627] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 390.349370][T10383] loop5: detected capacity change from 0 to 128 [ 390.436030][T10383] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 390.550910][T10383] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 390.904136][ T6887] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 391.873793][ T5834] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 392.070347][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.108502][ T5834] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 392.131051][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.195194][ T5834] usb 4-1: config 0 descriptor?? [ 392.527079][ T6397] usb 4-1: USB disconnect, device number 47 [ 393.421992][T10438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1182'. [ 394.654250][T10417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 395.165226][ T6397] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 395.345310][ T6397] usb 5-1: device descriptor read/64, error -71 [ 395.635203][ T6397] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 395.826917][ T6397] usb 5-1: device descriptor read/64, error -71 [ 395.998345][ T6397] usb usb5-port1: attempt power cycle [ 396.435055][ T6397] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 396.517879][T10470] loop3: detected capacity change from 0 to 32768 [ 396.524652][ T6397] usb 5-1: device descriptor read/8, error -71 [ 396.561083][T10470] (syz.3.1193,10470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 396.657867][T10470] (syz.3.1193,10470,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 396.771658][T10470] JBD2: Ignoring recovery information on journal [ 396.805649][ T6397] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 396.875753][ T6397] usb 5-1: device descriptor read/8, error -71 [ 396.889613][T10470] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 396.983409][ T3465] ocfs2: Finishing quota recovery on device (7,3) for slot 0 [ 397.022320][ T6397] usb usb5-port1: unable to enumerate USB device [ 397.132153][T10481] syzkaller0: entered promiscuous mode [ 397.163698][T10481] syzkaller0: entered allmulticast mode [ 397.192378][T10483] team0: Unable to change to the same mode the team is in [ 397.202359][T10470] [ 397.204688][T10470] ====================================================== [ 397.211699][T10470] WARNING: possible circular locking dependency detected [ 397.218705][T10470] syzkaller #0 Not tainted [ 397.223094][T10470] ------------------------------------------------------ [ 397.230098][T10470] syz.3.1193/10470 is trying to acquire lock: [ 397.236137][T10470] ffff8880616fdc78 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_init_acl+0x30a/0x770 [ 397.245562][T10470] [ 397.245562][T10470] but task is already holding lock: [ 397.252904][T10470] ffff88805e0b78e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 397.263186][T10470] [ 397.263186][T10470] which lock already depends on the new lock. [ 397.263186][T10470] [ 397.273576][T10470] [ 397.273576][T10470] the existing dependency chain (in reverse order) is: [ 397.282574][T10470] [ 397.282574][T10470] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 397.291072][T10470] down_read+0x46/0x2e0 [ 397.295830][T10470] ocfs2_start_trans+0x3a8/0x6f0 [ 397.301271][T10470] ocfs2_setattr+0xc84/0x1bf0 [ 397.306448][T10470] notify_change+0xb05/0xde0 [ 397.311562][T10470] chown_common+0x3f3/0x5b0 [ 397.316571][T10470] ksys_fchown+0xed/0x160 [ 397.321402][T10470] __x64_sys_fchown+0x7a/0x90 [ 397.326575][T10470] do_syscall_64+0x55/0xb0 [ 397.331554][T10470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.338009][T10470] [ 397.338009][T10470] -> #2 (sb_internal#2){.+.+}-{0:0}: [ 397.345460][T10470] ocfs2_start_trans+0x2a9/0x6f0 [ 397.350900][T10470] ocfs2_setattr+0xc84/0x1bf0 [ 397.356087][T10470] notify_change+0xb05/0xde0 [ 397.361175][T10470] chown_common+0x3f3/0x5b0 [ 397.366174][T10470] ksys_fchown+0xed/0x160 [ 397.371003][T10470] __x64_sys_fchown+0x7a/0x90 [ 397.376175][T10470] do_syscall_64+0x55/0xb0 [ 397.381087][T10470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.387475][T10470] [ 397.387475][T10470] -> #1 (&ocfs2_file_ip_alloc_sem_key){++++}-{3:3}: [ 397.396231][T10470] down_write+0x97/0x200 [ 397.400994][T10470] ocfs2_try_remove_refcount_tree+0xb7/0x360 [ 397.407484][T10470] ocfs2_truncate_file+0xe87/0x1530 [ 397.413200][T10470] ocfs2_setattr+0x15b8/0x1bf0 [ 397.418472][T10470] notify_change+0xb05/0xde0 [ 397.423565][T10470] do_truncate+0x1b0/0x240 [ 397.428498][T10470] path_openat+0x2a7e/0x3270 [ 397.433587][T10470] do_filp_open+0x1f2/0x430 [ 397.438587][T10470] do_sys_openat2+0x134/0x1d0 [ 397.443790][T10470] __x64_sys_openat+0x139/0x160 [ 397.449140][T10470] do_syscall_64+0x55/0xb0 [ 397.454055][T10470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.460466][T10470] [ 397.460466][T10470] -> #0 (&oi->ip_xattr_sem){++++}-{3:3}: [ 397.468278][T10470] __lock_acquire+0x37ef/0x7d80 [ 397.473671][T10470] lock_acquire+0x19e/0x420 [ 397.478678][T10470] down_read+0x46/0x2e0 [ 397.483341][T10470] ocfs2_init_acl+0x30a/0x770 [ 397.488525][T10470] ocfs2_mknod+0x1427/0x2310 [ 397.493613][T10470] ocfs2_mkdir+0x196/0x430 [ 397.498525][T10470] vfs_mkdir+0x2a5/0x470 [ 397.503283][T10470] do_mkdirat+0x1dc/0x450 [ 397.508106][T10470] __x64_sys_mkdirat+0x89/0xa0 [ 397.513363][T10470] do_syscall_64+0x55/0xb0 [ 397.518277][T10470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.524669][T10470] [ 397.524669][T10470] other info that might help us debug this: [ 397.524669][T10470] [ 397.534871][T10470] Chain exists of: [ 397.534871][T10470] &oi->ip_xattr_sem --> sb_internal#2 --> &journal->j_trans_barrier [ 397.534871][T10470] [ 397.548745][T10470] Possible unsafe locking scenario: [ 397.548745][T10470] [ 397.556166][T10470] CPU0 CPU1 [ 397.561515][T10470] ---- ---- [ 397.566854][T10470] rlock(&journal->j_trans_barrier); [ 397.572199][T10470] lock(sb_internal#2); [ 397.578940][T10470] lock(&journal->j_trans_barrier); [ 397.586723][T10470] rlock(&oi->ip_xattr_sem); [ 397.591377][T10470] [ 397.591377][T10470] *** DEADLOCK *** [ 397.591377][T10470] [ 397.599508][T10470] 8 locks held by syz.3.1193/10470: [ 397.604690][T10470] #0: ffff888050bce418 (sb_writers#15){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 397.613923][T10470] #1: ffff8880616fdf58 (&type->i_mutex_dir_key#8/1){+.+.}-{3:3}, at: filename_create+0x20f/0x450 [ 397.624544][T10470] #2: ffff888078afdf58 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 397.638170][T10470] #3: ffff888078afb498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x171/0x44a0 [ 397.651794][T10470] #4: ffff888078afc2d8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: ocfs2_reserve_local_alloc_bits+0x120/0x2620 [ 397.665680][T10470] #5: ffff888050bce608 (sb_internal#2){.+.+}-{0:0}, at: ocfs2_mknod+0xf33/0x2310 [ 397.674875][T10470] #6: ffff88805e0b78e8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a8/0x6f0 [ 397.685547][T10470] #7: ffff88802c9e4990 (jbd2_handle#2){.+.+}-{0:0}, at: start_this_handle+0x1f3f/0x2170 [ 397.695379][T10470] [ 397.695379][T10470] stack backtrace: [ 397.701243][T10470] CPU: 0 PID: 10470 Comm: syz.3.1193 Not tainted syzkaller #0 [ 397.708674][T10470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 397.718715][T10470] Call Trace: [ 397.722037][T10470] [ 397.725022][T10470] dump_stack_lvl+0x18c/0x250 [ 397.729801][T10470] ? load_image+0x420/0x420 [ 397.734353][T10470] ? show_regs_print_info+0x20/0x20 [ 397.739537][T10470] ? print_circular_bug+0x12b/0x1a0 [ 397.744722][T10470] check_noncircular+0x2fc/0x400 [ 397.749642][T10470] ? print_deadlock_bug+0x5d0/0x5d0 [ 397.754819][T10470] ? _find_first_zero_bit+0xd6/0x100 [ 397.760133][T10470] ? add_lock_to_list+0x191/0x280 [ 397.765137][T10470] __lock_acquire+0x37ef/0x7d80 [ 397.769993][T10470] ? verify_lock_unused+0x140/0x140 [ 397.775201][T10470] lock_acquire+0x19e/0x420 [ 397.779691][T10470] ? ocfs2_init_acl+0x30a/0x770 [ 397.784550][T10470] ? __might_sleep+0xe0/0xe0 [ 397.789148][T10470] ? read_lock_is_recursive+0x20/0x20 [ 397.794499][T10470] down_read+0x46/0x2e0 [ 397.798637][T10470] ? ocfs2_init_acl+0x30a/0x770 [ 397.803464][T10470] ocfs2_init_acl+0x30a/0x770 [ 397.808122][T10470] ? ocfs2_acl_chmod+0x340/0x340 [ 397.813053][T10470] ? dquot_alloc_inode+0x8ac/0xa40 [ 397.818167][T10470] ? ocfs2_journal_access+0x40/0x40 [ 397.823346][T10470] ? ocfs2_block_signals+0x9b/0xe0 [ 397.828435][T10470] ? ocfs2_metadata_cache_get_super+0x46/0x90 [ 397.834476][T10470] ? ocfs2_inode_cache_get_super+0xd/0x40 [ 397.840195][T10470] ocfs2_mknod+0x1427/0x2310 [ 397.844768][T10470] ? ocfs2_mkdir+0x430/0x430 [ 397.849343][T10470] ? ocfs2_inode_lock_tracker+0x437/0x700 [ 397.855045][T10470] ? __lock_acquire+0x7d80/0x7d80 [ 397.860050][T10470] ? do_raw_spin_lock+0x11f/0x2b0 [ 397.865074][T10470] ? ocfs2_inode_unlock_tracker+0x270/0x2e0 [ 397.870943][T10470] ? __lock_acquire+0x7d80/0x7d80 [ 397.875945][T10470] ? __rwlock_init+0x150/0x150 [ 397.880687][T10470] ? do_raw_spin_unlock+0x121/0x230 [ 397.885869][T10470] ? put_pid+0xde/0x120 [ 397.890006][T10470] ocfs2_mkdir+0x196/0x430 [ 397.894400][T10470] ? make_kgid+0x650/0x650 [ 397.898818][T10470] ? apparmor_path_mkdir+0x1b0/0x230 [ 397.904091][T10470] ? ocfs2_symlink+0x2730/0x2730 [ 397.909004][T10470] ? HAS_UNMAPPED_ID+0x101/0x170 [ 397.913922][T10470] ? ocfs2_getattr+0x3a0/0x3a0 [ 397.918662][T10470] ? inode_permission+0xf3/0x480 [ 397.923578][T10470] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 397.928595][T10470] ? security_inode_mkdir+0xb7/0x100 [ 397.933865][T10470] vfs_mkdir+0x2a5/0x470 [ 397.938088][T10470] do_mkdirat+0x1dc/0x450 [ 397.942409][T10470] ? vfs_mkdir+0x470/0x470 [ 397.946803][T10470] __x64_sys_mkdirat+0x89/0xa0 [ 397.951540][T10470] do_syscall_64+0x55/0xb0 [ 397.955933][T10470] ? clear_bhb_loop+0x40/0x90 [ 397.960585][T10470] ? clear_bhb_loop+0x40/0x90 [ 397.965238][T10470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 397.971119][T10470] RIP: 0033:0x7fad9c79cf47 [ 397.975580][T10470] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 397.995220][T10470] RSP: 002b:00007fad9a9f5e58 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 398.003658][T10470] RAX: ffffffffffffffda RBX: 00007fad9a9f5ee0 RCX: 00007fad9c79cf47 [ 398.011606][T10470] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c [ 398.019556][T10470] RBP: 0000000000000000 R08: 0000200000001a00 R09: 0000000000000000 [ 398.027518][T10470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100 [ 398.035501][T10470] R13: 00007fad9a9f5ea0 R14: 0000000000000000 R15: 0000000000000000 [ 398.043461][T10470] [ 398.172572][T10470] (syz.3.1193,10470,0):ocfs2_remount:623 ERROR: Cannot change heartbeat mode on remount [ 398.241383][ T5773] ocfs2: Unmounting device (7,3) on (node local)