last executing test programs: 21.354447058s ago: executing program 0 (id=519): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='oom_score_adj\x00') r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a0, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x1, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16, 0x0, 0xfd}]}) read$FUSE(r0, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000003c0)="0f9543c7629ceae6aae9ce4171045c400a4d1cb00f3723c6251f808c207c1f27371b0e49e2676d21ba2f3ee845c502e9339ffd0c3546713821d544f2b3991fdc7035539e8979", 0x46}, {&(0x7f0000000040)="aec37d8b", 0x4}, {&(0x7f0000000a00)="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", 0xff8}, {&(0x7f0000001a00)="4464bbaf6b149b4696693ce5d1a6fa487aff31683c7c840b9243001787baa5dba522b4650d7c60877a32bf814e8d05ff3673d49cbd3adac3525cac54438e730295834c2d9db00adcb84a4fb1f46f457dcca0b1d09816bce1649bf005fe121025c804f4f1121d504d6430d6995c7666ca3b0abc1a9d3fed624ea1bc1f3a1a5b999b86c128f14df0cee5c2d65a513c718adf5087e18c227d746c498932c0e983dee552f0adb45ffa03496539f0d7ece3a8aee6735d58131b2352e317690c349594f24069a83708ea6cbf57040b182e5c6ca7d3e05010b8f583042926844ccd377dd17ddee34434f81f929aa47de4c0", 0xee}], 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7, r7}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r7, r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 18.213955192s ago: executing program 0 (id=526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect(0x0, 0x3f, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xbb, 0x21, 0xa, 0x8, 0x7c9, 0x12, 0xf682, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x96, 0xb7, 0xa, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x5}}, {}]}}]}}]}}, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000e4ff0000000000020202000900030073797a320000000005000400020000000900010073"], 0x34}, 0x1, 0x40030000000000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@random="a5050f0000b5", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}}}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) 13.17243955s ago: executing program 3 (id=536): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='oom_score_adj\x00') r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a0, &(0x7f0000000540)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x1, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16, 0x0, 0xfd}]}) read$FUSE(r0, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000003c0)="0f9543c7629ceae6aae9ce4171045c400a4d1cb00f3723c6251f808c207c1f27371b0e49e2676d21ba2f3ee845c502e9339ffd0c3546713821d544f2b3991fdc7035539e8979", 0x46}, {&(0x7f0000000040)="aec37d8b", 0x4}, {&(0x7f0000000a00)="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", 0xff8}, {&(0x7f0000001a00)="4464bbaf6b149b4696693ce5d1a6fa487aff31683c7c840b9243001787baa5dba522b4650d7c60877a32bf814e8d05ff3673d49cbd3adac3525cac54438e730295834c2d9db00adcb84a4fb1f46f457dcca0b1d09816bce1649bf005fe121025c804f4f1121d504d6430d6995c7666ca3b0abc1a9d3fed624ea1bc1f3a1a5b999b86c128f14df0cee5c2d65a513c718adf5087e18c227d746c498932c0e983dee552f0adb45ffa03496539f0d7ece3a8aee6735d58131b2352e317690c349594f24069a83708ea6cbf57040b182e5c6ca7d3e05010b8f583042926844ccd377dd17ddee34434f81f929aa47de4c0", 0xee}], 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7, r7}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r7, r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.70987265s ago: executing program 4 (id=540): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x11, 0x0, 0x0, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYRES32=r1], 0x0}, 0x90) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/ip6_flowlabel\x00') openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x2095010, &(0x7f0000000040)={[{@norecovery}], [{@dont_appraise}]}, 0xee, 0x46e, &(0x7f0000001040)="$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") chdir(&(0x7f0000000080)='./file0\x00') r6 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) unshare(0x2c020400) msgget$private(0x0, 0x0) msgsnd(0x0, &(0x7f0000000180)=ANY=[], 0x2000, 0x0) msgsnd(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="06000000000000006a5a1568137a804ceb71242a46721ec6e909a076ff6ee39e8ce30c2df5d3cd46199e854c2465683420c6d833014615dec18da4114e2fd08b6dbe4295bd32a8af673611a9c116f7468b607a9db77c0993f0728d675d6570c52fb16508f0e618562bfeef5b004dc8ff793913973954b30c759a83e5d134b72e9a352747dbd2b17435f758733dbfa4"], 0x53, 0x0) msgctl$IPC_RMID(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15) write$FUSE_BMAP(0xffffffffffffffff, &(0x7f0000000100)={0x18}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x7, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="b580feff160400001d79f8ff00000000"], &(0x7f00000000c0)='GPL\x00', 0x7fff, 0xf5, &(0x7f00000004c0)=""/245, 0x41000, 0x18, '\x00', 0x0, 0x2a, r5, 0x8, &(0x7f0000000140)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000240)={0x4, 0xa, 0x81, 0x3}, 0x10, 0xffffffffffffffff, r3, 0x1, &(0x7f00000002c0)=[r2], &(0x7f00000005c0)=[{0x2, 0x4, 0xf, 0x2}], 0x10, 0x9}, 0x90) fstat(r4, &(0x7f00000001c0)) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) lchown(&(0x7f0000000340)='./bus\x00', r8, 0x0) fstat(r3, &(0x7f0000000340)) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) inotify_init() 11.310611366s ago: executing program 4 (id=542): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) recvfrom$unix(r2, &(0x7f0000000700)=""/257, 0x101, 0x0, 0x0, 0x0) 11.178914074s ago: executing program 0 (id=543): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x8a}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000a1f000/0x3000)=nil, 0x3000, 0x3000000, 0x8031, r0, 0x0) flock(0xffffffffffffffff, 0x5) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x24f8, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 11.038819279s ago: executing program 4 (id=544): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x14, "b5301292985ac9e03cb0cb44d4c7b5bfbeb079d8"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000200)={0x20, 0x0, 0x4c, {0x4a, "7bf4ce13512c8d1c91bf99338e527ff5a549651dc715cc9f04af9c553d3585e12d1eb3adbd1508ee93c6d7efee2d524576c33a8fa92f82f67f1c01f151fe7b024c6d019eb788ad28b4be"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x19}}) 9.333278321s ago: executing program 2 (id=545): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f0000000040)=ANY=[@ANYBLOB="840e0000", @ANYBLOB="000000000000000000000100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb2"], 0xe84}}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23f", 0x25}], 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, 0x0) ioctl$KVM_NMI(r4, 0xae9a) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc, 0x99, {0x0, 0x3e}}}}}, 0x20}}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) 9.263703697s ago: executing program 0 (id=546): openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x3200896, &(0x7f0000006340)=ANY=[@ANYBLOB='iocharset=cp936,iocharset=cp1255,grpquota,uid=', @ANYRESHEX=0x0, @ANYRES64=0x0], 0x5, 0x6172, &(0x7f0000006400)="$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") chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000040)=""/52, 0x34) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0), 0x101000, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000080)={0x0, 0x0, 0x20000}, 0x20) r6 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r6, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) open_tree(r4, &(0x7f0000000640)='\x00', 0x89901) sendmsg$tipc(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)="fb6bba8800008bc248c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf5e1e502f93ebdc2704ed6dd26eea2e37049c339b1f91201c2796170198d415bb4d17a6780b9538a38e4ec6a0be3aa02cdf1dff385752d8fd8333901592aac03943728e5a122e88061899cb61a69320708a59773c465d1eed2b86e7ceab240aa73eaaa86a844fc1e7fffa60ec73c2233a56e5229ccbb6c6452783f283b4a9d9c16b69d40a013c1c64e3ccd01b6c9d18135efaf4661269b5bfe1ce1fde2cd154c2dab46990", 0xc4}], 0x1, 0x0, 0x0, 0x24000090}, 0x0) recvmsg(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)=""/58, 0x3a}], 0x1}, 0x40fd) write$USERIO_CMD_SEND_INTERRUPT(r1, &(0x7f00000063c0)={0x2, 0x1}, 0x2) close(r3) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) 8.836215761s ago: executing program 2 (id=547): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000040)=@udp6=r2}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) unshare(0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000003300)=@mangle={'mangle\x00', 0xc061, 0x6, 0x5a8, 0x3b8, 0x1b0, 0x1b0, 0x1b0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@mcast1, @private2, [], [], 'vlan0\x00', 'pimreg1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'vlan0\x00'}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'pim6reg1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x112, 0x4) 8.714690693s ago: executing program 3 (id=548): connect$rxrpc(0xffffffffffffffff, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 7.229227413s ago: executing program 2 (id=549): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$eJzs3M1rI2UYAPB32u1+uxbx4G0HFqGFTWj6seit6i5+YJey6sGTpsk0ZDfJlCZNa08ePIoH/xNR8OTRv8GDZ2/iQfEmKJl3qls/QGma2O3vB5Nn5p03zzxvKIVnJiQA59Z8+vOPSbgRroQQZkMI10Mo9pNyK6zH8Fx5buaxLSnHfx+4GEK4GkK4MUoecyblqU9vD2+t/fDGT199c+nCtc++/HZ6qwam7fkQQncn7u93Y8xbMT4sx+vDdhG7q8MyxhPdR+VxHuN+tlVk2K8fzasXcaUV5+c7e/1R3O7UG6PYam8X4zu9eMH+sHWUp3jDw/pucdzMtorY7udFbB3Gug4O4/+2w/4g5mmW+T4o0ofB4CjG8ewgi+vZeVTERm9Qjse8eTM7GMVhGcvLhUbeaRZ1bJ3kk/5/e7Pd2ztIh9luv5330rVq7YVq7U6ltps3s0G2Wql3m3dW04VWZzStMsjq3fVWnrc6WbWRdxfThVajUanV0oW72Va73ktrtepKdamytlju3U5fvf9O2mmmC6P4cru3N2h3+ul2vpvGdyymy9WVFxfTW7X0rY3NdPPBvXsbm2+/d/fd+y9tvP5KOekvZaULy0vLy5XaUmW5tniO1v9RWfQY1w8nkky7AICz57/2/zf1/8AYnF7/v/sghNPv/4P+fyzOVP973vv/U1g/nIj+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3Ppu7vPXip35eHytHH+qHHqmPE5CCDMhhF//xmy4eCznbJln7h/mz/2phq+TUGQYXeNSuV0NIayX2y9Pn/anAAAAAE+uLz68+Uns1uPL/LQLYpLiTZuZ6++PKV8SQpib/35M2WZGL8+OKVnx930hHIwpW3ED6/KYksVbbhfGle1fmT0WLj8WkhhmJloOAAAwEcc7gcl2IQAAAEzSx9MugOlIwtGjzKNnwcU37/94IHjl2BEAAABwBiXTLgAAAAA4dUX/7/f/AAAA4MkWf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH5j535yUgfiOID/WuiD9y+PvLj3Ku7gGB7BpUvDAbwER8AreAHPgDuPYMDQqUQU3XRKI/l8kjJMQ77MELqY3yQDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTpsVrO7m7Ob9vmrDft5JkNAAAAcMiqWs7qN5PU/93c/9vc+t/0i4goI+LQ2n0QP/YyB01O9cnnq3djuI+oE7bfMWquXxFx0VzP/7r+FQAAAOB0PcwX07RaTy+TvgfEMaWiTfnnMlNeERHV5ClTWrnNO8sUVv+/h3GdKa0uYI0zhaWS2zBX2kcHouvHfVe1G79pitSUX0dmmzsAAHBEg72mw1UIAAAAPbvqewD0o4jXrczdVuAoNc323s+9HgAAAPANFX0PAAAAAOhcvf53/h8AAACctnT+HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF1aVctZNV9M2+asN+3kmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALywP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/uzs7WVsUYJYeIKHjQi023tbU38aAED/4JQki3NXbrjzYHW4qQizfJuRfRo4igxFv/h55b6KXeesihghcvlTc/kmkMuFo7s20+H3jzvjsZ3vu+GQj5zkwWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNr2u7txljZzZdyv9t28d3U19bf29Mn1zduLqaW412bSj4eXmx96C90lAgAAwMGR1fV9RNzJt5ZT358r6v+8PibV/N89W8Z1Pb+37q/7uvZP7ddf7r64M9FcOU8a9OzaZHzs76kMHt0qZ9tz/3jEoDjzxb2XrLgg/Q82XtjOi/PZ++bGjfeGRXiojWwBgP/iaN1XQf33UOpHXSYGwIExaBTedf2fzXWbEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAbtjfi6TruRcTiYDdObt27urpff33z9mLdTl27ttkcMw2RR8TZtcn4WItrmXWXLl85vzKZjC+2H7wSEV3N/k61/PMfTXFwRCfnR/A/Bf3qYs9KPg8T5NVaHv1cHf1CAgDgiZVXLdX1d/Kt5bSvNx9x//sH6//XG3FMWf/f/fjUzeZczfp/1NoKZ9/S+oXPly5dvvLm2oWVc+Nz40/fOj56e3Ti9MmTp5eKeyVL7pgAAADwcIZVa9b/wz3HpJ8dacQxZf3/xbejr5rjZOr/fe0+9Os6EwAAgIPt+Vf/+L23z/7ecBhfrqyvXxyV253Px8ttB6n+a4eq1qz/s/muswIAAADasL3Re+D9/zONOKZ8/v/MDy/91Bwzi4jD1fP/o6ufTc60t5yZ1sa/Lne9RgAAALp1uGrN5//5fKr/+zuvPPQj4o3Xyrj6GsCp6v/s/a9/bM7VfP//RHtLnEn9hfJ8FP1CxGCh64wAAAB4Uv15P+KpKFsq9n/Lt5Y/+fnIh0Pv/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC07a8AAAD//3npOno=") r0 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x64142, 0x0) r2 = open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0) r3 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r3, 0x7, 0x0, 0x0, 0x0) ftruncate(r2, 0x1000) sendfile(r1, r2, 0x0, 0x1000000201005) fallocate(r0, 0x10, 0x0, 0x0) 6.844030245s ago: executing program 3 (id=551): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x280000a, &(0x7f00000007c0)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2b2, &(0x7f00000003c0)="$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") socket$packet(0x11, 0x0, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0xfffd) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000004, 0x810, r0, 0xba972000) r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000280)={[], [{@func={'func', 0x3d, 'MMAP_CHECK'}}]}, 0x0, 0x4a6, &(0x7f0000000a40)="$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") openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x400500, 0x0) socket$nl_route(0x10, 0x3, 0x0) creat(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) wait4(0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = dup(r2) ioctl$TIOCL_SETSEL(r3, 0x4b68, 0x0) kcmp(0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x5b, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f008004be0ffff00124000632177fbac141416ac14141607089f034d2f87e5890c6aab845013f2325f1a39018602038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eea", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x50) creat(&(0x7f0000000040)='./bus\x00', 0x189) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r5, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000007ffff0e00"], 0x52) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}]}}) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xe, 0x0, 0x0, 0x101}}) 6.403453568s ago: executing program 0 (id=552): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14}}, 0x60}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10) syz_io_uring_setup(0x0, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10) r2 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x11900}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r2, 0x2def, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0xffffffffffffffff]}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r7, &(0x7f0000000380), 0x20000000}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000440)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 6.236184776s ago: executing program 4 (id=553): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_usb_connect(0x0, 0x36, &(0x7f0000002340)={{0x12, 0x1, 0x0, 0xbb, 0x21, 0xa, 0x8, 0x7c9, 0x12, 0xf682, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x96, 0xb7, 0xa, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0x1}}]}}]}}]}}, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) lsetxattr(0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000e4ff0000000000020202000900030073797a320000000005000400020000000900010073"], 0x34}, 0x1, 0x40030000000000}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x3e, &(0x7f0000000140)={@random="a5050f0000b5", @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private, @local}}}}}}, 0x0) sendmsg$SMC_PNETID_DEL(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, r3, 0xe27, 0x0, 0x0, {0x4, 0x7, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_PUBL={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x24000040) 6.065710987s ago: executing program 1 (id=554): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f0000000700)=""/257, 0x101, 0x0, 0x0, 0x0) 5.879766298s ago: executing program 1 (id=555): r0 = syz_io_uring_setup(0xf3a, &(0x7f0000000480), &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x16, 0x0, @fd_index, 0x0, 0x0}) io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x400c84, &(0x7f0000000640), 0x1, 0x775, &(0x7f0000001180)="$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") io_uring_enter(r0, 0x4ec6, 0x0, 0x2000000, 0x0, 0x0) 5.536448783s ago: executing program 0 (id=556): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x8a}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000a1f000/0x3000)=nil, 0x3000, 0x3000000, 0x8031, r0, 0x0) flock(0xffffffffffffffff, 0x5) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r4, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x24f8, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 5.052613592s ago: executing program 1 (id=558): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='oom_score_adj\x00') r1 = syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4a0, &(0x7f0000000540)="$eJzs3c9rXNUeAPDvvUn60jZ9Sd97i77C6yu8PtKinUka2wYXbQXRVUGt+xiTSQiZZEJm0jahSIp/gCCioitXbgT/AEH6J4hQ0L2IKEXbunChjszkThvj5EdtksHM5wMn99x7J/P9nhnmzJw5h7kBtK3jEXEpIjoi4lRE9GbH06zE8kqp3e7e3RtjtZJEtXrl+ySS7FjjvpJsezD7t+6IeOn5iFeTP8YtLy5NjxaLhflsP1+ZmcuXF5dOT82MThYmC7NDQ4Pnhs8Pnx0e2La2Xnj2m7ff+PC5C58+ee2rke9OvlZLqyc7t7od22ml6V31x6KhMyLmdyJYC3Rk7elqdSIAAGxJ7TP+PyLiYkTcf6/V2QAAAAA7oXqxJ35OIqoAAADAnpXW18AmaS5bC9ATaZrLrazh/VccSIulcuWJidLC7PjKWtm+6EonpoqFgWytcF90JbX9wXr94f6ZNftDEXE4It7q3V/fz42ViuOt/vIDAAAA2sTBNeP/H3tXxv8AAADAHtPX6gQAAACAHWf8DwAAAHvfuuP/pHN3EwEAAAB2wguXL9dKtXH96/GriwvTpaunxwvl6dzMwlhurDQ/l5sslSbrv9k3s9n9FUuluadiduF6vlIoV/LlxaWRmdLCbGWkfl3vkYLrRAMAAMDuO/zfW18mEbH89P56qdmXnTNWh70tfbSbJzuVB7D7OlqdANAyFvhC+zLGBzYb2HfvUh4AAMDO6f+3+X9oV484/w/sIeb/oX2Z/4f2ZYwP/On5/8+2PxcAAGBn9NRLkuayucCeSNNcLuJQ/bIAXcnEVLEwEBF/j4gverv+VtsfbHXSAAAAAAAAAAAAAAAAAAAAAAAAAPAXU60mUQUAAAD2tIj02yS7/ld/74metd8P7Et+6q1vI+La+1feuT5aqcwP1o7/8OB45d3s+JlWfIMBAAAArNUYpzfG8QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwne7dvTHWKLsZ984zEdHXLH5ndNe33dEVEQfuJ9G56v+SiOjYhvjLNyPiSLP4SS2t6MuyWBs/jYj9LY5/cBviQzu7Vet/LjV7/aVxvL5t/vrrzMrjunN8vf4vfdD/dazT/x3aYoyjtz/Orxv/ZsTRzub9TyN+8pj97ysvLy2td676QUR/0/ef5Hex8pWZuXx5cen01MzoZGGyMDs0NHhu+Pzw2eGB/MRUsZD9bRrjzf988utG7T+wTvy+Tdp/Yovt/+X29bv/3CD+yf81f/6PbBC/9tj/P3sfqJ3vb9SXV+qrHfvo82MbtX98nfZv9vyf3GL7T734+tdbvCkAsAvKi0vTo8ViYV5FRUXlQaXVPRMAALDdHn7ob3UmAAAAAAAAAAAAAAAAAAAA0L524+fEVsfrbl1TAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA29FsAAAD//4GD1Gs=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, &(0x7f00000003c0)=ANY=[]) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000000)=0x1, 0x4) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) write$UHID_INPUT(r6, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x16, 0x0, 0xfd}]}) read$FUSE(r0, 0x0, 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000003c0)="0f9543c7629ceae6aae9ce4171045c400a4d1cb00f3723c6251f808c207c1f27371b0e49e2676d21ba2f3ee845c502e9339ffd0c3546713821d544f2b3991fdc7035539e8979", 0x46}, {&(0x7f0000000040)="aec37d8b", 0x4}, {&(0x7f0000000a00)="5990d967c5265bb8e13728898cd5b45235343228f9c63bb51f1625d88072bc91d038315ad20011f26d6c2f1667bf55612763235f766e09e2cd20e42d8cd09ed1dceeb1325b069b86bd497a161a9c404798894559593d5fd7a65c67393400a326191666ec345c7e78edf720a463472a9c541849c31ffb5225b84e16963528976d0c859b8f9cb06047771da6417f3b7ea005f32018296c1bd0dd0e11846e159f8e8d698e9bdfc3353ae927540e7747303dcc87d53728984707678751b0834b2f68885f8145b7631ae504fc23728c9d3cbe8b30410fe9a557a8c77015e807b9d8405ed095f25b3c119b380486b147c99a5eae2d89707d8f3772bffbb25429fbca9a824019aeb42ecd8fafe97dce03751b1e6b46619bef8d061b4ffb5eecbd757281a6c9a671783d10e1cb362e2dde089f1360b02d16ca6e2daafe5e12566a5be1482f1b9eb73637164630b66029c40c8661e5483d78658b80bf227dc2daa3885d3e3b61953741cc18afa6fb22237947b28718b1e38555f10f407b99db0866f7610511bf000d4939ea8090e6ac45c60ebeeeee7bf9645b1db6665d12f5e07fd8fe0f4dd2ef477da18d83ba18b76df6d6aa4ab50937c278d835f5e6c1bee23aa3074c91c8748a8888fb223c4a7f35f1d8a5fede48e45ab95cec3358935372dee0b45362e2efdf9b41bd93e9d1d4022f24c1cca1737b81518548f9bbbf527de75397dae7c2ede80c2f454a785e897ac08d41da30c6087b4a9f1578787d2aeed260b5266b88f771d313532b3bd0887e68dd9daa9cb41388d8e55eca100a1e74f2e1f1d2b35ebc625c3ca74f804350c6f08938517d83b9273001851af5f334ecce839de0f1beaf029ec14362f74b064eb058db92736d8a8efe7d8137c6ccd3a39536d882c0490bb68666e47dadaaaf43c7bb598968351e777b521cb7a07414391664df9adca0ad556af7a374afd728107dbf1f9699932c4984dd7834df2251ec6d99fdc3611cf66c1ef65122ec07662129643f5c65db8b9386daaeb37052e1b45e8946b1847ad8800a19a46351ffd5d2ae5c81ba4682fb184bb7119ba2fb564217ceb24f36300e5b4587c032210fcecac418916362bdf916805336acd2c90e0cc6f0f6ca39b10cbfdf64851a749cf0b78b0e1e4056ad97e1172bbb1b9c50b88f38401dfb7b31a66fc4e98097cf97bc663d8d40a0003cce3af294ae664a32987ac1ba24bb9296316e56fe90350372c13761eaa20826535a9e8fa5dd925e5537c3c422d9815c19de02cb0e5e4d6df5f9b2ab34493933ed60d625b311e3dbbf01199ea80388a406ec55af91994c6e019ed9459dc5c4e31a1913e0ebb7c6f171b1cc99dbfe5bf82eca6d159c8d1f2f0245cb332021157545a14b5e2d37ccbcc70fcc198b69511b65e8d4cc715b3e9a1c98a7c31c77342c7dde339dc07f017547e054aaac6cce8d36ca78bad93acbb359694c19c21967596ef287347a7ca6f3e0f2086ecc65222bd648829f7c7673f751feffe46beed4131d0bc61ccb98ddadc80fce9840628023468d3222d4bea5ec7053e8b3fa0dbf6ef7b3f8f40de33c572214a3bad4682862ee25da6937de26c4d4ad5907039454829b127c0d6b7609b32e61939717110d901ec42eb1e3d11963e6d4a0a162cd76356fa2b6e82ad86e588c6aec949d06fd97f04fbc13cc0391272c85f1a2d7f9810c5e2e1d5634ac8e3fa2ed6d5de27eb783921cb7d5234eae11f8c06224746d71c883bcc8eb97d454eb03a5da010ca3e15e81fb27b243aae4776b0ad6877315d2863add6427e828fcb3af56af0ca3b754d4dad2492a41342fd89e575e14ca430561b97f4f55330e1aed0546d6e616867b834fdb117d859d68ad59021b6dae29cafdb769ce5c4d30e6c6d8065d882a1d734eeb9e16dfc12feadd829abd2b19faa9031e5fd8e9337061a143b36bb7654943ef7d52f87fb43f054c25ecd9bc4b38cae55c04a62ea0e4b1efd3e07449fecece058e5af1e19285eba5a3e5eda2b55768bb27ffdc596dfe6d6a1b760ce0be5d48a8dcde66a069c1a80614f2a77ad43d073a662b4151c1324ec3bfa647acc6938c183dcd841be76aaf0000da4f58ffeba40bdd30ac5db3b6ac0449bc8585fef5c98ba68588d649e44249e5b6510f4b46d7cebf5721dbc42786a47884a97f8bfcbad9738f8cf5c03497fd52899b4dd2679a6eeeeeb335e10826a08a6af13913253c332b2794ebe3533d1c32d07af7072bfbc1249b393eb5525930bd251ca7d7ff4430e68c353fb88ccb035e7fc979005f4af02d1f3cd75fc2a431bdd7456997e788dfcd9719b223fe24bb0a8fcc2ed0cda2b1e2058673fb5b32e53e2d5aa5216d63a02ddea322a413dc02eed3c5e038d3e1eb115477bd797032b3b5727e2d05367bae485921b01812ebdebd032906ee7dcc405bd4d27383a518ca1ab7ac7ce2fca0f55f4194792fe8f7227119ae4a411b15272ab9daef92f11dde61947166690d7cc3d00be28f2fcc1a93d8e95de752742b382d5d6db2afb83cceb3d14aef1648dec71e7b6aedde554eb22a6a2781790d08180790e6c1a14f7339ebbfe77ecb89eb2c8aa6c3d7838f1a1e61ed8f65a685edbff0f3132cc0373e41c20dd1879be88a7cbd4c4e7de99acac53b93ad8fbca9857f0d4ab31e68b43f7b590e8b6d30543424c377497d0c8f9b43891bec0fac9c49415f1cec4dc03dec2901e175e2b44c50f18df3820c1164098ce75a9a08ceec6b1a0afc3bf1538bd9b4094b5beffdab22cc8a283438ec634db54e729d9728af3a990d2143552179b42e9129ba8f50316d4a92545487b388f13eb7f374f7b5ade2fdf9056f355ee1d8ca03e562ac180f20a4821c9a6d757d96c0c44f3727bed1c9a4c2ac654f8e9d363609e4ca1c449b1c071694fdd67457be51c15b4c1f2c1d8344f360cc2c202d190e587117ee14052545e68cabce2b515074133a17e66a7095c95d3703768e309463dbe6728d5b7010944478ca5c11028024f7141d1dcd72b749d4de2712a46f3f434ae413398b7782f80e9a407453ffb19204f55b5ed4cbc2221277ad2b85322f26ad7a54ff35e8d07569f408d0a0fe5a1ffa7bd87d0eb00d758cc632385e6b94c6b104017108131c51a7403bf37d1e8e3834d3c55c4e489c50ebc6ff94fb91940b8d93dc347fb08f073027d466544634bebd5e578b5cf2e34f4f19c850e3e56e2f6b11999665184e10db9d2813493ae3c69dc8c59a7ffafb32f8fada14dda8304c33427c3d5e397f12fde45d7d627a7bf43932ebb89a11db78dce907817c8d21d9086dd82f1ccd12e28587dafc14174f8a2806bc5809292d50ffc07c3dbf492fb20985a181f4e63365d53fc73242a8c36c4d38cec40186a93ef2b22b79154ed134f642033366ac3ad6c53fcb0568f32269ad71668c4693908a89f55be2c4c7399c52ec7326e7c0f84dc8d64e30bb9f5191133cdffb8423a7c0697c20c907df401d2dcb027365982ccac1db441bd32830cf5a5f93be1b8e922a9b5a5ea4a7bd99e847c040f6b0836c5fc735440b2397d41e2779a388d1c8f1ee241d7495a4406f35a033410bd8ace47042d225d9b4ec715689061a6882d133580c178e7b9f23efec12f9b8c246a2c6855b2d33c7782b5e7ebed0d9a4ec98d38d3441397ef616a80d1df4c13bea075b6ecc3171ba0a6dcbd9cd7d658ddcffca0ce8f5bd38ddede253708ab3d5682acdaf6d9a2ef1bb560af40140ad5f52be8af6113a8e55d079decd51175513601e8ec0d2f0899fd0d49f928f42623051e9f12d36926beb3381027adbc4607a926cd9761734c38633143b4dd769d2dd977c895585cc4ddc604f032c7885ca3b6c95b7ec3933d931cb880338324ae9d0e61de101a9e9ede98b126b7ab46d981f359e87a1c4dccfb1a4594f9edda21e14c173a57fd77460ca3e53be82987c79d871a13d5be22ded1494ff6069b178b04fbce6227137740a844449b2235a8b78237c9f22da98480a0c9a2d5b23bfd855070ae2f2b24c5ac12e580d37eb129a0458547ba004b408a78dc42ad5666b74801d2ece56aa88948155a0799d37ea6613cba62b0fa5aa10090673c1b47f1b352533cf635dc6a947ae0b9aeca23d367d7d0b99d2d088da6eb7f0cf4b6d18ff3dd0ef243b966ba9da72062df2ada80068717ffd64cb77b5118f8003820c2a81971d69a4bfbdd836947282d063c645d378ebc7c4cae25e944cfe908424bb5065464acbc215d3aa9f64acee809cbcf97b367e4f7c20f3a74075ef55ddad7b19eb1bf9dfb2c52910961fbe9478ddf6a18a50c906d5b9c06d5625a51b6a8fe4d1bf7877fdfb1962a6d703f6f5f4d41d8d35b4ec16e7e8b1e44c7b90ddac74180d82ee4993b10ecabe35f7ecb2c93415a3e3ffce068a7742b9e89066e5c62d2b5e65b523d621466ac421299e4cce34607599ad8059ca123f997cae6e354112cf273d05cf969cda841bbd398ca82962aec679d3f86bd596e9b8f4dc0e2737f86a610d10226aa46d5f04c914edae0778588b0dc178bbf67faa639c1b947c74f8cb7a2565f64e7ec770b46c724a6d6de5d57cb5346c8594726e2a7364852dd8da57c78680d83d854ec0f39823a1cf0963f10c68ba59aae950d5a69a29047dc31f2f4c3bdd67d0386d4d2a39ab6122d7df2856dd4c958b4b8c3c40455aa6f1a8b42bcd0b5d2e60835e0f4539a302066a6dbc5c5789b3e493b3069bdab135c27df70d4fd81f85d233c9ea5acd39651cf018eecd7a1b0d7f3138b08e9a05a9910b18d3f345021490792ff7192e485aa43884afc3dade8d95775fa14cf20f3e324c2f9e12ee4afc3c3fed83770e8732b27ef4362ab3b5284b35bfb51c63c74526d685866d9fcfda034ec7493513b50b67346ee37dfc126976e54471140d71a1b1d9dcdec4ff8ddfa68a4d2a32f81d7035f6122fb6e138319c798d6d1ac47678bd2e2165f1b2db673be9f139177222701f197b178e45048c720f55d69b615014711a777bf14939aa7de680bb7f800c2f317071c72fb4ad5c643404e4023cc82c64a4e40aaaeefbb53a4a096573d4b7dc76556ef9fe46f625f22b65bca4923834862a26be22a3a15575f9665da60086a0b55f39f08886576e02f327712acfbc8f42ca6b31dae874fac0455a4846ae5899216e01ba5e430f08e94a3a9d4e3fd364c4341d566f3b52dc89afda067950e805320769bdd4c7da60e425f0d1cff39f65df279701b818fd49d95aff7eeb14507a0e5bec286a6d6ed5657b908031c5799ad19460cc49321fe88abc4f09933dabbd70e63951787180e7aab9c9e7a7e06653b248c5396dbcb1cfcd77fda82a53511ea220dde8dec4aa473cd2d2aa2df48149a81784dc249e676e30df6e5aa0af4efe1be9730288b3c2f4a1fd90e3589b1589a32a3beced95aafbdb2ca4b951758636994a7a61c0de5a804aacb934d8d85ae5b551ad36807f1f33aa40eb5855c734073dea1c3227ddfc4c3ec5cf0df8cf050363d58e862c66ed27a7704052aad630de6722f3c20f267eff464c819b8da1554a42d69acfc5bb726f8b485980d7f141dace32f079aef8ef366f3cb675e02a85aa822914b995f34cad94ae104b9f0958bc55f716647cd3257c7b120a8e18f1bde185272edf6e6c82fe4e9472aaaf79201ed3564423a727c0b55fe95e9cfba37cde0aa0844c40c26ebd26973c41f62e1319d2a77ef0ed23e5fc058c2d1a0cf29878f428a64b87ae9fae95031b07bde3ffe87e16fb02d83707dd5474518368115100d7f7c838021692697eee28c3db750b4b7fb559f2", 0xff8}, {&(0x7f0000001a00)="4464bbaf6b149b4696693ce5d1a6fa487aff31683c7c840b9243001787baa5dba522b4650d7c60877a32bf814e8d05ff3673d49cbd3adac3525cac54438e730295834c2d9db00adcb84a4fb1f46f457dcca0b1d09816bce1649bf005fe121025c804f4f1121d504d6430d6995c7666ca3b0abc1a9d3fed624ea1bc1f3a1a5b999b86c128f14df0cee5c2d65a513c718adf5087e18c227d746c498932c0e983dee552f0adb45ffa03496539f0d7ece3a8aee6735d58131b2352e317690c349594f24069a83708ea6cbf57040b182e5c6ca7d3e05010b8f583042926844ccd377dd17ddee34434f81f929aa47de4c0", 0xee}], 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080), 0x10) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r7, r7}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r7, r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x0, 0x0, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 5.051957289s ago: executing program 2 (id=559): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x0, 0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) process_vm_readv(0x0, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000040)=@udp6=r2}, 0x20) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) unshare(0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000003300)=@mangle={'mangle\x00', 0xc061, 0x6, 0x5a8, 0x3b8, 0x1b0, 0x1b0, 0x1b0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@mcast1, @private2, [], [], 'vlan0\x00', 'pimreg1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'vlan0\x00'}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'pim6reg1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000000)=0x112, 0x4) 5.01773533s ago: executing program 3 (id=560): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x4ef, &(0x7f0000000380)="$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") syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x100c2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$phonet(0x23, 0x2, 0x1) sendto$phonet(r3, &(0x7f0000000080)="276d8c087b087c00661ee4456dc7a8dec74c87ccd6489fc2642357c4a783087343f7fcaa7a4971bf0fdb30975fefc4ea43b84878", 0xfdb3, 0x0, &(0x7f00000000c0), 0x10) 3.857496855s ago: executing program 1 (id=561): r0 = socket(0x0, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0x208e24b) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0) recvmmsg(r5, &(0x7f0000008880), 0x45b, 0x44000102, 0x0) 2.74448173s ago: executing program 3 (id=562): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x8a}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000a1f000/0x3000)=nil, 0x3000, 0x3000000, 0x8031, r0, 0x0) flock(0xffffffffffffffff, 0x5) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000b40), 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x24f8, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 790.029134ms ago: executing program 3 (id=563): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000280), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(0xffffffffffffffff, 0xc01c64ad, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000140)={0x0, 0x0, 0x1e, "b5301292985ac9e03cb0cb44d4c7b5bfbeb079d812d583d254d737404eae"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x1}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000200)={0x20, 0x0, 0x4c, {0x4a, "7bf4ce13512c8d1c91bf99338e527ff5a549651dc715cc9f04af9c553d3585e12d1eb3adbd1508ee93c6d7efee2d524576c33a8fa92f82f67f1c01f151fe7b024c6d019eb788ad28b4be"}}, &(0x7f00000002c0)={0x20, 0x1, 0x1, 0x2}, &(0x7f0000000300)={0x20, 0x0, 0x1, 0x19}}) 755.160967ms ago: executing program 1 (id=564): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, 0x0, 0x0) inotify_init() sched_setaffinity(0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x0) request_key(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x10, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x0, &(0x7f0000000000), 0x4) connect$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x17, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018010000786c6c0a00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r5}, 0x10) sendmsg$AUDIT_ADD_RULE(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000001940)={0x420}, 0x420}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000140), 0x4) umount2(&(0x7f0000000000)='./file0\x00', 0x0) 697.605212ms ago: executing program 2 (id=565): r0 = socket(0x28, 0x5, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r1, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) sendmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) r2 = accept4$unix(r1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) recvfrom$unix(r2, &(0x7f0000000700)=""/257, 0x101, 0x0, 0x0, 0x0) 564.566543ms ago: executing program 4 (id=566): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a3200000000080007006e61740014000480080001"], 0xa4}}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/107) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {}, {}, {0x4000}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x3}, {}, 0xddfdffdb, 0x0, 0x0, 0x100130, 0x0, 0xd01}) 442.35533ms ago: executing program 2 (id=567): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x43e, &(0x7f0000000340)="$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") syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f00000001c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x1f8, 0x2, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@multicast, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) openat$vnet(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000640)={{{@in6=@local, @in6=@ipv4={""/10, ""/2, @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000000740)=0xe8) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x940054, &(0x7f0000000900)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@allow_other}, {@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x2002}}, {@allow_other}, {@max_read={'max_read', 0x3d, 0x800}}, {@allow_other}, {@blksize={'blksize', 0x3d, 0xe00}}, {@default_permissions}, {@allow_other}], [{@flag='nolazytime'}, {@obj_user}, {@appraise}, {@euid_lt}]}}) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000180)={0x0, 0x2}, 0xf69c8350a653b13e) setsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000017c0), 0x4) sendto$inet6(r3, &(0x7f0000000580)="03", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) open(0x0, 0x0, 0x0) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f00000000c0)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) shmget$private(0x0, 0x0, 0x0, &(0x7f0000b39000/0x3000)=nil) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x70383, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x5100, 0x0) r6 = syz_io_uring_setup(0x16b0, &(0x7f0000004940), &(0x7f00000049c0), &(0x7f0000004a00)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004b00)={0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000004ec0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6, @ANYBLOB="00000acf"], 0x18}}], 0x1, 0x0) 177.721847ms ago: executing program 4 (id=568): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000340)) syz_usb_connect$cdc_ncm(0x0, 0x133, &(0x7f0000000440)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x121, 0x2, 0x1, 0x0, 0x10, 0xb0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x1, "8613"}, {0x5, 0x24, 0x0, 0x400}, {0xd, 0x24, 0xf, 0x1, 0x81, 0xfff, 0x9, 0xff}, {0x6, 0x24, 0x1a, 0x101, 0x13}, [@mbim={0xc, 0x24, 0x1b, 0xfff9, 0x2, 0xf6, 0x6, 0x58a9, 0x80}, @dmm={0x7, 0x24, 0x14, 0x8, 0x1005}, @mdlm_detail={0x86, 0x24, 0x13, 0x9, "456f2b295fa9a80a1a38e48f557043fd4f4279edfcd40e267294c2d9dfee182df9760af4dc5320e3fc9f891e8f6e18f1009a82ee5daa645325e17fbdfba57f7014440f76bff0b490a1f2ac6b77a5986b78f6752698f2d4929db1e9b3bf48c81f90bad4841275f8a1608a406dd6f22fd683aaf087a1d4321272f1008795124fb78220"}, @mdlm={0x15, 0x24, 0x12, 0xd0}, @mdlm={0x15, 0x24, 0x12, 0xa3}]}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x7f, 0x7, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0x1, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x6, 0x40, 0x7}}}}}}}]}}, &(0x7f0000000180)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x5, 0x3f, 0x20}, 0x37, &(0x7f00000000c0)={0x5, 0xf, 0x37, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x20acd17a0b2d5ff5, 0x3, 0x8, 0xd5, 0x1000}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x6, 0x1f, 0x400}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0xf4, 0x80, 0xa2}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x2, 0x1, 0x28, 0x5}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x9, 0x0, 0x80, 0x8624}]}, 0x1, [{0xe2, &(0x7f0000000580)=@string={0xe2, 0x3, "a0354f3eb9e84e49b6625d9322c9d71e5d74f73dcca0b38d1235034e01b3cbebdb89af4a88d34aa96ef58d58f1ed1ee4b2949426e7e3b2f14804072d6df3dab049b1f24cc98b3c670698a7dcb3ad0312805d32091b5fc46aeb4fcb68da88dae6980329a2d8ed39b992c172e013de421b379b89a6e6332d249af809e8c3f3d5dc747d5e851eedfcb6209f1ea8424c71349dbc74a579594702fba46cf00abbb4df7d398ace9370f1c970b413c0b798199eca24ce5e98b419226036f18154788893bc1a79ac6de429cfff0c175c76a99d7093146a9b12fccd281e8e9ffeee6872dd"}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_open_procfs(0xffffffffffffffff, 0x0) io_setup(0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r3 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000e00), 0x0, 0x0) ioctl$CAPI_GET_ERRCODE(r3, 0x80024321, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0) sendfile(r5, r6, 0x0, 0x4000000000010046) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) fcntl$getown(r4, 0x9) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f00000003c0)=ANY=[@ANYBLOB="706172743d3078300002a27f9edc6b44900000c63d5f852c6769643d", @ANYRESOCT, @ANYRESOCT, @ANYRES64=0x0, @ANYRESOCT, @ANYRES8, @ANYBLOB="2c6e03d465636f6d706f73652c6769643d29ab72f4a2f73b811c7fd9bae7ecd520839bd791f81b6637f549a77ac6cb621635f9c08b2615964a3c43b727df50d049dc760465dea7349206240e6fb4756f276c72f20bab7d507fe4853b18ebe583cbf9009044b021249834326e80399ca072639251325e38177eef4f05093acfe76553919ecca99460ea4ebdbcef9c4e0ed3f10f86889116979b7aa52b38442546b806d6b8964f99a04195ad43adb611", @ANYRES16, @ANYBLOB="4599"], 0x1, 0x701, &(0x7f00000009c0)="$eJzs3UtoHOcdAPD/rFaPVcGREz/SEsgSQ1oqaksWSqte6pZSdAglpIeeF1uOF6/lIClFNqVR+rj3kFNP6UG30ENJ74b23BAo6VHHQCGXnHRTmdmZ3Vlptbuy9Yrz+4mZ+Wa+x3zzn52ZfSC+AL6xlmej+iSSWJ59czNd39leaI1tL0zm2a2ImIiISkQ1Ikk3JauR5d7Kp/h25Dml5QEfNpfe/vyrnS/aa9V8yspXBtXrY+Lgpq18inpEjOXLg8YPafGT/bvvae/2oe2NKukcYRqwa0Xg4i/P1Co8s70Dtjp5H/8nm3fK9Kl+lOsWOKeS9nMz173UZyKmI2Iqov3Uz+8OldPv4fHaOusOAAAAwFHVjl7lhd3Yjc24cBLdAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdVPv5/kk+VIl2PpBj/fyLfFnn6HBo+EOJnk+3lk5PvDAAAAAAAAACcuFd3Yzc240Kxvpdkv/m/VvqN/1vxXqzHSqzF9diMRmzERqzFfETMlBqa2GxsbKzNZzUjLg2oeTM+7VPz5uF9vNW7mhzHcQMAAAAAAADAOTY1JP/++MFtv4/l7u//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwHiQRY+1FNl0q0jNRqUbEVFFuK+LTiJg4294eSdJv45PT7wcAAAA8k6ne1WRqhDovvB+7sRkXivW9JPvMfyX7vDwV78VqbEQzNqIVK3En/wydfuqv7GwvtHa2Fx6k08F2f/rlkbqetRjt7x767/nlrEQt7kYz23I9bkcSe5lK3srLO9sL6fJB/359kPYp+UluQG/GSuk76ezqJ1n6z73fIlSPdIgj2t9o5dCSM1nueCcic3nf0hoXiwj0j8TQs1MduKf5qHS++bk0eE/9Y/7B4L1P7yvV95ubM7E/Ejej0jlDVwZHIuK7//j41/daq/fv3V2fPT+H1Nf7Q0vsj8RCKRJXn6NIDDeXReJyZ305fhG/itn4cvKtWItm/CYasREr9SK/kb+e0/nM4Eh9Nl1ee2tYT9Jrst65f/XrUz16+hT1+HmWasRr2Tm9EM1I4mFErMQb2d/NmO/cDbpn+PIIV31lhDttybXvZYtOmKJ2eNm/jdbkcUnjerEU1/I9dybLK2/pRunFvlEqnnWjP49Kqt/JE2kLfxj4fDht+yMxX4rES4e9Xtoh/eteOl9vrd5fu9d4d8T9vZ4v0+voTwOeEifymB4oPcMvxlR+cBezeZJdU3NZ3kudXhXx+m8zYj7Lu9RppfeJm+Zd7tRrX6m/jIdxp+dK/WEsxmIsZaWvZKXHDzyx0ryrnZZ67+FpXvpOq9r5Yaf8futhtNrvhyK2vva3bYDn2fT3pydq/6v9u/ZR7Y+1e7U3p342+aPJVyZi/F/jP67Ojb1eeSX5e3wUv+t+/gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7e+qPH9xut1spa/0Slf1YyuFajtVcMJDagTE8iyYfKGaFwsv7o8d7QBgcnJvPuPWX140wUozUOL1w/wW4kW/vP19Twc1GM8jTCLpJ8mMrSSysinrrPxZ67W8bPwancn6gfuVb9wHHlieIFWyp89Fdvrd/5GouIfoWH3DjGjuHmA5ypGxsP3r2x/ujxD5oPGu+svLOyOr64uDS3tPjGwo27zdbKXHteqnD6o+oBJ6T8dqJjIiJeHV53wECtAAAAAAAAAAAAwAk6jf+FOOtjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7elmej+iSSmJ+7Ppeu72wvtNKpSHdLViOiEhHJbyOSf0bcivYUM6XmksP282Fz6e3Pv9r5ottWtShfidg6tN6gNru28inqETGWL59BT3u3h7c30U1O9slOOkeRBuxaETg4a/8PAAD//9qm8z8=") ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000280)="5c4120b43ac96364a61014396cce48c57b", 0x11}], 0x1) 0s ago: executing program 1 (id=569): r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x800, 0x0) ioctl$RTC_AIE_ON(r0, 0x7001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a000090400000103010100092100080001220100090581", @ANYRES64], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000000002020207b1af8ff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r2, 0x8b2b, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, 0x0, &(0x7f0000000840)=0x1e) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x5}, 0x48) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000"], 0x0, 0x37}, 0x20) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[], 0x0, 0x37}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x18, 0x3, 0x8000004, 0x7, 0x213c, 0xffffffffffffffff, 0x0, '\x00', 0x0, r5, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x3, 0x4, 0x7, 0x40, r6, 0x0, '\x00', 0x0, r4, 0x0, 0x4}, 0x48) syz_usb_control_io(r1, &(0x7f0000000300)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="00001c0000001c5f377dd0ee696be90565fca893e4be3c94f293a47d8e75000000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x0) socket(0x25, 0x4, 0x1) kernel console output (not intermixed with test programs): pwc: recv_control_msg error -32 req 02 val 2c00 [ 178.495189][ T6749] XFS (loop0): Ending clean mount [ 178.502974][ T5323] pwc: recv_control_msg error -32 req 04 val 1000 [ 178.527898][ T5323] pwc: recv_control_msg error -32 req 04 val 1300 [ 178.535804][ T6749] XFS (loop0): Quotacheck needed: Please wait. [ 178.555020][ T5323] pwc: recv_control_msg error -32 req 04 val 1400 [ 178.579540][ T5323] pwc: recv_control_msg error -32 req 02 val 2000 [ 178.595907][ T5323] pwc: recv_control_msg error -32 req 02 val 2100 [ 178.617068][ T5323] pwc: recv_control_msg error -32 req 04 val 1500 [ 178.637771][ T5323] pwc: recv_control_msg error -32 req 02 val 2500 [ 178.658754][ T6749] XFS (loop0): Quotacheck: Done. [ 178.664349][ T5323] pwc: recv_control_msg error -32 req 02 val 2400 [ 178.682488][ T5323] pwc: recv_control_msg error -32 req 02 val 2600 [ 178.729313][ T5323] pwc: recv_control_msg error -32 req 02 val 2900 [ 178.966474][ T5323] pwc: recv_control_msg error -32 req 02 val 2800 [ 179.175650][ T5323] pwc: recv_control_msg error -71 req 04 val 1200 [ 179.215611][ T6767] trusted_key: encrypted_key: insufficient parameters specified [ 179.219621][ T5323] pwc: Registered as video71. [ 179.252622][ T5323] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 179.287696][ T5323] usb 5-1: USB disconnect, device number 7 [ 179.347757][ T6767] netlink: 'syz.0.251': attribute type 1 has an invalid length. [ 181.314863][ T5230] Bluetooth: hci0: command 0x0406 tx timeout [ 181.928602][ T6803] loop4: detected capacity change from 0 to 65 [ 182.006343][ T6803] BFS-fs: bfs_fill_super(): NOTE: filesystem loop4 was created with 512 inodes, the real maximum is 511, mounting anyway [ 182.084733][ T6803] BFS-fs: bfs_fill_super(): Last block not available on loop4: 511 [ 182.166066][ T5275] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 182.223858][ T6035] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 182.368370][ T6810] loop4: detected capacity change from 0 to 512 [ 182.398823][ T6811] overlay: ./file0 is not a directory [ 182.408562][ T5275] usb 4-1: Using ep0 maxpacket: 8 [ 182.428348][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 182.468381][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 182.510174][ T6810] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #12: comm syz.4.261: corrupted in-inode xattr: invalid ea_ino [ 182.559640][ T6810] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.261: couldn't read orphan inode 12 (err -117) [ 182.572042][ T5275] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 182.614110][ T5275] usb 4-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 182.625137][ T6810] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 182.660717][ T5275] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.726770][ T5275] usb 4-1: Product: syz [ 182.761395][ T5275] usb 4-1: Manufacturer: syz [ 182.788127][ T5275] usb 4-1: SerialNumber: syz [ 182.811783][ T5275] usb 4-1: config 0 descriptor?? [ 183.011415][ T6828] fuse: Unknown parameter 'group_id00000000000000000000' [ 183.070581][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 183.317967][ T6831] netlink: 96 bytes leftover after parsing attributes in process `syz.4.267'. [ 183.836643][ T8] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 188.696272][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 188.721690][ T8] usb 5-1: device descriptor read/all, error -71 [ 188.813074][ T25] usb 4-1: USB disconnect, device number 8 [ 191.753960][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.278'. [ 191.823452][ T6872] Invalid logical block size (18) [ 192.410766][ T6862] loop3: detected capacity change from 0 to 32768 [ 192.438442][ T6862] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.275 (6862) [ 192.487455][ T6862] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 192.519929][ T6862] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 192.528872][ T6861] loop2: detected capacity change from 0 to 32768 [ 192.545179][ T6862] BTRFS info (device loop3): using free-space-tree [ 192.600125][ T6861] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 192.746279][ T6861] XFS (loop2): Ending clean mount [ 192.791338][ T6907] netlink: 'syz.4.281': attribute type 4 has an invalid length. [ 192.800342][ T6907] netlink: 128124 bytes leftover after parsing attributes in process `syz.4.281'. [ 192.822736][ T6861] XFS (loop2): Quotacheck needed: Please wait. [ 192.932158][ T6861] XFS (loop2): Quotacheck: Done. [ 193.363787][ T6922] netlink: 16 bytes leftover after parsing attributes in process `syz.0.282'. [ 193.481309][ T6923] trusted_key: encrypted_key: insufficient parameters specified [ 193.557806][ T5229] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 193.568069][ T6923] netlink: 'syz.2.274': attribute type 1 has an invalid length. [ 193.864398][ T6926] loop4: detected capacity change from 0 to 512 [ 193.917797][ T6926] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.286: iget: special inode unallocated [ 194.075297][ T6926] EXT4-fs (loop4): get root inode failed [ 194.100230][ T6926] EXT4-fs (loop4): mount failed [ 194.661261][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.670996][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.372311][ T6924] loop0: detected capacity change from 0 to 32768 [ 195.526102][ T6924] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.282 (6924) [ 195.696729][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 195.696747][ T29] audit: type=1326 audit(1722599617.423:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6925 comm="syz.4.286" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f359dd773b9 code=0x0 [ 196.167539][ T6924] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 196.206140][ T6924] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 196.214928][ T6924] BTRFS info (device loop0): using free-space-tree [ 196.237378][ T6948] fuse: Unknown parameter 'group_id00000000000000000000' [ 196.290711][ T6924] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 196.314210][ T6924] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 196.376551][ T6924] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 196.503168][ T6924] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 196.559773][ T6924] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 196.672630][ T6924] BTRFS error (device loop0): open_ctree failed [ 197.188566][ T5515] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 197.956145][ T6973] syz.2.291 uses obsolete (PF_INET,SOCK_PACKET) [ 198.245894][ T6988] loop3: detected capacity change from 0 to 16 [ 198.262936][ T6988] erofs: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿ0xffffffffffffffff01777777777777777777777ÿ18446744073709551615' [ 198.356783][ T6989] ptrace attach of "./syz-executor exec"[5229] was attempted by "./syz-executor exec"[6989] [ 198.857442][ C0] eth0: bad gso: type: 1, size: 1408 [ 200.103297][ T6997] loop1: detected capacity change from 0 to 512 [ 201.047623][ T6997] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.299: iget: special inode unallocated [ 201.083022][ T7006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.091629][ T6997] EXT4-fs (loop1): get root inode failed [ 201.120697][ T6997] EXT4-fs (loop1): mount failed [ 201.176548][ T7006] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.910370][ T7015] netlink: 8 bytes leftover after parsing attributes in process `syz.0.302'. [ 202.324781][ T7021] batadv0: entered promiscuous mode [ 202.378835][ T7021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 202.771928][ T7001] loop2: detected capacity change from 0 to 32768 [ 203.423913][ T7001] workqueue: Failed to create a rescuer kthread for wq "xfs-buf/loop2": -EINTR [ 206.530641][ T7040] loop0: detected capacity change from 0 to 40427 [ 206.608924][ T7040] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 206.615657][ T7040] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 206.635823][ T7040] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-4) [ 206.780409][ T7046] loop1: detected capacity change from 0 to 256 [ 206.817313][ T7046] exfat: Deprecated parameter 'utf8' [ 206.822678][ T7046] exfat: Deprecated parameter 'utf8' [ 206.883260][ T7046] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d) [ 206.921806][ T7048] loop3: detected capacity change from 0 to 512 [ 207.140370][ T7048] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.314: iget: special inode unallocated [ 207.699661][ T7048] EXT4-fs (loop3): get root inode failed [ 207.706479][ T29] audit: type=1804 audit(1722599629.463:72): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.312" name="/newroot/60/file0/cgroup.controllers" dev="loop1" ino=1048619 res=1 errno=0 [ 207.729934][ T7048] EXT4-fs (loop3): mount failed [ 207.746408][ T7056] capability: warning: `syz.1.312' uses deprecated v2 capabilities in a way that may be insecure [ 211.447453][ T29] audit: type=1326 audit(1722599631.093:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7047 comm="syz.3.314" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb9f1773b9 code=0x0 [ 211.624048][ T7075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.313'. [ 211.653437][ T7075] netlink: 'syz.0.313': attribute type 6 has an invalid length. [ 211.781271][ T7079] loop0: detected capacity change from 0 to 8 [ 211.886729][ T7079] SQUASHFS error: Unable to read inode 0x9 [ 212.111026][ T7075] Bluetooth: MGMT ver 1.23 [ 212.686196][ T5275] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 212.747317][ T7087] loop1: detected capacity change from 0 to 16 [ 212.830618][ T7087] erofs: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿ0xffffffffffffffff01777777777777777777777ÿ18446744073709551615' [ 212.962208][ T7092] ptrace attach of "./syz-executor exec"[5235] was attempted by "./syz-executor exec"[7092] [ 213.163563][ T5275] usb 3-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 213.196850][ T5275] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.220974][ T5275] usb 3-1: Product: syz [ 213.225875][ T5275] usb 3-1: Manufacturer: syz [ 213.236251][ T5275] usb 3-1: SerialNumber: syz [ 213.244249][ T5275] usb 3-1: config 0 descriptor?? [ 213.251914][ T5275] ch341 3-1:0.0: ch341-uart converter detected [ 213.402269][ T7095] loop4: detected capacity change from 0 to 32768 [ 213.421118][ T7095] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.318 (7095) [ 214.346238][ T55] Bluetooth: hci1: Opcode 0x0c24 failed: -110 [ 214.352994][ T5230] Bluetooth: hci1: command 0x0c24 tx timeout [ 214.587945][ T5275] usb 3-1: failed to send control message: -110 [ 214.594230][ T5275] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 215.007396][ T25] IPVS: starting estimator thread 0... [ 215.116496][ T7107] IPVS: using max 18 ests per chain, 43200 per kthread [ 215.454515][ T25] usb 3-1: USB disconnect, device number 12 [ 215.478012][ T25] ch341 3-1:0.0: device disconnected [ 215.689479][ T7089] loop0: detected capacity change from 0 to 32768 [ 215.740317][ T7089] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop0": -EINTR [ 215.978504][ T7126] loop3: detected capacity change from 0 to 512 [ 216.072499][ T7126] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.327: iget: special inode unallocated [ 216.139161][ T7126] EXT4-fs (loop3): get root inode failed [ 216.160934][ T7126] EXT4-fs (loop3): mount failed [ 216.634969][ T29] audit: type=1326 audit(1722599638.403:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7125 comm="syz.3.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb9f1773b9 code=0x0 [ 218.369885][ T7172] loop2: detected capacity change from 0 to 16 [ 218.386412][ T5275] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 218.422362][ T7172] erofs: Unknown parameter 'ÿÿÿÿ01777777777777777777777ÿÿÿÿÿÿ0xffffffffffffffff01777777777777777777777ÿ18446744073709551615' [ 218.472870][ T7172] ptrace attach of "./syz-executor exec"[5515] was attempted by "./syz-executor exec"[7172] [ 218.576975][ T5275] usb 5-1: no configurations [ 218.595017][ T5275] usb 5-1: can't read configurations, error -22 [ 218.668379][ T7149] loop3: detected capacity change from 0 to 32768 [ 218.693797][ T7149] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.331 (7149) [ 218.730381][ T7149] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 218.741001][ T7149] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 218.753728][ T7149] BTRFS info (device loop3): using free-space-tree [ 218.786329][ T5275] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 218.943550][ T29] audit: type=1800 audit(1722599640.713:75): pid=7195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.331" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 218.996859][ T5275] usb 5-1: no configurations [ 219.006897][ T5275] usb 5-1: can't read configurations, error -22 [ 219.036185][ T5275] usb usb5-port1: attempt power cycle [ 219.112072][ T7149] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 219.251732][ T5229] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 219.495104][ C0] eth0: bad gso: type: 1, size: 1408 [ 219.504694][ T5275] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 219.567835][ T5275] usb 5-1: no configurations [ 219.572482][ T5275] usb 5-1: can't read configurations, error -22 [ 219.742759][ T5275] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 219.801967][ T5275] usb 5-1: no configurations [ 219.816957][ T5275] usb 5-1: can't read configurations, error -22 [ 219.833296][ T5275] usb usb5-port1: unable to enumerate USB device [ 220.596494][ T7210] loop2: detected capacity change from 0 to 512 [ 220.677276][ T7210] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.341: iget: special inode unallocated [ 220.727589][ T7210] EXT4-fs (loop2): get root inode failed [ 220.755562][ T7210] EXT4-fs (loop2): mount failed [ 220.776936][ T7199] loop1: detected capacity change from 0 to 32768 [ 220.885741][ T7199] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 221.587560][ T7199] XFS (loop1): Ending clean mount [ 221.637287][ T7199] XFS (loop1): Quotacheck needed: Please wait. [ 221.702792][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.342'. [ 221.856902][ T7199] XFS (loop1): Quotacheck: Done. [ 222.726113][ T5323] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 222.793102][ C0] eth0: bad gso: type: 1, size: 1408 [ 222.928800][ T7248] loop0: detected capacity change from 0 to 2048 [ 222.936070][ T5323] usb 3-1: Using ep0 maxpacket: 8 [ 222.942474][ T5323] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 222.958206][ T5323] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 223.011164][ T5323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 223.036796][ T7248] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 223.051533][ T5323] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 223.088176][ T5323] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.118742][ T5323] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 223.144381][ T5323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.379677][ T5323] usb 3-1: usb_control_msg returned -32 [ 223.410536][ T5323] usbtmc 3-1:16.0: can't read capabilities [ 223.630868][ T7256] loop4: detected capacity change from 0 to 256 [ 223.686413][ T7257] trusted_key: encrypted_key: insufficient parameters specified [ 223.723991][ T7257] netlink: 'syz.1.338': attribute type 1 has an invalid length. [ 223.742504][ T7259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.767810][ T7259] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.771361][ T7260] ptrace attach of "./syz-executor exec"[5243] was attempted by "./syz-executor exec"[7260] [ 224.010847][ T7259] usbtmc 3-1:16.0: control status returned 0 [ 224.214234][ T5275] usb 3-1: USB disconnect, device number 13 [ 224.645544][ T7254] loop3: detected capacity change from 0 to 32768 [ 224.722956][ T7254] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 224.872997][ T7254] XFS (loop3): Ending clean mount [ 225.060902][ T47] XFS (loop3): Metadata CRC error detected at xfs_agfl_read_verify+0x160/0x230, xfs_agfl block 0x3 [ 225.083322][ T47] XFS (loop3): Unmount and run xfs_repair [ 225.089758][ T47] XFS (loop3): First 128 bytes of corrupted metadata buffer: [ 225.520288][ T29] audit: type=1804 audit(1722599647.293:76): pid=7272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.348" name="/newroot/74/file0/bus" dev="loop3" ino=1065 res=1 errno=0 [ 225.945578][ T47] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86 XAFL............ [ 225.962800][ T47] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00 ....G.K......... [ 226.012877][ T47] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b ^..s............ [ 226.058721][ T47] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f ................ [ 226.104723][ T47] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 226.116146][ T47] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 226.125217][ T47] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 226.145167][ T47] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ................ [ 226.157673][ T7254] XFS (loop3): metadata I/O error in "xfs_alloc_read_agfl+0x273/0x4c0" at daddr 0x3 len 1 error 74 [ 226.222670][ T7254] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296). Shutting down filesystem. [ 226.271444][ T7254] XFS (loop3): Please unmount the filesystem and rectify the problem(s) [ 226.356666][ T5229] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 226.432138][ T7285] FAULT_INJECTION: forcing a failure. [ 226.432138][ T7285] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 226.446146][ T7285] CPU: 1 UID: 0 PID: 7285 Comm: syz.4.353 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 226.456304][ T7285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 226.466380][ T7285] Call Trace: [ 226.469676][ T7285] [ 226.472618][ T7285] dump_stack_lvl+0x241/0x360 [ 226.477317][ T7285] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.482529][ T7285] ? __pfx__printk+0x10/0x10 [ 226.487158][ T7285] should_fail_ex+0x3b0/0x4e0 [ 226.491854][ T7285] prepare_alloc_pages+0x1da/0x5d0 [ 226.496987][ T7285] __alloc_pages_noprof+0x166/0x6c0 [ 226.502199][ T7285] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 226.507956][ T7285] alloc_pages_mpol_noprof+0x3e8/0x680 [ 226.513441][ T7285] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 226.519446][ T7285] vma_alloc_folio_noprof+0x12e/0x230 [ 226.524838][ T7285] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 226.530757][ T7285] folio_prealloc+0x31/0x170 [ 226.535363][ T7285] handle_pte_fault+0x252d/0x6eb0 [ 226.540420][ T7285] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 226.546163][ T7285] ? __pfx_lock_acquire+0x10/0x10 [ 226.551215][ T7285] ? __pfx_handle_pte_fault+0x10/0x10 [ 226.556603][ T7285] ? do_raw_spin_lock+0x14f/0x370 [ 226.561665][ T7285] ? follow_page_pte+0x29a/0x1ee0 [ 226.566708][ T7285] ? follow_page_pte+0x83f/0x1ee0 [ 226.571748][ T7285] ? __pfx_lock_release+0x10/0x10 [ 226.576793][ T7285] ? do_raw_spin_unlock+0x13c/0x8b0 [ 226.582017][ T7285] handle_mm_fault+0x1029/0x1980 [ 226.586995][ T7285] ? __pfx_handle_mm_fault+0x10/0x10 [ 226.592309][ T7285] ? __pfx_find_vma+0x10/0x10 [ 226.596999][ T7285] ? vma_is_secretmem+0xd/0x50 [ 226.601792][ T7285] ? check_vma_flags+0x531/0x5a0 [ 226.606842][ T7285] __get_user_pages+0x6ec/0x16a0 [ 226.611807][ T7285] ? __pfx___get_user_pages+0x10/0x10 [ 226.617278][ T7285] __gup_longterm_locked+0xed7/0x17d0 [ 226.622650][ T7285] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.628974][ T7285] ? sanity_check_pinned_pages+0x12c2/0x13c0 [ 226.634954][ T7285] ? gup_fast_fallback+0x221d/0x2b50 [ 226.640232][ T7285] gup_fast_fallback+0x2742/0x2b50 [ 226.645335][ T7285] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 226.651247][ T7285] ? __pfx_gup_fast_fallback+0x10/0x10 [ 226.656699][ T7285] ? __sys_getsockopt+0x271/0x330 [ 226.661715][ T7285] ? __x64_sys_getsockopt+0xb5/0xd0 [ 226.666905][ T7285] ? do_syscall_64+0xf3/0x230 [ 226.671576][ T7285] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.677663][ T7285] ? is_valid_gup_args+0x124/0x200 [ 226.682768][ T7285] pin_user_pages_fast+0xcc/0x160 [ 226.687790][ T7285] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 226.693429][ T7285] ? rds_info_getsockopt+0x20c/0x600 [ 226.698709][ T7285] ? rds_info_getsockopt+0x20c/0x600 [ 226.703984][ T7285] ? rds_info_getsockopt+0x20c/0x600 [ 226.709263][ T7285] ? __kmalloc_noprof+0x21a/0x400 [ 226.714286][ T7285] rds_info_getsockopt+0x22e/0x600 [ 226.719397][ T7285] ? __might_fault+0xaa/0x120 [ 226.724066][ T7285] ? __pfx_lock_release+0x10/0x10 [ 226.729090][ T7285] ? __pfx_rds_info_getsockopt+0x10/0x10 [ 226.734718][ T7285] ? __might_fault+0xc6/0x120 [ 226.739388][ T7285] ? rds_getsockopt+0x2b8/0x530 [ 226.744235][ T7285] ? __pfx_rds_getsockopt+0x10/0x10 [ 226.749432][ T7285] do_sock_getsockopt+0x373/0x850 [ 226.754457][ T7285] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 226.759999][ T7285] ? __fget_files+0x3f6/0x470 [ 226.764676][ T7285] __sys_getsockopt+0x271/0x330 [ 226.769525][ T7285] ? __pfx___sys_getsockopt+0x10/0x10 [ 226.774895][ T7285] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.781219][ T7285] ? do_syscall_64+0x100/0x230 [ 226.785984][ T7285] __x64_sys_getsockopt+0xb5/0xd0 [ 226.791005][ T7285] do_syscall_64+0xf3/0x230 [ 226.795503][ T7285] ? clear_bhb_loop+0x35/0x90 [ 226.800177][ T7285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.806062][ T7285] RIP: 0033:0x7f359dd773b9 [ 226.810473][ T7285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.830071][ T7285] RSP: 002b:00007f359eb58048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 226.838482][ T7285] RAX: ffffffffffffffda RBX: 00007f359df05f80 RCX: 00007f359dd773b9 [ 226.846445][ T7285] RDX: 0000000000002710 RSI: 0000200000000114 RDI: 0000000000000003 [ 226.854405][ T7285] RBP: 00007f359eb580a0 R08: 0000000020000040 R09: 0000000000000000 [ 226.862369][ T7285] R10: 0000000020005ec0 R11: 0000000000000246 R12: 0000000000000002 [ 226.870333][ T7285] R13: 000000000000000b R14: 00007f359df05f80 R15: 00007ffc1e36d798 [ 226.878309][ T7285] [ 226.901834][ T5235] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 227.210983][ T7292] loop1: detected capacity change from 0 to 512 [ 227.391062][ T7292] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.355: iget: special inode unallocated [ 227.480672][ T7292] EXT4-fs (loop1): get root inode failed [ 227.523105][ T7292] EXT4-fs (loop1): mount failed [ 228.328762][ T29] audit: type=1326 audit(1722599649.703:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7291 comm="syz.1.355" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8760d773b9 code=0x0 [ 228.627290][ T7319] loop3: detected capacity change from 0 to 1024 [ 228.645413][ T7305] loop0: detected capacity change from 0 to 4096 [ 228.736143][ T7319] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 228.878709][ T941] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 228.992465][ T29] audit: type=1800 audit(1722599650.763:78): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.354" name="bus" dev="loop3" ino=864 res=0 errno=0 [ 229.197824][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 229.214051][ T941] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 229.222351][ T29] audit: type=1804 audit(1722599650.803:79): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.354" name="/newroot/75/file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop3" ino=864 res=1 errno=0 [ 230.126882][ T941] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.150066][ T941] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.169068][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.319838][ T941] usb 5-1: config 0 descriptor?? [ 230.325713][ T7321] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 231.800979][ T7342] overlay: ./file0 is not a directory [ 231.906943][ T7339] loop1: detected capacity change from 0 to 4096 [ 231.942451][ T7339] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 231.964967][ T941] usbhid 5-1:0.0: can't add hid device: -71 [ 231.990418][ T941] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 232.025783][ T7339] ntfs3: loop1: Failed to load $MFTMirr (-22). [ 232.052181][ T941] usb 5-1: USB disconnect, device number 14 [ 232.310068][ T7353] loop3: detected capacity change from 0 to 2048 [ 232.478133][ T7353] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found! [ 232.495651][ T7353] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 232.504712][ T7358] loop1: detected capacity change from 0 to 512 [ 233.995328][ T7358] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.369: iget: special inode unallocated [ 234.091912][ T7358] EXT4-fs (loop1): get root inode failed [ 234.100608][ T7358] EXT4-fs (loop1): mount failed [ 234.350237][ T7343] loop0: detected capacity change from 0 to 32768 [ 234.369321][ T29] audit: type=1326 audit(1722599656.083:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7355 comm="syz.1.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8760d773b9 code=0x0 [ 234.416489][ T25] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 234.438376][ T7343] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 234.563178][ T7343] XFS (loop0): Ending clean mount [ 234.573522][ T7343] XFS (loop0): Quotacheck needed: Please wait. [ 234.607992][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.619988][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.629995][ T25] usb 5-1: New USB device found, idVendor=056a, idProduct=0031, bcdDevice= 0.00 [ 234.639688][ T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.791673][ T7389] loop2: detected capacity change from 0 to 1024 [ 234.800474][ T7389] hfsplus: unable to parse mount options [ 234.814769][ T25] usb 5-1: config 0 descriptor?? [ 234.832598][ T7343] XFS (loop0): Quotacheck: Done. [ 235.000807][ T6035] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 235.042456][ T7392] tc_dump_action: action bad kind [ 235.298207][ T25] usbhid 5-1:0.0: can't add hid device: -71 [ 235.312351][ T25] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 235.338468][ T25] usb 5-1: USB disconnect, device number 15 [ 235.785569][ T7411] overlay: ./file0 is not a directory [ 236.094029][ T941] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 237.316365][ T7420] loop0: detected capacity change from 0 to 164 [ 237.356106][ T941] usb 5-1: device descriptor read/64, error -71 [ 237.485375][ T7424] loop2: detected capacity change from 0 to 1024 [ 237.554847][ T7424] EXT4-fs: Ignoring removed oldalloc option [ 237.676353][ T941] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 237.757966][ T7424] EXT4-fs (loop2): stripe (3) is not aligned with cluster size (16), stripe is disabled [ 237.907292][ T941] usb 5-1: device descriptor read/64, error -71 [ 238.071597][ T941] usb usb5-port1: attempt power cycle [ 238.419715][ T7424] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 238.555744][ T7440] loop0: detected capacity change from 0 to 512 [ 238.579353][ T7440] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 238.579378][ T7440] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 238.648176][ T7440] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.382: invalid indirect mapped block 83886080 (level 1) [ 238.692306][ T7424] process 'syz.2.380' launched './file1' with NULL argv: empty string added [ 238.707453][ T7440] EXT4-fs (loop0): Remounting filesystem read-only [ 238.719836][ T7440] EXT4-fs (loop0): 1 orphan inode deleted [ 238.740337][ T7440] EXT4-fs (loop0): 1 truncate cleaned up [ 238.755482][ C0] eth0: bad gso: type: 1, size: 1408 [ 238.771021][ T7440] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 238.986806][ T29] audit: type=1804 audit(1722599660.753:81): pid=7424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.380" name="/newroot/64/file1/file1" dev="loop2" ino=15 res=1 errno=0 [ 239.093420][ T6035] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.316295][ T59] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 239.340416][ T7456] loop0: detected capacity change from 0 to 64 [ 239.560619][ T59] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 239.959981][ T59] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.041898][ T59] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 240.172469][ T59] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 240.247695][ T59] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 240.280045][ T59] usb 3-1: Manufacturer: syz [ 241.949192][ T59] usb 3-1: config 0 descriptor?? [ 242.003570][ T7465] loop4: detected capacity change from 0 to 512 [ 242.011931][ T59] usb 3-1: can't set config #0, error -71 [ 242.024353][ T59] usb 3-1: USB disconnect, device number 14 [ 242.035303][ T5515] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.080222][ T7465] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.386: iget: special inode unallocated [ 242.134426][ T7465] EXT4-fs (loop4): get root inode failed [ 242.160236][ T7465] EXT4-fs (loop4): mount failed [ 242.381159][ T7478] overlay: ./file0 is not a directory [ 242.816184][ T29] audit: type=1326 audit(1722599664.403:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7463 comm="syz.4.386" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f359dd773b9 code=0x0 [ 243.677716][ T59] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 243.947634][ T55] Bluetooth: hci1: command 0x0c24 tx timeout [ 244.206070][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 244.240025][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.273081][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.313813][ T59] usb 3-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 244.346322][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.379490][ T59] usb 3-1: config 0 descriptor?? [ 244.681887][ T7471] loop2: detected capacity change from 0 to 8 [ 244.712177][ T7471] squashfs: Unknown parameter 'squashfs' [ 244.915792][ T7491] loop1: detected capacity change from 0 to 40427 [ 244.965786][ T7491] F2FS-fs (loop1): Small segment_count (9 < 1 * 24) [ 244.997015][ T7491] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 245.030212][ T7491] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.039407][ T7489] loop0: detected capacity change from 0 to 32768 [ 245.106305][ T7489] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 245.195654][ T7491] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 245.220122][ T59] kye 0003:0458:5017.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 245.248842][ T7491] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 245.284156][ T59] kye 0003:0458:5017.0003: hidraw0: USB HID v0.00 Device [HID 0458:5017] on usb-dummy_hcd.2-1/input0 [ 245.315418][ T59] kye 0003:0458:5017.0003: tablet-enabling feature report not found [ 245.337463][ T59] kye 0003:0458:5017.0003: tablet enabling failed [ 245.349731][ T7489] XFS (loop0): Ending clean mount [ 245.377161][ T7489] XFS (loop0): Quotacheck needed: Please wait. [ 245.464234][ T7539] loop3: detected capacity change from 0 to 256 [ 245.511633][ T7489] XFS (loop0): Quotacheck: Done. [ 245.518740][ T7539] msdos: Bad value for 'gid' [ 245.524367][ T7539] msdos: Bad value for 'gid' [ 245.567067][ T5235] syz-executor: attempt to access beyond end of device [ 245.567067][ T5235] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.590070][ T941] usb 3-1: USB disconnect, device number 15 [ 245.616568][ T5235] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 245.813339][ T6035] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 246.307413][ T7543] loop2: detected capacity change from 0 to 128 [ 246.358822][ T7543] EXT4-fs: Ignoring removed nobh option [ 246.427870][ T7543] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 246.451666][ T7543] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 246.737686][ T5515] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 246.880417][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.090658][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.055176][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.997305][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.375207][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 249.377256][ T7583] loop2: detected capacity change from 0 to 256 [ 249.389267][ T7549] loop0: detected capacity change from 0 to 32768 [ 249.417324][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 249.436892][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 249.466641][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 249.476848][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 249.485350][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 249.496687][ T7584] loop1: detected capacity change from 0 to 4096 [ 249.498697][ T7549] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop0": -EINTR [ 249.516591][ T11] bridge_slave_1: left allmulticast mode [ 249.525266][ T7584] ntfs3: Unknown parameter '`' [ 249.569074][ T11] bridge_slave_1: left promiscuous mode [ 249.575016][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.617051][ T11] bridge_slave_0: left allmulticast mode [ 249.661454][ T11] bridge_slave_0: left promiscuous mode [ 249.719329][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.801168][ T7557] loop4: detected capacity change from 0 to 40427 [ 249.888987][ T7557] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 249.906625][ T7557] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 249.915057][ T7595] overlay: ./file0 is not a directory [ 249.920743][ T7557] F2FS-fs (loop4): Found nat_bits in checkpoint [ 250.089869][ T7557] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 250.106725][ T7557] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 250.182387][ T7605] loop1: detected capacity change from 0 to 512 [ 250.249794][ T7605] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.415: iget: special inode unallocated [ 250.316754][ T7605] EXT4-fs (loop1): get root inode failed [ 250.322440][ T7605] EXT4-fs (loop1): mount failed [ 250.807516][ T29] audit: type=1326 audit(1722599672.533:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7603 comm="syz.1.415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8760d773b9 code=0x0 [ 251.566523][ T55] Bluetooth: hci2: command tx timeout [ 253.150375][ T7646] loop0: detected capacity change from 0 to 256 [ 253.438269][ T7649] FAULT_INJECTION: forcing a failure. [ 253.438269][ T7649] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.476448][ T7649] CPU: 0 UID: 0 PID: 7649 Comm: syz.0.423 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 253.486566][ T7649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 253.496653][ T7649] Call Trace: [ 253.499949][ T7649] [ 253.502889][ T7649] dump_stack_lvl+0x241/0x360 [ 253.507602][ T7649] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.512914][ T7649] ? __pfx__printk+0x10/0x10 [ 253.517533][ T7649] ? snprintf+0xda/0x120 [ 253.521794][ T7649] should_fail_ex+0x3b0/0x4e0 [ 253.526492][ T7649] _copy_to_user+0x2f/0xb0 [ 253.530927][ T7649] simple_read_from_buffer+0xca/0x150 [ 253.536323][ T7649] proc_fail_nth_read+0x1ec/0x260 [ 253.541370][ T7649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.544663][ T7644] loop1: detected capacity change from 0 to 4096 [ 253.546921][ T7649] ? rw_verify_area+0x520/0x6b0 [ 253.558116][ T7649] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 253.563649][ T7649] vfs_read+0x204/0xbc0 [ 253.567790][ T7649] ? __pfx_lock_release+0x10/0x10 [ 253.572810][ T7649] ? __pfx_vfs_read+0x10/0x10 [ 253.577474][ T7649] ? __fget_files+0x29/0x470 [ 253.582045][ T7649] ? __fget_files+0x3f6/0x470 [ 253.586710][ T7649] ksys_read+0x1a0/0x2c0 [ 253.590945][ T7649] ? __pfx_ksys_read+0x10/0x10 [ 253.595691][ T7649] ? do_syscall_64+0x100/0x230 [ 253.600438][ T7649] ? do_syscall_64+0xb6/0x230 [ 253.605094][ T7649] do_syscall_64+0xf3/0x230 [ 253.609584][ T7649] ? clear_bhb_loop+0x35/0x90 [ 253.614247][ T7649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.620128][ T7649] RIP: 0033:0x7f7fdad75dfc [ 253.624524][ T7649] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48 [ 253.644114][ T7649] RSP: 002b:00007f7fda7ff040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 253.652516][ T7649] RAX: ffffffffffffffda RBX: 00007f7fdaf05f80 RCX: 00007f7fdad75dfc [ 253.660474][ T7649] RDX: 000000000000000f RSI: 00007f7fda7ff0b0 RDI: 0000000000000005 [ 253.668428][ T7649] RBP: 00007f7fda7ff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 253.676381][ T7649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.684336][ T7649] R13: 000000000000000b R14: 00007f7fdaf05f80 R15: 00007ffea76cf328 [ 253.692303][ T7649] [ 253.734613][ T11] team0: Port device bond0 removed [ 253.741887][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.773968][ T55] Bluetooth: hci2: command tx timeout [ 253.858320][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.020203][ T11] bond0 (unregistering): (slave batadv1): Releasing backup interface [ 254.101294][ T7653] overlay: ./file0 is not a directory [ 254.132157][ T7632] loop2: detected capacity change from 0 to 32768 [ 254.140239][ T11] bond0 (unregistering): Released all slaves [ 254.204557][ T7632] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 254.436187][ T7632] XFS (loop2): Ending clean mount [ 254.477401][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.499356][ T7632] XFS (loop2): Quotacheck needed: Please wait. [ 254.657959][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 254.697486][ T7632] XFS (loop2): Quotacheck: Done. [ 254.920329][ T7668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 254.929217][ T7668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 255.056383][ T7678] netlink: 'syz.4.426': attribute type 7 has an invalid length. [ 255.113285][ T7678] netlink: 'syz.4.426': attribute type 39 has an invalid length. [ 255.307386][ T7678] netlink: 68 bytes leftover after parsing attributes in process `syz.4.426'. [ 255.318832][ T7684] loop1: detected capacity change from 0 to 512 [ 255.381604][ T7678] bridge1: port 1(gretap1) entered blocking state [ 255.408455][ T7678] bridge1: port 1(gretap1) entered disabled state [ 255.426513][ T7684] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.427: iget: special inode unallocated [ 255.436752][ T7678] gretap1: entered allmulticast mode [ 255.447771][ T7684] EXT4-fs (loop1): get root inode failed [ 255.455153][ T7684] EXT4-fs (loop1): mount failed [ 255.476615][ T7678] gretap1: entered promiscuous mode [ 255.787793][ T55] Bluetooth: hci2: command tx timeout [ 255.877906][ T29] audit: type=1326 audit(1722599677.643:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7681 comm="syz.1.427" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8760d773b9 code=0x0 [ 256.055529][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.093300][ T7585] chnl_net:caif_netlink_parms(): no params data found [ 256.100335][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.903289][ T11] hsr_slave_0: left promiscuous mode [ 256.943719][ T11] hsr_slave_1: left promiscuous mode [ 257.296296][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.325576][ T5515] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 257.334633][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.353340][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.363687][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.433704][ T11] veth1_macvtap: left promiscuous mode [ 257.439435][ T11] veth0_macvtap: left promiscuous mode [ 257.446248][ T11] veth1_vlan: left promiscuous mode [ 257.455819][ T11] veth0_vlan: left promiscuous mode [ 257.891715][ T55] Bluetooth: hci2: command tx timeout [ 258.602946][ T7719] loop1: detected capacity change from 0 to 256 [ 259.748160][ T7732] loop0: detected capacity change from 0 to 128 [ 259.788625][ T7734] overlay: ./file0 is not a directory [ 260.286182][ T5275] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 260.337350][ T7743] netlink: 68 bytes leftover after parsing attributes in process `syz.1.437'. [ 260.495464][ T5275] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 260.523240][ T5275] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 260.565126][ T5275] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 260.605456][ T5275] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.611787][ T7745] loop0: detected capacity change from 0 to 512 [ 260.637490][ T5275] usb 5-1: config 0 descriptor?? [ 260.644320][ T7745] ext3: Unknown parameter 'subj_user' [ 260.654202][ T5275] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 260.714744][ T7745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.778208][ T7745] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.857959][ T7732] x_tables: ip_tables: ah match: only valid for protocol 51 [ 260.999438][ T11] team0 (unregistering): Port device team_slave_1 removed [ 261.079333][ T11] team0 (unregistering): Port device team_slave_0 removed [ 261.444834][ T7748] loop2: detected capacity change from 0 to 512 [ 261.590472][ T7748] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.438: iget: special inode unallocated [ 261.603950][ T5275] usb 5-1: USB disconnect, device number 19 [ 261.630287][ T7748] EXT4-fs (loop2): get root inode failed [ 261.643376][ T7748] EXT4-fs (loop2): mount failed [ 262.266013][ C1] DEBUG: waiting rtnl_mutex for 586 jiffies. [ 262.272547][ C1] task:dhcpcd state:D stack:20672 pid:4897 tgid:4897 ppid:4896 flags:0x00004002 [ 262.282826][ C1] Call Trace: [ 262.286161][ C1] [ 262.289114][ C1] __schedule+0x1800/0x4a60 [ 262.293665][ C1] ? __pfx___schedule+0x10/0x10 [ 262.298608][ C1] ? __pfx_lock_release+0x10/0x10 [ 262.303671][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 262.309183][ C1] ? schedule+0x90/0x320 [ 262.313490][ C1] schedule+0x14b/0x320 [ 262.317702][ C1] schedule_preempt_disabled+0x13/0x30 [ 262.323185][ C1] __mutex_lock+0x6a4/0xd70 [ 262.327754][ C1] ? __mutex_lock+0x527/0xd70 [ 262.332446][ C1] ? devinet_ioctl+0x2ce/0x1bc0 [ 262.337338][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 262.342385][ C1] ? bpf_lsm_capable+0x9/0x10 [ 262.347117][ C1] ? security_capable+0x90/0xb0 [ 262.351994][ C1] ? get_rtnl_holder+0x144/0x190 [ 262.356976][ C1] devinet_ioctl+0x2ce/0x1bc0 [ 262.361705][ C1] ? get_user_ifreq+0x1bb/0x200 [ 262.366696][ C1] inet_ioctl+0x3d7/0x4f0 [ 262.371056][ C1] ? __pfx_inet_ioctl+0x10/0x10 [ 262.375985][ C1] sock_do_ioctl+0x158/0x460 [ 262.380636][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 262.385770][ C1] ? __pfx_lock_release+0x10/0x10 [ 262.390859][ C1] sock_ioctl+0x629/0x8e0 [ 262.395240][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 262.400141][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.406173][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 262.411219][ C1] ? security_file_ioctl+0x87/0xb0 [ 262.416370][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 262.421242][ C1] __se_sys_ioctl+0xfc/0x170 [ 262.425857][ C1] do_syscall_64+0xf3/0x230 [ 262.430738][ C1] ? clear_bhb_loop+0x35/0x90 [ 262.435461][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.441419][ C1] RIP: 0033:0x7f1cb4e17d49 [ 262.445880][ C1] RSP: 002b:00007ffc10752548 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 262.454345][ C1] RAX: ffffffffffffffda RBX: 00007f1cb4d496c0 RCX: 00007f1cb4e17d49 [ 262.462380][ C1] RDX: 00007ffc10762738 RSI: 0000000000008914 RDI: 0000000000000018 [ 262.470391][ C1] RBP: 00007ffc107728f8 R08: 00007ffc107626f8 R09: 00007ffc107626a8 [ 262.478417][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 262.486435][ C1] R13: 00007ffc10762738 R14: 0000000000000028 R15: 0000000000008914 [ 262.494465][ C1] [ 262.497517][ C1] DEBUG: waiting rtnl_mutex for 593 jiffies. [ 262.503504][ C1] task:syz-executor state:D stack:21728 pid:7585 tgid:7585 ppid:7554 flags:0x00000000 [ 262.513804][ C1] Call Trace: [ 262.517113][ C1] [ 262.520038][ C1] __schedule+0x1800/0x4a60 [ 262.524550][ C1] ? __pfx___schedule+0x10/0x10 [ 262.529432][ C1] ? __pfx_lock_release+0x10/0x10 [ 262.534448][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 262.539923][ C1] ? schedule+0x90/0x320 [ 262.544161][ C1] schedule+0x14b/0x320 [ 262.548343][ C1] schedule_preempt_disabled+0x13/0x30 [ 262.553794][ C1] __mutex_lock+0x6a4/0xd70 [ 262.558306][ C1] ? __mutex_lock+0x527/0xd70 [ 262.563260][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 262.568383][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 262.573399][ C1] ? get_rtnl_holder+0x144/0x190 [ 262.578371][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 262.583300][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 262.588424][ C1] ? __lock_acquire+0x1384/0x2050 [ 262.593455][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.598946][ C1] netlink_rcv_skb+0x1e3/0x430 [ 262.603700][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 262.609170][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 262.614479][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 262.619714][ C1] netlink_unicast+0x7f6/0x990 [ 262.626352][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 262.626411][ C1] ? __virt_addr_valid+0x183/0x530 [ 262.637017][ C1] ? __check_object_size+0x49c/0x900 [ 262.642291][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 262.647425][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 262.652182][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.657472][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 262.662413][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 262.667699][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 262.673142][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.678442][ C1] __sock_sendmsg+0x221/0x270 [ 262.683108][ C1] __sys_sendto+0x3a4/0x4f0 [ 262.687620][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 262.692647][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.697865][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 262.703935][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.709944][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.716296][ C1] __x64_sys_sendto+0xde/0x100 [ 262.721047][ C1] do_syscall_64+0xf3/0x230 [ 262.725534][ C1] ? clear_bhb_loop+0x35/0x90 [ 262.730226][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.736126][ C1] RIP: 0033:0x7f2cc4f7914c [ 262.740523][ C1] RSP: 002b:00007ffedcd26530 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 262.748960][ C1] RAX: ffffffffffffffda RBX: 00007f2cc5c34620 RCX: 00007f2cc4f7914c [ 262.756939][ C1] RDX: 000000000000003c RSI: 00007f2cc5c34670 RDI: 0000000000000003 [ 262.764917][ C1] RBP: 0000000000000000 R08: 00007ffedcd26584 R09: 000000000000000c [ 262.772889][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 262.780874][ C1] R13: 0000000000000000 R14: 00007f2cc5c34670 R15: 0000000000000000 [ 262.788865][ C1] [ 262.791868][ C1] DEBUG: holding rtnl_mutex for 615 jiffies. [ 262.797857][ C1] task:kworker/u8:0 state:D stack:19576 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 262.808022][ C1] Workqueue: netns cleanup_net [ 262.812794][ C1] Call Trace: [ 262.816078][ C1] [ 262.818996][ C1] __schedule+0x1800/0x4a60 [ 262.823499][ C1] ? __pfx___schedule+0x10/0x10 [ 262.828369][ C1] ? __pfx_lock_release+0x10/0x10 [ 262.833379][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 262.839299][ C1] ? kthread_data+0x52/0xd0 [ 262.843788][ C1] ? wq_worker_sleeping+0x66/0x240 [ 262.848923][ C1] ? schedule+0x90/0x320 [ 262.853150][ C1] schedule+0x14b/0x320 [ 262.857312][ C1] synchronize_rcu_expedited+0x684/0x830 [ 262.862950][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 262.869116][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 262.874384][ C1] ? __pfx___might_resched+0x10/0x10 [ 262.879692][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.885661][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 262.891739][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.898097][ C1] synchronize_rcu+0x11b/0x360 [ 262.902844][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 262.908139][ C1] lockdep_unregister_key+0x4b7/0x540 [ 262.913520][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 262.919421][ C1] ? rcu_is_watching+0x15/0xb0 [ 262.924169][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 262.928783][ C1] __qdisc_destroy+0x165/0x410 [ 262.933537][ C1] dev_shutdown+0x9b/0x450 [ 262.937963][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 262.944287][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 262.951086][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 262.956989][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 262.963154][ C1] default_device_exit_batch+0xa0f/0xa90 [ 262.968798][ C1] ? __pfx___might_resched+0x10/0x10 [ 262.974068][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 262.980240][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 262.985509][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 262.991670][ C1] cleanup_net+0x89d/0xcc0 [ 262.996105][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 263.001034][ C1] ? process_scheduled_works+0x945/0x1830 [ 263.006762][ C1] process_scheduled_works+0xa2c/0x1830 [ 263.012332][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.018341][ C1] ? assign_work+0x364/0x3d0 [ 263.022924][ C1] worker_thread+0x86d/0xd40 [ 263.027531][ C1] ? __kthread_parkme+0x169/0x1d0 [ 263.032569][ C1] ? __pfx_worker_thread+0x10/0x10 [ 263.037699][ C1] kthread+0x2f0/0x390 [ 263.041761][ C1] ? __pfx_worker_thread+0x10/0x10 [ 263.046895][ C1] ? __pfx_kthread+0x10/0x10 [ 263.051473][ C1] ret_from_fork+0x4b/0x80 [ 263.055879][ C1] ? __pfx_kthread+0x10/0x10 [ 263.060482][ C1] ret_from_fork_asm+0x1a/0x30 [ 263.065265][ C1] [ 263.068295][ C1] [ 263.068295][ C1] Showing all locks held in the system: [ 263.076021][ C1] 5 locks held by kworker/u8:0/11: [ 263.081493][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 263.092481][ C1] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 263.103041][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 263.112468][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 263.122496][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 263.133425][ C1] 3 locks held by kworker/1:1/47: [ 263.138449][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 263.149436][ C1] #1: ffffc90000b77d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 263.160413][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 263.169411][ C1] 3 locks held by kworker/u8:5/988: [ 263.174589][ C1] #0: ffff88802a533948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 263.186182][ C1] #1: ffffc9000430fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 263.199014][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 263.208540][ C1] 2 locks held by kworker/u8:6/1075: [ 263.213835][ C1] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 263.225517][ C1] #1: ffffc9000466fd00 (connector_reaper_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 263.236600][ C1] 2 locks held by kworker/u8:7/1121: [ 263.241868][ C1] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 263.253549][ C1] #1: ffffc9000482fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 263.265693][ C1] 2 locks held by kworker/u8:8/2490: [ 263.270985][ C1] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 263.282664][ C1] #1: ffffc900097dfd00 ((reaper_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 263.293411][ C1] 5 locks held by kworker/u8:13/3014: [ 263.298803][ C1] 1 lock held by dhcpcd/4897: [ 263.303459][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 263.312629][ C1] 2 locks held by getty/4980: [ 263.317308][ C1] #0: ffff88802ab9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 263.327073][ C1] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 263.337194][ C1] 3 locks held by kworker/1:4/5276: [ 263.342386][ C1] 1 lock held by syz-executor/7585: [ 263.347603][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 263.357019][ C1] 1 lock held by syz.1.437/7742: [ 263.361954][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 263.371369][ C1] 1 lock held by syz.1.437/7743: [ 263.376308][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 263.385724][ C1] 2 locks held by syz.2.438/7748: [ 263.390864][ C1] #0: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 263.400996][ C1] #1: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 263.410857][ C1] 1 lock held by syz.2.438/7761: [ 263.415801][ C1] #0: ffffffff8e7e6ce8 (text_mutex){+.+.}-{3:3}, at: text_poke_copy+0x29/0xd0 [ 263.424867][ C1] 1 lock held by syz.2.438/7762: [ 263.429817][ C1] #0: ffffffff8e7e6ce8 (text_mutex){+.+.}-{3:3}, at: text_poke_copy+0x29/0xd0 [ 263.438794][ C1] 2 locks held by syz.4.440/7755: [ 263.443800][ C1] 1 lock held by syz.4.440/7756: [ 263.448749][ C1] #0: ffff88802efaea18 (&mm->mmap_lock){++++}-{3:3}, at: mmap_read_lock_killable+0x1d/0x70 [ 263.458858][ C1] [ 263.461183][ C1] ============================================= [ 263.461183][ C1] [ 264.506143][ C1] DEBUG: waiting rtnl_mutex for 720 jiffies. [ 264.512315][ C1] task:kworker/u8:5 state:D stack:18704 pid:988 tgid:988 ppid:2 flags:0x00004000 [ 264.522615][ C1] Workqueue: ipv6_addrconf addrconf_dad_work [ 264.528736][ C1] Call Trace: [ 264.532139][ C1] [ 264.535108][ C1] __schedule+0x1800/0x4a60 [ 264.539764][ C1] ? __pfx___schedule+0x10/0x10 [ 264.544720][ C1] ? __pfx_lock_release+0x10/0x10 [ 264.549855][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 264.555467][ C1] ? kthread_data+0x52/0xd0 [ 264.560090][ C1] ? schedule+0x90/0x320 [ 264.564517][ C1] ? wq_worker_sleeping+0x66/0x240 [ 264.569742][ C1] ? schedule+0x90/0x320 [ 264.574047][ C1] schedule+0x14b/0x320 [ 264.578318][ C1] schedule_preempt_disabled+0x13/0x30 [ 264.583941][ C1] __mutex_lock+0x6a4/0xd70 [ 264.588536][ C1] ? mark_lock+0x9a/0x360 [ 264.592933][ C1] ? __mutex_lock+0x527/0xd70 [ 264.597719][ C1] ? addrconf_dad_work+0xd0/0x16f0 [ 264.602893][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 264.608000][ C1] ? get_rtnl_holder+0x144/0x190 [ 264.612999][ C1] addrconf_dad_work+0xd0/0x16f0 [ 264.618040][ C1] ? __pfx_addrconf_dad_work+0x10/0x10 [ 264.623558][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.630019][ C1] ? process_scheduled_works+0x945/0x1830 [ 264.635794][ C1] process_scheduled_works+0xa2c/0x1830 [ 264.641558][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.647631][ C1] ? assign_work+0x364/0x3d0 [ 264.652276][ C1] worker_thread+0x86d/0xd40 [ 264.656945][ C1] ? __kthread_parkme+0x169/0x1d0 [ 264.662039][ C1] ? __pfx_worker_thread+0x10/0x10 [ 264.667224][ C1] kthread+0x2f0/0x390 [ 264.671318][ C1] ? __pfx_worker_thread+0x10/0x10 [ 264.676496][ C1] ? __pfx_kthread+0x10/0x10 [ 264.681132][ C1] ret_from_fork+0x4b/0x80 [ 264.685597][ C1] ? __pfx_kthread+0x10/0x10 [ 264.690229][ C1] ret_from_fork_asm+0x1a/0x30 [ 264.695073][ C1] [ 264.698139][ C1] DEBUG: waiting rtnl_mutex for 721 jiffies. [ 264.704129][ C1] task:kworker/1:1 state:D stack:22768 pid:47 tgid:47 ppid:2 flags:0x00004000 [ 264.714382][ C1] Workqueue: events linkwatch_event [ 264.719645][ C1] Call Trace: [ 264.722939][ C1] [ 264.725889][ C1] __schedule+0x1800/0x4a60 [ 264.730530][ C1] ? __pfx___schedule+0x10/0x10 [ 264.735429][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 264.741479][ C1] ? __pfx_lock_release+0x10/0x10 [ 264.746582][ C1] ? kick_pool+0x1bd/0x620 [ 264.751148][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 264.756522][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 264.761799][ C1] ? schedule+0x90/0x320 [ 264.766112][ C1] schedule+0x14b/0x320 [ 264.770352][ C1] schedule_preempt_disabled+0x13/0x30 [ 264.775874][ C1] __mutex_lock+0x6a4/0xd70 [ 264.780450][ C1] ? __mutex_lock+0x527/0xd70 [ 264.785159][ C1] ? linkwatch_event+0xe/0x60 [ 264.789888][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 264.794970][ C1] ? get_rtnl_holder+0x144/0x190 [ 264.799954][ C1] ? process_scheduled_works+0x945/0x1830 [ 264.805726][ C1] linkwatch_event+0xe/0x60 [ 264.810282][ C1] process_scheduled_works+0xa2c/0x1830 [ 264.815920][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 264.821979][ C1] ? assign_work+0x364/0x3d0 [ 264.826643][ C1] worker_thread+0x86d/0xd40 [ 264.831319][ C1] ? __kthread_parkme+0x169/0x1d0 [ 264.836408][ C1] ? __pfx_worker_thread+0x10/0x10 [ 264.841567][ C1] kthread+0x2f0/0x390 [ 264.845684][ C1] ? __pfx_worker_thread+0x10/0x10 [ 264.850865][ C1] ? __pfx_kthread+0x10/0x10 [ 264.855475][ C1] ret_from_fork+0x4b/0x80 [ 264.859998][ C1] ? __pfx_kthread+0x10/0x10 [ 264.864665][ C1] ret_from_fork_asm+0x1a/0x30 [ 264.869519][ C1] [ 264.872690][ C1] DEBUG: waiting rtnl_mutex for 846 jiffies. [ 264.878729][ C1] task:dhcpcd state:D stack:20672 pid:4897 tgid:4897 ppid:4896 flags:0x00004002 [ 264.888977][ C1] Call Trace: [ 264.892283][ C1] [ 264.895260][ C1] __schedule+0x1800/0x4a60 [ 264.899865][ C1] ? __pfx___schedule+0x10/0x10 [ 264.904773][ C1] ? __pfx_lock_release+0x10/0x10 [ 264.909877][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 264.915400][ C1] ? schedule+0x90/0x320 [ 264.919708][ C1] schedule+0x14b/0x320 [ 264.923918][ C1] schedule_preempt_disabled+0x13/0x30 [ 264.929458][ C1] __mutex_lock+0x6a4/0xd70 [ 264.933998][ C1] ? __mutex_lock+0x527/0xd70 [ 264.938746][ C1] ? devinet_ioctl+0x2ce/0x1bc0 [ 264.943633][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 264.948721][ C1] ? bpf_lsm_capable+0x9/0x10 [ 264.953425][ C1] ? security_capable+0x90/0xb0 [ 264.958334][ C1] ? get_rtnl_holder+0x144/0x190 [ 264.963330][ C1] devinet_ioctl+0x2ce/0x1bc0 [ 264.968088][ C1] ? get_user_ifreq+0x1bb/0x200 [ 264.972993][ C1] inet_ioctl+0x3d7/0x4f0 [ 264.977394][ C1] ? __pfx_inet_ioctl+0x10/0x10 [ 264.982351][ C1] sock_do_ioctl+0x158/0x460 [ 264.987014][ C1] ? __pfx_sock_do_ioctl+0x10/0x10 [ 264.992179][ C1] ? __pfx_lock_release+0x10/0x10 [ 264.997352][ C1] sock_ioctl+0x629/0x8e0 [ 265.001740][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 265.006664][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.012714][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 265.017711][ C1] ? security_file_ioctl+0x87/0xb0 [ 265.022849][ C1] ? __pfx_sock_ioctl+0x10/0x10 [ 265.027767][ C1] __se_sys_ioctl+0xfc/0x170 [ 265.032414][ C1] do_syscall_64+0xf3/0x230 [ 265.036969][ C1] ? clear_bhb_loop+0x35/0x90 [ 265.041697][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.047677][ C1] RIP: 0033:0x7f1cb4e17d49 [ 265.052115][ C1] RSP: 002b:00007ffc10752548 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 265.060587][ C1] RAX: ffffffffffffffda RBX: 00007f1cb4d496c0 RCX: 00007f1cb4e17d49 [ 265.068617][ C1] RDX: 00007ffc10762738 RSI: 0000000000008914 RDI: 0000000000000018 [ 265.076625][ C1] RBP: 00007ffc107728f8 R08: 00007ffc107626f8 R09: 00007ffc107626a8 [ 265.084643][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 265.092655][ C1] R13: 00007ffc10762738 R14: 0000000000000028 R15: 0000000000008914 [ 265.100694][ C1] [ 265.103739][ C1] DEBUG: waiting rtnl_mutex for 853 jiffies. [ 265.109753][ C1] task:syz-executor state:D stack:21728 pid:7585 tgid:7585 ppid:7554 flags:0x00000000 [ 265.119980][ C1] Call Trace: [ 265.123282][ C1] [ 265.126266][ C1] __schedule+0x1800/0x4a60 [ 265.130869][ C1] ? __pfx___schedule+0x10/0x10 [ 265.135852][ C1] ? __pfx_lock_release+0x10/0x10 [ 265.140950][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 265.146474][ C1] ? schedule+0x90/0x320 [ 265.150761][ C1] schedule+0x14b/0x320 [ 265.154961][ C1] schedule_preempt_disabled+0x13/0x30 [ 265.160489][ C1] __mutex_lock+0x6a4/0xd70 [ 265.165047][ C1] ? __mutex_lock+0x527/0xd70 [ 265.169791][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 265.174957][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 265.180044][ C1] ? get_rtnl_holder+0x144/0x190 [ 265.185025][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 265.190059][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 265.195243][ C1] ? __lock_acquire+0x1384/0x2050 [ 265.200393][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.205912][ C1] netlink_rcv_skb+0x1e3/0x430 [ 265.210774][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 265.216368][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 265.221716][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 265.226994][ C1] netlink_unicast+0x7f6/0x990 [ 265.231850][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 265.237203][ C1] ? __virt_addr_valid+0x183/0x530 [ 265.242345][ C1] ? __check_object_size+0x49c/0x900 [ 265.247781][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 265.252951][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 265.257779][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.263144][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 265.268138][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 265.273449][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 265.278970][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.284277][ C1] __sock_sendmsg+0x221/0x270 [ 265.289035][ C1] __sys_sendto+0x3a4/0x4f0 [ 265.293595][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 265.298706][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 265.303946][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 265.310075][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.316140][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.322523][ C1] __x64_sys_sendto+0xde/0x100 [ 265.327349][ C1] do_syscall_64+0xf3/0x230 [ 265.331918][ C1] ? clear_bhb_loop+0x35/0x90 [ 265.336669][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.342609][ C1] RIP: 0033:0x7f2cc4f7914c [ 265.347076][ C1] RSP: 002b:00007ffedcd26530 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 265.355528][ C1] RAX: ffffffffffffffda RBX: 00007f2cc5c34620 RCX: 00007f2cc4f7914c [ 265.363552][ C1] RDX: 000000000000003c RSI: 00007f2cc5c34670 RDI: 0000000000000003 [ 265.371603][ C1] RBP: 0000000000000000 R08: 00007ffedcd26584 R09: 000000000000000c [ 265.379665][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 265.387689][ C1] R13: 0000000000000000 R14: 00007f2cc5c34670 R15: 0000000000000000 [ 265.395720][ C1] [ 265.398784][ C1] DEBUG: holding rtnl_mutex for 876 jiffies. [ 265.404782][ C1] task:kworker/u8:0 state:D stack:19576 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 265.415042][ C1] Workqueue: netns cleanup_net [ 265.419872][ C1] Call Trace: [ 265.423165][ C1] [ 265.426134][ C1] __schedule+0x1800/0x4a60 [ 265.430733][ C1] ? __pfx___schedule+0x10/0x10 [ 265.435630][ C1] ? __pfx_lock_release+0x10/0x10 [ 265.440721][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 265.446681][ C1] ? kthread_data+0x52/0xd0 [ 265.451238][ C1] ? wq_worker_sleeping+0x66/0x240 [ 265.456398][ C1] ? schedule+0x90/0x320 [ 265.460711][ C1] schedule+0x14b/0x320 [ 265.464933][ C1] synchronize_rcu_expedited+0x684/0x830 [ 265.470626][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 265.476851][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 265.482198][ C1] ? __pfx___might_resched+0x10/0x10 [ 265.487573][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 265.493610][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 265.499757][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.506168][ C1] synchronize_rcu+0x11b/0x360 [ 265.510990][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 265.516341][ C1] lockdep_unregister_key+0x4b7/0x540 [ 265.521764][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 265.527743][ C1] ? rcu_is_watching+0x15/0xb0 [ 265.532538][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 265.537200][ C1] __qdisc_destroy+0x165/0x410 [ 265.542028][ C1] dev_shutdown+0x357/0x450 [ 265.546610][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 265.552996][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 265.559839][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 265.565802][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 265.572027][ C1] default_device_exit_batch+0xa0f/0xa90 [ 265.577736][ C1] ? __pfx___might_resched+0x10/0x10 [ 265.583070][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 265.589283][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 265.594640][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 265.600838][ C1] cleanup_net+0x89d/0xcc0 [ 265.605287][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 265.610303][ C1] ? process_scheduled_works+0x945/0x1830 [ 265.616100][ C1] process_scheduled_works+0xa2c/0x1830 [ 265.621708][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 265.627770][ C1] ? assign_work+0x364/0x3d0 [ 265.632416][ C1] worker_thread+0x86d/0xd40 [ 265.637089][ C1] ? __kthread_parkme+0x169/0x1d0 [ 265.642162][ C1] ? __pfx_worker_thread+0x10/0x10 [ 265.647355][ C1] kthread+0x2f0/0x390 [ 265.651447][ C1] ? __pfx_worker_thread+0x10/0x10 [ 265.656629][ C1] ? __pfx_kthread+0x10/0x10 [ 265.661275][ C1] ret_from_fork+0x4b/0x80 [ 265.665771][ C1] ? __pfx_kthread+0x10/0x10 [ 265.670406][ C1] ret_from_fork_asm+0x1a/0x30 [ 265.675223][ C1] [ 265.678292][ C1] [ 265.678292][ C1] Showing all locks held in the system: [ 265.686050][ C1] 5 locks held by kworker/u8:0/11: [ 265.691184][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 265.702213][ C1] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 265.712871][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 265.722378][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 265.732521][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 265.743510][ C1] 2 locks held by kworker/u8:1/12: [ 265.748664][ C1] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 265.760429][ C1] #1: ffffc90000117d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 265.772734][ C1] 3 locks held by kworker/1:1/47: [ 265.777809][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 265.788917][ C1] #1: ffffc90000b77d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 265.800015][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 265.809105][ C1] 3 locks held by kworker/u8:5/988: [ 265.814345][ C1] #0: ffff88802a533948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 265.826080][ C1] #1: ffffc9000430fd00 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 265.839008][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_dad_work+0xd0/0x16f0 [ 265.848566][ C1] 3 locks held by kworker/u8:7/1121: [ 265.853886][ C1] 2 locks held by kworker/u8:8/2490: [ 265.859238][ C1] 2 locks held by kworker/u8:13/3014: [ 265.864650][ C1] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 265.876474][ C1] #1: ffffc9000a28fd00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 265.888721][ C1] 1 lock held by dhcpcd/4897: [ 265.893507][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: devinet_ioctl+0x2ce/0x1bc0 [ 265.902782][ C1] 2 locks held by getty/4980: [ 265.907499][ C1] #0: ffff88802ab9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 265.917373][ C1] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 265.927619][ C1] 1 lock held by syz-executor/5243: [ 265.932847][ C1] 1 lock held by ipvs-e:3:0/7107: [ 265.937909][ C1] 1 lock held by syz-executor/7585: [ 265.943210][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 265.952735][ C1] 1 lock held by syz.1.437/7742: [ 265.957702][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 265.967340][ C1] 1 lock held by syz.1.437/7743: [ 265.972301][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 265.981843][ C1] 2 locks held by syz.0.439/7754: [ 265.986906][ C1] 1 lock held by syz.2.441/7772: [ 265.991862][ C1] [ 265.994220][ C1] ============================================= [ 265.994220][ C1] [ 266.297445][ T7754] loop0: detected capacity change from 0 to 32768 [ 266.347516][ T7783] loop4: detected capacity change from 0 to 256 [ 266.991210][ T7791] overlay: ./file0 is not a directory [ 267.066273][ C1] DEBUG: waiting rtnl_mutex for 976 jiffies. [ 267.072337][ C1] task:kworker/u8:5 state:D stack:18704 pid:988 tgid:988 ppid:2 flags:0x00004000 [ 267.082604][ C1] Workqueue: 0x0 (events_unbound) [ 267.087796][ C1] Call Trace: [ 267.091096][ C1] [ 267.094062][ C1] __schedule+0x1800/0x4a60 [ 267.098656][ C1] ? __pfx___schedule+0x10/0x10 [ 267.103539][ C1] ? __pfx_lock_release+0x10/0x10 [ 267.108669][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 267.114686][ C1] ? schedule+0x90/0x320 [ 267.119016][ C1] ? wq_worker_sleeping+0x66/0x240 [ 267.124162][ C1] ? schedule+0x90/0x320 [ 267.128485][ C1] schedule+0x14b/0x320 [ 267.132676][ C1] worker_thread+0xa2c/0xd40 [ 267.137370][ C1] ? __kthread_parkme+0x169/0x1d0 [ 267.142437][ C1] ? __pfx_worker_thread+0x10/0x10 [ 267.147632][ C1] kthread+0x2f0/0x390 [ 267.151727][ C1] ? __pfx_worker_thread+0x10/0x10 [ 267.156918][ C1] ? __pfx_kthread+0x10/0x10 [ 267.161540][ C1] ret_from_fork+0x4b/0x80 [ 267.166027][ C1] ? __pfx_kthread+0x10/0x10 [ 267.170653][ C1] ret_from_fork_asm+0x1a/0x30 [ 267.175466][ C1] [ 267.178560][ C1] DEBUG: waiting rtnl_mutex for 969 jiffies. [ 267.184555][ C1] task:kworker/1:1 state:R running task stack:22768 pid:47 tgid:47 ppid:2 flags:0x00004000 [ 267.196386][ C1] Workqueue: events linkwatch_event [ 267.201622][ C1] Call Trace: [ 267.204921][ C1] [ 267.207926][ C1] __schedule+0x1800/0x4a60 [ 267.212484][ C1] ? __pfx___schedule+0x10/0x10 [ 267.217410][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 267.223425][ C1] ? __pfx_lock_release+0x10/0x10 [ 267.228552][ C1] ? kick_pool+0x1bd/0x620 [ 267.233024][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 267.238316][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 267.243555][ C1] ? schedule+0x90/0x320 [ 267.247878][ C1] schedule+0x14b/0x320 [ 267.252075][ C1] schedule_preempt_disabled+0x13/0x30 [ 267.257642][ C1] __mutex_lock+0x6a4/0xd70 [ 267.262189][ C1] ? __mutex_lock+0x527/0xd70 [ 267.266928][ C1] ? linkwatch_event+0xe/0x60 [ 267.271633][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 267.276746][ C1] ? get_rtnl_holder+0x144/0x190 [ 267.281717][ C1] ? process_scheduled_works+0x945/0x1830 [ 267.287526][ C1] linkwatch_event+0xe/0x60 [ 267.292066][ C1] process_scheduled_works+0xa2c/0x1830 [ 267.297722][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.303743][ C1] ? assign_work+0x364/0x3d0 [ 267.308426][ C1] worker_thread+0x86d/0xd40 [ 267.313080][ C1] ? __kthread_parkme+0x169/0x1d0 [ 267.318209][ C1] ? __pfx_worker_thread+0x10/0x10 [ 267.323359][ C1] kthread+0x2f0/0x390 [ 267.327198][ T7785] loop2: detected capacity change from 0 to 40427 [ 267.327477][ C1] ? __pfx_worker_thread+0x10/0x10 [ 267.339002][ C1] ? __pfx_kthread+0x10/0x10 [ 267.343619][ C1] ret_from_fork+0x4b/0x80 [ 267.348103][ C1] ? __pfx_kthread+0x10/0x10 [ 267.352728][ C1] ret_from_fork_asm+0x1a/0x30 [ 267.357613][ C1] [ 267.360650][ C1] DEBUG: waiting rtnl_mutex for 729 jiffies. [ 267.361736][ T7785] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 267.366658][ C1] task:syz.1.437 state:D stack:24504 pid:7742 tgid:7739 ppid:5235 flags:0x00000004 [ 267.383583][ C1] Call Trace: [ 267.386913][ C1] [ 267.389876][ C1] __schedule+0x1800/0x4a60 [ 267.392786][ T7785] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 267.394419][ C1] ? __pfx___schedule+0x10/0x10 [ 267.407520][ C1] ? __pfx_lock_release+0x10/0x10 [ 267.411608][ T7787] loop4: detected capacity change from 0 to 32768 [ 267.412560][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 267.424505][ C1] ? schedule+0x90/0x320 [ 267.428824][ C1] schedule+0x14b/0x320 [ 267.433021][ C1] schedule_preempt_disabled+0x13/0x30 [ 267.438584][ C1] __mutex_lock+0x6a4/0xd70 [ 267.443122][ C1] ? __mutex_lock+0x527/0xd70 [ 267.447883][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 267.453039][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 267.458172][ C1] ? get_rtnl_holder+0x144/0x190 [ 267.459598][ T7785] F2FS-fs (loop2): Found nat_bits in checkpoint [ 267.463121][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 267.472135][ T7787] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.445 (7787) [ 267.474303][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 267.492077][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.497618][ C1] ? ref_tracker_free+0x643/0x7e0 [ 267.502683][ C1] netlink_rcv_skb+0x1e3/0x430 [ 267.507536][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.513032][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.518435][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.523666][ C1] netlink_unicast+0x7f6/0x990 [ 267.528509][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 267.533820][ C1] ? __virt_addr_valid+0x183/0x530 [ 267.539002][ C1] ? __check_object_size+0x49c/0x900 [ 267.544325][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 267.549521][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 267.554407][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.559763][ C1] ? __import_iovec+0x536/0x820 [ 267.564647][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 267.569666][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 267.574967][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 267.580498][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.585805][ C1] __sock_sendmsg+0x221/0x270 [ 267.590558][ C1] ____sys_sendmsg+0x525/0x7d0 [ 267.595363][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.600739][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 267.605358][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.610589][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.616986][ C1] ? do_syscall_64+0x100/0x230 [ 267.621779][ C1] ? do_syscall_64+0xb6/0x230 [ 267.626519][ C1] do_syscall_64+0xf3/0x230 [ 267.631048][ C1] ? clear_bhb_loop+0x35/0x90 [ 267.635760][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.641741][ C1] RIP: 0033:0x7f8760d773b9 [ 267.646213][ C1] RSP: 002b:00007f8761a7d048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.654664][ C1] RAX: ffffffffffffffda RBX: 00007f8760f05f80 RCX: 00007f8760d773b9 [ 267.658481][ T7785] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 267.662694][ C1] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 267.677722][ C1] RBP: 00007f8760de48e6 R08: 0000000000000000 R09: 0000000000000000 [ 267.685724][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.693763][ C1] R13: 000000000000000b R14: 00007f8760f05f80 R15: 00007fff0b7564c8 [ 267.701808][ C1] [ 267.704844][ C1] DEBUG: waiting rtnl_mutex for 730 jiffies. [ 267.710533][ T7785] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 267.710860][ C1] task:syz.1.437 state:D stack:23672 pid:7743 tgid:7739 ppid:5235 flags:0x00000004 [ 267.728530][ C1] Call Trace: [ 267.731831][ C1] [ 267.734780][ C1] __schedule+0x1800/0x4a60 [ 267.739395][ C1] ? __pfx___schedule+0x10/0x10 [ 267.744281][ C1] ? __pfx_lock_release+0x10/0x10 [ 267.749389][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 267.754892][ C1] ? schedule+0x90/0x320 [ 267.759225][ C1] schedule+0x14b/0x320 [ 267.763426][ C1] schedule_preempt_disabled+0x13/0x30 [ 267.768978][ C1] __mutex_lock+0x6a4/0xd70 [ 267.773517][ C1] ? __mutex_lock+0x527/0xd70 [ 267.778291][ C1] ? rtnetlink_rcv_msg+0x6eb/0xd00 [ 267.782408][ T7785] syz.2.444: attempt to access beyond end of device [ 267.782408][ T7785] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 267.783433][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 267.802171][ C1] ? get_rtnl_holder+0x144/0x190 [ 267.807176][ C1] rtnetlink_rcv_msg+0x6eb/0xd00 [ 267.812156][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 267.817337][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.822835][ C1] ? ref_tracker_free+0x643/0x7e0 [ 267.827942][ C1] netlink_rcv_skb+0x1e3/0x430 [ 267.832749][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 267.838292][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 267.843632][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 267.848923][ C1] netlink_unicast+0x7f6/0x990 [ 267.853735][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 267.859099][ C1] ? __virt_addr_valid+0x183/0x530 [ 267.864247][ C1] ? __check_object_size+0x49c/0x900 [ 267.869615][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 267.874766][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 267.879623][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.884936][ C1] ? __import_iovec+0x536/0x820 [ 267.889861][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 267.894836][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 267.900201][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 267.905694][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 267.911057][ C1] __sock_sendmsg+0x221/0x270 [ 267.915775][ C1] ____sys_sendmsg+0x525/0x7d0 [ 267.920623][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 267.926000][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 267.930639][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 267.935779][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 267.941795][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 267.948187][ C1] ? do_syscall_64+0x100/0x230 [ 267.952984][ C1] ? do_syscall_64+0xb6/0x230 [ 267.957752][ C1] do_syscall_64+0xf3/0x230 [ 267.962291][ C1] ? clear_bhb_loop+0x35/0x90 [ 267.967053][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.972971][ C1] RIP: 0033:0x7f8760d773b9 [ 267.977457][ C1] RSP: 002b:00007f87607ff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 267.985906][ C1] RAX: ffffffffffffffda RBX: 00007f8760f06058 RCX: 00007f8760d773b9 [ 267.993956][ C1] RDX: 0000000000000000 RSI: 0000000020000300 RDI: 0000000000000006 [ 268.002061][ C1] RBP: 00007f8760de48e6 R08: 0000000000000000 R09: 0000000000000000 [ 268.010103][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 268.018673][ C1] R13: 000000000000006e R14: 00007f8760f06058 R15: 00007fff0b7564c8 [ 268.026730][ C1] [ 268.029777][ C1] [ 268.029777][ C1] Showing all locks held in the system: [ 268.037553][ C1] 4 locks held by kworker/u8:0/11: [ 268.042679][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 268.053689][ C1] #1: ffffc90000107d00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 268.064393][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 268.073917][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 268.082813][ C1] 3 locks held by kworker/1:1/47: [ 268.087922][ C1] 5 locks held by kworker/u8:7/1121: [ 268.093228][ C1] #0: ffff88802b01d948 ((wq_completion)bat_events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 268.104675][ C1] #1: ffffc9000482fd00 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 268.117922][ C1] #2: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: batadv_nc_worker+0xcb/0x610 [ 268.127543][ C1] #3: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 268.137725][ C1] #4: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 268.147699][ C1] 2 locks held by dhcpcd/4897: [ 268.152484][ C1] #0: ffff888020ab5678 (nlk_cb_mutex-ROUTE){+.+.}-{3:3}, at: __netlink_dump_start+0x119/0x790 [ 268.162978][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnl_dumpit+0x9e/0x210 [ 268.171859][ C1] 2 locks held by getty/4980: [ 268.176643][ C1] #0: ffff88802ab9c0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 268.186491][ C1] #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 268.196811][ C1] 2 locks held by kworker/0:8/5323: [ 268.202030][ C1] 1 lock held by syz-executor/5515: [ 268.207299][ C1] #0: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 268.218280][ C1] 1 lock held by udevd/6837: [ 268.222980][ C1] #0: ffffffff8eeada68 (uuid_mutex){+.+.}-{3:3}, at: btrfs_control_ioctl+0x150/0x3e0 [ 268.232680][ C1] 2 locks held by syz-executor/7585: [ 268.238024][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 268.247546][ C1] #1: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 268.258523][ C1] 1 lock held by syz.1.437/7742: [ 268.263477][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 268.273034][ C1] 1 lock held by syz.1.437/7743: [ 268.278029][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 268.287565][ C1] 2 locks held by syz.4.445/7787: [ 268.292615][ C1] #0: ffffffff8eeada68 (uuid_mutex){+.+.}-{3:3}, at: btrfs_get_tree+0x2dc/0x1920 [ 268.301958][ C1] #1: ffffffff8e9f2688 (lock#3){+.+.}-{3:3}, at: __lru_add_drain_all+0x66/0x560 [ 268.311199][ C1] 1 lock held by syz.0.447/7798: [ 268.316200][ C1] [ 268.318546][ C1] ============================================= [ 268.318546][ C1] [ 268.337072][ T7742] netlink: 'syz.1.437': attribute type 7 has an invalid length. [ 268.351992][ T5515] syz-executor: attempt to access beyond end of device [ 268.351992][ T5515] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 268.376260][ T7742] netlink: 'syz.1.437': attribute type 39 has an invalid length. [ 268.393248][ T7787] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 268.425684][ T5515] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 268.436208][ T7787] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 268.445675][ T7787] BTRFS info (device loop4): using free-space-tree [ 268.455574][ T7743] bridge1: port 1(gretap1) entered blocking state [ 268.476158][ T7743] bridge1: port 1(gretap1) entered disabled state [ 268.482929][ T7743] gretap1: entered allmulticast mode [ 268.528618][ T7743] gretap1: entered promiscuous mode [ 268.823754][ T7585] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.860522][ T7585] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.876232][ T7585] bridge_slave_0: entered allmulticast mode [ 268.893800][ T7585] bridge_slave_0: entered promiscuous mode [ 268.933306][ T7585] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.997095][ T7585] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.004444][ T7585] bridge_slave_1: entered allmulticast mode [ 269.067680][ T5243] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 269.067826][ T7585] bridge_slave_1: entered promiscuous mode [ 269.092947][ T7830] loop1: detected capacity change from 0 to 512 [ 269.359467][ T7830] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.450: iget: special inode unallocated [ 269.384417][ T7830] EXT4-fs (loop1): get root inode failed [ 269.390567][ T7830] EXT4-fs (loop1): mount failed [ 270.200000][ T29] audit: type=1326 audit(1722599691.973:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7829 comm="syz.1.450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8760d773b9 code=0x0 [ 271.376949][ T7585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.401760][ T7585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.783022][ T7585] team0: Port device team_slave_0 added [ 271.860820][ T7585] team0: Port device team_slave_1 added [ 272.058902][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.080764][ T11] IPVS: stop unused estimator thread 0... [ 272.098435][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.214222][ T7585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.363423][ T7585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.396052][ T7585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.489058][ T7585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.658662][ T7890] overlay: ./file0 is not a directory [ 272.691163][ T7585] hsr_slave_0: entered promiscuous mode [ 272.726320][ T7585] hsr_slave_1: entered promiscuous mode [ 272.751905][ T7585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.769597][ T7585] Cannot create hsr debugfs directory [ 273.008873][ T7876] loop0: detected capacity change from 0 to 32768 [ 273.052250][ T7861] loop1: detected capacity change from 0 to 40427 [ 273.080389][ T7861] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 273.106370][ T7876] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 273.122985][ T7861] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 273.200022][ T7861] F2FS-fs (loop1): Found nat_bits in checkpoint [ 273.216204][ T7876] XFS (loop0): Ending clean mount [ 273.243304][ T7876] XFS (loop0): Quotacheck needed: Please wait. [ 273.256487][ T25] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 273.347825][ T7876] XFS (loop0): Quotacheck: Done. [ 273.444299][ T7861] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 273.464937][ T7861] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 273.496676][ T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 273.518752][ T25] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0093, bcdDevice=23.5a [ 273.543757][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.564956][ T25] usb 5-1: Product: syz [ 273.569558][ T25] usb 5-1: Manufacturer: syz [ 273.585200][ T25] usb 5-1: SerialNumber: syz [ 273.601595][ T25] usb 5-1: config 0 descriptor?? [ 273.828622][ T7887] loop2: detected capacity change from 0 to 40427 [ 273.840888][ T25] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-8 [ 273.861718][ T2490] kworker/u8:8: attempt to access beyond end of device [ 273.861718][ T2490] loop1: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 273.867998][ T25] dvb_usb_af9035 5-1:0.0: probe with driver dvb_usb_af9035 failed with error -8 [ 273.894164][ T7887] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 273.917088][ T7887] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 273.990122][ T25] usb 5-1: USB disconnect, device number 20 [ 274.007388][ T7887] F2FS-fs (loop2): Found nat_bits in checkpoint [ 274.118496][ T7924] trusted_key: encrypted_key: insufficient parameters specified [ 274.201749][ T7924] netlink: 'syz.0.455': attribute type 1 has an invalid length. [ 274.233126][ T7887] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 274.256307][ T7887] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 274.337029][ T7887] syz.2.457: attempt to access beyond end of device [ 274.337029][ T7887] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 274.345467][ T7585] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 274.380907][ T7585] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 274.452182][ T7585] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 274.495323][ T5515] syz-executor: attempt to access beyond end of device [ 274.495323][ T5515] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 274.522725][ T7585] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 274.538196][ T5515] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 274.789806][ T7937] netlink: 'syz.1.459': attribute type 7 has an invalid length. [ 274.809146][ T7937] netlink: 'syz.1.459': attribute type 39 has an invalid length. [ 275.014636][ T7585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 275.093665][ T7937] netlink: 68 bytes leftover after parsing attributes in process `syz.1.459'. [ 275.111836][ T7585] 8021q: adding VLAN 0 to HW filter on device team0 [ 275.159594][ T47] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.166823][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state [ 275.220307][ T47] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.228669][ T47] bridge0: port 2(bridge_slave_1) entered forwarding state [ 275.379023][ T7585] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 275.441077][ T7585] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 276.553302][ T7964] loop1: detected capacity change from 0 to 512 [ 276.669877][ T7964] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.463: iget: special inode unallocated [ 276.717374][ T7964] EXT4-fs (loop1): get root inode failed [ 276.723067][ T7964] EXT4-fs (loop1): mount failed [ 277.021542][ T7585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.622813][ T6035] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 277.964979][ T29] audit: type=1326 audit(1722599699.733:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7963 comm="syz.1.463" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8760d773b9 code=0x0 [ 278.220293][ T7988] loop2: detected capacity change from 0 to 64 [ 278.239084][ T7585] veth0_vlan: entered promiscuous mode [ 278.348104][ T7585] veth1_vlan: entered promiscuous mode [ 278.483369][ T7585] veth0_macvtap: entered promiscuous mode [ 278.494535][ T7585] veth1_macvtap: entered promiscuous mode [ 278.512567][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.524403][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.543991][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.568451][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.586168][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.611827][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.624500][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.655763][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.676399][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 278.708647][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.745934][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.751962][ T8002] overlay: ./file0 is not a directory [ 278.769875][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.805142][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.822609][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.848118][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.888975][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.920387][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 278.966304][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 278.992267][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.032803][ T7585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.063950][ T7585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.076319][ T7585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.103573][ T7585] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.113593][ T7585] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.124517][ T7585] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.168001][ T7585] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.301626][ T8008] loop4: detected capacity change from 0 to 2048 [ 279.421528][ T8008] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 279.737446][ T8008] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 279.753724][ T8008] bond0: (slave batadv3): Enslaving as an active interface with an up link [ 279.995422][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 280.080949][ T8018] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.121731][ T8018] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.173219][ T988] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.174898][ T8018] loop0: detected capacity change from 0 to 16 [ 280.226602][ T988] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.235422][ T8018] erofs: (device loop0): mounted with root inode @ nid 36. [ 280.340679][ T1121] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.364233][ T8018] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 280.379256][ T1121] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.435443][ T55] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000] [ 280.488799][ T8018] erofs: (device loop0): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 280.540945][ T29] audit: type=1800 audit(1722599702.313:87): pid=8018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.465" name="file2" dev="loop0" ino=89 res=0 errno=0 [ 282.691393][ T8015] loop1: detected capacity change from 0 to 40427 [ 282.723443][ T8066] loop3: detected capacity change from 0 to 512 [ 282.734053][ T8015] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 282.763019][ T8015] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 282.827665][ T8066] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.476: iget: special inode unallocated [ 282.899351][ T8066] EXT4-fs (loop3): get root inode failed [ 282.931216][ T8066] EXT4-fs (loop3): mount failed [ 282.947426][ T8015] F2FS-fs (loop1): Found nat_bits in checkpoint [ 283.404619][ T29] audit: type=1326 audit(1722599705.173:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8065 comm="syz.3.476" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cc4f773b9 code=0x0 [ 284.035880][ T8093] overlay: ./file0 is not a directory [ 284.367867][ T8105] netlink: 44 bytes leftover after parsing attributes in process `syz.0.481'. [ 284.381856][ T8051] loop4: detected capacity change from 0 to 32768 [ 284.507178][ T8104] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'. [ 284.520067][ T8051] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 284.628480][ T8051] XFS (loop4): Ending clean mount [ 284.702148][ T8051] XFS (loop4): Quotacheck needed: Please wait. [ 284.810747][ T8051] XFS (loop4): Quotacheck: Done. [ 284.843058][ T8120] loop2: detected capacity change from 0 to 512 [ 284.903830][ T5243] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 285.166152][ T8120] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.483: corrupted in-inode xattr: invalid ea_ino [ 285.434362][ T8105] loop0: detected capacity change from 0 to 8192 [ 285.446127][ T8120] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.483: couldn't read orphan inode 15 (err -117) [ 285.795662][ T8120] EXT4-fs (loop2): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.810567][ T8105] REISERFS warning (device loop0): super-6502 reiserfs_getopt: unknown mount option "hash=r5" [ 286.027077][ T8137] EXT4-fs error (device loop2): ext4_find_dest_de:2067: inode #2: block 13: comm syz.2.483: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 286.916343][ T8105] loop0: detected capacity change from 0 to 2048 [ 287.156970][ T8105] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 287.174921][ T8105] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 287.204076][ T8105] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.448658][ T8152] loop4: detected capacity change from 0 to 512 [ 288.477952][ T8152] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.488: iget: special inode unallocated [ 288.552268][ T5515] EXT4-fs (loop2): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 288.561585][ T8152] EXT4-fs (loop4): get root inode failed [ 288.593441][ T8152] EXT4-fs (loop4): mount failed [ 289.176166][ T29] audit: type=1326 audit(1722599710.893:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8151 comm="syz.4.488" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f359dd773b9 code=0x0 [ 289.397867][ T8170] overlay: ./file0 is not a directory [ 292.356695][ T8201] loop4: detected capacity change from 0 to 512 [ 292.531464][ T8175] loop0: detected capacity change from 0 to 40427 [ 292.542360][ T8201] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2240: inode #15: comm syz.4.501: corrupted in-inode xattr: invalid ea_ino [ 292.546112][ T8175] F2FS-fs (loop0): Small segment_count (9 < 1 * 24) [ 292.746716][ T8207] loop3: detected capacity change from 0 to 2048 [ 292.936817][ T8175] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 293.288405][ T8201] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.501: couldn't read orphan inode 15 (err -117) [ 293.302707][ T8201] EXT4-fs (loop4): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.354916][ T8207] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 293.384151][ T8205] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 293.393091][ T8205] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 293.416344][ T8175] F2FS-fs (loop0): Found nat_bits in checkpoint [ 293.436851][ T8205] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.447549][ T8205] team0: Port device bond0 added [ 293.476805][ T8212] EXT4-fs error (device loop4): ext4_find_dest_de:2067: inode #2: block 13: comm syz.4.501: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 293.783180][ T7585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 293.798074][ T8175] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 293.800570][ T8194] loop1: detected capacity change from 0 to 32768 [ 293.813151][ T8175] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 294.028205][ T8194] read_mapping_page failed! [ 294.059334][ T8194] jfs_mount: Failed to read FILESYSTEM_I [ 294.107182][ T8194] Mount JFS Failure: -5 [ 294.111393][ T8194] jfs_mount failed w/return code = -5 [ 294.123748][ T5243] EXT4-fs (loop4): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 294.222432][ T8218] loop2: detected capacity change from 0 to 512 [ 294.265282][ T8220] netlink: 16 bytes leftover after parsing attributes in process `syz.4.507'. [ 294.353659][ T8221] netlink: 'syz.4.507': attribute type 4 has an invalid length. [ 294.361671][ T47] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 294.367569][ T8218] EXT4-fs error (device loop2): __ext4_fill_super:5435: inode #2: comm syz.2.506: iget: special inode unallocated [ 294.446816][ T8218] EXT4-fs (loop2): get root inode failed [ 294.476433][ T8218] EXT4-fs (loop2): mount failed [ 294.566585][ T47] usb 4-1: device descriptor read/64, error -71 [ 295.606349][ T29] audit: type=1326 audit(1722599717.323:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8217 comm="syz.2.506" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c62f773b9 code=0x0 [ 297.179049][ T8230] loop3: detected capacity change from 0 to 1764 [ 297.265177][ T8230] loop3: detected capacity change from 0 to 64 [ 297.287193][ T47] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 297.516455][ T47] usb 4-1: device descriptor read/64, error -71 [ 298.216288][ T47] usb usb4-port1: attempt power cycle [ 298.747096][ T59] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 298.794553][ T8258] loop2: detected capacity change from 0 to 2048 [ 298.805079][ T8260] loop3: detected capacity change from 0 to 256 [ 298.846045][ T8262] loop0: detected capacity change from 0 to 256 [ 298.964815][ T8263] loop4: detected capacity change from 0 to 2048 [ 299.574859][ T8263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.576128][ T59] usb 2-1: Using ep0 maxpacket: 16 [ 299.618131][ T55] Bluetooth: hci1: unexpected event for opcode 0x202d [ 299.630681][ T8258] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 299.657118][ T59] usb 2-1: config 0 has an invalid interface number: 61 but max is 0 [ 299.660198][ T55] Bluetooth: hci1: unexpected event for opcode 0x200c [ 299.679469][ T8258] ext4 filesystem being mounted at /89/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.697851][ T8259] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 299.706862][ T8259] bond0: (slave batadv4): Enslaving as an active interface with an up link [ 299.734429][ T8262] ptrace attach of "./syz-executor exec"[6035] was attempted by "./syz-executor exec"[8262] [ 299.764691][ T59] usb 2-1: config 0 has no interface number 0 [ 299.773323][ T8260] FAT-fs (loop3): Directory bread(block 64) failed [ 299.799895][ T8260] FAT-fs (loop3): Directory bread(block 65) failed [ 299.807282][ T8260] FAT-fs (loop3): Directory bread(block 66) failed [ 299.821554][ T59] usb 2-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=2c.ae [ 299.884276][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.884347][ C0] eth0: bad gso: type: 1, size: 1408 [ 299.892988][ T59] usb 2-1: Product: syz [ 299.903542][ T59] usb 2-1: Manufacturer: syz [ 299.909470][ T59] usb 2-1: SerialNumber: syz [ 299.917188][ T59] usb 2-1: config 0 descriptor?? [ 299.920446][ T8260] FAT-fs (loop3): Directory bread(block 67) failed [ 299.931408][ T59] gspca_main: etoms-2.14.0 probing 102c:6151 [ 299.940346][ T5243] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.972992][ T8260] FAT-fs (loop3): Directory bread(block 68) failed [ 299.982518][ T8260] FAT-fs (loop3): Directory bread(block 69) failed [ 299.992889][ T8260] FAT-fs (loop3): Directory bread(block 70) failed [ 300.000660][ T8260] FAT-fs (loop3): Directory bread(block 71) failed [ 300.008424][ T8260] FAT-fs (loop3): Directory bread(block 72) failed [ 300.015153][ T8260] FAT-fs (loop3): Directory bread(block 73) failed [ 300.177570][ T5515] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 302.839898][ T59] usb 2-1: USB disconnect, device number 14 [ 303.706154][ T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 303.714876][ T55] Bluetooth: hci1: Injecting HCI hardware error event [ 303.725037][ T55] Bluetooth: hci1: hardware error 0x00 [ 304.055813][ T8292] loop0: detected capacity change from 0 to 512 [ 304.167271][ T8292] EXT4-fs error (device loop0): __ext4_fill_super:5435: inode #2: comm syz.0.519: iget: special inode unallocated [ 304.318788][ T5275] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 304.558838][ T5275] usb 2-1: Using ep0 maxpacket: 8 [ 304.567024][ T8292] EXT4-fs (loop0): get root inode failed [ 304.642769][ T5275] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.947379][ T5275] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d [ 304.965437][ T5275] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105 [ 304.973763][ T5275] usb 2-1: SerialNumber: syz [ 304.976061][ T8292] EXT4-fs (loop0): mount failed [ 304.984877][ T5275] usb 2-1: config 0 descriptor?? [ 304.993473][ T5275] usb 2-1: Found UVC 0.00 device (05ac:8501) [ 305.077912][ T5275] usb 2-1: No valid video chain found. [ 305.273667][ T8309] loop4: detected capacity change from 0 to 64 [ 305.296136][ T8309] hfs: unable to parse mount options [ 305.424291][ T29] audit: type=1326 audit(1722599727.193:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.0.519" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7fdad773b9 code=0x0 [ 305.868342][ T8309] loop4: detected capacity change from 0 to 256 [ 305.877049][ T8305] loop3: detected capacity change from 0 to 4096 [ 305.906318][ T5275] usb 2-1: USB disconnect, device number 15 [ 305.940228][ T8305] ntfs3: loop3: Different NTFS sector size (2048) and media sector size (512). [ 305.959535][ T8317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 305.995549][ T8317] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 306.106593][ T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 306.466100][ T941] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 306.684044][ T941] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.801696][ T941] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 306.982423][ T941] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 307.221024][ T941] usb 5-1: config 0 descriptor?? [ 307.260065][ T941] pwc: Askey VC010 type 2 USB webcam detected. [ 307.464820][ T941] pwc: send_video_command error -71 [ 307.473700][ T941] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 307.482274][ T941] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 307.501225][ T941] usb 5-1: USB disconnect, device number 21 [ 309.276418][ T941] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 309.301062][ C0] raw-gadget.2 gadget.4: ignoring, device is not running [ 310.874656][ C0] eth0: bad gso: type: 1, size: 1408 [ 311.149939][ T8365] loop3: detected capacity change from 0 to 512 [ 311.224248][ T8365] EXT4-fs error (device loop3): __ext4_fill_super:5435: inode #2: comm syz.3.536: iget: special inode unallocated [ 311.310184][ T8365] EXT4-fs (loop3): get root inode failed [ 311.315875][ T8365] EXT4-fs (loop3): mount failed [ 311.473242][ T8372] loop1: detected capacity change from 0 to 256 [ 311.506899][ T8372] exfat: Deprecated parameter 'utf8' [ 311.526663][ T8372] exfat: Bad value for 'errors' [ 311.725852][ T8374] loop1: detected capacity change from 0 to 128 [ 312.026792][ T8349] loop2: detected capacity change from 0 to 40427 [ 312.258755][ T29] audit: type=1326 audit(1722599734.023:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8364 comm="syz.3.536" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2cc4f773b9 code=0x0 [ 312.512888][ T8380] loop4: detected capacity change from 0 to 512 [ 312.803872][ T8382] loop1: detected capacity change from 0 to 1024 [ 312.874775][ T8382] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 313.320344][ T8392] loop2: detected capacity change from 0 to 2048 [ 314.347531][ T8382] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.362865][ T8392] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 314.419990][ T8391] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 314.428973][ T8391] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 314.462237][ T8391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.471884][ T8391] team0: Port device bond0 added [ 314.753738][ T5515] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.016543][ T5276] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 315.237388][ T5276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.308811][ T5276] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 315.346200][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.379990][ T5276] usb 5-1: config 0 descriptor?? [ 315.401104][ T5276] pwc: Askey VC010 type 2 USB webcam detected. [ 315.635899][ T5276] pwc: send_video_command error -71 [ 315.951658][ T25] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 316.351631][ T5276] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 316.367733][ T5276] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 316.396362][ T5276] usb 5-1: USB disconnect, device number 23 [ 316.850310][ T8400] loop0: detected capacity change from 0 to 32768 [ 317.046518][ T25] usb 2-1: device not accepting address 16, error -71 [ 317.136128][ T5276] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 317.142532][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.480764][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.484488][ T5276] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 317.496104][ T1269] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.542634][ T5276] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 317.596127][ T5276] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 317.645731][ T5276] usb 5-1: config 0 descriptor?? [ 317.677068][ T5276] pwc: Askey VC010 type 2 USB webcam detected. [ 317.786843][ T8426] loop3: detected capacity change from 0 to 256 [ 317.800779][ T5276] pwc: send_video_command error -71 [ 317.836123][ T5276] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 317.843731][ T5276] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 317.861653][ T5276] usb 5-1: USB disconnect, device number 24 [ 318.202264][ T8420] loop2: detected capacity change from 0 to 40427 [ 318.243954][ T8420] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 318.251715][ T8420] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 318.329819][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.356140][ T5276] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 318.375283][ T8420] F2FS-fs (loop2): Found nat_bits in checkpoint [ 318.503563][ T8435] loop1: detected capacity change from 0 to 2048 [ 318.519780][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.550083][ T8420] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 318.596161][ T5276] usb 5-1: Using ep0 maxpacket: 8 [ 318.601422][ T8420] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 318.615199][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 318.649386][ T5276] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 318.680108][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.683988][ T8435] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.709355][ T5276] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=f6.82 [ 318.729962][ T8420] syz.2.549: attempt to access beyond end of device [ 318.729962][ T8420] loop2: rw=2049, sector=77824, nr_sectors = 8 limit=40427 [ 318.736719][ T5276] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.854426][ T5276] usb 5-1: Product: syz [ 318.854623][ T5515] syz-executor: attempt to access beyond end of device [ 318.854623][ T5515] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 318.866056][ T5276] usb 5-1: Manufacturer: syz [ 318.906051][ T5276] usb 5-1: SerialNumber: syz [ 318.907669][ T5235] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.916466][ T5515] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 318.927733][ T5276] usb 5-1: config 0 descriptor?? [ 319.066556][ T8444] loop1: detected capacity change from 0 to 512 [ 319.094616][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.150958][ T8444] EXT4-fs error (device loop1): __ext4_fill_super:5435: inode #2: comm syz.1.558: iget: special inode unallocated [ 319.164006][ T8446] loop3: detected capacity change from 0 to 512 [ 319.177028][ T8444] EXT4-fs (loop1): get root inode failed [ 319.182699][ T8444] EXT4-fs (loop1): mount failed [ 319.242686][ T8446] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 319.288751][ T8446] EXT4-fs (loop3): orphan cleanup on readonly fs [ 319.307112][ T8446] EXT4-fs warning (device loop3): ext4_enable_quotas:7066: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 319.417797][ T8446] EXT4-fs (loop3): Cannot turn on quotas: error -22 [ 319.484518][ T8446] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.560: bg 0: block 40: padding at end of block bitmap is not set [ 319.566454][ T8446] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6551: Corrupt filesystem [ 319.759713][ T29] audit: type=1326 audit(1722599741.523:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8443 comm="syz.1.558" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8760d773b9 code=0x0 [ 319.788679][ T8446] EXT4-fs (loop3): 1 truncate cleaned up [ 319.808172][ T8446] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.250429][ T53] bridge_slave_1: left allmulticast mode [ 320.261579][ T53] bridge_slave_1: left promiscuous mode [ 320.276264][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.514820][ T53] bridge_slave_0: left allmulticast mode [ 320.526303][ T53] bridge_slave_0: left promiscuous mode [ 320.532166][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.255519][ T5230] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.379191][ T5230] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.390951][ T5230] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.409481][ T5230] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.418233][ T5230] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.426944][ T5230] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.449053][ T7585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.528712][ T5275] usb 5-1: USB disconnect, device number 25 [ 323.519733][ T8482] netlink: 8 bytes leftover after parsing attributes in process `syz.4.566'. [ 323.546916][ T5230] Bluetooth: hci1: command tx timeout [ 323.706371][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 323.778293][ T8488] loop2: detected capacity change from 0 to 512 [ 323.815126][ T8488] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 323.910442][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.921023][ T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 323.930821][ T8488] EXT4-fs (loop2): 1 orphan inode deleted [ 323.941281][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.959274][ T8488] EXT4-fs (loop2): 1 truncate cleaned up [ 323.976674][ T25] usb 4-1: config 0 descriptor?? [ 323.991283][ T8488] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 323.994805][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 324.188275][ T25] pwc: send_video_command error -71 [ 324.213238][ T25] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 324.231358][ T25] Philips webcam 4-1:0.0: probe with driver Philips webcam failed with error -71 [ 324.246335][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 324.268429][ T25] usb 4-1: USB disconnect, device number 12 [ 324.445166][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 324.464009][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 324.484523][ T8] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 324.496159][ T5276] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 324.504076][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.526629][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.527795][ T8] usb 5-1: config 0 descriptor?? [ 324.560269][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.573120][ T53] bond0 (unregistering): Released all slaves [ 324.717030][ T5276] usb 2-1: Using ep0 maxpacket: 32 [ 324.727298][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 324.756152][ T5276] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 324.766445][ T8493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 324.786078][ T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 324.802971][ T8493] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.816234][ T5276] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 324.839382][ T5276] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.871394][ T5276] usb 2-1: config 0 descriptor?? [ 324.895439][ T8495] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 324.908123][ T5276] hub 2-1:0.0: USB hub found [ 324.978390][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 324.997286][ T25] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 325.051716][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.104582][ T25] usb 4-1: config 0 descriptor?? [ 325.127607][ T25] pwc: Askey VC010 type 2 USB webcam detected. [ 325.149651][ T5276] hub 2-1:0.0: config failed, can't read hub descriptor (err -22) [ 325.177632][ T8504] loop4: detected capacity change from 0 to 1024 [ 325.285068][ T8504] hfsplus: extend alloc file! (8192,65536,366) [ 325.409972][ T5276] hid-generic 0003:046D:C314.0004: hidraw0: USB HID v8.00 Device [HID 046d:c314] on usb-dummy_hcd.1-1/input0 [ 325.445626][ T8488] sctp: [Deprecated]: syz.2.567 (pid 8488) Use of int in max_burst socket option deprecated. [ 325.445626][ T8488] Use struct sctp_assoc_value instead [ 325.636161][ T5230] Bluetooth: hci1: command tx timeout [ 327.713321][ T5230] Bluetooth: hci1: command tx timeout [ 329.786149][ T55] Bluetooth: hci1: command tx timeout [ 375.871714][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 378.912253][ T1269] ieee802154 phy0 wpan0: encryption failed: -22 [ 430.495975][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 430.495996][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P8509/1:b..l [ 430.496029][ C0] rcu: (detected by 0, t=10502 jiffies, g=27621, q=430 ncpus=2) [ 430.496051][ C0] task:modprobe state:R running task stack:24992 pid:8509 tgid:8509 ppid:2965 flags:0x00000000 [ 430.496090][ C0] Call Trace: [ 430.496097][ C0] [ 430.496110][ C0] __schedule+0x1800/0x4a60 [ 430.496162][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.496193][ C0] ? __pfx___schedule+0x10/0x10 [ 430.496219][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 430.496258][ C0] ? mark_lock+0x9a/0x360 [ 430.496287][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 430.496313][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 430.496354][ C0] irqentry_exit+0x5e/0x90 [ 430.496379][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 430.496403][ C0] RIP: 0010:lock_acquire+0x264/0x550 [ 430.496429][ C0] Code: 2b 00 74 08 4c 89 f7 e8 4a 9f 8b 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 430.496445][ C0] RSP: 0018:ffffc9000d7e72c0 EFLAGS: 00000206 [ 430.496460][ C0] RAX: 0000000000000001 RBX: 1ffff92001afce64 RCX: 3d07e108082c7400 [ 430.496474][ C0] RDX: dffffc0000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c607c40 [ 430.496489][ C0] RBP: ffffc9000d7e7408 R08: ffffffff93737807 R09: 1ffffffff26e6f00 [ 430.496502][ C0] R10: dffffc0000000000 R11: fffffbfff26e6f01 R12: 1ffff92001afce60 [ 430.496516][ C0] R13: dffffc0000000000 R14: ffffc9000d7e7320 R15: 0000000000000246 [ 430.496565][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 430.496591][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 430.496616][ C0] ? __pfx_vm_area_free_rcu_cb+0x10/0x10 [ 430.496641][ C0] ? stack_depot_save_flags+0x29/0x830 [ 430.496666][ C0] ? __pfx_vm_area_free_rcu_cb+0x10/0x10 [ 430.496694][ C0] mt_validate+0x1c5/0x4aa0 [ 430.496712][ C0] ? mt_validate+0x1a1/0x4aa0 [ 430.496726][ C0] ? ksys_mmap_pgoff+0x4f1/0x720 [ 430.496744][ C0] ? do_syscall_64+0xf3/0x230 [ 430.496765][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.496799][ C0] ? mt_validate+0x1a1/0x4aa0 [ 430.496816][ C0] ? __pfx_mt_validate+0x10/0x10 [ 430.496842][ C0] ? mark_lock+0x9a/0x360 [ 430.496877][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.496909][ C0] validate_mm+0xe7/0x530 [ 430.496938][ C0] ? __pfx_validate_mm+0x10/0x10 [ 430.496964][ C0] ? mas_find+0x987/0xbb0 [ 430.496988][ C0] ? percpu_counter_add_batch+0xff/0x1f0 [ 430.497011][ C0] do_vmi_align_munmap+0x15dd/0x18c0 [ 430.497057][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 430.497088][ C0] ? mtree_range_walk+0x6fd/0x8e0 [ 430.497128][ C0] ? mas_find+0x8c0/0xbb0 [ 430.497158][ C0] do_vmi_munmap+0x261/0x2f0 [ 430.497187][ C0] mmap_region+0x72f/0x2090 [ 430.497204][ C0] ? mark_lock+0x9a/0x360 [ 430.497249][ C0] ? __pfx_mmap_region+0x10/0x10 [ 430.497273][ C0] ? thp_get_unmapped_area_vmflags+0x269/0x380 [ 430.497293][ C0] ? cap_mmap_addr+0x163/0x2c0 [ 430.497321][ C0] ? __get_unmapped_area+0x2f0/0x360 [ 430.497346][ C0] do_mmap+0x8f9/0x1010 [ 430.497377][ C0] ? __pfx_do_mmap+0x10/0x10 [ 430.497400][ C0] ? __pfx_down_write_killable+0x10/0x10 [ 430.497419][ C0] ? __pfx_ima_file_mmap+0x10/0x10 [ 430.497443][ C0] ? security_mmap_file+0x178/0x1a0 [ 430.497468][ C0] vm_mmap_pgoff+0x1dd/0x3d0 [ 430.497496][ C0] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 430.497515][ C0] ? __fget_files+0x29/0x470 [ 430.497536][ C0] ? __fget_files+0x3f6/0x470 [ 430.497567][ C0] ksys_mmap_pgoff+0x4f1/0x720 [ 430.497587][ C0] ? __x64_sys_mmap+0x7f/0x140 [ 430.497617][ C0] do_syscall_64+0xf3/0x230 [ 430.497635][ C0] ? clear_bhb_loop+0x35/0x90 [ 430.497659][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.497679][ C0] RIP: 0033:0x7fc09f928b74 [ 430.497694][ C0] RSP: 002b:00007fffa2d91648 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 430.497713][ C0] RAX: ffffffffffffffda RBX: 00007fffa2d916f8 RCX: 00007fc09f928b74 [ 430.497727][ C0] RDX: 0000000000000003 RSI: 0000000000004000 RDI: 00007fc09f900000 [ 430.497739][ C0] RBP: 00007fffa2d919b0 R08: 0000000000000000 R09: 00000000000be000 [ 430.497751][ C0] R10: 0000000000000812 R11: 0000000000000246 R12: 00007fc09f9040c0 [ 430.497763][ C0] R13: 00007fffa2d91a38 R14: 00000000000be138 R15: 0000000000000000 [ 430.497791][ C0] [ 430.926567][ C0] rcu: rcu_preempt kthread starved for 10227 jiffies! g27621 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 430.926593][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 430.926603][ C0] rcu: RCU grace-period kthread stack dump: [ 430.926610][ C0] task:rcu_preempt state:R running task stack:26672 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 430.926651][ C0] Call Trace: [ 430.926662][ C0] [ 430.926675][ C0] __schedule+0x1800/0x4a60 [ 430.926727][ C0] ? __pfx___schedule+0x10/0x10 [ 430.926756][ C0] ? __pfx_lock_release+0x10/0x10 [ 430.926779][ C0] ? __asan_memset+0x23/0x50 [ 430.926810][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 430.926836][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 430.926863][ C0] ? schedule+0x90/0x320 [ 430.926887][ C0] schedule+0x14b/0x320 [ 430.926913][ C0] schedule_timeout+0x1be/0x310 [ 430.926936][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 430.926959][ C0] ? __pfx_process_timeout+0x10/0x10 [ 430.926992][ C0] ? prepare_to_swait_event+0x32e/0x350 [ 430.927021][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 430.927045][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 430.927074][ C0] ? rcu_gp_init+0x1256/0x1630 [ 430.927103][ C0] ? __pfx_rcu_gp_init+0x10/0x10 [ 430.927125][ C0] ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10 [ 430.927152][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 430.927174][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 430.927205][ C0] ? finish_swait+0xd4/0x1e0 [ 430.927230][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 430.927257][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 430.927279][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 430.927307][ C0] ? __kthread_parkme+0x169/0x1d0 [ 430.927335][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 430.927359][ C0] kthread+0x2f0/0x390 [ 430.927375][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 430.927399][ C0] ? __pfx_kthread+0x10/0x10 [ 430.927417][ C0] ret_from_fork+0x4b/0x80 [ 430.927440][ C0] ? __pfx_kthread+0x10/0x10 [ 430.927457][ C0] ret_from_fork_asm+0x1a/0x30 [ 430.927496][ C0] [ 430.927502][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 430.927513][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 430.927539][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 430.927549][ C0] RIP: 0010:acpi_safe_halt+0x21/0x30 [ 430.927571][ C0] Code: 90 90 90 90 90 90 90 90 90 65 48 8b 04 25 40 d7 03 00 48 f7 00 08 00 00 00 75 10 66 90 0f 00 2d 45 67 b0 00 f3 0f 1e fa fb f4 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 [ 430.927586][ C0] RSP: 0018:ffffffff8e607ca8 EFLAGS: 00000246 [ 430.927601][ C0] RAX: ffffffff8e694680 RBX: ffff88801c2f1864 RCX: 0000000000d0f579 [ 430.927615][ C0] RDX: 0000000000000001 RSI: ffff88801c2f1800 RDI: ffff88801c2f1864 [ 430.927628][ C0] RBP: 000000000003a6b8 R08: ffff8880b9237c7b R09: 1ffff11017246f8f [ 430.927640][ C0] R10: dffffc0000000000 R11: ffffffff8bb9c830 R12: ffff88801cbf9000 [ 430.927654][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: ffffffff8f0dc960 [ 430.927666][ C0] FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 [ 430.927681][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 430.927694][ C0] CR2: 00007fca3801fdf8 CR3: 000000000e734000 CR4: 00000000003526f0 [ 430.927709][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 430.927720][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 430.927731][ C0] Call Trace: [ 430.927738][ C0] [ 430.927745][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 430.927777][ C0] ? print_other_cpu_stall+0x147a/0x15b0 [ 430.927815][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 430.927853][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 430.927878][ C0] ? rcu_sched_clock_irq+0xa2c/0x10d0 [ 430.927905][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 430.927925][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 430.927951][ C0] ? update_process_times+0x1ce/0x230 [ 430.927979][ C0] ? tick_nohz_handler+0x37c/0x500 [ 430.928005][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 430.928029][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 430.928050][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 430.928091][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 430.928114][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 430.928145][ C0] ? hrtimer_interrupt+0x396/0x990 [ 430.928187][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x3f0 [ 430.928217][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 430.928240][ C0] [ 430.928246][ C0] [ 430.928253][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 430.928278][ C0] ? __pfx_acpi_idle_enter+0x10/0x10 [ 430.928302][ C0] ? acpi_safe_halt+0x21/0x30 [ 430.928323][ C0] acpi_idle_enter+0xe4/0x140 [ 430.928346][ C0] cpuidle_enter_state+0x112/0x480 [ 430.928365][ C0] ? __pfx_menu_select+0x10/0x10 [ 430.928392][ C0] cpuidle_enter+0x5d/0xa0 [ 430.928414][ C0] do_idle+0x375/0x5d0 [ 430.928442][ C0] ? __pfx_do_idle+0x10/0x10 [ 430.928472][ C0] ? do_idle+0xe/0x5d0 [ 430.928492][ C0] ? rest_init+0x31/0x300 [ 430.928511][ C0] cpu_startup_entry+0x42/0x60 [ 430.928538][ C0] rest_init+0x2dc/0x300 [ 430.928557][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 430.928582][ C0] start_kernel+0x47a/0x500 [ 430.928604][ C0] x86_64_start_reservations+0x2a/0x30 [ 430.928626][ C0] x86_64_start_kernel+0x9f/0xa0 [ 430.928646][ C0] common_startup_64+0x13e/0x147 [ 430.928681][ C0]