last executing test programs: 32.165454633s ago: executing program 2 (id=2666): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)) r0 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, 0x0, 0x0, 0x1000, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x0, 0x40) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1000000000000040, 0x0, 0x0) r2 = syz_mount_image$udf(&(0x7f0000000a40), &(0x7f00000004c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000200)=ANY=[@ANYBLOB='dmode=00000000000000000000006,noadinicb,novrs,uid=', @ANYRESDEC=0x0, @ANYBLOB="0000000000000000008000"], 0x1, 0xa1b, &(0x7f0000001540)="$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") socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000080)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f0000000540)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691, 0x0, 0x3]}}, 0x5c) r3 = creat(&(0x7f0000000100)='./bus\x00', 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00'}) write$cgroup_type(0xffffffffffffffff, &(0x7f00000002c0), 0xfffffffffffffd1e) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYRESHEX=r5, @ANYRESDEC=r5, @ANYRESOCT=r2, @ANYRES32=r3, @ANYRESHEX=r4], 0x1c}, 0x1, 0x0, 0x0, 0x884}, 0x840) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$HIDIOCSUSAGE(r0, 0x4018480c, &(0x7f00000001c0)={0x1, 0x100, 0x80000001, 0x3, 0x4, 0x81}) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b04, &(0x7f0000000000)={'virt_wifi0\x00', @random="8dffffff0600"}) 30.921966947s ago: executing program 2 (id=2670): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) dup(r0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) open(&(0x7f0000000200)='./bus\x00', 0x42, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x341841, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) memfd_create(0x0, 0x7471044444ef9cc2) copy_file_range(r5, 0x0, r4, 0x0, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r3, 0x84, 0x11, &(0x7f00000000c0), 0x8) r6 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) getsockopt$inet_buf(r6, 0x0, 0x29, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x16, 0x8, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) syz_open_dev$sndmidi(&(0x7f00000005c0), 0xffffffffffffff81, 0x3903) r8 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='mmap_lock_acquire_returned\x00', r7}, 0x10) r9 = getpid() r10 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r10, &(0x7f0000000100)={0x1d, r11, 0x1}, 0x18) sendmsg$IPVS_CMD_GET_DEST(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001480)=ANY=[], 0x14}}, 0x0) process_vm_readv(r9, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {r8}}, './file0\x00'}) syz_mount_image$hfsplus(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x14810, &(0x7f0000000600)=ANY=[@ANYBLOB='uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303032971f5d9d8978cae9c085fc212ebe30303030303040000000303030303030303030d639fa332c75", @ANYRESHEX=0x0, @ANYBLOB=',nodecompose,barrier,nls=maccenteuro,nobarrier,nodecompose,\x00'], 0xb, 0x6cc, &(0x7f00000009c0)="$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") 28.346327813s ago: executing program 2 (id=2676): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x200000, &(0x7f0000002880)={[{@user_xattr}, {@nombcache}, {@journal_dev={'journal_dev', 0x3d, 0x1}}, {@usrjquota}, {@barrier}, {@lazytime}, {@init_itable_val={'init_itable', 0x3d, 0x5}}, {@jqfmt_vfsold}, {@grpjquota}]}, 0xfe, 0x577, &(0x7f00000014c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1\x00', 0x2000, &(0x7f0000000500)=ANY=[@ANYRES32=r1, @ANYRES32], 0x3, 0xa39, &(0x7f0000000a80)="$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") mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"}) unlink(&(0x7f0000000340)='./file1\x00') close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = getpid() r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000040)={0x0, 0x0}) kcmp(r4, r6, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x78}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0) 27.255334171s ago: executing program 2 (id=2680): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c90012000e000500"], 0x17) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_complete={{0x5, 0x4}, {0x4, 0xc8, 0x4}}}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000140)) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102385, 0x18ff1}], 0x1, 0x0, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000e5000084aaa5966701c0000000000000003a3ce0a4bdee3428261a6246533cb334095b7d4868bf3a00b3c9273d992f4064b0a1fab7a1f9b618b3d548530f7ec3d76394"]) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) creat(&(0x7f00000000c0)='./bus\x00', 0x80) 23.932554993s ago: executing program 2 (id=2691): gettid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[], 0x398}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x0, &(0x7f0000000180), 0x0) clock_adjtime(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) readv(r5, &(0x7f0000001e40)=[{&(0x7f0000001a00)=""/108, 0x6c}, {&(0x7f0000001a80)=""/202, 0xca}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x318, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, &(0x7f0000002340)={0x9, [[0x789, 0x4, 0x4, 0x0, 0x3d3, 0x800, 0x3, 0x7fffffff], [0xfffffffb, 0x3, 0x0, 0x6, 0x6, 0x5, 0x400, 0xde], [0x1, 0x4b6, 0x9, 0x1, 0x6a, 0x8c32, 0x7, 0x4294]], '\x00', [{0x5fe, 0x7, 0x1, 0x1, 0x1, 0x1}, {0x10, 0x200, 0x1, 0x1, 0x1}, {0x7fff, 0x81}, {0xfd3, 0x6, 0x1, 0x1, 0x1, 0x1}, {0xffffffff, 0x3, 0x1, 0x1, 0x1}, {0x80000000, 0x8000, 0x1, 0x1, 0x0, 0x1}, {0x7f, 0x7, 0x0, 0x1}, {0x2, 0x2a68}, {0x5, 0x8, 0x1, 0x1}, {0x7, 0x80000000, 0x1, 0x1, 0x1}, {0x800, 0x2, 0x1, 0x0, 0x0, 0x1}, {0x20, 0x6, 0x0, 0x1, 0x1}], '\x00', 0xfffffe01}) dup2(r6, r7) 10.487257779s ago: executing program 0 (id=2725): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0xff, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f77657865632c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e66732c6e6f646f74732c6e6f646f74732c64656275672c646f74732c756d61736b3d30303030303030303030303030303030303030303230302c00c4cd878e2e225ee8a12ec0f0234a613f191236529e2eb19792d74d539f7b74148c4cd01ca5836451894237f5161f323e3dff6322349bb51c07b887571b07ed2b9f7e59a22824b104346da8", @ANYRESOCT], 0x1, 0x1ff, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file3\x00', 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r7, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x4a9a8af7, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r6, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r8, &(0x7f0000000340), &(0x7f0000000400)=@tcp6}, 0x20) r9 = socket$netlink(0x10, 0x3, 0xf) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_MSG_GETCHAIN(r9, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x301}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, r2, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x800, 0x2d}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x1, 0x9, 0x9, 0x8]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x800, 0xce}}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 10.172837805s ago: executing program 1 (id=2729): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000240000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002d40)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0xba01}, 0x0) 10.103220664s ago: executing program 0 (id=2730): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @rand_addr, @broadcast}}}, {{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="4c00030007"], 0xd) bind$netlink(r4, &(0x7f0000000880)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000c40)={&(0x7f0000000940), 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x40000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb0, 0xe6, 0xa9, 0x8, 0x61d, 0xc170, 0xc32c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x47, 0x33, 0x6c}}]}}]}}, 0x0) r7 = socket$inet(0x2, 0xc, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r9, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r12}, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x7, &(0x7f0000000540)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xffff}, @alu={0x4, 0x1, 0x4, 0x5, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8}, @generic={0x0, 0x3, 0x7, 0xb59b, 0x5}, @jmp={0x5, 0x0, 0x2, 0x8, 0x8, 0x50, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0x1000, 0xb5, &(0x7f0000000600)=""/181, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x8, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r10, r9], &(0x7f0000000740)=[{0x3, 0x1, 0xc, 0x7}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x2de2}, 0x90) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='mark_victim\x00', r13}, 0x10) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r15, 0x4000000, 0x2000, 0xd80, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r16 = dup3(r11, r14, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r16, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f14ad865a80cbdf131440be92e", @ANYRES64=r3, @ANYBLOB="050000000015000000000700000004000300", @ANYRES32=r8, @ANYBLOB="0c0099000000000000000000140004006e696376663000000000000000000000080005000a000000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x40}}, 0x0) 9.900362833s ago: executing program 1 (id=2731): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x1d3, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="64697363617264000000000089bd4700"/30], 0x1, 0xedb, &(0x7f0000000f80)="$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") r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r5 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r4, &(0x7f0000002c00)=ANY=[], 0x440) fcntl$setstatus(r5, 0x4, 0x46c00) r6 = dup3(r5, r4, 0x0) io_setup(0x7, &(0x7f0000000240)=0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x100c0d4, &(0x7f0000000340)=ANY=[], 0x1, 0x270, &(0x7f00000008c0)="$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") r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) pwritev2(r6, &(0x7f0000000500)=[{0x0}], 0x1, 0x80, 0x0, 0x0) write$cgroup_int(r8, &(0x7f0000000200), 0x4243b) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r4, &(0x7f0000000380)="45e47e9a7ffae43962058375cdc38db4cf84c50fb4a132f545484abb2334a0bc1acce2e987626a23fde9f6e6d2961e64fa2a52114b5128ffaf5371210d95038bf744ea30a8aa76b32df6ec69337c0a94232c709c0b541e26383d63d9f99963", 0x5f}]) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES32=0xee00, @ANYBLOB], 0x24}}, 0x0) sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, r1, 0x308, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x1, 0x4}, @val={0x8}, @void}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000014) r9 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$btrfs(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x16, &(0x7f0000000480)={[{@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x2d, 0x74]}}, {@nodiscard}, {@noautodefrag}, {@noinode_cache}, {@space_cache_v1}, {@subvol={'subvol', 0x3d, '\x00'}}]}, 0x0, 0x5124, &(0x7f000000a2c0)="$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") ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000940f, &(0x7f0000000880)={{}, 0x0, 0x0, @unused, @name="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"}) bind$alg(r9, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-256\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg(r10, &(0x7f0000002580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) syz_open_dev$video(&(0x7f0000000140), 0x680, 0xa8002) 8.936275043s ago: executing program 3 (id=2733): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) setgroups(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792", 0x2}}}, 0xd) socket(0x10, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x200000, &(0x7f00000002c0)={[{@nouid32}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bsdgroups}, {@nogrpid}, {@noauto_da_alloc}, {@i_version}]}, 0x3, 0x585, &(0x7f0000001480)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7370200df110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359730052000066810000000000d300e6d602000000e000000000000100"}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x5cc, 0x30, 0x1, 0x0, 0x0, {}, [{0x5b8, 0x1, [@m_police={0x5b4, 0x1c, 0x0, 0x0, {{0xb}, {0x498, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x542d}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd230, 0x2, 0xffffff00, 0x3f, 0x101, 0x8000, 0x1, 0x10001, 0x5, 0xfffffff9, 0x3e77, 0xcd1, 0x8, 0x3, 0x81, 0x1, 0x40, 0x9, 0x81, 0xff, 0x8, 0x200, 0x101, 0x7, 0x9, 0x0, 0xf88d, 0x4, 0x401, 0x8, 0x4c6, 0x800, 0x7f, 0x5, 0x1000, 0x0, 0x7, 0x3, 0x3572, 0xff, 0x6, 0x800, 0xfffffffb, 0x65, 0x7c02, 0x5, 0x1f, 0x6, 0x81, 0x6, 0x6, 0x2, 0x1, 0x7, 0x0, 0x8, 0xfffffffc, 0x6, 0x2, 0x80000000, 0x80000001, 0x6, 0x1, 0x2501, 0x57, 0x3, 0x36e7, 0xffffffff, 0x201, 0x5, 0xfffffffb, 0x5, 0x3, 0x81, 0x1ff, 0x1, 0x9, 0x7, 0x400, 0x2, 0x7fff, 0x0, 0x5, 0x400, 0xfffffffe, 0x100, 0x1000, 0x2, 0x10001, 0x3189, 0x9, 0x800, 0x5, 0x5, 0x7, 0x5, 0x7, 0x100, 0x9, 0x7ff, 0x5, 0x0, 0x40, 0x4, 0x5, 0x7ff, 0x3ac2431b, 0x0, 0x8, 0xcf8a, 0x5, 0x80000000, 0x3, 0x1, 0x1, 0xe, 0x6, 0x4, 0x5, 0x4, 0x3, 0xffffffe1, 0x5, 0x20f, 0x1000, 0x1, 0x6, 0x4, 0x2, 0x17ff309a, 0xffffffff, 0x7, 0x3f, 0x5, 0xa, 0x7ff, 0xfffffffb, 0x101, 0x2, 0xb9a1, 0x8, 0x4a1a, 0x5, 0x20, 0x0, 0x8001, 0x3, 0x7, 0x7, 0x101, 0x6, 0xac, 0xffffffff, 0x3, 0x8, 0x8, 0xfff, 0x1ac00, 0xeb0679aa, 0x8, 0x7, 0x10000, 0xfe0, 0x8, 0xad6, 0x100, 0xffff, 0xe, 0x240, 0x0, 0x2, 0x3, 0xd957, 0x401, 0xfffffff8, 0x0, 0x1, 0x3, 0x0, 0x2, 0xff, 0x7, 0xd4e7, 0xc88, 0x4, 0x20, 0x0, 0x2, 0x5, 0x401, 0x2, 0x82c, 0x6, 0x3, 0x4, 0x0, 0x3, 0x1, 0x2, 0x0, 0x1, 0x1140, 0x1f, 0xffffff00, 0x1, 0x20, 0x0, 0xb20, 0x65c774f2, 0x8, 0x7, 0x7, 0x1, 0x8, 0x8, 0x81, 0x8, 0x90, 0x3f, 0x86a, 0x5, 0xf7f, 0x8, 0xb7, 0x2, 0x5, 0x80000000, 0x1ff, 0x7, 0x1, 0x3, 0x0, 0x100, 0x12, 0x10000, 0x6, 0x8000, 0x2, 0x9, 0x8, 0x9, 0x9eeb460, 0xfffffff7, 0x5, 0xcf08, 0x9, 0x6, 0x7, 0x51b7, 0x8, 0x7, 0x7fff, 0x8, 0x8, 0xfafd, 0x80000001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xed}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x20000000, 0xe73d, 0x6, 0xa4e8, {0xe8, 0x2, 0x2, 0x7f, 0xff, 0x8}, {0x40, 0x2, 0x0, 0xf001, 0x2, 0x7}, 0x8, 0x1000, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]]}, {0xf1, 0x6, "6ed60a24dec6d4f5b7c1669b992a0c96f33e58ca2a61d246acaa26e34d77feba27042afdb3c01bd0268d12ca1fcf106db28c440a7b5a4ef452b53be8cb7bf0b299b2e1d250aea47da8e9b6802a1dce4ad9cfa14515a78f9c494b65673ba9348b4d0b4e8f11f1924619771f2918e4686744542e1639a03dfd694f72266924d7918f0669edbb929cdbf32f6a2e3242c4007ddf5ae396c715b9a410d0acc1aa2ffd31b014d193c6a875ae68dd8d034245951108823a4752047458cd517569ce483b7f86983fbf1caa7d27eb6d83b51110c16e5546e7b4479f1c697c04addbafc3741ece836fe9811762533dbce3e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x5cc}}, 0x0) 8.747674296s ago: executing program 4 (id=2734): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000640)=ANY=[@ANYBLOB='codepage=cp932,part=0x0000000000000001,umask=00000000000000000000006,umask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703836322c000e96c00f0ff996860fe11faf1f13b62740616553fb1b0362ae30c2f8ed6f76ff6d3e34df6590c1732a9f880b0d20a445deac0d5f0adf626aa54b18a8d43355e88a6af46bb1dc090aa1d47b4210dfd2a27efe5d6127c5f57e548813c6933e29829199c7cb33ed56"], 0x1, 0x2db, &(0x7f0000001340)="$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") memfd_create(0x0, 0x9) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000300000028000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="14000400fe80ecffffffffffffff0000000000aa"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1021404d}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x64}}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2db95efb11cda2080c14432676bcc722dabefba5b6cf8f097c4a63fa6fed8753603dd9c9a80a01e6f4ea63151e1f01d672e8ed5d88ccff57042bcb1e70fb5ae4e027f307a947c02e5d688cf7feb192ae7980d85bf9e422b045d38fbfb748a6854198096e08fa0508b9fefef5f0eb57b329cb35c5cb6040ed35ba3cd6326f48698f08d0c43e70dde2e0512cec622e67ded4a13be0308d8e4aafbacf04219c5a2036bf9f53ebb8522f3b48a4797a9786d465fbf3d3c2cf3e650c54d7a34fd708d0649695613a3848c3916a6e8f9850558a", 0xd0}], 0x1, &(0x7f0000004580)=ANY=[@ANYBLOB], 0x12b8}}], 0x1, 0x4048800) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f00000001c0)) chdir(0x0) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 7.01282288s ago: executing program 4 (id=2735): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000640)=ANY=[@ANYBLOB='codepage=cp932,part=0x0000000000000001,umask=00000000000000000000006,umask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703836322c000e96c00f0ff996860fe11faf1f13b62740616553fb1b0362ae30c2f8ed6f76ff6d3e34df6590c1732a9f880b0d20a445deac0d5f0adf626aa54b18a8d43355e88a6af46bb1dc090aa1d47b4210dfd2a27efe5d6127c5f57e548813c6933e29829199c7cb33ed56"], 0x1, 0x2db, &(0x7f0000001340)="$eJzs3c9u00oUx/HfOEmb/lGvb9urK7EBFSrBpqLAArEJQtmyZ4WAJpUqoiLaIgGbFsQS8QDseQUegg2IF4AVKx6gO6MZT1w7dZwWNXHTfj9SImc84znW2Jk5ltoIwLl1r/nj081f9mWkiiqS7kiBpLpUlfSf/q+/2NzZ2Om0W0UHqrgW9mUUtzSH6qxttvOa2nauhRfaT1XNpsswHFEU3f1ZdhAonbv7cwTSpL8P3f76iOMalj3pYtkxjFp6gM2+9vVScyWGAwA4Bfz8H/hpYtYVGQWBtOyn/TM1/++XHcDJutU5VBQVNkjN/251Fxk7vv+4XQf5nkvh7P6gmyUeJZhaz+cJxVdWZoFpBmWVLpZgan2jqpW1N2oFequGl6q26N5b8aXbNSDapZzctED/o9V0fzo+G7ei7OVD2l3f6LQn7VZO/AuFPU4eJ86jMV/MN/PQhPqoVrL+q0bGDpMbqbBnpIKajf96/yPOuFa2lnza32g0gkyVf10nF3wP3oBRqudnJOljdh8Q7CURFMXp+p5X9rFCfHarA1ot5LUKk099Wi1mWtmzsX2trD3rFD5KGY7uKZoP5oFZ0m99VjO1/g9sfMtK3ZlFX/XG1fRXRnw+E/k1q65meGjmOLhdLiUReEO46M+D4z0te68nuq257Vevn1Y6nfaW3Xic2TCyG89nt4wvqb2TeuqMaqOigjraOyiJrN0oOuqRo2EGf+1ED2i/P5ISe/vkVbZ3WVISjHqYzstG86uKLsjx2Ygiqc+uoX1P4RTZNnasU1PHVJnRoAR23WXi/M+t5P2qzqVI9i0sWKcXJ5nKHHE1yeCyS8F59z59rAxupn8Gl+rxRp+c0eVcl69KV1KFRoU9hj7OM8I09V2PeP4PAAAAAAAAAAAAAAAAAAAwbkbxlwZlnyMAAAAAAAAAAAAAAAAAAAAAAOPur37/N+9/xLvf/w35/V9gjPwJAAD//2tCdrA=") memfd_create(0x0, 0x9) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000300000028000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="14000400fe80ecffffffffffffff0000000000aa"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1021404d}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x64}}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2db95efb11cda2080c14432676bcc722dabefba5b6cf8f097c4a63fa6fed8753603dd9c9a80a01e6f4ea63151e1f01d672e8ed5d88ccff57042bcb1e70fb5ae4e027f307a947c02e5d688cf7feb192ae7980d85bf9e422b045d38fbfb748a6854198096e08fa0508b9fefef5f0eb57b329cb35c5cb6040ed35ba3cd6326f48698f08d0c43e70dde2e0512cec622e67ded4a13be0308d8e4aafbacf04219c5a2036bf9f53ebb8522f3b48a4797a9786d465fbf3d3c2cf3e650c54d7a34fd708d0649695613a3848c3916a6e8f9850558a", 0xd0}], 0x1, &(0x7f0000004580)=ANY=[@ANYBLOB], 0x12b8}}], 0x1, 0x4048800) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) keyctl$restrict_keyring(0x5, 0xfffffffffffffffd, 0x0, 0x0) syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f00000001c0)) chdir(0x0) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 6.937244187s ago: executing program 0 (id=2736): mlockall(0x0) io_setup(0xff, &(0x7f0000000380)) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'erspan0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2c, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x10, 0x0, 0x0, 0x9, [0x0, 0x0, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@dev, 0x659}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@remote, 0x4}, {@multicast2}, {@private=0xa010101}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0xdc, [@private=0xa010102, @multicast1]}, @rr={0x7, 0xb, 0x0, [@dev, @private=0xa010102]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, r4, 0x350be000) ftruncate(r4, 0x3efd) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) 6.897152897s ago: executing program 1 (id=2737): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}]}}}}}}}, 0x0) 6.727933813s ago: executing program 1 (id=2738): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8000}}, 0x0, 0x3, 0x4, 0x7fffffff}, &(0x7f0000000080)=0x98) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000240)={r2, @in={{0x2, 0x4e24, @multicast1}}, 0xfffffff7, 0x49, 0x200, 0x266, 0x4}, &(0x7f0000000300)=0x98) sendmmsg(r0, 0x0, 0x0, 0x2c000011) socket(0x0, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000480), 0x0, 0xfffffffffffffffd) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) r4 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r3, 0x4004af07, &(0x7f0000000240)=r4) ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000040)={0x1, r4}) r5 = userfaultfd(0x80001) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000380)) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000000)=0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9) r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r6, &(0x7f0000000240)=[{&(0x7f0000001a80)=""/102386, 0x18ff2}], 0x1, 0x0, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "000080f100df00000000000000000009f600"}) syz_open_pts(0xffffffffffffffff, 0x801) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 6.672101101s ago: executing program 3 (id=2739): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r2, &(0x7f0000000100)=ANY=[], 0x10b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r2, 0x0) sendmmsg(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1}}], 0x2, 0x0) 4.920750048s ago: executing program 4 (id=2740): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800480000280000000000019078ac1414bbac000800907800000000"], 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbfb}, 0xc) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000004c0)=0xe) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001200)={{{@in6=@local, @in=@dev}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000001600)=0xe8) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000004a80)={&(0x7f0000000140)=@proc={0x10, 0x0, 0x25dfdbfd, 0x200}, 0xc, &(0x7f0000001640)=[{&(0x7f0000000600)={0x5c0, 0x3e, 0x100, 0x70bd29, 0x25dfdbfc, "", [@typed={0xc, 0x47, 0x0, 0x0, @u64=0x5}, @nested={0x3a, 0xcb, 0x0, 0x1, [@generic="3c301e7770152bbedd3d37a0e9a07e21c0e02c16e6f8ddda2c37812537630b76c4cafe1cd006ea3c79a6efa91adf", @typed={0x8, 0x89, 0x0, 0x0, @uid}]}, @generic="f462887289db4abd0efeb2ae82b1227e997cc87416f86d690fd407a162909356ffbe", @nested={0x2a, 0x3, 0x0, 0x1, [@typed={0x8, 0x117, 0x0, 0x0, @u32=0x1f}, @generic="03a1450a88dc7f414f7a76629bb640cb5b4052765a74b509c71cf7ea9914"]}, @nested={0x516, 0x140, 0x0, 0x1, [@typed={0x5, 0xce, 0x0, 0x0, @str='\x00'}, @typed={0x90, 0xc6, 0x0, 0x0, @binary="1cfdd8018c12a54113faa6cdb1a5f49932ded37dde0311c10d0139e1160ed70552017c77bef4b06f59e05893358877b3ebd5c40fbaf28892d968c0ba5d10fa4b99aed4e3670b2185cc773e1486bc466aa8608f6917739e6f30d16c1c4348cf38980c8854dc387dec164c655b3b4e022ef38fd5d9ad7ebe44f5b2b5e936bdaca40c8146191ff129124cd9fa49"}, @generic="56a663ff1106718b21a0a51a", @generic="5f83f83ab908066355e32428e1b3bc180ede533f7ff72cab28975af2c82f250608485122c53b057c360fb55c608f5cdc5af99949d2a9eef8939db3ffd79e0f0cdb771de9f652bad6b1a8f3acc6bff30ddb8fda811e0aac469af990de9f3caabb79e675b01ae5a77703c2dd9b8d6bd4bf9532058650ee1f973ac73feab4528f3cd79aa9b8b81782578c53819d95c754e30bb5980b81591afdecdb926707bc67b8f5730e52161bcd10e41d42b37b1b6f5949fd1cba6d2c40cdf50bda053ea741cc7a4bcb733476cd8f24fbe2", @generic="cddca034d1987fed8b0c23fdb5c8be3aa044c0a7f96f75ed2da5088fd2b2b2e1828a4573a7ad60cbabfc0efce69204e82fe8a070ef798d942b6cdde111a74f4bec42c70e54bba8be73395ba15366999d44bafc0a42918e33380f75d47fe7fbe6b5337778111ceed3fd2157590318e4d3183726170798fb812ca01a123630c84bb407794487f1f198b54b6908a8b1777d999b442ea639b1be6d0b8aaba7b406aeffd79eb70dc5dc3264d25cc5e1e13cd2755d9b14735501c650bb4d7b939a2b06c8eab18da470d4af011c6c06084ce9f832b9ee1bb5", @generic="f599b202f64cbca6ab0498fed66011e9f5ac3e41941fb007376c324b892e60af403a73c2bd80f9d8d9209ff82ace84f584cfc80512f1796d28ce5817f3c548ee466b65b6323e4072267508cf62ecf708c79666c3ede3acfe7b305f29", @generic="e598233b2282a2d86f908f770a876318fdc5fdd9fa245a7788e4f8cb1bea8c3895d5bf9eb6dca169c890d390d6b7c150d229ebc55e0b3c93a0f3377a91980346001fd61ca0e7416f482d258dcd7b07a901f3b7c2bab851d6d917138a727f40faf7fb0a2f8e3089643396a779976d2631dd6a95a3e59d70e32cb40820efdad200e1ae9ae11122427098aed056355e46feefbee459007b6a383a12a362cf779bc38f85b3c460b3ce0bdd060d48c99cd348f2a2909343e09589676225ea0eaef146b860f86f1cdc218b84c6cd9f37d1", @generic="467a02b2ad71d28915b1ba48b0e2e6074d10224aa2a7b8cd503484f122741f63eb3247f71e39fba82a1be817217807c419abb3a87668fe1c57c42e7be448df0eb28e2f1627c14a1a3b0bda437dbbdae68de9f8bb9c8c304464842d9cb3697ac4a1f8bc547f9bdc090c507b8a452daf7e78317b9711bd1d152b39aa213ef8ce", @typed={0x81, 0x3d, 0x0, 0x0, @binary="46099cd46dd099d462089cc21cde21df2d27ff6e3156ab82f4ca26a9ee93b1bc29fc596aede06922cc9956995f2c81310cc8a5fd0306f4e52a071589d0d5e75ecd59c82a90d8f7903043b6ec428ce8e9c1683378dbefbb6c112a4ca5794a3cee024e91b5fe2d3c3af8e643893e00dcf7d48a24aa8abcbe50fd18f401e1"}, @generic="6d3b94f5954dd8779b74c73e5eb98492e823b9172b978ca0ea863f4f392f69d015fd9e343d44dae0a7acc319bf783362fd7158ed47c8267036898910b8a944f720492651ec962199243bdb03041202b15eb555ee0bac15fa5913bc9b2062fc57c03007afef93c00e027f1420dd763d357714def4687abebb99468a6285d40ddd6714385055a40c5cba2da8d71ce05f0661d146cabd2ed99081bbe7fa0b6c66bcd4"]}]}, 0x5c0}, {&(0x7f0000001700)={0x1170, 0x29, 0x100, 0x70bd28, 0x25dfdbfe, "", [@nested={0x115d, 0x99, 0x0, 0x1, [@generic="765bbbe25293afe1071dce00ccfe672abb602e830a7decf5765ee24cf3e2aa15342bfb4aa112daabdc13f8915ef0b7cad46bd2456ccee0926eb1a3d1389840598bc25f52949571008513893fd696b5f97d14189be819caf9a269a7f8ce09ec0c775c72", @typed={0x1004, 0xdc, 0x0, 0x0, @binary="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"}, @generic="5e1b47910a6655f252f06b8450586c321ede2e66b408b289d9f904bf4fc068efcd6a643ec9426226553c7b65167682c4b20f5e905d0288056418aac29314bc842ace91f8480899891446ccff379a8eabab329ee2ce9a7294ef8c26841883573034c34129b800e1d911319546d4e7ba9fd93c9044d6fb3547afd4d28e4917f5bf46da666e1b085f2ac85cb91259019a49c798a5fb68921d13162b911e721b446972d597ae0d3ef55c1fbf83481391d7c88e3f33f26a8cab4826f1a28e8b6a3ab9cd4a795fe56b5e25225f00169eccad887e3862fefd3bf7ac3598", @typed={0x8, 0x2e, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x8d, 0x0, 0x0, @uid}, @typed={0x8, 0x39, 0x0, 0x0, @pid}]}]}, 0x1170}, {&(0x7f0000001380)={0x17c, 0x34, 0x2, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x4, 0xff}, @typed={0x8, 0x11f, 0x0, 0x0, @pid}, @nested={0x6c, 0x25, 0x0, 0x1, [@typed={0x8, 0xe9, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}, @typed={0x14, 0x133, 0x0, 0x0, @ipv6=@local}, @generic="5955148e0610574b2c15e46981c114232b50b534810ec5465e2bb3f316750ba2b3e7d2f4b0ae8f34b7d10451e6b7f236e932bf89dbd4aac87020d73d8108f4b5181dde6008e1bf8229956945"]}, @generic="8cc15604007f606a3a46260ee095dc9815a0305dfe6631e9ee6bdf842f5387e48a7708fc110aa337add91c9e2fb6bbe5f8295a127b0b0eae18edd967236cbb9a9686238dd6292d57578c46b22d0f939c572b65276c6a38d09eeab223f11bf30d7d7e7a455718de0b800087e6792103e3b7bc61473c971470c244266b37f8b2045eaa137716d477d313cd04c7bbc32eb1658ba57f6072d97f8723a9a2b677253f3f5846e53b0c82398670403f1cf03a851e850e3743c1c07b7ab145ad6fe12ac414a746082342b3a08f6613575a192edb86a426719d92f6a5a7eb507fb2029b64fb71fbb914d0da48415fffcc743fabe7bd2cb6"]}, 0x17c}, {&(0x7f0000004580)={0x1f8, 0x24, 0x300, 0x70bd29, 0x25dfdbfd, "", [@nested={0x67, 0x5f, 0x0, 0x1, [@generic="9e1d521f5a4d5e24a230019bd18e877c78f09c7c68ead69ea7dde788ad726957f2509529ab32a6d32107ac1123045cab80ba07a958263d8a989022a48ec1754fdab9bdd440b0225d737e5a6b7eadb64ac06a245960f599d16576e1394f832ad79fc872"]}, @generic="d0bfbd75df5a9b217990441b6737dda2cd24111c32e57ec71e5b82d9c066a0f565a54cfc249ebb5da9d47fc6c566599ae11fcb95c558f7c9eeed6123ba14cd8232c80ed5dc1093cd89b9ac6c4c12dc78fd5bc1714fbe05e2d2e17042e38696b0506e3d3c975222be7f9d3866df6f09f28d6bb6bcf5671324833db2036270c99119", @generic="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"]}, 0x1f8}, {&(0x7f00000028c0)=ANY=[@ANYBLOB="8c0200003700020029175c7e03705708001a0010ed80866dff962cf8f07054776338a43150675819a1abc790516764b8aa437ef66d384318d1c628e3f04577c83a96871e1ddc3bd0f0d6decbd2b0dfbb656abccf7bc05fd3000000000000000000000000000000004b0043", @ANYRES32, @ANYBLOB="08000900ac1414bbc001b8804a172c10a619ef9bfe7041d62c3653c19c00aaa3a1e6cd4066ab5e25d4fecb509116c69c34a0d65eb7e2106312200cd66630724174295d8b391f97b1bbb8cdf859002444e58dca5c1d2e216df4b1d4712f319a886ed1df5100b4405e2d048cb88f59d93afd7a0896964b65033381c356f12852b5aebe0cc7cb510c2875af6352fd67c985fc623a108acee70d0717e68432b00e269a", @ANYRES32=r1, @ANYBLOB="6e785c31c17cca112edf8d1831f139ec3d54432308b1c90ff184057af8e24f25bc075864af865d65813edd9fbda65a6007304f808de8dab2a743185cc973d02534582ca1fee6f1cc07b67a0c2d332af737690ac5e07929fee9bc649107781e112638624c027afa08a548c688d613977be721d5e0069afa4ecb00604cf8ddc8359c68072a8ca2a276ffb179a99d148608008600", @ANYRES32=0x0, @ANYBLOB="a5d629fcb9cd797ea8324b59d214a76fdd70e7e06e1f31e6082022d06f86f2a44e48088a375156832e33f5db28937aa149cb4385116ab3ecdfdaceeeb607fd6fedcf4a08003d00", @ANYBLOB="0c000f0000000000000000006e5f52882a159b0733d0adc3478efbc0591a04926789e51683fe404716d886438ebe720b45cdc786ad2a54f2251fb3b44f154ca9b461ca95dcf6be97e291b118a7c81884621149d3192dd187123036990a024cd0d4cf60f3119b03accde4117bdba77a3c94dc387772953d7e4e3fa220a2535f76de7a32b1a0dc83ee25cf93083e298ac5165b0b430e97ed5f0b0e7417179d251759b39e3fe30712"], 0x28c}], 0x5, 0x0, 0x0, 0x90}, 0x20000044) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, 0x0, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0x0, 0x10000}], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x0, 0x19, "1587bf7f165487b3"}) syz_emit_ethernet(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x4000, &(0x7f0000000380)={[{@test_dummy_encryption}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@stripe={'stripe', 0x3d, 0x7}}, {@commit={'commit', 0x3d, 0x5}}, {@orlov}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@max_batch_time}, {@data_err_abort}]}, 0xd, 0x5d8, &(0x7f0000000c00)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) 4.902294366s ago: executing program 3 (id=2741): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_ABSBIT(r0, 0x40045567, 0x0) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f00000000c0)={0x0, "fa89953eef28b1de789f571fe0f95d5922c418ded22596256e35fde68ec333c8"}) syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000001340)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRES32, @ANYBLOB="a6af891d142bbbe86c2b6c42ac9eefc3f3124a519189b105d77c5f5267121c170995cd3bb174096f3c", @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRESOCT, @ANYRES32, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="64eb9d8a8a48c79c95d055fb439250f5c3eb02d7adf9a4512dcd910bb0f61df6e958b29125bf7821948fea8cd1c5aa12dc764a351434b8c9bdfa20acfa7369538b00ec058238e0532f4c45d34d94bddc281e19be1206fb5d847930f190d253269ec5", @ANYRESDEC, @ANYRESHEX, @ANYRES8, @ANYRESDEC=0x0, @ANYRES8=0x0, @ANYRES64, @ANYRES16], 0x0, 0x1e1, &(0x7f00000004c0)="$eJzslc9qFEEQxn8907ub1T3k7NVgcjLZCYhvYB7AB3DZjFGcKGYWNCHg6CUXD+JLBHwKD4LePYgIXuJBQQ8RTxFZ6e6atjdGx3+LCv3BUlVf11dVM73Tfam8XnaAT/vbQ2axUPR4oRQamFeOO2g7+17sWPBau7gv/AOxr8SWm1tP7zp368qgKPKNcrPBUQqaciacryn9w82OcJ7cmWQU30zuuif89V6NTvK9nFHq3mxRtA+NcW8iuWNzDslFyxSH/3vOhx6EzJs/UXkxYFpT3vdBAZ752Gvepuf33XYemZOK3Pxf/4Hd+Q0n+SlViRxf5bnbCe9s8Gx/e2icC3KKGW7V/epPwuaY4FGQc0JDBSpl7Otoe1rCPLA4Wu+KfLCWr+VXs2z5zNLj4/KJjm/B5SJfUsEYiXE0HuY77QbrLeDll/WKACoYzeAYqFpbS+rDeeFkIOxCEmjDGq7uQ9+/I1zKOuc5xQxwozLLGe5tzWGqaS6aR1tBkUrQ18GccEDCjF04PbxWrO6gULVsF+1r9Pdo+SCTwDTKl8/6x98ROyd2Reyu2D2x7u5K/Z2kbYW3Ei1U0ObmYDTasJeX8zyXeS6b9Z0T6VrfhqqepENERERERERExH+CzwEAAP//VpxJBg==") mkdirat(0xffffffffffffffff, &(0x7f0000000440)='./file2\x00', 0x0) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) mmap(&(0x7f0000941000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) creat(&(0x7f00000000c0)='./bus\x00', 0x0) mount(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140)='ubifs\x00', 0xcc16, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000002c0)={0x3f}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) write$uinput_user_dev(r0, 0x0, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) open_by_handle_at(r5, &(0x7f0000000040)=ANY=[@ANYBLOB="08d7251267e6349f00"], 0x0) 4.861726856s ago: executing program 0 (id=2742): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000001640)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00f1b4fc851faf8228c2eb860e73d800000000fc8f28daf7b92d399638f3725b771bae16409426ba68f49ea9bc3f00000009000000af03f86e3850000000000000000000006fb7eb6e741aefc8dcea14cf372aa94362bb72d286ef49ca7100a2ab5ee798265a3fdbfc1304f534906c81748f507aee574b8a29d8c6d2ee"], 0x1, 0xa12, &(0x7f0000000a80)="$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") sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, &(0x7f00000003c0)='.F2\xb5Y~er\x1d\x9b,\xe4f\x987s\xfe\x8e8\xbc\xae\xcc+\x8a\x97\x90(}\xb5~\x9e\xd2.A$\xe0\xcc\x04\xce)\xfd8\xfb_\x02\x15(?\xf5\xfd:\\\x81\\5\xcb\bH\\\xca\xcb\xd9\x1e\x15\xd8\x1e\xc6\"=\x8c\x0f\x98\xb0r\xb5Y\xc0\xb5\xa1@+\x16d\x8b\x18li\x1d\xc0\x9c\xa9\x1a\xa0\xacv\xcc$\x9dFR\xe0,\x83\xb6\xf9J\xc7\x97u\xb2-\xba\xc1\f2\xd1\x8fw\x14\xb8\xd1\xbe\xd3\n\x97\ru898}\xa2k\xe2\xac\x85\x10\xc9W\x90\a\xda\xae\xbf\xa9G\f\xc5\xd7\xae\x91H\v\xeb\xc1\xa0|\xf3\xa0I\\\xba\xac.r\xd6S8\x04y}KB\x90\x7f\xf0\xd2\xcb\xb8\xc9\x17 R\xfa\x9d\x16\xd3\x82u}\x88\xf1y\x04\xf6\xf0H\x13$\x02\x03b\x1dT9\x93Ez\xc9\x9a\xd2\xd1\x96') write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0xffffffffffffff66) syz_open_dev$swradio(&(0x7f0000000200), 0x0, 0x2) r4 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r4, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) 3.590414315s ago: executing program 0 (id=2743): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2d0, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x2b3, 0x33, @beacon={{{}, {}, @device_b, @device_b}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1}, @void, @void, @val={0x5, 0x3}, @void, @void, @val={0x3c, 0x4}, @void, @void, @void, @val={0x76, 0x6}, [{0xdd, 0xb7, "31851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc88880a147e71f89f5936e8d68041d7e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca5568297e0d3e19d80a5d5addb3184fec9543e41f70eb1bcd9a87da2f4b39e15dca2e549f43749edc5d2150d9349f08894e39ac26f6"}, {0xdd, 0xba, "1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3e0ae5cb3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd4841407c6fb63f588fed1344890b04c3914826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335"}, {0xdd, 0x25, "523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366"}, {0xdd, 0x12, "0941a0e096d40b7d3b60bec79aa8aaa3f566"}, {0xdd, 0x3f, "7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc6179e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2e"}, {0xdd, 0xb, "0da71e815422994325dfec"}, {0xdd, 0x6b, "30d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cedd077c38a52b4fb790de3ab2c28eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15c64afa0d2a1d2"}, {0xdd, 0x2, "4f3fef835ea8"}]}}]}, 0x2d0}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)=0xff, 0x4) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, 0x0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x10088, &(0x7f0000000580)=ANY=[@ANYBLOB="73686f77657865632c6e6f646f74732c7379735f696d6d757461626c652c646f74732c6e66732c6e6f646f74732c6e6f646f74732c64656275672c646f74732c756d61736b3d30303030303030303030303030303030303030303230302c00c4cd878e2e225ee8a12ec0f0234a613f191236529e2eb19792d74d539f7b74148c4cd01ca5836451894237f5161f323e3dff6322349bb51c07b887571b07ed2b9f7e59a22824b104346da8", @ANYRESOCT], 0x1, 0x1ff, &(0x7f00000002c0)="$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") unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file1/file3\x00', 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r5, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) socket$kcm(0x29, 0x2, 0x0) socket$kcm(0x29, 0x2, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000180)='net/kcm\x00') socket$kcm(0x29, 0x2, 0x0) preadv(r6, &(0x7f00000014c0)=[{&(0x7f0000000280)=""/191, 0xbf}], 0x1, 0x4a9a8af7, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r5, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r7, &(0x7f0000000340), &(0x7f0000000400)=@tcp6}, 0x20) r8 = socket$netlink(0x10, 0x3, 0xf) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_MSG_GETCHAIN(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, 0x4, 0xa, 0x301}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x800, 0x2d}}}}, [@NL80211_ATTR_STA_TX_POWER={0x6}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xe, 0xbd, [0x3, 0x1, 0x9, 0x9, 0x8]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x800, 0xce}}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3.239019211s ago: executing program 3 (id=2744): mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x8, &(0x7f0000000180)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x29, 0x91, 0x8, 0xffff9814, 0x10, @ipv4={'\x00', '\xff\xff', @local}, @private2, 0x40, 0x8, 0x6, 0xfffffffa}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000340)={'ip_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', r3, 0x1, 0x10, 0x1, 0x7, {{0x5, 0x4, 0x3, 0x3, 0x14, 0x64, 0x0, 0x5, 0x4, 0x0, @loopback, @loopback}}}}) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r1, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x7}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc4}}, 0x0) 3.206362544s ago: executing program 1 (id=2745): syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000640)=ANY=[@ANYBLOB='codepage=cp932,part=0x0000000000000001,umask=00000000000000000000006,umask=00000000000000000000006,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c696f636861727365743d63703836322c000e96c00f0ff996860fe11faf1f13b62740616553fb1b0362ae30c2f8ed6f76ff6d3e34df6590c1732a9f880b0d20a445deac0d5f0adf626aa54b18a8d43355e88a6af46bb1dc090aa1d47b4210dfd2a27efe5d6127c5f57e548813c6933e29829199c7cb33ed56"], 0x1, 0x2db, &(0x7f0000001340)="$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") memfd_create(0x0, 0x9) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000300000028000180060001000a00000008000700", @ANYRES32=0x0, @ANYBLOB="14000400fe80ecffffffffffffff0000000000aa"], 0x3c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1021404d}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x64, r0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x64}}, 0xc000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) sendmmsg(r2, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="2db95efb11cda2080c14432676bcc722dabefba5b6cf8f097c4a63fa6fed8753603dd9c9a80a01e6f4ea63151e1f01d672e8ed5d88ccff57042bcb1e70fb5ae4e027f307a947c02e5d688cf7feb192ae7980d85bf9e422b045d38fbfb748a6854198096e08fa0508b9fefef5f0eb57b329cb35c5cb6040ed35ba3cd6326f48698f08d0c43e70dde2e0512cec622e67ded4a13be0308d8e4aafbacf04219c5a2036bf9f53ebb8522f3b48a4797a9786d465fbf3d3c2cf3e650c54d7a34fd708d0649695613a3848c3916a6e8f9850558a", 0xd0}], 0x1, &(0x7f0000004580)=ANY=[@ANYBLOB], 0x12b8}}], 0x1, 0x4048800) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x1a1000a, &(0x7f00000003c0)=ANY=[], 0x21, 0x151a, &(0x7f0000003040)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f00000001c0)) chdir(0x0) creat(0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) 3.136105661s ago: executing program 0 (id=2746): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000380)={'filter\x00', 0x7, 0x4, 0x3c8, 0xe8, 0x1f8, 0x2e0, 0x2e0, 0xe8, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote, @empty, @rand_addr, @broadcast}}}, {{@arp={@loopback, @empty, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'netpci0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) write$binfmt_misc(r5, &(0x7f0000000000)=ANY=[@ANYBLOB="4c00030007"], 0xd) bind$netlink(r4, &(0x7f0000000880)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000c40)={&(0x7f0000000940), 0xc, &(0x7f0000000c00)={&(0x7f0000000b00)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x40000) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xb0, 0xe6, 0xa9, 0x8, 0x61d, 0xc170, 0xc32c, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x47, 0x33, 0x6c}}]}}]}}, 0x0) r7 = socket$inet(0x2, 0xc, 0x3) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r9, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r9, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) dup(r0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000002c0)='mm_page_alloc\x00', r12}, 0x10) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x18, 0x7, &(0x7f0000000540)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xffff}, @alu={0x4, 0x1, 0x4, 0x5, 0xb, 0xfffffffffffffff4, 0xfffffffffffffffc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x8}, @generic={0x0, 0x3, 0x7, 0xb59b, 0x5}, @jmp={0x5, 0x0, 0x2, 0x8, 0x8, 0x50, 0x4}], &(0x7f0000000580)='syzkaller\x00', 0x1000, 0xb5, &(0x7f0000000600)=""/181, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x5, 0x8, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000700)=[r10, r9], &(0x7f0000000740)=[{0x3, 0x1, 0xc, 0x7}, {0x4, 0x4, 0x1, 0xa}], 0x10, 0x2de2}, 0x90) r14 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000840)={&(0x7f0000000080)='mark_victim\x00', r13}, 0x10) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r15, 0x4000000, 0x2000, 0xd80, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b71119246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r16 = dup3(r11, r14, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r16, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000b80)=ANY=[@ANYBLOB="f14ad865a80cbdf131440be92e", @ANYRES64=r3, @ANYBLOB="050000000015000000000700000004000300", @ANYRES32=r8, @ANYBLOB="0c0099000000000000000000140004006e696376663000000000000000000000080005000a000000"], 0x44}}, 0x0) sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x41}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x40}}, 0x0) 2.767803701s ago: executing program 4 (id=2747): socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_emit_ethernet(0x72, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x14, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@capable={0x1e, 0xc}, @sack={0x5, 0x26, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp={0x8, 0xa}]}}}}}}}, 0x0) 1.701534731s ago: executing program 3 (id=2748): syz_emit_ethernet(0x0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0xfb36b7c5edb7f4c7, 0x0, 0x1, 0x0, &(0x7f0000000000)) setgroups(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@any, "546792", 0x2}}}, 0xd) socket(0x10, 0x2, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./bus\x00', 0x200000, &(0x7f00000002c0)={[{@nouid32}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@bsdgroups}, {@nogrpid}, {@noauto_da_alloc}, {@i_version}]}, 0x3, 0x585, &(0x7f0000001480)="$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") setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0xa, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7370200df110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359730052000066810000000000d300e6d602000000e000000000000100"}) setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), 0x0, 0x835, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=@newtaction={0x5cc, 0x30, 0x1, 0x0, 0x0, {}, [{0x5b8, 0x1, [@m_police={0x5b4, 0x1c, 0x0, 0x0, {{0xb}, {0x498, 0x2, 0x0, 0x1, [[@TCA_POLICE_AVRATE={0x8, 0x4, 0x542d}], [@TCA_POLICE_RATE64={0xc, 0x8, 0x4}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x1ff}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xd230, 0x2, 0xffffff00, 0x3f, 0x101, 0x8000, 0x1, 0x10001, 0x5, 0xfffffff9, 0x3e77, 0xcd1, 0x8, 0x3, 0x81, 0x1, 0x40, 0x9, 0x81, 0xff, 0x8, 0x200, 0x101, 0x7, 0x9, 0x0, 0xf88d, 0x4, 0x401, 0x8, 0x4c6, 0x800, 0x7f, 0x5, 0x1000, 0x0, 0x7, 0x3, 0x3572, 0xff, 0x6, 0x800, 0xfffffffb, 0x65, 0x7c02, 0x5, 0x1f, 0x6, 0x81, 0x6, 0x6, 0x2, 0x1, 0x7, 0x0, 0x8, 0xfffffffc, 0x6, 0x2, 0x80000000, 0x80000001, 0x6, 0x1, 0x2501, 0x57, 0x3, 0x36e7, 0xffffffff, 0x201, 0x5, 0xfffffffb, 0x5, 0x3, 0x81, 0x1ff, 0x1, 0x9, 0x7, 0x400, 0x2, 0x7fff, 0x0, 0x5, 0x400, 0xfffffffe, 0x100, 0x1000, 0x2, 0x10001, 0x3189, 0x9, 0x800, 0x5, 0x5, 0x7, 0x5, 0x7, 0x100, 0x9, 0x7ff, 0x5, 0x0, 0x40, 0x4, 0x5, 0x7ff, 0x0, 0x4, 0x8, 0xcf8a, 0x5, 0x80000000, 0x3, 0x1, 0x1, 0xe, 0x6, 0x4, 0x5, 0x4, 0x3, 0xffffffe1, 0x5, 0x20f, 0x1000, 0x1, 0x6, 0x4, 0x2, 0x17ff309a, 0xffffffff, 0x7, 0x3f, 0x5, 0xa, 0x7ff, 0xfffffffb, 0x101, 0x2, 0xb9a1, 0x8, 0x4a1a, 0x5, 0x20, 0x0, 0x8001, 0x3, 0x7, 0x7, 0x101, 0x6, 0xac, 0xffffffff, 0x3, 0x8, 0x8, 0xfff, 0x1ac00, 0xeb0679aa, 0x8, 0x7, 0x10000, 0xfe0, 0x8, 0xad6, 0x100, 0xffff, 0xe, 0x240, 0x0, 0x2, 0x3, 0xd957, 0x401, 0xfffffff8, 0x0, 0x1, 0x3, 0x0, 0x2, 0xff, 0x7, 0xd4e7, 0xc88, 0x4, 0x20, 0x0, 0x2, 0x5, 0x401, 0x2, 0x82c, 0x6, 0x3, 0x4, 0x0, 0x3, 0x1, 0x2, 0x0, 0x1, 0x1140, 0x1f, 0xffffff00, 0x1, 0x20, 0x0, 0xb20, 0x65c774f2, 0x8, 0x7, 0x7, 0x1, 0x8, 0x8, 0x81, 0x8, 0x90, 0x3f, 0x86a, 0x5, 0xf7f, 0x8, 0xb7, 0x2, 0x5, 0x80000000, 0x1ff, 0x7, 0x1, 0x3, 0x0, 0x100, 0x12, 0x10000, 0x6, 0x8000, 0x2, 0x9, 0x8, 0x9, 0x9eeb460, 0xfffffff7, 0x5, 0xcf08, 0x9, 0x6, 0x7, 0x51b7, 0x8, 0x7, 0x7fff, 0x8, 0x8, 0xfafd, 0x80000001]}, @TCA_POLICE_RATE64={0xc, 0x8, 0xed}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}, @TCA_POLICE_TBF={0x3c, 0x1, {0x800, 0x20000000, 0xe73d, 0x6, 0xa4e8, {0xe8, 0x2, 0x2, 0x7f, 0xff, 0x8}, {0x40, 0x2, 0x0, 0xf001, 0x2, 0x7}, 0x8, 0x1000, 0x1}}, @TCA_POLICE_RATE64={0xc, 0x8, 0xffffffffffffffff}]]}, {0xf1, 0x6, "6ed60a24dec6d4f5b7c1669b992a0c96f33e58ca2a61d246acaa26e34d77feba27042afdb3c01bd0268d12ca1fcf106db28c440a7b5a4ef452b53be8cb7bf0b299b2e1d250aea47da8e9b6802a1dce4ad9cfa14515a78f9c494b65673ba9348b4d0b4e8f11f1924619771f2918e4686744542e1639a03dfd694f72266924d7918f0669edbb929cdbf32f6a2e3242c4007ddf5ae396c715b9a410d0acc1aa2ffd31b014d193c6a875ae68dd8d034245951108823a4752047458cd517569ce483b7f86983fbf1caa7d27eb6d83b51110c16e5546e7b4479f1c697c04addbafc3741ece836fe9811762533dbce3e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x5cc}}, 0x0) 1.432442969s ago: executing program 1 (id=2749): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) unshare(0x22020600) r3 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/mnt\x00') syz_mount_image$f2fs(&(0x7f0000000780), &(0x7f0000000100)='./file0\x00', 0x2008410, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0], 0xfb, 0x5562, &(0x7f000000c3c0)="$eJzs3EtvG2UXAOB3nCa994s+sWDXkSqkRKqtOJcKdgFacRGpIi4LVuDYjuXW9kSx45iskGCJWPBPEEisWPIbWLBmh1iA2CGBPDOmDW2qRnFs0j6PND4z74zPvGdkxTozkQPw3JqP//gtCtfCxRDCTAjhShTS9ShfUutZeDGEcD2EUHhoifLxfwbmQgiXQgjXhsmznFG+66ub/Rtrv779+/c/nj93+evvfppe1cC0vRRCaO9k6/vtLCaNLN7Lxyv9Zhrbq/08Zjva9/PtJIv79a00w35ldFwljSuN7PhkZ687jNutSnUYG83tdHynk52w22+M8qRvuFfZTbdr9a00NrtJGhsH2bwGB9nftoNuL8tTy/N9kqYPvd4oZuP1QT2rZ+d+GqudXj6e5U1q9cEw9vOYny5Uk1YtncfWSa70f9s7zc7eIO7Xd7vNpBOvlcovl8q3iuXdpFbv1VeLlXbt1mq80Gg1R19I640kabTqpWrSXowXGtVqsVyOF27Xt5qVTlwul1ZKS8W1xXztZvzG3Q/iVi1eGMbXmp29uWarG28nu3H2jsV4ubTyymJ8oxy/t7EZb757587G5vsf3f7w7qsbb72eH/TItOKF5aXl5WJ5qbhcXjyF+i/kOx+uv7M3KPbqlfbj6h9+7z5l/b2T1P95Pq9j1B+d7PLAk/mAARzbI/1/0P8Dp++s9/9hnP3/sKXS/z+5/x/2v4Uj+t9j9P8n6n8n1f8fVf9R/f8Zrh9ORP8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDc+nn2mzfTlfls+3I+fjUf+n++HYUQCiGEvx5jJswdyjmT55k94vjZf83hhyikGYbnOJ8vl0II6/ny5/9O+yoAAADAs+vbT69/mXXr2cv8tCfEJGU3bQpXPh5TviiEMDv/y5iyFYYvL4wpWfr5PhcGY8qW3sC6MKZk2S23c+PK9lRmRuGzqw8G04KiLBQmOh0AAGAiZg6FyXYhAAAATNIX054A0xGF0aPM0bPg9D/vHzzavHhoHwAAAHAGRdOeAAAAAHDq0v7f7/8BAADAsy37/T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mbnbm4TB+I4gI4NBvZLi1Z731b2BmWkhBxzS6CANEEJpIU0QA3klhJQHOEZITkBKRLjWEHvSR4zNvrNDOLyH0sGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSU7WeP9z9uz83p67r2/oMeVYDAAAAHLOt1vPmwzT2f6Trv9KlP6lfhBDKWOe/MwijVuYg5VQnvl+9mcNjCE3CfoxxOr6HEP6nY/e7618BAAAALtdmuZrFaj02074nxGeKmzblz6tMeUUIoZo+Z0or983fTGHN/3sYbjKlNRtYk0xhccttePzeKNcgbYPWKa1ksghhl7boym7GBQAA+tSuBE5UIQAAAFyA674nQD+KQ3N4zjiOp/RA8FurBwAAAHxBRd8TAAAAADp1qP29/w8AAAAuW3z/HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF3aVuv5Zrmanbq/+GDOS32efCsCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4JX9eUeBEAiDMNi7vjOZ+x9WGjQ0NqkC4eNvDAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAePO7v/yfmBpnkrnXxtLzSLJ2amydGnvnxtEfxtevAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALvbnJQVCIAiiYM7430nf/7CSoGcQIQIaHlXUogEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALnbunzeOIgoA+Nu9P4kDCGOQCwMKEgU0xL6EhJRQgCwKPgKS5ZyD4UIgcUEiC+QGKuQ6DYISISSQ6fIdUsdSmtClcGEkatDe7TrjxBDLSnYv9u8nzc7b82jnzd7J8vOsDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAla334pW8jFvFYXIUV6/d3l5dLPrNB/rCzfU7M0Ur4uxRE3337uNPfry9mp6cnE5Ovqk/GQAAAI6GVlXfR8TdzsZ80eeTw/q/U40pav4fnxvFVT3/YN2/ub16vPzSTFX///H7vZd2JpoczVNcdGl50J97OJX2E1ri2Hv+kSPawzs//N1La/iG5B+uvbjVGd7P7Ptbt97vDsNjdWQLABzEqaovg+rnoaLvNZkYAEdGOym8q/q/NdlsTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB12FqLZ6o4i4iZ9v24sLm9urhXf3P9zkzVzt24sZ5es7hEJyKWlgf9To1rGXdXr13/bGEw6F+pPzgZEc3NXgYf72NMxP+PKT+e0dwq/jvIxiONRoO8fH/GJZ/HGVSfvb3GTETEwa/c0DckAAAOrU7Zirr+bmdjvngtm4r456fd9f8bSRy76v5813la/9/75NztdK60/u/VtcCnwOzKpS9mr167/tbypYWL/Yv9z98+3Xund+b82bPnZ4t7NTe7FHl/ruk0AQAAeIp1y5bW//nUw/v/J5I49rn//+UPva/TuVrq/z3d3/RrOhMAAICjqLsTvfDa339le4zIut34amFl5UpvdNw5Pz061pruAR0rW1r/t6aazgoAAACow9Zatmv//0ISxz73/5/9+eVf02u2ImIi4nJE9E8tXh5cqG85Y62OP1QeTtRteqUAAAA0ZaJs6f5/Z/j8f77zyEMeEW++Poqr/3W1n/q/9cG3v6Rzpc//n6lvieMoj+nR/ciLfjqiPd10SgAAABxmx8uWZRF/djbmP/3txEddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O3fAAAA//8BODTT") setns(r3, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) writev(r1, &(0x7f00000003c0), 0x0) writev(r1, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r4 = socket$inet(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x57) syz_io_uring_setup(0xec2, &(0x7f00000008c0), &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_FILES_UPDATE={0x14, 0x68, 0x0, 0x0, 0x0, 0x0}) syz_io_uring_complete(r5) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 818.429839ms ago: executing program 4 (id=2750): mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000140)='./file1\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(0xffffffffffffffff, 0xffffffff80000800, 0x0, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x4, 0x0, 0x0, 0xde}) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x181041, 0x0) fchown(r0, 0xee01, 0x0) 606.67441ms ago: executing program 4 (id=2751): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x90) r0 = syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f00000007c0)='./file0\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$eJzs3c9vHGcdB+DPrNdbb6iC0yZthIqIEqkgRSR2rBTChYAQyqFCVTlwthKnsbJxKttFboXABQQnJA79AwqSb5yQuAeFc7n1anGqhMQl4hBxMZrZWXvtXf+I7dgxPE80ft+Z95133vnOzDs741gb4P/WrctpPkqRW5ffXirnV1emOqsrUy/VxZ0kZb6RNLtJirmkeJzcLMuLvil96YBPZm+8+/mT1S+6c816quo3dlpviCF1l+spF5KM1Omg0b1uYlN7t5O8PFCltde2NlUsg3apTuHYrQ1Y3qH2P05vWfAs1y3wgundnYrufXPAeHIqyVj9OSD16NA4uh4+HzuNcgAAAPC/4rOHx90DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOHnq7/8v6qlRp7mQovf9/63esjp/oj067g4AAAAAAAAAwCH42tM8zVJO9+bXiup3/hermbP5z1rypXyQhcxkPleylOksZjHzmUwy3tdQa2l6cXF+cn3N0vA1rw1d89pR7TEAAAAAAAAAnGDtbUt+mVsbv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAXQZGMdJOsJTm7XrDcaHYXp1XNJn/v5U+IYtjCR0ffDwAAADiQsX2s8+WneZqlnO7NrxXVM/9r1fPyWD7IXBYzm8V0MpM79TN0+dTfWF2Z6qyuTD0op8F2v/evZ+pG1WK67x6qLa8/rPe2fL6q0c7dzFZLruR2VedOGtWapfO9/gzv18dln4rv1gb60Bzas2Yd1nJjv9/uLcKheNZXEeN1l3sRmaj7VkbjTDcCRfWiJtkaiV2PTnPrltLI6PqWJtNYf/Nz9kAxH+5UnZb785vnGvMdLA9buB6JRqpIXOs7+17bORLJ1//yp5/c68zdv3d34fKx7NJ+jGyzvI5E7wzLVF8kXj/RkRg+DmxvoorEufX5W/lhfpzLuZB3Mp/Z/DTTWcxM9T61NF2fz+XP8Z0jdXPT3Du79aRVH5fuMdtLny7kB1VuOherdU9nNkUe5k5m8lb171om861cz/Xc6DvC57btd7Vv1VXf2HrV9470X4d2/tI36kw7yW/rdCAGteW1ru3OzsPSHfvLuJ7pi2t3JHyyXutM39g40RelV3rRGR3a+H7GxuZX6ky5jV/V6YthvI5EeQH17hK93r3ajUSzuhcNnud/qK6Nhc7c/fl70+9v0/7WAfnNOi1Pq5Wv7rWXww/F4SrPl1cyVo8km8+OsuzV8kCObC2brMrOro9AjYGyc1VZUfSu1B9te6W26s9wgy1dq8peH1o2VZWd7yvb9HkrD9PJnSOIHwAHNJ5TrfY/25+1P23/un2v/fbY91/69ktvtDL6t9HvNCdG3my8Ufw5n+bnG8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/i18+NH96U5nZn54prF90S6Z3VrekinqL/TZ17YOMdNKchjtjG1tZ7RccOS70951d9Z+kRx5nHtfIji8zu/KTDN7afDmbnU+3lcPG0mO9zw8usxIhp8AxzwwAc/d1cUH719d+PCjb84+mH5v5r2ZudHr129M3Lj+1tTVu7OdmYnuz+PuJfA8bNz0j7snAAAAAAAAAAAAwF4N+8OAiy8fxt/AtPzPQgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBQ3Lqc5qMUmZy4MlHOr65Mdcqpl9+o2UzSaCTFz5LicXIz3Snjfc0V+ePjrA3ZziezN979/MnqFxttNbv1k0adHsByPeVCkpE6Paz2bh+4veLfvT0sA3apFzg4bv8NAAD//wNS+MQ=") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_int(r2, 0x29, 0x0, &(0x7f0000000000)=0x400, 0x4) r3 = creat(&(0x7f0000000280)='./file0\x00', 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_ALM_SET(0xffffffffffffffff, 0x80247009, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000001c0), 0x2) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x10, 0x8, @LWTUNNEL_IP_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, @LWTUNNEL_IP_OPT_VXLAN_GBP={0x8}}}}]}, 0x38}}, 0x0) r6 = memfd_create(&(0x7f0000000300)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\x0f<\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00\xd5\xf3\\\x00\xbe]Et\xad*\xecj\x02\xc8\xc4\f\x04\x99\xf6\xfc', 0x3) r7 = semget$private(0x0, 0x4000000009, 0x0) semop(r7, &(0x7f0000000440)=[{0x2, 0xd5db}, {}], 0x2) semctl$GETNCNT(r7, 0x2, 0xe, 0x0) ftruncate(r6, 0xffff) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0xff41) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000098c0), 0x0, 0x0) ioctl$TIOCGRS485(r8, 0x5416, &(0x7f0000000200)) write$binfmt_aout(r0, &(0x7f0000000d00)=ANY=[@ANYBLOB="cc0000f3450300007800000002000000b00000000180000000000000000000002974ec00f4f75f55b92ee1e1818ccadbb8d3af37040a80cdad00f50fae58e06cfd3089d91fe41b86e479be7afeb3d0c5eeee9636eebce61f950f25c302104615fb66afd02b00"/291], 0x465) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f00000002c0)={r6, 0x0, 0x0, 0x1000}) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r10}) 487.842637ms ago: executing program 3 (id=2752): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @multicast2}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESHEX=r0, @ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x200000000000000c, &(0x7f0000000440)=ANY=[@ANYBLOB="18120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x2de5, 0x0, 0x0, 0x0, 0x64, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x400080, 0x0) ioctl$SNDCTL_TMR_SOURCE(r3, 0xc0045406) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x6, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE={0x8, 0x2, @rand_addr=0x64010100}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup(0x70f8, &(0x7f00000005c0)) r6 = syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x0) syz_usb_disconnect(r6) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000100)={0x0, 0x4205, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="74010000", @ANYRES16=r7, @ANYBLOB="11060000000000000000010000000800050001000000200108803c0000801400028002000000ac1e00010000000000000000240001000000000000000000000000000000000000000000000000000000000000000000e0000080a400098028000080060001000a0000001400020020010000000000000000000000000001050003000100000028000080060001000a00000014000200ff010000000000000000000000000001050003002aea091428000080060001000a00000014000200ff010000000000000000000000000001050003000300000028020080060001000a00000014000200ff0100000000000000000000000000010500030000000000240001000000000000000000000000000000000000000000000000000000000000000000140004000200000000000000000000000000000024000300000000000000000000000000000000000000000000000000000000000000000014000200776731"], 0x174}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) 0s ago: executing program 2 (id=2692): socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) getpid() mkdir(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) sched_setscheduler(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@multicast1}}]}, 0x154}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x3d}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x10, 0x40, 0x21c2, 0x3, {{0xd, 0x4, 0x0, 0x2, 0x34, 0x68, 0x0, 0x4, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x3, 0x0}, {[@lsrr={0x83, 0x1f, 0x57, [@empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, @multicast2, @local, @local, @rand_addr=0x64010102]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYRES32=r2], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) kernel console output (not intermixed with test programs): 40655][T17166] F2FS-fs (loop0): Found nat_bits in checkpoint [ 891.697684][T17166] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 892.314383][ T5091] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 892.326628][ T5091] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 892.336076][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 892.346226][ T5091] usb 4-1: config 0 descriptor?? [ 892.369847][T17138] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2387'. [ 892.595676][ T9946] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 892.756560][ T29] audit: type=1800 audit(1719305103.212:711): pid=17140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2388" name="bus" dev="sda1" ino=1980 res=0 errno=0 [ 892.758026][ T5091] ath6kl: Failed to read usb control message: -71 [ 892.777012][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.784454][T17180] loop4: detected capacity change from 0 to 128 [ 892.830750][ T5091] ath6kl: Unable to read the bmi data from the device: -71 [ 892.881415][ T5091] ath6kl: Unable to recv target info: -71 [ 892.891905][ T5091] ath6kl: Failed to init ath6kl core: -71 [ 892.932760][ T5091] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 892.967812][ T5091] usb 4-1: USB disconnect, device number 36 [ 892.989417][T17178] loop2: detected capacity change from 0 to 8192 [ 893.080879][T17183] loop1: detected capacity change from 0 to 128 [ 894.771850][ T5092] Bluetooth: hci0: command 0x0406 tx timeout [ 894.988400][T17206] loop2: detected capacity change from 0 to 64 [ 895.050091][T17202] loop3: detected capacity change from 0 to 512 [ 895.072330][T17206] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 895.089852][T17202] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 895.164636][T17206] sctp: [Deprecated]: syz.2.2403 (pid 17206) Use of int in maxseg socket option. [ 895.164636][T17206] Use struct sctp_assoc_value instead [ 896.150314][T17217] loop4: detected capacity change from 0 to 128 [ 900.831075][T17221] loop1: detected capacity change from 0 to 32768 [ 900.845628][T17221] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2407 (17221) [ 900.867755][T17221] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 900.878033][T17221] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 900.888504][T17221] BTRFS info (device loop1): using free-space-tree [ 901.105054][T17222] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2407'. [ 901.355161][ T9946] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 901.659914][T17244] loop4: detected capacity change from 0 to 8192 [ 901.840560][T17244] loop4: RDSK (2013265920) [ 901.840560][T17244] unable to read partition table [ 901.981251][T17244] loop_reread_partitions: partition scan of loop4 () failed (rc=-5) [ 903.009640][T17251] loop2: detected capacity change from 0 to 1024 [ 903.200400][T17258] loop0: detected capacity change from 0 to 32768 [ 903.218922][T17251] EXT4-fs: Ignoring removed orlov option [ 903.229305][T17258] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2414 (17258) [ 903.261909][T17251] EXT4-fs (loop2): Test dummy encryption mode enabled [ 903.269334][T17251] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 903.285804][T17258] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 903.296020][T17258] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 903.305452][T17258] BTRFS info (device loop0): using free-space-tree [ 903.353562][T17265] loop3: detected capacity change from 0 to 64 [ 903.387449][T17251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 903.389489][T17265] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 903.939002][ T929] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 903.981911][T17282] loop4: detected capacity change from 0 to 2048 [ 904.040099][T17261] sctp: [Deprecated]: syz.3.2416 (pid 17261) Use of int in maxseg socket option. [ 904.040099][T17261] Use struct sctp_assoc_value instead [ 904.091534][T10620] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 904.121819][T17282] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 904.224115][ T929] usb 2-1: Using ep0 maxpacket: 16 [ 904.240178][ T929] usb 2-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 904.271739][ T929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 904.283543][ T929] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 904.321344][ T929] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 904.343017][ T929] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 904.353560][ T929] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 904.385931][ T929] usb 2-1: Manufacturer: syz [ 906.107261][ T929] usb 2-1: config 0 descriptor?? [ 906.325034][ T9930] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 909.480062][ T929] usb 2-1: can't set config #0, error -71 [ 909.557775][ T929] usb 2-1: USB disconnect, device number 35 [ 909.621078][T15384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.615531][T17298] loop1: detected capacity change from 0 to 512 [ 910.665820][T17298] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 910.912004][T17311] loop3: detected capacity change from 0 to 8192 [ 911.119168][T17317] loop0: detected capacity change from 0 to 32768 [ 911.132140][T17317] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2426 (17317) [ 911.166558][T17317] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 911.176804][T17317] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 911.185684][T17317] BTRFS info (device loop0): using free-space-tree [ 911.545302][ T59] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 911.783796][T17341] loop3: detected capacity change from 0 to 32768 [ 911.805711][T17341] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2428 (17341) [ 911.838540][T17341] BTRFS info (device loop3): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 911.850710][T17341] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 911.860293][T17341] BTRFS info (device loop3): using free-space-tree [ 911.920275][ T59] usb 3-1: Using ep0 maxpacket: 16 [ 911.944130][ T59] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 249, changing to 11 [ 911.987933][ T59] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 912.033320][ T59] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 912.048942][T10620] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 912.097728][ T59] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 912.656453][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.678217][ T59] usb 3-1: Product:  [ 912.682571][ T59] usb 3-1: Manufacturer: 뫹ꈮ벂脦篕槉⬐঻⥆훺沫粌ᘕ㒸寪쭢䐞撚괄툽ꚱ擅⻞邙孒둒銈瓳鄠ఄ྽ꠒᝋ濇ְ诳㲛쟿틁⍯溞衮䯞蕎쪗埼㣜郛貤擃ҩⲇ⼬颓혆㝟篧 [ 912.715902][ T59] usb 3-1: SerialNumber: syz [ 912.818493][ T9944] BTRFS info (device loop3): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 913.224145][T17323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.254377][T17323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.336027][ T59] cdc_ncm 3-1:1.0: bind() failure [ 913.354502][ T59] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 913.371819][ T59] cdc_ncm 3-1:1.1: bind() failure [ 913.417077][ T59] usb 3-1: USB disconnect, device number 31 [ 913.656123][T17365] loop0: detected capacity change from 0 to 32768 [ 913.677626][T17365] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2429 (17365) [ 913.694973][T17365] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 913.705262][T17365] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 913.714075][T17365] BTRFS info (device loop0): using free-space-tree [ 914.121869][T10620] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 914.188157][ T5091] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 914.425944][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 914.459122][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 914.491925][ T5091] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 914.535750][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 914.569441][ T5091] usb 4-1: config 0 descriptor?? [ 914.638622][T17389] loop2: detected capacity change from 0 to 2048 [ 914.685477][T17389] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 914.807080][ T29] audit: type=1804 audit(1719305125.262:712): pid=17369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2430" name="/root/syzkaller.9tst4n/311/bus" dev="sda1" ino=1986 res=1 errno=0 [ 914.829442][ C0] vkms_vblank_simulate: vblank timer overrun [ 914.885665][ T29] audit: type=1800 audit(1719305125.262:713): pid=17369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2430" name="bus" dev="sda1" ino=1986 res=0 errno=0 [ 914.917681][ T5091] usbhid 4-1:0.0: can't add hid device: -71 [ 914.923874][ T5091] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 914.966362][ T5091] usb 4-1: USB disconnect, device number 37 [ 914.974096][ T929] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 915.044370][ T9930] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 915.166400][T17395] loop1: detected capacity change from 0 to 128 [ 915.174781][ T929] usb 1-1: Using ep0 maxpacket: 16 [ 915.184174][ T929] usb 1-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 915.195863][ T929] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 915.214326][ T929] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 915.214404][ T929] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 915.235811][ T9930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 915.251267][ T929] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 915.251301][ T929] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 915.251322][ T929] usb 1-1: Manufacturer: syz [ 915.258375][ T9930] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0096, bcdDevice=c2.ba [ 915.263167][ T929] usb 1-1: config 0 descriptor?? [ 915.279589][ T9930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.308055][ T9930] usb 3-1: Product: syz [ 915.308082][ T9930] usb 3-1: Manufacturer: syz [ 915.308099][ T9930] usb 3-1: SerialNumber: syz [ 915.315147][ T9930] usb 3-1: config 0 descriptor?? [ 915.414947][ T5096] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 915.524183][T15605] usb 3-1: USB disconnect, device number 32 [ 916.675209][T17406] loop4: detected capacity change from 0 to 131072 [ 916.718811][T17406] F2FS-fs (loop4): Found nat_bits in checkpoint [ 916.747019][T17406] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 916.758886][ T929] rc_core: IR keymap rc-hauppauge not found [ 916.767331][ T929] Registered IR keymap rc-empty [ 916.786517][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 916.823105][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 916.886839][ T929] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 916.930556][ T929] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input86 [ 916.944737][ T9930] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 916.974954][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.007255][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.044366][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.084496][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.125597][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.147159][ T9930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 917.158599][ T9930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 917.164161][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.169240][ T9930] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 917.169290][ T9930] usb 4-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 917.169322][ T9930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 917.184687][ T9930] usb 4-1: config 0 descriptor?? [ 917.217068][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.246305][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.279038][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.317858][ T929] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 917.373711][ T929] mceusb 1-1:0.0: Registered ؋ with mce emulator interface version 1 [ 917.383084][ T929] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 917.426843][ T929] usb 1-1: USB disconnect, device number 22 [ 917.526903][ T29] audit: type=1800 audit(1719305127.942:714): pid=17419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2439" name="file0" dev="sda1" ino=1964 res=0 errno=0 [ 917.733267][ T9930] wacom 0003:056A:0043.0010: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 917.748349][ T9930] wacom 0003:056A:0043.0010: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.3-1/input0 [ 917.776051][ T9930] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0043.0010/input/input87 [ 917.891952][T17430] loop1: detected capacity change from 0 to 64 [ 918.070822][T17426] loop4: detected capacity change from 0 to 32768 [ 918.085838][T17426] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2442 (17426) [ 918.113096][T17426] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 918.123384][T17426] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 918.132261][T17426] BTRFS info (device loop4): using free-space-tree [ 918.144106][ T59] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 918.165220][ T929] usb 4-1: USB disconnect, device number 38 [ 918.174581][T17432] loop0: detected capacity change from 0 to 512 [ 918.184089][T17432] EXT4-fs (loop0): blocks per group (95) and clusters per group (32768) inconsistent [ 918.344081][ T59] usb 3-1: Using ep0 maxpacket: 32 [ 918.585049][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 918.603530][ T59] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 918.618048][ T59] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 918.671694][ T59] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 918.693031][T11412] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 918.702107][ T59] usb 3-1: config 0 descriptor?? [ 918.726384][T17423] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 918.810112][ T59] hub 3-1:0.0: USB hub found [ 919.400707][ T59] hub 3-1:0.0: config failed, can't read hub descriptor (err -22) [ 919.423183][ T59] usbhid 3-1:0.0: can't add hid device: -71 [ 919.423261][ T59] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 919.472924][ T59] usb 3-1: USB disconnect, device number 33 [ 919.481045][T17461] loop4: detected capacity change from 0 to 128 [ 919.943134][T17464] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2451'. [ 921.270137][T17470] loop4: detected capacity change from 0 to 131072 [ 921.420228][T17464] loop3: detected capacity change from 0 to 8 [ 921.434037][T17470] F2FS-fs (loop4): Found nat_bits in checkpoint [ 921.487544][T17470] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 928.935539][T17491] loop0: detected capacity change from 0 to 32768 [ 928.967686][T17491] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2459 (17491) [ 928.982673][T17491] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 928.992914][T17491] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 929.001745][T17491] BTRFS info (device loop0): using free-space-tree [ 929.094230][T16805] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 929.354273][T16805] usb 2-1: Using ep0 maxpacket: 16 [ 929.370073][T16805] usb 2-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 929.381269][T16805] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 929.994402][T16805] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 930.039476][T16805] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 930.099806][T16805] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 930.157144][T16805] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 930.190572][T16805] usb 2-1: Manufacturer: syz [ 930.216337][T16805] usb 2-1: config 0 descriptor?? [ 930.604094][T16805] rc_core: IR keymap rc-hauppauge not found [ 930.621250][T16805] Registered IR keymap rc-empty [ 930.621622][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.648636][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.684581][T16805] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 930.685335][T16805] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input90 [ 930.703383][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.724398][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.754276][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.790725][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.814370][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.845892][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.874523][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.904358][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.934901][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.946374][ T5092] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 930.951311][ T5092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 930.952550][ T5092] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 930.955618][ T5092] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 930.956034][ T5092] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 930.956238][ T5092] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 930.964364][T16805] mceusb 2-1:0.0: Error: mce write urb status = -71 [ 930.995757][T16805] mceusb 2-1:0.0: Registered ؋ with mce emulator interface version 1 [ 930.995788][T16805] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 930.998577][T16805] usb 2-1: USB disconnect, device number 36 [ 931.122887][T10620] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 931.630147][T17530] loop0: detected capacity change from 0 to 128 [ 931.734664][ T29] audit: type=1804 audit(1719305142.122:715): pid=17531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2465" name="/root/syzkaller.V7NYZm/252/bus" dev="sda1" ino=1986 res=1 errno=0 [ 932.431508][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.472815][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.503324][T17528] loop4: detected capacity change from 0 to 1024 [ 932.603097][T17528] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 933.279835][T17539] loop1: detected capacity change from 0 to 131072 [ 933.294152][ T5092] Bluetooth: hci4: command tx timeout [ 933.367253][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.379609][T17539] F2FS-fs (loop1): Found nat_bits in checkpoint [ 933.423232][T17539] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 933.618021][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.676461][T17549] loop0: detected capacity change from 0 to 8 [ 933.703371][ T5096] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 933.753060][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.774277][T16805] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 933.901717][T17553] input: syz1 as /devices/virtual/input/input91 [ 933.917970][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 933.964394][T16805] usb 3-1: Using ep0 maxpacket: 32 [ 933.983168][T16805] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 934.004584][T16805] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 934.030874][T16805] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 934.098146][T16805] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 934.109595][T17520] chnl_net:caif_netlink_parms(): no params data found [ 934.138396][T16805] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 934.179360][T16805] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 934.217643][T16805] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 934.238769][T16805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.285899][T16805] usb 3-1: Product: syz [ 934.303193][ T63] bridge_slave_1: left allmulticast mode [ 934.309255][ T63] bridge_slave_1: left promiscuous mode [ 934.310438][T16805] usb 3-1: Manufacturer: syz [ 934.317476][ T63] bridge1: port 1(bridge_slave_1) entered disabled state [ 934.364097][T16805] usb 3-1: SerialNumber: syz [ 934.628342][T17544] netlink: 'syz.2.2467': attribute type 72 has an invalid length. [ 934.682355][T16805] cdc_ncm 3-1:1.0: bind() failure [ 934.715622][T16805] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 934.724542][T16805] cdc_ncm 3-1:1.1: bind() failure [ 934.756779][T16805] usb 3-1: USB disconnect, device number 34 [ 934.970512][T17562] loop0: detected capacity change from 0 to 32768 [ 934.996865][T17562] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2472 (17562) [ 935.014481][T17562] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 935.024787][T17562] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 935.034254][T17562] BTRFS info (device loop0): using free-space-tree [ 935.314787][T17578] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2472'. [ 935.364492][ T5092] Bluetooth: hci4: command tx timeout [ 935.988052][T10620] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 936.168493][ T5144] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 936.336892][ T5092] Bluetooth: hci0: command 0x0406 tx timeout [ 937.175047][T17596] loop0: detected capacity change from 0 to 32768 [ 937.197950][T17596] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2475 (17596) [ 937.268897][T17598] loop2: detected capacity change from 0 to 32768 [ 937.278040][T17598] BTRFS: device /dev/loop2 (7:2) using temp-fsid df78dbac-452b-4629-9a9a-d4608f143bf7 [ 937.288027][T17598] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2477 (17598) [ 937.304950][T17596] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 937.315344][T17596] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 937.324857][T17596] BTRFS info (device loop0): using free-space-tree [ 937.345963][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 937.357095][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 937.367268][ T5144] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 937.379618][T17598] BTRFS info (device loop2): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 937.389990][T17598] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 937.399534][T17598] BTRFS info (device loop2): using free-space-tree [ 937.407881][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 937.416724][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.444191][ T5096] Bluetooth: hci4: command tx timeout [ 937.451477][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 937.468264][ T5144] usb 2-1: config 0 descriptor?? [ 937.480364][ T63] bond0 (unregistering): Released all slaves [ 938.523553][ T5144] usbhid 2-1:0.0: can't add hid device: -71 [ 939.186528][T17643] loop4: detected capacity change from 0 to 131072 [ 939.194906][ T5144] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 939.227602][T17638] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2475'. [ 939.247744][ T5144] usb 2-1: USB disconnect, device number 37 [ 939.470160][T15384] BTRFS info (device loop2): last unmount of filesystem df78dbac-452b-4629-9a9a-d4608f143bf7 [ 939.506659][T17643] F2FS-fs (loop4): Found nat_bits in checkpoint [ 939.529503][ T5096] Bluetooth: hci4: command tx timeout [ 939.544243][T17643] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 939.680823][T17520] bridge0: port 1(bridge_slave_0) entered blocking state [ 939.697906][T17520] bridge0: port 1(bridge_slave_0) entered disabled state [ 939.734352][T17520] bridge_slave_0: entered allmulticast mode [ 939.755195][T17520] bridge_slave_0: entered promiscuous mode [ 939.817196][T17520] bridge0: port 2(bridge_slave_1) entered blocking state [ 939.859276][T17520] bridge0: port 2(bridge_slave_1) entered disabled state [ 939.868699][T10620] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 939.887963][T17520] bridge_slave_1: entered allmulticast mode [ 939.907799][T17520] bridge_slave_1: entered promiscuous mode [ 940.288785][ T5144] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 940.299953][T17653] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2479'. [ 940.324283][T17653] bridge_slave_1: left allmulticast mode [ 940.340254][T17653] bridge_slave_1: left promiscuous mode [ 940.350601][T17653] bridge0: port 2(bridge_slave_1) entered disabled state [ 940.384456][T17653] bridge_slave_0: left allmulticast mode [ 940.404860][T17653] bridge_slave_0: left promiscuous mode [ 940.431844][T17653] bridge0: port 1(bridge_slave_0) entered disabled state [ 940.534317][ T5144] usb 2-1: Using ep0 maxpacket: 32 [ 940.552703][ T5144] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 940.575783][ T5144] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 940.595390][ T5144] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 940.622394][T17520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 940.631776][ T5144] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 940.653193][ T5144] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 940.675822][ T5144] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 940.698867][ T5144] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 940.708405][ T63] hsr_slave_0: left promiscuous mode [ 940.712328][ T5144] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 940.722670][ T5091] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 940.725575][ T5144] usb 2-1: Product: syz [ 940.741342][ T5144] usb 2-1: Manufacturer: syz [ 940.746042][ T5144] usb 2-1: SerialNumber: syz [ 940.804349][ T63] hsr_slave_1: left promiscuous mode [ 940.811002][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 940.825424][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 940.844317][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 940.862078][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 941.027139][ T5091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 941.044082][ T5091] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 941.045805][T17650] netlink: 'syz.1.2482': attribute type 72 has an invalid length. [ 941.065399][ T5091] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 941.095088][ T5091] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 941.722631][ T63] veth1_macvtap: left promiscuous mode [ 941.758071][ T63] veth0_macvtap: left promiscuous mode [ 941.786328][ T63] veth1_vlan: left promiscuous mode [ 941.808588][ T5144] cdc_ncm 2-1:1.0: bind() failure [ 941.842267][ T63] veth0_vlan: left promiscuous mode [ 941.853711][ T5144] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 941.891203][ T5144] cdc_ncm 2-1:1.1: bind() failure [ 941.949460][ T5144] usb 2-1: USB disconnect, device number 38 [ 942.043387][T17662] loop4: detected capacity change from 0 to 8 [ 942.147423][ T5091] usb 1-1: config 0 descriptor?? [ 942.324771][ T63] pim6reg (unregistering): left allmulticast mode [ 942.390453][T17663] input: syz1 as /devices/virtual/input/input92 [ 942.413218][ T29] audit: type=1804 audit(1719305152.852:716): pid=17655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2480" name="/root/syzkaller.Tehl1N/271/bus" dev="sda1" ino=1987 res=1 errno=0 [ 942.426880][ T5091] usbhid 1-1:0.0: can't add hid device: -71 [ 942.461370][ T5091] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 942.477100][ T5091] usb 1-1: USB disconnect, device number 23 [ 942.509671][ T29] audit: type=1800 audit(1719305152.852:717): pid=17655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2480" name="bus" dev="sda1" ino=1987 res=0 errno=0 [ 943.625305][T17681] loop1: detected capacity change from 0 to 1024 [ 943.695849][T17681] hfsplus: unable to load nls mapping "i{o8859-1" [ 943.705041][T17681] hfsplus: unable to parse mount options [ 943.736944][T17683] loop4: detected capacity change from 0 to 4096 [ 943.765020][ T63] team0 (unregistering): Port device team_slave_1 removed [ 943.804220][T17687] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 943.821070][ T29] audit: type=1804 audit(1719305154.272:718): pid=17683 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2489" name="/root/syzkaller.V7NYZm/259/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 944.204259][ T5144] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 944.426977][ T5144] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.444479][ T5144] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 944.453944][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.482347][ T5144] usb 2-1: config 0 descriptor?? [ 944.690646][T17520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 944.707874][T17669] netlink: 116 bytes leftover after parsing attributes in process `syz.2.2484'. [ 944.916100][ T29] audit: type=1800 audit(1719305155.362:719): pid=17689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2490" name="bus" dev="sda1" ino=1973 res=0 errno=0 [ 944.938220][ T5144] ath6kl: Failed to read usb control message: -71 [ 944.946662][ T5144] ath6kl: Unable to read the bmi data from the device: -71 [ 944.959548][ T5144] ath6kl: Unable to recv target info: -71 [ 944.968239][ T5144] ath6kl: Failed to init ath6kl core: -71 [ 945.550590][ T5144] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 945.598259][T15605] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 945.654454][ T5144] usb 2-1: USB disconnect, device number 39 [ 945.664437][ T29] audit: type=1804 audit(1719305155.432:720): pid=17700 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2492" name="/root/syzkaller.kddkXb/102/bus" dev="sda1" ino=1987 res=1 errno=0 [ 945.706383][T17520] team0: Port device team_slave_0 added [ 945.737120][T17704] loop2: detected capacity change from 0 to 1024 [ 945.757996][T17520] team0: Port device team_slave_1 added [ 945.787769][T17704] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 945.889197][T15605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 945.914696][T17520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 945.952213][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 945.954585][T15605] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 945.978503][T17520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 946.030365][T15605] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 946.043732][T15605] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 946.059763][T15605] usb 5-1: config 0 descriptor?? [ 946.074516][T17520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 946.081993][T17520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 946.107911][ C0] vkms_vblank_simulate: vblank timer overrun [ 946.119355][T17520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 946.258304][T17520] hsr_slave_0: entered promiscuous mode [ 946.275164][T17520] hsr_slave_1: entered promiscuous mode [ 946.281948][T15605] usbhid 5-1:0.0: can't add hid device: -71 [ 946.294718][T15605] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 946.303446][T17520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 946.325831][T17520] Cannot create hsr debugfs directory [ 946.333683][T15605] usb 5-1: USB disconnect, device number 16 [ 946.396980][ T29] audit: type=1804 audit(1719305156.852:721): pid=17715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.2497" name="/root/syzkaller.lLE59H/286/bus" dev="sda1" ino=1987 res=1 errno=0 [ 946.419441][ T5144] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 946.509010][T17712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2496'. [ 946.624433][ T5144] usb 1-1: Using ep0 maxpacket: 32 [ 946.636011][ T5144] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 946.648902][ T5144] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 946.659650][ T5144] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 946.669765][ T5144] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 946.679738][ T5144] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 946.689732][ T5144] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 946.706263][ T5144] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 946.720431][ T5144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 946.732931][ T5144] usb 1-1: Product: syz [ 946.742768][ T5144] usb 1-1: Manufacturer: syz [ 946.890875][ T5144] usb 1-1: SerialNumber: syz [ 947.097237][T17722] loop4: detected capacity change from 0 to 1024 [ 947.111597][T17706] netlink: 'syz.0.2494': attribute type 72 has an invalid length. [ 947.176679][ T5144] cdc_ncm 1-1:1.0: bind() failure [ 947.213257][ T5144] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 947.260079][ T5144] cdc_ncm 1-1:1.1: bind() failure [ 947.306974][ T5144] usb 1-1: USB disconnect, device number 24 [ 947.320175][T17722] hfsplus: unable to load nls mapping "i{o8859-1" [ 947.326811][T17722] hfsplus: unable to parse mount options [ 947.433205][T17715] loop1: detected capacity change from 0 to 32768 [ 947.454336][T17715] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2497 (17715) [ 947.495084][T17520] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 947.518975][T17520] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 947.535600][T17520] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 947.550032][T17715] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 947.581218][T17715] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 947.612868][T17715] BTRFS info (device loop1): using free-space-tree [ 947.630207][T17520] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 947.818996][T17727] loop2: detected capacity change from 0 to 4096 [ 947.887871][ T29] audit: type=1804 audit(1719305158.332:722): pid=17743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2497" name="/root/syzkaller.lLE59H/286/file1/bus" dev="loop1" ino=263 res=1 errno=0 [ 947.953824][T17746] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 947.962927][ T29] audit: type=1804 audit(1719305158.412:723): pid=17727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2501" name="/root/syzkaller.kddkXb/105/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 947.987559][ C0] vkms_vblank_simulate: vblank timer overrun [ 948.127220][T17725] loop4: detected capacity change from 0 to 32768 [ 948.152437][T17520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 948.194977][T17520] 8021q: adding VLAN 0 to HW filter on device team0 [ 948.213574][T17725] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 948.258012][ T5091] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.265230][ T5091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.371679][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.378907][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 948.446138][T17725] XFS (loop4): Ending clean mount [ 948.507709][T17725] XFS (loop4): Quotacheck needed: Please wait. [ 948.632161][T17725] XFS (loop4): Quotacheck: Done. [ 948.730843][ T9946] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 948.787583][T11412] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 949.226038][T16805] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 949.268769][T17520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 949.389855][T17771] loop4: detected capacity change from 0 to 8192 [ 949.394320][ T929] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 949.424132][ T5144] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 949.437452][T16805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 949.453903][T16805] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 949.468481][T16805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.493167][T17520] veth0_vlan: entered promiscuous mode [ 949.499301][T16805] usb 1-1: config 0 descriptor?? [ 949.511262][T17520] veth1_vlan: entered promiscuous mode [ 949.584778][ T929] usb 3-1: Using ep0 maxpacket: 8 [ 949.601581][ T929] usb 3-1: config 5 has an invalid interface number: 248 but max is 2 [ 949.610746][ T929] usb 3-1: config 5 has an invalid interface number: 174 but max is 2 [ 949.620209][ T929] usb 3-1: config 5 has an invalid interface number: 104 but max is 2 [ 949.631916][ T929] usb 3-1: config 5 has an invalid interface number: 121 but max is 2 [ 949.641856][T17520] veth0_macvtap: entered promiscuous mode [ 949.644009][ T929] usb 3-1: config 5 has 4 interfaces, different from the descriptor's value: 3 [ 949.652286][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 949.657643][ T929] usb 3-1: config 5 has no interface number 0 [ 949.677913][ T929] usb 3-1: config 5 has no interface number 1 [ 949.684251][ T5144] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 949.684312][ T929] usb 3-1: config 5 has no interface number 2 [ 949.700977][ T929] usb 3-1: config 5 has no interface number 3 [ 949.702902][ T5144] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 949.707264][ T929] usb 3-1: config 5 interface 248 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 949.726251][ T5144] usb 2-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 949.739426][ T929] usb 3-1: config 5 interface 248 altsetting 0 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 949.749037][T17774] netlink: 116 bytes leftover after parsing attributes in process `syz.4.2507'. [ 949.753948][ T929] usb 3-1: config 5 interface 248 altsetting 0 endpoint 0x6 has an invalid bInterval 62, changing to 9 [ 949.760574][T17774] bridge_slave_1: left allmulticast mode [ 949.777804][ T5144] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 949.782816][ T929] usb 3-1: config 5 interface 248 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 949.785897][T17774] bridge_slave_1: left promiscuous mode [ 949.786142][T17774] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.805135][ T929] usb 3-1: config 5 interface 248 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 8 [ 949.812691][ T5144] usb 2-1: config 0 descriptor?? [ 949.824759][ T929] usb 3-1: config 5 interface 174 altsetting 250 has a duplicate endpoint with address 0x7, skipping [ 949.838795][ T929] usb 3-1: config 5 interface 174 altsetting 250 has a duplicate endpoint with address 0x8, skipping [ 949.851629][ T929] usb 3-1: config 5 interface 174 altsetting 250 has a duplicate endpoint with address 0xC, skipping [ 949.851972][T17774] bridge_slave_0: left allmulticast mode [ 949.865853][ T929] usb 3-1: config 5 interface 174 altsetting 250 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 949.880463][ T929] usb 3-1: config 5 interface 104 altsetting 64 has an invalid descriptor for endpoint zero, skipping [ 949.881423][T17774] bridge_slave_0: left promiscuous mode [ 949.893616][ T929] usb 3-1: config 5 interface 104 altsetting 64 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 949.905618][T17774] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.913443][ T929] usb 3-1: too many endpoints for config 5 interface 121 altsetting 15: 107, using maximum allowed: 30 [ 949.929940][ T929] usb 3-1: config 5 interface 121 altsetting 15 has a duplicate endpoint with address 0xB, skipping [ 949.949040][ T29] audit: type=1800 audit(1719305160.402:724): pid=17761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2505" name="bus" dev="sda1" ino=1986 res=0 errno=0 [ 949.969616][ C0] vkms_vblank_simulate: vblank timer overrun [ 949.977921][T16805] ath6kl: Failed to read usb control message: -71 [ 949.984881][ T929] usb 3-1: config 5 interface 121 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 949.997627][T16805] ath6kl: Unable to read the bmi data from the device: -71 [ 950.009486][T16805] ath6kl: Unable to recv target info: -71 [ 950.016736][ T929] usb 3-1: config 5 interface 121 altsetting 15 endpoint 0x89 has invalid maxpacket 1023, setting to 64 [ 950.029477][T16805] ath6kl: Failed to init ath6kl core: -71 [ 950.044450][ T929] usb 3-1: config 5 interface 121 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 950.056325][T16805] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 950.072609][ T929] usb 3-1: config 5 interface 121 altsetting 15 has 4 endpoint descriptors, different from the interface descriptor's value: 107 [ 950.089866][T16805] usb 1-1: USB disconnect, device number 25 [ 950.097309][ T929] usb 3-1: config 5 interface 174 has no altsetting 0 [ 950.107513][ T929] usb 3-1: config 5 interface 104 has no altsetting 0 [ 950.114407][ T929] usb 3-1: config 5 interface 121 has no altsetting 0 [ 950.131464][ T929] usb 3-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a2.73 [ 950.142497][ T929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 950.151845][ T929] usb 3-1: Product: syz [ 950.158576][ T929] usb 3-1: Manufacturer: ࠌ [ 950.159506][T17520] veth1_macvtap: entered promiscuous mode [ 950.163180][ T929] usb 3-1: SerialNumber: syz [ 950.201192][T17767] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 950.258343][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.279615][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.292875][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.299134][ T5144] wacom 0003:056A:0043.0011: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 950.303571][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.323645][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.337796][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.350158][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 950.354342][ T5144] wacom 0003:056A:0043.0011: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.1-1/input0 [ 950.361956][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.378261][ T5144] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:056A:0043.0011/input/input93 [ 950.383779][T17520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 950.430660][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.441379][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.457075][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.469224][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.479328][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.491801][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.502661][T17520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 950.504284][ T929] smsusb:smsusb_probe: board id=8, interface number 248 [ 950.517569][T17520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 950.526964][ T929] smsusb:smsusb_probe: board id=8, interface number 174 [ 950.531698][T17520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 950.541871][ T929] smsusb:smsusb_probe: board id=8, interface number 104 [ 950.554145][ T5140] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 950.557483][ T59] usb 2-1: USB disconnect, device number 40 [ 950.567059][ T929] smsusb:smsusb_probe: board id=8, interface number 121 [ 950.579809][ T929] usb 3-1: USB disconnect, device number 35 [ 950.592331][T17520] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.624045][T17520] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.633918][T17520] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.645806][T17520] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 950.700483][T17780] loop0: detected capacity change from 0 to 1024 [ 950.738039][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 950.755742][T17780] hfsplus: unable to load nls mapping "i{o8859-1" [ 950.759249][ T5140] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 950.762327][T17780] hfsplus: unable to parse mount options [ 950.772418][ T5140] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 950.790214][ T5140] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.810553][ T5140] usb 5-1: config 0 descriptor?? [ 950.872771][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 950.885920][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.097683][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 951.110076][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 951.111907][ T5140] usbhid 5-1:0.0: can't add hid device: -71 [ 951.123601][ T5140] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 951.135902][ T5140] usb 5-1: USB disconnect, device number 17 [ 951.706846][T17789] loop2: detected capacity change from 0 to 1024 [ 951.738355][T17789] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 951.744994][T17789] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 952.156262][T17077] hfsplus: b-tree write err: -5, ino 4 [ 952.171292][T17796] loop0: detected capacity change from 0 to 1024 [ 952.210657][T17796] hfsplus: failed to load root directory [ 952.230249][T17794] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 952.386334][T17802] loop2: detected capacity change from 0 to 1024 [ 952.543693][T17802] hfsplus: failed to load root directory [ 952.564439][T17803] loop4: detected capacity change from 0 to 4096 [ 954.153037][T17815] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 954.169959][ T29] audit: type=1804 audit(1719305164.622:725): pid=17803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2515" name="/root/syzkaller.V7NYZm/266/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 954.483719][T17816] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2518'. [ 954.510292][T17822] loop3: detected capacity change from 0 to 1024 [ 954.571553][T17822] hfsplus: unable to load nls mapping "i{o8859-1" [ 954.580620][T17822] hfsplus: unable to parse mount options [ 955.498695][ T5091] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 955.526597][T17846] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 956.596136][T17856] loop0: detected capacity change from 0 to 8192 [ 956.669179][T17860] loop1: detected capacity change from 0 to 1024 [ 956.683353][T17860] hfsplus: failed to load root directory [ 956.726219][T17863] loop4: detected capacity change from 0 to 256 [ 956.754737][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 956.769016][ T5091] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 956.780514][ T5091] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 956.810745][ T5091] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 956.840031][ T5091] usb 4-1: config 0 descriptor?? [ 957.020772][T17873] loop0: detected capacity change from 0 to 1024 [ 957.058456][T17875] loop4: detected capacity change from 0 to 1024 [ 957.067597][T17873] hfsplus: failed to load root directory [ 957.112149][T17875] hfsplus: unable to load nls mapping "i{o8859-1" [ 957.119947][ T5091] usbhid 4-1:0.0: can't add hid device: -71 [ 957.121718][T17875] hfsplus: unable to parse mount options [ 957.137602][T17878] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2537'. [ 957.150642][ T5091] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 957.176470][ T5091] usb 4-1: USB disconnect, device number 39 [ 957.362217][T17882] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2538'. [ 958.029611][T17893] loop4: detected capacity change from 0 to 32768 [ 958.062060][T17893] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2542 (17893) [ 958.081227][T17893] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 958.091683][T17893] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 958.101368][T17893] BTRFS info (device loop4): using free-space-tree [ 958.191148][T17888] loop1: detected capacity change from 0 to 4096 [ 958.356284][T17911] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2542'. [ 958.407669][T17912] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 958.933258][T11412] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 958.945349][ T5142] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 959.144955][ T5142] usb 1-1: Using ep0 maxpacket: 32 [ 959.173009][ T5142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 959.220881][ T5142] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 959.252730][ T5142] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 959.288368][ T5142] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 959.326331][ T5142] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 959.371737][ T5142] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 959.398435][ T5142] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 959.407869][ T5142] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.444915][ T5142] usb 1-1: Product: syz [ 959.459386][ T5142] usb 1-1: Manufacturer: syz [ 959.469606][ T5142] usb 1-1: SerialNumber: syz [ 959.769737][T17919] loop4: detected capacity change from 0 to 32768 [ 959.783474][T17919] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2544 (17919) [ 959.785291][T17907] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2543'. [ 959.820272][T17919] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 959.830674][T17919] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 959.840174][T17919] BTRFS info (device loop4): using free-space-tree [ 959.919088][ T5142] cdc_ncm 1-1:1.0: bind() failure [ 959.946787][ T5142] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 959.978781][ T5142] cdc_ncm 1-1:1.1: bind() failure [ 960.088672][ T5142] usb 1-1: USB disconnect, device number 26 [ 960.202976][T17935] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2544'. [ 960.862633][T11412] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 962.921678][T17954] loop1: detected capacity change from 0 to 1024 [ 963.864769][T17954] hfsplus: failed to load root directory [ 964.004944][T17964] loop2: detected capacity change from 0 to 2048 [ 964.141273][T17964] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 964.153911][T17964] ext4 filesystem being mounted at /root/syzkaller.kddkXb/116/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 964.232451][T17961] fs-verity (loop2, inode 13): Unknown hash algorithm number: 0 [ 964.294679][ T929] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 964.404192][ T59] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 964.498264][ T929] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 964.524167][ T929] usb 5-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 964.539380][ T929] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 964.551031][T17981] loop1: detected capacity change from 0 to 64 [ 964.578834][T17981] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 964.606063][ T929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.620542][T17980] CIFS: Unable to determine destination address [ 964.630163][ T59] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 964.649241][ T929] usb 5-1: invalid MIDI out EP 0 [ 964.650412][ T59] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 964.719260][ T59] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 964.725574][ T929] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 964.731223][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 964.775553][T17983] loop3: detected capacity change from 0 to 8 [ 964.788982][ T59] usb 1-1: invalid MIDI out EP 0 [ 964.865854][T17985] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2557'. [ 964.927674][ T59] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 964.950425][ T929] usb 5-1: USB disconnect, device number 18 [ 965.000239][T17988] input: syz1 as /devices/virtual/input/input96 [ 965.040917][ T59] usb 1-1: USB disconnect, device number 27 [ 965.965309][T15384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 966.221504][T18001] loop2: detected capacity change from 0 to 2048 [ 966.327517][T18009] loop1: detected capacity change from 0 to 64 [ 966.523225][T18001] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 966.674209][T18001] ext4 filesystem being mounted at /root/syzkaller.kddkXb/117/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 966.989716][T18001] fs-verity (loop2, inode 13): Unknown hash algorithm number: 0 [ 967.104729][T18022] loop3: detected capacity change from 0 to 64 [ 967.297179][T18022] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 967.365457][T18012] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 288: padding at end of block bitmap is not set [ 967.474284][T18020] CIFS: Unable to determine destination address [ 967.720858][T18029] loop0: detected capacity change from 0 to 32768 [ 967.728693][T18029] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2567 (18029) [ 967.744884][T18029] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 967.756274][T18029] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 967.765895][T18029] BTRFS info (device loop0): using free-space-tree [ 968.162223][T18047] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2567'. [ 968.545560][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2568'. [ 968.628738][T10620] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 968.907223][T18052] loop3: detected capacity change from 0 to 2048 [ 968.985776][T18052] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 969.076027][T18052] ext4 filesystem being mounted at /root/syzkaller.DW3OAF/11/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 969.143432][T18016] loop4: detected capacity change from 0 to 40427 [ 969.192193][T18052] fs-verity (loop3, inode 13): Unknown hash algorithm number: 0 [ 969.218726][T18016] F2FS-fs (loop4): Found nat_bits in checkpoint [ 970.640534][T18016] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 970.715004][T18070] loop0: detected capacity change from 0 to 64 [ 970.743725][ T29] audit: type=1804 audit(1719305181.192:726): pid=18069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2572" name="/root/syzkaller.lLE59H/302/bus" dev="sda1" ino=1978 res=1 errno=0 [ 971.057221][T18072] loop1: detected capacity change from 0 to 1024 [ 971.088704][T17520] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.403567][T15384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 972.424952][T18072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 972.630022][T18082] loop2: detected capacity change from 0 to 128 [ 972.723198][T18081] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2573'. [ 974.076373][T18099] loop1: detected capacity change from 0 to 32768 [ 974.089502][T18099] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2579 (18099) [ 974.113713][T18099] BTRFS info (device loop1): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 974.123931][T18099] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 974.133521][T18099] BTRFS info (device loop1): using free-space-tree [ 974.154569][T18089] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2574'. [ 974.175594][T18107] loop0: detected capacity change from 0 to 64 [ 974.309963][ T5143] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 974.337708][T18117] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2579'. [ 974.729071][ T5143] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 975.359054][ T5143] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 975.409553][ T5143] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 975.416767][ T9946] BTRFS info (device loop1): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 975.468327][ T5143] usb 3-1: config 0 descriptor?? [ 975.864522][ T5144] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 975.892353][ T5143] ath6kl: Failed to read usb control message: -71 [ 975.898995][ T29] audit: type=1800 audit(1719305186.332:727): pid=18094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2578" name="bus" dev="sda1" ino=1988 res=0 errno=0 [ 975.932560][ T5143] ath6kl: Unable to read the bmi data from the device: -71 [ 975.951117][ T5143] ath6kl: Unable to recv target info: -71 [ 975.974325][ T5143] ath6kl: Failed to init ath6kl core: -71 [ 975.980561][ T5143] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 976.046117][ T5143] usb 3-1: USB disconnect, device number 36 [ 976.322423][T18125] loop3: detected capacity change from 0 to 40427 [ 976.345133][T18125] F2FS-fs (loop3): Found nat_bits in checkpoint [ 976.412885][T18127] loop1: detected capacity change from 0 to 32768 [ 976.421440][T18127] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2582 (18127) [ 976.422504][T18125] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 976.435652][ T5144] usb 1-1: Using ep0 maxpacket: 16 [ 976.452277][T18127] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 976.463411][T18127] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 976.472242][T18127] BTRFS info (device loop1): using free-space-tree [ 976.493516][ T5144] usb 1-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 976.509943][ T5144] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 976.636778][ T5144] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 976.665223][ T5144] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 976.681568][ T5144] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 976.688974][T18145] loop2: detected capacity change from 0 to 1024 [ 976.926312][T18145] hfsplus: failed to load root directory [ 977.215787][T17520] syz-executor: attempt to access beyond end of device [ 977.215787][T17520] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 977.244187][ T5144] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 977.318495][T17520] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 977.351272][ T5144] usb 1-1: Manufacturer: syz [ 977.391578][ T5144] usb 1-1: config 0 descriptor?? [ 977.416037][ T9946] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 977.844092][ T5144] rc_core: IR keymap rc-hauppauge not found [ 977.850048][ T5144] Registered IR keymap rc-empty [ 977.862857][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 977.921061][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 977.953683][T18156] fscrypt (sda1, inode 8231): Reserved bits set in encryption policy [ 977.963560][ T5144] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 978.012380][ T5144] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input97 [ 978.064593][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.088214][T18159] loop1: detected capacity change from 0 to 2048 [ 978.097667][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.134311][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.167722][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.190760][T18159] loop1: detected capacity change from 0 to 512 [ 978.199348][T18159] EXT4-fs: Cannot specify journal on remount [ 978.205860][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.238555][T18165] loop4: detected capacity change from 0 to 128 [ 978.246281][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.264532][ T5142] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 978.284454][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.295833][T18167] loop3: detected capacity change from 0 to 64 [ 978.336931][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.374365][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.414734][ T5144] mceusb 1-1:0.0: Error: mce write urb status = -71 [ 978.446841][ T5144] mceusb 1-1:0.0: Registered ؋ with mce emulator interface version 1 [ 978.456241][ T5144] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 978.467244][ T5142] usb 3-1: Using ep0 maxpacket: 32 [ 978.475438][ T5144] usb 1-1: USB disconnect, device number 28 [ 978.482007][ T5142] usb 3-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 978.491623][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 978.505196][ T5142] usb 3-1: config 0 descriptor?? [ 978.516270][ T5142] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 978.884247][ T5091] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 979.088216][ T5091] usb 2-1: Using ep0 maxpacket: 32 [ 979.103687][ T5091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 979.134406][ T5091] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 979.171293][ T5091] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 979.194987][T18176] loop0: detected capacity change from 0 to 32768 [ 979.208115][ T5091] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 979.208212][T18176] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2592 (18176) [ 979.238744][ T5091] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 979.240177][T18176] BTRFS info (device loop0): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 979.260951][T18176] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm [ 979.270464][T18176] BTRFS info (device loop0): using free-space-tree [ 979.271302][ T5091] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 979.335729][ T5091] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 979.356360][ T5142] gspca_vc032x: reg_w err -71 [ 979.361170][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.373615][ T5091] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.389675][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.395273][ T5091] usb 2-1: Product: syz [ 979.399456][ T5091] usb 2-1: Manufacturer: syz [ 979.404433][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.411316][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.416732][ T5091] usb 2-1: SerialNumber: syz [ 979.421484][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.432352][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.439908][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.446044][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.451483][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.457264][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.462627][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.469294][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.479680][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.485068][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.490587][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.496195][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.501699][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.511268][ T5142] gspca_vc032x: I2c Bus Busy Wait 00 [ 979.518439][ T2412] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 979.572402][ T5142] gspca_vc032x: Unknown sensor... [ 979.595404][ T5142] vc032x 3-1:0.0: probe with driver vc032x failed with error -22 [ 979.652284][ T5142] usb 3-1: USB disconnect, device number 37 [ 979.652617][T18196] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2592'. [ 979.711537][ T5091] cdc_ncm 2-1:1.0: bind() failure [ 979.724116][ T5091] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 979.733062][ T5091] cdc_ncm 2-1:1.1: bind() failure [ 979.742581][ T5091] usb 2-1: USB disconnect, device number 41 [ 980.292668][ T2412] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.306962][T10620] BTRFS info (device loop0): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 980.351004][T18201] loop2: detected capacity change from 0 to 1024 [ 980.429032][T18201] hfsplus: failed to load root directory [ 980.545766][ T2412] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.786293][ T2412] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 980.915439][T18207] loop0: detected capacity change from 0 to 1024 [ 980.948733][T18209] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 980.953304][T18207] hfsplus: failed to load root directory [ 980.975714][T18209] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 980.996439][T18209] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 981.019724][T18209] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 981.030648][T18209] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 981.038892][T18209] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 981.490258][ T2412] bridge_slave_1: left allmulticast mode [ 981.504358][ T2412] bridge_slave_1: left promiscuous mode [ 981.523570][ T2412] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.549937][ T2412] bridge_slave_0: left allmulticast mode [ 981.572634][ T2412] bridge_slave_0: left promiscuous mode [ 981.592145][ T2412] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.747263][T18204] loop1: detected capacity change from 0 to 32768 [ 981.805664][T18204] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 981.912175][T18204] XFS (loop1): Ending clean mount [ 981.922877][T18204] XFS (loop1): Quotacheck needed: Please wait. [ 982.055128][T18204] XFS (loop1): Quotacheck: Done. [ 982.329907][ T9946] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a [ 982.625225][ T5142] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 982.814165][ T5142] usb 3-1: Using ep0 maxpacket: 16 [ 982.831637][ T5142] usb 3-1: config 0 has an invalid descriptor of length 28, skipping remainder of the config [ 982.852986][ T2412] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 982.863047][ T5142] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 982.884573][T18231] loop1: detected capacity change from 0 to 64 [ 982.890959][ T5142] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 191 [ 982.891287][ T2412] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 982.911399][T18231] MINIX-fs: mounting unchecked file system, running fsck is recommended [ 982.923207][ T5142] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 982.944267][ T5142] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 982.946703][T18231] CIFS: Unable to determine destination address [ 982.953352][ T5142] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 982.953381][ T5142] usb 3-1: Manufacturer: syz [ 982.961186][ T5142] usb 3-1: config 0 descriptor?? [ 982.969491][ T2412] bond0 (unregistering): Released all slaves [ 983.134761][T18209] Bluetooth: hci2: command tx timeout [ 983.308164][ T5142] rc_core: IR keymap rc-hauppauge not found [ 983.333016][T18238] loop1: detected capacity change from 0 to 128 [ 983.339588][ T5142] Registered IR keymap rc-empty [ 983.353047][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.419196][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.454819][ T5142] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 983.510805][T18240] loop0: detected capacity change from 0 to 8192 [ 983.518385][ T5142] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input98 [ 983.544517][ T2412] hsr_slave_0: left promiscuous mode [ 983.550726][ T2412] hsr_slave_1: left promiscuous mode [ 983.567877][ T2412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 983.576810][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.583752][ T2412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 983.596325][ T2412] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 983.614464][ T2412] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 983.631236][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.664630][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.714404][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.721356][ T2412] veth1_macvtap: left promiscuous mode [ 983.728892][ T2412] veth0_macvtap: left promiscuous mode [ 983.735799][ T2412] veth1_vlan: left promiscuous mode [ 983.741261][ T2412] veth0_vlan: left promiscuous mode [ 983.756431][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.811343][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.856180][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.894356][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.934344][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 983.995939][ T5142] mceusb 3-1:0.0: Error: mce write urb status = -71 [ 984.035852][ T5142] mceusb 3-1:0.0: Registered ؋ with mce emulator interface version 1 [ 984.057148][ T5142] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 984.092418][ T5142] usb 3-1: USB disconnect, device number 38 [ 984.784280][ T5144] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 984.843899][T18244] loop0: detected capacity change from 0 to 40427 [ 984.921591][T18244] F2FS-fs (loop0): Found nat_bits in checkpoint [ 984.995741][ T5144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 985.024103][ T5144] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 985.063634][ T5144] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 985.078104][T18244] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 985.204132][T18209] Bluetooth: hci2: command tx timeout [ 985.298557][ T5144] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 985.308246][ T5144] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.320333][T18257] loop1: detected capacity change from 0 to 4096 [ 985.328314][ T5144] usb 3-1: config 0 descriptor?? [ 985.352329][T18259] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 985.755798][ T29] audit: type=1804 audit(1719305196.212:728): pid=18261 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2609" name="/root/syzkaller.lLE59H/312/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 985.863862][ T5144] wacom 0003:056A:0043.0012: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 985.966501][T10620] syz-executor: attempt to access beyond end of device [ 985.966501][T10620] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 985.984359][ T5144] wacom 0003:056A:0043.0012: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 986.010971][T10620] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 986.025349][ T5144] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0012/input/input99 [ 986.195595][ T5144] usb 3-1: USB disconnect, device number 39 [ 986.286373][ T2412] team0 (unregistering): Port device team_slave_1 removed [ 986.464981][ T2412] team0 (unregistering): Port device team_slave_0 removed [ 986.840865][T18265] loop2: detected capacity change from 0 to 512 [ 986.885006][T18265] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 987.224450][T18276] loop1: detected capacity change from 0 to 1024 [ 987.284111][T18209] Bluetooth: hci2: command tx timeout [ 987.300489][T18276] hfsplus: unable to load nls mapping "i{o8859-1" [ 987.325191][T18276] hfsplus: unable to parse mount options [ 988.308136][T18283] loop0: detected capacity change from 0 to 8192 [ 988.946130][T18208] chnl_net:caif_netlink_parms(): no params data found [ 989.344049][ T5144] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 989.364160][T18209] Bluetooth: hci2: command tx timeout [ 989.407384][T18208] bridge0: port 1(bridge_slave_0) entered blocking state [ 989.435358][T18208] bridge0: port 1(bridge_slave_0) entered disabled state [ 989.442675][T18208] bridge_slave_0: entered allmulticast mode [ 989.451901][T18208] bridge_slave_0: entered promiscuous mode [ 989.482753][T18208] bridge0: port 2(bridge_slave_1) entered blocking state [ 989.504349][T18208] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.511612][T18208] bridge_slave_1: entered allmulticast mode [ 989.536115][ T5144] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 989.556507][ T5144] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 989.583919][ T5144] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 989.604131][ T5144] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 989.611568][T18208] bridge_slave_1: entered promiscuous mode [ 989.643029][ T5144] usb 1-1: invalid MIDI out EP 0 [ 989.710934][ T5144] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 989.830597][ T5096] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 989.842753][ T5096] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 989.853857][ T5096] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 989.876844][ T5096] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 989.882265][ T5144] usb 1-1: USB disconnect, device number 29 [ 989.898791][ T5096] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 989.907049][ T5096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 989.953903][T18208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 990.009843][T18208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 990.212936][T18208] team0: Port device team_slave_0 added [ 990.275823][T18208] team0: Port device team_slave_1 added [ 990.387963][T18317] loop2: detected capacity change from 0 to 4096 [ 990.427910][T18208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 990.442632][T18318] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 990.467424][T18208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.501980][T18208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 990.515745][T18208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 990.522838][T18208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 990.523510][ T29] audit: type=1804 audit(1719305200.972:729): pid=18317 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2622" name="/root/syzkaller.kddkXb/129/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 990.548747][ C0] vkms_vblank_simulate: vblank timer overrun [ 990.593930][T18208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 990.951896][T18208] hsr_slave_0: entered promiscuous mode [ 990.984744][T18208] hsr_slave_1: entered promiscuous mode [ 991.017638][T18208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 991.035760][T18208] Cannot create hsr debugfs directory [ 991.074549][T18327] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2624'. [ 991.299016][T18326] loop0: detected capacity change from 0 to 8192 [ 991.604587][T18332] loop1: detected capacity change from 0 to 512 [ 991.637586][T18332] EXT4-fs: Ignoring removed nomblk_io_submit option [ 991.661652][T18332] EXT4-fs: old and new quota format mixing [ 991.713404][T18314] chnl_net:caif_netlink_parms(): no params data found [ 991.769826][T18332] loop1: detected capacity change from 0 to 1764 [ 992.010841][ T5096] Bluetooth: hci4: command tx timeout [ 992.330175][T18314] bridge0: port 1(bridge_slave_0) entered blocking state [ 992.371700][T18314] bridge0: port 1(bridge_slave_0) entered disabled state [ 992.380331][T18314] bridge_slave_0: entered allmulticast mode [ 992.388362][T18314] bridge_slave_0: entered promiscuous mode [ 992.411198][T18314] bridge0: port 2(bridge_slave_1) entered blocking state [ 992.411256][T18314] bridge0: port 2(bridge_slave_1) entered disabled state [ 992.411393][T18314] bridge_slave_1: entered allmulticast mode [ 992.412200][T18314] bridge_slave_1: entered promiscuous mode [ 992.463783][T18314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 992.478354][T18314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 992.577077][T18314] team0: Port device team_slave_0 added [ 992.593441][T18314] team0: Port device team_slave_1 added [ 992.699097][T18314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 992.699118][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.699145][T18314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 992.702021][T18314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 992.702039][T18314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 992.702066][T18314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 992.756996][T18208] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 992.766440][T18208] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 992.792852][T18208] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 992.812117][T18314] hsr_slave_0: entered promiscuous mode [ 992.816105][T18314] hsr_slave_1: entered promiscuous mode [ 992.817183][T18314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 992.817993][T18314] Cannot create hsr debugfs directory [ 992.818285][T18208] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 992.899196][ C0] vkms_vblank_simulate: vblank timer overrun [ 993.027847][ C0] vkms_vblank_simulate: vblank timer overrun [ 993.528586][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.535069][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 994.312031][ T5096] Bluetooth: hci4: command tx timeout [ 994.610922][T18314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 994.655405][T18372] loop1: detected capacity change from 0 to 512 [ 994.686789][T18372] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 994.798429][T18374] loop0: detected capacity change from 0 to 64 [ 994.835965][T18374] hfs: unable to parse mount options [ 994.900987][T18314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.080130][T18314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.280110][T18314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 995.307947][T18385] loop0: detected capacity change from 0 to 4096 [ 995.362302][T18391] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 995.387908][T18208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 995.411485][ T29] audit: type=1804 audit(1719305205.862:730): pid=18385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2639" name="/root/syzkaller.Tehl1N/313/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 995.487484][T18208] 8021q: adding VLAN 0 to HW filter on device team0 [ 995.637588][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 995.644837][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 995.736618][ T929] bridge0: port 2(bridge_slave_1) entered blocking state [ 995.743729][ T929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 996.052725][T18314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 996.117671][T18314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 996.214992][T18314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 996.324125][ T5096] Bluetooth: hci4: command tx timeout [ 996.464898][T18314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 996.886722][T18407] netlink: 'syz.1.2643': attribute type 8 has an invalid length. [ 998.179649][T18314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 998.217069][T18208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 998.307991][T18314] 8021q: adding VLAN 0 to HW filter on device team0 [ 998.342500][T15605] bridge0: port 1(bridge_slave_0) entered blocking state [ 998.349729][T15605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 998.414299][ T5096] Bluetooth: hci4: command tx timeout [ 998.617052][T18429] loop0: detected capacity change from 0 to 1024 [ 998.694200][ T5091] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 998.900463][ T5091] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 999.179907][ T5091] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 999.257916][ T5144] bridge0: port 2(bridge_slave_1) entered blocking state [ 999.265064][ T5144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 999.300663][ T5091] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 999.333367][ T5091] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 999.377296][T18422] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 999.424894][T18428] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 999.431397][T18428] hfsplus: inconsistency in B*Tree (1,0,1,0,1) [ 999.513326][T18208] veth0_vlan: entered promiscuous mode [ 999.706174][T10282] hfsplus: b-tree write err: -5, ino 4 [ 999.876669][ T5142] usb 3-1: USB disconnect, device number 40 [ 999.955598][T18208] veth1_vlan: entered promiscuous mode [ 1000.090471][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1000.124503][T18437] syz.0.2651 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1000.535086][T18208] veth0_macvtap: entered promiscuous mode [ 1000.635588][T18208] veth1_macvtap: entered promiscuous mode [ 1000.709901][T18444] loop0: detected capacity change from 0 to 2048 [ 1000.728239][T18444] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576 [ 1000.778026][T18444] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1000.981073][T18208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.006190][T18208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.016203][T18208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.026823][T18208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.037711][T18208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.048476][T18208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.058433][T18208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1001.068920][T18208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.078929][T15605] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1001.088279][T18208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.205610][T18208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.249631][T18208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.266605][T18208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.280719][T18208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.299954][T18208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.319730][T18208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.332418][T18208] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1001.352713][T18208] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1001.376337][T15605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1001.377025][T18208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.414006][T15605] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1001.423800][T15605] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1001.469725][T15605] usb 3-1: New USB device found, idVendor=056a, idProduct=0043, bcdDevice= 0.00 [ 1001.499279][T15605] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1001.511115][T18208] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.529412][T15605] usb 3-1: config 0 descriptor?? [ 1001.534961][T18208] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.554395][T18208] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.573431][T18208] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.591075][T18452] loop0: detected capacity change from 0 to 4096 [ 1001.618372][T18314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1001.636298][T18453] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1001.679381][ T29] audit: type=1804 audit(1719305212.132:731): pid=18452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2655" name="/root/syzkaller.Tehl1N/319/file0/bus" dev="loop0" ino=18 res=1 errno=0 [ 1001.963360][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.012349][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.050144][T15605] wacom 0003:056A:0043.0013: Unknown device_type for 'HID 056a:0043'. Assuming pen. [ 1002.079376][T15605] wacom 0003:056A:0043.0013: hidraw0: USB HID v0.00 Device [HID 056a:0043] on usb-dummy_hcd.2-1/input0 [ 1002.095211][T15605] input: Wacom Intuos2 9x12 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0043.0013/input/input102 [ 1002.118973][ T957] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.144215][ T957] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.277959][T15605] usb 3-1: USB disconnect, device number 41 [ 1002.303796][T18462] loop1: detected capacity change from 0 to 4096 [ 1002.354722][T18465] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1002.426673][ T29] audit: type=1804 audit(1719305212.882:732): pid=18462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2656" name="/root/syzkaller.lLE59H/329/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1002.774822][T18314] veth0_vlan: entered promiscuous mode [ 1002.779434][T18466] loop3: detected capacity change from 0 to 32768 [ 1002.803110][T18466] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2596 (18466) [ 1002.834880][T18466] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1002.845233][T18466] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1002.854586][T18466] BTRFS info (device loop3): using free-space-tree [ 1002.898496][T18314] veth1_vlan: entered promiscuous mode [ 1003.380123][T18314] veth0_macvtap: entered promiscuous mode [ 1003.452344][T18314] veth1_macvtap: entered promiscuous mode [ 1003.485600][T18208] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1003.834256][ T929] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1003.911398][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1003.954108][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1003.980949][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.014124][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.049326][ T929] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1004.070804][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.091786][ T929] usb 3-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 1004.114067][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.134101][ T929] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1004.162869][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.174402][ T929] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1004.197060][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.220387][ T929] usb 3-1: invalid MIDI out EP 0 [ 1004.234100][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1004.286581][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.377453][T18314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1004.396123][ T929] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 1004.440766][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.462068][ T929] usb 3-1: USB disconnect, device number 42 [ 1004.491255][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.526716][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.552027][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.599590][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.635471][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.678482][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.701765][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.723170][T18314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1004.769202][T18314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1004.809653][T18314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1004.936743][T18314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1004.984516][T18314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.032883][T18314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.063224][T18314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1005.220214][ T29] audit: type=1804 audit(1719305215.662:733): pid=18515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2666" name="/root/syzkaller.kddkXb/139/bus" dev="sda1" ino=1992 res=1 errno=0 [ 1005.242582][ C1] vkms_vblank_simulate: vblank timer overrun [ 1005.307108][T18517] erspan0: entered promiscuous mode [ 1005.322225][T18519] loop2: detected capacity change from 0 to 1024 [ 1005.389020][T18519] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1005.462908][T18517] lo: entered promiscuous mode [ 1005.495961][T18520] macsec0: entered promiscuous mode [ 1005.564081][T18512] macsec0: left promiscuous mode [ 1005.578202][T18512] lo: left promiscuous mode [ 1005.617144][T18512] erspan0: left promiscuous mode [ 1006.135727][T18528] loop0: detected capacity change from 0 to 32768 [ 1006.144790][T18528] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2669 (18528) [ 1006.166910][T18525] loop1: detected capacity change from 0 to 1024 [ 1006.187714][T18528] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1006.198108][T18528] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1006.206831][T18528] BTRFS info (device loop0): using free-space-tree [ 1006.226779][T18525] EXT4-fs: Ignoring removed orlov option [ 1006.269412][T18525] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1006.286445][T18525] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1006.307825][ T957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.402285][ T957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.495774][T18525] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1006.590231][ T2412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1006.658321][ T2412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1006.967336][ T9946] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1007.115939][T10620] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1007.157422][T18550] loop2: detected capacity change from 0 to 1024 [ 1007.181255][T18550] hfsplus: unable to parse mount options [ 1007.512818][T18560] loop4: detected capacity change from 0 to 64 [ 1007.935146][T18558] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2673'. [ 1009.164043][T18576] loop2: detected capacity change from 0 to 1024 [ 1009.218172][T18576] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1010.004824][T15384] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.kddkXb/141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 1010.064467][T15384] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 1010.164953][T18582] loop0: detected capacity change from 0 to 128 [ 1010.216469][T15384] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.kddkXb/141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 1010.304911][T15384] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 1010.396474][T18586] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2681'. [ 1010.418011][T15384] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.kddkXb/141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 1010.462255][T18586] bridge_slave_1: left allmulticast mode [ 1010.474217][T18586] bridge_slave_1: left promiscuous mode [ 1010.494665][T18586] bridge0: port 2(bridge_slave_1) entered disabled state [ 1010.511848][T15384] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 1010.544040][T18586] bridge_slave_0: left allmulticast mode [ 1010.549944][T18586] bridge_slave_0: left promiscuous mode [ 1010.596040][T18586] bridge0: port 1(bridge_slave_0) entered disabled state [ 1010.693641][T15384] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.kddkXb/141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 1010.878642][T18591] loop3: detected capacity change from 0 to 32768 [ 1010.893257][T18591] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2682 (18591) [ 1010.952121][T15384] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 1010.990731][T18591] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1011.001624][T18591] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 1011.010514][T18591] BTRFS info (device loop3): using free-space-tree [ 1011.143595][T15384] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 38: comm syz-executor: path /root/syzkaller.kddkXb/141/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=327680, rec_len=0, size=1024 fake=0 [ 1011.173865][T15384] EXT4-fs error (device loop2): ext4_empty_dir:3082: inode #11: block 38: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=6144, inode=327680, rec_len=0, size=1024 fake=0 [ 1011.570617][T18208] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1012.112491][T18584] loop4: detected capacity change from 0 to 40427 [ 1012.165698][T18613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2686'. [ 1012.250827][T18613] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2686'. [ 1013.034791][T18584] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1013.184416][T15384] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.360247][T18630] loop0: detected capacity change from 0 to 1024 [ 1013.545020][T18630] hfsplus: unable to load nls mapping "i{o8859-1" [ 1013.571585][ T957] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.573545][T18630] hfsplus: unable to parse mount options [ 1014.017944][ T957] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.294103][ T957] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1014.500551][T18644] netlink: 116 bytes leftover after parsing attributes in process `syz.1.2695'. [ 1014.716749][ T957] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1015.116336][T18647] loop0: detected capacity change from 0 to 32768 [ 1015.139468][T18647] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2696 (18647) [ 1015.168142][T18209] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1015.177289][T18647] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1015.182220][T18209] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1015.187664][T18647] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 1015.187706][T18647] BTRFS info (device loop0): using free-space-tree [ 1015.221453][T18209] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1015.231673][T18209] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1015.239502][T18209] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1015.250046][T18650] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2693'. [ 1015.251508][T18209] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1015.722263][T18662] loop4: detected capacity change from 0 to 32768 [ 1015.754122][T18662] BTRFS: device /dev/loop4 (7:4) using temp-fsid fc2efe7f-03c3-49c0-9591-74a42228068b [ 1015.763767][T18662] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2693 (18662) [ 1015.801804][T18662] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1015.814080][T18662] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1015.823438][T18662] BTRFS info (device loop4): using free-space-tree [ 1016.334545][T10620] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1016.361120][T18687] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2698'. [ 1016.855650][T18314] BTRFS info (device loop4): last unmount of filesystem fc2efe7f-03c3-49c0-9591-74a42228068b [ 1017.379124][T18209] Bluetooth: hci0: command tx timeout [ 1017.986614][T18699] loop0: detected capacity change from 0 to 1024 [ 1018.039582][T18701] loop3: detected capacity change from 0 to 128 [ 1018.079070][T18699] hfsplus: unable to load nls mapping "i{o8859-1" [ 1018.092452][T18699] hfsplus: unable to parse mount options [ 1018.213077][ T957] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1018.238955][ T957] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1018.263812][ T957] bond0 (unregistering): Released all slaves [ 1018.559674][T18717] loop3: detected capacity change from 0 to 64 [ 1018.560709][T18710] Bluetooth: MGMT ver 1.23 [ 1018.593170][T18710] Bluetooth: hci3: invalid len left 7, exp >= 258 [ 1019.926996][T18209] Bluetooth: hci0: command tx timeout [ 1020.422562][ T957] hsr_slave_0: left promiscuous mode [ 1020.443777][ T957] hsr_slave_1: left promiscuous mode [ 1020.460462][ T957] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1020.464014][T15605] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 1020.474224][ T957] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1020.503199][ T957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1020.527613][ T957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1020.617653][ T957] veth1_macvtap: left promiscuous mode [ 1020.633820][ T957] veth0_macvtap: left promiscuous mode [ 1020.648322][ T957] veth1_vlan: left promiscuous mode [ 1020.668602][ T957] veth0_vlan: left promiscuous mode [ 1020.694026][T15605] usb 2-1: Using ep0 maxpacket: 8 [ 1020.722868][T15605] usb 2-1: New USB device found, idVendor=061d, idProduct=c170, bcdDevice=c3.2c [ 1020.750254][T15605] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1020.771097][T15605] usb 2-1: Product: syz [ 1020.778773][T15605] usb 2-1: Manufacturer: syz [ 1020.789043][T15605] usb 2-1: SerialNumber: syz [ 1020.812950][T15605] usb 2-1: config 0 descriptor?? [ 1020.837115][T15605] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 1022.000062][ T5144] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1022.004337][T18209] Bluetooth: hci0: command tx timeout [ 1022.247786][ T5144] usb 4-1: Using ep0 maxpacket: 32 [ 1022.259326][ T5144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1022.288004][ T5144] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1022.320876][ T5144] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1022.336580][ T5144] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1022.349237][ T5144] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1022.403502][ T5144] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1022.454189][ T5144] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1022.463527][ T5144] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1022.489746][ T5144] usb 4-1: Product: syz [ 1022.496855][ T5144] usb 4-1: Manufacturer: syz [ 1022.513651][ T5144] usb 4-1: SerialNumber: syz [ 1022.875864][ T5144] cdc_ncm 4-1:1.0: bind() failure [ 1022.910243][ T5144] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1022.947199][ T5144] cdc_ncm 4-1:1.1: bind() failure [ 1022.979254][ T5144] usb 4-1: USB disconnect, device number 40 [ 1023.071369][ T957] team0 (unregistering): Port device team_slave_1 removed [ 1023.237353][ T957] team0 (unregistering): Port device team_slave_0 removed [ 1023.910016][T18748] loop3: detected capacity change from 0 to 8 [ 1024.093588][T18209] Bluetooth: hci0: command tx timeout [ 1025.519097][T15605] usb 2-1: qt2_attach - failed to power on unit: -71 [ 1025.538890][T15605] quatech2 2-1:0.0: probe with driver quatech2 failed with error -71 [ 1025.592495][T15605] usb 2-1: USB disconnect, device number 42 [ 1025.803010][T18768] loop1: detected capacity change from 0 to 128 [ 1025.990151][T18759] loop3: detected capacity change from 0 to 1024 [ 1026.029566][T18759] EXT4-fs: Ignoring removed i_version option [ 1026.078024][T18759] EXT4-fs (loop3): bad geometry: block count 27021597764223488 exceeds size of device (512 blocks) [ 1026.127716][T18649] chnl_net:caif_netlink_parms(): no params data found [ 1026.193894][T18769] loop0: detected capacity change from 0 to 4096 [ 1026.252038][T18776] loop1: detected capacity change from 0 to 1024 [ 1026.424506][T18782] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1026.479275][T18776] hfsplus: unable to load nls mapping "i{o8859-1" [ 1026.504156][T18776] hfsplus: unable to parse mount options [ 1026.516111][T18761] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1026.526034][T18761] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1026.557615][T18769] netlink: 'syz.0.2720': attribute type 1 has an invalid length. [ 1026.574417][T18769] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2720'. [ 1026.616270][T18649] bridge0: port 1(bridge_slave_0) entered blocking state [ 1026.623731][T18649] bridge0: port 1(bridge_slave_0) entered disabled state [ 1026.644014][T18649] bridge_slave_0: entered allmulticast mode [ 1026.711035][T18649] bridge_slave_0: entered promiscuous mode [ 1026.759838][T18649] bridge0: port 2(bridge_slave_1) entered blocking state [ 1026.776940][T18649] bridge0: port 2(bridge_slave_1) entered disabled state [ 1026.796689][T18649] bridge_slave_1: entered allmulticast mode [ 1026.824244][T18649] bridge_slave_1: entered promiscuous mode [ 1026.929307][T18649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1026.953245][T18789] loop0: detected capacity change from 0 to 128 [ 1026.985702][T18649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1027.095205][T15605] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1027.100371][T18649] team0: Port device team_slave_0 added [ 1027.124144][T18649] team0: Port device team_slave_1 added [ 1027.176588][T18795] loop4: detected capacity change from 0 to 8 [ 1027.215141][T18649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1027.241370][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.260847][T18800] Bluetooth: hci3: invalid len left 7, exp >= 258 [ 1027.291284][T18649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1027.324270][T15605] usb 4-1: Using ep0 maxpacket: 32 [ 1027.330869][T15605] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1027.343633][T18649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1027.354053][T15605] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1027.365230][T18649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1027.392558][T15605] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1027.403547][T15605] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 1027.416457][T18649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1027.427336][T15605] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1027.439246][T15605] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1027.460420][T15605] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1027.470779][T15605] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1027.490880][T15605] usb 4-1: Product: syz [ 1027.503051][T15605] usb 4-1: Manufacturer: syz [ 1027.520489][T15605] usb 4-1: SerialNumber: syz [ 1027.559264][T18649] hsr_slave_0: entered promiscuous mode [ 1027.570676][T18649] hsr_slave_1: entered promiscuous mode [ 1027.583733][T18649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1027.600061][T18649] Cannot create hsr debugfs directory [ 1027.603115][T18803] loop1: detected capacity change from 0 to 4096 [ 1027.645476][T18805] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1027.691406][ T29] audit: type=1804 audit(1719305238.142:734): pid=18803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2731" name="/root/syzkaller.lLE59H/349/file0/bus" dev="loop1" ino=18 res=1 errno=0 [ 1027.742332][T15605] cdc_ncm 4-1:1.0: bind() failure [ 1027.752936][T15605] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 1027.780440][T15605] cdc_ncm 4-1:1.1: bind() failure [ 1027.804308][T15605] usb 4-1: USB disconnect, device number 41 [ 1027.925377][T18209] Bluetooth: hci2: command tx timeout [ 1028.293083][T18808] loop4: detected capacity change from 0 to 128 [ 1028.712870][T18649] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1028.726491][T18812] loop4: detected capacity change from 0 to 64 [ 1028.751235][T18649] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1028.779119][T18649] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1028.951426][T18649] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1029.824990][T18810] loop3: detected capacity change from 0 to 1024 [ 1029.857137][T18810] EXT4-fs: Ignoring removed i_version option [ 1029.904617][T18810] EXT4-fs (loop3): bad geometry: block count 27021597764223488 exceeds size of device (512 blocks) [ 1030.253578][T18649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1030.396493][T18820] loop4: detected capacity change from 0 to 64 [ 1030.509694][T18649] 8021q: adding VLAN 0 to HW filter on device team0 [ 1030.586329][ T9930] bridge0: port 1(bridge_slave_0) entered blocking state [ 1030.593648][ T9930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1030.807602][ T9930] bridge0: port 2(bridge_slave_1) entered blocking state [ 1030.814988][ T9930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.250023][T18209] Bluetooth: hci2: command tx timeout [ 1032.490504][T18836] loop3: detected capacity change from 0 to 8 [ 1032.530850][T18841] loop0: detected capacity change from 0 to 2048 [ 1032.541730][T18841] NILFS (loop0): invalid segment: Sequence number mismatch [ 1032.549299][T18841] NILFS (loop0): trying rollback from an earlier position [ 1032.560842][T18841] NILFS (loop0): recovery complete [ 1032.583167][T18844] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1033.796972][T18649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1033.818196][T18848] loop4: detected capacity change from 0 to 1024 [ 1033.826939][T18853] loop0: detected capacity change from 0 to 128 [ 1033.873609][T18848] EXT4-fs: Ignoring removed orlov option [ 1033.898794][T18848] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1033.910169][T18848] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 1033.990190][T18848] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1034.046750][T18649] veth0_vlan: entered promiscuous mode [ 1034.124621][T18649] veth1_vlan: entered promiscuous mode [ 1034.168878][T18859] loop1: detected capacity change from 0 to 64 [ 1034.240873][T18862] Bluetooth: hci3: invalid len left 7, exp >= 258 [ 1034.296598][T18649] veth0_macvtap: entered promiscuous mode [ 1034.450224][T18649] veth1_macvtap: entered promiscuous mode [ 1034.462063][T18314] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1035.632579][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.686908][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.763198][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.814986][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.844045][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.863989][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.894260][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.913989][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1035.944170][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1035.980831][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.006155][T18649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1036.102007][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.134876][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.171666][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.194794][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.224231][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.258196][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.293820][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.334965][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.354009][T18649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1036.387331][T18649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1036.413355][T18649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1036.456945][T18867] loop3: detected capacity change from 0 to 1024 [ 1036.479209][T18867] EXT4-fs: Ignoring removed i_version option [ 1036.489779][T18649] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.510995][T18649] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.520257][T18867] EXT4-fs (loop3): bad geometry: block count 27021597764223488 exceeds size of device (512 blocks) [ 1036.541986][T18649] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.564722][T18649] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1036.912690][T18879] loop4: detected capacity change from 0 to 1024 [ 1036.937469][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1036.973348][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.059170][T18879] hfsplus: failed to load root directory [ 1037.077376][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1037.100673][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1037.257546][T18649] list_del corruption, ffffea00053b5b88->next is LIST_POISON1 (dead000000000100) [ 1037.268948][T18649] ------------[ cut here ]------------ [ 1037.274446][T18649] kernel BUG at lib/list_debug.c:58! [ 1037.279752][T18649] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN PTI [ 1037.279773][T18649] CPU: 0 UID: 0 PID: 18649 Comm: syz-executor Not tainted 6.10.0-rc5-next-20240624-syzkaller #0 [ 1037.279793][T18649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 1037.279804][T18649] RIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140 [ 1037.279836][T18649] Code: e8 01 96 d3 06 90 0f 0b 48 c7 c7 60 78 20 8c 4c 89 fe e8 ef 95 d3 06 90 0f 0b 48 c7 c7 c0 78 20 8c 4c 89 fe e8 dd 95 d3 06 90 <0f> 0b 48 c7 c7 20 79 20 8c 4c 89 fe e8 cb 95 d3 06 90 0f 0b 48 c7 [ 1037.279852][T18649] RSP: 0000:ffffc9000339f0f8 EFLAGS: 00010046 [ 1037.279869][T18649] RAX: 000000000000004e RBX: dead000000000122 RCX: 74ebc84aff339700 [ 1037.279882][T18649] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 1037.279894][T18649] RBP: ffffc9000339f1f0 R08: ffffffff8173a319 R09: fffffbfff1c39b44 [ 1037.279908][T18649] R10: dffffc0000000000 R11: fffffbfff1c39b44 R12: dffffc0000000000 [ 1037.279921][T18649] R13: ffffc9000339f180 R14: dead000000000100 R15: ffffea00053b5b88 [ 1037.279935][T18649] FS: 0000555578a1c500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1037.279951][T18649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.279964][T18649] CR2: 00007fbe93a3c880 CR3: 000000014a870000 CR4: 00000000003506f0 [ 1037.279979][T18649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1037.279990][T18649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1037.280002][T18649] Call Trace: [ 1037.280009][T18649] [ 1037.280017][T18649] ? __die_body+0x88/0xe0 [ 1037.280041][T18649] ? die+0xcf/0x110 [ 1037.280064][T18649] ? do_trap+0x15a/0x3a0 [ 1037.280085][T18649] ? __list_del_entry_valid_or_report+0xf4/0x140 [ 1037.280109][T18649] ? do_error_trap+0x1dc/0x2c0 [ 1037.280128][T18649] ? __list_del_entry_valid_or_report+0xf4/0x140 [ 1037.280154][T18649] ? __pfx_do_error_trap+0x10/0x10 [ 1037.280175][T18649] ? report_bug+0x3cd/0x500 [ 1037.280201][T18649] ? handle_invalid_op+0x34/0x40 [ 1037.280220][T18649] ? __list_del_entry_valid_or_report+0xf4/0x140 [ 1037.280243][T18649] ? exc_invalid_op+0x38/0x50 [ 1037.280261][T18649] ? asm_exc_invalid_op+0x1a/0x20 [ 1037.280284][T18649] ? __wake_up_klogd+0x109/0x140 [ 1037.280304][T18649] ? __list_del_entry_valid_or_report+0xf4/0x140 [ 1037.280328][T18649] ? __list_del_entry_valid_or_report+0xf3/0x140 [ 1037.280351][T18649] __page_cache_release+0x911/0x24b0 [ 1037.280373][T18649] ? __pfx___page_cache_release+0x10/0x10 [ 1037.280395][T18649] __folio_put+0x17f/0x440 [ 1037.280418][T18649] ? __pfx___might_resched+0x10/0x10 [ 1037.280443][T18649] ? __pfx___folio_put+0x10/0x10 [ 1037.280469][T18649] ? migrate_folio_done+0x254/0x4a0 [ 1037.280494][T18649] migrate_pages_batch+0x9f0/0x3960 [ 1037.280526][T18649] ? __pfx_alloc_misplaced_dst_folio+0x10/0x10 [ 1037.280552][T18649] ? __pfx_migrate_pages_batch+0x10/0x10 [ 1037.280583][T18649] migrate_pages+0x2264/0x3460 [ 1037.280604][T18649] ? mark_lock+0x9a/0x360 [ 1037.280628][T18649] ? __pfx_alloc_misplaced_dst_folio+0x10/0x10 [ 1037.280647][T18649] ? __pfx_migrate_pages+0x10/0x10 [ 1037.280665][T18649] ? __pfx_lock_acquire+0x10/0x10 [ 1037.280681][T18649] ? node_is_toptier+0x50/0x2b0 [ 1037.280698][T18649] ? __pfx_lock_release+0x10/0x10 [ 1037.280723][T18649] migrate_misplaced_folio+0x323/0x9b0 [ 1037.280740][T18649] ? handle_pte_fault+0x37f7/0x6eb0 [ 1037.280757][T18649] ? __pfx_migrate_misplaced_folio+0x10/0x10 [ 1037.280775][T18649] ? do_raw_spin_unlock+0x13c/0x8b0 [ 1037.280792][T18649] handle_pte_fault+0x3e6e/0x6eb0 [ 1037.280813][T18649] ? __pfx_handle_pte_fault+0x10/0x10 [ 1037.280826][T18649] ? __lock_acquire+0x1359/0x2000 [ 1037.280847][T18649] ? reacquire_held_locks+0x3eb/0x690 [ 1037.280865][T18649] ? lock_vma_under_rcu+0x2f9/0x6e0 [ 1037.280886][T18649] ? __pfx_reacquire_held_locks+0x10/0x10 [ 1037.280907][T18649] handle_mm_fault+0x10df/0x1ba0 [ 1037.280933][T18649] ? __pfx_handle_mm_fault+0x10/0x10 [ 1037.280950][T18649] ? lock_vma_under_rcu+0x592/0x6e0 [ 1037.280974][T18649] ? exc_page_fault+0x113/0x8c0 [ 1037.280992][T18649] exc_page_fault+0x459/0x8c0 [ 1037.281013][T18649] asm_exc_page_fault+0x26/0x30 [ 1037.281028][T18649] RIP: 0033:0x7fbe92d6c8d7 [ 1037.281041][T18649] Code: ff 48 39 fe 72 e5 e8 88 20 03 00 0f 1f 84 00 00 00 00 00 ff d1 49 8b 3c 24 48 8b 05 e3 ff cc 00 eb bb 90 31 c0 ba 01 00 00 00 0f b1 15 a1 ff cc 00 0f 84 24 ff ff ff 48 8d 3d 94 ff cc 00 e8 [ 1037.281052][T18649] RSP: 002b:00007ffdd5ebc0c0 EFLAGS: 00010246 [ 1037.281064][T18649] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000001 [ 1037.281073][T18649] RDX: 0000000000000001 RSI: 0000000000005ab7 RDI: 0000000000000001 [ 1037.281082][T18649] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1037.281090][T18649] R10: 0000000000000002 R11: 0000000000000001 R12: 0000000000000000 [ 1037.281099][T18649] R13: 0000000000001388 R14: 0000000000000001 R15: 00007ffdd5ebc2c0 [ 1037.281113][T18649] [ 1037.281118][T18649] Modules linked in: [ 1037.281127][T18649] ---[ end trace 0000000000000000 ]--- [ 1037.752179][T18649] RIP: 0010:__list_del_entry_valid_or_report+0xf4/0x140 [ 1037.759118][T18649] Code: e8 01 96 d3 06 90 0f 0b 48 c7 c7 60 78 20 8c 4c 89 fe e8 ef 95 d3 06 90 0f 0b 48 c7 c7 c0 78 20 8c 4c 89 fe e8 dd 95 d3 06 90 <0f> 0b 48 c7 c7 20 79 20 8c 4c 89 fe e8 cb 95 d3 06 90 0f 0b 48 c7 [ 1037.778727][T18649] RSP: 0000:ffffc9000339f0f8 EFLAGS: 00010046 [ 1037.784792][T18649] RAX: 000000000000004e RBX: dead000000000122 RCX: 74ebc84aff339700 [ 1037.792758][T18649] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 1037.800726][T18649] RBP: ffffc9000339f1f0 R08: ffffffff8173a319 R09: fffffbfff1c39b44 [ 1037.808776][T18649] R10: dffffc0000000000 R11: fffffbfff1c39b44 R12: dffffc0000000000 [ 1037.816741][T18649] R13: ffffc9000339f180 R14: dead000000000100 R15: ffffea00053b5b88 [ 1037.824716][T18649] FS: 0000555578a1c500(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 1037.833655][T18649] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1037.840238][T18649] CR2: 00007fbe93a3c880 CR3: 000000014a870000 CR4: 00000000003506f0 [ 1037.848210][T18649] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1037.856171][T18649] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1037.864134][T18649] Kernel panic - not syncing: Fatal exception [ 1037.870429][T18649] Kernel Offset: disabled [ 1037.874738][T18649] Rebooting in 86400 seconds..