last executing test programs: 4m32.304506562s ago: executing program 2 (id=44): socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = dup(r1) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) ioctl$TIOCL_SETSEL(r2, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0x0, 0x0, 0x101}}) 4m28.824322019s ago: executing program 2 (id=52): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="090000000600000004"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r4, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x20}}, 0x0) ioctl$DRM_IOCTL_AGP_FREE(r1, 0x40106435, &(0x7f00000000c0)) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), 0x0, 0xce4, r2}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x3ff, r2, 0x0, 0x100000000000000}, 0x38) socket(0x2, 0x2, 0x0) ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) 4m26.045239546s ago: executing program 2 (id=57): socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x4c, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ff9000/0x1000)=nil, 0x5000) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x2c240, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42) sendmsg$NL80211_CMD_DEL_TX_TS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000440)={r0, 0x0, {0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1c, "339f020bbe78b39843d601010000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323695c58d66500", "a1163939c787a16c1ca43f8539f3d3289737f0374c72a964a0193b3e8772fd29f35239d200", "24431a1e77a68e174f000000000000000010e200"}}) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000200)={0x0, {}, 0x0, {}, 0x6000, 0x6, 0x0, 0x0, "cd0d05a286a8d9c7b438dd4350274fc803519e3d7d156d943d4034728428556b2b5a97d6203497d63e98ec46bc3116e3930f9b02cdc0f982e0d499db318cb04c", "e39fb4a6d3333aba8405d70d523a5a783847b8bc04869aad25d757c86a08e932", [0xd027, 0x7]}) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r1) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4m24.684835319s ago: executing program 2 (id=61): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@mb_optimize_scan}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(0x0, &(0x7f00000000c0), 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000140)={[{@grpquota}, {@nodelalloc}, {@nouid32}, {@noblock_validity}]}, 0x1, 0x79b, &(0x7f0000000a40)="$eJzs3c1rXFUbAPDnTpImTfu+zQsv2LppVloonbQ1tgqCERciWCjo2jZMpiFmkimZSWlCFhYRBBG0uBB049qPunMruvZvcCMiLVXTYsWFjNz5SKb5mHw0k2mb3w9ucs6dc+ecZ+7cc8/MPcwNYM8aTP9kIo5ExIdJxKH6+iQieqqp7oiRWrl7iwu5dEmiUnn996Ra5u7iQi6atkkdqGcOR8T370Ycz6yutzQ3PzlaKORn6vmh8tTlodLc/ImJqdHx/Hh++syp4eHTZ589e2bnYv3zx/mDtz565emvR/5+54kbH/yQxEgcrD/WHMdOGYzB+mvSk76E93l5pyvrsKTTDWBb0kOzq3aUx5E4FF3VFADwOEvP/xUAYI9JnP8BYI9pfA9wd3Eh11g6+43E7rr9UkT01eJvXN+sPdJdv2bXV70O2n83ie76FdHYwetdgxHx2bdvfpku0abrkABreftaRFwcGFzd/yer5ixs1clNlBlckdf/we75Lh3/PLfW+C+zNP6JpfHPst41jt3tGIzY15xfffxnbq654Ys7UHl9/PdCbW5bGmjT+G9p0tpAVz33nzRzNCImCvm0b/tvRByLnt5LE4X8qRZ1HLvzz531Hmse//1x/a0v0vrT/8slMje7e+/fZmy0PPogMTe7fS3iye7luX33VvX/fdWx7sr9n6473+qJjy4nX33+vU/XK5bGn8bbWFbH316VzyOeirXjb0hazk8cSnf/ydrftev45udP+terv3n/p0taf+OzwG5I939/6/gHkub5mqWdrX/j+Nd+/+9L3qimG53H1dFyeeZUxL7ktdXrTy9v28g3yqfx1yJdGX+m5fs//SR4cZMxdt/67avtx7+kLVMs0/jHtrT/t564cW+ya/vxp/t/uJo6Vl+zmf5vsw18kNcOAAAAAAAAAAAAAAAAAAAAAAAAADYrExEHI8lkl9KZTDZbu4f3/6M/UyiWyscvFWenx6J6r+yB6Mk0furyUC2fNH7/dKApf3pF/pmI+F9EfNy7v5rP5oqFsU4HDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1B9a5/3/q195Otw4AaJu+DUvcyd+XrVQqlTa2BwBov43P/wDA46bF+X//brYDANg9Pv8DwN7j/A8Ae4/zPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG12/ty5dKn8tbiQS/NjV+ZmJ4tXTozlS5PZqdlcNlecuZwdLxbHC/lsrji10fMVisXLwzE9e3WonC+Vh0pz8xemirPT5QsTU6Pj+Qv5nl2JCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC2pjQ3PzlaKORnHovE+xHxEDSjHYkkHopmdCTxy4mfDrcqc32Dt/HIQxHFI5bodM8EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Gj4NwAA//8PbSWm") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0x10000002000003, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 4m20.522940463s ago: executing program 2 (id=66): syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b10009"], 0x0) timer_create(0x2, 0x0, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000000)=[0x40, 0x5]) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000001c0)=[0xf0]) 4m16.534650446s ago: executing program 2 (id=73): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@mb_optimize_scan}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000140)={[{@grpquota}, {@nodelalloc}, {@nouid32}, {@noblock_validity}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0x10000002000003, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 4m1.336477429s ago: executing program 32 (id=73): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@mb_optimize_scan}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000140)={[{@grpquota}, {@nodelalloc}, {@nouid32}, {@noblock_validity}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0x10000002000003, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 3m51.006430623s ago: executing program 5 (id=109): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f00002e0000/0xf000)=nil, 0xf000, 0x0, 0x100010, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/address_bits', 0x0, 0x0) fchdir(r2) getdents(0xffffffffffffffff, &(0x7f0000000080)=""/43, 0x2b) 3m48.617704727s ago: executing program 5 (id=112): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000240)=""/31, 0x1f) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_generic(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) 3m46.754711325s ago: executing program 5 (id=115): prctl$PR_SET_NAME(0xf, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8913, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) read$FUSE(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYRES32=r5, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x54}}, 0x0) socket$inet6(0xa, 0xa, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="d22e"], 0x28) 3m42.664253701s ago: executing program 5 (id=121): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="1c0000005e007f029e3b470d649b72ab25399cd956c07dead6a93690", 0x1c}], 0x1}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) gettid() sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24000844, &(0x7f00000001c0)={0xa, 0x4e21, 0x100, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r7 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003000601000004000200110000", 0x5b}, {&(0x7f0000000680)='\'', 0x1}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) 3m34.033419011s ago: executing program 5 (id=130): socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) getpriority(0x2, r1) fsmount(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = dup(r4) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) ioctl$TIOCL_SETSEL(r5, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0x0, 0x0, 0x101}}) 3m30.479591263s ago: executing program 5 (id=132): socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getpriority(0x2, r1) fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0x0, 0x0, 0x101}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r6}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x1acc02, 0x148, 0x118, 0x10, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @loopback, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'netdevsim0\x00', {}, {}, 0x1, 0x2, 0x10}, 0x40000, 0xb8, 0x118, 0x0, {0x0, 0x5803}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x2, 0x4, 0x0, 0x7], 0x11, 0x2}, {0x1, [0x3, 0xb, 0x2, 0x7, 0x5, 0x4], 0x2, 0x4}}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'gre0\x00', 'caif0\x00', {}, {0xff}, 0xd1b6c305b1e83769, 0x3, 0x9}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 3m13.655243565s ago: executing program 33 (id=132): socket(0x1, 0x80802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, 0x0, &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) getpriority(0x2, r1) fsmount(r4, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0x0, 0x204}}) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f0000000300)={0x2, {0x2, 0x0, 0x0, 0x101}}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r3, r6}, 0x14) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000001900)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0x0, 0x1acc02, 0x148, 0x118, 0x10, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast1, @loopback, 0xff, 0xffffff00, 'veth0_virt_wifi\x00', 'netdevsim0\x00', {}, {}, 0x1, 0x2, 0x10}, 0x40000, 0xb8, 0x118, 0x0, {0x0, 0x5803}, [@common=@inet=@socket3={{0x28}, 0x7}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x2, 0x4, 0x0, 0x7], 0x11, 0x2}, {0x1, [0x3, 0xb, 0x2, 0x7, 0x5, 0x4], 0x2, 0x4}}}}, {{@ip={@remote, @multicast2, 0x0, 0x0, 'gre0\x00', 'caif0\x00', {}, {0xff}, 0xd1b6c305b1e83769, 0x3, 0x9}, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) 18.45787797s ago: executing program 3 (id=385): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0xb00, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) syz_mount_image$f2fs(&(0x7f00000002c0), &(0x7f0000000240)='./file1\x00', 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x41, 0x5510, &(0x7f0000009680)="$eJzs3M1rI2UYAPAn7Xa/XYt48LYDi9DCJmz6seit6i5+YJey6sGTpkkasptkSpOmtScPghfx4H8iCp48+jd48OxNPCjeBCUz03WrLgpNm277+8HkmffNmyfPG0rhmQkJ4MyaTX77pRTX4lJETEfE1YjsvFQcmZU8vBAR1yNi6rGjVMw/mjgfEZcj4tooeZ6zVDz1xc3hjeWf3/r12+8vnLvy5Tc/TG7XwKS9GBHdzfx8p5vHtJXHB8V8bdjOYndpWMT8ie7DYpzmcae5nmXYqe2vq2VxsZWvTze3+6O40anVR7HV3sjmN3v5G/aHrf082Qse1LaycaO5nsV2P81iay+va3cv/9+21x/keRpFvo+y9DEY7Md8vrnbzPez+TCL9d6gmM/zpo3m7igOi1i8XdTTTiOrY/0wn/TJ9na7t72bDJtb/XbaS5Yr1Zcq1dvl6lbaaA6aS+Vat3F7KZlrdUbLyoNmrbvSStNWp1mpp935ZK5Vr5er1WTuTnO9Xesl1WplsXKrvDxfnN1MXr/3XtJpJHOj+Gq7tz1od/rJRrqV5K+YTxYqiy/PJzeqyTura8na/bt3V9fe/eDO+/deWX3ztWLRP8pK5hZuLSyUq7fKC9X5M7T/T4qix7h/OJTSpAsAePro/4FJOHT/P/2k/n/rfsTR9/+h/x+Lp6r/PRX9/5U4SfuHQ9H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWT/OfPVGdjKbj68U888UU88V41JETEXEH/9iOs4fyDld5Jl5wvqZv9XwXSmyDKP3uFAclyNipTh+f/aoPwUAAAA4vb7++PrnebeeP8xOuiCOU37RZurqh2PKV4qImdmfxpRtavTw/JiSZX/f52J3TNmyC1gXx5Qsv+R2blzZ/pfpA+HiY6GUh6ljLQcAADgWBzuB4+1CAAAAOE6fTboAJqMU+7cy9+8FZ9+8/+uG4KUDIwAAAOCE+PTRF3ev/efa0lEXAwAAAExc1v/7/T8AAAA43fLf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAP9m5n9vEgSgOwM8GL+w/LVrtfVvZG5SxJexxjxEFpAkKyIG0kAaogdxSQgQRHodAxCGSx7YSfZ/kTMYyP94gOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAl+6r9eL26vd125zdvp08owEAAAAu2VbrRf3PLPW/Nve/N7d+Nv0iIsqIuDR3H8Wns8xRk1O9PH9z+nz1qoa7iDrh8B6T5voSEX+a6/FH158CAAAAfFyb5WqeZuvpz2zoguhTWrQpv/3NlFdERDV7yJRWHvJ+ZQqrv9/j+J8prV7AmmYKS0tu41xpb1L/3I+rdtOTpkhNefFlxyKzjR0AAOjR6KzpdxYCAABAn/4NXQDDKOJ5K/O4FThJTbO99/msBwAAALxDxdAFAAAAAJ2r5/89nf+3d/4fAAAADCOd/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECXttV6sVmu5m1zdvt28owGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ7Yn3cUCIEwCIO96zuTuf9hpUFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4M3v/vJ/YmqcSeZeG0vPI8naqbF1auydG0d/GF+/BgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ot/98n9iapxJ5k4bS8cjydpVY+uqsfegcfRgvP0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLn/l3kqOIAgL+Z2dmYqLiessWJKFhoYzabkJhOLJTDwj9BOC4bPbNBTa4wIYjX2MnVaURLEUE5u/wPqRNIE7sUW0SwVt7szO3cD3D9kZm9u88H3rzvDsO873sLx33nzR0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJXJO7M4i4feNE7Lc/ce31qL/f09fXRn68FybDFOmkz6cHi5/iHpt5cIAAAAx0dW1fchhIf59krs015R/+fVNbHm/+7ZaVzV83vr/qqvav/Yfv3l0Ys7A/Wm48SbXl4fj87sT6Xz5Ga52J772ys6xcoXz16y4gtJ3998YZIX65l8c/fuu90iPNFEtgDAv3G66sug+n0o9sM2EwPg2OjUCu+q/s967eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITJZni6ipMQwnJnFkf3H99aO6i/s/VguWoXbt/eCl/N7hlvkYcQLq+PR2canc1iu37j5pXV8Xh0rfnglRBCW6O/XU7/yodzXBxCK+sj+J+CtPyyFyWfwxG0+EMJAIAjKS9brOsf5tsr8VyyFMKf3++u/1+vxWHO+v/Rxxfu1ceq1//Dxma4+AYbVz8bXL9x8831q6sfjeIKnx2+NTx38fz5i4PiWcnAExMAAAD+m27Z6vV/urR///9ULQ5z1v+ffzv8sj5Wpv4/0GzTr+1MAAAAjrfnX/3j9+SA80m3G75Y3di4Npwedz6fnR5bSPUfO1G2ev2fLbWdFQAAANCEyWaya///Ui0Oc+7/P/PDSz/V75mFEE6W+/+n1z4dX2puOgutiT8nbnuOAAAAtOtk2er7/3nx/n+688pDGkJ447VpXP4bwLnq/+y9r3+sj1V///9cc1NcSGl/uh5F3w+h0287IwAAAI6yp8oWi/3f8u2VT34+9UHX+/8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATfsrAAD//zY6POs=") syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="000000000000000000007f19f987553ea540"], 0x0, 0x0, 0x0}, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) ftruncate(0xffffffffffffffff, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r1, 0x4004f50d, &(0x7f0000000180)=0xfffffff9) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x1ffc, 0x6}) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x83) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000100)={0x18, 0x0, {0x0, @broadcast, 'vcan0\x00'}}, 0x1e) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000201090000000000000000000200000106001240000200002c00028014000180080003"], 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x10) accept4(r4, 0x0, 0x0, 0x0) 18.388319178s ago: executing program 0 (id=386): openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000040)={'ip6gre0\x00', 0x0, 0x2f, 0xbd, 0x1, 0x1, 0x0, @private1, @local, 0x0, 0x80, 0xfb5, 0x64}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r5, &(0x7f0000000200), 0xfffffecc) splice(r4, 0x0, r3, 0x0, 0x8001, 0x0) 17.368508226s ago: executing program 0 (id=388): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 13.67074888s ago: executing program 4 (id=392): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = gettid() waitid(0x2, r0, &(0x7f0000000100), 0x80000000, &(0x7f00000002c0)) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) r3 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000080)='\xa1\'\x04\x00\xe8e\x10\b\x00\x00Lk\x00', &(0x7f0000000200)='iuseblk\x00', 0x0) read(r3, 0x0, 0x27) futex(&(0x7f000000cffc), 0x1, 0x800000, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x86, 0x82, 0x7d, 0x10, 0xa5c, 0x2033, 0x79b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb2, 0x0, 0x0, 0xd8, 0xdc, 0x18}}]}}]}}, 0x0) 13.591349727s ago: executing program 3 (id=393): socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x53cb1000) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0x1, 0x800000, 0x0, 0x0, 0x0) 13.572605059s ago: executing program 0 (id=394): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8b) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000680)='nmi_handler\x00', r1, 0x0, 0x1}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200014, &(0x7f0000000780)=ANY=[@ANYBLOB="c161edea00"], 0x1, 0x5fb, &(0x7f0000000000)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'erspan0\x00', &(0x7f0000000b40)={'tunl0\x00', 0x0, 0x40, 0x8, 0xfff, 0x0, {{0xc, 0x4, 0x1, 0x8, 0x30, 0x65, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xb8, 0x3, 0x8, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2e1}, {@local, 0x9}]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000c00)={@mcast1, 0x65, r5}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)='%ps \x00'}, 0x20) 9.560410614s ago: executing program 4 (id=397): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), r0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r1, @ANYRES8=r0, @ANYRESOCT=r0], 0x38}}, 0x20040000) 8.72820876s ago: executing program 0 (id=399): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 8.524067016s ago: executing program 0 (id=400): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f00000002c0)={[{@mb_optimize_scan}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@auto_da_alloc}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x80a, &(0x7f0000000140)={[{@grpquota}, {@nodelalloc}, {@nouid32}, {@noblock_validity}]}, 0x1, 0x79b, &(0x7f0000000a40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0) futex(0x0, 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r2, 0xc020660b, &(0x7f00000001c0)={0x0, 0x10000002000003, 0x6}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc8}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) creat(&(0x7f0000000140)='./file2\x00', 0x1ad) unlink(&(0x7f0000000180)='./file1\x00') 6.016111221s ago: executing program 4 (id=402): prctl$PR_SET_NAME(0xf, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000500), 0x800, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8913, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$TIOCNOTTY(r0, 0x5422) read$FUSE(r1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050"], 0x54}}, 0x0) socket$inet6(0xa, 0xa, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) socket$alg(0x26, 0x5, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x48, &(0x7f0000000040)=ANY=[@ANYBLOB="d22e"], 0x28) 5.554301439s ago: executing program 3 (id=403): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000, @void, @value}, 0x94) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0], 0x20) 5.380978258s ago: executing program 4 (id=404): mkdir(&(0x7f0000005740)='./file0\x00', 0x3b) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chroot(&(0x7f0000000180)='./file0\x00') mount(0x0, 0x0, &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) 4.237417233s ago: executing program 4 (id=405): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x8], 0x0, [0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}]}}]}, 0x94}}, 0x200008c0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$cgroup_pressure(r5, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r6, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r7 = openat$cgroup_pressure(r5, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r6}], 0x1, 0x0, 0x0, 0x0) r8 = syz_open_dev$audion(&(0x7f00000001c0), 0xffffffffffffff9c, 0x40000) sendmsg$kcm(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000300)="ea1468b145e1843da17f5cb68ae86798e9ee2f88328135e59baa35e3349bc5151b3bf930de89cf892faa5b2b636d9ed2628efec97d", 0x35}, {&(0x7f0000000480)="0123ddcb3645cd2b0dd9a77d414beb7ddca4122728a439ed30b80e4ce980f04354d6b6d3bae4e3f608fb58ae5f12964922f14866fe06ba6ffe9aefef4f706611dfe3d0ce9cfb5f5b47c07b420180f048f6a9aeef51fd659352ea6e7ab4b7905fa413779112b5e022b09cffb31d4e5951dc738cbdcc5e34e40021108def75c889de04ca30ee6a12f86a6d54efcc41d29413e49ebce91bfb216a37f16598d32ab6d8277f1b3e417edff49de7851dbf673fa7e5540535c0117067c3476e7506e1eb7c2f85", 0xc3}], 0x2}, 0x81) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f00000004c0)) write$cgroup_pressure(r7, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r6) close(r7) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount$afs(&(0x7f0000000280)=ANY=[@ANYBLOB="25737900003a73797a302e62614306007000"], &(0x7f0000000100)='./file0\x00', &(0x7f0000000200), 0x0, 0x0) r9 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_GET_ACCESS_COUNT(r9, 0x2289, &(0x7f0000000000)) socket$inet6(0xa, 0x800, 0x6) mount(&(0x7f0000000040)=@md0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x10, &(0x7f0000000180)='\\\x00') 3.70535613s ago: executing program 1 (id=406): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = getpid() move_pages(r0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000040)={r3, 0xfffffff8}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r3, 0x1000, 0x7}, 0xc) (async) fcntl$lock(r1, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x902}) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb80, &(0x7f0000000c40)="$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") (async, rerun: 32) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) (rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x0, 0x0) open_by_handle_at(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="080000000200010008"], 0x0) (async) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001100)='fdinfo/4\x00') (async, rerun: 32) r6 = accept4$llc(r1, 0x0, &(0x7f00000000c0), 0x800) (async, rerun: 32) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000240)={r3, @in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x7, 0x62c, 0x0, 0x3b9852c295103f1c, 0x9c5, 0x2}, 0x9c) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r6, 0x8983, &(0x7f0000000140)={0x0, 'veth1_to_bridge\x00', {0x4}, 0xd}) (async) unshare(0x8040480) (async) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x0, 0x200}}}, 0x7) (async) pread64(r5, &(0x7f0000002140)=""/17, 0x11, 0x0) 3.224096496s ago: executing program 1 (id=407): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x30, r4, 0x1, 0x8000000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_PLINK_STATE={0x5}]}, 0x30}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) r8 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001100)=ANY=[@ANYBLOB="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"/849], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.768830579s ago: executing program 1 (id=408): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x8, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x5, 0xf, 0x0, &(0x7f0000000000)="259a53f271a76d2608004c6588a80a", 0x0, 0xd11, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 1.485464792s ago: executing program 3 (id=409): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="390028bd7000fc0003000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x44) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r5) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r3) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = creat(&(0x7f0000000140)='./bus\x00', 0x0) r9 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r10 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_ATTR(r8, &(0x7f00000002c0)={0x78, 0x0, 0x0, {0x5, 0x800, 0x0, {0x5, 0xe6e0, 0x4, 0xffff, 0x2, 0x2, 0x40000003, 0x3, 0xd, 0x6000, 0x401, 0x0, 0x0, 0x8}}}, 0x78) sendfile(r10, r9, 0x0, 0x4000000053d2) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x20, 0x3d, 0x9, 0x0, 0x0, {0x2}, [@typed={0x4, 0x45}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x1d}]}]}, 0x20}}, 0x0) 1.256778331s ago: executing program 1 (id=410): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000680), 0x101000) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) signalfd(r0, &(0x7f0000000ac0)={[0x7fff]}, 0x8) 920.360728ms ago: executing program 1 (id=411): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='kfree\x00'}, 0x10) socket(0x11, 0x800000003, 0x0) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000440)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x1, 0xf06, &(0x7f0000002d40)="$eJzs3U9sHNX9APA3a6/txCZeAz8w8COk0IpAwQ5JpKa3IFCPiEvvoJDQCENRQw9E/Ak9ICohioQ4VRyouFAqpUhFAlWqUE9tT6166wn1QqUqlYJ6aCMlrrJ5z9599rDriT273v18pK/fvnmz8/3ObuTMjGffBmBsNdo/jx5dLEJ497N3Hn35qeKTq8vuWlvjQPtnEXutEEKzo19k2/siLrh88aUTm7VFONz+mfrhsQtrz50NIZwLB8LnoRU+Wl756sP3Hjn48eszt7x19plXdmj31+T7AQAAo+j8n1b+dt8//vjAwqXz+4+H6bXl6fi8Ffuz8bj/UDxQTsfLjdDdLzqi01S23kSMRrbeRLbeZJZnsiRfM9tOs2S9qR75JjqWbbafAAAAsBul89pWKBpLXf1GY2np2nn/VV/MTxVLz51eOXVmQIUCAAAAlf371fZNt0IIIYQQQggxEtG+n3cI6hBi2GJ1ftBXIAAAAIBxk88XtsG57Z2pa21rrf7yX3i4sfnzYRvU/e9f/t2V/4PX/MYBAKC6UT2aTPuVjqPTPAb5PIIT2fO2evzfyLYzucU6y+YV7FpeDO/bVFZ//roOq7L6t/o+DkpZ/fl8mMOqrP58ns5hVVb/dM11VFVW/0zNdVRVVv+emuuoqqz+vTXXUVVZ/bM111FVWf1zNddRVVn9N9RcR1Vl9e+ruY6qyurfLbfVltXfqrmOqsrqX6i5jqrK6r+x5jqqKqv/pprrqKqs/pu/7km75eCoD3fGNr0O+7PxzvPn/Jxut5zjAQAAwLj7r/n/hBBCiA3RvtQ/BHUIMdpRDEENQogBxfotk4OvZWzi1UFefAAAAACGQvpcQPoA+mqUxid6jE92js+sr5DGmz2eP9VjfLrHOAAAABDCb984ddvbxfrn/K93Prw0NcKe8MmVUGEeo3yiu63mv955z643/26ZtwwAAIDxUnzv8yv3P/r+CwuXzu8/3nH2eyWe76Z5QCfjtYFPYz/dFzCX9Yt0Dn28O0+jZL38+sANZdt7/Dp3FAAAAMZYOn9vhaKx1HHe3QqNxtLS+vn4YmgWp06vnDwU++n7Wf4w35y+uvyhmusGAAAA+rd+vr/5+X/6Ht/FMFUsPXd65dSZa/25teXNRud1gfn15UXndYFWtvxwyfIjsZ++v/MH83vay5dO/HDlqe3eeQAAABgTZ148+8yTKysnf+SBB+PzYHI4yhjmB4P+zQQAAGy3L798p/njI3O/u/b5//X579Ln/w/EfivO7ffnuEK6TyB9DmDD5/Wf6M4zX7be893rtbL1JmJMZ3XPdGwntOcb7H7eQlm+Vvd2puKUfXm+2SzfXJYvn6dgMls/5duXLc/nJ0zrzWfL83kYJ7McRZb/7gAAAADlll949vnlMy+effD0s08+ffLpk88dOXzsu8eOHXroOw8tt+/rX+68ux8AAADYjdZv+h10JQAAAAAAAAAAAAAAAAAAADC+6vg6sUHvIwAAAIy7f70aQjgnhBCVY3V68DUIIYQQQgixa6L93e71520M+voDAAAAMH4uX3zpRGe7wbliW/Otba11rbkS86Z27sG/LlyNtNqFhye6nr93W6th3NX971/+3ZX/g9e2N/9MetD377/skvHxannvXf7lYmf+2yf7zJ/v/+PV8h/M8t8b+su/+n6W/4lq+e/L8u/tM/+G/X++Wv77Y/7F2D94T7/5u9//6dim/djTZ/5vZ/v/VOg3f7b/rT4TZh6I+QFgHI3qDQDpKCEdR8/GftrfeLgZJrLnbfX4v5FtZ/K6K+/ebjoOujX20/HSXJY32Wr9s9n2bqhYZy6va1iV1b9d7+NOK6u/WXMdVZXVP1VzHVW169/kHHh6ALVUUfb6z9RcR1Vl9fd7HjpoZfXvluvKZfXP1lxHVWX1z9VcR1Vl9W/1//FBKat/X811VFVW/3zNdVRVVn/Fy2q1K6t/oeY6qiqr/8aa66iqrP6baq6jqrL6b665jkG5I7Zl58Pp/HM+jqV+K+tPb/Jajuq1BQAAANht/mn+PyGEEEKIStG+X2YI6hhMdNwtN/BaxHbEf1avGXQdQoidi9XVAV58YOB29tPMAAwrv//Hm/d/vHn/x5v3n6+T7uEvsn4y0WN8ssd4s8f4VDae/3ud7jF+U7bd1XRdM7q5x/j/9Rjf12P81h7jiz3Gb+sxfnuP8Tt6jAMAADAebomt80MAAAAYXS//6tM3f3PvExcXLp3ffzxMbZh3/lDsT8e/rb8R+/m890kz/s3/J7H/i9j+PrZ/z9Z3/wkAAADsvPQ9Mf7+DwAAAKMrfU+p838AAAAYXQuxdf4PAAAAo+vG2Dr/BwAAgBFWzGy+OLbpusDdse13Xj8AYPj9f2zvjO3+2N4V22/ENh0H3BPbb9ZUHwCwfX7+/Z8ee7tYn+//SDZ+OS5P7Qbnrl0pKBrdM/nvie3e2H6rz3ry7wPoN3+yr888O5V//jrzAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACjo9H+efToYhHCu5+98+jPpt78y9Vld62tcaD9s4i9Vgihufa8NLre/3Vc8fLFl050tldiW4TDoQjF2vLw2IW1TLMhhHPhQPg8tMJHyytfffjeIwc/fn3mlrfOPvPKDr4EXfsHAAAAo+h/AQAA///aSSHp") mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910510000000000070000005157e7c59500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000140)={0x1, @raw_data="2c65ebb8c603a3ca7455730837924d6bef54011183666425ac550b5d2749d29c97b38c0d42c9209066ea88a00b251342070d2d2995cf4a13adad5437a558c610600da24d89e68cb4cb27f2f65c64a207d83f6f6dc95d9c07803246f4f732ee48d2d5dc32d04bdeada697d94df5c557c331f6fc3a377f54a021f5e04c2965135a78a161a8a76c6ad619379b861df9350158434f5876afcdb885d4925161b1498bc589dc48fcff76db731c2de226312f014067300fd85cdb0763cd14108b2c365895c4cccc21966bff"}) r1 = socket$netlink(0x10, 0x3, 0xe) sendmsg$nl_route_sched(r1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r3 = openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB='c *:*\t\x00wm\x00'], 0xa) 495.408225ms ago: executing program 3 (id=412): r0 = syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x200, 0x0, 0x3e}, &(0x7f0000000500), &(0x7f0000000100)=0x0) r2 = io_uring_setup(0x46da, &(0x7f0000000540)={0x0, 0x8432, 0x20, 0x1, 0x14a, 0x0, r0}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000dc0)={0x43, 0x2, 0x3}, 0x10) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0], 0x1) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20028, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRES64=r1, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000000d80)={0x564f, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000840)=""/56, 0x38}, {&(0x7f0000000880)=""/160, 0xa0}, {&(0x7f00000009c0)=""/127, 0x7f}, {&(0x7f0000000a40)=""/46, 0x2e}, {&(0x7f0000000a80)=""/62, 0x3e}, {&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000bc0)=""/198, 0xc6}], &(0x7f0000000d40)=[0x1, 0x9, 0x4, 0x100000000, 0x10001, 0x9, 0x9], 0x7}, 0x20) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000000, &(0x7f0000000400)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38, 0x65]}}]}) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) syz_io_uring_setup(0x7dca, &(0x7f0000000340)={0x0, 0x0, 0x200, 0x0, 0x3e}, &(0x7f0000000500), &(0x7f0000000100)) (async) io_uring_setup(0x46da, &(0x7f0000000540)={0x0, 0x8432, 0x20, 0x1, 0x14a, 0x0, r0}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) (async) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000dc0)={0x43, 0x2, 0x3}, 0x10) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r3, 0x0) (async) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000000)=[r0], 0x1) (async) syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x20028, &(0x7f0000000940)=ANY=[@ANYBLOB="6e6c733d6370313235302c6e6f626172726965722c63726561746f723dbd3c66f52c7569643d", @ANYRES64=r1, @ANYBLOB=',force,umask=000000005,\x00'/38], 0x3, 0x6a4, &(0x7f0000000100)="$eJzs3U9sHFcdB/DvbDbrbJBS918aEFKtRqqgEYmdVUmQkBoQQjlEKIJLr1biNFY2aeW4KK0Q2QAFiRMn1AOHIhQOPSGEkMoJUc5ISFw4+R6JG4ccAKOZnV2v7Y1jJ7HXbT8faTzv7Zv33m9+nT+7s402wGfW+ddzsJci509cuFXWV+52uit3O9cH5SRTSRpJs79K0U6Kj5Nz6S/5fPliPVzxoHlevfdR0Xz/w06/1qyXavvGVv02GbtlLzk0rBxIMtMv/mfbw24ar1qqcS6tjfeIimHcZcKODxIHk7a6SW+tsfHQ7ts/b4F963b/vrnJdHI4/btr+T4g9dXh4VeGydvy2tTbuzgAAABgt4z9LD/qqfu5n1s5sjfhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKdD0f/NwKJeGoPyTIrB7/+3Rn5TvzXhcB/Te1eq1XefmnQgAAAAAAAAAPBYXryf+7mVI4P6alF95/9SVXmu+vu5vJ2bWchSTuZW5rOc5SxlLsn0yECtW/PLy0tzm3v+MmXP1dXV23XP02N7nl4fV29joOP+T4NNGwEAAAAAAADAZ9aPcn7t+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANgPiuRAf1Utzw3K02k0kxxK0ipmhpu3JhrsE/DnSQcAAAAAu69dr48U/+sXVovqM//R6nP/obydG1nOYpbTzUIuV88C+p/6G3/vdbordzvXy2XzwN/4147iqEZM/9nD+Jlnqy2eH/Y4n2/nezmRmVzMUhbz/cxnOQuZybeq0nyKTNdPL6ZX7rYziHVzvOfW1S5ujO3FkXIZ37EqknauZLGK7WQutQahN+rtjo3M9sdWsmHGO2V2itdq28zR5Xpd7tEv6vX+MF3t+cFhRmbr3JfZeHo075tzv8PjZONMc2kMn0E9tzZLWd040yPl/HC9LnP9093N+Q4fpa3PRO/nZW1w9B3dOufJl//xl4tXGzeuXb1y88T+OYwe0cZjojOSiRe2lYlumYneY2Ti0OPE/+S06mz0r6I7u1q+VPU9ksV8J2/mchZyJrOZy9nM5ms5nU5Oj+T1+a3zWp1rjZ2da8e/VBfKe9LPRu5Ne2bqQQ1lXp8eyevolW66aht9ZS1Lz2wjS0Ur47P0z7GhNL9QF8o5fjxyx5m8jZmYG8nEs1tn4tf/XU1ys3vj2tLV+be2Od/L9bo8bd9bf23+zRPZoZ2rd7c8Xp4p/2Olf9sYPTrKtmcHbRvy1aq/cWnWg61ra6U6n/ttDztTy5GO3hk3Ur/thbGzdKq2YyNt697l5M10h+9CANjHDr9yuNW+1/5b+4P2T9pX2xcOfXPq7NQXWzn41+afDvyu8dvG14tX8kF+mCOTjhQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4Nbr7z7rX5bndhaR8W0njCA94Z2zRIRf+V1v7Y909qYWqrI+r3Sbbo3ppEzO0k+yJ1ae7BXFMZ03Rh+Eo7aQzjSXJtn/zAHbAbTi1ff+vUzXfe/cri9fk3Ft5YuHH67JnXznS+Onf71JXF7sJs/++kowR2w9rbgElHAgAAAAAAAAAAAGzXXvzzhjHTFr0J7CsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwyXT+9Rzspcjc7MnZsr5yt9Mtl0F5bctmkkaS4gdJ8XFyLv0l0yPDFQ+a59V7H/3q5fc/7KyN1Rxs39jQ7w//Xl3d4V706iUzSQ7U64eb2tZ4l0bG6+0wsL5iuIdlwo4PEgeT9v8AAAD//x5LB84=") (async) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r3, 0xe, &(0x7f0000000d80)={0x564f, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000840)=""/56, 0x38}, {&(0x7f0000000880)=""/160, 0xa0}, {&(0x7f00000009c0)=""/127, 0x7f}, {&(0x7f0000000a40)=""/46, 0x2e}, {&(0x7f0000000a80)=""/62, 0x3e}, {&(0x7f0000000ac0)=""/254, 0xfe}, {&(0x7f0000000bc0)=""/198, 0xc6}], &(0x7f0000000d40)=[0x1, 0x9, 0x4, 0x100000000, 0x10001, 0x9, 0x9], 0x7}, 0x20) (async) open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) (async) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x2000000, &(0x7f0000000400)={[{@grpquota_block_hardlimit={'grpquota_block_hardlimit', 0x3d, [0x38, 0x65]}}]}) (async) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0) (async) 142.538389ms ago: executing program 3 (id=413): syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f00000002c0)=ANY=[], 0x1, 0x5b1, &(0x7f0000001000)="$eJzs3MFv29YZAPDHxK4NBwsGFGvSNEDZtIfsEFeSFwdGBywaTdtsJVEg5cI5DcXiZMHsblg2YMmly6VDgQ077bz1utOO+6d62T/ggRLlybIzuWkbZcDvB8TvUfzI9z2C4QcRIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEKJks9FoRqGT9Xb34udLNou8e7y0EKbXj/f3rxPNCYsTf0MUQlT9C8vL4eroo6uv/zf2B9WfG+HKaOlKWK6a5fD00hvf/+D1hQvVhotRdCqLl+3xk6e//OTgYP83X2Obo6Ojz6rZfIdpvTTbaS8r86zb3k7jrMzjjfX1xvs7W2W8lXXS8l45SLtxUqTtQV7EN5O7IYSNtThdvZfv9rY32500vpn8MG5ubNy51Wo01uMPV/tpuyjz3vsfrpbJTtbpZL3tYUy1+lbr7XCnOhE/ygbxIG134/jBo4P9tVlJVkHN8wS1ZgW1Gq1Ws9lqNddvb9y+02gs12fr8QcLjSlhepOF+Z+0vHSv1SfKcGF8jXvtW7uIwws6Sv4y7xQAAACA71g0vMceDe/LXx32trJO2jgRcxTNLT0AAADgWzD8an+lvgEQwtUQnf7+DwAAAPx/+/u4c+YzdiGKQtlfisaPqvT33osO21WvfXhx9NHF6T0Otq5Fl+udDJv1hXopSa9Hb46C3hxHf1U3D57/rN8/Q5VHVBSL0bNvlkD4U7g2irl2f9TeH68ZzXZlK+ukq0ne+aAZ2u3LFwbp3uB3nz76fQhFcXTxi173chQePDrYX/35rw7uD3N5Vu3l2WH9C4lTP5Q4mctSmMjlt8fPPdYzvnvyyC8Ob8RUs/6i110ZjduYnP+F0eYXvsb8Pw9vjWLeWhm1Kyfnv1yN2Vw9Y/aTWTT7e+8t1YOdc+ZTWVwfxVy/OTyx3r1Zr1mcyKI1K4vW5PF/oWNxnMW7J7KYPBZrs7JY+4ZZAMzLg+kqdKr+n6q7L3CV+x/VvRqlKuEzq/svZo7yeXhnFPPOtYW6Il0MYeqK3ph1RW+cs66HcHYW/wg3/vbXEHbDjXHw82psNe6fT1TV6PDLaoMvT4/7h1FT/vvhzqWqs3T46/DG4ydPbz06/OTh/sP9T1uttfXGjxqN262wOJxG3ag9AJwhLb6KVgZ/jIoi6/+subHRbA920rjIk4/iItvcTuOsN0iLZKfd207jfpEP8iTvVJ2Ps820jMvdfj+vKklexP28zPaGb36J61e/lGm33RtkSdnvpO0yjZO8N2gng3gzK5O4v/vTTlbupEW8lRdx2U+TbCtL2oMs78Vlvlsk6Wocl2k6EZhtpkefhZBV3V7cL7Juu7gXf5x3drtpvJlW1bI/yKNQ7XA8VtbbyovucLer8z7YAPCKeBzqN9gdv8ru8U/Gq56cWnVmJyzPiJnzFAGAKdNVemneCQEAAAAAAAAAAAAAAKdMPq734/qVPud77O+V7dy9dNaqt+ef2GQnhLDwCqShc87O8quRxmL93/ZF9xOFEGYHf6+KmedVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADO9p8AAAD//0n5kWY=") openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x8b) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f05e13f000009058303", @ANYRESDEC], 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a80)={&(0x7f0000000680)='nmi_handler\x00', r1, 0x0, 0x1}, 0x18) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x200014, &(0x7f0000000780)=ANY=[@ANYBLOB="c161edea00"], 0x1, 0x5fb, &(0x7f0000000000)="$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") bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x7fff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000b00)={{0x1, 0x1, 0x18, r3, {0x3}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000bc0)={'erspan0\x00', &(0x7f0000000b40)={'tunl0\x00', 0x0, 0x40, 0x8, 0xfff, 0x0, {{0xc, 0x4, 0x1, 0x8, 0x30, 0x65, 0x0, 0x8, 0x4, 0x0, @private=0xa010101, @remote, {[@timestamp_prespec={0x44, 0x1c, 0xb8, 0x3, 0x8, [{@empty, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2e1}, {@local, 0x9}]}]}}}}}) ioctl$sock_inet6_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000c00)={@mcast1, 0x65, r5}) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c06, r1) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)='%ps \x00'}, 0x20) 140.05249ms ago: executing program 0 (id=414): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000020000000c"], 0x48) mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001dc0)={0x0, 0x3000f2}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000007290000000000000000850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pwrite64(r1, &(0x7f0000000200)="f2a3c874cfdf8a2fe0447ccea14d3c4fd31d2edac22480da058981999013660d0b150d6220a350d7d968041ba8b612bca6c152193290176cdf655167b4d23b1941fbcd", 0x43, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000640)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x1, 0x1, [{{0xa, 0x0, 0xf0b0, @local}}]}, 0x110) 126.457123ms ago: executing program 4 (id=415): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/zoneinfo\x00', 0x0, 0x0) read$char_usb(r0, &(0x7f0000000000)=""/38, 0x26) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NLBL_CALIPSO_C_REMOVE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[], 0x1c}}, 0x8080) ptrace(0x10, r1) ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0)) ptrace$cont(0x20, r1, 0x0, 0x0) (fail_nth: 1) 0s ago: executing program 1 (id=416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) (async) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x24000000) (async) r4 = syz_io_uring_setup(0x10a, &(0x7f0000000380)={0x0, 0x5f39, 0x0, 0x80, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='./file0\x00'}) (async) io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000002100), 0x76020, &(0x7f0000000100)=ANY=[@ANYRESHEX, @ANYRESDEC]) read$FUSE(r7, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) (async) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xf, 0x8, &(0x7f00000000c0)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xf, 0x63, 0xa, 0xff00}, [@call={0x55}, @exit, @map_fd, @jmp]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x8, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000b40)=r3}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c40)={0x18, 0x16, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x36, 0x0, 0x0, 0x0, 0x2b41a480}, {}, {}, [@alu={0x4, 0x1, 0x8, 0x5, 0x7, 0x40, 0xffffffffffffffff}, @ldst={0x2, 0x1, 0x2, 0x4, 0x5, 0x80, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x4}, @call={0x85, 0x0, 0x0, 0xa0}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000004c0)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000008c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000900)={0x2, 0x9, 0x93, 0x40}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9], &(0x7f0000000c00)=[{0x1, 0x2, 0x3, 0x7}, {0x1, 0x2, 0x0, 0x7}], 0x10, 0x3, @void, @value}, 0x94) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000008000a4000000003280004800800024000000012080001400000000114000300"], 0xc0}}, 0x0) syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x3, 0xee2, &(0x7f0000000f40)="$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") chdir(&(0x7f0000000380)='./file0\x00') unlink(&(0x7f0000000100)='./file1\x00') write$FUSE_INIT(r7, &(0x7f0000000380)={0x50, 0x0, r8, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50) (async) syz_fuse_handle_req(r7, &(0x7f0000008280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): 3.197485][ T6060] [ 373.204232][ T6060] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 373.214241][ T6060] syz.0.26: attempt to access beyond end of device [ 373.214241][ T6060] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 373.227164][ T6060] syz.0.26: attempt to access beyond end of device [ 373.227164][ T6060] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 373.240088][ T6060] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 373.249897][ T6060] syz.0.26: attempt to access beyond end of device [ 373.249897][ T6060] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 373.263298][ T6060] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 373.274306][ T6060] syz.0.26: attempt to access beyond end of device [ 373.274306][ T6060] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 373.287291][ T6060] syz.0.26: attempt to access beyond end of device [ 373.287291][ T6060] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 373.333169][ T6060] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 373.348225][ T6060] syz.0.26: attempt to access beyond end of device [ 373.348225][ T6060] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 373.371325][ T6060] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 373.486036][ T6060] syz.0.26: attempt to access beyond end of device [ 373.486036][ T6060] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 373.766568][ T5917] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 373.777877][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.830683][ T6068] syz.5.32: attempt to access beyond end of device [ 373.830683][ T6068] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 373.852516][ T6068] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 373.863736][ T6068] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 373.888737][ T6068] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 373.901623][ T6068] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 373.921851][ T6068] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 373.933440][ T6068] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 373.951474][ T6068] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 373.963492][ T6068] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 373.973496][ T6068] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 374.099849][ T6067] loop3: detected capacity change from 0 to 16 [ 374.108320][ T6060] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 374.112390][ T5917] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 374.154052][ T5917] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 374.164075][ T6060] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 374.210966][ T6064] block nbd5: shutting down sockets [ 374.234689][ T6067] erofs (device loop3): mounted with root inode @ nid 36. [ 374.277398][ T5917] usb 3-1: config 0 descriptor?? [ 374.288978][ T5917] usb 3-1: can't set config #0, error -71 [ 375.596953][ T5917] usb 3-1: USB disconnect, device number 2 [ 375.605191][ T6060] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 376.316115][ T6074] netlink: 'syz.2.33': attribute type 10 has an invalid length. [ 376.353805][ T6067] erofs (device loop3): bogus dirent @ nid 46 [ 376.614917][ T6074] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 376.739326][ T6074] syz.2.33 (6074) used greatest stack depth: 19408 bytes left [ 377.340203][ T5917] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 377.533560][ T5917] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 377.634780][ T5917] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.675195][ T6094] loop5: detected capacity change from 0 to 128 [ 377.724651][ T5917] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 377.761474][ T6094] netlink: 'syz.5.41': attribute type 11 has an invalid length. [ 377.767470][ T5917] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 378.080727][ T6100] bio_check_eod: 13 callbacks suppressed [ 378.080831][ T6100] syz.0.42: attempt to access beyond end of device [ 378.080831][ T6100] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 378.105153][ T6100] syz.0.42: attempt to access beyond end of device [ 378.105153][ T6100] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 378.128758][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.135876][ T6100] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 378.142338][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.151982][ T5917] usb 4-1: Manufacturer: syz [ 378.164022][ T6100] syz.0.42: attempt to access beyond end of device [ 378.164022][ T6100] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 378.177778][ T6100] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 378.201909][ T6100] syz.0.42: attempt to access beyond end of device [ 378.201909][ T6100] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 378.234990][ T6100] syz.0.42: attempt to access beyond end of device [ 378.234990][ T6100] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 378.257976][ T6100] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 378.271460][ T6100] syz.0.42: attempt to access beyond end of device [ 378.271460][ T6100] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 378.285570][ T6100] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 378.337505][ T6100] syz.0.42: attempt to access beyond end of device [ 378.337505][ T6100] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 378.351595][ T6100] syz.0.42: attempt to access beyond end of device [ 378.351595][ T6100] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 378.371490][ T6100] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 378.386172][ T6100] syz.0.42: attempt to access beyond end of device [ 378.386172][ T6100] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 378.418819][ T6100] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 378.471436][ T6100] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 379.092594][ T5917] usb 4-1: config 0 descriptor?? [ 379.129805][ T5917] igorplugusb 4-1:0.0: incorrect number of endpoints [ 379.383605][ T6109] loop1: detected capacity change from 0 to 512 [ 379.390690][ T6109] ======================================================= [ 379.390690][ T6109] WARNING: The mand mount option has been deprecated and [ 379.390690][ T6109] and is ignored by this kernel. Remove the mand [ 379.390690][ T6109] option from the mount to silence this warning. [ 379.390690][ T6109] ======================================================= [ 379.429065][ T6109] EXT4-fs: inline encryption not supported [ 379.437020][ T6109] EXT4-fs (loop1): blocks per group (64) and clusters per group (20800) inconsistent [ 379.454703][ T5981] usb 4-1: USB disconnect, device number 2 [ 379.467193][ T6110] pim6reg: entered allmulticast mode [ 379.473280][ T5917] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 379.475936][ T6110] pim6reg: left allmulticast mode [ 379.830286][ T5917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.843397][ T5917] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 379.915231][ T5917] usb 5-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00 [ 380.095768][ T5917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.373290][ T5917] usb 5-1: config 0 descriptor?? [ 380.456355][ T5917] hub 5-1:0.0: bad descriptor, ignoring hub [ 380.765726][ T5917] hub 5-1:0.0: probe with driver hub failed with error -5 [ 380.841927][ T6119] syz.1.49: attempt to access beyond end of device [ 380.841927][ T6119] nbd1: rw=0, sector=64, nr_sectors = 1 limit=0 [ 380.860684][ T6119] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 380.875105][ T6119] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 380.905565][ T6119] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 380.922763][ T6119] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 380.953567][ T6119] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 380.999443][ T6119] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 381.018326][ T6119] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=256, location=256 [ 381.055168][ T6119] UDF-fs: error (device nbd1): udf_read_tagged: read failed, block=512, location=512 [ 381.141507][ T6119] UDF-fs: warning (device nbd1): udf_fill_super: No partition found (1) [ 381.239984][ T6106] loop4: detected capacity change from 0 to 256 [ 381.367428][ T6126] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 381.378728][ T6126] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 381.410122][ T6126] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 381.425141][ T6126] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 381.450465][ T6126] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 381.471451][ T6126] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 381.517733][ T6126] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=256, location=256 [ 381.531491][ T6126] UDF-fs: error (device nbd2): udf_read_tagged: read failed, block=512, location=512 [ 381.544696][ T6126] UDF-fs: warning (device nbd2): udf_fill_super: No partition found (1) [ 382.103901][ T6118] block nbd1: shutting down sockets [ 382.252655][ T6106] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1161abd0) [ 382.537518][ T6106] exFAT-fs (loop4): invalid boot region [ 382.543495][ T6106] exFAT-fs (loop4): failed to recognize exfat type [ 384.711483][ T58] usb 5-1: USB disconnect, device number 2 [ 384.822393][ T6142] loop6: detected capacity change from 0 to 524287999 [ 385.114090][ T6148] loop6: detected capacity change from 524287999 to 524287952 [ 385.311755][ T6153] loop1: detected capacity change from 0 to 128 [ 386.028974][ T6160] loop2: detected capacity change from 0 to 512 [ 386.044023][ T6160] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 386.113077][ T6153] netlink: 'syz.1.58': attribute type 11 has an invalid length. [ 386.761483][ T6160] EXT4-fs (loop2): 1 truncate cleaned up [ 386.768145][ T6160] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.042660][ T6173] bio_check_eod: 23 callbacks suppressed [ 389.042709][ T6173] syz.0.65: attempt to access beyond end of device [ 389.042709][ T6173] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 389.064489][ T6173] syz.0.65: attempt to access beyond end of device [ 389.064489][ T6173] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 389.081017][ T6173] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 389.094150][ T6173] syz.0.65: attempt to access beyond end of device [ 389.094150][ T6173] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 389.108109][ T6173] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 389.128556][ T6173] syz.0.65: attempt to access beyond end of device [ 389.128556][ T6173] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 389.142388][ T6173] syz.0.65: attempt to access beyond end of device [ 389.142388][ T6173] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 389.156496][ T6173] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 389.168416][ T6173] syz.0.65: attempt to access beyond end of device [ 389.168416][ T6173] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 389.185370][ T6173] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 389.203453][ T6173] syz.0.65: attempt to access beyond end of device [ 389.203453][ T6173] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 389.218615][ T6173] syz.0.65: attempt to access beyond end of device [ 389.218615][ T6173] nbd0: rw=0, sector=2048, nr_sectors = 8 limit=0 [ 389.232793][ T6173] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 389.244449][ T6173] syz.0.65: attempt to access beyond end of device [ 389.244449][ T6173] nbd0: rw=0, sector=4096, nr_sectors = 8 limit=0 [ 389.258283][ T6173] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 389.267961][ T6173] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 389.563601][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 389.584272][ T6175] loop1: detected capacity change from 0 to 1024 [ 390.232467][ T6175] hfsplus: request for non-existent node 3 in B*Tree [ 390.239364][ T6175] hfsplus: request for non-existent node 3 in B*Tree [ 391.105459][ T5917] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 391.242239][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.0.68'. [ 391.284211][ T6182] 9pnet_virtio: no channels available for device syz [ 391.634324][ T5917] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 391.643437][ T5917] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 391.659130][ T5917] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 391.668428][ T5917] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 391.676634][ T5917] usb 3-1: Manufacturer: syz [ 391.778893][ T5917] usb 3-1: config 0 descriptor?? [ 391.848186][ T5917] igorplugusb 3-1:0.0: incorrect number of endpoints [ 391.999361][ T6190] loop4: detected capacity change from 0 to 2048 [ 392.034421][ T58] usb 3-1: USB disconnect, device number 3 [ 392.056511][ T6183] block nbd0: shutting down sockets [ 392.636632][ T6190] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.161898][ T6199] EXT4-fs error (device loop4): ext4_ext_precache:648: inode #2: comm syz.4.70: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 393.281242][ T6200] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.70: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 393.561611][ T6195] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 393.808720][ T6205] loop2: detected capacity change from 0 to 512 [ 393.880585][ T6205] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 393.882568][ T6203] EXT4-fs error (device loop4): ext4_find_extent:938: inode #2: comm syz.4.70: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 394.120543][ T6205] EXT4-fs (loop2): 1 truncate cleaned up [ 394.165426][ T6205] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 394.709905][ T6216] loop3: detected capacity change from 0 to 512 [ 395.289628][ T6216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 395.389428][ T6202] loop1: detected capacity change from 0 to 32768 [ 395.398498][ T6202] XFS: ikeep mount option is deprecated. [ 395.509583][ T6216] EXT4-fs (loop3): 1 truncate cleaned up [ 395.516283][ T6216] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.663219][ T6226] EXT4-fs error (device loop2): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 395.762743][ T6228] syz.5.78: attempt to access beyond end of device [ 395.762743][ T6228] nbd5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 395.779241][ T6228] syz.5.78: attempt to access beyond end of device [ 395.779241][ T6228] nbd5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 395.793604][ T6228] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 395.810381][ T6228] syz.5.78: attempt to access beyond end of device [ 395.810381][ T6228] nbd5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 395.824522][ T6228] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 395.853748][ T6228] syz.5.78: attempt to access beyond end of device [ 395.853748][ T6228] nbd5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 395.871106][ T6228] syz.5.78: attempt to access beyond end of device [ 395.871106][ T6228] nbd5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 395.884600][ T6228] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 395.916677][ T6228] syz.5.78: attempt to access beyond end of device [ 395.916677][ T6228] nbd5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 395.932600][ T6228] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 395.956637][ T6228] syz.5.78: attempt to access beyond end of device [ 395.956637][ T6228] nbd5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 395.971483][ T6228] syz.5.78: attempt to access beyond end of device [ 395.971483][ T6228] nbd5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 395.986328][ T6228] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 396.000743][ T6228] syz.5.78: attempt to access beyond end of device [ 396.000743][ T6228] nbd5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 396.015744][ T6228] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 396.040324][ T6228] syz.5.78: attempt to access beyond end of device [ 396.040324][ T6228] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 396.061718][ T6228] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 396.074712][ T6228] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 396.084823][ T6228] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 396.417317][ T6202] workqueue: Failed to create a rescuer kthread for wq "xfs-reclaim/loop1": -EINTR [ 396.839973][ T6227] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 397.271488][ T5916] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 397.395964][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 397.431981][ T5916] usb 6-1: Using ep0 maxpacket: 16 [ 397.653322][ T5916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 397.690181][ T5916] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 397.765394][ T5916] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 397.794355][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.008126][ T5916] usb 6-1: Product: syz [ 398.012418][ T5916] usb 6-1: Manufacturer: syz [ 398.017038][ T5916] usb 6-1: SerialNumber: syz [ 399.279543][ T5916] usb 6-1: 0:2 : does not exist [ 401.437336][ T5956] usb 6-1: USB disconnect, device number 2 [ 401.830445][ T6250] bio_check_eod: 2 callbacks suppressed [ 401.830494][ T6250] syz.3.85: attempt to access beyond end of device [ 401.830494][ T6250] nbd3: rw=0, sector=64, nr_sectors = 1 limit=0 [ 401.849686][ T6250] syz.3.85: attempt to access beyond end of device [ 401.849686][ T6250] nbd3: rw=0, sector=256, nr_sectors = 1 limit=0 [ 401.863623][ T6250] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 401.882369][ T6250] syz.3.85: attempt to access beyond end of device [ 401.882369][ T6250] nbd3: rw=0, sector=512, nr_sectors = 1 limit=0 [ 401.896061][ T6250] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 401.914601][ T6250] syz.3.85: attempt to access beyond end of device [ 401.914601][ T6250] nbd3: rw=0, sector=64, nr_sectors = 2 limit=0 [ 401.930448][ T6250] syz.3.85: attempt to access beyond end of device [ 401.930448][ T6250] nbd3: rw=0, sector=512, nr_sectors = 2 limit=0 [ 401.944218][ T6250] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 401.954658][ T6250] syz.3.85: attempt to access beyond end of device [ 401.954658][ T6250] nbd3: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 401.968450][ T6250] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 401.991650][ T6250] syz.3.85: attempt to access beyond end of device [ 401.991650][ T6250] nbd3: rw=0, sector=64, nr_sectors = 4 limit=0 [ 402.006100][ T6250] syz.3.85: attempt to access beyond end of device [ 402.006100][ T6250] nbd3: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 402.019537][ T6250] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 402.030769][ T6250] syz.3.85: attempt to access beyond end of device [ 402.030769][ T6250] nbd3: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 402.044174][ T6250] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 402.058934][ T6250] syz.3.85: attempt to access beyond end of device [ 402.058934][ T6250] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 402.073828][ T6250] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256 [ 402.085970][ T6250] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512 [ 402.095818][ T6250] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1) [ 403.511517][ T5916] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 404.811671][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 404.966492][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 404.977804][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 404.985779][ T5916] usb 1-1: device descriptor read/all, error -32 [ 406.037653][ T5916] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 408.114620][ T6267] netlink: 'syz.0.89': attribute type 11 has an invalid length. [ 408.424128][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.082222][ T6278] loop4: detected capacity change from 0 to 1024 [ 410.413316][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 410.544391][ T6205] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 411.271742][ T5864] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 411.280309][ T5864] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 411.288223][ T5864] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 411.297308][ T5864] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 411.305539][ T5864] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 411.312843][ T5864] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 411.565776][ T6287] loop5: detected capacity change from 0 to 1024 [ 412.973569][ T6287] hfsplus: request for non-existent node 3 in B*Tree [ 412.981074][ T6287] hfsplus: request for non-existent node 3 in B*Tree [ 413.403934][ T5864] Bluetooth: hci6: command tx timeout [ 415.481651][ T5864] Bluetooth: hci6: command tx timeout [ 416.484328][ T6099] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.041155][ T6333] loop5: detected capacity change from 0 to 128 [ 418.201482][ T5864] Bluetooth: hci6: command tx timeout [ 418.208036][ T6333] netlink: 'syz.5.106': attribute type 12 has an invalid length. [ 418.304336][ T6099] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.320810][ T6342] bio_check_eod: 2 callbacks suppressed [ 419.320832][ T6342] syz.4.108: attempt to access beyond end of device [ 419.320832][ T6342] nbd4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 419.340634][ T6342] syz.4.108: attempt to access beyond end of device [ 419.340634][ T6342] nbd4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 419.355615][ T6342] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 419.366193][ T6342] syz.4.108: attempt to access beyond end of device [ 419.366193][ T6342] nbd4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 419.381077][ T6342] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 419.405034][ T6342] syz.4.108: attempt to access beyond end of device [ 419.405034][ T6342] nbd4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 419.439841][ T6342] syz.4.108: attempt to access beyond end of device [ 419.439841][ T6342] nbd4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 419.454646][ T6342] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 419.471113][ T6342] syz.4.108: attempt to access beyond end of device [ 419.471113][ T6342] nbd4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 419.472627][ T6099] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.485094][ T6342] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 419.524920][ T6342] syz.4.108: attempt to access beyond end of device [ 419.524920][ T6342] nbd4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 419.544089][ T6342] syz.4.108: attempt to access beyond end of device [ 419.544089][ T6342] nbd4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 419.558835][ T6342] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 419.570517][ T6342] syz.4.108: attempt to access beyond end of device [ 419.570517][ T6342] nbd4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 419.583756][ T6342] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 419.610754][ T6342] syz.4.108: attempt to access beyond end of device [ 419.610754][ T6342] nbd4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 419.630034][ T6342] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=256, location=256 [ 419.640679][ T6342] UDF-fs: error (device nbd4): udf_read_tagged: read failed, block=512, location=512 [ 419.655112][ T6342] UDF-fs: warning (device nbd4): udf_fill_super: No partition found (1) [ 420.332219][ T5864] Bluetooth: hci6: command tx timeout [ 420.635151][ T6284] chnl_net:caif_netlink_parms(): no params data found [ 422.671840][ T6099] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.234647][ T6356] loop4: detected capacity change from 0 to 32768 [ 423.282000][ T6356] XFS: ikeep mount option is deprecated. [ 423.938407][ T6356] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 424.154578][ T6284] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.205123][ T6284] bridge0: port 1(bridge_slave_0) entered disabled state [ 424.236218][ T6376] vivid-007: disconnect [ 424.263083][ T6284] bridge_slave_0: entered allmulticast mode [ 424.263953][ T6284] bridge_slave_0: entered promiscuous mode [ 424.275117][ T6284] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.275170][ T6284] bridge0: port 2(bridge_slave_1) entered disabled state [ 424.275278][ T6284] bridge_slave_1: entered allmulticast mode [ 424.286420][ T6284] bridge_slave_1: entered promiscuous mode [ 425.158148][ T6099] bridge_slave_1: left allmulticast mode [ 425.158201][ T6099] bridge_slave_1: left promiscuous mode [ 425.159283][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.232422][ T6376] 9pnet_virtio: no channels available for device syz [ 425.268919][ T6356] XFS (loop4): Ending clean mount [ 425.289084][ T6356] XFS (loop4): Quotacheck needed: Please wait. [ 425.383921][ T6356] XFS (loop4): Quotacheck: Done. [ 425.747724][ T6375] vivid-007: reconnect [ 425.763155][ T6099] bridge_slave_0: left allmulticast mode [ 425.763299][ T6099] bridge_slave_0: left promiscuous mode [ 425.765171][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.455700][ T5850] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 426.921825][ T6374] tty tty31: ldisc open failed (-12), clearing slot 30 [ 427.598856][ T6398] loop4: detected capacity change from 0 to 1024 [ 427.605940][ T6398] EXT4-fs: inline encryption not supported [ 429.772330][ T6398] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 429.804296][ T6402] loop1: detected capacity change from 0 to 128 [ 429.819938][ T6398] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.617720][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.724435][ T6402] netlink: 'syz.1.120': attribute type 12 has an invalid length. [ 436.375647][ T6428] loop3: detected capacity change from 0 to 256 [ 438.658959][ T6438] loop1: detected capacity change from 0 to 736 [ 439.571741][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.587303][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.962143][ T6438] rock: directory entry would overflow storage [ 439.968641][ T6438] rock: sig=0x3b10, size=4, remaining=3 [ 441.245644][ T5917] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 442.371703][ T5917] usb 2-1: device not accepting address 2, error -71 [ 442.586697][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 442.999147][ T6446] loop1: detected capacity change from 0 to 1024 [ 443.010404][ T6446] EXT4-fs: inline encryption not supported [ 443.082306][ T6446] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 443.633788][ T6446] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 444.581913][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 446.277380][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.504510][ T6099] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 446.999564][ T6099] bond0 (unregistering): Released all slaves [ 447.982581][ T6284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 447.994558][ T6284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.674072][ T6483] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 454.954468][ T6284] team0: Port device team_slave_0 added [ 456.240176][ T6492] Cannot find add_set index 1 as target [ 458.491906][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 458.611454][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 458.620725][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 458.649095][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 458.662287][ T5870] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 458.669609][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 459.016243][ T6284] team0: Port device team_slave_1 added [ 460.932603][ T5870] Bluetooth: hci5: command tx timeout [ 461.472926][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.513784][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.670830][ T6284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.555282][ T6284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.591477][ T6284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 462.715517][ T6284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.841644][ T6525] loop1: detected capacity change from 0 to 40427 [ 463.967359][ T5870] Bluetooth: hci5: command tx timeout [ 464.216971][ T6525] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7 [ 464.283678][ T6525] F2FS-fs (loop1): invalid crc value [ 464.355018][ T6525] F2FS-fs (loop1): Found nat_bits in checkpoint [ 464.412636][ T6284] hsr_slave_0: entered promiscuous mode [ 464.481896][ T6284] hsr_slave_1: entered promiscuous mode [ 464.531601][ T6284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.572206][ T6284] Cannot create hsr debugfs directory [ 464.631551][ T58] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 464.654354][ T6525] F2FS-fs (loop1): Start checkpoint disabled! [ 464.754504][ T6539] 9pnet_fd: Insufficient options for proto=fd [ 464.780515][ T6525] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 464.812141][ T58] usb 4-1: Using ep0 maxpacket: 16 [ 464.847110][ T58] usb 4-1: config 0 has an invalid interface number: 178 but max is 0 [ 464.855694][ T6099] hsr_slave_0: left promiscuous mode [ 464.880560][ T58] usb 4-1: config 0 has no interface number 0 [ 464.905804][ T6099] hsr_slave_1: left promiscuous mode [ 464.913234][ T58] usb 4-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 464.923068][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 464.941459][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.961675][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 464.986006][ T58] usb 4-1: Product: syz [ 465.004066][ T58] usb 4-1: Manufacturer: syz [ 465.486841][ T58] usb 4-1: SerialNumber: syz [ 465.503663][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 465.511134][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.570653][ T58] usb 4-1: config 0 descriptor?? [ 465.576859][ T6099] veth1_macvtap: left promiscuous mode [ 465.599737][ T6099] veth0_macvtap: left promiscuous mode [ 465.618440][ T6099] veth1_vlan: left promiscuous mode [ 465.645418][ T6099] veth0_vlan: left promiscuous mode [ 465.865403][ T5915] usb 4-1: USB disconnect, device number 3 [ 466.041985][ T5870] Bluetooth: hci5: command tx timeout [ 466.392555][ T6553] fuse: Bad value for 'fd' [ 466.706684][ T5912] bio_check_eod: 2 callbacks suppressed [ 466.706709][ T5912] kworker/u8:5: attempt to access beyond end of device [ 466.706709][ T5912] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 466.801402][ T5912] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 466.808434][ T5912] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 468.125015][ T5870] Bluetooth: hci5: command tx timeout [ 472.069410][ T6572] loop3: detected capacity change from 0 to 40427 [ 472.105735][ T6572] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 473.470753][ T6572] F2FS-fs (loop3): invalid crc value [ 475.349269][ T5864] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 475.410223][ T6572] F2FS-fs (loop3): Found nat_bits in checkpoint [ 475.412017][ T5864] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 475.425107][ T5864] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 475.491681][ T5864] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 475.499860][ T5981] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 475.694690][ T5864] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 475.708626][ T5864] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 475.881596][ T6572] F2FS-fs (loop3): Start checkpoint disabled! [ 476.313056][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 476.450183][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 476.761303][ T5981] usb 5-1: device not accepting address 3, error -71 [ 477.438028][ T6597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.160'. [ 477.809754][ T5864] Bluetooth: hci2: command tx timeout [ 478.060353][ T6591] loop3: detected capacity change from 0 to 40427 [ 478.070254][ T6591] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 478.397954][ T6591] F2FS-fs (loop3): invalid crc value [ 478.456523][ T6591] F2FS-fs (loop3): Found nat_bits in checkpoint [ 478.738997][ T6591] F2FS-fs (loop3): Start checkpoint disabled! [ 478.916251][ T6591] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 478.945610][ T6508] chnl_net:caif_netlink_parms(): no params data found [ 479.881892][ T5864] Bluetooth: hci2: command tx timeout [ 480.466573][ T6617] loop4: detected capacity change from 0 to 32768 [ 480.681817][ T6617] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.168 (6617) [ 480.787302][ T6636] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 481.476715][ T6617] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 481.491721][ T6617] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm [ 481.664259][ T6623] loop1: detected capacity change from 0 to 32768 [ 481.686102][ T6623] BTRFS: device /dev/loop1 (7:1) using temp-fsid 42c874cc-4d01-45b3-a8f0-7fcbdbfae029 [ 481.706346][ T6623] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.167 (6623) [ 481.767565][ T12] kworker/u8:1: attempt to access beyond end of device [ 481.767565][ T12] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 481.791902][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 481.800286][ T12] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 481.832579][ T6623] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 481.878545][ T6508] bridge0: port 1(bridge_slave_0) entered blocking state [ 481.908779][ T6508] bridge0: port 1(bridge_slave_0) entered disabled state [ 481.922173][ T6623] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm [ 481.927047][ T6617] BTRFS info (device loop4): rebuilding free space tree [ 481.939736][ T6508] bridge_slave_0: entered allmulticast mode [ 481.961552][ T5864] Bluetooth: hci2: command tx timeout [ 481.969622][ T6508] bridge_slave_0: entered promiscuous mode [ 482.215440][ T6508] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.245153][ T6508] bridge0: port 2(bridge_slave_1) entered disabled state [ 482.330209][ T6617] BTRFS info (device loop4): disabling free space tree [ 482.331612][ T6508] bridge_slave_1: entered allmulticast mode [ 482.337432][ T6617] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 482.353608][ T6617] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 482.363753][ T6508] bridge_slave_1: entered promiscuous mode [ 482.567503][ T6623] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 482.577549][ T6623] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 483.206200][ T6623] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 483.330917][ T6617] syz.4.168 (6617) used greatest stack depth: 19376 bytes left [ 483.388367][ T5850] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 483.402091][ T6623] BTRFS error (device loop1): open_ctree failed [ 483.793829][ T6508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.085763][ T5864] Bluetooth: hci2: command tx timeout [ 484.221457][ T6583] chnl_net:caif_netlink_parms(): no params data found [ 484.946911][ T6697] loop3: detected capacity change from 0 to 256 [ 488.462471][ T6711] netlink: 100 bytes leftover after parsing attributes in process `syz.0.175'. [ 488.477536][ T6508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 489.457238][ T6726] 9pnet_fd: Insufficient options for proto=fd [ 491.501986][ T6725] overlayfs: failed to resolve './file0': -2 [ 491.510205][ T6508] team0: Port device team_slave_0 added [ 491.876760][ T6508] team0: Port device team_slave_1 added [ 492.294249][ T6734] loop4: detected capacity change from 0 to 40427 [ 492.889324][ T6734] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 492.952717][ T6734] F2FS-fs (loop4): invalid crc value [ 493.017140][ T6734] F2FS-fs (loop4): Found nat_bits in checkpoint [ 493.025110][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.032415][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.039752][ T6583] bridge_slave_0: entered allmulticast mode [ 493.064583][ T6583] bridge_slave_0: entered promiscuous mode [ 494.952728][ T6734] F2FS-fs (loop4): Start checkpoint disabled! [ 495.066195][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 495.073593][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.132466][ T6746] loop3: detected capacity change from 0 to 764 [ 495.184628][ T6508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 495.277742][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 495.300276][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 495.330956][ T6583] bridge_slave_1: entered allmulticast mode [ 495.358776][ T6583] bridge_slave_1: entered promiscuous mode [ 495.434355][ T6099] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.518783][ T6508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.541540][ T6508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.551722][ T5916] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 495.640841][ T6508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.793267][ T5916] usb 4-1: config 0 has an invalid interface number: 109 but max is 0 [ 495.819608][ T5916] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.845228][ T5916] usb 4-1: config 0 has no interface number 0 [ 495.888678][ T5916] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 495.970686][ T6099] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 495.976556][ T5916] usb 4-1: config 0 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 495, setting to 64 [ 496.021531][ T5916] usb 4-1: config 0 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12 [ 496.073568][ T6583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 496.091156][ T5916] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 496.100691][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.114256][ T6583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 496.123993][ T5916] usb 4-1: Product: syz [ 496.128209][ T5916] usb 4-1: Manufacturer: syz [ 496.148242][ T5916] usb 4-1: SerialNumber: syz [ 496.181095][ T5916] usb 4-1: config 0 descriptor?? [ 496.209338][ T6746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 496.251346][ T6746] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 496.317444][ T6099] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.557486][ T6583] team0: Port device team_slave_0 added [ 496.584004][ T6508] hsr_slave_0: entered promiscuous mode [ 496.616623][ T6508] hsr_slave_1: entered promiscuous mode [ 496.625611][ T6508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.668256][ T6508] Cannot create hsr debugfs directory [ 496.749484][ T5916] ath6kl: Failed to submit usb control message: -71 [ 496.756236][ T5916] ath6kl: unable to send the bmi data to the device: -71 [ 496.763393][ T5916] ath6kl: Unable to send get target info: -71 [ 496.786994][ T5916] ath6kl: Failed to init ath6kl core: -71 [ 496.787959][ T6099] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 496.795327][ T5916] ath6kl_usb 4-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 496.850365][ T5916] usb 4-1: USB disconnect, device number 4 [ 497.007608][ T6752] loop4: detected capacity change from 0 to 32768 [ 497.081991][ T6752] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.187 (6752) [ 497.155620][ T6583] team0: Port device team_slave_1 added [ 497.244563][ T6752] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 497.276537][ T6752] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm [ 497.330334][ T6752] BTRFS info (device loop4): disk space caching is enabled [ 497.350973][ T6752] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 497.440220][ T6750] loop1: detected capacity change from 0 to 32768 [ 497.501600][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.508573][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.535816][ T6750] XFS: ikeep mount option is deprecated. [ 497.731537][ T6583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.136551][ T6583] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.199476][ T6583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.891477][ T6583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.914605][ T6750] workqueue: Failed to create a rescuer kthread for wq "xfs-blockgc/loop1": -EINTR [ 499.231198][ T6099] bridge_slave_1: left allmulticast mode [ 499.311636][ T6099] bridge_slave_1: left promiscuous mode [ 499.340589][ T6752] BTRFS error (device loop4): open_ctree failed [ 499.351692][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.632213][ T6099] bridge_slave_0: left allmulticast mode [ 499.637935][ T6099] bridge_slave_0: left promiscuous mode [ 499.652843][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.745736][ T6099] bridge_slave_1: left allmulticast mode [ 499.758869][ T6099] bridge_slave_1: left promiscuous mode [ 499.794044][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.175022][ T6099] bridge_slave_0: left allmulticast mode [ 500.180932][ T6099] bridge_slave_0: left promiscuous mode [ 500.210241][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 500.772283][ T6791] loop3: detected capacity change from 0 to 40427 [ 500.815566][ T6791] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 500.920983][ T6791] F2FS-fs (loop3): invalid crc value [ 500.935966][ T6791] F2FS-fs (loop3): Found nat_bits in checkpoint [ 501.005983][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.021761][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.111278][ T6807] loop4: detected capacity change from 0 to 40427 [ 501.275049][ T6807] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x7 [ 501.285790][ T6791] F2FS-fs (loop3): Start checkpoint disabled! [ 501.336866][ T6807] F2FS-fs (loop4): invalid crc value [ 501.414322][ T6807] F2FS-fs (loop4): Found nat_bits in checkpoint [ 501.599535][ T6807] F2FS-fs (loop4): Start checkpoint disabled! [ 501.791597][ T6807] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 501.891509][ T6818] loop3: detected capacity change from 0 to 256 [ 503.358976][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 503.843705][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 503.862238][ T6099] bond0 (unregistering): Released all slaves [ 506.226638][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 506.237511][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 506.248176][ T6099] bond0 (unregistering): Released all slaves [ 506.375225][ T5924] kworker/u8:6: attempt to access beyond end of device [ 506.375225][ T5924] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 506.389573][ T5924] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 506.404457][ T6583] hsr_slave_0: entered promiscuous mode [ 506.411533][ T5924] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 506.448486][ T6583] hsr_slave_1: entered promiscuous mode [ 506.494586][ T6583] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.509756][ T6583] Cannot create hsr debugfs directory [ 506.902833][ T6809] netlink: 4 bytes leftover after parsing attributes in process `syz.1.193'. [ 507.046033][ T6828] netlink: 100 bytes leftover after parsing attributes in process `syz.1.200'. [ 508.747729][ T6834] loop3: detected capacity change from 0 to 256 [ 509.536373][ T6853] loop3: detected capacity change from 0 to 512 [ 509.603283][ T6853] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 509.729008][ T6859] netlink: 64 bytes leftover after parsing attributes in process `syz.0.197'. [ 509.744713][ T6099] hsr_slave_0: left promiscuous mode [ 509.831495][ T6099] hsr_slave_1: left promiscuous mode [ 509.861055][ T6853] EXT4-fs (loop3): 1 truncate cleaned up [ 509.877249][ T6853] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 509.931595][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.066553][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.486232][ T6099] hsr_slave_0: left promiscuous mode [ 510.492396][ T6099] hsr_slave_1: left promiscuous mode [ 510.506027][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 510.546867][ T6853] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 510.582238][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 510.590508][ T6099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 510.598125][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 510.609072][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 510.712903][ T6099] veth1_macvtap: left promiscuous mode [ 510.759685][ T6099] veth0_macvtap: left promiscuous mode [ 510.781119][ T6874] loop3: detected capacity change from 0 to 128 [ 510.782072][ T6099] veth1_vlan: left promiscuous mode [ 510.811721][ T6099] veth0_vlan: left promiscuous mode [ 510.837777][ T6874] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 510.911012][ T6874] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 511.392015][ T6872] loop4: detected capacity change from 0 to 32768 [ 511.505857][ T6872] MetaData crosses page boundary!! [ 511.529304][ T6872] lblock = 631800, size = 28672 [ 511.564290][ T6872] CPU: 0 UID: 0 PID: 6872 Comm: syz.4.205 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 511.575037][ T6872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 511.585120][ T6872] Call Trace: [ 511.588416][ T6872] [ 511.591364][ T6872] dump_stack_lvl+0x241/0x360 [ 511.596095][ T6872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 511.601420][ T6872] ? __pfx__printk+0x10/0x10 [ 511.606149][ T6872] __get_metapage+0x9cf/0xdc0 [ 511.610875][ T6872] dtSearch+0x582/0x2520 [ 511.615158][ T6872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 511.620843][ T6872] jfs_lookup+0x17f/0x410 [ 511.625210][ T6872] ? __pfx_jfs_lookup+0x10/0x10 [ 511.630206][ T6872] ? make_vfsuid+0x52/0xa0 [ 511.634662][ T6872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 511.640319][ T6872] ? generic_permission+0x2db/0x680 [ 511.645565][ T6872] ? inode_permission+0xff/0x460 [ 511.650535][ T6872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 511.656194][ T6872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 511.661847][ T6872] ? security_inode_create+0xbe/0x340 [ 511.667341][ T6872] ? __pfx_jfs_lookup+0x10/0x10 [ 511.672225][ T6872] path_openat+0x11a9/0x3590 [ 511.676877][ T6872] ? __pfx_path_openat+0x10/0x10 [ 511.681849][ T6872] ? srso_alias_return_thunk+0x5/0xfbef5 [ 511.687519][ T6872] do_filp_open+0x27f/0x4e0 [ 511.692053][ T6872] ? __pfx_do_filp_open+0x10/0x10 [ 511.697114][ T6872] ? do_raw_spin_lock+0x14f/0x370 [ 511.702211][ T6872] do_sys_openat2+0x13e/0x1d0 [ 511.706932][ T6872] ? __pfx_do_sys_openat2+0x10/0x10 [ 511.712174][ T6872] ? arch_do_signal_or_restart+0x51f/0x860 [ 511.718209][ T6872] __x64_sys_open+0x225/0x270 [ 511.722931][ T6872] ? __pfx___x64_sys_open+0x10/0x10 [ 511.728169][ T6872] ? do_syscall_64+0x100/0x230 [ 511.732978][ T6872] ? do_syscall_64+0xb6/0x230 [ 511.737781][ T6872] do_syscall_64+0xf3/0x230 [ 511.742416][ T6872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.748356][ T6872] RIP: 0033:0x7faee1d85d29 [ 511.752795][ T6872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.772692][ T6872] RSP: 002b:00007faee2ba4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 511.781149][ T6872] RAX: ffffffffffffffda RBX: 00007faee1f75fa0 RCX: 00007faee1d85d29 [ 511.789148][ T6872] RDX: 0000000000000120 RSI: 0000000000141042 RDI: 00000000200003c0 [ 511.797139][ T6872] RBP: 00007faee1e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 511.805131][ T6872] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 511.813128][ T6872] R13: 0000000000000000 R14: 00007faee1f75fa0 R15: 00007ffc3678f548 [ 511.821231][ T6872] [ 511.853003][ T6884] fscrypt (loop3, inode 12): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 512.245984][ T6872] bread failed! [ 512.249538][ T6872] jfs_lookup: dtSearch returned -5 [ 512.302209][ T6887] MetaData crosses page boundary!! [ 512.308304][ T6893] MetaData crosses page boundary!! [ 512.330664][ T6887] lblock = 631800, size = 28672 [ 512.340153][ T6893] lblock = 631800, size = 28672 [ 512.350968][ T6887] CPU: 1 UID: 0 PID: 6887 Comm: syz.4.205 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 512.361597][ T6887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 512.371671][ T6887] Call Trace: [ 512.374964][ T6887] [ 512.377909][ T6887] dump_stack_lvl+0x241/0x360 [ 512.382628][ T6887] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.387872][ T6887] ? __pfx__printk+0x10/0x10 [ 512.392517][ T6887] __get_metapage+0x9cf/0xdc0 [ 512.397234][ T6887] dtSearch+0x582/0x2520 [ 512.401515][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.406573][ T6879] loop1: detected capacity change from 0 to 40427 [ 512.407173][ T6887] jfs_lookup+0x17f/0x410 [ 512.417922][ T6887] ? __pfx_jfs_lookup+0x10/0x10 [ 512.422804][ T6887] ? d_alloc_parallel+0x14a8/0x1600 [ 512.428062][ T6887] ? __d_lookup+0x64/0x7b0 [ 512.432507][ T6887] ? __pfx_d_alloc_parallel+0x10/0x10 [ 512.437900][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.443547][ T6887] ? __d_lookup+0x706/0x7b0 [ 512.448074][ T6887] ? __pfx_jfs_lookup+0x10/0x10 [ 512.452954][ T6887] path_openat+0x11a9/0x3590 [ 512.457602][ T6887] ? __pfx_path_openat+0x10/0x10 [ 512.462563][ T6887] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.468220][ T6887] do_filp_open+0x27f/0x4e0 [ 512.472739][ T6887] ? __pfx_do_filp_open+0x10/0x10 [ 512.477784][ T6887] ? do_raw_spin_lock+0x14f/0x370 [ 512.482863][ T6887] do_sys_openat2+0x13e/0x1d0 [ 512.487568][ T6887] ? __pfx_do_sys_openat2+0x10/0x10 [ 512.492801][ T6887] __x64_sys_open+0x225/0x270 [ 512.497508][ T6887] ? __pfx___x64_sys_open+0x10/0x10 [ 512.502733][ T6887] ? do_syscall_64+0x100/0x230 [ 512.507533][ T6887] ? do_syscall_64+0xb6/0x230 [ 512.512505][ T6887] do_syscall_64+0xf3/0x230 [ 512.513928][ T6879] F2FS-fs (loop1): build fault injection attr: rate: 0, type: 0x7 [ 512.517122][ T6887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.530824][ T6887] RIP: 0033:0x7faee1d85d29 [ 512.535280][ T6887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.543851][ T6879] F2FS-fs (loop1): invalid crc value [ 512.554894][ T6887] RSP: 002b:00007faee2b83038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 512.554933][ T6887] RAX: ffffffffffffffda RBX: 00007faee1f76080 RCX: 00007faee1d85d29 [ 512.554956][ T6887] RDX: 0000000000000000 RSI: 000000000014103e RDI: 00000000200000c0 [ 512.554976][ T6887] RBP: 00007faee1e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 512.554996][ T6887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.601080][ T6887] R13: 0000000000000000 R14: 00007faee1f76080 R15: 00007ffc3678f548 [ 512.609109][ T6887] [ 512.612142][ T6893] CPU: 0 UID: 0 PID: 6893 Comm: syz.4.205 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 512.621457][ T6887] bread failed! [ 512.622744][ T6893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 512.630356][ T6887] jfs_lookup: dtSearch returned -5 [ 512.636216][ T6893] Call Trace: [ 512.636229][ T6893] [ 512.636242][ T6893] dump_stack_lvl+0x241/0x360 [ 512.652282][ T6893] ? __pfx_dump_stack_lvl+0x10/0x10 [ 512.657506][ T6893] ? __pfx__printk+0x10/0x10 [ 512.662132][ T6893] __get_metapage+0x9cf/0xdc0 [ 512.666884][ T6893] dtSearch+0x582/0x2520 [ 512.671151][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.676904][ T6893] jfs_lookup+0x17f/0x410 [ 512.681428][ T6893] ? __pfx_jfs_lookup+0x10/0x10 [ 512.686326][ T6893] ? d_alloc_parallel+0x14a8/0x1600 [ 512.691551][ T6893] ? __d_lookup+0x64/0x7b0 [ 512.695973][ T6893] ? __pfx_d_alloc_parallel+0x10/0x10 [ 512.701351][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.706994][ T6893] ? __d_lookup+0x706/0x7b0 [ 512.711508][ T6893] ? try_to_unlazy+0x35c/0x5b0 [ 512.716560][ T6893] ? __pfx_jfs_lookup+0x10/0x10 [ 512.721429][ T6893] path_openat+0x11a9/0x3590 [ 512.726055][ T6893] ? __pfx_path_openat+0x10/0x10 [ 512.731012][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.736663][ T6893] do_filp_open+0x27f/0x4e0 [ 512.741181][ T6893] ? __pfx_do_filp_open+0x10/0x10 [ 512.746210][ T6893] ? do_raw_spin_lock+0x14f/0x370 [ 512.751276][ T6893] do_sys_openat2+0x13e/0x1d0 [ 512.755984][ T6893] ? __pfx_do_sys_openat2+0x10/0x10 [ 512.761213][ T6893] __x64_sys_openat+0x247/0x2a0 [ 512.766088][ T6893] ? __pfx___x64_sys_openat+0x10/0x10 [ 512.771498][ T6893] ? exc_page_fault+0x590/0x8b0 [ 512.776370][ T6893] ? srso_alias_return_thunk+0x5/0xfbef5 [ 512.782022][ T6893] ? do_syscall_64+0xb6/0x230 [ 512.786727][ T6893] do_syscall_64+0xf3/0x230 [ 512.791257][ T6893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 512.797183][ T6893] RIP: 0033:0x7faee1d85d29 [ 512.801609][ T6893] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 512.821223][ T6893] RSP: 002b:00007faee2b41038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 512.829658][ T6893] RAX: ffffffffffffffda RBX: 00007faee1f76240 RCX: 00007faee1d85d29 [ 512.837642][ T6893] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 512.845621][ T6893] RBP: 00007faee1e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 512.853600][ T6893] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 512.861577][ T6893] R13: 0000000000000001 R14: 00007faee1f76240 R15: 00007ffc3678f548 [ 512.869569][ T6893] [ 512.876248][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 512.892478][ T6879] F2FS-fs (loop1): Found nat_bits in checkpoint [ 512.898671][ T6893] bread failed! [ 512.919364][ T6893] jfs_lookup: dtSearch returned -5 [ 512.934201][ T5849] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 512.960308][ T6879] F2FS-fs (loop1): Start checkpoint disabled! [ 512.979602][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 513.047573][ T6879] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 513.241061][ T6899] 9pnet_virtio: no channels available for device syz [ 513.880373][ T6899] block nbd3: shutting down sockets [ 514.160954][ T6904] loop4: detected capacity change from 0 to 256 [ 514.178107][ T6904] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 514.210752][ T6904] exFAT-fs (loop4): start_clu is invalid cluster(0x0) [ 515.579597][ T6912] loop3: detected capacity change from 0 to 736 [ 515.672694][ T11] kworker/u8:0: attempt to access beyond end of device [ 515.672694][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 515.695447][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 515.709363][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 515.904309][ T6912] rock: directory entry would overflow storage [ 515.910604][ T6912] rock: sig=0x3b10, size=4, remaining=3 [ 515.997873][ T6914] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 516.571553][ T5956] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 516.771741][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 516.783351][ T5956] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 516.801300][ T5956] usb 4-1: config 179 has no interface number 0 [ 516.829671][ T5956] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 516.851638][ T5956] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 516.876632][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 516.883544][ T5956] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 516.896411][ T5956] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 516.911599][ T5956] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 516.925237][ T5956] usb 4-1: config 179 interface 65 has no altsetting 0 [ 516.932232][ T5956] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 516.941509][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.980951][ T5956] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input5 [ 516.993155][ T6918] loop1: detected capacity change from 0 to 128 [ 517.007208][ T6918] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256 [ 517.028757][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 517.040833][ T6918] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 517.093384][ T6918] overlayfs: missing 'lowerdir' [ 517.110802][ T5183] input input5: unable to receive magic message: -110 [ 517.137060][ T6920] loop4: detected capacity change from 0 to 512 [ 517.241617][ T5183] input input5: unable to receive magic message: -32 [ 517.303800][ T6920] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 517.372562][ T6922] input input5: unable to receive magic message: -32 [ 517.389589][ T6924] loop1: detected capacity change from 0 to 512 [ 517.409309][ T6924] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 517.434631][ T6920] EXT4-fs (loop4): 1 truncate cleaned up [ 517.441685][ T6920] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.498433][ T58] usb 4-1: USB disconnect, device number 5 [ 517.498510][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 517.513349][ C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 517.514420][ T58] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 517.636536][ T5870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 517.654986][ T6924] EXT4-fs (loop1): 1 truncate cleaned up [ 517.656210][ T5870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 517.669428][ T5870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 517.672983][ T6924] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.699139][ T5870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 517.715082][ T5870] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 517.723866][ T5870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 517.734953][ T6920] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 517.833711][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.596122][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 518.755961][ T6935] tmpfs: Unknown parameter 'nr_ino' [ 519.806248][ T5870] Bluetooth: hci6: command tx timeout [ 521.172297][ T6583] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 521.324128][ T6583] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 521.475188][ T6583] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 521.575837][ T6583] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 523.261612][ T5870] Bluetooth: hci6: command tx timeout [ 525.331466][ T5864] Bluetooth: hci6: command tx timeout [ 525.376997][ T6978] loop3: detected capacity change from 0 to 512 [ 525.395185][ T6978] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 525.492530][ T6978] EXT4-fs (loop3): 1 truncate cleaned up [ 525.499597][ T6978] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.665099][ T6928] chnl_net:caif_netlink_parms(): no params data found [ 525.704151][ T6978] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 525.745602][ T6583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 525.765487][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.839475][ T6988] loop4: detected capacity change from 0 to 736 [ 525.995649][ T6583] 8021q: adding VLAN 0 to HW filter on device team0 [ 526.047722][ T6988] rock: directory entry would overflow storage [ 526.055199][ T6988] rock: sig=0x3b10, size=4, remaining=3 [ 526.095199][ T6993] loop3: detected capacity change from 0 to 512 [ 526.098402][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.108659][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 526.131732][ T6993] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 526.156565][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 526.163760][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 526.212243][ T6993] EXT4-fs (loop3): 1 truncate cleaned up [ 526.218863][ T6993] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.301517][ T46] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 526.401204][ T6928] bridge0: port 1(bridge_slave_0) entered blocking state [ 526.417220][ T6928] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.442064][ T5864] Bluetooth: hci6: command tx timeout [ 527.461503][ T46] usb 5-1: Using ep0 maxpacket: 8 [ 528.375132][ T6928] bridge_slave_0: entered allmulticast mode [ 528.433587][ T6928] bridge_slave_0: entered promiscuous mode [ 528.466879][ T6928] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.474237][ T6928] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.485741][ T6928] bridge_slave_1: entered allmulticast mode [ 528.502972][ T6928] bridge_slave_1: entered promiscuous mode [ 528.671303][ T46] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 528.706429][ T46] usb 5-1: config 179 has no interface number 0 [ 528.769406][ T46] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 528.923371][ T46] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 529.102297][ T46] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 529.171489][ T46] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 529.185078][ T46] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 529.198732][ T46] usb 5-1: config 179 interface 65 has no altsetting 0 [ 529.225085][ T46] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 529.249843][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.267449][ T7012] loop1: detected capacity change from 0 to 512 [ 529.274667][ T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.301927][ T7012] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 529.361670][ T46] usb 5-1: can't set config #179, error -71 [ 529.368891][ T46] usb 5-1: USB disconnect, device number 5 [ 529.377093][ T7014] tmpfs: Unknown parameter 'nr_ino' [ 529.539027][ T7019] netlink: 64 bytes leftover after parsing attributes in process `syz.4.233'. [ 529.681827][ T7017] loop3: detected capacity change from 0 to 32768 [ 529.713936][ T7012] EXT4-fs (loop1): 1 truncate cleaned up [ 529.725692][ T7012] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.788027][ T7017] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 529.800466][ T6928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.860480][ T6928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.938036][ T7017] XFS (loop3): Ending clean mount [ 530.127505][ T7017] XFS (loop3): Quotacheck needed: Please wait. [ 531.141308][ T6583] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.243916][ T6583] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.364604][ T7017] XFS (loop3): Quotacheck: Done. [ 532.416323][ T6928] team0: Port device team_slave_0 added [ 532.433287][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.452271][ T6928] team0: Port device team_slave_1 added [ 532.726845][ T5849] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 532.930790][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 532.945410][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 532.955987][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 532.963989][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 532.972383][ T5864] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 532.979650][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 535.061163][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.089214][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.151482][ T6928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.175198][ T6928] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.180149][ T7065] loop3: detected capacity change from 0 to 512 [ 535.188810][ T6928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 535.215824][ T7065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 535.254856][ T6928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.301524][ T46] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 535.309809][ T7065] EXT4-fs (loop3): 1 truncate cleaned up [ 535.316939][ T7065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.366803][ T7065] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 535.481539][ T46] usb 1-1: Using ep0 maxpacket: 8 [ 535.493053][ T46] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 535.511747][ T46] usb 1-1: config 179 has no interface number 0 [ 535.520628][ T6099] bridge_slave_1: left allmulticast mode [ 535.526118][ T7051] loop4: detected capacity change from 0 to 40427 [ 535.528405][ T6099] bridge_slave_1: left promiscuous mode [ 535.539305][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 535.562102][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.571181][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 535.574169][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.583070][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 535.601391][ T46] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 535.613388][ T46] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 535.627415][ T46] usb 1-1: config 179 interface 65 has no altsetting 0 [ 535.644663][ T46] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 535.653917][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 535.671801][ T46] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input6 [ 535.710693][ T6099] bridge_slave_0: left allmulticast mode [ 535.735349][ T6099] bridge_slave_0: left promiscuous mode [ 535.741202][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.811582][ T5183] input input6: unable to receive magic message: -110 [ 536.031974][ T7074] netlink: 64 bytes leftover after parsing attributes in process `syz.4.246'. [ 537.193046][ T5857] Bluetooth: hci5: command tx timeout [ 537.574607][ T46] usb 1-1: USB disconnect, device number 4 [ 537.580492][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 537.622845][ T46] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 538.061930][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.153930][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.210875][ T6099] bond0 (unregistering): Released all slaves [ 538.427430][ T7088] loop3: detected capacity change from 0 to 40427 [ 538.509921][ T7088] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 538.557346][ T7088] F2FS-fs (loop3): invalid crc value [ 538.588088][ T7088] F2FS-fs (loop3): Found nat_bits in checkpoint [ 539.621541][ T5870] Bluetooth: hci5: command tx timeout [ 540.524801][ T6928] hsr_slave_0: entered promiscuous mode [ 540.532325][ T6928] hsr_slave_1: entered promiscuous mode [ 540.681657][ T5917] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 540.758609][ T7088] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 540.864344][ T6928] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 540.868369][ T7105] tmpfs: Bad value for 'nr_inodes' [ 540.872779][ T6928] Cannot create hsr debugfs directory [ 540.934114][ T6099] hsr_slave_0: left promiscuous mode [ 540.951674][ T6099] hsr_slave_1: left promiscuous mode [ 540.972679][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 540.994519][ T5849] syz-executor: attempt to access beyond end of device [ 540.994519][ T5849] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 541.001797][ T5917] usb 5-1: Using ep0 maxpacket: 16 [ 541.012373][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 541.038987][ T5917] usb 5-1: config 0 has an invalid interface number: 178 but max is 0 [ 541.048240][ T5849] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 541.065372][ T5917] usb 5-1: config 0 has no interface number 0 [ 541.103830][ T5917] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 541.137230][ T5917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.167653][ T5917] usb 5-1: Product: syz [ 541.188445][ T5917] usb 5-1: Manufacturer: syz [ 541.198574][ T5917] usb 5-1: SerialNumber: syz [ 541.216166][ T5917] usb 5-1: config 0 descriptor?? [ 541.460368][ T46] usb 5-1: USB disconnect, device number 6 [ 541.525926][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 541.632516][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 541.652280][ T5870] Bluetooth: hci5: command tx timeout [ 543.731525][ T5870] Bluetooth: hci5: command tx timeout [ 544.317640][ T7125] loop3: detected capacity change from 0 to 512 [ 544.343063][ T7125] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 544.415001][ T7125] EXT4-fs (loop3): 1 truncate cleaned up [ 544.459293][ T7125] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 544.798454][ T7125] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 544.870115][ T7134] loop1: detected capacity change from 0 to 2048 [ 544.913908][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.957963][ T7134] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 545.051613][ T7058] chnl_net:caif_netlink_parms(): no params data found [ 545.079711][ T7134] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 545.133264][ T7134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 545.303108][ T7139] 9pnet_fd: Insufficient options for proto=fd [ 545.726680][ T7148] loop4: detected capacity change from 0 to 764 [ 546.139744][ T7160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.261'. [ 546.209100][ T7058] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.239275][ T7058] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.266783][ T7058] bridge_slave_0: entered allmulticast mode [ 546.295180][ T7058] bridge_slave_0: entered promiscuous mode [ 546.321639][ T7058] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.349140][ T7058] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.376572][ T7058] bridge_slave_1: entered allmulticast mode [ 546.414088][ T7058] bridge_slave_1: entered promiscuous mode [ 546.873312][ T7058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 546.923278][ T6928] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 547.135679][ T6928] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 547.975026][ T7058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.028838][ T6928] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 548.055778][ T6928] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 548.386723][ T7058] team0: Port device team_slave_0 added [ 548.395908][ T7058] team0: Port device team_slave_1 added [ 548.447734][ T7162] loop3: detected capacity change from 0 to 40427 [ 548.551852][ T7162] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1fffff [ 548.835620][ T7162] F2FS-fs (loop3): invalid crc value [ 548.946544][ T7162] F2FS-fs (loop3): Found nat_bits in checkpoint [ 549.449918][ T7162] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 550.759570][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 550.781453][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 550.856074][ T7058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 550.955083][ T7058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 550.966559][ T7058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 551.275086][ T7058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 552.438464][ T7217] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 553.654232][ T6928] 8021q: adding VLAN 0 to HW filter on device bond0 [ 553.685390][ T58] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 553.852284][ T7229] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'. [ 553.882818][ T58] usb 4-1: Using ep0 maxpacket: 32 [ 553.900545][ T58] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.930977][ T58] usb 4-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 553.944429][ T58] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 553.961745][ T58] usb 4-1: Product: syz [ 553.993620][ T58] usb 4-1: Manufacturer: syz [ 554.000972][ T58] usb 4-1: SerialNumber: syz [ 554.024549][ T58] usb 4-1: config 0 descriptor?? [ 554.057408][ T58] usb 4-1: no audio or video endpoints found [ 554.077594][ T7058] hsr_slave_0: entered promiscuous mode [ 554.318425][ T7058] hsr_slave_1: entered promiscuous mode [ 554.360615][ T7058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.381609][ T7058] Cannot create hsr debugfs directory [ 554.693276][ T6928] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.811888][ T5917] usb 4-1: USB disconnect, device number 6 [ 554.883230][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.890375][ T5928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 555.004733][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state [ 555.012088][ T5928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 555.290030][ T6099] bridge_slave_1: left allmulticast mode [ 555.313067][ T6099] bridge_slave_1: left promiscuous mode [ 555.348636][ T6099] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.427543][ T6099] bridge_slave_0: left allmulticast mode [ 555.661504][ T6099] bridge_slave_0: left promiscuous mode [ 555.667319][ T6099] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.803245][ T7247] loop3: detected capacity change from 0 to 40427 [ 557.866668][ T7247] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 559.091648][ T7247] F2FS-fs (loop3): invalid crc value [ 560.186975][ T7247] F2FS-fs (loop3): Found nat_bits in checkpoint [ 560.582536][ T7283] tmpfs: Bad value for 'nr_inodes' [ 560.594567][ T7247] F2FS-fs (loop3): Start checkpoint disabled! [ 560.615035][ T7247] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 560.719390][ T7286] loop4: detected capacity change from 0 to 764 [ 561.082170][ T46] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 561.341680][ T46] usb 5-1: config 0 has an invalid interface number: 109 but max is 0 [ 561.349917][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 561.399906][ T46] usb 5-1: config 0 has no interface number 0 [ 561.406689][ T46] usb 5-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 561.442175][ T6099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.452487][ T46] usb 5-1: config 0 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 561.477591][ T6099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.482360][ T46] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 561.482397][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 561.482425][ T46] usb 5-1: Product: syz [ 561.482445][ T46] usb 5-1: Manufacturer: syz [ 561.482466][ T46] usb 5-1: SerialNumber: syz [ 561.490567][ T46] usb 5-1: config 0 descriptor?? [ 561.495864][ T6099] bond0 (unregistering): Released all slaves [ 561.594569][ T7289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.286'. [ 561.862854][ T46] ath6kl: Failed to submit usb control message: -71 [ 561.869898][ T46] ath6kl: unable to send the bmi data to the device: -71 [ 561.877109][ T46] ath6kl: Unable to send get target info: -71 [ 561.909208][ T46] ath6kl: Failed to init ath6kl core: -71 [ 561.919068][ T46] ath6kl_usb 5-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 561.939318][ T46] usb 5-1: USB disconnect, device number 7 [ 562.462565][ T6099] hsr_slave_0: left promiscuous mode [ 562.481868][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.493315][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.610480][ T6099] hsr_slave_1: left promiscuous mode [ 562.690385][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.698427][ T6099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 564.021668][ T46] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 564.181590][ T46] usb 5-1: Using ep0 maxpacket: 32 [ 564.370222][ T46] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 564.383988][ T46] usb 5-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=25.11 [ 564.393287][ T46] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 564.401307][ T46] usb 5-1: Product: syz [ 564.416820][ T46] usb 5-1: Manufacturer: syz [ 564.421866][ T46] usb 5-1: SerialNumber: syz [ 564.616338][ T46] usb 5-1: config 0 descriptor?? [ 564.627938][ T46] usb 5-1: no audio or video endpoints found [ 567.181592][ T6295] usb 5-1: USB disconnect, device number 8 [ 568.359675][ T6099] team0 (unregistering): Port device team_slave_1 removed [ 568.585911][ T6099] team0 (unregistering): Port device team_slave_0 removed [ 568.887045][ T7340] tmpfs: Bad value for 'nr_inodes' [ 568.969907][ T7341] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 569.766748][ T7338] netlink: 56 bytes leftover after parsing attributes in process `syz.3.299'. [ 569.857922][ T7345] loop1: detected capacity change from 0 to 764 [ 570.039192][ T7350] loop4: detected capacity change from 0 to 512 [ 570.057577][ T7350] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 570.084557][ T7350] EXT4-fs (loop4): 1 truncate cleaned up [ 570.102163][ T7350] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 570.134524][ T6295] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 570.239928][ T7353] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 570.354399][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 570.372629][ T6295] usb 2-1: config 0 has an invalid interface number: 109 but max is 0 [ 570.380882][ T6295] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 570.397932][ T6295] usb 2-1: config 0 has no interface number 0 [ 570.413804][ T6295] usb 2-1: config 0 interface 109 altsetting 0 endpoint 0x4 has invalid maxpacket 255, setting to 64 [ 570.441697][ T6295] usb 2-1: config 0 interface 109 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 12 [ 570.488680][ T6295] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e [ 570.498057][ T6295] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 570.517336][ T6295] usb 2-1: Product: syz [ 570.541277][ T6295] usb 2-1: Manufacturer: syz [ 570.549400][ T6295] usb 2-1: SerialNumber: syz [ 570.567646][ T6295] usb 2-1: config 0 descriptor?? [ 570.597928][ T7345] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 571.011511][ T6295] ath6kl: Failed to submit usb control message: -71 [ 571.018284][ T6295] ath6kl: unable to send the bmi data to the device: -71 [ 571.459845][ T6295] ath6kl: Unable to send get target info: -71 [ 571.468424][ T6295] ath6kl: Failed to init ath6kl core: -71 [ 571.474980][ T6295] ath6kl_usb 2-1:0.109: probe with driver ath6kl_usb failed with error -71 [ 571.599908][ T6295] usb 2-1: USB disconnect, device number 4 [ 574.022018][ T7387] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 574.826082][ T6928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.441935][ T7402] netlink: 100 bytes leftover after parsing attributes in process `syz.1.311'. [ 576.774348][ T7400] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 576.996356][ T7058] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 577.308754][ T7058] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 577.485200][ T7058] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 577.540004][ T7058] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 577.830514][ T7058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.871183][ T7058] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.907754][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.914919][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 578.082379][ T5912] bridge0: port 2(bridge_slave_1) entered blocking state [ 578.089521][ T5912] bridge0: port 2(bridge_slave_1) entered forwarding state [ 578.183489][ T7425] netlink: 56 bytes leftover after parsing attributes in process `syz.0.314'. [ 578.341799][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 578.388099][ T7429] loop4: detected capacity change from 0 to 512 [ 579.470064][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 580.030301][ T7429] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 580.097175][ T7058] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 580.125978][ T7058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 580.148573][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 580.360139][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 580.368164][ T5857] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 580.376522][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 580.393917][ T7429] EXT4-fs (loop4): 1 truncate cleaned up [ 580.401185][ T7429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 580.589365][ T7448] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 581.477136][ T7429] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 581.829841][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.702030][ T5857] Bluetooth: hci2: command tx timeout [ 583.875424][ T7484] tmpfs: Bad value for 'nr_inodes' [ 584.048124][ T7058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.780252][ T5857] Bluetooth: hci2: command tx timeout [ 586.607811][ T7297] bridge_slave_1: left allmulticast mode [ 586.661987][ T7297] bridge_slave_1: left promiscuous mode [ 586.667742][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.843225][ T5857] Bluetooth: hci2: command tx timeout [ 586.896141][ T7297] bridge_slave_0: left allmulticast mode [ 586.908278][ T7297] bridge_slave_0: left promiscuous mode [ 586.914544][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 587.303395][ T7531] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 589.149043][ T5857] Bluetooth: hci2: command tx timeout [ 590.408407][ T7542] loop1: detected capacity change from 0 to 512 [ 590.483873][ T7542] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 590.804592][ T7542] EXT4-fs (loop1): 1 truncate cleaned up [ 590.821241][ T7542] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 591.195346][ T7545] EXT4-fs error (device loop1): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 591.646464][ T7297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 591.709523][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.730229][ T7297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 591.857451][ T7297] bond0 (unregistering): Released all slaves [ 592.338519][ T7554] loop3: detected capacity change from 0 to 128 [ 592.483744][ T7548] loop1: detected capacity change from 0 to 128 [ 592.774149][ T7554] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 592.858211][ T7539] loop4: detected capacity change from 0 to 65536 [ 592.948701][ T7554] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 593.111766][ T7420] chnl_net:caif_netlink_parms(): no params data found [ 593.438076][ T5852] FAT-fs (loop1): error, invalid access to FAT (entry 0x0f000000) [ 593.495709][ T5852] FAT-fs (loop1): Filesystem has been set read-only [ 593.523067][ T5870] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 593.644955][ T5870] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 593.652903][ T5870] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 593.661135][ T5870] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 593.686716][ T5870] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 593.709790][ T5870] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 595.258325][ T7575] loop1: detected capacity change from 0 to 736 [ 595.333261][ T7575] rock: directory entry would overflow storage [ 595.339489][ T7575] rock: sig=0x3b10, size=4, remaining=3 [ 595.601698][ T5956] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 595.781873][ T5956] usb 2-1: Using ep0 maxpacket: 8 [ 595.797837][ T5956] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 595.821154][ T5956] usb 2-1: config 179 has no interface number 0 [ 595.854351][ T5870] Bluetooth: hci6: command tx timeout [ 596.059392][ T5956] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 596.071047][ T5956] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 596.082925][ T5956] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 596.094608][ T5956] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 596.107706][ T5956] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 596.124365][ T5956] usb 2-1: config 179 interface 65 has no altsetting 0 [ 596.133386][ T5956] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 596.143533][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 596.209991][ T5956] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input7 [ 596.291691][ T5183] input input7: unable to receive magic message: -110 [ 596.641144][ T7297] hsr_slave_0: left promiscuous mode [ 596.657637][ T5183] input input7: unable to receive magic message: -32 [ 596.693697][ T6295] usb 2-1: USB disconnect, device number 5 [ 596.699723][ C1] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 596.699760][ C1] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 596.763722][ T7297] hsr_slave_1: left promiscuous mode [ 596.782561][ T6295] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 596.912854][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.000669][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.971456][ T5870] Bluetooth: hci6: command tx timeout [ 598.173347][ T5849] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 598.438468][ T7586] loop4: detected capacity change from 0 to 2048 [ 598.568045][ T7591] loop3: detected capacity change from 0 to 512 [ 598.715184][ T7591] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 599.334482][ T7591] EXT4-fs (loop3): 1 truncate cleaned up [ 599.351308][ T7591] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.365305][ T7586] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 599.492617][ T7586] EXT4-fs error (device loop4): ext4_ext_precache:631: inode #2: comm syz.4.340: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 5(5) [ 599.769602][ T7586] EXT4-fs (loop4): Remounting filesystem read-only [ 599.894252][ T7603] fuse: Bad value for 'group_id' [ 599.899491][ T7603] fuse: Bad value for 'group_id' [ 600.058022][ T5870] Bluetooth: hci6: command tx timeout [ 601.216446][ T7591] EXT4-fs error (device loop3): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt. [ 601.428858][ T7606] serio: Serial port ptm0 [ 601.528990][ T5850] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.678809][ T7610] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 602.044467][ T7613] loop4: detected capacity change from 0 to 512 [ 602.075874][ T7297] team0 (unregistering): Port device team_slave_1 removed [ 602.123303][ T5849] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 602.155894][ T7613] EXT4-fs: Ignoring removed bh option [ 602.171509][ T5870] Bluetooth: hci6: command tx timeout [ 602.231957][ T6295] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 602.315232][ T7613] EXT4-fs: Ignoring removed mblk_io_submit option [ 602.835765][ T7613] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 602.851465][ T6295] usb 1-1: Using ep0 maxpacket: 16 [ 602.883358][ T7297] team0 (unregistering): Port device team_slave_0 removed [ 602.921682][ T7613] EXT4-fs (loop4): can't mount with journal_checksum, fs mounted w/o journal [ 603.095249][ T6295] usb 1-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=5e.a7 [ 603.131453][ T6295] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 603.155374][ T6295] usb 1-1: Product: syz [ 603.218895][ T6295] usb 1-1: Manufacturer: syz [ 603.245305][ T6295] usb 1-1: SerialNumber: syz [ 603.286169][ T6295] usb 1-1: config 0 descriptor?? [ 604.241705][ T6295] mxuport 1-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 604.493832][ T6295] mxuport 1-1:0.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71) [ 604.502768][ T6295] mxuport 1-1:0.0: probe with driver mxuport failed with error -71 [ 604.591249][ T6295] usb 1-1: USB disconnect, device number 5 [ 605.641631][ T5857] Bluetooth: hci6: command 0x0405 tx timeout [ 607.584146][ T7637] loop3: detected capacity change from 0 to 32768 [ 608.091805][ T7420] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.131880][ T7420] bridge0: port 1(bridge_slave_0) entered disabled state [ 608.139160][ T7420] bridge_slave_0: entered allmulticast mode [ 608.203396][ T7420] bridge_slave_0: entered promiscuous mode [ 608.523352][ C1] Illegal XDP return value 16128 on prog (id 26) dev team0, expect packet loss! [ 611.069255][ T7420] bridge0: port 2(bridge_slave_1) entered blocking state [ 611.193818][ T7654] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 611.951612][ T7420] bridge0: port 2(bridge_slave_1) entered disabled state [ 611.958853][ T7420] bridge_slave_1: entered allmulticast mode [ 612.001539][ T7420] bridge_slave_1: entered promiscuous mode [ 612.550525][ T7661] fuse: Bad value for 'group_id' [ 612.555631][ T7661] fuse: Bad value for 'group_id' [ 613.473935][ T7420] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.573762][ T7420] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.876866][ T7680] FAULT_INJECTION: forcing a failure. [ 614.876866][ T7680] name failslab, interval 1, probability 0, space 0, times 1 [ 614.952520][ T7681] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 614.979673][ T7681] CIFS: Unable to determine destination address [ 615.150883][ T7680] CPU: 1 UID: 0 PID: 7680 Comm: syz.0.360 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 615.161545][ T7680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 615.171626][ T7680] Call Trace: [ 615.174924][ T7680] [ 615.177875][ T7680] dump_stack_lvl+0x241/0x360 [ 615.182598][ T7680] ? __pfx_dump_stack_lvl+0x10/0x10 [ 615.187834][ T7680] ? __pfx__printk+0x10/0x10 [ 615.192462][ T7680] ? kmem_cache_alloc_noprof+0x48/0x380 [ 615.198044][ T7680] ? __pfx___might_resched+0x10/0x10 [ 615.203529][ T7680] ? __fget_files+0x2a/0x410 [ 615.206735][ T7420] team0: Port device team_slave_0 added [ 615.208140][ T7680] should_fail_ex+0x3b0/0x4e0 [ 615.218499][ T7680] should_failslab+0xac/0x100 [ 615.223220][ T7680] ? getname_flags+0xb7/0x540 [ 615.227933][ T7680] kmem_cache_alloc_noprof+0x70/0x380 [ 615.233353][ T7680] getname_flags+0xb7/0x540 [ 615.237892][ T7680] ? do_syscall_64+0x100/0x230 [ 615.242703][ T7680] __x64_sys_execveat+0xad/0xe0 [ 615.247591][ T7680] do_syscall_64+0xf3/0x230 [ 615.252139][ T7680] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.258080][ T7680] RIP: 0033:0x7f63d4785d29 [ 615.262519][ T7680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 615.282214][ T7680] RSP: 002b:00007f63d55a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 615.290821][ T7680] RAX: ffffffffffffffda RBX: 00007f63d4975fa0 RCX: 00007f63d4785d29 [ 615.298802][ T7680] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000004 [ 615.306783][ T7680] RBP: 00007f63d55a3090 R08: 0000000000001000 R09: 0000000000000000 [ 615.314937][ T7680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 615.322913][ T7680] R13: 0000000000000000 R14: 00007f63d4975fa0 R15: 00007ffedf9fb628 [ 615.330906][ T7680] [ 615.472402][ T7689] loop1: detected capacity change from 0 to 512 [ 615.522658][ T7689] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 615.943162][ T7420] team0: Port device team_slave_1 added [ 618.112511][ T7689] EXT4-fs (loop1): 1 truncate cleaned up [ 618.133064][ T7689] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.006429][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.530149][ T7714] loop3: detected capacity change from 0 to 128 [ 619.570015][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.591972][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.600296][ T7714] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 619.632138][ T7714] ext4 filesystem being mounted at /76/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 619.701545][ T7420] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.751032][ T7420] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.791517][ T7420] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 619.900683][ T7420] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 619.987549][ T7559] chnl_net:caif_netlink_parms(): no params data found [ 620.077391][ T5849] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 620.201802][ T58] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 620.611750][ T58] usb 2-1: Using ep0 maxpacket: 16 [ 620.653853][ T58] usb 2-1: config 0 has an invalid interface number: 178 but max is 0 [ 620.670417][ T58] usb 2-1: config 0 has no interface number 0 [ 620.785350][ T7420] hsr_slave_0: entered promiscuous mode [ 620.821667][ T58] usb 2-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 620.830734][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 620.851592][ T58] usb 2-1: Product: syz [ 620.855942][ T58] usb 2-1: Manufacturer: syz [ 620.860528][ T58] usb 2-1: SerialNumber: syz [ 620.886700][ T7420] hsr_slave_1: entered promiscuous mode [ 620.912699][ T58] usb 2-1: config 0 descriptor?? [ 620.921720][ T7420] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.929314][ T7420] Cannot create hsr debugfs directory [ 620.943748][ T7735] loop3: detected capacity change from 0 to 128 [ 621.169866][ T6295] usb 2-1: USB disconnect, device number 6 [ 621.530045][ T7744] fuse: Bad value for 'group_id' [ 621.535302][ T7744] fuse: Bad value for 'group_id' [ 622.108744][ T7735] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 622.174410][ T7735] ext4 filesystem being mounted at /77/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 622.390607][ T7559] bridge0: port 1(bridge_slave_0) entered blocking state [ 622.420501][ T7559] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.451789][ T7559] bridge_slave_0: entered allmulticast mode [ 622.468751][ T7559] bridge_slave_0: entered promiscuous mode [ 623.450608][ T7752] fscrypt (loop3, inode 12): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 623.602821][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.373'. [ 623.900688][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.907133][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.042166][ T5849] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 624.341071][ T7559] bridge0: port 2(bridge_slave_1) entered blocking state [ 624.349276][ T7559] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.379005][ T7559] bridge_slave_1: entered allmulticast mode [ 624.422764][ T7559] bridge_slave_1: entered promiscuous mode [ 625.012999][ T7760] loop1: detected capacity change from 0 to 32768 [ 625.062245][ T7760] XFS: ikeep mount option is deprecated. [ 625.273405][ T7559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 625.352483][ T7770] vlan2: entered allmulticast mode [ 625.366629][ T7760] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 625.443388][ T7760] XFS (loop1): Ending clean mount [ 625.450528][ T7760] XFS (loop1): Quotacheck needed: Please wait. [ 625.515425][ T7559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.557005][ T7760] XFS (loop1): Quotacheck: Done. [ 625.581543][ T5956] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 625.678368][ T29] audit: type=1804 audit(1734699107.078:2): pid=7759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.373" name="/newroot/88/file0/bus" dev="loop1" ino=6154 res=1 errno=0 [ 625.771251][ T29] audit: type=1800 audit(1734699107.148:3): pid=7760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.373" name="file2" dev="loop1" ino=6151 res=0 errno=0 [ 625.813188][ T5956] usb 4-1: Using ep0 maxpacket: 8 [ 625.898600][ T5956] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 625.936186][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 625.974831][ T5956] usb 4-1: Product: syz [ 625.989603][ T5956] usb 4-1: Manufacturer: syz [ 626.005928][ T5956] usb 4-1: SerialNumber: syz [ 626.047530][ T5956] usb 4-1: config 0 descriptor?? [ 626.092704][ T7559] team0: Port device team_slave_0 added [ 626.138882][ T7559] team0: Port device team_slave_1 added [ 626.434370][ T7800] fuse: Bad value for 'fd' [ 626.472012][ T5852] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 626.747149][ T7805] hub 9-0:1.0: USB hub found [ 626.762405][ T7805] hub 9-0:1.0: 1 port detected [ 626.855151][ T7805] ptrace attach of "./syz-executor exec"[5858] was attempted by "./syz-executor exec"[7805] [ 627.321162][ T5956] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -110 [ 627.328712][ T5956] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 627.561028][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.587969][ T7777] netlink: 'syz.3.376': attribute type 10 has an invalid length. [ 627.611881][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.671912][ T7559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.514046][ T7809] syz.0.380 (7809) used greatest stack depth: 18768 bytes left [ 630.149409][ T7777] syz_tun: entered promiscuous mode [ 631.156217][ T7777] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 631.222328][ T7559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 631.231247][ T7559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 631.331525][ T5917] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 631.347999][ T7559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 631.395054][ T6295] usb 4-1: USB disconnect, device number 7 [ 631.687086][ T5917] usb 2-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice= e.22 [ 631.721505][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.738538][ T7297] bridge_slave_1: left allmulticast mode [ 631.741531][ T5917] usb 2-1: Product: syz [ 631.757839][ T5917] usb 2-1: Manufacturer: syz [ 631.763134][ T7297] bridge_slave_1: left promiscuous mode [ 631.791828][ T7297] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.821531][ T5917] usb 2-1: SerialNumber: syz [ 632.002306][ T5917] usb 2-1: config 0 descriptor?? [ 632.522012][ T7297] bridge_slave_0: left allmulticast mode [ 632.527758][ T7297] bridge_slave_0: left promiscuous mode [ 632.561720][ T7297] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.613706][ T5917] usb 2-1: selecting invalid altsetting 3 [ 632.619610][ T5917] comedi comedi0: could not set alternate setting 3 in high speed [ 632.627569][ T5917] usbdux 2-1:0.0: driver 'usbdux' failed to auto-configure device. [ 632.692827][ T5917] usbdux 2-1:0.0: probe with driver usbdux failed with error -22 [ 632.974701][ T6295] usb 2-1: USB disconnect, device number 7 [ 633.859471][ T7857] loop1: detected capacity change from 0 to 128 [ 633.883720][ T7857] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 633.919509][ T7857] ext4 filesystem being mounted at /91/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 634.363119][ T7848] loop3: detected capacity change from 0 to 40427 [ 634.870632][ T7861] fscrypt (loop1, inode 12): Missing crypto API support for AES-256-CBC-CTS (API name: "cts(cbc(aes))") [ 635.199990][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 635.201626][ T7848] F2FS-fs (loop3): build fault injection attr: rate: 0, type: 0x7 [ 635.329309][ T7848] F2FS-fs (loop3): invalid crc value [ 635.416910][ T7848] F2FS-fs (loop3): Found nat_bits in checkpoint [ 635.498334][ T7297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 635.604088][ T7297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 635.642852][ T7297] bond0 (unregistering): Released all slaves [ 635.704100][ T7559] hsr_slave_0: entered promiscuous mode [ 635.740363][ T7559] hsr_slave_1: entered promiscuous mode [ 635.760932][ T7559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 635.780890][ T7559] Cannot create hsr debugfs directory [ 635.964713][ T7848] F2FS-fs (loop3): Start checkpoint disabled! [ 636.289822][ T7844] tipc: Enabling of bearer rejected, failed to enable media [ 636.292354][ T58] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 636.440422][ T7297] hsr_slave_0: left promiscuous mode [ 636.501476][ T58] usb 2-1: Using ep0 maxpacket: 8 [ 637.721528][ T5916] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 637.777920][ T58] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 638.355366][ T58] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 638.381518][ T7297] hsr_slave_1: left promiscuous mode [ 638.437099][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 638.453005][ T7297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 638.471963][ T5916] usb 5-1: Using ep0 maxpacket: 16 [ 638.498098][ T5916] usb 5-1: config 0 has an invalid interface number: 178 but max is 0 [ 638.532046][ T5916] usb 5-1: config 0 has no interface number 0 [ 638.573566][ T5916] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=79.b0 [ 638.593314][ T5916] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.653120][ T5916] usb 5-1: Product: syz [ 638.657382][ T5916] usb 5-1: Manufacturer: syz [ 638.698213][ T5916] usb 5-1: SerialNumber: syz [ 638.707315][ T58] usb 2-1: New USB device found, idVendor=2040, idProduct=2950, bcdDevice=85.f1 [ 638.719355][ T58] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 638.735710][ T5917] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 638.750092][ T5916] usb 5-1: config 0 descriptor?? [ 638.772736][ T58] usb 2-1: config 0 descriptor?? [ 638.790633][ T58] usb 2-1: can't set config #0, error -71 [ 638.814147][ T58] usb 2-1: USB disconnect, device number 8 [ 638.939461][ T5917] usb 1-1: Using ep0 maxpacket: 8 [ 638.953150][ T5917] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 639.170951][ T5917] usb 1-1: config 179 has no interface number 0 [ 639.178035][ T58] usb 5-1: USB disconnect, device number 9 [ 639.184503][ T5917] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 639.197209][ T5917] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 639.219344][ T5917] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 639.878452][ T7883] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 639.981433][ T5917] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 640.000720][ T5917] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 640.021801][ T5917] usb 1-1: config 179 interface 65 has no altsetting 0 [ 640.028802][ T5917] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 640.038662][ T5917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 640.221334][ T5917] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input8 [ 640.324879][ T5870] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 640.451646][ T5183] input input8: unable to receive magic message: -110 [ 640.453413][ T5870] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 640.474168][ T5870] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 640.484033][ T5870] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 640.514027][ T5870] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 640.522105][ T5870] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 640.655995][ T5183] input input8: unable to receive magic message: -32 [ 640.732033][ T6295] usb 1-1: USB disconnect, device number 6 [ 640.732102][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 640.746686][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 640.801143][ T6295] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 641.602172][ T7297] team0 (unregistering): Port device team_slave_1 removed [ 641.868458][ T7297] team0 (unregistering): Port device team_slave_0 removed [ 643.083273][ T5857] Bluetooth: hci5: command tx timeout [ 644.137738][ T29] audit: type=1400 audit(1734699125.508:4): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F2606 pid=7904 comm="syz.1.401" [ 645.283595][ T5857] Bluetooth: hci5: command tx timeout [ 646.262329][ T58] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 646.442303][ T58] usb 5-1: Using ep0 maxpacket: 8 [ 646.473711][ T58] usb 5-1: config 168 has an invalid interface number: 255 but max is 0 [ 646.499867][ T58] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 646.579254][ T58] usb 5-1: config 168 has no interface number 0 [ 646.610126][ T58] usb 5-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 646.706172][ T58] usb 5-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 646.787290][ T58] usb 5-1: config 168 interface 255 has no altsetting 0 [ 646.814290][ T58] usb 5-1: config 168 has an invalid interface number: 255 but max is 0 [ 646.831445][ T58] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 646.891883][ T58] usb 5-1: config 168 has no interface number 0 [ 646.925713][ T58] usb 5-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 646.964439][ T58] usb 5-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 646.979064][ T58] usb 5-1: config 168 interface 255 has no altsetting 0 [ 646.988173][ T58] usb 5-1: config 168 has an invalid interface number: 255 but max is 0 [ 647.001221][ T58] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 647.031614][ T58] usb 5-1: config 168 has no interface number 0 [ 647.038616][ T58] usb 5-1: too many endpoints for config 168 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 647.103886][ T58] usb 5-1: config 168 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 647.168936][ T58] usb 5-1: config 168 interface 255 has no altsetting 0 [ 647.983190][ T5857] Bluetooth: hci5: command tx timeout [ 648.066431][ T58] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 648.079150][ T58] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.121012][ T58] usb 5-1: Product: syz [ 648.146312][ T58] usb 5-1: Manufacturer: syz [ 648.239378][ T58] usb 5-1: SerialNumber: syz [ 648.688682][ T7559] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 648.740278][ T7559] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 648.793547][ T7886] chnl_net:caif_netlink_parms(): no params data found [ 648.844821][ T7957] netlink: 'syz.3.409': attribute type 1 has an invalid length. [ 648.850907][ T7958] kAFS: No cell specified [ 648.862348][ T7957] netlink: 224 bytes leftover after parsing attributes in process `syz.3.409'. [ 648.935933][ T7559] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 648.976711][ T7964] openvswitch: netlink: Key type 29 is not supported [ 649.166825][ T7559] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 649.235582][ T58] adutux 5-1:168.255: interrupt endpoints not found [ 649.277776][ T58] usb 5-1: USB disconnect, device number 10 [ 649.387534][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.395127][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.403868][ T7886] bridge_slave_0: entered allmulticast mode [ 649.427805][ T7969] loop1: detected capacity change from 0 to 4096 [ 649.431107][ T7886] bridge_slave_0: entered promiscuous mode [ 649.564553][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.579345][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.599535][ T7886] bridge_slave_1: entered allmulticast mode [ 649.608439][ T7973] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 649.642578][ T7886] bridge_slave_1: entered promiscuous mode [ 649.677628][ T7969] overlayfs: failed to create directory ./file0/work (errno: 5); mounting read-only [ 649.687868][ T7969] overlayfs: failed to get uuid (/bus, err=-95); falling back to uuid=null. [ 649.807621][ T7886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.916542][ T7886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.966604][ T7976] loop3: detected capacity change from 0 to 736 [ 649.990724][ T5852] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 13 already freed [ 650.029075][ T5852] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 14 already freed [ 650.049404][ T5857] Bluetooth: hci5: command tx timeout [ 650.057532][ T5852] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed [ 650.070970][ T5852] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 16 already freed [ 650.096492][ T7981] FAULT_INJECTION: forcing a failure. [ 650.096492][ T7981] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 650.100925][ T5852] NILFS (loop1): nilfs_palloc_commit_free_entry (ino=6): entry number 17 already freed [ 650.131095][ T7981] CPU: 0 UID: 0 PID: 7981 Comm: syz.4.415 Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 650.141775][ T7981] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 650.151864][ T7981] Call Trace: [ 650.155164][ T7981] [ 650.158110][ T7981] dump_stack_lvl+0x241/0x360 [ 650.162838][ T7981] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.168085][ T7981] ? __pfx__printk+0x10/0x10 [ 650.172731][ T7981] ? snprintf+0xda/0x120 [ 650.177018][ T7981] should_fail_ex+0x3b0/0x4e0 [ 650.179756][ T5852] NILFS (loop1): deleting nonexistent file (ino=11), 0 [ 650.181729][ T7981] _copy_to_user+0x31/0xb0 [ 650.181796][ T7981] simple_read_from_buffer+0xca/0x150 [ 650.181836][ T7981] proc_fail_nth_read+0x1e9/0x250 [ 650.193285][ T5852] ------------[ cut here ]------------ [ 650.193348][ T7981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.198731][ T5852] WARNING: CPU: 1 PID: 5852 at fs/inode.c:407 drop_nlink+0xc4/0x110 [ 650.203699][ T7981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.203733][ T7981] ? rw_verify_area+0x55e/0x6f0 [ 650.203776][ T7981] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 650.209228][ T5852] Modules linked in: [ 650.214758][ T7981] vfs_read+0x1fe/0xb70 [ 650.214796][ T7981] ? __pfx___mutex_lock+0x10/0x10 [ 650.222981][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 650.228362][ T7981] ? __pfx_vfs_read+0x10/0x10 [ 650.233246][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 650.238715][ T7981] ? __fget_files+0x2a/0x410 [ 650.242707][ T5852] RIP: 0010:drop_nlink+0xc4/0x110 [ 650.246799][ T7981] ? __fget_files+0x395/0x410 [ 650.252359][ T5852] Code: bb 70 07 00 00 be 08 00 00 00 e8 c7 37 e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d e9 6d a2 d1 09 e8 4d d5 80 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff [ 650.263222][ T7981] ? __fget_files+0x2a/0x410 [ 650.263277][ T7981] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.263313][ T7981] ksys_read+0x18f/0x2b0 [ 650.267957][ T5852] RSP: 0018:ffffc90003f1fc50 EFLAGS: 00010293 [ 650.278002][ T7981] ? __pfx_ksys_read+0x10/0x10 [ 650.278038][ T7981] ? do_syscall_64+0x100/0x230 [ 650.278085][ T7981] ? do_syscall_64+0xb6/0x230 [ 650.278127][ T7981] do_syscall_64+0xf3/0x230 [ 650.278171][ T7981] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.282803][ T5852] [ 650.287736][ T7981] RIP: 0033:0x7faee1d8473c [ 650.293030][ T5852] RAX: ffffffff821e9ea3 RBX: 1ffff1100ae1a694 RCX: ffff88802b53da00 [ 650.311986][ T7981] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 650.312013][ T7981] RSP: 002b:00007faee2b83030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 650.312044][ T7981] RAX: ffffffffffffffda RBX: 00007faee1f76080 RCX: 00007faee1d8473c [ 650.312065][ T7981] RDX: 000000000000000f RSI: 00007faee2b830a0 RDI: 0000000000000004 [ 650.312083][ T7981] RBP: 00007faee2b83090 R08: 0000000000000000 R09: 0000000000000000 [ 650.312101][ T7981] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.312119][ T7981] R13: 0000000000000000 R14: 00007faee1f76080 R15: 00007ffc3678f548 [ 650.312157][ T7981] [ 650.338103][ T7886] team0: Port device team_slave_0 added [ 650.338427][ T5852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.338450][ T5852] RBP: 0000000000000000 R08: ffffffff821e9e23 R09: 1ffff1100a2534ee [ 650.366757][ T7886] team0: Port device team_slave_1 added [ 650.373334][ T5852] R10: dffffc0000000000 R11: ffffed100a2534ef R12: ffff8880570d34a0 [ 650.373363][ T5852] R13: 1ffff1100ae1a5c4 R14: ffff8880570d3458 R15: dffffc0000000000 [ 650.373390][ T5852] FS: 0000555593287500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 650.373417][ T5852] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 650.373440][ T5852] CR2: 00007ffd956a7ff8 CR3: 000000006c174000 CR4: 0000000000350ef0 [ 650.373465][ T5852] Call Trace: [ 650.373478][ T5852] [ 650.373492][ T5852] ? __warn+0x165/0x4d0 [ 650.431127][ T7976] rock: directory entry would overflow storage [ 650.435257][ T5852] ? drop_nlink+0xc4/0x110 [ 650.435311][ T5852] ? report_bug+0x2b3/0x500 [ 650.435349][ T5852] ? drop_nlink+0xc4/0x110 [ 650.435392][ T5852] ? handle_bug+0x60/0x90 [ 650.435418][ T5852] ? exc_invalid_op+0x1a/0x50 [ 650.435446][ T5852] ? asm_exc_invalid_op+0x1a/0x20 [ 650.435495][ T5852] ? drop_nlink+0x43/0x110 [ 650.435535][ T5852] ? drop_nlink+0xc3/0x110 [ 650.435573][ T5852] ? drop_nlink+0xc4/0x110 [ 650.435616][ T5852] nilfs_rmdir+0x1b0/0x250 [ 650.504661][ T7976] rock: sig=0x3b10, size=4, remaining=3 [ 650.506764][ T5852] ? __pfx_nilfs_rmdir+0x10/0x10 [ 650.588120][ T5852] ? down_write+0x18c/0x220 [ 650.592747][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.599001][ T5852] ? do_raw_spin_unlock+0x13c/0x8b0 [ 650.604920][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.610615][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.616346][ T5852] ? security_inode_rmdir+0xd9/0x340 [ 650.621813][ T5852] vfs_rmdir+0x3a5/0x510 [ 650.626094][ T5852] do_rmdir+0x3b5/0x580 [ 650.630261][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.636032][ T5852] ? __pfx_do_rmdir+0x10/0x10 [ 650.640749][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.646463][ T5852] ? getname_flags+0x1e3/0x540 [ 650.651267][ T5852] __x64_sys_unlinkat+0xde/0xf0 [ 650.656193][ T5852] do_syscall_64+0xf3/0x230 [ 650.661084][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.666842][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 650.672833][ T5852] RIP: 0033:0x7f73a8f85307 [ 650.677276][ T5852] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.697078][ T5852] RSP: 002b:00007ffe1032a2d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 650.706213][ T5852] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f73a8f85307 [ 650.714895][ T5852] RDX: 0000000000000200 RSI: 00007ffe1032b480 RDI: 00000000ffffff9c [ 650.722941][ T5852] RBP: 00007f73a9001894 R08: 0000000000000000 R09: 0000000000000000 [ 650.730935][ T5852] R10: 0000000000001000 R11: 0000000000000207 R12: 00007ffe1032b480 [ 650.739097][ T5852] R13: 00007f73a9001894 R14: 00007ffe1032d630 R15: 0000000000000066 [ 650.747142][ T5852] [ 650.750181][ T5852] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 650.757481][ T5852] CPU: 1 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.13.0-rc3-syzkaller-00136-g8faabc041a00 #0 [ 650.768454][ T5852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 650.778624][ T5852] Call Trace: [ 650.781926][ T5852] [ 650.784866][ T5852] dump_stack_lvl+0x241/0x360 [ 650.789683][ T5852] ? __pfx_dump_stack_lvl+0x10/0x10 [ 650.794908][ T5852] ? __pfx__printk+0x10/0x10 [ 650.799534][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.805191][ T5852] ? vscnprintf+0x5d/0x90 [ 650.809559][ T5852] panic+0x349/0x880 [ 650.813480][ T5852] ? __warn+0x174/0x4d0 [ 650.817659][ T5852] ? __pfx_panic+0x10/0x10 [ 650.822117][ T5852] __warn+0x344/0x4d0 [ 650.826118][ T5852] ? drop_nlink+0xc4/0x110 [ 650.830555][ T5852] report_bug+0x2b3/0x500 [ 650.834913][ T5852] ? drop_nlink+0xc4/0x110 [ 650.839352][ T5852] handle_bug+0x60/0x90 [ 650.843519][ T5852] exc_invalid_op+0x1a/0x50 [ 650.848210][ T5852] asm_exc_invalid_op+0x1a/0x20 [ 650.853083][ T5852] RIP: 0010:drop_nlink+0xc4/0x110 [ 650.858123][ T5852] Code: bb 70 07 00 00 be 08 00 00 00 e8 c7 37 e7 ff f0 48 ff 83 70 07 00 00 5b 41 5c 41 5e 41 5f 5d e9 6d a2 d1 09 e8 4d d5 80 ff 90 <0f> 0b 90 eb 83 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 5c ff ff ff [ 650.877750][ T5852] RSP: 0018:ffffc90003f1fc50 EFLAGS: 00010293 [ 650.883852][ T5852] RAX: ffffffff821e9ea3 RBX: 1ffff1100ae1a694 RCX: ffff88802b53da00 [ 650.891837][ T5852] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 650.899823][ T5852] RBP: 0000000000000000 R08: ffffffff821e9e23 R09: 1ffff1100a2534ee [ 650.907823][ T5852] R10: dffffc0000000000 R11: ffffed100a2534ef R12: ffff8880570d34a0 [ 650.915916][ T5852] R13: 1ffff1100ae1a5c4 R14: ffff8880570d3458 R15: dffffc0000000000 [ 650.923920][ T5852] ? drop_nlink+0x43/0x110 [ 650.928363][ T5852] ? drop_nlink+0xc3/0x110 [ 650.932812][ T5852] nilfs_rmdir+0x1b0/0x250 [ 650.937250][ T5852] ? __pfx_nilfs_rmdir+0x10/0x10 [ 650.942203][ T5852] ? down_write+0x18c/0x220 [ 650.946718][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.952364][ T5852] ? do_raw_spin_unlock+0x13c/0x8b0 [ 650.957570][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.963210][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.968868][ T5852] ? security_inode_rmdir+0xd9/0x340 [ 650.974526][ T5852] vfs_rmdir+0x3a5/0x510 [ 650.978787][ T5852] do_rmdir+0x3b5/0x580 [ 650.982956][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.988613][ T5852] ? __pfx_do_rmdir+0x10/0x10 [ 650.993310][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 650.998950][ T5852] ? getname_flags+0x1e3/0x540 [ 651.003747][ T5852] __x64_sys_unlinkat+0xde/0xf0 [ 651.008616][ T5852] do_syscall_64+0xf3/0x230 [ 651.013234][ T5852] ? srso_alias_return_thunk+0x5/0xfbef5 [ 651.018880][ T5852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.024795][ T5852] RIP: 0033:0x7f73a8f85307 [ 651.029217][ T5852] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.048929][ T5852] RSP: 002b:00007ffe1032a2d8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 651.057373][ T5852] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f73a8f85307 [ 651.065360][ T5852] RDX: 0000000000000200 RSI: 00007ffe1032b480 RDI: 00000000ffffff9c [ 651.073345][ T5852] RBP: 00007f73a9001894 R08: 0000000000000000 R09: 0000000000000000 [ 651.081589][ T5852] R10: 0000000000001000 R11: 0000000000000207 R12: 00007ffe1032b480 [ 651.089569][ T5852] R13: 00007f73a9001894 R14: 00007ffe1032d630 R15: 0000000000000066 [ 651.097574][ T5852] [ 651.100798][ T5852] Kernel Offset: disabled [ 651.105186][ T5852] Rebooting in 86400 seconds..