last executing test programs: 25.400848108s ago: executing program 1 (id=592): mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file3\x00', 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file8\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001600)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}, @NFTA_IMMEDIATE_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x4}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000240)=@req={0x4, 0x4, 0x6, 0x1d350142}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0) symlinkat(&(0x7f0000000380)='./file8/file0\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00') renameat2(0xffffffffffffff9c, &(0x7f0000000b80)='./file6\x00', 0xffffffffffffff9c, &(0x7f0000000bc0)='./file7\x00', 0x2) 24.36575036s ago: executing program 1 (id=595): syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x0, 0x8a, &(0x7f0000000000)="$eJzszk8KwUEYx+GvHyVncAXNHRxFlqxYkZX7uIojuIOtzUj+TfYs9Dw1U5/e3nqPl8M4+6TWfm5qY73ZLmbL+5/JIPyfLsk0Wb17+Jr1Hn067+bP1+6OfnwrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxLl/LZpYlcAwAA//8pVB/f") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000600)='./bus\x00', 0x1c14744, &(0x7f00000002c0)={[{@errors_continue}]}, 0xfe, 0x49e, &(0x7f0000000b00)="$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") r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f0000000040)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206050000000000000000000000040012000300686173683a6e65742c706f72740000000900020073797a3200000012000000000005000500070000000500010006000000"], 0x58}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@dellinkprop={0x30, 0x6d, 0x4, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20, 0xc}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}]}, @IFLA_NET_NS_PID={0x8}]}, 0x30}}, 0x24040011) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0)="ad56b699f75b626f00000200000001100800000000000000", 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet(0x2, 0x0, 0xa) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r5 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000180)={0x0, 0x0, r6, r7, 0x0, 0x0, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, "77a3ec83bbe2a8afd2a7e79b119fa326a9e7780d070000400b84a74700"}}) r8 = getpid() sched_setscheduler(r8, 0x0, &(0x7f0000000200)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 21.921684822s ago: executing program 1 (id=600): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0xb}, 0x48) r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r5 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12', 0x2) ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000140)={r5, 0x0, 0x0, 0x4000}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) dup(0xffffffffffffffff) unshare(0x20000400) unshare(0x68020080) ftruncate(r6, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x14, &(0x7f0000000240)=ANY=[@ANYRES16=r3, @ANYRESDEC=r5, @ANYRES8=r2, @ANYRES64=r1, @ANYRESOCT=r3], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, @thr={0x0, &(0x7f0000000240)}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="24010300000000000001000200000000000000000000000800060000000000"], 0x24}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x14}, [@FRA_DST={0x8, 0x1, @dev}, @FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3f}]}, 0x30}}, 0x0) r9 = timerfd_create(0x0, 0x80800) timerfd_settime(r9, 0x1, &(0x7f00000001c0)={{}, {0x0, 0x3938700}}, 0x0) readv(r9, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/136, 0x88}, {&(0x7f00000007c0)=""/71, 0x47}, {&(0x7f00000002c0)=""/109, 0x6d}, {0x0}, {&(0x7f0000000680)=""/127, 0x7f}, {&(0x7f0000000840)=""/169, 0xa9}], 0x6) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r10, 0x8933, &(0x7f0000000380)={'batadv_slave_1\x00'}) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) 20.959240638s ago: executing program 1 (id=605): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x2810000, &(0x7f0000001040)=ANY=[@ANYBLOB="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"], 0x2d, 0x33c, &(0x7f0000001980)="$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") syz_mount_image$fuse(0x0, &(0x7f0000002380)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENT(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="58000000000000009fed27885a04364ffea95d4f4801d524faf41663e6e51b36c0"], 0x58) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@nodevmap}], [], 0x6b}}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000480)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc0, r3, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xc, 0x7}}}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "b58a6de7c6919b81affc47119c5332b2efa43047af27e180"}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "eb0efbf1543d7513dfae3c8aa4a1f46c25cb18637fc293b5"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MNTR_FLAGS={0x4}, @NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x20008084}, 0x4008000) socket$inet6(0xa, 0x800, 0x80) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x6}, 0xfffffffffffffe40) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000540)={{0x2, 0x0, @remote}, {0x0, @random="e34dffa257e0"}, 0x18, {0x2, 0x0, @local}, 'veth0_to_bridge\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='net/arp\x00') r6 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) preadv(r5, &(0x7f0000000080)=[{&(0x7f00000005c0)=""/237, 0xed}], 0x1, 0x9, 0x0) ptrace$setregs(0xf, 0xffffffffffffffff, 0x200, &(0x7f0000000280)="fb79849c496512c7157992743e3860e10e23a826222db753020f6278a17d5a279c8955388de18e7d96bcf156a7") r7 = open(&(0x7f00000001c0)='.\x00', 0x0, 0x0) getdents(r7, 0x0, 0x0) close(r7) ioctl$MEDIA_REQUEST_IOC_QUEUE(r2, 0x7c80, 0x0) 17.727744211s ago: executing program 1 (id=610): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, 0x0) syz_usb_control_io$uac1(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="1a0103"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000001bc0)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r2 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39ddd8) write$binfmt_elf32(r2, &(0x7f0000000040)=ANY=[], 0x69) close(r2) ioctl$FICLONE(r2, 0x40049409, r2) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)='./file1\x00') execve(&(0x7f00000000c0)='./file1\x00', 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) execve(&(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000280)=[&(0x7f00000001c0)='/sys/kernel/debug/binder/state\x00']) 16.82017046s ago: executing program 1 (id=612): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x5a, &(0x7f0000000100)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) rt_tgsigqueueinfo(0x0, 0x0, 0x2c, &(0x7f0000000780)={0x34, 0x1000, 0x40}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0a00000000000000262500000000000000000800"/30], 0x1c}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000d80)=@ipmr_delroute={0xf8, 0x19, 0x4, 0x70bd2c, 0x25dfdbfd, {0x80, 0x14, 0x80, 0xc0, 0xfc, 0x4, 0x0, 0xb, 0x1400}, [@RTA_METRICS={0xb2, 0x8, 0x0, 0x1, "8ee37f6ae41f74b144e63f89ceee0edac13204b8947214d131c5c514dcf6214790586dec2112e2990a915c97dd2dbc273e0d656729849b8f44f17995fef7b6f7f0116a4e44b681fec1622d378f26d5a9887ad4b50946c12bf7423e39a8a84f8edeb35efbd2b5a4bba5f1dc594eb058427dce85d2ebf06346c066a4c18e2ddc06d95abd46688e5db1009d04289fb4e9321b71c2c25a9c1ea7c4d68ae9fa7a5c171cc76ed83a1cc0815cc4d0ff7d0a"}, @RTA_NH_ID={0x8, 0x1e, 0x252}, @RTA_TABLE={0x8, 0xf, 0xc66}, @RTA_NH_ID={0x8, 0x1e, 0x8}, @RTA_PRIORITY={0x8, 0x6, 0x2b90}, @RTA_SPORT={0x6, 0x1c, 0x4e24}]}, 0xf8}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x5, @local}, 0x1c) socket$netlink(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000002e80), 0x6) write$bt_hci(r3, &(0x7f0000002c40)=ANY=[], 0x1d) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) creat(&(0x7f0000000000)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x42) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file1\x00', 0xc0ed0005, &(0x7f0000000280)={[{@jqfmt_vfsold}, {@noquota}, {@errors_continue}, {@noload}, {@init_itable_val={'init_itable', 0x3d, 0x1000}}, {@usrjquota, 0x22}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}]}, 0xfe, 0x453, &(0x7f0000000900)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_buf(r4, 0x0, 0x10, &(0x7f0000000000)="17000000020001000003be8c5ee17688a8006c080304ca2bcf01ee2a593b9a00ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d600000000dba67e06000000e28900400200df018000000000d50607bd3f003c1e4b98", 0x5c) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x0) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000800)=ANY=[@ANYBLOB="08000000020000000b0000000000000016dc8b962a54ee6ff5817b08ea294fe9f3b87e48bdcdec28176399ab25f3d88277fd7217c90b459a1d67e32ac8983a896442f7aba415ed8f4f73cdddae0c0a15c8cfa730cb85b32a3231a424881011e7bc3a4f30779f6ce31eb723806c10e4785923bae3db00023a6122c7cc"], 0x0) 16.308380717s ago: executing program 0 (id=614): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002a0001000000000000000000050000000c000a"], 0x20}, 0x1, 0x900000000000000}, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)) 15.963370691s ago: executing program 0 (id=615): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002a0001000000000000000000050000000c000a"], 0x20}, 0x1, 0x900000000000000}, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)) 15.308043444s ago: executing program 0 (id=618): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x0) madvise(&(0x7f0000ac2000/0x1000)=nil, 0x1000, 0x0) madvise(&(0x7f000018e000/0x3000)=nil, 0x3000, 0x1) io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0xda89}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r3 = dup(r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x12, r3, 0x0) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x4000) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0x4000000000000000, 0x1000000}) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/5, 0x1c000, 0x800}, 0x20) socket(0x10, 0x3, 0x0) 13.540275892s ago: executing program 4 (id=621): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @private=0xa010100}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_dest={0x18, 0x114, 0x2, {0x400}}], 0x18}, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x44302, 0x0) mmap$snddsp_status(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000007, 0x40010, r1, 0x82000000) 13.342961112s ago: executing program 4 (id=622): r0 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) bind$packet(r0, &(0x7f0000000180), 0x14) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r1, 0x101) r2 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r2, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x4e20, @dev}, 0x3a) write$binfmt_elf64(r2, &(0x7f0000000980)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [{}]}, 0x78) r3 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$sock(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000040)="ff", 0x1}], 0x1}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x48, r4, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x48}, 0x1, 0x0, 0x0, 0x8084}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f0000000200)={0x1a, 0x306, 0x1, 0xf8, 0x1, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xd}}, 0x10) connect$llc(r5, &(0x7f0000000600)={0x1a, 0x203, 0x1, 0x1, 0xf8, 0x9, @local}, 0x10) listen(r5, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) sendmsg$AUDIT_USER_TTY(r6, &(0x7f0000001740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001700)={&(0x7f00000006c0)={0x1010, 0x464, 0x1, 0x70bd28, 0x25dfdbfb, "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", ["", "", "", "", "", "", "", "", "", ""]}, 0xb5c}, 0x1, 0x0, 0x0, 0x8015}, 0x4040) r7 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x7, 0x0, &(0x7f0000000400)) r8 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r8, 0x0, 0x7, 0x0, &(0x7f0000000400)) r9 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r9, 0x0, 0x7, 0x0, &(0x7f0000000400)) 10.765777752s ago: executing program 2 (id=624): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create(0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000002a0001000000000000000000050000000c000a"], 0x20}, 0x1, 0x900000000000000}, 0x0) r2 = epoll_create1(0x0) r3 = epoll_create(0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r4}, 0x10) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)) r5 = epoll_create1(0x0) r6 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r8, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f0000000200)) 10.527645076s ago: executing program 0 (id=625): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@multicast1, @private, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={'gre0\x00', r0, 0x1, 0x20, 0x9, 0xe, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast2, {[@generic={0x82, 0x2}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000300), 0x0) fallocate(r3, 0x1, 0x0, 0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xccb8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) 10.5268908s ago: executing program 2 (id=626): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1080003, &(0x7f00000000c0)=ANY=[@ANYBLOB="00c303e2d9bbd6ffffffff817c810f3d3a82a44e770ea22bb1c1848e833d58ddbd96984fdea3e1ff90e69aad04024000560000000000ff0000000000003af0fa247b9a57c033c5aebcbe0acfba201bd6cf7e188dfb4b32cfed4ee57e8102183f5792792f40fb68624f730f4659"], 0x1, 0x164, &(0x7f00000065c0)="$eJzs289KMlEYx/HfjL7qa/8sq0W0CIJok6MGVju7FNFJpLEk2yhBdCndQRdWi3atMhx0wtGQjJnJ/H42np+Ph3kEjz4LRwAWVll7MmUo0Q+7qcx91oi6JQAh6Q0e33sAFk/sLeoOAETj5VxqSXp+vasqlhibD/r18rBuJsfrD9JOfFA3Uvrvny8epYPhfiM9cX/aqy9NrB/uD6+/rBWtak0ZrWtD2UG95u3f/sEkBADA4jCU8+eRJ0xdNBw77+V/bi54OeHmoi8feznp5lz12qkF9RYAzMiccv5jvvMf951/APOr3eleVhzHvgl+IVMK61os5mXBR+KXLqL+ZgIQNOu22bLane5Ro1mp23X7qlQslc7ypycFyx38rdHxH8Af8vmj//Vrak9hdgQAAAAAAAAAAAAAAL5rU1tRtwAAAAAgJMHdRWRo+j+LAQAAAAAAAAAAAAAAAADALD4CAAD//2ERHxA=") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getpeername(r1, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f00000002c0)=0x80) removexattr(&(0x7f0000000580)='./file0\x00', 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000007300)=ANY=[], 0xfe, 0x61b9, &(0x7f0000000400)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4dfc, 0x22001) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) 9.967228303s ago: executing program 4 (id=628): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000001900)="$eJzs3c9rHGUfAPDvbJKmTfu+yQsvaL0YEDRQmpgaWwWFigcRLBT0bLtstqFmky3ZTWlCQIsIXgQVD4JeevLgj3rz6o+r/hcexFI1LVY8SGQ2s+2m2U03abIbzecDk32emdl8n+/Or2d3hpkA9qzh9E8u4nBEvJtEDGbjk4joq5V6I06uzndreamQDkmsrLz8a1Kb5+byUiEa3pM6mFUejIhv34o4klsft7KwOJ0vlYpzWX2sOnNhrLKwePT8TH6qOFWcPT4+MXHsxJMnjm9frr//sHjo2nsvPPbFyT/ffODqO98lcTIOZdMa89iyZ9dWh2M4+0z60o9wjefvO9juknS7AWxJumn2rG7lcTgGo6dWAgD+zV6PiBUAYI9JHP8BYI+p/w5wc3mpUB+6+4tEZ11/LiL2r+ZfP7+5OqU3O2e3v3YedOBmsubMSBIRQ9sQfzgiPv7q1c/SIbbrPCRAG964HBFnh4bX7/+TddcsbNbjG0zbl70O3zU+je8MNHTG12n/56lm/b/c7f5PNOn/9DfZdrei2fa/ZsSBbQiygeufRDzTcG3brYb8M0M9We0/tT5fX3LufKmY7tv+GxEj0def1sc3iDFy468braY19v9+e/+1T9P46eudOXI/9/avfc9kvpq/n5wbXb8c8VBvs/yT28s/adH/Pd1mjBeffvujVtPS/NN868P6/CO7OmlnrFyJeLTp8r9zRVuy4fWJY7XVYay+UjTx5Y8fDrSK37j80yGNX/8u0Anp8h/YOP+hpPF6zcrmY3x/ZfCbVtPunX/z9X9f8kqtXO9HXMpXq3PjEfuSl9aPP3bnvZfyD2el1fnT/Eceab79b7T+p98Jz7aZf++1Xz7fev47K81/clPLf/OFq7eme1rFb2/5T9RKI9mYdvZ/7Tbwfj47AAAAAAAAAAAAAAAAAAAAAAAAAGhXLiIORZIbvV3O5UZHV5/h/f8YyJXKleqRc+X52cmoPSt7KPpy9VtdDjbcD3U8ux9+vX7srvoTEfG/iPig/0BSv4/iZJdzBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIC6gy2e/5/6qb/brQMAdsz+bjcAAOg4x38A2Hsc/wFg72nv+N+z4+0AADrH938A2Hsc/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANhhp0+dSoeVP5aXCml98uLC/HT54tHJYmV6dGa+MFooz10YnSqXp0rF0UJ55l7/r1QuX5iI2flLY9VipTpWWVg8M1Oen62eOT+TnyqeKfZ1JCsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2JzKwuJ0vlQqzilsobCyO5rR/UJPtjrtlvZ0tJDsjmZsc6HLOyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf4i/AwAA//+3ACFj") r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IEEE802154_LIST_PHY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x4, 0x70bd26, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4880}, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file1\x00', 0x18d042, 0x0) creat(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f0000000100)={[], [{@flag='nolazytime'}, {@fowner_lt}, {@euid_lt}, {@permit_directio}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@fsname}, {@obj_role={'obj_role', 0x3d, '{([-'}}, {@hash}, {@fsuuid={'fsuuid', 0x3d, {[0x39, 0x0, 0x0, 0x35, 0x38, 0x61, 0x30, 0x64], 0x2d, [0x38, 0x66, 0x64, 0x38], 0x2d, [0x30, 0x35, 0x61, 0x39], 0x2d, [0x66, 0x32, 0x35, 0x36], 0x2d, [0x34, 0x65, 0x64, 0x36, 0x38, 0x35, 0x38, 0x62]}}}, {@fowner_lt}]}, 0x0, 0x236, &(0x7f0000000300)="$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") write$FUSE_DIRENTPLUS(r2, &(0x7f0000000000)=ANY=[], 0x140000) 9.390590103s ago: executing program 3 (id=629): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x8a}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000a1f000/0x3000)=nil, 0x3000, 0x3000000, 0x8031, r0, 0x0) flock(0xffffffffffffffff, 0x5) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000b40), 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x24f8, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 8.520223821s ago: executing program 4 (id=630): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000040)=@udp6=r2}, 0x20) r4 = fsopen(&(0x7f0000000100)='coda\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e25, 0x2, @local, 0x4}, 0x5c, 0x0}}], 0x1, 0x0) unshare(0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000003300)=@mangle={'mangle\x00', 0xc061, 0x6, 0x5a8, 0x3b8, 0x1b0, 0x1b0, 0x1b0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@mcast1, @private2, [], [], 'vlan0\x00', 'pimreg1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'vlan0\x00'}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'pim6reg1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000), 0x4) 8.006560113s ago: executing program 3 (id=631): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1222, &(0x7f0000001580)="$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") syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200800, &(0x7f00000004c0)={[{@nodiscard}, {}, {@acl}, {@nomblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@jqfmt_vfsv1}, {@nodelalloc}, {@auto_da_alloc}, {@usrjquota}], [{@hash}, {@smackfsroot}, {@obj_user={'obj_user', 0x3d, '))]'}}, {@fowner_eq}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, ']\'#\\$,'}}, {@audit}]}, 0x5, 0x591, &(0x7f0000000f80)="$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") bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r3 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r3, 0xc0185879, &(0x7f0000000080)={0x0, 0x200002000001, 0xc000000, 0x0, 0x0, 0x0, 0x2401}) 6.159660794s ago: executing program 4 (id=632): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x8a}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000a1f000/0x3000)=nil, 0x3000, 0x3000000, 0x8031, r0, 0x0) flock(0xffffffffffffffff, 0x5) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000b40), 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x24f8, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 6.104181826s ago: executing program 0 (id=633): syz_mount_image$xfs(&(0x7f000000c740), &(0x7f000000c780)='./file0\x00', 0x0, &(0x7f000000c7c0), 0x1, 0xc718, &(0x7f000000c800)="$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") chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x3c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x33}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x100000}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NOTIFY_RADAR(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xe01e90305f6efbd7}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, r1, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x80, 0x49}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x14}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1725}]}, 0x58}, 0x1, 0x0, 0x0, 0x840}, 0x1) 5.991993944s ago: executing program 2 (id=634): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x14802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000009040)="$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") (async) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x14802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f16, &(0x7f0000009040)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file2\x00', 0x4b142, 0x0) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rename(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x105042, 0x0) (async) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./file2\x00', 0x105042, 0x0) write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000600)=ANY=[], 0x4000) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) (async) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="66b80500000066b9790000000f01c10f01c93ef20f1ef76464f011389a000000903e0f090f080f20e06635000002000f22e03e360f01cf64660f67ce", 0x3c}], 0x1, 0x0, 0x0, 0x0) preadv(r4, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 5.006407951s ago: executing program 2 (id=635): r0 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000500)={"a0453822", 0x0, 0x6, 0x2, 0x0, 0x0, "33793e77c734c4df2a87ba315ab8da", "000100", "0300a511", "8606ba80", ["46fe000300", "51f3d17dc9ed6f291acb3a10", "2ce50f8a285d9500c522afe1"]}) mq_open(&(0x7f0000000000)='/dev/cec#\x00', 0x40, 0x20, &(0x7f0000000040)={0x5, 0xffffffff, 0x8, 0x100}) 4.743152689s ago: executing program 4 (id=636): r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000080)=""/82, 0x52}], 0x1, 0xffffffc0, 0x0) close(r0) r1 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0x4001}, 0xc) write(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x4, 0x4, [0x7f, 0xfff, 0x80, 0x7ff]}, &(0x7f0000000580)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f00000001c0)={r3, 0x1}, &(0x7f0000000200)=0x8) write$P9_RLOPEN(r2, &(0x7f0000000440)={0x18, 0xd, 0x2, {{0x80, 0x4, 0x8}, 0x2}}, 0x18) r4 = socket$isdn(0x22, 0x3, 0x22) tee(r4, r0, 0x5, 0x1) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000480)={0x40, r5, 0xa01, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0xc643, 0x73}}}}, [@NL80211_ATTR_KEY_DEFAULT_TYPES={0x18, 0x6e, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, 0x40}}, 0x48090) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e0, 0x1b0, 0xc8, 0x8, 0x1b0, 0x5803, 0x310, 0x2e8, 0x2e8, 0x310, 0x2e8, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast1, [], [], 'erspan0\x00', 'geneve1\x00'}, 0x0, 0x190, 0x1b0, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f34a214e67442c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5", 0x1}}, @common=@inet=@socket1={{0x28}, 0xa490f54eab606508}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @mcast2, [], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x440) r10 = openat$cgroup_ro(r2, &(0x7f0000000500)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r10, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r10, 0x0) syz_usb_connect$uac1(0x0, 0x96, &(0x7f0000002b00)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902840003010000000904000000010100000a2401000000020102072405000040800c240200000200000000000009040100000102000009040101010102000009050109000000000007250100000000090402000001020000090402010101020000072401000005000b2402010100000151ab8c090569090002"], 0x0) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, 0x0) unshare(0x20000400) r11 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r11, 0x1, 0x3, &(0x7f0000000180), 0x4) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, 0x0) getsockopt$WPAN_SECURITY(r8, 0x0, 0x3, 0x0, &(0x7f00000004c0)) 4.584038905s ago: executing program 3 (id=637): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0x7, 0x4, 0x0, 0x10001, 0x3, [{0x8, 0x3, 0x81}, {0x7, 0xa, 0x3, '\x00', 0x2100}, {0x2, 0x80000001, 0x5, '\x00', 0xbc6be70f9284ad6d}]}) recvmmsg(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000000100)=""/251, 0xfb}, {&(0x7f0000000200)=""/31, 0x1f}, {&(0x7f0000000240)=""/108, 0x6c}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/22, 0x16}, {&(0x7f0000001300)=""/254, 0xfe}, {&(0x7f0000001400)=""/60, 0x3c}, {&(0x7f0000001440)=""/122, 0x7a}], 0x8, &(0x7f0000001540)=""/138, 0x8a}, 0x4}], 0x1, 0x100, 0x0) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001640), 0x18b180, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000017c0)={'syztnl0\x00', &(0x7f0000001740)={'syztnl1\x00', 0x0, 0x29, 0x6, 0xf1, 0xff, 0x1, @ipv4={'\x00', '\xff\xff', @local}, @private1, 0x0, 0x10, 0x5, 0x20000000}}) (async, rerun: 32) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000001800), 0x44000, 0x0) (async, rerun: 32) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001880)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x1, 0x9e1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x48) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001980)={{0x1, 0xffffffffffffffff}, &(0x7f0000001900), &(0x7f0000001940)='%pS \x00'}, 0x20) (async, rerun: 64) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000019c0)=@base={0x13, 0x3, 0xff, 0x9, 0x2014, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5}, 0x48) (rerun: 64) r7 = dup2(r0, r0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001ac0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001a40), &(0x7f0000001a80)='%-010d \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001b80)=@bpf_ext={0x1c, 0x10, &(0x7f0000001680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@alu={0x7, 0x1, 0x5, 0xafaf6dce760b393d, 0x2, 0x30, 0x8}], {{}, {}, {0x85, 0x0, 0x0, 0x42}}}, &(0x7f0000001700)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x41100, 0x1, '\x00', r2, 0x0, r3, 0x8, &(0x7f0000001840)={0x5, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x115e5, 0xffffffffffffffff, 0x3, &(0x7f0000001b00)=[r4, r5, r6, r7, r8], &(0x7f0000001b40)=[{0x5, 0x2, 0x9, 0x2}, {0x1, 0x5, 0x2}, {0x1, 0x5, 0x7, 0x4}], 0x10, 0x2}, 0x90) (async, rerun: 64) read$FUSE(r1, &(0x7f0000001c40)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000003c80)={0x50, 0x0, r9, {0x7, 0x28, 0x10001, 0x18819, 0x1, 0x3, 0x4, 0x8000}}, 0x50) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003d40), r7) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000003e40)={&(0x7f0000003d00)={0x10, 0x0, 0x0, 0x9000}, 0xc, &(0x7f0000003e00)={&(0x7f0000003d80)={0x48, r11, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x5}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'dvmrp1\x00'}, @NL80211_ATTR_WIPHY_DYN_ACK={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x14}, 0x90) (async) r12 = socket$inet6(0xa, 0x80000, 0x10001) close(r12) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$CAPI_NCCI_GETUNIT(r3, 0x80044327, &(0x7f0000003e80)=0x2) sched_setscheduler(r10, 0x6, &(0x7f0000003ec0)=0x4) (async) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r13, &(0x7f0000004000)={&(0x7f0000003f00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003f40)={0x5c, 0x1, 0x9, 0x303, 0x0, 0x0, {}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x800}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x12}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x4}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}, @NFCTH_STATUS={0x8}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x5}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFCTH_STATUS={0x8, 0x6, 0x1, 0x0, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x80) bind$bt_hci(r3, &(0x7f0000004040)={0x1f, 0x1}, 0x6) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r4, 0x8040942d, &(0x7f0000004080)) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000004140)={{r6}, &(0x7f00000040c0), &(0x7f0000004100)='%+9llu \x00'}, 0x20) (async) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000004180)=0x0) sched_getparam(r14, &(0x7f00000041c0)) (async) sendmmsg$inet(r3, &(0x7f00000047c0)=[{{&(0x7f0000004200)={0x2, 0x4e24, @local}, 0x10, &(0x7f0000004340)=[{&(0x7f0000004240)="3fdfd74668d44ff076a2cf5319beaac5448ca1e4184578175966c64d0491c3299c3cc50abd5fe2f8b731872545b7f3df7995d1e0fd3d1ffbe2f0c354ae1c9c622a404bd5ad57c6316e33e101273d44434e814aa89e9e5c67eb6c1c227b2f38136ea7fc5b842d62349887675e96f05906a8ad3271adc85ebf1ede7ed9f98f09bba1fa514cc5cc107ff697c92942c0c1ea693c8a3327b56c2e9e83567e46b978fe1baa8c0f18f7a5a136ba333c7e01a8f44c938c86435c28ac984f8428a6a1097038b6cf7f7073a6c2e9d121ea740d50ea41edc7de37c5ce99d455cc3a069515468b17", 0xe2}], 0x1, &(0x7f0000004380)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x28}, @remote}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}}}}], 0x40}}, {{&(0x7f00000043c0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10, &(0x7f0000004480)=[{&(0x7f0000004400)="a5c78b209a651b6f439ca4429ac40764598acdef10650ffc6b08d266021ca35b30c56281b0bc36955c1a94fedd4393fb3e4048eb8278530cb04902b4b884542a799470841f82680d4c0930b5b318e7bd4424ceff4db1b10c7890420735b0f182ef087083c5e9bcfe845114b4ce8a5e780dbc837e72a5", 0x76}], 0x1}}, {{&(0x7f00000044c0)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000004580)=[{&(0x7f0000004500)="9a987edae6f5524a470990ddcfb9d15c3925e2ed7b3d56b3bb9d9ab78143fc20ffc7abe63929215529dfc31c759eac96a46e7b7a34b0aeb821808ca547b93a12cb95d4fe2a8e4da446aeda78251ff78827868ca9", 0x54}], 0x1, &(0x7f00000045c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @remote}}}], 0x20}}, {{0x0, 0x0, &(0x7f00000046c0)=[{&(0x7f0000004600)="19cb361b3a63fab0f8630449bd1cd2", 0xf}, {&(0x7f0000004640)="87220dc1409c2ce26da5b85f894d65bd952805ced973f5f1c309e1ce7dbb2510bb08063e70a439c819918585d2bc6451f7023ec183cde9d09abecb230aafc802bd16175416d1368edde24b06043bb7daf8cfda9cbeba9fdf4aef", 0x5a}], 0x2, &(0x7f0000004700)=[@ip_ttl={{0x14, 0x0, 0x2, 0x9}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @rand_addr=0x64010101, @broadcast}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7f}}], 0xb0}}], 0x4, 0x4000000) ioctl$TIOCOUTQ(r7, 0x5411, &(0x7f00000048c0)) 4.452530362s ago: executing program 2 (id=638): openat$sysfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/fscaps', 0x0, 0x0) syz_emit_ethernet(0x4b, &(0x7f00000003c0)=ANY=[@ANYBLOB="bbbbbbcbbbbb5bfd2e8cf5a308004924003d0065000000069078cc497a5140d0944b0d83ff478dd5bcf3ac14140e64010102830f4a7f000001ac1e0101e0000002000000000000000000000000000000000200004f2200004e22009ae807b8430500434e25a4cfaae0b8f3edc23fe2a8c288bd6c8183f18713bcefc481b55c6c78a4c84319e0bbfb9911afeade4e0fd2"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') socket(0x10, 0x80002, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000000)={0x16a67fe12d5b9e8, 0x0, 0x90, 0x1f, r0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='cpuset.memory_migrate\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x6) capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x7, 0x1, 0x6, 0x0, 0x1, 0xff}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) ioctl$VHOST_VDPA_GET_CONFIG(0xffffffffffffffff, 0x8008af73, 0x0) r3 = creat(&(0x7f0000001040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000071121500000000009500000000000000", @ANYRES64=r3], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10) socket(0xb, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000340)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r5, 0xc0182101, &(0x7f0000000180)={r6}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000002780)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x40182103, &(0x7f0000000080)={r7, 0x3, r5, 0x5}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002c40)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="db900a068365f073cddefd61f066300e182b21d980012030df55b82c41033d5aaeda00cd85256fe24f52fcc1b7cefebee3aa77e24111dde46fe516cf43c603b5455140f2aef1a0269c6f191cb878a404498b54320bc04f3c9a18d1f827bc397dbe4059f61c69ef2334edad3ae0bc294a964d95c5169b3fcb4288ec0bb261f18fb7597c305f3ba8d77f5e4920e72a756bba470489654caedea75245f4834f5a3e47300be5e56620c51637593a6fa4fbcef79b38517fdde8a498"], 0x24}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) 4.24229678s ago: executing program 3 (id=639): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000c00)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000005c0)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f00000003c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000200)={r3}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000300)=@v1={0x0, @aes128, 0x2, @desc4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r2, 0xc0502100, &(0x7f0000000180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000000240)={r4, 0x1, r2, 0x3, 0x80000}) accept4$inet6(0xffffffffffffffff, &(0x7f00000002c0), &(0x7f0000000580)=0xfffffffffffffc5a, 0x80800) openat$full(0xffffffffffffff9c, &(0x7f0000000480), 0x20000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r2, 0x40082102, &(0x7f0000000080)=r4) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r2, 0xc0182101, &(0x7f0000000280)={r4}) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xf8}}, 0x0) 3.46001114s ago: executing program 2 (id=640): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000240)={0x8, 0x8a}, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0x0) sched_setscheduler(0x0, 0x0, 0x0) mmap(&(0x7f0000a1f000/0x3000)=nil, 0x3000, 0x3000000, 0x8031, r0, 0x0) flock(0xffffffffffffffff, 0x5) memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\xea7\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xcd\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x0) r4 = socket(0x40000000015, 0x5, 0x0) connect$inet(r4, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000007c0)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept$alg(r5, 0x0, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$xdp(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000b40), 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_setup(0x24f8, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, &(0x7f0000001200)={0x0, 0x3938700}, 0x0) 3.262376751s ago: executing program 3 (id=641): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000140)={0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x7fc00101}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000001c0)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000d80)=ANY=[@ANYRES64=0x0], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() process_vm_readv(r3, 0x0, 0x0, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') preadv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000580)=""/198, 0xc6}], 0x1, 0x0, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000680), &(0x7f0000000040)=@udp6=r2}, 0x20) r4 = fsopen(&(0x7f0000000100)='coda\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r4, 0x7, 0x0, 0x0, 0x0) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e25, 0x2, @local, 0x4}, 0x5c, 0x0}}], 0x1, 0x0) unshare(0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000003300)=@mangle={'mangle\x00', 0xc061, 0x6, 0x5a8, 0x3b8, 0x1b0, 0x1b0, 0x1b0, 0x3b8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x4d8, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@mcast1, @private2, [], [], 'vlan0\x00', 'pimreg1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@eui64={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private, @ipv6=@dev}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4, 'vlan0\x00'}}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'pim6reg1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x608) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000), 0x4) 851.096302ms ago: executing program 3 (id=642): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000400)={@multicast1, @private, 0x0}, &(0x7f0000000440)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={'gre0\x00', r0, 0x1, 0x20, 0x9, 0xe, {{0x6, 0x4, 0x2, 0x30, 0x18, 0x68, 0x0, 0x0, 0x2, 0x0, @loopback, @multicast2, {[@generic={0x82, 0x2}]}}}}}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x60, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f000078b000)={[0xfffffffffffffffd]}, 0x0, 0x8) r3 = memfd_create(&(0x7f0000000300), 0x0) fallocate(r3, 0x1, 0x0, 0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) pipe(0x0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0xccb8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x10) 0s ago: executing program 0 (id=643): syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x1080003, &(0x7f00000000c0)=ANY=[@ANYBLOB="00c303e2d9bbd6ffffffff817c810f3d3a82a44e770ea22bb1c1848e833d58ddbd96984fdea3e1ff90e69aad04024000560000000000ff0000000000003af0fa247b9a57c033c5aebcbe0acfba201bd6cf7e188dfb4b32cfed4ee57e8102183f5792792f40fb68624f730f4659"], 0x1, 0x164, &(0x7f00000065c0)="$eJzs289KMlEYx/HfjL7qa/8sq0W0CIJok6MGVju7FNFJpLEk2yhBdCndQRdWi3atMhx0wtGQjJnJ/H42np+Ph3kEjz4LRwAWVll7MmUo0Q+7qcx91oi6JQAh6Q0e33sAFk/sLeoOAETj5VxqSXp+vasqlhibD/r18rBuJsfrD9JOfFA3Uvrvny8epYPhfiM9cX/aqy9NrB/uD6+/rBWtak0ZrWtD2UG95u3f/sEkBADA4jCU8+eRJ0xdNBw77+V/bi54OeHmoi8feznp5lz12qkF9RYAzMiccv5jvvMf951/APOr3eleVhzHvgl+IVMK61os5mXBR+KXLqL+ZgIQNOu22bLane5Ro1mp23X7qlQslc7ypycFyx38rdHxH8Af8vmj//Vrak9hdgQAAAAAAAAAAAAAAL5rU1tRtwAAAAAgJMHdRWRo+j+LAQAAAAAAAAAAAAAAAADALD4CAAD//2ERHxA=") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) getpeername(r1, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f00000002c0)=0x80) removexattr(&(0x7f0000000580)='./file0\x00', 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000140)='./file0\x00', 0x20108c0, &(0x7f0000007300)=ANY=[], 0xfe, 0x61b9, &(0x7f0000000400)="$eJzs3U1vHVf9B/DfffRD/22tLqr+I4TctDyU0iROSggUaLsoCzZdoGxRItetIlJASUBpZRFX3rBgxSsAIbFEiCViwQvogi07VqyIZCOBumLQ2OfE45t7a6eO71z7fD6SM/ObM+N7xt879yF35p4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJ73/3+Sicirv0sLViK+L/oRXQjFup6OSIWlpfy+v2IeC52muPZiBjMRdTb7/zzdMSrEfHxUxFb2+ur9eKLh+zHW3/4229/8MTbf/394Px//nin99qk9e7e/eW//3TvaPsMAAAApamqquqkt/ln0vv7btudAgCmIj//V0lefurrX/3j7T/PUn/UarVarZ5C3VSNd69ZRMRGc5v6NYOP4wHghNmIT9ruAi2Sf9H6EfFE250AZlqn7Q5wLLa211c7Kd9O8/lgebc9nwuyL/+NzoPrOyZNDzJ6jsm07l+b0YtnJvRnYUp9mCU5/+5o/td224dpvePOf1om5T/cvfSpODn/3mj+I05P/t2x+Zcq599/pPx78gcAAAAAgBmW//9/qeXPf+eOviuH8mmf/y5PqQ8AAAAAAAAA8Lgddfy/B4z/BwAAADOrfq9e+/VTe8smfRdbvfxqJ+LJkfWBwqSLZRbb7gcAAAAAAAAAAAAAlKS/ew7v1U7EICKeXFysqqr+aRqtH9VRtz/pSt9/KFnbD/IAALDr46dGruXvRMxHxNXo7nzX32BxcbGq5hcWq8VqYS6/nh3OzVcLjfe1eVovmxse4gVxf1jVv2y+sV3TQe+XD2of/X31bQ2r3iE69pgM0l9zQnNLYQNAsvtstOUZ6ZSpqqcnvfiAfRz/p9BSLLV9v2L2tX03BQAAAI5fVVVVJ32d95k0vl+37U4BAFORn/9HPxc4Ut2d0B7xeH6/Wq1Wq9Xqz1Q3VePdaxYRsdHcpn7NYDh+ADhhNuKTtrtAi+RftH5EPNd2J4CZ1mm7AxyLre311U7Kt9N8Pkjju+dzQfblv9HZ2S5vP256kNFzTKZ1/9qMXjwzoT/PTqkPsyTn3x3N/9pu+zCtd9z5T8uk/Ic7l8yVJ+ffG81/xOnJvzs2/1Ll/PuPlH9P/gAAAAAAMMPy//8v+fw37zIAAAAAAAAAnDhb2+ur+brX/Pn/58as5/rP0ynn33nU/BfSvPxPtJx/dyT/L4+s12vM339z7/j/1/b66u/u/PP/8/Sw+c/lmU66Z3XSPaKTbqnTT9Oj7N3DNge9YX1Lg06310/n/FSDd+NG3Iy1uLBv3W76e+y1r+xrr3s62Nd+cV97/6H2S/vaB+l7B6qF3H4uVuPHcTPe2Wmv2+YO2P/5A9qrA9pz/j2P/0XK+fcbP3X+i6m9MzKt3f+o+9Bx35yOu503bnz+FxeOf3cOtBm9B/vWVO/f2Rb6U/9N3oph/PT22q1zd6/fuXNrJdLkiebSi5Emj1nOf7DzM7f3+P/Cbnt+3G8er/c/Gj5y/rNiM/oT83+hMV/v70tT7lsbcv7D9JPzfye1jz/+T3L+k4//l1voDwAAAAAAAAAAAAAAAHyaqqp2LhF9IyIup+t/2ro2EwCYrvz8XyV5uVqtVqvV6tNXN1Xjvd4sIuIvzW3q1ww/H/fLAIBZ9t+I+HvbnaA18i9Y/r6/evpi250Bpur2Bx/+8PrNm2u3brfdEwAAAAAAAADgs8rjfy43xn9+MSKWRtbbN/7rm7F81PE/+3nmwQCjj3mg7wk2u8NetzHc+POxMz73uUnjf5+Nh8f/zmPi9pr7McHggPbhAe1zB7TPj126l9bYCz0acv7PN8Y7r/M/MzL8egnjv46OeV+CnP/Zxv25zv9LI+s1869+M3P5bxx2xc3o7sv//J33f3L+9gcfvnLj/evvrb239qNLKysXLl2+fOXKlfPv3ri5dmH33+Pp9QzI+eexr50HWpacf85c/mXJ+X8h1fIvS87/i6mWf1ly/vn1nvzLkvPP733kX5ac/0upln9Zcv5fSbX8y7K1vT5X5/9yquVflnz8fzXV8i9Lzv+VVMu/LDn/c6mWf1ly/udTfYj8fT38KZLzz59wOf7LkvNfSbX8y5Lzv5hq+Zcl538p1fIvS87/1VTLvyw5/6+lWv5lyflfTrX8y5Lz/3qq5V+WnP+VVMu/LDn/b6Ra/mXJ+X8z1fIvS87/tVTLvyw5/2+lWv5lyfl/O9XyL0vO/zupln9Zcv6vp1r+Zdn7/n8zZsyYyTNtPzIBAAAAAAAAAAAAAKOmcTpx2/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27i9Grqu+A/id9a69dggxEIKTGtgkJoTEZNd24j+0KSYQoAFKgYRC/+C43rVZ8D+8dgkUyaaBEgmjooqq6UNbQFEbqaqIKh5oRWkeqv55Ku0DfamoKiE1qgwKqEhtRbPVzD3neGZ2dmbWO17fvefzkZLf7sy9c8/cOffu/Hb9nQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtLv1zXOfaxRF0fyv9b+tRfGi5tebp7a2bnvDtR4hAAAAsFr/1/r/8zekGw4OsVLbMn/3qn/8+uLi4mLxgQ2/O/GlxcV0x1RRTGwqitZ90TP//sFG+zLB48VkY6zt+7EBm98w4P7xAfdPDLh/44D7Nw24f3LA/Ut2wBKby9/HtB5sR+vLreUuLW4sJlr37eix1uONTWNj8Xc5LY3WOosTR4v54ngxV8x0LF8u22gt/81bm9t6exG3Nda2re3NGfLDTx2JY2iEfbyjY1uXHzP6/puKqR/98FNH/vjspZt71YG7oePxynHeeVtznJ8Jt5RjbRSb0j6J4xxrG+f2Hq/Jho5xNlrrNb/uHufzQ45zw+Vhrqnu13yyGGt9/e3Wfhpv/7Ve2k/bw23/fXtRFBcuD7t7mSXbKsaKLR23jF1+fSbLGdl8jOZUemkxvqJ5eusQ87RZZ3d0ztPuYyK+/reG9caXGUP7y/T9T29c8rqvdJ5GzWe93LHSPQdHfaxUZQ7GefHt1pN+oucc3BGe/6fuWH4O9pw7PeZget5tc/C2QXNwbOOG1pjTi9BorXN5Du7qWH5Da0uNVn3ujv5zcPrsidPTC5/45OvnTxw+Nnds7uSeXbtm9uzdu3///umj88fnZsr/X+Herr4txVg6Bm4L+y4eA6/tWrZ9qi5+ZXTH4WSf43Br17KjPg7Hu59cY20OyKVzujw2Hm7u9MmLY8Uyx1jr9blr9cdhet5tx+F423HY82dKj+NwfIjjsLnM6buGe88y3vZfrzFcrZ8FW9vmYPf7ke45OOr3I1WZg5NhXvzrXcv/LNgexvvEzpW+H9mwZA6mpxvOPc1b0vv9yf2t0mte3tK847qNxbmFuTP3PHb47Nkzu4pQ1sTL2uZK93zd0vaciiXzdWzF8/Xg/KueuKXH7VvDvpp8ffN/k8u+Vs1l7r2n/2vV+unWe3923Lq7CGXE1np/9vpp3tyfqZfssz+by3xmevXvxVNf2nb+nVjm/Bv7/hfK7aWHenzDxHh5/G5Ie2ei43zc+VKNt85djda2n58e7nw8Ef5b6/PxjX3Ox9u6lh31+Xii+8nF83Fj0G87Vqf79ZwM8+T4TP/zcXOZbbtXOifH+56Pbw+1Efb/60KnkPqitrmz3LxN2xofnwjPazxuoXOe7ulYfiL0Zs1tPb37yubpnbeXj7UhPbvL1mqeTnUtO+p5ms5Xy83TxqDfvl2Z7tdzMsyLG/f0n6fNZZ69d/Xnzs3xy7Zz58ZBc3Biw8bmmCfSJCzP94ub4xy8pzhSnCqOF7Oteze25lOjta2d9w03BzeG/9b6XLmtzxy8s2vZUc/B9HNsubnXGF/65Eeg+/WcDPPiyfv6z8HmMm/ZN9r3rneGW9Iybe9du3+/ttzvvG7p2k1X83dezXH+zb7+v5ttLnN8/0r7zP776e5wy3U99lP38bvcMTVbrM1+2hbGeWn/8vupOZ7mMl86MOR8OlgUxfmPPdD6fW/4+8qfn/vO1zv+7tLrbzrnP/bAD64/+rcrGT8A698LZdlS/qxr+8vUMH//BwAAANaF2PePhZro/wEAAKA2Yt8f/1V4ov8HAACA2oh9/3ioSSb9/7a3XJp/4XyRkvmLQbw/7YaHyuVixnUmfD+1eFnz9geemvvxX54fbttjRVH85KHf6Ln8tofiuEpTYZzPPNh5+9IVzw+1/Ucfubxce379y+Hx4/MZdhr0iuDOFEXxzRu+0NrO1AcvtuqzDz3aqu+98MTjzWWeP1B+H9d/7mXl8n8Qwr8Hjx7uWP+5sB++F+rMO3rvj7je1y6+bvu+91/eXlyvcduLW0/7yQ+Vjxs/J+eLj5fLx/283Pj/6vNPf625/GOv6T3+82O9x/90eNynHrw035xx//PKcvn216D5fVzvs2H8cXtPhfXv+eq3eo7/mc+Vy59+a7nco6HG7d8Zvt/x1kvz7fvrscbhjudVvK1cLm5/5ju/3bo/Pl58/O7xTx662LE/uufHs/9cPs501/Lx9rid6C+6tt98nPb5Gbf/9G892rGfB23/mfc+98rm43Zv/+6u5TZ0rd/9iU1/+Nkv9NxeHM/BPzvd8XwOviccx2H7T34ozMdw//8+84WO7UaPvqfz/BOX//LW8x3PJ3r7j8rtP/PGY636H1M//v3rXnT9iy+8urnviuLb7ysfb9D2j/3RqY7xf+Wmu1qvR7w/ZvS7t7+cuP0zH9958tTCufnZtr3a+uycd5bj2TS5eUtzvDeEc2v394dOnf3w3JmpmamZopiq70foXbGvhvqDslxY6fp3PRJez1t+75tb7vinz8fb/+Xh8vaL7yh/br02LPfFcPvW8vVbbKxy+0/eelPr+G48W37fkWMfge07/nP/UAuG59/9viDO99Mv/3BrPzTva/3ciMf1Ksf/3dnycb4R9uti+GTm2266vL325eNnI1x8X3m8r3r/hdNcfF3/JLze7/pe+fhxXPH5fje8j/nWts7zXZwf3zg/1v34rU/xuBDOJ8WF8v64VNzfF5+/qefw4ueQFBdubn3/O+lxbl7R01zOwicWpo/Pnzz32PTZuYWz0wuf+OShE6fOnTx7qPVZnoc+Mmj9y+enLa3z0+zc3nuLmc1FUZwqZtbghHV1xt/8arjxn37kyOy+mTtm544ePnf07COn584cO7KwcGRuduGOw0ePzn180Przs/fv2n1gz77dO4/Nz96//8CBPQd2zp881RxGOagB9s58dOfJM4daqyzcf++BXffdd+/MzhOnZufu3zczs/PcoPVbP5t2Ntf+9Z1n5o4fPjt/Ym7nwvwn5+7fdWDv3t0DPw3wxOmjC1PTZ86dnD63MHdmunwuU2dbNzd/9g1an3pa+Lfy/Wy3RvlBfMW7796bPp+16alPL/tQ5SJdHyB6KXwWzT+85PT+Yb6Pff9EqEkm/T8AAADkIPb9G0NN9P8AAABQG7Hv3xRqov8HAACA2oh9/2SoSSb9v/y//P9w+f/y/lHm/3vl5wv5/0rl/09/rMyVrvf8f8zPy//n4Rrn/1e9ffl/+f/65f+Hz8+v9/HL/8v/s1TV8v+x799cFFn2/wAAAJCD2PdvCTXR/wMAAEBtxL7/ulAT/T8AAADURuz7XxRqkkn/L/8/VP5/96DAVf3z/6O//r/8v/z/muT/44sj/5+NFefv3/9wx7fy/4H8v/y//L/8v/w/qzax7D3XKv8f+/7rQ00y6f8BAAAgB7Hvf3Goif4fAAAAaiP2/TeEmuj/AQAAoDZi37811CST/l/+3/X/5f/l/2ud/1/t9f/bBiP/vz64/n9/8v8DXHH+f1L+fz3m/ydGO/5q5/8HDl/+n6uiatf/j33/S0JNMun/AQAAIAex739pqIn+HwAAAGoj9v0vCzXR/wMAAEBtxL7/xlCTTPp/+X/5f/l/+X/5/97bH3z9//Ir+f9qkf/vT/5/ANf/zyv/P+LxVzv/P+rr/0882L2+/D+9VC3/H/v+l4eaZNL/AwAAQA5i339TqIn+HwAAAGoj9v2vCDXR/wMAAEBtxL5/W6hJJv2//L/8v/y//L/8f+/tD87/l+T/q0X+vz/5/wHk/+X/5f+Hy//3ePMr/08vVcv/x77/5lCTTPp/AAAAyEHs+28JNVmm/18c8m/bAAAAQHXEvv+nQk38/R8AAABqI/b920NNMun/5f/l/+X/88r/371R/l/+v97k//uT/x9A/l/+X/5/yOv/L7WS/P+mQQ9GbVQt/x/7/leGmmTS/wMAAEAOYt//qlAT/T8AAADURuz7Xx1qov8HAACA2oh9/1SoSSb9v/x/vfL/f/rXT766kP+X/x+w/Zrm/+M0kP/PnPx/f/L/A8j/y//L/69J/p98VC3/H/v+W0NNMun/AQAAIAex778t1ET/DwAAALUR+/7bQ030/wAAAFAbse/fEWqSSf8v/1+v/H8k/y//32/7Nc3/J/L/eZP/76HtIJX/H0D+X/4/+/x/fPcr/89oVC3/H/v+14SaZNL/AwAAQA5i339HqIn+HwAAAGoj9v2vDTXR/wMAAEBtxL7/zlCTTPp/+X/5f/l/+X/5/97bl/9fn+T/+1tp/n+j/L/8v/x/Zvl/1/9ntKqW/499/+tCTTLp/wEAACAHse+/K9RE/w8AAAC1Ef/9ZvnvXvX/AAAAUEex798ZapJJ/y//L/+fU/6/If8v/y//X3vy//25/v8A8v/y//L/8v+MVNXy/7Hvf32oSSb9PwAAAOQg9v33hJro/wEAAKA2Yt8/HWqi/wcAAIDaiH3/TKhJJv2//L/8f075f9f/l/+X/68/+f/+RpH/Xzwv/y//35v8fwXz/0Uh/881VbX8f+z7d4WaZNL/AwAAQA5i37871ET/DwAAALUR+/49oSb6fwAAAKiN2PffG2qSSf8v/y//L/8v/y//33v78v/rk/x/f67/P4D8v/x/3fL/rv/PNVa1/H/s++8LNcmk/wcAAIAcxL5/b6iJ/h8AAABqI/b9+0JNQv/f6991AwAAAOtL7Pv3h5pk8vd/+f+a5P9/8+87ti3/L//fb/ujyf9vlv8PVf6/Wmqa/+8+LK6Y/P8A8v9XLT9fjI1kiNds/PL/8v9cmarl/2PffyDUJJP+HwAAAHIQ+/43hJro/wEAAKA2Yt//06Em+n8AAACojdj3/0yoSSb9v/x/TfL/XeT/5f/7bd/1/+X/66ym+f+RqVX+f0z+fz3l/13/X/5/0PrU09XP/8evhsv/x77//lCTTPp/AAAAyEHs+3821ET/DwAAALUR+/43hpro/wEAAKA2Yt9/MNQkk/5f/l/+/2rl/y+Myf93z4+88v9vLLpVMf/fnDzy//VS4fz/xDDbl/93/X/5/zUZf/ePmpGMX/5f/p+lqnb9/9j3vynUJJP+HwAAAHIQ+/4HQk30/wAAAFAbse9/c6iJ/h8AAABqI/b9bwk1yaT/l/+X/3f9f/l/1//vvX35//Wpwvn/ocj/y//L/6/f8cv/y/+zVNXy/7HvfzDUJJP+HwAAAHIQ+/63hpro/wEAAKA2Yt//tlAT/T8AAADURuz73x5qkkn/L/8v/y//L/8v/997+/L/65P8f3/y/wPI/8v/y//L/zNSVcv/x77/50JNMun/AQAAIAex738o1ET/DwAAALUR+/53hJro/wEAAKA2Yt//zlCTTPp/+X/5f/l/+X/5/97bl/9fn+T/+5P/H0D+X/5f/l/+n5GqWv4/9v3vCjXJpP8HAACAHMS+/+dDTfT/AAAAUBux7393qIn+HwAAAGoj9v2/EGqSSf8v/y//X638/+L59vXk/+X/i1Hl/5sryf9nQf6/P/n/AXrk/zfJ/8v/y//L/3PFqpb/j33/e0JNMun/AQAAIAex739vqIn+HwAAAGoj9v3vCzXR/wMAAEBtxL7/4VCTTPp/+f8s8//pKVcv/+/6//L/rv8v/7868v/9yf8P4Pr/8v/y//L/jFTV8v+x738k1CST/h8AAAByEPv+94ea6P8BAACgNmLf/4uhJvp/AAAAqI3Y938g1CST/l/+P8v8f4Wv/1+3/P94x/zIKf8/2fZ6pnkp/y//vwbk//uT/x9A/l/+v8r5/zCbNy+zvvw/VVS1/H/s+z8YapJJ/w8AAAA5iH3/L4Wa6P8BAACgNmLf/8uhJvp/AAAAqI3Y9/9KqEkm/X8N8/8XCvl/+f/K5P8750dO+X/X/19K/n9tyP/3J/8/gPy//H+V8/8DyP9TRVXL/8e+/1dDTZZt/H7wX0M8TQAAAKBCYt//oVCTTP7+DwAAADmIff+hUBP9PwAAANRG7PsfDTXJpP+vYf5/ldf/j1dUlf+X/x91/n9M/l/+X/5/DYwu//+K64tC/l/+X/5f/l/+X/6f1aha/j/2/YdDTTLp/wEAACAHse//tVAT/T8AAADURuz7j4Sa6P8BAACgNmLfPxtqkkn/fw3z/xPVzP+7/v+V5v9/Iv/v+v+B/H9v8v9rw/X/+5P/H0D+X/5f/l/+n5GqWv4/9v1zoSaZ9P8AAABQY+nXwbHvPxpqov8HAACA2oh9/7FQE/0/AAAA1Ebs+z8capJJ/+/6//L/rv9/LfL/4x3Ly/+X5P/l/0dB/r8/+f8B5P/l/+X/5f8Zqarl/2PfPx9qkkn/DwAAADmIff9HQk30/wAAAFAbse//aKiJ/h8AAABqI/b9x0NNMun/5f/l/3PP/zeK4oLr/482/79J/r8n+f+1If/fn/z/APL/a5mfv34kg752419C/l/+n6Wqlv+Pff+JUJNM+n8A4P/Zu48muc7rjsNtmkRY2R/Ba6+8tFf0R/DWO1d57UwrSySVs0TlHKicc05UzjlnKudIRUpVUHFwzgFmunEboTF973ueZ3MMFKFpiCOy/kb96gUAOsjd/59xi/0PAAAAw8jd/19xi/0PAAAAw8jd/99xS5P9r//X/3fv/1d7ef//8F8/Wv/v/f/N9P/HY62/v3bzX3ehKPyC/f8//OMN/6b/1//r/yd5/1//r//nqLn1/7n7/yduabL/AQAAoIPc/f8bt9j/AAAAMIzc/f8Xt9j/AAAAMIzc/TfELU32v/5f/6//1/8f6v9v0//r/5fN+//T9P9b6P/1//p//T87Nbf+P3f//8ctTfY/AAAAdJC7/25xi/0PAAAAw8jdf/e4xf4HAACAYeTuv0fc0mT/6//1//r/pfT/J7z/f+T3o//X/2+i/5+m/99C/6//1//r/9mpufX/ufvvGbc02f8AAADQQe7+e8Ut9j8AAAAMI3f/veMW+x8AAACGkbv/PnFLk/2v/9f/6/+X0v8f0/v/+n/9/8Ldujr3zwT9/zr9/xZb+v/VSv8/5aL7+c2/veV8/gvQ/+v/WTe3/j93/33jln9erU5c7m8SAAAAmJXc/feLW5r8+T8AAAB0kLv/xrjF/gcAAIBh5O6/KW5psv/1//p//b/+X/+/+evr/5fJ+//Trrz///u//Y9/79v/e/9/mvf/d93/3/Wdof9n2ebW/+fuvzluabL/AQAAoIPc/fePW+x/AAAAGEbu/gfELfY/AAAADCN3/wPjlib7X/8/Wv//14d+3Xn9/0Htov/X/+v/9f+j0/9P8/7/Fgf/mDtdP9T/6/+9/6//58rMrf/P3f+guKXJ/gcAAIAOcvc/OG6x/wEAAGAYufsfErfY/wAAADCM3P0PjVua7H/9/2j9/+Ff5/1//f+mr6//1/+PTP8/Tf+/xSjv/1/md82++/krte/Pr//X/7Nubv1/7v6HxS1N9j8AAAB0kLv/4XGL/Q8AAADDyN3/iLjF/gcAAIBh5O5/ZNzSZP/r//X/y+j/8yvo//X/V7//T/r/ZdL/T9P/bzFK/3+Z9t3PL/3z6//1/6ybW/+fu/9RcUuT/Q8AAAAd5O5/dNxi/wMAAMAwcvc/Jm6x/wEAAGAYufsfG7c02f/6f/3/Mvp/7//r/73/r/+/OPr/afr/LfT/+n/9v/6fnZpb/5+7/5a4pcn+BwAAgA5y9z8ubrH/AQAAYBi5+x8ft9j/AAAAMIzc/U+IW5rsf/2//l//r//X/2/++vr/ZdL/T9P/b9G8/1/dpP/X/+v/2a0Z9f/n/apTqyfGLU32PwAAAHSQu/9JcYv9DwAAAMPI3f/kuMX+BwAAgGHk7n9K3NJk/+v/Z9P/H+R8Y/X/p1erlf5/1bT/P33e38/6vtT/6/+Pgf5/mv5/i+b9/777+aV/fv2//p91M+r/D36cu/+pcUuT/Q8AAAAd5O5/Wtxi/wMAAMAwcvc/PW6x/wEAAGAYufufEbc02f/6/9n0/wfG6v+9/3/0+6NT/+/9/3X6/+Oh/5+m/99C/6//1//r/9mpufX/ufufGTeduO6yf4sAAADAzOTuf1bc0uTP/wEAAKCD3P3PjlvsfwAAAFioW9Z+Jnf/c+KWJvtf/7/b/v/EeT+n/9f/H/3+0P/r//X/V5/+f5r+fwv9v/5f/6//Z6fm1v/n7n9u3NJk/wMAAEAHuftvjVvsfwAAABhG7v7nxS32PwAAAAwjd//z45Ym+1//7/1//b/+f1v/f+45VP2//n/+9P/T9P9b6P/1/xOf/+i/n47aQf9/8tz/qf9nDJfQ/585c+bGq97/5+5/QdzSZP8DAABAB7n7Xxi32P8AAAAwjNz9L4pb7H8AAAAYxl27//RqtXrxwY/67X/9f9P+P7/Vl9X/37Ra6f+9/6//1/9P0/9P0/9vof/X/3v/X//PTs3t/f/c/S+JW5rsfwAAAOggd/9L4xb7HwAAAIaRu/9lcYv9DwAAAMPI3f/yuKXJ/tf/N+3/vf+v/9f/H3f/f+dK/38sFtH/n77w1597/3+z/l//P6Fd//8v/3Toh/p//T/r5tb/5+5/RdzSZP8DAABAB7n7Xxm32P8AAAAwjNz9r4pb7H8AAAAYRu7+V8dN1zbZ//p//b/+X/+v/9/89Y/5/f8Tq9VK/78Di+j/J8y9/9/N+/9H/1d+jv5f/7/kz6//1/+zbm79f+7+18QtTfY/AAAAdJC7/7Vxi/0PAAAAw8jd/7q4xf4HAACAYeTuf33c0mT/6//1//p//f/w/f/Ni+j/vf+/I/r/afPo/y9M/6//X/Ln1//r/7l4++r/c/e/IW5psv8BAACgg9z9b4xb7H8AAAAYRu7+N8Ut9j8AAAAMI3f/m+OWJvtf/6//v5T+Pz+n/n+s/v/k7Pr/U4f+85q8/6//3xH9/7SL6f8Pvrf1//p//X/X/v8W/T+7NLf3/3P3vyVuabL/AQAAoIPc/W+NW/+vW/sfAAAAhpG7/21xi/0PAAAAw8jd//a4pcn+1//r/73/r/8f/v1//X8r+v9p3v/fQv+v/9f/e/+fnZpb/5+7/x1xS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+2+LW5rsf/2//l//r//X/5/9e6j/H4P+f9rx9P+n9f/6/+rn/yr+V6D/1/9v+/WMaW79f+7+d8ctTfY/AAAAdJC7/z1xi/0PAAAAw8jd/964xf4HAACARbp2w8/l7n9f3NJk/+v/9f/6f/2//n/z19f/L9Ne+v/8ptD/e/8/9On//+7Qj5b2/v/Rf3/p//X/7N7c+v/c/e+PW5rsfwAAAOggd/8H4hb7HwAAAIaRu/+DcYv9DwAAAMPI3f+huKXJ/tf/6//1//p//f/mr6//Xybv/0/T/2+h/9/r+/lL//z6f/0/6+bW/+fu/3Dc0mT/AwAAQAe5+z8St9j/AAAAMIzc/R+NW+x/AAAAGMbB7s+4rOH+1//r//X/+n/9/+avr/9fJv3/NP3/Fvp//b/+X//PTs2t///Ywa86tfp43NJk/wMAAEAHufs/EbfY/wAAADCM3P2fjFvsfwAAABhG7v5PxS1N9r/+X/+/jP7/zJkzN+r/9f+Hfz/n+v/b9f8U/f80/f8W+n/9v/5f/89Oza3/z93/6bilyf4HAACADnL3fyZusf8BAABgGLn7Pxu32P8AAAAwjNz9n4tbmux//f8M+v9T+n/v/+v/V97/X+//rzn7D2X9/6XR/0/T/28xYv9/6uJ/+/vu56/Uvj+//l//z7q59f+5+z8ftzTZ/wAAANBB7v4vxC32PwAAAAwjd/8X4xb7HwAAAIaRu/9LcUuT/a//P77+/67/7rq8/396tfnz6//1//p/7/9fbfr/afr/LUbs/y/Bvvv5pX9+/b/+n3Vz6/9z9385bjk8/K67tN8lAAAAMCe5+78StzT5838AAADoIHf/V+MW+x8AAACGkbv/a3FLk/2v/5/B+/8D9v/e/9/8/aH/n3X/f43+fwz6/2n6/y30//p//f+O+v/8btb/dze3/j93/9fjlib7HwAAADrI3f+NuMX+BwAAgGHk7v9m3GL/AwAAwDBy998et5y3/ze13aPQ/+v/9f/6f/3/5q+v/18m/f+0i+3/T66urP9P7fv/U2v/+fr/q2jfn1//7/1/1s2t/8/d/624xZ//AwAAwOJcd4Gfz93/7bjF/gcAAIBh5O7/Ttxi/wMAAMAwcvd/N26545p9faRjpf/X/+v/9f/6/81fX/+/TPr/ad7/38L7/7vo56/X/4/R/69W+n+u3Nz6/9z934tb/Pk/AAAADCN3//fjFvsfAAAAhpG7/wdxi/0PAAAAw8jd/8O4pcn+1//r/6+w/z9IM/X/Z+n/z9L/b6b/Px76/2n6/y30/97/1/97/5+dmlv/n7v/R3FLk/0PAAAAHeTu/3HcYv8DAADAMHL3/yRusf8BAABgGLn7fxq3NNn/e+v/479q/f/i+3/v/+v/9f/6/1nR/0/T/2+h/9f/6//1/+zU3Pr/3P0/i1ua7H8AAADoIHf/z+MW+x8AAACGkbv/F3GL/Q8AAADDyN3/y7ilyf73/r/+X/+v/9f/b/76+v9l0v9P0/9vVn+j9P/6f/2//p+dmlv/n7v/V3FLk/0PAAAAHeTu/3XcYv8DAADAMHL33xG32P8AAAAwjNz9v4lbmux//b/+X/+v/9f/b/76+v9l0v9P22f//69/s/3Lev9/7/1/fgT9v/5f/89OzK3/z93/27ilyf4HAACADnL3/y5usf8BAABgGLn7fx+32P8AAAAwjNz9f4hbmuz/Lf3/yfoL9f+T9P+HP7/+f/P3h/5f/6//v/r0/9O8/7+F/t/7//p//T87Nbf+P3f/H+OWJvsfAAAAOsjdf2fcYv8DAADAMHL3/ylusf8BAABgGLn7/xy3NNn/3v9fUv9/vf5f/6//1//r/7fQ/0/T/2+h/9f/6//1/+zU3Pr/3P1/CQAA//9POlBe") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) r2 = syz_open_dev$vcsu(&(0x7f0000000000), 0x4dfc, 0x22001) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000040)) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): entered blocking state [ 233.157664][ T5678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.204277][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.211511][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.277456][ T1169] usb 2-1: Using ep0 maxpacket: 8 [ 233.310860][ T1169] usb 2-1: config index 0 descriptor too short (expected 6427, got 27) [ 233.346830][ T1169] usb 2-1: config 0 has too many interfaces: 241, using maximum allowed: 32 [ 233.388131][ T1169] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 241 [ 233.402360][ T6943] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 233.416822][ T1169] usb 2-1: config 0 has no interface number 0 [ 233.459629][ T1169] usb 2-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 233.475541][ T6136] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.667485][ T1169] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 233.704768][ T1169] usb 2-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 233.836216][ T1169] usb 2-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 233.857505][ T1169] usb 2-1: New USB device strings: Mfr=228, Product=255, SerialNumber=0 [ 234.016512][ T7155] loop4: detected capacity change from 0 to 1024 [ 234.126450][ T1169] usb 2-1: Product: syz [ 234.144488][ T1169] usb 2-1: Manufacturer: syz [ 234.215316][ T1169] usb 2-1: config 0 descriptor?? [ 234.385535][ T7145] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 234.552520][ T7157] loop2: detected capacity change from 0 to 128 [ 234.652290][ T7157] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 234.748718][ T7157] ext4 filesystem being mounted at /17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 234.946691][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.984273][ T6136] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 235.092862][ T6943] veth0_vlan: entered promiscuous mode [ 235.173435][ T7169] netlink: 16 bytes leftover after parsing attributes in process `syz.1.294'. [ 235.320976][ T6943] veth1_vlan: entered promiscuous mode [ 235.426415][ T7167] loop4: detected capacity change from 0 to 40427 [ 235.439315][ T7167] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 235.447103][ T7167] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 235.481407][ T1169] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.21/input/input9 [ 235.506895][ T6943] veth0_macvtap: entered promiscuous mode [ 235.549908][ T7167] F2FS-fs (loop4): Found nat_bits in checkpoint [ 235.656001][ T7167] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 235.662705][ T6943] veth1_macvtap: entered promiscuous mode [ 235.663310][ T7167] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 235.721628][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 235.721650][ T29] audit: type=1804 audit(1722601504.347:61): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.299" name="/newroot/60/bus/file0" dev="loop4" ino=10 res=1 errno=0 [ 235.746458][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.769766][ T7165] F2FS-fs (loop4): Stopped filesystem due to reason: 0 [ 235.797204][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.807759][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.818825][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.829693][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.842517][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.855982][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.878122][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.906365][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 235.937366][ T7165] sp0: Synchronizing with TNC [ 235.945424][ T7167] sp0: Found TNC [ 235.947697][ T25] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 235.975987][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.001050][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.049713][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.074405][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.094619][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.113762][ T7164] [U] è` [ 236.121848][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.146455][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.166104][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.177997][ T25] usb 1-1: Using ep0 maxpacket: 16 [ 236.180686][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.186762][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 236.212924][ T25] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 236.231999][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.265128][ T6943] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.282819][ T25] usb 1-1: config 0 descriptor?? [ 236.297518][ T6943] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.306384][ T6943] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.319031][ T25] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input10 [ 236.338786][ T6943] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.482289][ T7183] loop2: detected capacity change from 0 to 1024 [ 236.704435][ T7183] syz.2.302: attempt to access beyond end of device [ 236.704435][ T7183] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 236.768625][ T2505] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.805025][ T2505] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.825032][ T7183] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 236.883167][ T7183] syz.2.302: attempt to access beyond end of device [ 236.883167][ T7183] loop2: rw=0, sector=201326592, nr_sectors = 2 limit=1024 [ 236.959184][ T1840] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.990222][ T7183] Buffer I/O error on dev loop2, logical block 100663296, async page read [ 237.001611][ T1840] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.733492][ T4667] bcm5974 1-1:0.0: could not read from device [ 238.839015][ T25] usb 1-1: USB disconnect, device number 5 [ 238.849144][ T4667] bcm5974 1-1:0.0: could not read from device [ 238.937674][ T5281] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 238.997375][ C0] hrtimer: interrupt took 140730 ns [ 239.191258][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.261014][ T5281] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.324630][ T5281] usb 4-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 239.355408][ C0] keyspan_remote 2-1:0.21: keyspan_irq_recv - usb_submit_urb failed with result: -19 [ 239.372624][ T49] usb 2-1: USB disconnect, device number 5 [ 239.394396][ T5281] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.437058][ T5281] usb 4-1: config 0 descriptor?? [ 239.437613][ T7209] loop4: detected capacity change from 0 to 2048 [ 239.582955][ T7209] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.749834][ T29] audit: type=1800 audit(1722601508.367:62): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.308" name="bus" dev="loop4" ino=18 res=0 errno=0 [ 239.802318][ T7225] loop1: detected capacity change from 0 to 16 [ 239.828089][ T29] audit: type=1804 audit(1722601508.367:63): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.308" name="/newroot/62/file0/bus" dev="loop4" ino=18 res=1 errno=0 [ 239.849726][ T7209] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters [ 239.887753][ T7225] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 239.911114][ T5281] wacom 0003:056A:0018.0004: Unknown device_type for 'HID 056a:0018'. Assuming pen. [ 239.916084][ T7209] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 239.944765][ T5281] wacom 0003:056A:0018.0004: hidraw0: USB HID v0.00 Device [HID 056a:0018] on usb-dummy_hcd.3-1/input0 [ 239.954887][ T29] audit: type=1804 audit(1722601508.407:64): pid=7209 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.308" name="/newroot/62/file0/file1" dev="loop4" ino=15 res=1 errno=0 [ 239.982730][ T5281] input: Wacom BambooFun 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0018.0004/input/input11 [ 240.007465][ T7209] EXT4-fs (loop4): This should not happen!! Data will be lost [ 240.007465][ T7209] [ 240.062657][ T7209] EXT4-fs (loop4): Total free blocks count 0 [ 240.128313][ T7209] EXT4-fs (loop4): Free/Dirty block details [ 240.178051][ T7209] EXT4-fs (loop4): free_blocks=66060288 [ 240.183703][ T7209] EXT4-fs (loop4): dirty_blocks=64 [ 240.224826][ T7209] EXT4-fs (loop4): Block reservation details [ 240.232221][ T7209] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 240.345066][ T7230] netlink: 44 bytes leftover after parsing attributes in process `syz.1.311'. [ 240.406305][ T2505] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 241.770131][ T1169] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 242.323355][ T5279] usb 4-1: USB disconnect, device number 3 [ 242.331517][ T1169] usb 3-1: Using ep0 maxpacket: 16 [ 242.373141][ T1169] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 242.420983][ T1169] usb 3-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 242.463323][ T1169] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.543703][ T1169] usb 3-1: config 0 descriptor?? [ 242.573253][ T1169] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 242.768279][ T7258] loop4: detected capacity change from 0 to 256 [ 243.399555][ T7270] loop1: detected capacity change from 0 to 512 [ 243.642522][ T7270] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 243.650058][ T7270] UDF-fs: Scanning with blocksize 512 failed [ 243.659715][ T7270] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 243.667185][ T7270] UDF-fs: Scanning with blocksize 1024 failed [ 243.678045][ T7270] UDF-fs: warning (device loop1): udf_load_vrs: No VRS found [ 243.685519][ T7270] UDF-fs: Scanning with blocksize 2048 failed [ 243.696950][ T7270] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 243.713650][ T7270] UDF-fs: error (device loop1): udf_read_inode: (ino 28) failed !bh [ 243.724027][ T7270] UDF-fs: Scanning with blocksize 4096 failed [ 244.154719][ T4667] bcm5974 3-1:0.0: could not read from device [ 244.218932][ T4667] bcm5974 3-1:0.0: could not read from device [ 244.243122][ T1169] usb 3-1: USB disconnect, device number 6 [ 244.374656][ T7278] loop2: detected capacity change from 0 to 64 [ 244.976540][ T7283] loop1: detected capacity change from 0 to 4096 [ 245.049260][ T7283] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512). [ 245.752457][ T7279] loop4: detected capacity change from 0 to 40427 [ 245.795579][ T7279] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 245.826135][ T7279] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 245.838417][ T7298] program syz.1.335 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 245.891872][ T7279] F2FS-fs (loop4): Found nat_bits in checkpoint [ 245.957604][ T5310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 246.115704][ T7279] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 246.176402][ T7279] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 246.299609][ T7279] Cannot find add_set index 0 as target [ 247.295377][ T5310] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 247.315303][ T5310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.337381][ T5310] usb 4-1: Product: syz [ 247.341611][ T5310] usb 4-1: Manufacturer: syz [ 247.346232][ T5310] usb 4-1: SerialNumber: syz [ 247.444057][ T59] IPVS: starting estimator thread 0... [ 247.456179][ T5310] usb 4-1: config 0 descriptor?? [ 247.596078][ T7317] IPVS: using max 17 ests per chain, 40800 per kthread [ 248.126790][ T7296] process 'syz.3.334' launched './file0' with NULL argv: empty string added [ 248.144158][ T7329] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 248.188582][ T5310] usb 4-1: Firmware version (0.0) predates our first public release. [ 248.188646][ T5310] usb 4-1: Please update to version 0.2 or newer [ 248.252079][ T7335] FAULT_INJECTION: forcing a failure. [ 248.252079][ T7335] name failslab, interval 1, probability 0, space 0, times 0 [ 248.252104][ T7335] CPU: 0 UID: 0 PID: 7335 Comm: syz.2.343 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 248.252122][ T7335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 248.252140][ T7335] Call Trace: [ 248.252147][ T7335] [ 248.252154][ T7335] dump_stack_lvl+0x241/0x360 [ 248.252176][ T7335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 248.252191][ T7335] ? __pfx__printk+0x10/0x10 [ 248.252215][ T7335] ? __kmalloc_node_noprof+0xb7/0x440 [ 248.252235][ T7335] ? __pfx___might_resched+0x10/0x10 [ 248.252260][ T7335] should_fail_ex+0x3b0/0x4e0 [ 248.252280][ T7335] should_failslab+0xac/0x100 [ 248.252299][ T7335] __kmalloc_node_noprof+0xdf/0x440 [ 248.252318][ T7335] ? __kvmalloc_node_noprof+0x72/0x190 [ 248.252337][ T7335] __kvmalloc_node_noprof+0x72/0x190 [ 248.252353][ T7335] con_get_unimap+0x3b/0x3f0 [ 248.252378][ T7335] vt_ioctl+0x19d2/0x2090 [ 248.252402][ T7335] ? vt_ioctl+0x61/0x2090 [ 248.252422][ T7335] ? __pfx_vt_ioctl+0x10/0x10 [ 248.252449][ T7335] ? __fget_files+0x29/0x470 [ 248.252466][ T7335] ? tty_jobctrl_ioctl+0x36e/0xba0 [ 248.252485][ T7335] ? __fget_files+0x29/0x470 [ 248.252503][ T7335] tty_ioctl+0x915/0xdc0 [ 248.252524][ T7335] ? security_file_ioctl+0x87/0xb0 [ 248.252560][ T7335] ? __pfx_tty_ioctl+0x10/0x10 [ 248.252598][ T7335] __se_sys_ioctl+0xfc/0x170 [ 248.252638][ T7335] do_syscall_64+0xf3/0x230 [ 248.252656][ T7335] ? clear_bhb_loop+0x35/0x90 [ 248.252678][ T7335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.252700][ T7335] RIP: 0033:0x7fad3fd773b9 [ 248.252715][ T7335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.252729][ T7335] RSP: 002b:00007fad40ba5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 248.252747][ T7335] RAX: ffffffffffffffda RBX: 00007fad3ff05f80 RCX: 00007fad3fd773b9 [ 248.252760][ T7335] RDX: 00000000200000c0 RSI: 0000000000004b66 RDI: 0000000000000003 [ 248.252771][ T7335] RBP: 00007fad40ba50a0 R08: 0000000000000000 R09: 0000000000000000 [ 248.252782][ T7335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.252792][ T7335] R13: 000000000000000b R14: 00007fad3ff05f80 R15: 00007ffc5d68cec8 [ 248.252814][ T7335] [ 248.306308][ T5310] usb 4-1: USB disconnect, device number 4 [ 248.465303][ T7341] loop4: detected capacity change from 0 to 1024 [ 248.487587][ T7341] hfsplus: bad catalog entry used to create inode [ 248.487881][ T7341] hfsplus: failed to load root directory [ 249.012796][ T7348] netlink: 52 bytes leftover after parsing attributes in process `syz.3.347'. [ 249.042283][ T7350] FAULT_INJECTION: forcing a failure. [ 249.042283][ T7350] name failslab, interval 1, probability 0, space 0, times 0 [ 249.042378][ T7350] CPU: 0 UID: 0 PID: 7350 Comm: syz.4.348 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 249.042407][ T7350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 249.042422][ T7350] Call Trace: [ 249.042433][ T7350] [ 249.042444][ T7350] dump_stack_lvl+0x241/0x360 [ 249.042477][ T7350] ? __pfx_dump_stack_lvl+0x10/0x10 [ 249.042501][ T7350] ? __pfx__printk+0x10/0x10 [ 249.042543][ T7350] ? ref_tracker_alloc+0x332/0x490 [ 249.042575][ T7350] should_fail_ex+0x3b0/0x4e0 [ 249.042604][ T7350] ? skb_clone+0x20c/0x390 [ 249.042634][ T7350] should_failslab+0xac/0x100 [ 249.042662][ T7350] ? skb_clone+0x20c/0x390 [ 249.042691][ T7350] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 249.042726][ T7350] skb_clone+0x20c/0x390 [ 249.042761][ T7350] __netlink_deliver_tap+0x3cc/0x7c0 [ 249.042799][ T7350] ? netlink_deliver_tap+0x2e/0x1b0 [ 249.042822][ T7350] netlink_deliver_tap+0x19d/0x1b0 [ 249.042848][ T7350] netlink_unicast+0x7c4/0x990 [ 249.042892][ T7350] ? __pfx_netlink_unicast+0x10/0x10 [ 249.042923][ T7350] ? __virt_addr_valid+0x183/0x530 [ 249.042950][ T7350] ? __check_object_size+0x49c/0x900 [ 249.042977][ T7350] ? bpf_lsm_netlink_send+0x9/0x10 [ 249.043020][ T7350] netlink_sendmsg+0x8e4/0xcb0 [ 249.043058][ T7350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.043086][ T7350] ? __import_iovec+0x536/0x820 [ 249.043116][ T7350] ? aa_sock_msg_perm+0x91/0x160 [ 249.043148][ T7350] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 249.043169][ T7350] ? security_socket_sendmsg+0x87/0xb0 [ 249.043197][ T7350] ? __pfx_netlink_sendmsg+0x10/0x10 [ 249.043220][ T7350] __sock_sendmsg+0x221/0x270 [ 249.043259][ T7350] ____sys_sendmsg+0x525/0x7d0 [ 249.043299][ T7350] ? __pfx_____sys_sendmsg+0x10/0x10 [ 249.043353][ T7350] __sys_sendmsg+0x2b0/0x3a0 [ 249.043385][ T7350] ? __pfx___sys_sendmsg+0x10/0x10 [ 249.043412][ T7350] ? vfs_write+0x7c4/0xc90 [ 249.043493][ T7350] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 249.043539][ T7350] ? do_syscall_64+0x100/0x230 [ 249.043564][ T7350] ? do_syscall_64+0xb6/0x230 [ 249.043589][ T7350] do_syscall_64+0xf3/0x230 [ 249.043612][ T7350] ? clear_bhb_loop+0x35/0x90 [ 249.043641][ T7350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.043667][ T7350] RIP: 0033:0x7f08413773b9 [ 249.043687][ T7350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.043707][ T7350] RSP: 002b:00007f0840dff048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 249.043733][ T7350] RAX: ffffffffffffffda RBX: 00007f0841505f80 RCX: 00007f08413773b9 [ 249.043750][ T7350] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 249.043766][ T7350] RBP: 00007f0840dff0a0 R08: 0000000000000000 R09: 0000000000000000 [ 249.043781][ T7350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.043795][ T7350] R13: 000000000000000b R14: 00007f0841505f80 R15: 00007ffc0e1acc08 [ 249.043830][ T7350] [ 249.340820][ T7348] loop3: detected capacity change from 0 to 32768 [ 249.348598][ T7348] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.347 (7348) [ 249.385963][ T7348] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 249.386077][ T7348] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 249.386138][ T7348] BTRFS info (device loop3): using free-space-tree [ 250.396229][ T7372] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 250.472532][ T6943] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 251.348017][ T7376] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 251.508326][ T7379] fuse: Bad value for 'rootmode' [ 251.919289][ T29] audit: type=1326 audit(1722601520.547:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz.4.353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f08413773b9 code=0x0 [ 252.307421][ T5240] Bluetooth: hci0: command 0x0401 tx timeout [ 252.475154][ T7391] loop4: detected capacity change from 0 to 40427 [ 252.514243][ T7391] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 252.514271][ T7391] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 252.519338][ T7391] F2FS-fs (loop4): invalid crc value [ 252.597889][ T7391] F2FS-fs (loop4): Found nat_bits in checkpoint [ 252.658177][ T7391] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 252.658213][ T7391] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 252.728230][ T7387] syz.4.353: attempt to access beyond end of device [ 252.728230][ T7387] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 253.277534][ T59] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 253.343738][ T5577] syz-executor: attempt to access beyond end of device [ 253.343738][ T5577] loop4: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 253.398848][ T5577] F2FS-fs (loop4): Issue discard(5637, 5637, 1) failed, ret: -5 [ 253.503497][ T59] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 253.528491][ T59] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.575081][ T59] usb 2-1: Product: syz [ 253.596440][ T59] usb 2-1: Manufacturer: syz [ 253.614385][ T59] usb 2-1: SerialNumber: syz [ 253.645764][ T59] usb 2-1: config 0 descriptor?? [ 254.387565][ T5240] Bluetooth: hci0: command 0x0401 tx timeout [ 254.842911][ T59] usb 2-1: Firmware version (0.0) predates our first public release. [ 254.863779][ T59] usb 2-1: Please update to version 0.2 or newer [ 254.960343][ T59] usb 2-1: USB disconnect, device number 6 [ 255.921491][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.934629][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.382659][ T5240] Bluetooth: hci3: command 0x0406 tx timeout [ 258.444345][ T7456] netlink: 'syz.1.368': attribute type 11 has an invalid length. [ 259.916233][ T7465] loop4: detected capacity change from 0 to 2048 [ 259.968717][ T7465] nilfs2: Unknown parameter 'oúÄå1ZJ“$rder' [ 260.320403][ T7446] loop2: detected capacity change from 0 to 32768 [ 260.536383][ T29] audit: type=1800 audit(1722601529.157:66): pid=7446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.365" name="bus" dev="loop2" ino=7 res=0 errno=0 [ 260.736509][ T7456] loop1: detected capacity change from 0 to 32768 [ 264.406186][ T7493] loop1: detected capacity change from 0 to 64 [ 264.725132][ T5310] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 264.816957][ T7493] loop1: detected capacity change from 0 to 4096 [ 264.866847][ T7493] ntfs3: Unknown parameter 'iochars;’ì\W|¨³set' [ 264.969932][ T5310] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 265.001444][ T5310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 265.040434][ T5310] usb 3-1: Product: syz [ 265.044661][ T5310] usb 3-1: Manufacturer: syz [ 265.054981][ T7493] syz.1.379[7493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.055080][ T7493] syz.1.379[7493] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 265.099075][ T5310] usb 3-1: SerialNumber: syz [ 265.324753][ T5310] usb 3-1: config 0 descriptor?? [ 265.447867][ T7493] hub 6-0:1.0: USB hub found [ 265.467586][ T7493] hub 6-0:1.0: 1 port detected [ 266.877945][ T5310] usb 3-1: Firmware version (0.0) predates our first public release. [ 266.886097][ T5310] usb 3-1: Please update to version 0.2 or newer [ 266.957457][ T5240] Bluetooth: hci1: command 0x0405 tx timeout [ 267.036967][ T7511] loop4: detected capacity change from 0 to 40427 [ 267.059170][ T7511] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 267.067424][ T7511] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 267.078681][ T7511] F2FS-fs (loop4): invalid crc value [ 267.133496][ T7511] F2FS-fs (loop4): Found nat_bits in checkpoint [ 267.213054][ T7511] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 267.220224][ T7511] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 268.296757][ T5310] usb 3-1: USB disconnect, device number 7 [ 268.906672][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 269.886789][ C0] eth0: bad gso: type: 1, size: 1408 [ 269.996239][ T7550] fuse: blksize only supported for fuseblk [ 270.308930][ T7559] loop2: detected capacity change from 0 to 2048 [ 270.344689][ T7559] nilfs2: Unknown parameter 'oúÄå1ZJ“$rder' [ 271.698796][ T7569] Driver unsupported XDP return value 0 on prog (id 114) dev N/A, expect packet loss! [ 272.604858][ T7557] loop4: detected capacity change from 0 to 32768 [ 272.635159][ T7557] bcachefs (/dev/loop4): error validating superblock: Invalid time precision: 4294964992 (min 1, max 1000000000) [ 272.655559][ T7557] bcachefs: bch2_fs_get_tree() error: invalid_sb_time_precision [ 272.838318][ T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 272.944415][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 272.961025][ T7584] loop4: detected capacity change from 0 to 256 [ 272.981987][ T7584] exfat: Bad value for 'allow_utime' [ 273.076570][ T25] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 273.107544][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.115605][ T25] usb 4-1: Product: syz [ 273.145099][ T25] usb 4-1: Manufacturer: syz [ 273.155510][ T25] usb 4-1: SerialNumber: syz [ 273.171276][ T25] usb 4-1: config 0 descriptor?? [ 273.341926][ T7592] netlink: 104 bytes leftover after parsing attributes in process `syz.4.402'. [ 273.447493][ T7594] netlink: 'syz.4.402': attribute type 26 has an invalid length. [ 273.467122][ T29] audit: type=1326 audit(1722601542.087:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08413773b9 code=0x7fc00000 [ 273.539193][ T29] audit: type=1326 audit(1722601542.117:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f08413773b9 code=0x7fc00000 [ 273.892456][ T25] usb 4-1: Firmware version (0.0) predates our first public release. [ 273.926729][ T25] usb 4-1: Please update to version 0.2 or newer [ 274.041963][ T25] usb 4-1: USB disconnect, device number 5 [ 274.154036][ T29] audit: type=1326 audit(1722601542.777:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08413773b9 code=0x7fc00000 [ 274.208114][ T29] audit: type=1326 audit(1722601542.777:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f08413773b9 code=0x7fc00000 [ 274.283132][ T29] audit: type=1326 audit(1722601542.777:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7591 comm="syz.4.402" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f08413773b9 code=0x7fc00000 [ 274.452386][ C0] eth0: bad gso: type: 1, size: 1408 [ 274.483978][ T7605] loop4: detected capacity change from 0 to 512 [ 274.492999][ T7605] journal_path: Lookup failure for './bus' [ 274.503596][ T7605] EXT4-fs: error: could not find journal device path [ 274.774105][ T7605] loop4: detected capacity change from 0 to 2048 [ 275.008033][ T7605] EXT4-fs error (device loop4): __ext4_fill_super:5435: inode #2: comm syz.4.404: casefold flag without casefold feature [ 276.032184][ T7605] EXT4-fs (loop4): get root inode failed [ 276.039230][ T7605] EXT4-fs (loop4): mount failed [ 276.608835][ T7618] overlay: ./bus is not a directory [ 276.864405][ T7627] loop1: detected capacity change from 0 to 2048 [ 277.005625][ T7630] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 277.213828][ T7627] fuse: Bad value for 'fd' [ 277.347422][ T7627] loop1: detected capacity change from 2048 to 0 [ 277.389735][ T7631] syz.1.410: attempt to access beyond end of device [ 277.389735][ T7631] loop1: rw=0, sector=92, nr_sectors = 2 limit=0 [ 277.498247][ T7633] netlink: 'syz.0.411': attribute type 12 has an invalid length. [ 277.506044][ T7633] netlink: 132 bytes leftover after parsing attributes in process `syz.0.411'. [ 277.571283][ T7631] NILFS (loop1): I/O error reading meta-data file (ino=3, block-offset=130) [ 277.588507][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 277.617793][ T7631] syz.1.410: attempt to access beyond end of device [ 277.617793][ T7631] loop1: rw=0, sector=92, nr_sectors = 2 limit=0 [ 277.656087][ T7631] NILFS (loop1): I/O error reading meta-data file (ino=3, block-offset=130) [ 277.686712][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 277.705300][ T7642] loop4: detected capacity change from 0 to 2048 [ 277.733047][ T7631] NILFS error (device loop1): nilfs_readdir: bad page in #12 [ 277.758629][ T7642] loop4: p3 < > p4 < > [ 277.766087][ T7631] syz.1.410: attempt to access beyond end of device [ 277.766087][ T7631] loop1: rw=395265, sector=2040, nr_sectors = 2 limit=0 [ 277.766757][ C0] eth0: bad gso: type: 1, size: 1408 [ 277.790445][ T7642] loop4: partition table partially beyond EOD, truncated [ 277.807395][ T7631] Buffer I/O error on dev loop1, logical block 1020, lost sync page write [ 277.819891][ T7642] loop4: p3 start 4284289 is beyond EOD, truncated [ 277.837400][ T7631] NILFS (loop1): unable to write superblock: err=-5 [ 277.852242][ T7631] syz.1.410: attempt to access beyond end of device [ 277.852242][ T7631] loop1: rw=395265, sector=2, nr_sectors = 2 limit=0 [ 277.891209][ T7631] Buffer I/O error on dev loop1, logical block 1, lost sync page write [ 277.919323][ T7631] NILFS (loop1): unable to write superblock: err=-5 [ 277.935083][ T7642] mmap: syz.4.412 (7642) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 277.945629][ T7631] Remounting filesystem read-only [ 278.033030][ T5236] syz-executor: attempt to access beyond end of device [ 278.033030][ T5236] loop1: rw=0, sector=92, nr_sectors = 2 limit=0 [ 278.094058][ T5236] NILFS (loop1): I/O error reading meta-data file (ino=3, block-offset=130) [ 278.123702][ T5236] NILFS error (device loop1): nilfs_readdir: bad page in #12 [ 278.141465][ T5236] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer [ 278.160305][ T5236] NILFS (loop1): discard dirty page: offset=0, ino=2 [ 278.173030][ T5236] NILFS (loop1): discard dirty block: blocknr=18, size=1024 [ 278.203449][ T5236] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.214250][ T5236] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.234467][ T5236] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.244324][ T5236] NILFS (loop1): discard dirty page: offset=0, ino=6 [ 278.251591][ T5236] NILFS (loop1): discard dirty block: blocknr=35, size=1024 [ 278.259256][ T5236] NILFS (loop1): discard dirty block: blocknr=36, size=1024 [ 278.268913][ T5236] NILFS (loop1): discard dirty block: blocknr=37, size=1024 [ 278.278016][ T5236] NILFS (loop1): discard dirty block: blocknr=38, size=1024 [ 278.285364][ T5236] NILFS (loop1): discard dirty page: offset=4096, ino=6 [ 278.292997][ T5236] NILFS (loop1): discard dirty block: blocknr=39, size=1024 [ 278.300788][ T5236] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.310343][ T5236] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.319600][ T5236] NILFS (loop1): discard dirty block: blocknr=18446744073709551615, size=1024 [ 278.528498][ T5279] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 278.550237][ T4620] Bluetooth: hci2: command 0x0406 tx timeout [ 278.931023][ T5279] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 278.943748][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 278.975401][ T5279] usb 5-1: Product: syz [ 279.064888][ T59] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 279.847353][ T5279] usb 5-1: Manufacturer: syz [ 279.857406][ T5279] usb 5-1: SerialNumber: syz [ 279.881117][ T5279] usb 5-1: config 0 descriptor?? [ 279.929444][ T59] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 279.957058][ T59] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.981640][ T59] usb 3-1: Product: syz [ 279.997354][ T59] usb 3-1: Manufacturer: syz [ 280.003027][ T59] usb 3-1: SerialNumber: syz [ 280.017550][ T59] usb 3-1: config 0 descriptor?? [ 280.094972][ T7658] loop1: detected capacity change from 0 to 4096 [ 280.308014][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 280.578629][ T7673] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 280.627145][ T5279] usb 5-1: Firmware version (0.0) predates our first public release. [ 280.643793][ T5279] usb 5-1: Please update to version 0.2 or newer [ 280.700517][ T59] usb 3-1: Firmware version (0.0) predates our first public release. [ 280.709101][ T59] usb 3-1: Please update to version 0.2 or newer [ 280.792154][ T5279] usb 5-1: USB disconnect, device number 8 [ 280.793955][ T59] usb 3-1: USB disconnect, device number 8 [ 281.015333][ T7681] loop1: detected capacity change from 0 to 1024 [ 282.149429][ T59] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 282.988700][ T59] usb 1-1: Using ep0 maxpacket: 8 [ 283.021152][ T59] usb 1-1: config index 0 descriptor too short (expected 6427, got 27) [ 283.046461][ T59] usb 1-1: config 0 has an invalid interface number: 21 but max is 0 [ 283.073252][ T59] usb 1-1: config 0 has no interface number 0 [ 283.083661][ T59] usb 1-1: config 0 interface 21 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 283.120110][ T59] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 283.353054][ T59] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.210002][ T59] usb 1-1: config 0 descriptor?? [ 284.636919][ T7714] netlink: 'syz.1.431': attribute type 10 has an invalid length. [ 284.727904][ T7714] bridge0: port 3(team0) entered disabled state [ 284.764496][ T7714] team0: left allmulticast mode [ 284.780504][ T7714] team_slave_0: left allmulticast mode [ 284.788782][ T7714] team_slave_1: left allmulticast mode [ 284.807278][ T7714] team0: left promiscuous mode [ 284.813060][ T7714] team_slave_0: left promiscuous mode [ 284.837452][ T7714] team_slave_1: left promiscuous mode [ 284.844217][ T7714] bridge0: port 3(team0) entered disabled state [ 284.874331][ T7714] batman_adv: batadv0: Adding interface: team0 [ 284.883033][ T7714] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 284.914220][ T7714] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 284.969238][ T7717] netlink: 'syz.1.431': attribute type 10 has an invalid length. [ 284.977081][ T7717] netlink: 2 bytes leftover after parsing attributes in process `syz.1.431'. [ 285.029018][ T7717] team0: entered promiscuous mode [ 285.075692][ T7717] team_slave_0: entered promiscuous mode [ 285.118079][ T7717] team_slave_1: entered promiscuous mode [ 285.219424][ T7717] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.254736][ T7717] batman_adv: batadv0: Interface activated: team0 [ 285.261870][ T7717] batman_adv: batadv0: Interface deactivated: team0 [ 285.269325][ T7717] batman_adv: batadv0: Removing interface: team0 [ 285.351700][ T7721] loop3: detected capacity change from 0 to 4096 [ 285.412606][ T7714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.431'. [ 285.465456][ T7717] bridge0: port 3(team0) entered blocking state [ 285.478466][ T7717] bridge0: port 3(team0) entered disabled state [ 285.500304][ T7717] team0: entered allmulticast mode [ 285.507744][ T7717] team_slave_0: entered allmulticast mode [ 285.519302][ T7717] team_slave_1: entered allmulticast mode [ 285.567163][ T7717] bridge0: port 3(team0) entered blocking state [ 285.573645][ T7717] bridge0: port 3(team0) entered forwarding state [ 285.896431][ T7727] loop4: detected capacity change from 0 to 16 [ 285.946875][ T59] usb 1-1: can't set config #0, error -71 [ 285.997415][ T59] usb 1-1: USB disconnect, device number 6 [ 286.023294][ T7727] erofs: (device loop4): mounted with root inode @ nid 36. [ 289.855881][ C0] eth0: bad gso: type: 1, size: 1408 [ 290.293910][ T7752] loop4: detected capacity change from 0 to 2048 [ 290.317356][ T8] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 290.340242][ T7752] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 290.420475][ T7752] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 290.438619][ T5279] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 290.565819][ T8] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 290.584503][ T8] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.605871][ T8] usb 3-1: Product: syz [ 290.622440][ T8] usb 3-1: Manufacturer: syz [ 290.640916][ T8] usb 3-1: SerialNumber: syz [ 290.649863][ T8] usb 3-1: config 0 descriptor?? [ 290.657560][ T5279] usb 2-1: Using ep0 maxpacket: 16 [ 290.664988][ T5279] usb 2-1: New USB device found, idVendor=2770, idProduct=9050, bcdDevice=11.97 [ 290.675646][ T5279] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 290.691343][ T5577] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 290.709170][ T5279] usb 2-1: config 0 descriptor?? [ 290.735168][ T5279] gspca_main: sq905c-2.14.0 probing 2770:9050 [ 293.095022][ T8] usb 3-1: Firmware version (0.0) predates our first public release. [ 293.105048][ T8] usb 3-1: Please update to version 0.2 or newer [ 293.277396][ T5279] gspca_sq905c: sq905c_command: usb_control_msg failed (-71) [ 293.284914][ T5279] sq905c 2-1:0.0: probe with driver sq905c failed with error -71 [ 293.300554][ T59] usb 3-1: USB disconnect, device number 9 [ 293.339143][ T5279] usb 2-1: USB disconnect, device number 7 [ 293.554194][ T7780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.446'. [ 293.658320][ T7663] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 293.799884][ T7780] loop2: detected capacity change from 0 to 64 [ 293.877843][ T7663] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 293.902438][ T7663] usb 5-1: config 0 has no interface number 0 [ 293.934474][ T7663] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96 [ 293.966875][ T7663] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.047094][ T7663] usb 5-1: Product: syz [ 294.047122][ T7663] usb 5-1: Manufacturer: syz [ 294.047139][ T7663] usb 5-1: SerialNumber: syz [ 294.056861][ T7663] usb 5-1: config 0 descriptor?? [ 294.062097][ T7663] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (2013:0259) with 1 interfaces [ 294.062126][ T7663] cx231xx 5-1:0.1: Not found matching IAD interface [ 294.281692][ T7663] usb 5-1: USB disconnect, device number 9 [ 294.349988][ T7792] loop1: detected capacity change from 0 to 4096 [ 294.667555][ C0] eth0: bad gso: type: 1, size: 1408 [ 294.687679][ T7794] FAULT_INJECTION: forcing a failure. [ 294.687679][ T7794] name failslab, interval 1, probability 0, space 0, times 0 [ 294.747838][ T7794] CPU: 0 UID: 0 PID: 7794 Comm: syz.2.449 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 294.757996][ T7794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 294.768192][ T7794] Call Trace: [ 294.771503][ T7794] [ 294.774468][ T7794] dump_stack_lvl+0x241/0x360 [ 294.779195][ T7794] ? __pfx_dump_stack_lvl+0x10/0x10 [ 294.784436][ T7794] ? __pfx__printk+0x10/0x10 [ 294.789088][ T7794] ? __kmalloc_node_track_caller_noprof+0xb2/0x440 [ 294.795640][ T7794] ? __pfx___might_resched+0x10/0x10 [ 294.800975][ T7794] should_fail_ex+0x3b0/0x4e0 [ 294.805691][ T7794] should_failslab+0xac/0x100 [ 294.810398][ T7794] __kmalloc_node_track_caller_noprof+0xda/0x440 [ 294.816742][ T7794] ? p9_client_create+0x3eb/0x1040 [ 294.821873][ T7794] kmemdup_nul+0x30/0xa0 [ 294.826126][ T7794] p9_client_create+0x3eb/0x1040 [ 294.831095][ T7794] ? __pfx_p9_client_create+0x10/0x10 [ 294.836737][ T7794] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 294.842571][ T7794] ? __raw_spin_lock_init+0x45/0x100 [ 294.847878][ T7794] v9fs_session_init+0x1e4/0x1b80 [ 294.852959][ T7794] ? __pfx_v9fs_session_init+0x10/0x10 [ 294.858450][ T7794] ? __kasan_kmalloc+0x98/0xb0 [ 294.863232][ T7794] ? v9fs_mount+0xb2/0xaa0 [ 294.867656][ T7794] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 294.873219][ T7794] v9fs_mount+0xcf/0xaa0 [ 294.877481][ T7794] ? vfs_parse_fs_string+0x190/0x230 [ 294.882801][ T7794] ? kfree+0x4e/0x360 [ 294.886796][ T7794] ? __pfx_aa_get_newest_label+0x10/0x10 [ 294.892450][ T7794] ? __pfx_v9fs_mount+0x10/0x10 [ 294.897318][ T7794] ? vfs_parse_fs_string+0x190/0x230 [ 294.902636][ T7794] legacy_get_tree+0xee/0x190 [ 294.907339][ T7794] ? __pfx_v9fs_mount+0x10/0x10 [ 294.912206][ T7794] vfs_get_tree+0x90/0x2a0 [ 294.916634][ T7794] do_new_mount+0x2be/0xb40 [ 294.921243][ T7794] ? __pfx_do_new_mount+0x10/0x10 [ 294.926300][ T7794] __se_sys_mount+0x2d6/0x3c0 [ 294.931002][ T7794] ? __pfx___se_sys_mount+0x10/0x10 [ 294.936377][ T7794] ? do_syscall_64+0x100/0x230 [ 294.941148][ T7794] ? __x64_sys_mount+0x20/0xc0 [ 294.945922][ T7794] do_syscall_64+0xf3/0x230 [ 294.950426][ T7794] ? clear_bhb_loop+0x35/0x90 [ 294.955106][ T7794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.961003][ T7794] RIP: 0033:0x7fad3fd773b9 [ 294.965433][ T7794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 294.985042][ T7794] RSP: 002b:00007fad40ba5048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 294.993460][ T7794] RAX: ffffffffffffffda RBX: 00007fad3ff05f80 RCX: 00007fad3fd773b9 [ 295.001435][ T7794] RDX: 00000000200001c0 RSI: 0000000020000180 RDI: 0000000020000100 [ 295.009414][ T7794] RBP: 00007fad40ba50a0 R08: 0000000020000200 R09: 0000000000000000 [ 295.017398][ T7794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 295.025400][ T7794] R13: 000000000000000b R14: 00007fad3ff05f80 R15: 00007ffc5d68cec8 [ 295.033404][ T7794] [ 295.127696][ C0] eth0: bad gso: type: 1, size: 1408 [ 296.939015][ T7814] loop4: detected capacity change from 0 to 4096 [ 296.984944][ T7797] loop1: detected capacity change from 0 to 32768 [ 297.016770][ T7797] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.450 (7797) [ 297.109400][ T7797] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 297.127580][ T7663] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 297.141419][ T7797] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 297.209895][ T7797] BTRFS info (device loop1): using free-space-tree [ 297.382135][ T7663] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 297.414013][ T7663] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 297.485147][ T7663] usb 1-1: Product: syz [ 297.511847][ T7663] usb 1-1: Manufacturer: syz [ 297.522338][ T7798] loop3: detected capacity change from 0 to 32768 [ 297.538252][ T7663] usb 1-1: SerialNumber: syz [ 297.581489][ T7663] usb 1-1: config 0 descriptor?? [ 297.742820][ T7798] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 297.742820][ T7798] [ 297.839864][ T7798] ERROR: (device loop3): remounting filesystem as read-only [ 297.882130][ T7798] blkno = 0, nblocks = 1 [ 297.909488][ T7840] ERROR: (device loop3): dbAllocNext: Corrupt dmap page [ 297.909488][ T7840] [ 297.916408][ T7798] ERROR: (device loop3): dbFree: block to be freed is outside the map [ 297.916408][ T7798] [ 297.981559][ T7798] ialloc: diAlloc returned -5! [ 298.183859][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.2.459'. [ 298.231359][ T7663] usb 1-1: Firmware version (0.0) predates our first public release. [ 298.255680][ T7663] usb 1-1: Please update to version 0.2 or newer [ 298.316562][ T7846] loop2: detected capacity change from 0 to 64 [ 298.398455][ T7663] usb 1-1: USB disconnect, device number 7 [ 298.797287][ T5240] Bluetooth: hci2: command 0x0406 tx timeout [ 298.955719][ T5240] Bluetooth: hci0: command 0x0401 tx timeout [ 299.215108][ T7853] loop4: detected capacity change from 0 to 4096 [ 299.228384][ T5236] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 299.404469][ T7860] loop3: detected capacity change from 0 to 1024 [ 302.797203][ C0] eth0: bad gso: type: 1, size: 1408 [ 303.386000][ T7877] loop4: detected capacity change from 0 to 65536 [ 303.536795][ T7877] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 303.733256][ T7877] XFS (loop4): Ending clean mount [ 303.746533][ T7877] XFS (loop4): Quotacheck needed: Please wait. [ 303.936066][ T7877] XFS (loop4): Quotacheck: Done. [ 304.348726][ T7890] loop1: detected capacity change from 0 to 65536 [ 305.750904][ T7890] XFS (loop1): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 305.977914][ T7890] XFS (loop1): Ending clean mount [ 305.988640][ T7890] XFS (loop1): Quotacheck needed: Please wait. [ 306.067634][ T7890] XFS (loop1): Quotacheck: Done. [ 306.306412][ T5577] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 306.467818][ T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 306.481739][ T5236] XFS (loop1): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2 [ 308.348227][ T8] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 308.389168][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.442294][ T8] usb 4-1: Product: syz [ 308.446602][ T8] usb 4-1: Manufacturer: syz [ 308.487354][ T8] usb 4-1: SerialNumber: syz [ 308.535975][ T8] usb 4-1: config 0 descriptor?? [ 309.366972][ T7924] loop2: detected capacity change from 0 to 1024 [ 310.417190][ T8] usb 4-1: Firmware version (0.0) predates our first public release. [ 310.939030][ T8] usb 4-1: Please update to version 0.2 or newer [ 311.139247][ T8] usb 4-1: USB disconnect, device number 6 [ 311.261126][ T7947] netlink: 12 bytes leftover after parsing attributes in process `syz.2.481'. [ 311.431665][ T7950] loop3: detected capacity change from 0 to 256 [ 311.431867][ T7947] bond1: entered allmulticast mode [ 311.541052][ T7949] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 311.560874][ T7949] batadv1: entered allmulticast mode [ 311.565371][ T7950] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d) [ 311.577551][ T7949] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 311.595705][ T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 311.758889][ T7946] loop4: detected capacity change from 0 to 4096 [ 311.807382][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 311.830630][ T25] usb 2-1: config 0 has an invalid descriptor of length 54, skipping remainder of the config [ 311.867416][ T25] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.918007][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 56, changing to 9 [ 311.946881][ T25] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 8550, setting to 1024 [ 312.318057][ T7961] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 312.341401][ T25] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.726454][ T25] usb 2-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b5.89 [ 313.068138][ T7961] batman_adv: batadv0: Adding interface: team0 [ 313.162667][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.269132][ T7961] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.309846][ T25] usb 2-1: Product: syz [ 313.338974][ T7961] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 313.363087][ T25] usb 2-1: Manufacturer: syz [ 313.829424][ T25] usb 2-1: SerialNumber: syz [ 315.489009][ T7962] netlink: 'syz.2.484': attribute type 10 has an invalid length. [ 315.515970][ T25] usb 2-1: config 0 descriptor?? [ 317.367318][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.373736][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.553547][ T7962] netlink: 2 bytes leftover after parsing attributes in process `syz.2.484'. [ 317.568410][ T7962] team0: entered promiscuous mode [ 317.590137][ T25] usb 2-1: can't set config #0, error -71 [ 317.602270][ T25] usb 2-1: USB disconnect, device number 8 [ 317.637561][ T7962] team_slave_0: entered promiscuous mode [ 317.645179][ T7962] team_slave_1: entered promiscuous mode [ 317.672474][ T7962] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.688797][ T7962] batman_adv: batadv0: Interface activated: team0 [ 317.735885][ T7962] batman_adv: batadv0: Interface deactivated: team0 [ 317.754276][ T7962] batman_adv: batadv0: Removing interface: team0 [ 317.805924][ T7962] bridge0: port 3(team0) entered blocking state [ 317.817789][ T7962] bridge0: port 3(team0) entered disabled state [ 317.867977][ T7962] team0: entered allmulticast mode [ 317.876718][ T7962] team_slave_0: entered allmulticast mode [ 318.073323][ T7962] team_slave_1: entered allmulticast mode [ 318.627400][ C1] DEBUG: holding rtnl_mutex for 585 jiffies. [ 318.633413][ C1] task:syz.2.484 state:R running task stack:20952 pid:7962 tgid:7959 ppid:6136 flags:0x00004006 [ 318.645248][ C1] Call Trace: [ 318.648602][ C1] [ 318.651538][ C1] __schedule+0x1800/0x4a60 [ 318.656079][ C1] ? __pfx___schedule+0x10/0x10 [ 318.661005][ C1] ? prb_read_valid+0xa9/0xf0 [ 318.665705][ C1] ? preempt_schedule+0xe1/0xf0 [ 318.670628][ C1] preempt_schedule_common+0x84/0xd0 [ 318.675934][ C1] preempt_schedule+0xe1/0xf0 [ 318.680706][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 318.686083][ C1] ? _printk+0xd5/0x120 [ 318.690311][ C1] ? _printk+0xd5/0x120 [ 318.694473][ C1] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 318.700786][ C1] preempt_schedule_thunk+0x1a/0x30 [ 318.705993][ C1] ? vprintk_emit+0x7bb/0x900 [ 318.710757][ C1] ? vprintk_emit+0x828/0x900 [ 318.715454][ C1] vprintk_emit+0x82d/0x900 [ 318.720148][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 318.725200][ C1] ? __lock_acquire+0x1384/0x2050 [ 318.730304][ C1] _printk+0xd5/0x120 [ 318.734293][ C1] ? __netdev_printk+0x19e/0x4d0 [ 318.739302][ C1] ? __pfx__printk+0x10/0x10 [ 318.743899][ C1] ? __netdev_printk+0x30d/0x4d0 [ 318.748914][ C1] netdev_info+0x122/0x170 [ 318.753346][ C1] ? __dev_set_allmulti+0x19e/0x380 [ 318.758616][ C1] ? __pfx_netdev_info+0x10/0x10 [ 318.763556][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 318.769001][ C1] ? __dev_set_allmulti+0x220/0x380 [ 318.774218][ C1] ? dev_set_rx_mode+0x233/0x2e0 [ 318.779243][ C1] __dev_set_allmulti+0x1b0/0x380 [ 318.784273][ C1] team_change_rx_flags+0x1a8/0x330 [ 318.789543][ C1] ? team_change_rx_flags+0x29/0x330 [ 318.794830][ C1] ? __pfx_team_change_rx_flags+0x10/0x10 [ 318.800634][ C1] __dev_set_allmulti+0x20a/0x380 [ 318.805665][ C1] br_add_if+0x317/0xef0 [ 318.809973][ C1] ? __pfx_batadv_hardif_disable_interface+0x10/0x10 [ 318.816791][ C1] do_setlink+0xe73/0x41f0 [ 318.821292][ C1] ? _printk+0xd5/0x120 [ 318.825456][ C1] ? __nla_validate_parse+0x2660/0x3090 [ 318.831069][ C1] ? __pfx__printk+0x10/0x10 [ 318.835688][ C1] ? __pfx_do_setlink+0x10/0x10 [ 318.840575][ C1] ? rcu_is_watching+0x15/0xb0 [ 318.845335][ C1] ? do_trace_netlink_extack+0x8b/0x1f0 [ 318.850909][ C1] ? __nla_validate_parse+0x27eb/0x3090 [ 318.856475][ C1] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 318.862081][ C1] ? rtnl_newlink+0xe9/0x2070 [ 318.866786][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 318.872577][ C1] ? validate_linkmsg+0x71e/0x900 [ 318.877670][ C1] rtnl_newlink+0x17a9/0x2070 [ 318.882382][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.887458][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 318.892673][ C1] ? __mutex_lock+0x9a5/0xd70 [ 318.897407][ C1] ? __mutex_lock+0x527/0xd70 [ 318.902100][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 318.907132][ C1] rtnetlink_rcv_msg+0x744/0xd00 [ 318.912110][ C1] ? rtnetlink_rcv_msg+0x1a7/0xd00 [ 318.917299][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.922794][ C1] ? ref_tracker_free+0x643/0x7e0 [ 318.927864][ C1] netlink_rcv_skb+0x1e3/0x430 [ 318.932627][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 318.938155][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 318.943458][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 318.948690][ C1] netlink_unicast+0x7f6/0x990 [ 318.953461][ C1] ? irqentry_exit+0x63/0x90 [ 318.958121][ C1] ? __pfx_netlink_unicast+0x10/0x10 [ 318.963429][ C1] ? netlink_sendmsg+0x755/0xcb0 [ 318.968436][ C1] ? bpf_lsm_netlink_send+0x9/0x10 [ 318.973566][ C1] netlink_sendmsg+0x8e4/0xcb0 [ 318.978383][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 318.983678][ C1] ? __import_iovec+0x536/0x820 [ 318.988582][ C1] ? aa_sock_msg_perm+0x91/0x160 [ 318.993527][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 318.998849][ C1] ? security_socket_sendmsg+0x87/0xb0 [ 319.004320][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.009640][ C1] __sock_sendmsg+0x221/0x270 [ 319.014328][ C1] ____sys_sendmsg+0x525/0x7d0 [ 319.019154][ C1] ? __pfx_____sys_sendmsg+0x10/0x10 [ 319.024469][ C1] __sys_sendmsg+0x2b0/0x3a0 [ 319.029142][ C1] ? __pfx___sys_sendmsg+0x10/0x10 [ 319.034290][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.040667][ C1] ? do_syscall_64+0x100/0x230 [ 319.045435][ C1] ? do_syscall_64+0xb6/0x230 [ 319.050168][ C1] do_syscall_64+0xf3/0x230 [ 319.054671][ C1] ? clear_bhb_loop+0x35/0x90 [ 319.059404][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.065331][ C1] RIP: 0033:0x7fad3fd773b9 [ 319.069783][ C1] RSP: 002b:00007fad40b63048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.078242][ C1] RAX: ffffffffffffffda RBX: 00007fad3ff06130 RCX: 00007fad3fd773b9 [ 319.086221][ C1] RDX: 0000000025000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 319.094240][ C1] RBP: 00007fad3fde48e6 R08: 0000000000000000 R09: 0000000000000000 [ 319.102254][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.110265][ C1] R13: 000000000000006e R14: 00007fad3ff06130 R15: 00007ffc5d68cec8 [ 319.118292][ C1] [ 319.121312][ C1] [ 319.121312][ C1] Showing all locks held in the system: [ 319.129070][ C1] 3 locks held by kworker/u8:4/63: [ 319.134177][ C1] #0: ffff88802b28f948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 319.145815][ C1] #1: ffffc900015e7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 319.159536][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 319.169128][ C1] 3 locks held by kworker/u8:10/4576: [ 319.174513][ C1] 2 locks held by udevd/4682: [ 319.179231][ C1] 2 locks held by getty/4990: [ 319.183930][ C1] #0: ffff88802c2e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 319.193799][ C1] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 319.203973][ C1] 3 locks held by kworker/1:8/7663: [ 319.209247][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 319.220295][ C1] #1: ffffc9000d1a7d00 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 319.231323][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xe/0x20 [ 319.241749][ C1] 1 lock held by syz.0.480/7957: [ 319.246679][ C1] #0: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 319.257616][ C1] 2 locks held by syz.2.484/7962: [ 319.262632][ C1] 1 lock held by syz.2.484/7963: [ 319.267611][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6eb/0xd00 [ 319.277033][ C1] 1 lock held by udevd/7965: [ 319.281681][ C1] 2 locks held by syz.1.486/7969: [ 319.286715][ C1] #0: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 319.296883][ C1] #1: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 319.306803][ C1] 1 lock held by syz.1.486/7973: [ 319.311808][ C1] 3 locks held by syz.1.486/7974: [ 319.316918][ C1] [ 319.319293][ C1] ============================================= [ 319.319293][ C1] [ 320.387444][ C1] DEBUG: holding rtnl_mutex for 761 jiffies. [ 320.393505][ C1] task:syz.2.484 state:R running task stack:20952 pid:7962 tgid:7959 ppid:6136 flags:0x00004006 [ 320.405422][ C1] Call Trace: [ 320.408854][ C1] [ 320.411841][ C1] __schedule+0x1800/0x4a60 [ 320.416445][ C1] ? __pfx___schedule+0x10/0x10 [ 320.421475][ C1] ? prb_read_valid+0xa9/0xf0 [ 320.426230][ C1] ? preempt_schedule+0xe1/0xf0 [ 320.431250][ C1] ? mark_lock+0x9a/0x360 [ 320.432526][ T7962] bridge0: port 3(team0) entered blocking state [ 320.435632][ C1] ? console_unlock+0x13b/0x4d0 [ 320.442101][ T7962] bridge0: port 3(team0) entered forwarding state [ 320.446789][ C1] ? vprintk_emit+0x4ed/0x900 [ 320.446833][ C1] ? vprintk_emit+0x761/0x900 [ 320.462876][ C1] ? __schedule+0x1800/0x4a60 [ 320.467747][ C1] ? __pfx___schedule+0x10/0x10 [ 320.472706][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 320.478771][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 320.484723][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 320.491236][ C1] ? preempt_schedule+0xe1/0xf0 [ 320.496149][ C1] ? preempt_schedule_common+0x84/0xd0 [ 320.501778][ C1] ? preempt_schedule+0xe1/0xf0 [ 320.506687][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 320.512245][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 320.518398][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.524780][ C1] ? preempt_schedule_thunk+0x1a/0x30 [ 320.530326][ C1] ? mark_lock+0x9a/0x360 [ 320.534715][ C1] ? __local_bh_enable_ip+0x179/0x200 [ 320.540264][ C1] ? br_add_if+0xc3d/0xef0 [ 320.544726][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 320.550636][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 320.555907][ C1] ? nlmsg_notify+0xfb/0x1c0 [ 320.560675][ C1] ? br_add_if+0xc3d/0xef0 [ 320.565160][ C1] ? do_setlink+0xe73/0x41f0 [ 320.569935][ C1] ? _printk+0xd5/0x120 [ 320.574141][ C1] ? __nla_validate_parse+0x2660/0x3090 [ 320.579861][ C1] ? __pfx__printk+0x10/0x10 [ 320.584505][ C1] ? __pfx_do_setlink+0x10/0x10 [ 320.589513][ C1] ? rcu_is_watching+0x15/0xb0 [ 320.594325][ C1] ? do_trace_netlink_extack+0x8b/0x1f0 [ 320.600068][ C1] ? __nla_validate_parse+0x27eb/0x3090 [ 320.605658][ C1] ? __kmalloc_cache_noprof+0x19c/0x2c0 [ 320.611399][ C1] ? rtnl_newlink+0xe9/0x2070 [ 320.616142][ C1] ? __pfx___nla_validate_parse+0x10/0x10 [ 320.622085][ C1] ? validate_linkmsg+0x71e/0x900 [ 320.627166][ C1] ? rtnl_newlink+0x17a9/0x2070 [ 320.632176][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 320.637320][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 320.642656][ C1] ? __pfx_bstr_printf+0x10/0x10 [ 320.647730][ C1] ? mark_lock+0x9a/0x360 [ 320.652129][ C1] ? __lock_acquire+0x1384/0x2050 [ 320.657322][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 320.662401][ C1] ? psi_task_switch+0x441/0x770 [ 320.667458][ C1] ? __pfx_lock_release+0x10/0x10 [ 320.672567][ C1] ? __schedule+0x17bc/0x4a60 [ 320.677362][ C1] ? __pfx_lock_release+0x10/0x10 [ 320.682460][ C1] ? __schedule+0x1800/0x4a60 [ 320.687303][ C1] ? __pfx___schedule+0x10/0x10 [ 320.692210][ C1] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 320.698234][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 320.703496][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 320.709546][ C1] ? do_task_dead+0x39/0xd0 [ 320.714097][ C1] ? do_task_dead+0xc4/0xd0 [ 320.718707][ C1] ? do_exit+0x1e7c/0x27f0 [ 320.723227][ C1] ? __pfx_do_exit+0x10/0x10 [ 320.727932][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 320.733375][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 320.739508][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 320.745885][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 320.751138][ C1] ? do_group_exit+0x207/0x2c0 [ 320.755940][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 320.761259][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 320.766530][ C1] ? get_signal+0x16a1/0x1740 [ 320.771365][ C1] ? __pfx_get_signal+0x10/0x10 [ 320.776276][ C1] ? arch_do_signal_or_restart+0x96/0x830 [ 320.782124][ C1] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 320.788408][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 320.794457][ C1] ? syscall_exit_to_user_mode+0xa3/0x370 [ 320.800292][ C1] ? syscall_exit_to_user_mode+0xc9/0x370 [ 320.806130][ C1] ? do_syscall_64+0x100/0x230 [ 320.811071][ C1] ? clear_bhb_loop+0x35/0x90 [ 320.815844][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.822091][ C1] [ 320.825156][ C1] [ 320.825156][ C1] Showing all locks held in the system: [ 320.833203][ C1] 2 locks held by kworker/1:0/25: [ 320.838399][ C1] 2 locks held by getty/4990: [ 320.843113][ C1] #0: ffff88802c2e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 320.853045][ C1] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 320.863329][ C1] 3 locks held by kworker/1:8/7663: [ 320.868657][ C1] 1 lock held by syz.2.484/7963: [ 320.873627][ C1] 3 locks held by syz.1.486/7968: [ 320.878797][ C1] #0: ffff88802f108ec8 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 320.889236][ C1] #1: ffff88801eca0518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 320.899166][ C1] #2: ffff88801eca4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 320.908990][ C1] 3 locks held by syz.1.486/7973: [ 320.914055][ C1] #0: ffff88806263d580 (&u->iolock){+.+.}-{3:3}, at: __unix_dgram_recvmsg+0x246/0x12f0 [ 320.923990][ C1] #1: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 320.934290][ C1] #2: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 320.944314][ C1] 3 locks held by syz-executor/7978: [ 320.949712][ C1] #0: ffff88802e940c40 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 320.960186][ C1] #1: ffff88801eca0518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 320.970001][ C1] #2: ffff88801eca4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 320.979868][ C1] 3 locks held by syz-executor/7979: [ 320.985197][ C1] #0: ffff888030a708e0 (&vma->vm_lock->lock){++++}-{3:3}, at: lock_vma_under_rcu+0x2f9/0x6e0 [ 320.995788][ C1] #1: ffff88801eca0518 (sb_pagefaults){.+.+}-{0:0}, at: ext4_page_mkwrite+0x1f0/0xdf0 [ 321.005630][ C1] #2: ffff88801eca4958 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0x1e94/0x2110 [ 321.015500][ C1] [ 321.017950][ C1] ============================================= [ 321.017950][ C1] [ 322.248334][ T7995] loop1: detected capacity change from 0 to 1024 [ 322.777575][ T59] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 322.812506][ T25] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 323.027858][ T59] usb 4-1: Using ep0 maxpacket: 32 [ 323.127721][ T25] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 323.147354][ T59] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 323.181981][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.203515][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 323.237358][ T25] usb 3-1: Product: syz [ 323.241669][ T25] usb 3-1: Manufacturer: syz [ 323.276638][ T59] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 323.292230][ T25] usb 3-1: SerialNumber: syz [ 323.322434][ T25] usb 3-1: config 0 descriptor?? [ 323.330938][ T59] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 323.414416][ T59] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.463759][ T59] usb 4-1: config 0 descriptor?? [ 323.487105][ T7993] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 323.509722][ T59] hub 4-1:0.0: USB hub found [ 323.541520][ T8003] loop1: detected capacity change from 0 to 64 [ 323.712418][ T59] hub 4-1:0.0: 2 ports detected [ 323.722119][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.0.496'. [ 323.744193][ T8005] tipc: Enabling of bearer rejected, failed to enable media [ 323.932098][ T8007] usb usb7: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 323.939721][ T8007] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 324.067731][ T25] usb 3-1: Firmware version (0.0) predates our first public release. [ 324.075970][ T25] usb 3-1: Please update to version 0.2 or newer [ 324.082977][ T59] hub 4-1:0.0: set hub depth failed [ 324.111612][ T59] usb 4-1: USB disconnect, device number 7 [ 324.250170][ T25] usb 3-1: USB disconnect, device number 10 [ 325.489197][ T8031] netlink: 6 bytes leftover after parsing attributes in process `syz.2.501'. [ 325.512978][ T8003] loop1: detected capacity change from 0 to 32768 [ 325.601170][ T8031] loop2: detected capacity change from 0 to 2048 [ 325.618084][ T8031] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 325.629314][ T8031] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 325.646902][ T8031] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 325.695893][ T8031] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 327.180070][ T8049] FAULT_INJECTION: forcing a failure. [ 327.180070][ T8049] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.217454][ T8049] CPU: 1 UID: 0 PID: 8049 Comm: syz.2.507 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 327.227611][ T8049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 327.237702][ T8049] Call Trace: [ 327.241002][ T8049] [ 327.243941][ T8049] dump_stack_lvl+0x241/0x360 [ 327.248641][ T8049] ? __pfx_dump_stack_lvl+0x10/0x10 [ 327.253853][ T8049] ? __pfx__printk+0x10/0x10 [ 327.258466][ T8049] ? __pfx_lock_release+0x10/0x10 [ 327.263506][ T8049] ? vfs_write+0x7c4/0xc90 [ 327.267958][ T8049] should_fail_ex+0x3b0/0x4e0 [ 327.272736][ T8049] _copy_from_user+0x2f/0xe0 [ 327.277357][ T8049] __sys_bpf+0x1a4/0x810 [ 327.281632][ T8049] ? __pfx___sys_bpf+0x10/0x10 [ 327.286442][ T8049] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 327.292441][ T8049] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 327.298791][ T8049] ? do_syscall_64+0x100/0x230 [ 327.303654][ T8049] __x64_sys_bpf+0x7c/0x90 [ 327.308086][ T8049] do_syscall_64+0xf3/0x230 [ 327.312595][ T8049] ? clear_bhb_loop+0x35/0x90 [ 327.317284][ T8049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.323190][ T8049] RIP: 0033:0x7fad3fd773b9 [ 327.327614][ T8049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.347230][ T8049] RSP: 002b:00007fad40ba5048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.355654][ T8049] RAX: ffffffffffffffda RBX: 00007fad3ff05f80 RCX: 00007fad3fd773b9 [ 327.363635][ T8049] RDX: 0000000000000050 RSI: 0000000020000280 RDI: 000000000000000a [ 327.371700][ T8049] RBP: 00007fad40ba50a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.379686][ T8049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 327.387672][ T8049] R13: 000000000000000b R14: 00007fad3ff05f80 R15: 00007ffc5d68cec8 [ 327.395664][ T8049] [ 327.467429][ T7663] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 327.627898][ T7663] usb 4-1: device descriptor read/64, error -71 [ 327.767573][ T25] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 327.826230][ T8056] loop2: detected capacity change from 0 to 4096 [ 327.897409][ T7663] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 327.969569][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 327.999483][ T25] usb 1-1: config 0 has no interfaces? [ 328.012378][ T8033] loop4: detected capacity change from 0 to 32768 [ 328.027605][ T25] usb 1-1: New USB device found, idVendor=056a, idProduct=00dd, bcdDevice= 0.00 [ 328.048480][ T8033] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.502 (8033) [ 328.063084][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.077495][ T7663] usb 4-1: device descriptor read/64, error -71 [ 328.096930][ T25] usb 1-1: config 0 descriptor?? [ 328.156626][ T8033] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 328.196395][ T8033] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 328.217871][ T7663] usb usb4-port1: attempt power cycle [ 328.238209][ T8033] BTRFS info (device loop4): using free-space-tree [ 328.491029][ T8033] BTRFS info (device loop4): rebuilding free space tree [ 328.647359][ T7663] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 328.714493][ T7663] usb 4-1: device descriptor read/8, error -71 [ 328.790541][ T5577] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 328.887809][ T1185] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 328.997618][ T7663] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 329.069108][ T7663] usb 4-1: device descriptor read/8, error -71 [ 329.101935][ T1185] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 329.131905][ T1185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.169773][ T1185] usb 3-1: Product: syz [ 329.184393][ T1185] usb 3-1: Manufacturer: syz [ 329.194934][ T1185] usb 3-1: SerialNumber: syz [ 329.200360][ T7663] usb usb4-port1: unable to enumerate USB device [ 329.217808][ T1185] usb 3-1: config 0 descriptor?? [ 329.651745][ T1169] usb 1-1: USB disconnect, device number 8 [ 329.866622][ T8095] loop4: detected capacity change from 0 to 64 [ 329.938056][ T1185] usb 3-1: Firmware version (0.0) predates our first public release. [ 329.964251][ T1185] usb 3-1: Please update to version 0.2 or newer [ 330.056351][ T1185] usb 3-1: USB disconnect, device number 11 [ 331.628975][ T8111] loop2: detected capacity change from 0 to 2048 [ 331.805930][ T8111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 331.824911][ T8111] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 331.868251][ T8114] netlink: 32 bytes leftover after parsing attributes in process `syz.0.521'. [ 333.917136][ T8127] netlink: 148 bytes leftover after parsing attributes in process `syz.3.523'. [ 333.932338][ T8127] loop3: detected capacity change from 0 to 512 [ 333.939611][ T8127] EXT4-fs: Ignoring removed mblk_io_submit option [ 333.962291][ T8127] EXT4-fs (loop3): can't mount with data=, fs mounted w/o journal [ 335.012248][ T6136] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.564445][ T8156] overlayfs: missing 'lowerdir' [ 335.778927][ T8156] 9pnet_fd: Insufficient options for proto=fd [ 336.917400][ T1185] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 337.063647][ T8145] loop4: detected capacity change from 0 to 40427 [ 337.095321][ T8145] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 337.122661][ T8145] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 337.133535][ T8145] F2FS-fs (loop4): Unrecognized mount option "0xffffffffffffffff" or missing value [ 337.145622][ T1185] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 337.160432][ T1185] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.174324][ T1185] usb 1-1: Product: syz [ 337.182606][ T1185] usb 1-1: Manufacturer: syz [ 337.194422][ T1185] usb 1-1: SerialNumber: syz [ 337.365630][ T1185] usb 1-1: config 0 descriptor?? [ 337.427893][ T5310] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 337.629462][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.757727][ T5310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.778023][ T5310] usb 3-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 337.787125][ T5310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.805467][ T5310] usb 3-1: config 0 descriptor?? [ 338.046555][ T5310] a4tech 0003:09DA:022B.0005: unknown main item tag 0x0 [ 338.076536][ T1185] usb 1-1: Firmware version (0.0) predates our first public release. [ 338.087828][ T5310] a4tech 0003:09DA:022B.0005: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.2-1/input0 [ 338.107407][ T1185] usb 1-1: Please update to version 0.2 or newer [ 338.224206][ T8183] loop4: detected capacity change from 0 to 64 [ 338.242805][ T1185] usb 1-1: USB disconnect, device number 9 [ 338.252934][ T5310] usb 3-1: USB disconnect, device number 12 [ 338.980038][ T8192] FAULT_INJECTION: forcing a failure. [ 338.980038][ T8192] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 338.993344][ T8192] CPU: 1 UID: 0 PID: 8192 Comm: syz.3.537 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 339.003471][ T8192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 339.013549][ T8192] Call Trace: [ 339.016847][ T8192] [ 339.019798][ T8192] dump_stack_lvl+0x241/0x360 [ 339.024510][ T8192] ? __pfx_dump_stack_lvl+0x10/0x10 [ 339.029733][ T8192] ? __pfx__printk+0x10/0x10 [ 339.034363][ T8192] ? __pfx_lock_release+0x10/0x10 [ 339.039517][ T8192] should_fail_ex+0x3b0/0x4e0 [ 339.044227][ T8192] _copy_to_user+0x2f/0xb0 [ 339.048679][ T8192] video_usercopy+0xca9/0x1180 [ 339.053489][ T8192] ? __pfx___video_do_ioctl+0x10/0x10 [ 339.058892][ T8192] ? __pfx_video_usercopy+0x10/0x10 [ 339.064133][ T8192] ? __fget_files+0x29/0x470 [ 339.068750][ T8192] ? __fget_files+0x3f6/0x470 [ 339.073450][ T8192] ? __fget_files+0x29/0x470 [ 339.078071][ T8192] v4l2_ioctl+0x18c/0x1e0 [ 339.082441][ T8192] ? __pfx_v4l2_ioctl+0x10/0x10 [ 339.087323][ T8192] __se_sys_ioctl+0xfc/0x170 [ 339.091945][ T8192] do_syscall_64+0xf3/0x230 [ 339.096464][ T8192] ? clear_bhb_loop+0x35/0x90 [ 339.101183][ T8192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.107112][ T8192] RIP: 0033:0x7f26921773b9 [ 339.111552][ T8192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.131188][ T8192] RSP: 002b:00007f2692e93048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 339.139633][ T8192] RAX: ffffffffffffffda RBX: 00007f2692306130 RCX: 00007f26921773b9 [ 339.147626][ T8192] RDX: 0000000020000080 RSI: 00000000c0285628 RDI: 000000000000000a [ 339.155621][ T8192] RBP: 00007f2692e930a0 R08: 0000000000000000 R09: 0000000000000000 [ 339.163701][ T8192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 339.171693][ T8192] R13: 000000000000006e R14: 00007f2692306130 R15: 00007ffe8eed14b8 [ 339.179707][ T8192] [ 339.917586][ T5240] Bluetooth: hci1: command 0x0405 tx timeout [ 339.939020][ T8183] loop4: detected capacity change from 0 to 32768 [ 340.877435][ T5310] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 341.111957][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.187636][ T5310] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 341.210631][ T5310] usb 2-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 341.223806][ T5310] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.250374][ T8212] loop3: detected capacity change from 0 to 40427 [ 341.260624][ T8212] F2FS-fs (loop3): Unrecognized mount option "active_logs=" or missing value [ 341.459339][ T5310] usb 2-1: config 0 descriptor?? [ 342.159745][ T5310] chicony 0003:04F2:1421.0006: hidraw0: USB HID v0.00 Device [HID 04f2:1421] on usb-dummy_hcd.1-1/input0 [ 342.313928][ T59] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 342.348297][ T8216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 342.400417][ T8216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 342.442018][ T5310] usb 2-1: USB disconnect, device number 9 [ 342.547794][ T59] usb 1-1: Invalid ep0 maxpacket: 32 [ 342.967611][ T59] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 343.025000][ T8233] xt_l2tp: missing protocol rule (udp|l2tpip) [ 343.257508][ T59] usb 1-1: Invalid ep0 maxpacket: 32 [ 343.383268][ T59] usb usb1-port1: attempt power cycle [ 344.137387][ T59] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 344.145090][ T25] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 344.207911][ T59] usb 1-1: Invalid ep0 maxpacket: 32 [ 344.227659][ T7663] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 344.347579][ T25] usb 4-1: Using ep0 maxpacket: 16 [ 344.376667][ T25] usb 4-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 344.412304][ T59] usb 1-1: new low-speed USB device number 13 using dummy_hcd [ 344.429323][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.454091][ T7663] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 344.472963][ T25] usb 4-1: Product: syz [ 344.485700][ T7663] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.497007][ T25] usb 4-1: Manufacturer: syz [ 344.502265][ T25] usb 4-1: SerialNumber: syz [ 344.507659][ T7663] usb 2-1: Product: syz [ 344.514322][ T7663] usb 2-1: Manufacturer: syz [ 344.521030][ T25] usb 4-1: config 0 descriptor?? [ 344.526157][ T7663] usb 2-1: SerialNumber: syz [ 344.535711][ T25] visor 4-1:0.0: Sony Clie 3.5 converter detected [ 344.548840][ T7663] usb 2-1: config 0 descriptor?? [ 344.668442][ T59] usb 1-1: device not accepting address 13, error -71 [ 344.680603][ T59] usb usb1-port1: unable to enumerate USB device [ 344.719687][ T8253] FAULT_INJECTION: forcing a failure. [ 344.719687][ T8253] name failslab, interval 1, probability 0, space 0, times 0 [ 344.760808][ T8253] CPU: 0 UID: 0 PID: 8253 Comm: syz.2.553 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 344.770977][ T8253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 344.781073][ T8253] Call Trace: [ 344.784379][ T8253] [ 344.787335][ T8253] dump_stack_lvl+0x241/0x360 [ 344.792146][ T8253] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.797383][ T8253] ? __pfx__printk+0x10/0x10 [ 344.802028][ T8253] should_fail_ex+0x3b0/0x4e0 [ 344.806734][ T8253] ? dst_alloc+0x12b/0x190 [ 344.811189][ T8253] should_failslab+0xac/0x100 [ 344.815915][ T8253] ? dst_alloc+0x12b/0x190 [ 344.820370][ T8253] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 344.825806][ T8253] dst_alloc+0x12b/0x190 [ 344.830098][ T8253] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 344.836231][ T8253] ip_route_output_key_hash+0x193/0x2b0 [ 344.841822][ T8253] ? ip_route_output_key_hash+0xdf/0x2b0 [ 344.847498][ T8253] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 344.853632][ T8253] ? __pfx_lock_release+0x10/0x10 [ 344.858717][ T8253] ip_route_output_flow+0x29/0x140 [ 344.863879][ T8253] raw_sendmsg+0x15e6/0x2490 [ 344.868542][ T8253] ? __pfx_raw_sendmsg+0x10/0x10 [ 344.873569][ T8253] ? inet_sendmsg+0x330/0x390 [ 344.878305][ T8253] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 344.883617][ T8253] ? security_socket_sendmsg+0x87/0xb0 [ 344.889122][ T8253] __sock_sendmsg+0x1a6/0x270 [ 344.893878][ T8253] ____sys_sendmsg+0x525/0x7d0 [ 344.898694][ T8253] ? __pfx_____sys_sendmsg+0x10/0x10 [ 344.904039][ T8253] __sys_sendmsg+0x2b0/0x3a0 [ 344.908665][ T8253] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.913809][ T8253] ? vfs_write+0x7c4/0xc90 [ 344.918336][ T8253] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.924709][ T8253] ? do_syscall_64+0x100/0x230 [ 344.929503][ T8253] ? do_syscall_64+0xb6/0x230 [ 344.934217][ T8253] do_syscall_64+0xf3/0x230 [ 344.938755][ T8253] ? clear_bhb_loop+0x35/0x90 [ 344.943472][ T8253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.949400][ T8253] RIP: 0033:0x7fad3fd773b9 [ 344.953853][ T8253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.973495][ T8253] RSP: 002b:00007fad40ba5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.981964][ T8253] RAX: ffffffffffffffda RBX: 00007fad3ff05f80 RCX: 00007fad3fd773b9 [ 344.989969][ T8253] RDX: 0000000000000000 RSI: 0000000020000a00 RDI: 0000000000000005 [ 344.998036][ T8253] RBP: 00007fad40ba50a0 R08: 0000000000000000 R09: 0000000000000000 [ 345.006082][ T8253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.014087][ T8253] R13: 000000000000000b R14: 00007fad3ff05f80 R15: 00007ffc5d68cec8 [ 345.022121][ T8253] [ 345.025328][ C0] vkms_vblank_simulate: vblank timer overrun [ 345.233136][ T7663] usb 2-1: Firmware version (0.0) predates our first public release. [ 345.247254][ T7663] usb 2-1: Please update to version 0.2 or newer [ 345.349687][ T7663] usb 2-1: USB disconnect, device number 10 [ 345.417522][ T5281] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 345.627433][ T5281] usb 3-1: Using ep0 maxpacket: 16 [ 345.645306][ T5281] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 11 [ 345.671290][ T5281] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0 [ 345.711491][ T5281] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0 [ 345.741849][ T5281] usb 3-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0 [ 345.762199][ T5281] usb 3-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0 [ 345.782219][ T5281] usb 3-1: config 1 interface 0 has no altsetting 0 [ 345.797328][ T5281] usb 3-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77 [ 345.816880][ T5281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 345.876673][ T5281] ums-sddr09 3-1:1.0: USB Mass Storage device detected [ 346.085967][ T5281] scsi host1: usb-storage 3-1:1.0 [ 346.155890][ T25] usb 4-1: clie_3_5_startup: get interface number failed: -71 [ 346.178514][ T25] visor 4-1:0.0: probe with driver visor failed with error -71 [ 346.222227][ T8263] serio: Serial port pts1 [ 346.234314][ T25] usb 4-1: USB disconnect, device number 12 [ 346.720485][ T8278] loop1: detected capacity change from 0 to 512 [ 346.739208][ T8278] EXT4-fs: Ignoring removed oldalloc option [ 347.186783][ T5279] usb 3-1: USB disconnect, device number 13 [ 347.246261][ T4576] scsi 1:0:0:0: Direct-Access Sandisk ImageMate SDDR09 0177 PQ: 0 ANSI: 0 [ 347.311694][ T8278] EXT4-fs (loop1): 1 truncate cleaned up [ 347.378094][ T8278] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 347.458389][ T2505] sd 1:0:0:0: [sdb] Test Unit Ready failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 347.502364][ T4576] sd 1:0:0:0: Attached scsi generic sg1 type 0 [ 347.528852][ T8278] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.587922][ T2505] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=DID_NO_CONNECT driverbyte=DRIVER_OK [ 347.604488][ C0] eth0: bad gso: type: 1, size: 1408 [ 347.662553][ T2505] sd 1:0:0:0: [sdb] Sense not available. [ 347.669003][ T2505] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 347.676167][ T2505] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 347.682595][ T2505] sd 1:0:0:0: [sdb] Write Protect is off [ 347.700520][ T2505] sd 1:0:0:0: [sdb] Asking for cache data failed [ 347.709394][ T2505] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 347.933087][ T2505] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 348.625012][ T8288] loop4: detected capacity change from 0 to 4096 [ 348.732030][ T8288] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 348.917897][ T8288] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 349.307550][ T1185] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 350.040559][ T7966] udevd[7966]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 350.111187][ T8314] loop2: detected capacity change from 0 to 64 [ 350.117494][ T1185] usb 2-1: Using ep0 maxpacket: 16 [ 350.126666][ T1185] usb 2-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 350.176721][ T1185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 350.192813][ T1185] usb 2-1: Product: syz [ 350.220170][ T1185] usb 2-1: Manufacturer: syz [ 350.224823][ T1185] usb 2-1: SerialNumber: syz [ 350.436119][ T1185] usb 2-1: config 0 descriptor?? [ 350.496770][ T1185] visor 2-1:0.0: Sony Clie 3.5 converter detected [ 350.561000][ T8184] udevd[8184]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 350.948553][ T1185] usb 2-1: Sony Clie 3.5 converter now attached to ttyUSB0 [ 352.681692][ T8314] loop2: detected capacity change from 0 to 32768 [ 352.711491][ T8331] loop3: detected capacity change from 0 to 512 [ 352.867535][ T8331] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2240: inode #15: comm syz.3.569: corrupted in-inode xattr: invalid ea_ino [ 352.954902][ T8331] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.569: couldn't read orphan inode 15 (err -117) [ 353.004986][ T8331] EXT4-fs (loop3): mounted filesystem 00000007-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 353.302183][ T8331] EXT4-fs error (device loop3): ext4_find_dest_de:2067: inode #2: block 13: comm syz.3.569: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 353.365090][ T49] usb 2-1: USB disconnect, device number 11 [ 353.392064][ T49] clie_3.5 ttyUSB0: Sony Clie 3.5 converter now disconnected from ttyUSB0 [ 353.422850][ T49] visor 2-1:0.0: device disconnected [ 354.731369][ T6943] EXT4-fs (loop3): unmounting filesystem 00000007-0000-0000-0000-000000000000. [ 355.399541][ T8345] loop1: detected capacity change from 0 to 32768 [ 356.683541][ T8345] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 356.912493][ T8356] loop2: detected capacity change from 0 to 2048 [ 356.937717][ T8356] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found! [ 356.951693][ T8345] XFS (loop1): Ending clean mount [ 357.020690][ T8356] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 357.452146][ T8363] loop4: detected capacity change from 0 to 512 [ 357.566994][ T8363] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.575: casefold flag without casefold feature [ 357.582343][ T8363] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.575: couldn't read orphan inode 15 (err -117) [ 358.102963][ T8363] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 358.143028][ T5236] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 358.397452][ T49] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 358.462437][ T5577] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 358.646787][ T49] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 358.696469][ T49] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.924888][ T49] usb 4-1: Product: syz [ 358.935810][ T49] usb 4-1: Manufacturer: syz [ 358.949615][ T49] usb 4-1: SerialNumber: syz [ 359.839255][ T49] usb 4-1: config 0 descriptor?? [ 359.916374][ T8384] netlink: 'syz.1.577': attribute type 10 has an invalid length. [ 360.519951][ T49] usb 4-1: Firmware version (0.0) predates our first public release. [ 360.545888][ T49] usb 4-1: Please update to version 0.2 or newer [ 360.691058][ T49] usb 4-1: USB disconnect, device number 13 [ 361.900737][ T8388] loop4: detected capacity change from 0 to 40427 [ 361.948721][ T8388] F2FS-fs (loop4): Corrupted extension count (134217765 + 1 > 64) [ 361.996193][ T8388] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 362.045550][ T8388] F2FS-fs (loop4): heap/no_heap options were deprecated [ 362.095060][ T8388] F2FS-fs (loop4): Unrecognized mount option "grpquota=!+#)^" or missing value [ 364.040601][ T8418] loop3: detected capacity change from 0 to 2048 [ 364.294955][ T8418] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 366.033691][ T1185] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 366.250215][ T8443] loop1: detected capacity change from 0 to 65 [ 366.285006][ T1185] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 366.308155][ T1185] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.337760][ T8443] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway [ 366.604775][ T1185] usb 5-1: Product: syz [ 366.615173][ T1185] usb 5-1: Manufacturer: syz [ 366.622991][ T1185] usb 5-1: SerialNumber: syz [ 366.646693][ T1185] usb 5-1: config 0 descriptor?? [ 366.652629][ T8443] BFS-fs: bfs_fill_super(): Last block not available on loop1: 511 [ 367.724255][ T1185] usb 5-1: Firmware version (0.0) predates our first public release. [ 367.743789][ T8452] loop1: detected capacity change from 0 to 512 [ 367.758878][ T8452] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #12: comm syz.1.595: corrupted in-inode xattr: invalid ea_ino [ 367.777453][ T8452] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.595: couldn't read orphan inode 12 (err -117) [ 367.798508][ T1185] usb 5-1: Please update to version 0.2 or newer [ 367.839358][ T8452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 367.953210][ T8458] loop2: detected capacity change from 0 to 1024 [ 367.960138][ T1185] usb 5-1: USB disconnect, device number 10 [ 367.967366][ T25] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 368.059572][ T8458] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 368.159610][ T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 368.181783][ T25] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=7a.b1 [ 368.198095][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 368.214291][ T25] usb 4-1: Product: syz [ 368.226040][ T25] usb 4-1: Manufacturer: syz [ 368.239927][ T25] usb 4-1: SerialNumber: syz [ 368.265026][ T29] audit: type=1800 audit(1722601636.879:72): pid=8464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.598" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 368.311594][ T25] usb 4-1: config 0 descriptor?? [ 368.349359][ T25] usb_ehset_test 4-1:0.0: probe with driver usb_ehset_test failed with error -32 [ 368.545822][ T25] usb 4-1: USB disconnect, device number 14 [ 368.555394][ T5236] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.764336][ T8468] netlink: 'syz.4.599': attribute type 4 has an invalid length. [ 368.839216][ T8474] netlink: 'syz.4.599': attribute type 4 has an invalid length. [ 368.904815][ T8466] dccp_close: ABORT with 120 bytes unread [ 368.911522][ T5279] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 368.921709][ T8466] dccp_close: ABORT with 1 bytes unread [ 369.084206][ T8479] netlink: 'syz.4.602': attribute type 10 has an invalid length. [ 369.125186][ T5279] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 369.155462][ T5279] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 369.202179][ T5279] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.389074][ T25] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 369.618910][ T5279] usb 3-1: config 0 descriptor?? [ 369.805243][ T25] usb 1-1: config 1 has an invalid descriptor of length 114, skipping remainder of the config [ 369.815395][ T5279] usb 3-1: Found UVC 0.00 device (046d:08c1) [ 369.822709][ T25] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 370.072002][ T25] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 370.082937][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 370.091676][ T25] usb 1-1: SerialNumber: syz [ 370.112261][ T8493] loop1: detected capacity change from 0 to 256 [ 370.120471][ T5279] usb 3-1: No valid video chain found. [ 370.272505][ T49] libceph: connect (1)[c::]:6789 error -101 [ 370.360752][ T49] libceph: mon0 (1)[c::]:6789 connect error [ 370.369361][ T25] usb 1-1: 0:2 : does not exist [ 370.439171][ T8493] FAT-fs (loop1): Directory bread(block 64) failed [ 370.631342][ T8493] FAT-fs (loop1): Directory bread(block 65) failed [ 370.666325][ T8493] FAT-fs (loop1): Directory bread(block 66) failed [ 370.676307][ T8494] ceph: No mds server is up or the cluster is laggy [ 370.679729][ T8493] FAT-fs (loop1): Directory bread(block 67) failed [ 370.694552][ T8493] FAT-fs (loop1): Directory bread(block 68) failed [ 370.701214][ T8493] FAT-fs (loop1): Directory bread(block 69) failed [ 370.708862][ T8493] FAT-fs (loop1): Directory bread(block 70) failed [ 370.715492][ T8493] FAT-fs (loop1): Directory bread(block 71) failed [ 370.722696][ T8493] FAT-fs (loop1): Directory bread(block 72) failed [ 370.729408][ T8493] FAT-fs (loop1): Directory bread(block 73) failed [ 370.801172][ T25] libceph: connect (1)[c::]:6789 error -101 [ 371.617686][ T25] libceph: mon0 (1)[c::]:6789 connect error [ 372.795329][ T5236] FAT-fs (loop1): error, corrupted directory (invalid entries) [ 372.847372][ T5236] FAT-fs (loop1): Filesystem has been set read-only [ 373.127516][ T5279] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 373.233474][ T7663] usb 3-1: USB disconnect, device number 14 [ 373.281238][ T6136] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 373.332896][ T5279] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 373.367379][ T5279] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.375543][ T8519] loop2: detected capacity change from 0 to 64 [ 373.404440][ T5279] usb 4-1: Product: syz [ 373.417478][ T5279] usb 4-1: Manufacturer: syz [ 373.422130][ T5279] usb 4-1: SerialNumber: syz [ 373.440006][ T5279] usb 4-1: config 0 descriptor?? [ 373.574007][ T1840] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.664491][ T7663] usb 1-1: USB disconnect, device number 14 [ 373.840080][ T1840] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.040373][ T1840] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.260422][ T1840] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.273532][ T5279] usb 4-1: Firmware version (0.0) predates our first public release. [ 374.283457][ T8522] netlink: 'syz.0.614': attribute type 10 has an invalid length. [ 374.307383][ T5279] usb 4-1: Please update to version 0.2 or newer [ 374.414059][ T8519] loop2: detected capacity change from 0 to 32768 [ 374.431600][ T5279] usb 4-1: USB disconnect, device number 15 [ 374.587473][ T8526] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 375.837518][ T1840] team0: left allmulticast mode [ 376.117652][ T1840] team_slave_0: left allmulticast mode [ 376.125113][ T1840] team_slave_1: left allmulticast mode [ 376.132415][ T1840] bridge0: port 3(team0) entered disabled state [ 376.859573][ T1840] bridge_slave_1: left allmulticast mode [ 376.890556][ T1840] bridge_slave_1: left promiscuous mode [ 376.900409][ T1840] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.023560][ T1840] bridge_slave_0: left allmulticast mode [ 377.059453][ T1840] bridge_slave_0: left promiscuous mode [ 377.065296][ T1840] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.081678][ T5240] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.146291][ T5240] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.158822][ T5240] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.172005][ T5240] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.182000][ T5240] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 377.192139][ T5240] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.200036][ T8557] xt_socket: unknown flags 0x8 [ 377.713930][ T1169] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 377.918050][ T1169] usb 4-1: Using ep0 maxpacket: 16 [ 377.956108][ T1169] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 378.021658][ T1169] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 378.056387][ T1169] usb 4-1: config 1 has no interface number 1 [ 378.161979][ T1169] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 378.196100][ T1169] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 378.225198][ T1169] usb 4-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x69, changing to 0x9 [ 378.249023][ T1169] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 378.295904][ T1169] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 378.315886][ T1169] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.344847][ T1169] usb 4-1: Product: syz [ 378.358422][ T1169] usb 4-1: Manufacturer: syz [ 378.372914][ T1169] usb 4-1: SerialNumber: syz [ 378.675933][ T8571] loop2: detected capacity change from 0 to 256 [ 378.793047][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.799548][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.347408][ T4620] Bluetooth: hci4: command tx timeout [ 379.731743][ T1840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.809379][ T1840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.819294][ T8575] netlink: 'syz.2.624': attribute type 10 has an invalid length. [ 379.854353][ T1840] bond0 (unregistering): Released all slaves [ 379.907335][ T8565] netlink: 'syz.4.622': attribute type 4 has an invalid length. [ 380.067023][ T8567] netlink: 'syz.4.622': attribute type 4 has an invalid length. [ 380.075983][ T1169] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 380.227011][ T8579] loop2: detected capacity change from 0 to 64 [ 380.462828][ T1169] usb 4-1: USB disconnect, device number 16 [ 380.816820][ T8587] loop4: detected capacity change from 0 to 2048 [ 380.938078][ T8587] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 380.956347][ T8015] udevd[8015]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 381.066606][ T29] audit: type=1800 audit(1722601649.679:73): pid=8587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.628" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 381.437600][ T4620] Bluetooth: hci4: command tx timeout [ 381.899601][ T1840] hsr_slave_0: left promiscuous mode [ 381.940131][ T1840] hsr_slave_1: left promiscuous mode [ 381.982527][ T5577] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.012621][ T1840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 382.052976][ T1840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 382.108253][ T1840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 382.143407][ T1840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 382.244229][ T1840] veth1_macvtap: left promiscuous mode [ 382.287421][ T1840] veth0_macvtap: left promiscuous mode [ 382.306053][ T1840] veth1_vlan: left promiscuous mode [ 382.326969][ T1840] veth0_vlan: left promiscuous mode [ 382.961743][ T8599] loop3: detected capacity change from 0 to 8192 [ 383.509024][ T4620] Bluetooth: hci4: command tx timeout [ 384.029227][ T8599] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 385.601403][ T4620] Bluetooth: hci4: command tx timeout [ 385.942446][ T8628] xt_socket: unknown flags 0x8 [ 386.287635][ T5279] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 386.378336][ T29] audit: type=1326 audit(1722601654.999:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 386.414172][ T29] audit: type=1326 audit(1722601655.039:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 386.478722][ T5279] usb 5-1: Using ep0 maxpacket: 16 [ 386.490349][ T1840] team_slave_1 (unregistering): left promiscuous mode [ 386.503789][ T5279] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 386.525904][ T1840] team0 (unregistering): Port device team_slave_1 removed [ 386.533376][ T5279] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 386.547130][ T5279] usb 5-1: config 1 has no interface number 1 [ 386.565622][ T5279] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 386.599528][ T5279] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 386.631781][ T5279] usb 5-1: config 1 interface 2 altsetting 1 has an endpoint descriptor with address 0x69, changing to 0x9 [ 386.653930][ T5279] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x9 has an invalid bInterval 0, changing to 7 [ 386.670187][ T5279] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 386.680113][ T1840] team_slave_0 (unregistering): left promiscuous mode [ 386.691517][ T1840] team0 (unregistering): Port device team_slave_0 removed [ 386.700909][ T5279] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.707659][ C1] DEBUG: holding rtnl_mutex for 512 jiffies. [ 386.715002][ C1] task:kworker/u8:6 state:R running task stack:20240 pid:1840 tgid:1840 ppid:2 flags:0x00004000 [ 386.726850][ C1] Workqueue: netns cleanup_net [ 386.727150][ T5279] usb 5-1: Product: syz [ 386.731698][ C1] Call Trace: [ 386.731715][ C1] [ 386.731732][ C1] __schedule+0x1800/0x4a60 [ 386.731780][ C1] ? __pfx_validate_chain+0x10/0x10 [ 386.736215][ T5279] usb 5-1: Manufacturer: syz [ 386.739288][ C1] ? wq_worker_sleeping+0x66/0x240 [ 386.742341][ T5279] usb 5-1: SerialNumber: syz [ 386.746740][ C1] ? schedule+0x90/0x320 [ 386.746779][ C1] ? schedule+0x14b/0x320 [ 386.774940][ C1] ? synchronize_rcu_expedited+0x684/0x830 [ 386.780823][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 386.787005][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 386.792353][ C1] ? __pfx___might_resched+0x10/0x10 [ 386.797719][ C1] lockdep_hardirqs_on_prepare+0x43d/0x780 [ 386.804011][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 386.810173][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 386.816661][ C1] synchronize_rcu+0x11b/0x360 [ 386.821532][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 386.826868][ C1] lockdep_unregister_key+0x4b7/0x540 [ 386.832360][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 386.838358][ C1] ? rcu_is_watching+0x15/0xb0 [ 386.843168][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 386.847848][ C1] __qdisc_destroy+0x165/0x410 [ 386.852648][ C1] dev_shutdown+0x9b/0x450 [ 386.857101][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 386.863569][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 386.870444][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 386.876379][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 386.882633][ C1] default_device_exit_batch+0xa0f/0xa90 [ 386.888370][ C1] ? __pfx___might_resched+0x10/0x10 [ 386.893707][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 386.899993][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 386.905336][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 386.911593][ C1] cleanup_net+0x89d/0xcc0 [ 386.916060][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 386.921139][ C1] ? process_scheduled_works+0x945/0x1830 [ 386.926928][ C1] process_scheduled_works+0xa2c/0x1830 [ 386.932620][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 386.938723][ C1] ? assign_work+0x364/0x3d0 [ 386.943375][ C1] worker_thread+0x86d/0xd40 [ 386.948098][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 386.954069][ C1] ? __kthread_parkme+0x169/0x1d0 [ 386.959242][ C1] ? __pfx_worker_thread+0x10/0x10 [ 386.964407][ C1] kthread+0x2f0/0x390 [ 386.968558][ C1] ? __pfx_worker_thread+0x10/0x10 [ 386.973903][ C1] ? __pfx_kthread+0x10/0x10 [ 386.978607][ C1] ret_from_fork+0x4b/0x80 [ 386.983093][ C1] ? __pfx_kthread+0x10/0x10 [ 386.987805][ C1] ret_from_fork_asm+0x1a/0x30 [ 386.992649][ C1] [ 386.995709][ C1] [ 386.995709][ C1] Showing all locks held in the system: [ 387.003540][ C1] 3 locks held by kworker/1:1/49: [ 387.008646][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 387.019749][ C1] #1: ffffc90000b97d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 387.030865][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 387.040013][ C1] 5 locks held by kworker/u8:6/1840: [ 387.045334][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 387.056357][ C1] #1: ffffc90004d0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 387.067116][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 387.076627][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 387.086777][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 387.097901][ C1] 2 locks held by getty/4990: [ 387.102619][ C1] #0: ffff88802c2e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 387.112557][ C1] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 387.122817][ C1] 6 locks held by kworker/0:5/5279: [ 387.128124][ C1] #0: ffff8880192bd948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 387.139589][ C1] #1: ffffc90004117d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 387.151589][ C1] #2: ffff8880249ad190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 387.160599][ C1] #3: ffff8881492b3190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 387.169981][ C1] #4: ffff88802155e160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 387.179356][ C1] #5: ffffffff8fc11f48 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x417/0x2100 [ 387.189376][ C1] 3 locks held by syz-executor/6943: [ 387.194707][ C1] 4 locks held by udevd/8184: [ 387.199482][ C1] #0: ffff88802151d1c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 387.208430][ C1] #1: ffff88802ffd1088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 387.218015][ C1] #2: ffff88806324de18 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 387.227589][ C1] #3: ffff8881492b3190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 387.236657][ C1] 1 lock held by syz-executor/8553: [ 387.241962][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 387.251431][ C1] 4 locks held by syz.0.633/8616: [ 387.256491][ C1] #0: ffff888016a82420 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x227/0xc90 [ 387.265550][ C1] #1: ffff88807c9e3d90 (&sb->s_type->i_mutex_key#12){+.+.}-{3:3}, at: shmem_file_write_iter+0x83/0x120 [ 387.276854][ C1] #2: ffffc90000a18c00 (net/core/rtnetlink.c:83){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 387.287117][ C1] #3: ffffffff8e937a60 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 387.292867][ T29] audit: type=1326 audit(1722601655.709:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 387.297060][ C1] 2 locks held by syz.4.636/8627: [ 387.297120][ C1] #0: ffffffff8fce77f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 387.332667][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 387.342054][ C1] 1 lock held by syz.2.640/8641: [ 387.347029][ C1] #0: ffff88807e7ecd98 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 387.356577][ C1] 2 locks held by syz.2.640/8642: [ 387.361673][ C1] #0: ffffffff8e7f25e8 (sched_core_mutex){+.+.}-{3:3}, at: sched_core_get+0x51/0x180 [ 387.366009][ T29] audit: type=1326 audit(1722601655.709:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 387.371456][ C1] #1: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 387.371530][ C1] 1 lock held by syz.2.640/8644: [ 387.371546][ C1] [ 387.371553][ C1] ============================================= [ 387.371553][ C1] [ 387.451641][ T29] audit: type=1326 audit(1722601655.709:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 388.045253][ T29] audit: type=1326 audit(1722601655.709:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 388.387516][ C1] DEBUG: holding rtnl_mutex for 680 jiffies. [ 388.393610][ C1] task:kworker/u8:6 state:R running task stack:20240 pid:1840 tgid:1840 ppid:2 flags:0x00004000 [ 388.405524][ C1] Workqueue: netns cleanup_net [ 388.410419][ C1] Call Trace: [ 388.413740][ C1] [ 388.416717][ C1] __schedule+0x1800/0x4a60 [ 388.421373][ C1] ? __pfx_validate_chain+0x10/0x10 [ 388.426763][ C1] ? __pfx___schedule+0x10/0x10 [ 388.431754][ C1] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 388.438160][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 388.443607][ C1] ? __pfx___might_resched+0x10/0x10 [ 388.449050][ C1] lockdep_hardirqs_on_prepare+0x43d/0x780 [ 388.454965][ C1] ? __pfx_autoremove_wake_function+0x10/0x10 [ 388.461260][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 388.467758][ C1] synchronize_rcu+0x11b/0x360 [ 388.472620][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 388.478062][ C1] lockdep_unregister_key+0x4b7/0x540 [ 388.483556][ C1] ? __pfx_lockdep_unregister_key+0x10/0x10 [ 388.489601][ C1] ? rcu_is_watching+0x15/0xb0 [ 388.494479][ C1] ? qdisc_reset+0x3bf/0x5b0 [ 388.499231][ C1] __qdisc_destroy+0x165/0x410 [ 388.504073][ C1] dev_shutdown+0x9b/0x450 [ 388.508628][ C1] unregister_netdevice_many_notify+0x97b/0x1c40 [ 388.515068][ C1] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 388.521996][ C1] ? unregister_netdevice_queue+0x26b/0x370 [ 388.528022][ C1] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 388.534278][ C1] default_device_exit_batch+0xa0f/0xa90 [ 388.540046][ C1] ? __pfx___might_resched+0x10/0x10 [ 388.545444][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 388.551736][ C1] ? cfg802154_pernet_exit+0xc3/0xe0 [ 388.557145][ C1] ? __pfx_default_device_exit_batch+0x10/0x10 [ 388.563446][ C1] cleanup_net+0x89d/0xcc0 [ 388.567989][ C1] ? __pfx_cleanup_net+0x10/0x10 [ 388.573038][ C1] ? process_scheduled_works+0x945/0x1830 [ 388.578888][ C1] process_scheduled_works+0xa2c/0x1830 [ 388.584559][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.590707][ C1] ? assign_work+0x364/0x3d0 [ 388.595434][ C1] worker_thread+0x86d/0xd40 [ 388.600167][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 388.606164][ C1] ? __kthread_parkme+0x169/0x1d0 [ 388.611306][ C1] ? __pfx_worker_thread+0x10/0x10 [ 388.616497][ C1] kthread+0x2f0/0x390 [ 388.620743][ C1] ? __pfx_worker_thread+0x10/0x10 [ 388.625934][ C1] ? __pfx_kthread+0x10/0x10 [ 388.630651][ C1] ret_from_fork+0x4b/0x80 [ 388.635169][ C1] ? __pfx_kthread+0x10/0x10 [ 388.639883][ C1] ret_from_fork_asm+0x1a/0x30 [ 388.644762][ C1] [ 388.647912][ C1] DEBUG: waiting rtnl_mutex for 662 jiffies. [ 388.653939][ C1] task:syz-executor state:D stack:24992 pid:8553 tgid:8553 ppid:8520 flags:0x00000000 [ 388.664239][ C1] Call Trace: [ 388.667616][ C1] [ 388.670627][ C1] __schedule+0x1800/0x4a60 [ 388.675276][ C1] ? __pfx___schedule+0x10/0x10 [ 388.680278][ C1] ? __pfx_lock_release+0x10/0x10 [ 388.685388][ C1] ? __mutex_trylock_common+0x92/0x2e0 [ 388.690972][ C1] ? schedule+0x90/0x320 [ 388.695303][ C1] schedule+0x14b/0x320 [ 388.699592][ C1] schedule_preempt_disabled+0x13/0x30 [ 388.705141][ C1] __mutex_lock+0x6a4/0xd70 [ 388.709772][ C1] ? __mutex_lock+0x527/0xd70 [ 388.714631][ C1] ? __tun_chr_ioctl+0x48f/0x2400 [ 388.719789][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 388.724914][ C1] ? get_rtnl_holder+0x144/0x190 [ 388.729970][ C1] __tun_chr_ioctl+0x48f/0x2400 [ 388.734949][ C1] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 388.740379][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 388.746458][ C1] ? bpf_lsm_file_ioctl+0x9/0x10 [ 388.751521][ C1] ? security_file_ioctl+0x87/0xb0 [ 388.756723][ C1] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 388.761959][ C1] __se_sys_ioctl+0xfc/0x170 [ 388.766605][ C1] do_syscall_64+0xf3/0x230 [ 388.771196][ C1] ? clear_bhb_loop+0x35/0x90 [ 388.776045][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.782027][ C1] RIP: 0033:0x7f20fd376fbb [ 388.786479][ C1] RSP: 002b:00007fffae665940 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 388.795000][ C1] RAX: ffffffffffffffda RBX: 00007f20fd505f40 RCX: 00007f20fd376fbb [ 388.803058][ C1] RDX: 00007fffae6659c0 RSI: 00000000400454ca RDI: 00000000000000c8 [ 388.811130][ C1] RBP: 00007f20fd506a38 R08: 0000000000000000 R09: 0000000000000000 [ 388.819189][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000000c [ 388.827229][ C1] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000009 [ 388.835249][ C1] [ 388.838344][ C1] DEBUG: waiting rtnl_mutex for 645 jiffies. [ 388.844357][ C1] task:kworker/1:1 state:D stack:22064 pid:49 tgid:49 ppid:2 flags:0x00004000 [ 388.854625][ C1] Workqueue: events linkwatch_event [ 388.859937][ C1] Call Trace: [ 388.863256][ C1] [ 388.866218][ C1] __schedule+0x1800/0x4a60 [ 388.870838][ C1] ? __pfx___schedule+0x10/0x10 [ 388.875340][ T29] audit: type=1326 audit(1722601655.709:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 388.875739][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 388.875784][ C1] ? __pfx_lock_release+0x10/0x10 [ 388.909083][ C1] ? kick_pool+0x1bd/0x620 [ 388.913661][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 388.918959][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 388.924217][ C1] ? schedule+0x90/0x320 [ 388.928549][ C1] schedule+0x14b/0x320 [ 388.932762][ C1] schedule_preempt_disabled+0x13/0x30 [ 388.938329][ C1] __mutex_lock+0x6a4/0xd70 [ 388.942890][ C1] ? __mutex_lock+0x527/0xd70 [ 388.947655][ C1] ? linkwatch_event+0xe/0x60 [ 388.952375][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 388.957540][ C1] ? get_rtnl_holder+0x144/0x190 [ 388.962537][ C1] ? process_scheduled_works+0x945/0x1830 [ 388.966540][ T29] audit: type=1326 audit(1722601655.709:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 388.968426][ C1] linkwatch_event+0xe/0x60 [ 388.968464][ C1] process_scheduled_works+0xa2c/0x1830 [ 388.968529][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 388.968572][ C1] ? assign_work+0x364/0x3d0 [ 388.968608][ C1] worker_thread+0x86d/0xd40 [ 388.968658][ C1] ? __kthread_parkme+0x169/0x1d0 [ 388.968697][ C1] ? __pfx_worker_thread+0x10/0x10 [ 388.968731][ C1] kthread+0x2f0/0x390 [ 388.968755][ C1] ? __pfx_worker_thread+0x10/0x10 [ 388.968797][ C1] ? __pfx_kthread+0x10/0x10 [ 389.040455][ C1] ret_from_fork+0x4b/0x80 [ 389.044934][ C1] ? __pfx_kthread+0x10/0x10 [ 389.049682][ C1] ret_from_fork_asm+0x1a/0x30 [ 389.054536][ C1] [ 389.057620][ C1] [ 389.057620][ C1] Showing all locks held in the system: [ 389.065346][ C1] 2 locks held by kworker/u8:1/12: [ 389.070538][ C1] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 389.082302][ C1] #1: ffffc90000117d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 389.094493][ C1] 3 locks held by kworker/1:1/49: [ 389.099586][ C1] #0: ffff888015880948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 389.110675][ C1] #1: ffffc90000b97d00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 389.121783][ C1] #2: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: linkwatch_event+0xe/0x60 [ 389.130874][ C1] 5 locks held by kworker/u8:3/53: [ 389.136009][ C1] 5 locks held by kworker/u8:6/1840: [ 389.141319][ C1] #0: ffff8880166e5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 389.152287][ C1] #1: ffffc90004d0fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 389.162914][ C1] #2: ffffffff8fc751d0 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 389.172397][ C1] #3: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: default_device_exit_batch+0xe9/0xa90 [ 389.182464][ C1] #4: ffffffff8e93ce38 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 389.193454][ C1] 2 locks held by kworker/u8:10/4576: [ 389.198875][ C1] #0: ffff888015889148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 389.210629][ C1] #1: ffffc9000d127d00 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 389.222809][ C1] 2 locks held by getty/4990: [ 389.227545][ C1] #0: ffff88802c2e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 389.237375][ C1] #1: ffffc90002f162f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6b5/0x1e10 [ 389.247557][ C1] 6 locks held by kworker/0:5/5279: [ 389.252770][ C1] #0: ffff8880192bd948 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 389.264342][ C1] #1: ffffc90004117d00 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 389.276251][ C1] #2: ffff8880249ad190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5150 [ 389.285404][ C1] #3: ffff8881492b3190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 389.294723][ C1] #4: ffff88802155e160 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8e/0x520 [ 389.304025][ C1] #5: ffffffff8fc11f48 (register_mutex#6){+.+.}-{3:3}, at: usb_audio_probe+0x417/0x2100 [ 389.313985][ C1] 4 locks held by udevd/8184: [ 389.318704][ C1] #0: ffff88802151d1c8 (&p->lock){+.+.}-{3:3}, at: seq_read_iter+0xb7/0xd60 [ 389.327589][ C1] #1: ffff88802ffd1088 (&of->mutex#2){+.+.}-{3:3}, at: kernfs_seq_start+0x53/0x3b0 [ 389.337078][ C1] #2: ffff88806324de18 (kn->active#5){++++}-{0:0}, at: kernfs_seq_start+0x72/0x3b0 [ 389.346649][ C1] #3: ffff8881492b3190 (&dev->mutex){....}-{3:3}, at: uevent_show+0x17d/0x340 [ 389.355750][ C1] 1 lock held by syz-executor/8553: [ 389.360985][ C1] #0: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: __tun_chr_ioctl+0x48f/0x2400 [ 389.370375][ C1] 2 locks held by syz.4.636/8627: [ 389.375424][ C1] #0: ffffffff8fce77f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 389.383712][ C1] #1: ffffffff8fc81d48 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x5f/0x8b0 [ 389.393018][ C1] 1 lock held by syz.2.640/8641: [ 389.397997][ C1] #0: ffff88807e7ecd98 (&mm->mmap_lock){++++}-{3:3}, at: vm_mmap_pgoff+0x17c/0x3d0 [ 389.407512][ C1] 4 locks held by syz.2.640/8644: [ 389.412558][ C1] 2 locks held by syz.3.641/8650: [ 389.417610][ C1] 1 lock held by modprobe/8651: [ 389.422478][ C1] 1 lock held by modprobe/8654: [ 389.427373][ C1] [ 389.429697][ C1] ============================================= [ 389.429697][ C1] [ 389.578004][ T29] audit: type=1326 audit(1722601655.709:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 389.957505][ T29] audit: type=1326 audit(1722601655.709:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8638 comm="syz.3.639" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26921773b9 code=0x7fc00000 [ 390.467620][ C1] DEBUG: holding rtnl_mutex for 888 jiffies. [ 390.473727][ C1] task:kworker/u8:6 state:R running task stack:20240 pid:1840 tgid:1840 ppid:2 flags:0x00004000 [ 390.485691][ C1] Workqueue: netns cleanup_net [ 390.490575][ C1] Call Trace: [ 390.493881][ C1] [ 390.496854][ C1] __schedule+0x1800/0x4a60 [ 390.501523][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 390.507945][ C1] ? lock_release+0xbf/0xa30 [ 390.512586][ C1] ? __pfx___schedule+0x10/0x10 [ 390.517557][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 390.522826][ C1] ? mark_lock+0x9a/0x360 [ 390.527258][ C1] preempt_schedule_irq+0xfb/0x1c0 [ 390.532427][ C1] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 390.538366][ C1] irqentry_exit+0x5e/0x90 [ 390.542843][ C1] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 390.548408][ C1] RIP: 0010:synchronize_rcu+0x0/0x360 [ 390.553850][ C1] Code: Unable to access opcode bytes at 0x1ffff920009a1e9a. [ 390.561307][ C1] RSP: f620:0000000000000a07 EFLAGS: 1ffff920009a1ec0 [ 390.568167][ C1] ================================================================== [ 390.576249][ C1] BUG: KASAN: stack-out-of-bounds in __show_regs+0xa6/0x610 [ 390.583660][ C1] Read of size 8 at addr ffffc90004d0f578 by task syz.2.640/8643 [ 390.591398][ C1] [ 390.593746][ C1] CPU: 1 UID: 0 PID: 8643 Comm: syz.2.640 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 390.603937][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 390.614023][ C1] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 390.617329][ C1] [ 390.620191][ C1] dump_stack_lvl+0x241/0x360 [ 390.624893][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 390.630136][ C1] ? __pfx__printk+0x10/0x10 [ 390.634768][ C1] ? _printk+0xd5/0x120 [ 390.638968][ C1] print_report+0x169/0x550 [ 390.643594][ C1] ? __virt_addr_valid+0xbd/0x530 [ 390.648666][ C1] ? __show_regs+0xa6/0x610 [ 390.653203][ C1] kasan_report+0x143/0x180 [ 390.657734][ C1] ? show_opcodes+0x161/0x170 [ 390.662451][ C1] ? __show_regs+0xa6/0x610 [ 390.667009][ C1] __show_regs+0xa6/0x610 [ 390.671370][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 390.677031][ C1] ? wq_watchdog_touch+0xef/0x180 [ 390.682085][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 390.687738][ C1] show_trace_log_lvl+0x3d4/0x520 [ 390.692785][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 390.698079][ C1] sched_show_task+0x506/0x6d0 [ 390.702854][ C1] ? report_rtnl_holders+0x2a5/0x400 [ 390.708152][ C1] ? __pfx__printk+0x10/0x10 [ 390.712762][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 390.718055][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 390.723959][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 390.730328][ C1] report_rtnl_holders+0x327/0x400 [ 390.735481][ C1] call_timer_fn+0x18e/0x650 [ 390.740089][ C1] ? call_timer_fn+0xc0/0x650 [ 390.744775][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 390.750418][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 390.755564][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 390.761212][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 390.766954][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 390.772610][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 390.777821][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 390.783038][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 390.788688][ C1] __run_timer_base+0x66a/0x8e0 [ 390.793555][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 390.798993][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 390.805331][ C1] run_timer_softirq+0xb7/0x170 [ 390.810185][ C1] handle_softirqs+0x2c4/0x970 [ 390.814971][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 390.819739][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 390.825047][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 390.830285][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 390.834902][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 390.840121][ C1] irq_exit_rcu+0x9/0x30 [ 390.844390][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 390.850066][ C1] [ 390.852998][ C1] [ 390.855942][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 390.861931][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 390.868458][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ae 9f 37 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 03 30 9f f5 65 8b 05 44 26 40 74 85 c0 74 43 48 c7 04 24 0e 36 [ 390.888177][ C1] RSP: 0018:ffffc90016187540 EFLAGS: 00000206 [ 390.894252][ C1] RAX: f6477d180cf86e00 RBX: 1ffff92002c30eac RCX: ffffffff817022ea [ 390.902314][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad560 RDI: 0000000000000001 [ 390.910290][ C1] RBP: ffffc900161875d0 R08: ffffffff937378af R09: 1ffffffff26e6f15 [ 390.918544][ C1] R10: dffffc0000000000 R11: fffffbfff26e6f16 R12: dffffc0000000000 [ 390.926539][ C1] R13: 1ffff92002c30ea8 R14: ffffc90016187560 R15: 0000000000000246 [ 390.934560][ C1] ? mark_lock+0x9a/0x360 [ 390.938927][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 390.945277][ C1] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 390.951095][ C1] __skb_try_recv_datagram+0x1cb/0x6a0 [ 390.956567][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 390.961947][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 390.967997][ C1] ? __lock_acquire+0x1384/0x2050 [ 390.973226][ C1] __unix_dgram_recvmsg+0x3ba/0x12f0 [ 390.978541][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 390.984284][ C1] ? __pfx___might_resched+0x10/0x10 [ 390.989587][ C1] ? iovec_from_user+0x61/0x240 [ 390.994458][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 390.999487][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 391.005037][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 391.010170][ C1] ____sys_recvmsg+0x3c0/0x470 [ 391.014963][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 391.020285][ C1] ? __might_fault+0xaa/0x120 [ 391.025011][ C1] do_recvmmsg+0x474/0xae0 [ 391.029465][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 391.034432][ C1] ? __send_signal_locked+0xb44/0xdc0 [ 391.039811][ C1] ? __lock_task_sighand+0x2a5/0x2d0 [ 391.045104][ C1] ? __lock_task_sighand+0x29/0x2d0 [ 391.050315][ C1] ? group_send_sig_info+0x2e0/0x310 [ 391.055617][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 391.060481][ C1] ? bpf_send_signal_common+0x2dd/0x430 [ 391.066051][ C1] ? __pfx_do_futex+0x10/0x10 [ 391.070754][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 391.075617][ C1] ? bpf_trace_run2+0x36e/0x540 [ 391.080698][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 391.085830][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 391.091390][ C1] ? rcu_is_watching+0x15/0xb0 [ 391.096154][ C1] ? trace_sys_enter+0x1f/0xd0 [ 391.100922][ C1] do_syscall_64+0xf3/0x230 [ 391.105431][ C1] ? clear_bhb_loop+0x35/0x90 [ 391.110122][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.116020][ C1] RIP: 0033:0x7fad3fd773b9 [ 391.120446][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.140251][ C1] RSP: 002b:00007fad40b84048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 391.148764][ C1] RAX: ffffffffffffffda RBX: 00007fad3ff06058 RCX: 00007fad3fd773b9 [ 391.156739][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 391.164735][ C1] RBP: 00007fad3fde48e6 R08: 0000000000000000 R09: 0000000000000000 [ 391.172708][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 391.180684][ C1] R13: 000000000000006e R14: 00007fad3ff06058 R15: 00007ffc5d68cec8 [ 391.188669][ C1] [ 391.191690][ C1] [ 391.194012][ C1] The buggy address belongs to the virtual mapping at [ 391.194012][ C1] [ffffc90004d08000, ffffc90004d11000) created by: [ 391.194012][ C1] copy_process+0x5d1/0x3d90 [ 391.211668][ C1] [ 391.213991][ C1] The buggy address belongs to the physical page: [ 391.220403][ C1] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cfec [ 391.229175][ C1] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 391.236293][ C1] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 391.244883][ C1] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 391.253479][ C1] page dumped because: kasan: bad access detected [ 391.259894][ C1] page_owner tracks the page as allocated [ 391.265612][ C1] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 35, tgid 35 (kworker/u8:2), ts 11927864177, free_ts 0 [ 391.283592][ C1] post_alloc_hook+0x1f3/0x230 [ 391.288383][ C1] get_page_from_freelist+0x2e4c/0x2f10 [ 391.293933][ C1] __alloc_pages_noprof+0x256/0x6c0 [ 391.299142][ C1] alloc_pages_mpol_noprof+0x3e8/0x680 [ 391.304600][ C1] __vmalloc_node_range_noprof+0x971/0x1460 [ 391.310501][ C1] dup_task_struct+0x444/0x8c0 [ 391.315285][ C1] copy_process+0x5d1/0x3d90 [ 391.319883][ C1] kernel_clone+0x226/0x8f0 [ 391.324402][ C1] user_mode_thread+0x132/0x1a0 [ 391.329259][ C1] call_usermodehelper_exec_work+0x5c/0x230 [ 391.335250][ C1] process_scheduled_works+0xa2c/0x1830 [ 391.340806][ C1] worker_thread+0x86d/0xd40 [ 391.345404][ C1] kthread+0x2f0/0x390 [ 391.349474][ C1] ret_from_fork+0x4b/0x80 [ 391.353929][ C1] ret_from_fork_asm+0x1a/0x30 [ 391.358702][ C1] page_owner free stack trace missing [ 391.364076][ C1] [ 391.366397][ C1] Memory state around the buggy address: [ 391.372023][ C1] ffffc90004d0f400: f2 f2 00 00 00 00 00 00 f2 f2 f2 f2 00 00 00 00 [ 391.380174][ C1] ffffc90004d0f480: 00 f3 f3 f3 f3 f3 f3 f3 00 00 00 00 00 00 00 00 [ 391.388235][ C1] >ffffc90004d0f500: 00 00 00 00 f1 f1 f1 f1 00 f2 f2 f2 00 f3 f3 f3 [ 391.396289][ C1] ^ [ 391.404262][ C1] ffffc90004d0f580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 391.412317][ C1] ffffc90004d0f600: f1 f1 f1 f1 00 f2 f2 f2 00 f3 f3 f3 00 00 00 00 [ 391.420371][ C1] ================================================================== [ 391.428552][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 391.435859][ C1] CPU: 1 UID: 0 PID: 8643 Comm: syz.2.640 Not tainted 6.11.0-rc1-next-20240729-syzkaller #0 [ 391.446041][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 391.456128][ C1] Call Trace: [ 391.459438][ C1] [ 391.462305][ C1] dump_stack_lvl+0x241/0x360 [ 391.467008][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 391.472227][ C1] ? __pfx__printk+0x10/0x10 [ 391.476855][ C1] ? vscnprintf+0x5d/0x90 [ 391.481231][ C1] panic+0x349/0x870 [ 391.485171][ C1] ? check_panic_on_warn+0x21/0xb0 [ 391.490313][ C1] ? __pfx_panic+0x10/0x10 [ 391.494770][ C1] ? mark_lock+0x9a/0x360 [ 391.499142][ C1] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 391.505074][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 391.511000][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 391.517370][ C1] ? print_report+0x502/0x550 [ 391.522077][ C1] check_panic_on_warn+0x86/0xb0 [ 391.527046][ C1] ? __show_regs+0xa6/0x610 [ 391.532710][ C1] end_report+0x77/0x160 [ 391.536992][ C1] kasan_report+0x154/0x180 [ 391.541528][ C1] ? show_opcodes+0x161/0x170 [ 391.546246][ C1] ? __show_regs+0xa6/0x610 [ 391.550782][ C1] __show_regs+0xa6/0x610 [ 391.555133][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 391.560792][ C1] ? wq_watchdog_touch+0xef/0x180 [ 391.565896][ C1] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 391.571646][ C1] show_trace_log_lvl+0x3d4/0x520 [ 391.576723][ C1] ? __pfx_synchronize_rcu+0x10/0x10 [ 391.582044][ C1] sched_show_task+0x506/0x6d0 [ 391.586841][ C1] ? report_rtnl_holders+0x2a5/0x400 [ 391.592161][ C1] ? __pfx__printk+0x10/0x10 [ 391.596784][ C1] ? __pfx_sched_show_task+0x10/0x10 [ 391.602095][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 391.608025][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 391.614422][ C1] report_rtnl_holders+0x327/0x400 [ 391.619580][ C1] call_timer_fn+0x18e/0x650 [ 391.624191][ C1] ? call_timer_fn+0xc0/0x650 [ 391.628892][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 391.634589][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 391.639732][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 391.645393][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 391.651053][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 391.656717][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 391.661945][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 391.667178][ C1] ? __pfx_report_rtnl_holders+0x10/0x10 [ 391.672841][ C1] __run_timer_base+0x66a/0x8e0 [ 391.677735][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 391.683144][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 391.689530][ C1] run_timer_softirq+0xb7/0x170 [ 391.694497][ C1] handle_softirqs+0x2c4/0x970 [ 391.699308][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 391.704113][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 391.709438][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 391.714678][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 391.719305][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 391.724537][ C1] irq_exit_rcu+0x9/0x30 [ 391.728818][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 391.734511][ C1] [ 391.737469][ C1] [ 391.740420][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 391.746441][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd8/0x140 [ 391.753352][ C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 ae 9f 37 f6 f6 44 24 21 02 75 52 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 03 30 9f f5 65 8b 05 44 26 40 74 85 c0 74 43 48 c7 04 24 0e 36 [ 391.772992][ C1] RSP: 0018:ffffc90016187540 EFLAGS: 00000206 [ 391.779098][ C1] RAX: f6477d180cf86e00 RBX: 1ffff92002c30eac RCX: ffffffff817022ea [ 391.787119][ C1] RDX: dffffc0000000000 RSI: ffffffff8c0ad560 RDI: 0000000000000001 [ 391.795123][ C1] RBP: ffffc900161875d0 R08: ffffffff937378af R09: 1ffffffff26e6f15 [ 391.803123][ C1] R10: dffffc0000000000 R11: fffffbfff26e6f16 R12: dffffc0000000000 [ 391.811132][ C1] R13: 1ffff92002c30ea8 R14: ffffc90016187560 R15: 0000000000000246 [ 391.819152][ C1] ? mark_lock+0x9a/0x360 [ 391.823537][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 391.829917][ C1] ? __skb_try_recv_from_queue+0x5d8/0x780 [ 391.835781][ C1] __skb_try_recv_datagram+0x1cb/0x6a0 [ 391.841276][ C1] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 391.846687][ C1] ? __pfx___skb_try_recv_datagram+0x10/0x10 [ 391.852725][ C1] ? __lock_acquire+0x1384/0x2050 [ 391.857817][ C1] __unix_dgram_recvmsg+0x3ba/0x12f0 [ 391.863157][ C1] ? __pfx___unix_dgram_recvmsg+0x10/0x10 [ 391.868922][ C1] ? __pfx___might_resched+0x10/0x10 [ 391.874245][ C1] ? iovec_from_user+0x61/0x240 [ 391.879151][ C1] ? unix_dgram_recvmsg+0xb6/0xe0 [ 391.884205][ C1] ? __pfx_unix_dgram_recvmsg+0x10/0x10 [ 391.889784][ C1] sock_recvmsg_nosec+0x18e/0x1d0 [ 391.894857][ C1] ____sys_recvmsg+0x3c0/0x470 [ 391.899668][ C1] ? __pfx_____sys_recvmsg+0x10/0x10 [ 391.904999][ C1] ? __might_fault+0xaa/0x120 [ 391.909711][ C1] do_recvmmsg+0x474/0xae0 [ 391.914171][ C1] ? __pfx_do_recvmmsg+0x10/0x10 [ 391.919168][ C1] ? __send_signal_locked+0xb44/0xdc0 [ 391.924566][ C1] ? __lock_task_sighand+0x2a5/0x2d0 [ 391.929876][ C1] ? __lock_task_sighand+0x29/0x2d0 [ 391.935107][ C1] ? group_send_sig_info+0x2e0/0x310 [ 391.940444][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 391.945336][ C1] ? bpf_send_signal_common+0x2dd/0x430 [ 391.950928][ C1] ? __pfx_do_futex+0x10/0x10 [ 391.955644][ C1] ? bpf_trace_run2+0x1fc/0x540 [ 391.960534][ C1] ? bpf_trace_run2+0x36e/0x540 [ 391.965422][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 391.970495][ C1] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 391.976088][ C1] ? rcu_is_watching+0x15/0xb0 [ 391.980879][ C1] ? trace_sys_enter+0x1f/0xd0 [ 391.985761][ C1] do_syscall_64+0xf3/0x230 [ 391.990296][ C1] ? clear_bhb_loop+0x35/0x90 [ 391.995014][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.000954][ C1] RIP: 0033:0x7fad3fd773b9 [ 392.005412][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.025059][ C1] RSP: 002b:00007fad40b84048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 392.033514][ C1] RAX: ffffffffffffffda RBX: 00007fad3ff06058 RCX: 00007fad3fd773b9 [ 392.041602][ C1] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 392.049605][ C1] RBP: 00007fad3fde48e6 R08: 0000000000000000 R09: 0000000000000000 [ 392.057698][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 392.065699][ C1] R13: 000000000000006e R14: 00007fad3ff06058 R15: 00007ffc5d68cec8 [ 392.073719][ C1] [ 392.077095][ C1] Kernel Offset: disabled [ 392.081422][ C1] Rebooting in 86400 seconds..